From bilal.ahmed at kfueit.edu.pk Sat Mar 2 07:29:22 2019 From: bilal.ahmed at kfueit.edu.pk (bilal.ahmed at kfueit.edu.pk) Date: Sat, 2 Mar 2019 12:29:22 +0500 Subject: False Positive due to Dear Something Rule (Help to Disable this Rule) Message-ID: <001901d4d0c9$a9f533d0$fddf9b70$@kfueit.edu.pk> Dear Experts, I am new to Mailscanner+spamassasian , Im suffering false positive because many valid hits spam due to "Dear Something" Rule. Hint please to disable this rule. Bilal Ahmad -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at msapiro.net Sat Mar 2 17:50:22 2019 From: mark at msapiro.net (Mark Sapiro) Date: Sat, 2 Mar 2019 09:50:22 -0800 Subject: False Positive due to Dear Something Rule (Help to Disable this Rule) In-Reply-To: <001901d4d0c9$a9f533d0$fddf9b70$@kfueit.edu.pk> References: <001901d4d0c9$a9f533d0$fddf9b70$@kfueit.edu.pk> Message-ID: On 3/1/19 11:29 PM, bilal.ahmed at kfueit.edu.pk wrote: > > I am new to Mailscanner+spamassasian? , Im suffering false positive > because many valid hits spam due to ?Dear Something? Rule. Hint please > to disable this rule. DEAR_SOMETHING is a standard SpamAssassin rule. You need to add score DEAR_SOMETHING 0.0 to either /etc/MailScanner/spamassassin.conf or /etc/spamassassin/local.cf. See . -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From bilal.ahmed at kfueit.edu.pk Sat Mar 2 18:41:39 2019 From: bilal.ahmed at kfueit.edu.pk (bilal.ahmed at kfueit.edu.pk) Date: Sat, 2 Mar 2019 23:41:39 +0500 Subject: False Positive due to Dear Something Rule (Help to Disable this Rule) In-Reply-To: References: <001901d4d0c9$a9f533d0$fddf9b70$@kfueit.edu.pk> Message-ID: <000c01d4d127$92bebb10$b83c3130$@kfueit.edu.pk> Bundle of Thanks. Bilal Ahmad -----Original Message----- From: MailScanner On Behalf Of Mark Sapiro Sent: Saturday, 2 March 2019 10:50 PM To: mailscanner at lists.mailscanner.info Subject: Re: False Positive due to Dear Something Rule (Help to Disable this Rule) On 3/1/19 11:29 PM, bilal.ahmed at kfueit.edu.pk wrote: > > I am new to Mailscanner+spamassasian , Im suffering false positive > because many valid hits spam due to ?Dear Something? Rule. Hint please > to disable this rule. DEAR_SOMETHING is a standard SpamAssassin rule. You need to add score DEAR_SOMETHING 0.0 to either /etc/MailScanner/spamassassin.conf or /etc/spamassassin/local.cf. See . -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From koby at mksoft.co.il Tue Mar 5 18:45:24 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Tue, 5 Mar 2019 20:45:24 +0200 Subject: MaiScanner No loaded Message-ID: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> An HTML attachment was scrubbed... URL: From Antony.Stone at mailscanner.open.source.it Tue Mar 5 18:50:19 2019 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Tue, 5 Mar 2019 19:50:19 +0100 Subject: MaiScanner No loaded In-Reply-To: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> References: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> Message-ID: <201903051950.19290.Antony.Stone@mailscanner.open.source.it> On Tuesday 05 March 2019 at 19:45:24, Koby Peleg Hen wrote: > Hello All , > I am trying to install MailScanner 5.1.3-2 On debian (ver 9.8) How? What instructions are you following? > but I get this error : > > Mar 5 17:23:38 lab MailScanner: Cannot write pid file > /var/run/MailScanner.pid/, Is a directory That seems pretty clear. MailScanner wants to create a PID *file* in /var/run and it finds that there is already a *directory* of the same name present. > Any Help Please. Try deleting the directory. Oh, and please post plain text and not HTML to this list. Regards, Antony. -- "How I managed so long without this book baffles the mind." - Richard Stoakley, Group Program Manager, Microsoft Corporation, referring to "The Art of Project Management", O'Reilly press Please reply to the list; please *don't* CC me. From koby at mksoft.co.il Tue Mar 5 19:36:03 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Tue, 5 Mar 2019 21:36:03 +0200 Subject: MaiScanner No loaded In-Reply-To: <201903051950.19290.Antony.Stone@mailscanner.open.source.it> References: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> <201903051950.19290.Antony.Stone@mailscanner.open.source.it> Message-ID: <95e7e6c7-8272-75ea-ff16-f4af5ea9df45@mksoft.co.il> An HTML attachment was scrubbed... URL: From koby at mksoft.co.il Tue Mar 5 19:40:54 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Tue, 5 Mar 2019 21:40:54 +0200 Subject: MaiScanner No loaded In-Reply-To: <95e7e6c7-8272-75ea-ff16-f4af5ea9df45@mksoft.co.il> References: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> <201903051950.19290.Antony.Stone@mailscanner.open.source.it> <95e7e6c7-8272-75ea-ff16-f4af5ea9df45@mksoft.co.il> Message-ID: <4cfca10a-6036-cc19-ba05-6b501b571d19@mksoft.co.il> This time the mail is LTR. > > Hello Antony , > Here is my "/var/run/... > > " > -rw------- 1 root root 0 Mar 4 14:21 agetty.reload > drwxr-xr-x 2 clamav root 60 Mar 4 14:22 clamav > drwxr-xr-x 2 root root 80 Mar 4 14:21 console-setup > -rw-r--r-- 1 root root 4 Mar 4 14:21 crond.pid > ---------- 1 root root 0 Mar 4 14:21 crond.reboot > drwxr-xr-x 2 root root 60 Mar 4 14:21 dbus > lrwxrwxrwx 1 root root 25 Mar 4 14:21 initctl -> /run/systemd/initctl/fifo > drwxr-xr-x 2 root root 80 Mar 4 14:21 initramfs > drwxrwxrwt 3 root root 60 Mar 4 14:21 lock > drwxr-xr-x 3 root root 60 Mar 4 14:21 log > -rw-r--r-- 1 root root 70 Mar 5 18:48 motd.dynamic > drwxr-xr-x 2 root root 60 Mar 4 14:21 mount > drwxr-xr-x 2 mysql root 60 Mar 4 14:21 mysqld > drwxr-xr-x 2 root root 120 Mar 4 14:21 network > -rw-r--r-- 1 root root 3 Mar 4 14:21 rsyslogd.pid > drwxr-xr-x 2 root root 40 Mar 4 14:21 sendsigs.omit.d > lrwxrwxrwx 1 root root 8 Mar 4 14:21 shm -> /dev/shm > drwxr-xr-x 2 root root 40 Mar 4 14:21 sshd > -rw-r--r-- 1 root root 4 Mar 4 14:21 sshd.pid > drwxr-xr-x 16 root root 400 Mar 5 20:36 systemd > drwxr-xr-x 2 root root 60 Mar 4 14:21 tmpfiles.d > drwxr-xr-x 7 root root 180 Mar 5 18:56 udev > drwxr-xr-x 3 root root 60 Mar 5 18:48 user > -rw-rw-r-- 1 root utmp 1536 Mar 5 18:48 utmp > " > > I am tryint to rin mailscanner with milter config. > > I follow this instruction : > > systemctl restart postfix > systemctl restart mailscanner > systemctl restart msmilter > > postfix is OK > msmilter is OK > mailscanner NOT OK. > > Thank you for any suggestion. > > > > > ???? ?? ??? Antony Stone, ??5.3.2019 ???? 20:50: >> On Tuesday 05 March 2019 at 19:45:24, Koby Peleg Hen wrote: >> >>> Hello All , >>> I am trying to install MailScanner 5.1.3-2 On debian (ver 9.8) >> >> How? >> >> What instructions are you following? >> >>> but I get this error : >>> >>> Mar 5 17:23:38 lab MailScanner: Cannot write pid file >>> /var/run/MailScanner.pid/, Is a directory >> >> That seems pretty clear. MailScanner wants to create a PID *file* in >> /var/run >> and it finds that there is already a *directory* of the same name present. >> >>> Any Help Please. >> >> Try deleting the directory. >> >> Oh, and please post plain text and not HTML to this list. >> >> >> Regards, >> >> >> Antony. >> > > > From mark at msapiro.net Tue Mar 5 19:49:47 2019 From: mark at msapiro.net (Mark Sapiro) Date: Tue, 5 Mar 2019 11:49:47 -0800 Subject: MaiScanner No loaded In-Reply-To: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> References: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> Message-ID: Koby Peleg Hen wrote: > Mar 5 18:19:50 lab MailScanner: Cannot write pid file > /var/run/MailScanner.pid/, Is a directory
It appears that somewhere in your MailScanner configuration you may have set PID file = /var/run/MailScanner.pid/ with a trailing '/'. It should be PID file = /var/run/MailScanner.pid -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan> From koby at mksoft.co.il Wed Mar 6 12:39:57 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Wed, 6 Mar 2019 14:39:57 +0200 Subject: MaiScanner No loaded In-Reply-To: References: <9ee9d85f-beb3-0712-9a7b-58861f9713a2@mksoft.co.il> Message-ID: <1d902147-146f-f9c0-9173-7269f42d2fce@mksoft.co.il> Hello Mark , You ware right abut the trailing '/' It is been fixed but the story remain the same.. My system is debian 9.8 (VM) Here is the error : root at lab:/home/koby# service mailscanner status ? mailscanner.service - LSB: MailScanner daemon Loaded: loaded (/usr/lib/MailScanner/init/ms-init; enabled; vendor preset: enabled) Active: failed (Result: timeout) since Wed 2019-03-06 14:33:15 IST; 32s ago Docs: man:systemd-sysv-generator(8) Process: 3391 ExecStart=/usr/lib/MailScanner/init/ms-init start (code=killed, signal=TERM) Tasks: 0 (limit: 4915) CGroup: /system.slice/mailscanner.service Mar 06 14:32:15 lab systemd[1]: Starting LSB: MailScanner daemon... Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Start operation timed out. Terminating. Mar 06 14:33:15 lab systemd[1]: Failed to start LSB: MailScanner daemon. Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Unit entered failed state. Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Failed with result 'timeout'. Any More suggestion Koby Peleg Hen ???? ?? ??? Mark Sapiro, ??5.3.2019 ???? 21:49: > Koby Peleg Hen wrote: > >> Mar 5 18:19:50 lab MailScanner: Cannot write pid file >> /var/run/MailScanner.pid/, Is a directory
> > It appears that somewhere in your MailScanner configuration you may have set > > PID file = /var/run/MailScanner.pid/ > > with a trailing '/'. It should be > > PID file = /var/run/MailScanner.pid > From belle at bazuin.nl Wed Mar 6 12:48:36 2019 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Wed, 6 Mar 2019 13:48:36 +0100 Subject: MaiScanner No loaded In-Reply-To: <1d902147-146f-f9c0-9173-7269f42d2fce@mksoft.co.il> References: Message-ID: Hai, Try these systemd service files. Please note, i have optimized these to my mailscanner server ( debian 9). dpkg -l | grep mailscanner ii mailscanner 5.1.3-2 all Open Source Email Gateway # /lib/systemd/system/mailscanner.service [Unit] Description=LSB: MailScanner daemon Documentation=man:systemd-sysv-generator(8) SourcePath=/usr/lib/MailScanner/init/ms-init After=network-online.target remote-fs.target rsyslog.service mariadb.service mysql.service postfix.service exim4.service ms-sendmail.service clamav-daemon.service clamd at scan.service Wants=network-online.target mariadb.service [Service] Type=forking Restart=no TimeoutSec=1min IgnoreSIGPIPE=no KillMode=process GuessMainPID=no RemainAfterExit=yes ExecStart=/usr/lib/MailScanner/init/ms-init start ExecStop=/usr/lib/MailScanner/init/ms-init stop EnvironmentFile=-/etc/MailScanner/defaults PIDFile=/var/run/MailScanner.pid [Install] WantedBy=multi-user.target # my override. # /etc/systemd/system/mailscanner.service.d/override.conf [Unit] After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service Wants=network-online.target mariadb.service postfix.service clamav-daemon.service # ( dont know if this is still needed, but should be in apache2.service. ) #PrivateTmp=false Greetz, Louis > -----Oorspronkelijk bericht----- > Van: MailScanner > [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. > info] Namens Koby Peleg Hen > Verzonden: woensdag 6 maart 2019 13:40 > Aan: mailscanner at lists.mailscanner.info > Onderwerp: Re: MaiScanner No loaded > > Hello Mark , > You ware right abut the trailing '/' > It is been fixed but the story remain the same.. > > My system is debian 9.8 (VM) > > Here is the error : > > root at lab:/home/koby# service mailscanner status > ??? mailscanner.service - LSB: MailScanner daemon > Loaded: loaded (/usr/lib/MailScanner/init/ms-init; > enabled; vendor > preset: enabled) > Active: failed (Result: timeout) since Wed 2019-03-06 > 14:33:15 IST; > 32s ago > Docs: man:systemd-sysv-generator(8) > Process: 3391 ExecStart=/usr/lib/MailScanner/init/ms-init start > (code=killed, signal=TERM) > Tasks: 0 (limit: 4915) > CGroup: /system.slice/mailscanner.service > > Mar 06 14:32:15 lab systemd[1]: Starting LSB: MailScanner daemon... > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Start operation > timed out. Terminating. > Mar 06 14:33:15 lab systemd[1]: Failed to start LSB: > MailScanner daemon. > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Unit > entered failed > state. > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Failed > with result > 'timeout'. > > Any More suggestion > > Koby Peleg Hen > > ???????? ???? ?????? Mark Sapiro, ????5.3.2019 ???????? 21:49: > > Koby Peleg Hen wrote: > > > >> Mar 5 18:19:50 lab MailScanner: Cannot write pid file > >> /var/run/MailScanner.pid/, Is a directory
> > > > It appears that somewhere in your MailScanner configuration > you may have set > > > > PID file = /var/run/MailScanner.pid/ > > > > with a trailing '/'. It should be > > > > PID file = /var/run/MailScanner.pid > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > From belle at bazuin.nl Wed Mar 6 12:50:10 2019 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Wed, 6 Mar 2019 13:50:10 +0100 Subject: MaiScanner No loaded In-Reply-To: References: <1d902147-146f-f9c0-9173-7269f42d2fce@mksoft.co.il> Message-ID: Sorry forgot to mention. Once created run : systemctl unmask mailscanner.service systemctl enable mailscanner.service systemctl start mailscanner.service systemctl status mailscanner.service Greetz, Louis > -----Oorspronkelijk bericht----- > Van: MailScanner > [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. > info] Namens L.P.H. van Belle via MailScanner > Verzonden: woensdag 6 maart 2019 13:49 > Aan: MailScanner Discussion > CC: L.P.H. van Belle > Onderwerp: RE: MaiScanner No loaded > > Hai, > > Try these systemd service files. > Please note, i have optimized these to my mailscanner server > ( debian 9). > > dpkg -l | grep mailscanner > ii mailscanner 5.1.3-2 > all Open Source Email Gateway > > > # /lib/systemd/system/mailscanner.service > [Unit] > Description=LSB: MailScanner daemon > Documentation=man:systemd-sysv-generator(8) > SourcePath=/usr/lib/MailScanner/init/ms-init > After=network-online.target remote-fs.target rsyslog.service > mariadb.service mysql.service postfix.service exim4.service > ms-sendmail.service clamav-daemon.service clamd at scan.service > Wants=network-online.target mariadb.service > > [Service] > Type=forking > Restart=no > TimeoutSec=1min > IgnoreSIGPIPE=no > KillMode=process > GuessMainPID=no > RemainAfterExit=yes > ExecStart=/usr/lib/MailScanner/init/ms-init start > ExecStop=/usr/lib/MailScanner/init/ms-init stop > EnvironmentFile=-/etc/MailScanner/defaults > PIDFile=/var/run/MailScanner.pid > > [Install] > WantedBy=multi-user.target > > # my override. > # /etc/systemd/system/mailscanner.service.d/override.conf > [Unit] > After=network-online.target remote-fs.target rsyslog.service > mariadb.service postfix.service clamav-daemon.service > Wants=network-online.target mariadb.service postfix.service > clamav-daemon.service > > # ( dont know if this is still needed, but should be in > apache2.service. ) > #PrivateTmp=false > > > > Greetz, > > Louis > > > > -----Oorspronkelijk bericht----- > > Van: MailScanner > > [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. > > info] Namens Koby Peleg Hen > > Verzonden: woensdag 6 maart 2019 13:40 > > Aan: mailscanner at lists.mailscanner.info > > Onderwerp: Re: MaiScanner No loaded > > > > Hello Mark , > > You ware right abut the trailing '/' > > It is been fixed but the story remain the same.. > > > > My system is debian 9.8 (VM) > > > > Here is the error : > > > > root at lab:/home/koby# service mailscanner status > > ??? mailscanner.service - LSB: MailScanner daemon > > Loaded: loaded (/usr/lib/MailScanner/init/ms-init; > > enabled; vendor > > preset: enabled) > > Active: failed (Result: timeout) since Wed 2019-03-06 > > 14:33:15 IST; > > 32s ago > > Docs: man:systemd-sysv-generator(8) > > Process: 3391 ExecStart=/usr/lib/MailScanner/init/ms-init start > > (code=killed, signal=TERM) > > Tasks: 0 (limit: 4915) > > CGroup: /system.slice/mailscanner.service > > > > Mar 06 14:32:15 lab systemd[1]: Starting LSB: MailScanner daemon... > > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Start > operation > > timed out. Terminating. > > Mar 06 14:33:15 lab systemd[1]: Failed to start LSB: > > MailScanner daemon. > > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Unit > > entered failed > > state. > > Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Failed > > with result > > 'timeout'. > > > > Any More suggestion > > > > Koby Peleg Hen > > > > ???????? ???? ?????? Mark Sapiro, ????5.3.2019 ???????? 21:49: > > > Koby Peleg Hen wrote: > > > > > >> Mar 5 18:19:50 lab MailScanner: Cannot write pid file > > >> /var/run/MailScanner.pid/, Is a directory
> > > > > > It appears that somewhere in your MailScanner configuration > > you may have set > > > > > > PID file = /var/run/MailScanner.pid/ > > > > > > with a trailing '/'. It should be > > > > > > PID file = /var/run/MailScanner.pid > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > From koby at mksoft.co.il Thu Mar 7 09:30:42 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Thu, 7 Mar 2019 11:30:42 +0200 Subject: MaiScanner No loaded In-Reply-To: References: Message-ID: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> Hello friends, Still Mialscanner not loaded... Here is my error .... root at lab:/var/spool/postfix# systemctl status mailscanner.service ? mailscanner.service - LSB: MailScanner daemon Loaded: loaded (/usr/lib/MailScanner/init/ms-init; enabled; vendor preset: enabled) Drop-In: /lib/systemd/system/mailscanner.service.d ??override.conf Active: failed (Result: timeout) since Wed 2019-03-06 15:46:03 IST; 1min 31s ago Docs: man:systemd-sysv-generator(8) Mar 06 15:45:03 lab systemd[1]: Starting LSB: MailScanner daemon... Mar 06 15:46:03 lab systemd[1]: mailscanner.service: Start operation timed out. Terminating. Mar 06 15:46:03 lab systemd[1]: Failed to start LSB: MailScanner daemon. Mar 06 15:46:03 lab systemd[1]: mailscanner.service: Unit entered failed state. Mar 06 15:46:03 lab systemd[1]: mailscanner.service: Failed with result 'timeout'. root at lab:/var/spool/postfix# Here is my "/lib/systemd/system/mailscanner.service" [Unit] Description=LSB: MailScanner daemon Documentation=man:systemd-sysv-generator(8) SourcePath=/usr/lib/MailScanner/init/ms-init After=network-online.target remote-fs.target rsyslog.service mariadb.service mysql.service postfix.service exim4.service ms-sendmail.service clamav-daemon.service clamd at scan.service Wants=network-online.target mariadb.service [Service] Type=forking Restart=no TimeoutSec=1min IgnoreSIGPIPE=no KillMode=process GuessMainPID=no RemainAfterExit=yes ExecStart=/usr/lib/MailScanner/init/ms-init start ExecStop=/usr/lib/MailScanner/init/ms-init stop EnvironmentFile=-/etc/MailScanner/defaults PIDFile=/var/run/MailScanner.pid [Install] WantedBy=multi-user.target Here is my "/lib/systemd/system/mailscanner.service.d/override.conf" [Unit] After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service Wants=network-online.target mariadb.service postfix.service clamav-daemon.service Any more Suggestion Koby Peleg Hen. ???? ?? ??? L.P.H. van Belle via MailScanner, ??6.3.2019 ???? 14:48: > Hai, > > Try these systemd service files. > Please note, i have optimized these to my mailscanner server ( debian 9). > > dpkg -l | grep mailscanner > ii mailscanner 5.1.3-2 all Open Source Email Gateway > > > # /lib/systemd/system/mailscanner.service > [Unit] > Description=LSB: MailScanner daemon > Documentation=man:systemd-sysv-generator(8) > SourcePath=/usr/lib/MailScanner/init/ms-init > After=network-online.target remote-fs.target rsyslog.service mariadb.service mysql.service postfix.service exim4.service ms-sendmail.service clamav-daemon.service clamd at scan.service > Wants=network-online.target mariadb.service > > [Service] > Type=forking > Restart=no > TimeoutSec=1min > IgnoreSIGPIPE=no > KillMode=process > GuessMainPID=no > RemainAfterExit=yes > ExecStart=/usr/lib/MailScanner/init/ms-init start > ExecStop=/usr/lib/MailScanner/init/ms-init stop > EnvironmentFile=-/etc/MailScanner/defaults > PIDFile=/var/run/MailScanner.pid > > [Install] > WantedBy=multi-user.target > > # my override. > # /etc/systemd/system/mailscanner.service.d/override.conf > [Unit] > After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service > Wants=network-online.target mariadb.service postfix.service clamav-daemon.service > > # ( dont know if this is still needed, but should be in apache2.service. ) > #PrivateTmp=false > > > > Greetz, > > Louis > > >> -----Oorspronkelijk bericht----- >> Van: MailScanner >> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. >> info] Namens Koby Peleg Hen >> Verzonden: woensdag 6 maart 2019 13:40 >> Aan: mailscanner at lists.mailscanner.info >> Onderwerp: Re: MaiScanner No loaded >> >> Hello Mark , >> You ware right abut the trailing '/' >> It is been fixed but the story remain the same.. >> >> My system is debian 9.8 (VM) >> >> Here is the error : >> >> root at lab:/home/koby# service mailscanner status >> ??? mailscanner.service - LSB: MailScanner daemon >> Loaded: loaded (/usr/lib/MailScanner/init/ms-init; >> enabled; vendor >> preset: enabled) >> Active: failed (Result: timeout) since Wed 2019-03-06 >> 14:33:15 IST; >> 32s ago >> Docs: man:systemd-sysv-generator(8) >> Process: 3391 ExecStart=/usr/lib/MailScanner/init/ms-init start >> (code=killed, signal=TERM) >> Tasks: 0 (limit: 4915) >> CGroup: /system.slice/mailscanner.service >> >> Mar 06 14:32:15 lab systemd[1]: Starting LSB: MailScanner daemon... >> Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Start operation >> timed out. Terminating. >> Mar 06 14:33:15 lab systemd[1]: Failed to start LSB: >> MailScanner daemon. >> Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Unit >> entered failed >> state. >> Mar 06 14:33:15 lab systemd[1]: mailscanner.service: Failed >> with result >> 'timeout'. >> >> Any More suggestion >> >> Koby Peleg Hen >> >> ???????? ???? ?????? Mark Sapiro, ????5.3.2019 ???????? 21:49: >>> Koby Peleg Hen wrote: >>> >>>> Mar 5 18:19:50 lab MailScanner: Cannot write pid file >>>> /var/run/MailScanner.pid/, Is a directory
>>> >>> It appears that somewhere in your MailScanner configuration >> you may have set >>> >>> PID file = /var/run/MailScanner.pid/ >>> >>> with a trailing '/'. It should be >>> >>> PID file = /var/run/MailScanner.pid >>> >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> > > > From Antony.Stone at mailscanner.open.source.it Thu Mar 7 09:34:30 2019 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Thu, 7 Mar 2019 10:34:30 +0100 Subject: MaiScanner No loaded In-Reply-To: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> References: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> Message-ID: <201903071034.30334.Antony.Stone@mailscanner.open.source.it> On Thursday 07 March 2019 at 10:30:42, Koby Peleg Hen wrote: > Hello friends, > Still Mialscanner not loaded... What instructions did you follow to get MailScanner installed on your system? Regards, Antony. -- "Can you keep a secret?" "Well, I shouldn't really tell you this, but... no." Please reply to the list; please *don't* CC me. From koby at mksoft.co.il Thu Mar 7 09:40:29 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Thu, 7 Mar 2019 11:40:29 +0200 Subject: MaiScanner No loaded In-Reply-To: <201903071034.30334.Antony.Stone@mailscanner.open.source.it> References: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> <201903071034.30334.Antony.Stone@mailscanner.open.source.it> Message-ID: Hello Antony, I followed This one : https://www.mailscanner.info/postfix/ And the doc from github about the milter setting which is this : https://github.com/MailScanner/v5/tree/master/doc ???? ?? ??? Antony Stone, ??7.3.2019 ???? 11:34: > On Thursday 07 March 2019 at 10:30:42, Koby Peleg Hen wrote: > >> Hello friends, >> Still Mialscanner not loaded... > > What instructions did you follow to get MailScanner installed on your system? > > Regards, > > > Antony. > > From koby at mksoft.co.il Thu Mar 7 09:43:14 2019 From: koby at mksoft.co.il (Koby Peleg Hen) Date: Thu, 7 Mar 2019 11:43:14 +0200 Subject: MaiScanner No loaded In-Reply-To: References: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> <201903071034.30334.Antony.Stone@mailscanner.open.source.it> Message-ID: Basically how can i debug this ? There is any log somewhere , I do fill somewhat blind in here. Koby ???? ?? ??? Koby Peleg Hen, ??7.3.2019 ???? 11:40: > Hello Antony, > I followed > > This one : https://www.mailscanner.info/postfix/ > > And the doc from github about the milter setting which is this : > https://github.com/MailScanner/v5/tree/master/doc > > > ???? ?? ??? Antony Stone, ??7.3.2019 ???? 11:34: >> On Thursday 07 March 2019 at 10:30:42, Koby Peleg Hen wrote: >> >>> Hello friends, >>> Still Mialscanner not loaded... >> >> What instructions did you follow to get MailScanner installed on your >> system? >> >> Regards, >> >> >> Antony. >> >> > > From foulplay at foulplay.org Thu Mar 7 12:01:19 2019 From: foulplay at foulplay.org (foulplay at foulplay.org) Date: Thu, 7 Mar 2019 07:01:19 -0500 Subject: MaiScanner No loaded In-Reply-To: References: <3ba3f1f1-7844-792d-f012-0e71ed979704@mksoft.co.il> <201903071034.30334.Antony.Stone@mailscanner.open.source.it> Message-ID: <2AB14F91-A216-4D52-AF94-C9B983414530@foulplay.org> Even though systemctl returns a timeout message, does the mailscanner process exist? ps waux | grep -i mailscanner Do the ownership of folders/files under /var/spool/MailScanner match the mailscanner process owner? Does MailScanner ?lint give any errors? > On Mar 7, 2019, at 4:43 AM, Koby Peleg Hen wrote: > > Basically how can i debug this ? > There is any log somewhere , I do fill somewhat blind in here. > > Koby > > ???? ?? ??? Koby Peleg Hen, ??7.3.2019 ???? 11:40: >> Hello Antony, >> I followed >> This one : https://www.mailscanner.info/postfix/ >> And the doc from github about the milter setting which is this : https://github.com/MailScanner/v5/tree/master/doc >> ???? ?? ??? Antony Stone, ??7.3.2019 ???? 11:34: >>> On Thursday 07 March 2019 at 10:30:42, Koby Peleg Hen wrote: >>> >>>> Hello friends, >>>> Still Mialscanner not loaded... >>> >>> What instructions did you follow to get MailScanner installed on your system? >>> >>> Regards, >>> >>> >>> Antony. >>> >>> > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > From Nicola.Piazzi at gruppocomet.it Thu Mar 14 08:22:05 2019 From: Nicola.Piazzi at gruppocomet.it (Nicola Piazzi) Date: Thu, 14 Mar 2019 08:22:05 +0000 Subject: MailScanner Antivirus Message-ID: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> Hi, I know that there are 2 ways so scan messages for viruses from mailscanner Using antivirus daemon and invoking antivirus program Invoking an antivirus program takes from 5 to 15 seconds of cpu If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources So at now only clamwin can be used , sophos have avi's but no more work or instable This is correct also 4 you ? Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna - Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 6129 bytes Desc: image001.png URL: From djones at ena.com Thu Mar 14 11:23:11 2019 From: djones at ena.com (David Jones) Date: Thu, 14 Mar 2019 11:23:11 +0000 Subject: MailScanner Antivirus In-Reply-To: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> References: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> Message-ID: When you run "MailScanner --lint" what do you see? Mine shows this: Found these virus scanners installed: clamd, esets Use clamd for speed. Nod32 Esets is also very fast and inexpensive. I also recommend adding the clamav unofficial signatures to block more zero-day spam. Here is my config along with the script that works from 8+ years ago that is not easy to find anymore: clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ /etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ Hope this helps, Dave ________________________________ From: MailScanner on behalf of Nicola Piazzi Sent: Thursday, March 14, 2019 3:22 AM To: 'mailscanner at lists.mailscanner.info' Subject: MailScanner Antivirus Hi, I know that there are 2 ways so scan messages for viruses from mailscanner Using antivirus daemon and invoking antivirus program Invoking an antivirus program takes from 5 to 15 seconds of cpu If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources So at now only clamwin can be used , sophos have avi?s but no more work or instable This is correct also 4 you ? Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna ? Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 6129 bytes Desc: image001.png URL: From iversons at rushville.k12.in.us Thu Mar 14 12:22:58 2019 From: iversons at rushville.k12.in.us (Shawn Iverson) Date: Thu, 14 Mar 2019 08:22:58 -0400 Subject: MailScanner Antivirus In-Reply-To: References: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> Message-ID: Thanks Dave! Also, if anyone has or can find virus scanners that support scanning using a daemon, please give me a heads up and I will try to integrate it. On Thu, Mar 14, 2019 at 7:23 AM David Jones via MailScanner < mailscanner at lists.mailscanner.info> wrote: > When you run "MailScanner --lint" what do you see? > > Mine shows this: > > Found these virus scanners installed: clamd, esets > > Use clamd for speed. Nod32 Esets is also very fast and inexpensive. > > I also recommend adding the clamav unofficial signatures to block more > zero-day spam. Here is my config along with the script that works from 8+ > years ago that is not easy to find anymore: > > clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ > /etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ > > Hope this helps, > Dave > > ------------------------------ > *From:* MailScanner ena.com at lists.mailscanner.info> on behalf of Nicola Piazzi < > Nicola.Piazzi at gruppocomet.it> > *Sent:* Thursday, March 14, 2019 3:22 AM > *To:* 'mailscanner at lists.mailscanner.info' > *Subject:* MailScanner Antivirus > > > Hi, > > I know that there are 2 ways so scan messages for viruses from mailscanner > > Using antivirus daemon and invoking antivirus program > > Invoking an antivirus program takes from 5 to 15 seconds of cpu > > If we consider that all other spamassassin functions takes 2 or 3 seconds > each message adding an antivirus program can make a system hungry of > resources > > So at now only clamwin can be used , sophos have avi?s but no more work or > instable > > > > This is correct also 4 you ? > > > > Nicola Piazzi > CED - Sistemi > COMET s.p.a. > Via Michelino, 105 - 40127 Bologna ? Italia > Tel. +39 051.6079.293 > Cell. +39 328.21.73.470 > Web: www.comet.it > [image: Nuova immagine bitmap] > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -- Shawn Iverson, CETL Director of Technology Rush County Schools 765-932-3901 option 7 iversons at rushville.k12.in.us [image: Cybersecurity] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 6129 bytes Desc: not available URL: From Nicola.Piazzi at gruppocomet.it Thu Mar 14 13:23:57 2019 From: Nicola.Piazzi at gruppocomet.it (Nicola Piazzi) Date: Thu, 14 Mar 2019 13:23:57 +0000 Subject: R: MailScanner Antivirus In-Reply-To: References: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> Message-ID: <418d93efa5da4b65a90988c5873cdccd@gruppocomet.it> Nod32 takes 4 secs of cpu, more than all spamassassin processes Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna ? Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] Da: Shawn Iverson Inviato: gioved? 14 marzo 2019 13:23 A: MailScanner Discussion Cc: Nicola Piazzi ; David Jones Oggetto: Re: MailScanner Antivirus Thanks Dave! Also, if anyone has or can find virus scanners that support scanning using a daemon, please give me a heads up and I will try to integrate it. On Thu, Mar 14, 2019 at 7:23 AM David Jones via MailScanner > wrote: When you run "MailScanner --lint" what do you see? Mine shows this: Found these virus scanners installed: clamd, esets Use clamd for speed. Nod32 Esets is also very fast and inexpensive. I also recommend adding the clamav unofficial signatures to block more zero-day spam. Here is my config along with the script that works from 8+ years ago that is not easy to find anymore: clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ /etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ Hope this helps, Dave ________________________________ From: MailScanner > on behalf of Nicola Piazzi > Sent: Thursday, March 14, 2019 3:22 AM To: 'mailscanner at lists.mailscanner.info' Subject: MailScanner Antivirus Hi, I know that there are 2 ways so scan messages for viruses from mailscanner Using antivirus daemon and invoking antivirus program Invoking an antivirus program takes from 5 to 15 seconds of cpu If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources So at now only clamwin can be used , sophos have avi?s but no more work or instable This is correct also 4 you ? Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna ? Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -- Shawn Iverson, CETL Director of Technology Rush County Schools 765-932-3901 option 7 iversons at rushville.k12.in.us [https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ] [https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ][Cybersecurity] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 6129 bytes Desc: image001.png URL: From djones at ena.com Thu Mar 14 14:18:17 2019 From: djones at ena.com (David Jones) Date: Thu, 14 Mar 2019 14:18:17 +0000 Subject: MailScanner Antivirus In-Reply-To: <418d93efa5da4b65a90988c5873cdccd@gruppocomet.it> References: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> , <418d93efa5da4b65a90988c5873cdccd@gruppocomet.it> Message-ID: Are you running Nod32 in daemon mode? My batches average 4 to 6 seconds total and SA is most of that time. ________________________________ From: Nicola Piazzi Sent: Thursday, March 14, 2019 8:23 AM To: 'Shawn Iverson'; MailScanner Discussion Cc: David Jones Subject: R: MailScanner Antivirus Nod32 takes 4 secs of cpu, more than all spamassassin processes Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna ? Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] Da: Shawn Iverson Inviato: gioved? 14 marzo 2019 13:23 A: MailScanner Discussion Cc: Nicola Piazzi ; David Jones Oggetto: Re: MailScanner Antivirus Thanks Dave! Also, if anyone has or can find virus scanners that support scanning using a daemon, please give me a heads up and I will try to integrate it. On Thu, Mar 14, 2019 at 7:23 AM David Jones via MailScanner > wrote: When you run "MailScanner --lint" what do you see? Mine shows this: Found these virus scanners installed: clamd, esets Use clamd for speed. Nod32 Esets is also very fast and inexpensive. I also recommend adding the clamav unofficial signatures to block more zero-day spam. Here is my config along with the script that works from 8+ years ago that is not easy to find anymore: clamav-unofficial-sigs.sh = https://pastebin.com/cSLYX8EJ /etc/clamav-unofficial-sigs.conf = https://pastebin.com/LfGauaqZ Hope this helps, Dave ________________________________ From: MailScanner > on behalf of Nicola Piazzi > Sent: Thursday, March 14, 2019 3:22 AM To: 'mailscanner at lists.mailscanner.info' Subject: MailScanner Antivirus Hi, I know that there are 2 ways so scan messages for viruses from mailscanner Using antivirus daemon and invoking antivirus program Invoking an antivirus program takes from 5 to 15 seconds of cpu If we consider that all other spamassassin functions takes 2 or 3 seconds each message adding an antivirus program can make a system hungry of resources So at now only clamwin can be used , sophos have avi?s but no more work or instable This is correct also 4 you ? Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna ? Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.comet.it [Nuova immagine bitmap] -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -- Shawn Iverson, CETL Director of Technology Rush County Schools 765-932-3901 option 7 iversons at rushville.k12.in.us [https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ] [https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ][Cybersecurity] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 6129 bytes Desc: image001.png URL: From zephyr at flytonet.com Fri Mar 15 02:40:24 2019 From: zephyr at flytonet.com (=?big5?B?t0ypTaq6rbc=?=) Date: Fri, 15 Mar 2019 10:40:24 +0800 Subject: How to increase MailScanner spam score when block filename Message-ID: <000401d4dad8$768fbe70$63af3b50$@flytonet.com> I?m using CentOS v7(1804),MailScanner 5.0.7 and spamassassin 3.4. I set a rule to block certain kind of filename,and add ?***File Quarantine***? to SUBJECT. I also set a rule for spamassassin to store mail and email to spam account. When I receive a blocked filename of mail, the spamassassin rules is not applied. I do a test to send a mail just with subject ?***File Quarantine***?,the spamassassin rule works fine. Why?? I guess it may be caused by the sequence of mailscanner rewriting the mail subject and spamassassin checking spam. Please help me solve this problem.Thanks! My settings are as follows 1./etc/MailScanner/MailScanner.conf Filename Subject Text = {***File Quarantine***} High SpamAssassin Score = 8 High Scoring Spam Actions = store forward spam at domain.com 2./etc/mail/spamassassin/local.cf header TEST Subject =~ /File Quarantine/ describe TEST File Quarantine score TEST 8 ZEPHYR -------------- next part -------------- An HTML attachment was scrubbed... URL: From djones at ena.com Fri Mar 15 13:08:32 2019 From: djones at ena.com (David Jones) Date: Fri, 15 Mar 2019 13:08:32 +0000 Subject: How to increase MailScanner spam score when block filename In-Reply-To: <000401d4dad8$768fbe70$63af3b50$@flytonet.com> References: <000401d4dad8$768fbe70$63af3b50$@flytonet.com> Message-ID: Try "SpamAssassin Rule Actions" which would have to process after SA, obviously. SpamAssassin Rule Actions = %rules-dir%/spamassassin.rule.actions.rules TEST=>store forward spam at domain.com header "X-Spam-Status: Yes" header "X-Delivered-To: _TO_" ________________________________ From: MailScanner on behalf of ???? Sent: Thursday, March 14, 2019 9:40 PM To: mailscanner at lists.mailscanner.info Subject: How to increase MailScanner spam score when block filename I?m using CentOS v7(1804),MailScanner 5.0.7 and spamassassin 3.4. I set a rule to block certain kind of filename,and add ?***File Quarantine***? to SUBJECT. I also set a rule for spamassassin to store mail and email to spam account. When I receive a blocked filename of mail, the spamassassin rules is not applied. I do a test to send a mail just with subject ?***File Quarantine***?,the spamassassin rule works fine. Why?? I guess it may be caused by the sequence of mailscanner rewriting the mail subject and spamassassin checking spam. Please help me solve this problem.Thanks! My settings are as follows 1./etc/MailScanner/MailScanner.conf Filename Subject Text = {***File Quarantine***} High SpamAssassin Score = 8 High Scoring Spam Actions = store forward TEST 2./etc/mail/spamassassin/local.cf header TEST Subject =~ /File Quarantine/ describe TEST File Quarantine score TEST 8 ZEPHYR -------------- next part -------------- An HTML attachment was scrubbed... URL: From danita at caledonia.net Sat Mar 23 11:19:21 2019 From: danita at caledonia.net (Danita Zanre) Date: Sat, 23 Mar 2019 12:19:21 +0100 Subject: MailWatch Issue after upgrade Message-ID: <42b5054d-87ef-05e3-0d5e-5535759c0f08@caledonia.net> I upgraded MailScanner today to the 5.1.3-2 build (it's been a long time - I was on 4 something!!!).? I had a few "huh" moments (like the chroot jail, and wondering if I was supposed to leave the directories at /data/postfix or use the /var/spool/postfix structure), but I think it's working now.? Mail seems to be scanned and it's being added properly to MailWatch.? However, MailWatch is complaining that the permissions on /var/spool/postfix/hold and incoming are incorrect.? I've tried all kinds of permssions, and if I change to 777 no complaints - hehe - but I'm complaining!? I've obviously got something wrong here. I suspect something about the "groups" - but I have tried changing the group to just postfix, mtagroup (which has users for my wwwrun, postfix, vscan, etc. users in it), and still getting this error.? I vaguely remember this when I first installed it, but I can't remember now. Thanks in advance.? I'm one of those who knows enough about Linux to be dangerous - especially when things have "just worked" for years. -- *Danita Zanr?*, /Move Out of the Office/ I love my job, and you can too! Tel: (720) 319-7530 - Caledonia.Net LLC Tel: (720) 319-8240 - Move Out of the Office -------------- next part -------------- An HTML attachment was scrubbed... URL: From iversons at rushville.k12.in.us Sat Mar 23 12:46:06 2019 From: iversons at rushville.k12.in.us (Shawn Iverson) Date: Sat, 23 Mar 2019 08:46:06 -0400 Subject: MailWatch Issue after upgrade In-Reply-To: <42b5054d-87ef-05e3-0d5e-5535759c0f08@caledonia.net> References: <42b5054d-87ef-05e3-0d5e-5535759c0f08@caledonia.net> Message-ID: I don't recall which OS/distro you are using, but check permissions from /var all the way down and verify that your web server daemon user is part of the mtagroup. If you are using php-fpm, this user it runs as can be different from the web server. You should have the following: /var/spool/postfix drwxr-x---. 2 postfix mtagroup 6 Dec 25 12:07 hold drwxr-x---. 2 postfix mtagroup 6 Mar 23 08:01 incoming /var/spool drwxr-xr-x. 19 root root 250 Feb 1 20:05 postfix /var drwxr-xr-x. 15 root root 194 Feb 16 20:53 spool On Sat, Mar 23, 2019 at 7:19 AM Danita Zanre wrote: > I upgraded MailScanner today to the 5.1.3-2 build (it's been a long time - > I was on 4 something!!!). I had a few "huh" moments (like the chroot jail, > and wondering if I was supposed to leave the directories at /data/postfix > or use the /var/spool/postfix structure), but I think it's working now. > Mail seems to be scanned and it's being added properly to MailWatch. > However, MailWatch is complaining that the permissions on > /var/spool/postfix/hold and incoming are incorrect. I've tried all kinds > of permssions, and if I change to 777 no complaints - hehe - but I'm > complaining! I've obviously got something wrong here. > > I suspect something about the "groups" - but I have tried changing the > group to just postfix, mtagroup (which has users for my wwwrun, postfix, > vscan, etc. users in it), and still getting this error. I vaguely remember > this when I first installed it, but I can't remember now. > > Thanks in advance. I'm one of those who knows enough about Linux to be > dangerous - especially when things have "just worked" for years. > > > -- > *Danita Zanr?*, *Move Out of the Office* > I love my job, and you can too! > Tel: (720) 319-7530 - Caledonia.Net LLC > Tel: (720) 319-8240 - Move Out of the Office > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -- Shawn Iverson, CETL Director of Technology Rush County Schools 765-932-3901 option 7 iversons at rushville.k12.in.us [image: Cybersecurity] -------------- next part -------------- An HTML attachment was scrubbed... URL: From gpapamichelakis at gmail.com Fri Mar 29 11:07:32 2019 From: gpapamichelakis at gmail.com (George Papamichelakis) Date: Fri, 29 Mar 2019 13:07:32 +0200 Subject: Spammer with attachment that bypasses spamassassin In-Reply-To: References: <073f29f0612f4ffe961bcee862c9af09@gruppocomet.it> <418d93efa5da4b65a90988c5873cdccd@gruppocomet.it> Message-ID: Hi all I Have issue with one spammer that due to fact that? he includes some pdf file in his email bypasses the blacklist and his email gets delivered to all addresses that he has from the domain. Can I somehow force mailscanner to not bypass this particular sender? due to message size ? I use mailscanner 5.0.2 with postfix? on a debian machine and mailwatch 1.2.10 web interface. thanks in advance GP From belle at bazuin.nl Fri Mar 29 11:08:38 2019 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Fri, 29 Mar 2019 12:08:38 +0100 Subject: Spammer with attachment that bypasses spamassassin In-Reply-To: References: Message-ID: Can you send me the header info? > -----Oorspronkelijk bericht----- > Van: MailScanner > [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. info] Namens George Papamichelakis > Verzonden: vrijdag 29 maart 2019 12:08 > Aan: mailscanner at lists.mailscanner.info > Onderwerp: Spammer with attachment that bypasses spamassassin > > Hi all > > > I Have issue with one spammer that due to fact that? he includes some > pdf file in his email > > bypasses the blacklist and his email gets delivered to all addresses > that he has from the domain. > > Can I somehow force mailscanner to not bypass this particular sender? > due to message size ? > > I use mailscanner 5.0.2 with postfix? on a debian machine and > mailwatch > 1.2.10 web interface. > > > thanks in advance > > GP > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > From gpapamichelakis at gmail.com Fri Mar 29 11:29:19 2019 From: gpapamichelakis at gmail.com (George Papamichelakis) Date: Fri, 29 Mar 2019 13:29:19 +0200 Subject: Spammer with attachment that bypasses spamassassin In-Reply-To: References: Message-ID: Sure , Here? they are, I just tweaked the ips and names? , I noticed this in my postfix log file: ?MailScanner[29247]: Message BC40B48E89.AA059 from XXX.XXX.XXX.XXX (business-education+bncbcgz73fdtyhrblo767sakgqeq2agr3q at googlegroups.com) to xxxx.xxx is too big for spam checks (2655956 > 200000 bytes) The headers are : Return-Path: Received: from xxx.xxxx.xxxx by xxx.xxxx.xxxx (Dovecot) with LMTP id sbwwFzzwnVyRAgAAyyBr5g ; Fri, 29 Mar 2019 12:15:24 +0200 Received: by xxx.xxxx.xxxx (Postfix) id 0FAC948E16; Fri, 29 Mar 2019 12:15:24 +0200 (EET) Delivered-To: xx at xxxx.xx Received: from mail-wr1-f57.google.com (mail-wr1-f57.google.com [209.85.221.57]) by xxx.xxxx.xxxx (Postfix) with ESMTPS id BC40B48E89 for ; Fri, 29 Mar 2019 12:13:06 +0200 (EET) Received: by mail-wr1-f57.google.com with SMTP id e14sf1337667wrt.18 for ; Fri, 29 Mar 2019 03:13:06 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1553854386; cv=pass; d=google.com; s=arc-20160816; b=bDj3MoszOIe10YUpXat4fWayZVSj+yX/GmZoXvbzayZem079c+fa/0VjHMWnOGNVVv GSy6RosiKQb7I7tol7BK6anz+YUuAahwsWx3lTvF+Z7dZxXWXlqQQpY/aYDxqX4Tcpfp 7T4jRX3Qj8erZiZyRvwZcwMUoWmlqSfzoJnW0NFRv3/sGRPXMoJsAf/e2ruroiv+JfBH aVYACrXqE+dKLcQ37jc6mTZ+MKbrjF8P7T5F/GMHMcUP8MdfT30nrpva7YCjAnGHRdFY eaQlTUps/y8WrDf8/3sKk5iEsYeUbVzZRZqG67mWcE0ibJolsRyE61pRd/6jiTEe/8pV Dg5g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-archive:list-help:list-post:list-id :mailing-list:precedence:reply-to:to:subject:message-id:date:from :in-reply-to:references:mime-version:sender:dkim-signature; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=mwjvFhzXcRvrSjDWhAnzJej7aZq9m06V16MDIhceydPwo2hOxECQwHzDVHFM6Bi+UO moUnvEYFOroVCWKrwTGIaDz7sE871ZfvJ147JIVzXs+XiMuasFXYlTVe3+yO5BHX2Jnj oX0k83tzybV4eyBCFLnD60ZDAKdSVHFL9tVltefRgTBf5z9WEo2XBwhxxd8YzKfgGfvL 2MoiAD+LOWPYZAfabNKGAWaqVBTPeQzGIYjN1MbzEniyO2JSqly0hrXVDmJCUIMxLskp 3U9NqMyNZwhH7QyKwzHTpfRvuMp6e8N4r0gSGdqIkyC6YspAJ8t8Hno5tw5Geoe31li+ XV+w== ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of xxx at xxxxx.xxx designates XX.XXX.XX.XX as permitted sender) smtp.mailfrom=xxxx at xxxxxxx.xxx DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20161025; h=sender:mime-version:references:in-reply-to:from:date:message-id :subject:to:x-original-sender:x-original-authentication-results :reply-to:precedence:mailing-list:list-id:list-post:list-help :list-archive:list-unsubscribe; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=eZ9WUgiIsuUxH7BE4jjvsdfywpvlVI26SsyX5Hk0knrCGt9TLeok/9C4Or2nabBn24 63eyeYX7W58BOVQwO5IR5ZnpKb+Zbab6CIkzaFK9lQX9kbDdXcKSGylI0P+++Mdcna1U 4BPwHpCYNC8qXf6UNcBtT709eZ0Q5jsbQMnv5lZchvSWqc3rEqvt1w3yDyaMGV4Rp6U4 7fROjJPTr2FazJd4KHOBDrYu+4nram1vJEFpuNtZOkomSTFaOzQ8KsNefQabfpLTd6/L 5w/+KpPCFK+flpZX3UlltQZmq2Ixr9Riz2EOek+FC5veXdTuLXWC1dQPXIxGQXZb2A3y IsEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=sender:x-gm-message-state:mime-version:references:in-reply-to:from :date:message-id:subject:to:x-original-sender :x-original-authentication-results:reply-to:precedence:mailing-list :list-id:x-spam-checked-in-group:list-post:list-help:list-archive :list-unsubscribe; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=bBifMmPz8ja6VAfzvMblxLJYpeeN7MAr7CRvM21URzrJqgKt+wO0A7wspMGIiPflcQ 0H+9McmWSGYxe9OPzzG3PfLYEsti8AZokMe0JEfeGTOecdz+nw/soB5p2shg+cE9eQ7y f7N2eRed9g5hbUzIVr30C7N274FW4eemUpCQbnHTZOcoA1b5PHYA2DtUa39GjCzoSzQE lXTy7og3ph+4fwAZpF6DDWRdi4VnqsuQgF/gDZXQRnV7/zeRBpgVHFwQojvEubWnU8My fH3J59R7OU7mhHaBI8FDBYV4Fw9OEWsDTazHlMgp/Mf8trc1ypyHXjkPNQ1wCvAPeykK clBQ== Sender: business-education at googlegroups.com X-Gm-Message-State: APjAAAVBRH41sEGircSxa9aCNJ3+Gdoqi3VgJziDALz6lNRtMiIgExdF bsKc5TOvc09p4IItxZTro7A= X-Google-Smtp-Source: APXvYqzBH7+DrvOsVWtQ5ngRAm9523F7UnycoTigNImCbDoQsHOZ0qJiR4B4VvykasuyECpJ1eOX7w== X-Received: by 2002:a5d:6b0d:: with SMTP id v13mr6769541wrw.284.1553854385485; Fri, 29 Mar 2019 03:13:05 -0700 (PDT) X-BeenThere: business-education at googlegroups.com Received: by 2002:adf:f8c6:: with SMTP id f6ls113789wrq.11.gmail; Fri, 29 Mar 2019 03:13:00 -0700 (PDT) X-Received: by 2002:adf:de84:: with SMTP id w4mr1246311wrl.13.1553854380443; Fri, 29 Mar 2019 03:13:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1553854380; cv=none; d=google.com; s=arc-20160816; b=xQxxAGbN12GnmeQEd7IEF6uy7+LGBRZo+VAa2c7356vtwtz4zsIhwBKpR4oN71gWHR B/Qiy8szZvSCHkWZe242aJIqcwUmaxh7MS0dRlb3zKCiKd2mGkH7bzxjrOOH7iUagRQJ Ikw6z1OJY+vslqv70A5ACJwrNyu5L9qhpQJ1EIv1umR4GzIXjWJyzKS4w+ysyy0WJ0HE lLR2JTwghOnV4tBUNZYSuPyhgjgX3bTobTN+zGbcL3fptIE6xYG7FbWo6zOe9gymmopX yiR0Zbm7k0qh6r9j8uctE/1T3ULtirFpaGB2I+RWRe4U1Q6tlM+lQQ3/4Z6GR36thS6X 9nIg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:in-reply-to:references:mime-version; bh=cH+xK7PaOEPF19A/Hsv+6kzx+bqBeZZESuscUNhVNKc=; b=gvkuJ5kbSe5L4BxQLFnPirRSXUW7PDhMkOz4keTxL7biWAhdBPWQA5If1ShPdKQYfi to+kA2cddc1vAfSqI52ZnJU+//1DgoR/tw80F7enOnvS8kFkYQCoglrGpvjeAZSEozLR WIdEdLGHcrGWdDnAg5kK0P11YALOtl7dXQA25UPwbdZzWfXRsRpDmePVz8gWXNsFQk2U 3eKzK/y1r1iYJAVTC2pOF4ZIFPG8SfrsRRBFsWjnechjmI3a+4K1nsqVafgHR7+/z6fJ LrN2JcAbNvJL4EqI0oZcK0aHzkQGXM1ZZH5S6VXcLvfL2xCNpdxGWkEYNp13U8n760o3 ZssA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of xxx at xxxxx.xxx designates XX.XX.XX.XX as permitted sender) smtp.mailfrom=xxx at xxxx.xxx Received: from xxxxx.xxxx.xxxx (XXx.xxxxxx.xxx. [XX.XX.XX.XX]) by gmr-mx.google.com with ESMTPS id n65si73301wma.1.2019.03.29.03.12.59 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 29 Mar 2019 03:13:00 -0700 (PDT) Received-SPF: pass (google.com: domain of xxx at xxxxxx.xxx designates XX.XX.XX.XX as permitted sender) client-ip=XX.XX.XX.XX; Received: from mail-vs1-f52.google.com (mail-vs1-f52.google.com [209.85.217.52]) (Authenticated sender: xxx at xxxxxx.xxx) by xxxxx.xxx.xxx (ESMTP) with ESMTPSA for ; Fri, 29 Mar 2019 12:12:52 +0200 (EET) Received: by mail-vs1-f52.google.com with SMTP id j184so943199vsd.11 for ; Fri, 29 Mar 2019 03:12:52 -0700 (PDT) X-Received: by 2002:a67:e28d:: with SMTP id g13mr29911012vsf.121.1553854370951; Fri, 29 Mar 2019 03:12:50 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "Business Education" Date: Fri, 29 Mar 2019 12:12:36 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: =?UTF-8?B?zpXOmc6UzpnOms6XIM6gzqHOn86jzqbOn86hzpEgzpPOmc6RIM6kzpEgMTIwIEFEVkFOQw==?= =?UTF-8?B?RUQgQ09VUlNFUyDOpM6fzqUgU0JF?= To: business-education at googlegroups.com Content-Type: multipart/mixed; boundary="000000000000d0be6e058538e96d" X-Original-Sender: xxx at xxxxxx.xxx X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of xxx at xxxxx.xxx designates XX.XX.XX.XX as permitted sender) smtp.mailfrom=xxx at xxxxx.xxx Reply-To: xxx at xxxxx.xxx Precedence: list Mailing-list: list business-education at googlegroups.com; contact business-education+owners at googlegroups.com List-ID: X-Spam-Checked-In-Group: business-education at googlegroups.com X-Google-Group-Id: 646963186979 List-Post: , List-Help: , List-Archive: , X-XXX-MailScanner-Information: Please contact the ISP for more information X-XXX-MailScanner-ID: BC40B48E89.AA059 X-XXX-MailScanner: Found to be clean X-XXX-MailScanner-From: business-education+bncbcgz73fdtyhrblo767sakgqeq2agr3q at googlegroups.com X-Spam-Status: No GP On 3/29/19 1:08 PM, L.P.H. van Belle via MailScanner wrote: > Can you send me the header info? > > >> -----Oorspronkelijk bericht----- >> Van: MailScanner >> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. > info] Namens George Papamichelakis >> Verzonden: vrijdag 29 maart 2019 12:08 >> Aan: mailscanner at lists.mailscanner.info >> Onderwerp: Spammer with attachment that bypasses spamassassin >> >> Hi all >> >> >> I Have issue with one spammer that due to fact that? he includes some >> pdf file in his email >> >> bypasses the blacklist and his email gets delivered to all addresses >> that he has from the domain. >> >> Can I somehow force mailscanner to not bypass this particular sender >> due to message size ? >> >> I use mailscanner 5.0.2 with postfix? on a debian machine and >> mailwatch >> 1.2.10 web interface. >> >> >> thanks in advance >> >> GP >> >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From belle at bazuin.nl Fri Mar 29 12:30:40 2019 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Fri, 29 Mar 2019 13:30:40 +0100 Subject: Spammer with attachment that bypasses spamassassin In-Reply-To: References: Message-ID: yes, you can increase the size so it does hit spamassassin. ? this part: X-Original-Authentication-Results: gmr-mx.google.com;?????? spf=pass (google.com: domain of MailScanner warning: numerical links are often malicious: xxx at xxxxx.xxx designates XX.XX.XX.XX as permitted sender) smtp.mailfrom=xxx at xxxxx.xxx You can also report the spammer at gmail.com since he is abusing the list. ? And you could make a spamassassing rule that triggers on : smtp.mailfrom=xxx at xxxxx.xxx? but without the source ipnumbers its hard to go a full check in this. ? increae the attachment size?to 2Mb. ? sed -i '/^Max Spam Check Size =/ c\Max Spam Check Size = 2048k' /etc/MailScanner/MailScanner.conf ? Greetings. ? Louis ? Van: George Papamichelakis [mailto:gpapamichelakis at gmail.com] Verzonden: vrijdag 29 maart 2019 12:29 Aan: MailScanner Discussion CC: L.P.H. van Belle Onderwerp: Re: Spammer with attachment that bypasses spamassassin Sure , Here? they are, I just tweaked the ips and names? , I noticed this in my postfix log file: ?MailScanner[29247]: Message BC40B48E89.AA059 from XXX.XXX.XXX.XXX (business-education+bncbcgz73fdtyhrblo767sakgqeq2agr3q at googlegroups.com) to xxxx.xxx is too big for spam checks (2655956 > 200000 bytes) The headers are : Return-Path: Received: from xxx.xxxx.xxxx by xxx.xxxx.xxxx (Dovecot) with LMTP id sbwwFzzwnVyRAgAAyyBr5g ; Fri, 29 Mar 2019 12:15:24 +0200 Received: by xxx.xxxx.xxxx (Postfix) id 0FAC948E16; Fri, 29 Mar 2019 12:15:24 +0200 (EET) Delivered-To: MailScanner warning: numerical links are often malicious: xx at xxxx.xx Received: from mail-wr1-f57.google.com (mail-wr1-f57.google.com [209.85.221.57]) by xxx.xxxx.xxxx (Postfix) with ESMTPS id BC40B48E89 for MailScanner warning: numerical links are often malicious: ; Fri, 29 Mar 2019 12:13:06 +0200 (EET) Received: by mail-wr1-f57.google.com with SMTP id e14sf1337667wrt.18 for MailScanner warning: numerical links are often malicious: ; Fri, 29 Mar 2019 03:13:06 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1553854386; cv=pass; d=google.com; s=arc-20160816; b=bDj3MoszOIe10YUpXat4fWayZVSj+yX/GmZoXvbzayZem079c+fa/0VjHMWnOGNVVv GSy6RosiKQb7I7tol7BK6anz+YUuAahwsWx3lTvF+Z7dZxXWXlqQQpY/aYDxqX4Tcpfp 7T4jRX3Qj8erZiZyRvwZcwMUoWmlqSfzoJnW0NFRv3/sGRPXMoJsAf/e2ruroiv+JfBH aVYACrXqE+dKLcQ37jc6mTZ+MKbrjF8P7T5F/GMHMcUP8MdfT30nrpva7YCjAnGHRdFY eaQlTUps/y8WrDf8/3sKk5iEsYeUbVzZRZqG67mWcE0ibJolsRyE61pRd/6jiTEe/8pV Dg5g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-archive:list-help:list-post:list-id :mailing-list:precedence:reply-to:to:subject:message-id:date:from :in-reply-to:references:mime-version:sender:dkim-signature; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=mwjvFhzXcRvrSjDWhAnzJej7aZq9m06V16MDIhceydPwo2hOxECQwHzDVHFM6Bi+UO moUnvEYFOroVCWKrwTGIaDz7sE871ZfvJ147JIVzXs+XiMuasFXYlTVe3+yO5BHX2Jnj oX0k83tzybV4eyBCFLnD60ZDAKdSVHFL9tVltefRgTBf5z9WEo2XBwhxxd8YzKfgGfvL 2MoiAD+LOWPYZAfabNKGAWaqVBTPeQzGIYjN1MbzEniyO2JSqly0hrXVDmJCUIMxLskp 3U9NqMyNZwhH7QyKwzHTpfRvuMp6e8N4r0gSGdqIkyC6YspAJ8t8Hno5tw5Geoe31li+ XV+w== ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of MailScanner warning: numerical links are often malicious: xxx at xxxxx.xxx designates XX.XXX.XX.XX as permitted sender) smtp.mailfrom=xxxx at xxxxxxx.xxx DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20161025; h=sender:mime-version:references:in-reply-to:from:date:message-id :subject:to:x-original-sender:x-original-authentication-results :reply-to:precedence:mailing-list:list-id:list-post:list-help :list-archive:list-unsubscribe; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=eZ9WUgiIsuUxH7BE4jjvsdfywpvlVI26SsyX5Hk0knrCGt9TLeok/9C4Or2nabBn24 63eyeYX7W58BOVQwO5IR5ZnpKb+Zbab6CIkzaFK9lQX9kbDdXcKSGylI0P+++Mdcna1U 4BPwHpCYNC8qXf6UNcBtT709eZ0Q5jsbQMnv5lZchvSWqc3rEqvt1w3yDyaMGV4Rp6U4 7fROjJPTr2FazJd4KHOBDrYu+4nram1vJEFpuNtZOkomSTFaOzQ8KsNefQabfpLTd6/L 5w/+KpPCFK+flpZX3UlltQZmq2Ixr9Riz2EOek+FC5veXdTuLXWC1dQPXIxGQXZb2A3y IsEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=sender:x-gm-message-state:mime-version:references:in-reply-to:from :date:message-id:subject:to:x-original-sender :x-original-authentication-results:reply-to:precedence:mailing-list :list-id:x-spam-checked-in-group:list-post:list-help:list-archive :list-unsubscribe; bh=DBS0pCCxQKHrs8JD5K0bx+wdmtXC5ACr4zeYr1o30+0=; b=bBifMmPz8ja6VAfzvMblxLJYpeeN7MAr7CRvM21URzrJqgKt+wO0A7wspMGIiPflcQ 0H+9McmWSGYxe9OPzzG3PfLYEsti8AZokMe0JEfeGTOecdz+nw/soB5p2shg+cE9eQ7y f7N2eRed9g5hbUzIVr30C7N274FW4eemUpCQbnHTZOcoA1b5PHYA2DtUa39GjCzoSzQE lXTy7og3ph+4fwAZpF6DDWRdi4VnqsuQgF/gDZXQRnV7/zeRBpgVHFwQojvEubWnU8My fH3J59R7OU7mhHaBI8FDBYV4Fw9OEWsDTazHlMgp/Mf8trc1ypyHXjkPNQ1wCvAPeykK clBQ== Sender: business-education at googlegroups.com X-Gm-Message-State: APjAAAVBRH41sEGircSxa9aCNJ3+Gdoqi3VgJziDALz6lNRtMiIgExdF bsKc5TOvc09p4IItxZTro7A= X-Google-Smtp-Source: APXvYqzBH7+DrvOsVWtQ5ngRAm9523F7UnycoTigNImCbDoQsHOZ0qJiR4B4VvykasuyECpJ1eOX7w== X-Received: by 2002:a5d:6b0d:: with SMTP id v13mr6769541wrw.284.1553854385485; Fri, 29 Mar 2019 03:13:05 -0700 (PDT) X-BeenThere: business-education at googlegroups.com Received: by 2002:adf:f8c6:: with SMTP id f6ls113789wrq.11.gmail; Fri, 29 Mar 2019 03:13:00 -0700 (PDT) X-Received: by 2002:adf:de84:: with SMTP id w4mr1246311wrl.13.1553854380443; Fri, 29 Mar 2019 03:13:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1553854380; cv=none; d=google.com; s=arc-20160816; b=xQxxAGbN12GnmeQEd7IEF6uy7+LGBRZo+VAa2c7356vtwtz4zsIhwBKpR4oN71gWHR B/Qiy8szZvSCHkWZe242aJIqcwUmaxh7MS0dRlb3zKCiKd2mGkH7bzxjrOOH7iUagRQJ Ikw6z1OJY+vslqv70A5ACJwrNyu5L9qhpQJ1EIv1umR4GzIXjWJyzKS4w+ysyy0WJ0HE lLR2JTwghOnV4tBUNZYSuPyhgjgX3bTobTN+zGbcL3fptIE6xYG7FbWo6zOe9gymmopX yiR0Zbm7k0qh6r9j8uctE/1T3ULtirFpaGB2I+RWRe4U1Q6tlM+lQQ3/4Z6GR36thS6X 9nIg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:in-reply-to:references:mime-version; bh=cH+xK7PaOEPF19A/Hsv+6kzx+bqBeZZESuscUNhVNKc=; b=gvkuJ5kbSe5L4BxQLFnPirRSXUW7PDhMkOz4keTxL7biWAhdBPWQA5If1ShPdKQYfi to+kA2cddc1vAfSqI52ZnJU+//1DgoR/tw80F7enOnvS8kFkYQCoglrGpvjeAZSEozLR WIdEdLGHcrGWdDnAg5kK0P11YALOtl7dXQA25UPwbdZzWfXRsRpDmePVz8gWXNsFQk2U 3eKzK/y1r1iYJAVTC2pOF4ZIFPG8SfrsRRBFsWjnechjmI3a+4K1nsqVafgHR7+/z6fJ LrN2JcAbNvJL4EqI0oZcK0aHzkQGXM1ZZH5S6VXcLvfL2xCNpdxGWkEYNp13U8n760o3 ZssA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of MailScanner warning: numerical links are often malicious: xxx at xxxxx.xxx designates XX.XX.XX.XX as permitted sender) smtp.mailfrom=xxx at xxxx.xxx Received: from xxxxx.xxxx.xxxx (XXx.xxxxxx.xxx. [XX.XX.XX.XX]) by gmr-mx.google.com with ESMTPS id n65si73301wma.1.2019.03.29.03.12.59 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 29 Mar 2019 03:13:00 -0700 (PDT) Received-SPF: pass (google.com: domain of MailScanner warning: numerical links are often malicious: xxx at xxxxxx.xxx designates XX.XX.XX.XX as permitted sender) client-ip=XX.XX.XX.XX; Received: from mail-vs1-f52.google.com (mail-vs1-f52.google.com [209.85.217.52]) (Authenticated sender: MailScanner warning: numerical links are often malicious: xxx at xxxxxx.xxx) by xxxxx.xxx.xxx (ESMTP) with ESMTPSA for ; Fri, 29 Mar 2019 12:12:52 +0200 (EET) Received: by mail-vs1-f52.google.com with SMTP id j184so943199vsd.11 for ; Fri, 29 Mar 2019 03:12:52 -0700 (PDT) X-Received: by 2002:a67:e28d:: with SMTP id g13mr29911012vsf.121.1553854370951; Fri, 29 Mar 2019 03:12:50 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "Business Education" MailScanner warning: numerical links are often malicious: Date: Fri, 29 Mar 2019 12:12:36 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: =?UTF-8?B?zpXOmc6UzpnOms6XIM6gzqHOn86jzqbOn86hzpEgzpPOmc6RIM6kzpEgMTIwIEFEVkFOQw==?= =?UTF-8?B?RUQgQ09VUlNFUyDOpM6fzqUgU0JF?= To: business-education at googlegroups.com Content-Type: multipart/mixed; boundary="000000000000d0be6e058538e96d" X-Original-Sender: MailScanner warning: numerical links are often malicious: xxx at xxxxxx.xxx X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of MailScanner warning: numerical links are often malicious: xxx at xxxxx.xxx designates XX.XX.XX.XX as permitted sender) smtp.mailfrom=xxx at xxxxx.xxx Reply-To: MailScanner warning: numerical links are often malicious: xxx at xxxxx.xxx Precedence: list Mailing-list: list business-education at googlegroups.com; contact business-education+owners at googlegroups.com List-ID: X-Spam-Checked-In-Group: business-education at googlegroups.com X-Google-Group-Id: 646963186979 List-Post: , MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "googlegroups.com" List-Help: , MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "googlegroups.com" List-Archive: , X-XXX-MailScanner-Information: Please contact the ISP for more information X-XXX-MailScanner-ID: BC40B48E89.AA059 X-XXX-MailScanner: Found to be clean X-XXX-MailScanner-From: business-education+bncbcgz73fdtyhrblo767sakgqeq2agr3q at googlegroups.com X-Spam-Status: No GP On 3/29/19 1:08 PM, L.P.H. van Belle via MailScanner wrote: Can you send me the header info? -----Oorspronkelijk bericht----- Van: MailScanner [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. info] Namens George Papamichelakis Verzonden: vrijdag 29 maart 2019 12:08 Aan: mailscanner at lists.mailscanner.info Onderwerp: Spammer with attachment that bypasses spamassassin Hi all I Have issue with one spammer that due to fact that? he includes some pdf file in his email bypasses the blacklist and his email gets delivered to all addresses that he has from the domain. Can I somehow force mailscanner to not bypass this particular sender? due to message size ? I use mailscanner 5.0.2 with postfix? on a debian machine and mailwatch 1.2.10 web interface. thanks in advance GP -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: