From bfebrian at gmail.com Sat Aug 1 04:18:11 2020 From: bfebrian at gmail.com (Budi F) Date: Sat, 1 Aug 2020 11:18:11 +0700 Subject: Incoming mail stuck in Hold directory Message-ID: Hi, I'm trying to install mailscanner in centos 7 with postfix It's working fine, but at least in every 3,4 hours all the email stuck in incoming directory, /var/spool/postfix/hold Restarting the mailscanner will solved the problem, all emails in hold directory fill be delivered, but then this will happen again Temporary, with cron, I restart the mailscanner service in every 2 hours My configuration: Centos 7 postfix-2.10.1-9.el7.x86_64 MailWatch Version: 1.2.15 spamassassin-3.4.0-5.el7_7.x86_64 clamd-0.102.3-1.el7.x86_64 drwxrwx---. 2 postfix mtagroup 6 Aug 1 11:02 hold And the files under hold directory are own by postfix.postfix Member of mtagroup postfix mail clamscan apache Why is sometime the emails stuck in the hold directory, and what are the solutions? Regards -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Sat Aug 1 12:12:24 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sat, 1 Aug 2020 08:12:24 -0400 Subject: Incoming mail stuck in Hold directory In-Reply-To: References: Message-ID: Any clues in /var/log/maillog or /var/log/messages in regard to the MailScanner daemon? On 8/1/20 12:18 AM, Budi F wrote: > Hi, > > I'm trying to install mailscanner in centos 7 with?postfix > > It's working fine, but at least in every 3,4 hours all the email stuck > in incoming directory, > /var/spool/postfix/hold > > Restarting the mailscanner will solved the problem, all emails in hold > directory fill be delivered, but then this will happen again > > Temporary, with cron, I restart the mailscanner service in every 2 hours > > My configuration: > Centos 7 > postfix-2.10.1-9.el7.x86_64 > MailWatch Version: 1.2.15 > spamassassin-3.4.0-5.el7_7.x86_64 > clamd-0.102.3-1.el7.x86_64 > > drwxrwx---. 2 postfix mtagroup ? ?6 Aug ?1 11:02 hold > > And the files under hold directory are own by postfix.postfix > > Member of mtagroup > postfix mail clamscan apache > > Why is sometime the emails stuck in the hold directory, and what are > the solutions? > > Regards > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From bfebrian at gmail.com Sat Aug 1 12:51:00 2020 From: bfebrian at gmail.com (Budi F) Date: Sat, 1 Aug 2020 19:51:00 +0700 Subject: Incoming mail stuck in Hold directory In-Reply-To: References: Message-ID: I found this in maillog, is this normal rebuild is due, Found 0 messages, and mailscanner child dying after bayes rebuild? =====start Aug 1 19:44:58 border MailScanner[3910]: MailScanner Email Processor version 5.3.3 starting... Aug 1 19:44:58 border MailScanner[3910]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 1 19:44:58 border MailScanner[3910]: Reading configuration file /etc/MailScanner/conf.d/README Aug 1 19:44:58 border MailScanner[3910]: Read 1500 hostnames from the phishing whitelist Aug 1 19:44:58 border MailScanner[3910]: Read 8480 hostnames from the phishing blacklists Aug 1 19:44:58 border MailScanner[3910]: Config: calling custom init function MailWatchLogging Aug 1 19:44:58 border MailScanner[3910]: MailWatch: Started MailWatch SQL Logging child **Aug 1 19:44:58 border MailScanner[3910]: Bayes database rebuild is due* Aug 1 19:44:58 border MailScanner[3910]: Using SpamAssassin results cache Aug 1 19:44:58 border MailScanner[3910]: Connected to SpamAssassin cache database Aug 1 19:44:58 border MailScanner[3910]: SpamAssassin Bayes database rebuild starting Aug 1 19:44:59 border MailScanner[3910]: SpamAssassin Bayes database rebuild completed Aug 1 19:44:59 border MailScanner[3910]: Enabling SpamAssassin auto-whitelist functionality... Aug 1 19:45:00 border MailScanner[3910]: Connected to Processing Attempts Database **Aug 1 19:45:00 border MailScanner[3910]: Found 0 messages in the Processing Attempts Database* Aug 1 19:45:00 border MailScanner[3910]: Using locktype = flock Aug 1 19:45:00 border MailScanner[3910]: Config: calling custom end function MailWatchLogging **Aug 1 19:45:00 border MailScanner[3910]: MailScanner child dying after Bayes rebuild* Aug 1 19:45:00 border MailScanner[3918]: MailScanner Email Processor version 5.3.3 starting... =====end Regards On Sat, Aug 1, 2020 at 7:12 PM Shawn Iverson via MailScanner < mailscanner at lists.mailscanner.info> wrote: > Any clues in /var/log/maillog or /var/log/messages in regard to the > MailScanner daemon? > On 8/1/20 12:18 AM, Budi F wrote: > > Hi, > > I'm trying to install mailscanner in centos 7 with postfix > > It's working fine, but at least in every 3,4 hours all the email stuck in > incoming directory, > /var/spool/postfix/hold > > Restarting the mailscanner will solved the problem, all emails in hold > directory fill be delivered, but then this will happen again > > Temporary, with cron, I restart the mailscanner service in every 2 hours > > My configuration: > Centos 7 > postfix-2.10.1-9.el7.x86_64 > MailWatch Version: 1.2.15 > spamassassin-3.4.0-5.el7_7.x86_64 > clamd-0.102.3-1.el7.x86_64 > > drwxrwx---. 2 postfix mtagroup 6 Aug 1 11:02 hold > > And the files under hold directory are own by postfix.postfix > > Member of mtagroup > postfix mail clamscan apache > > Why is sometime the emails stuck in the hold directory, and what are the > solutions? > > Regards > > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Sat Aug 1 13:01:04 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sat, 1 Aug 2020 09:01:04 -0400 Subject: Incoming mail stuck in Hold directory In-Reply-To: References: Message-ID: The child dying is normal. What is not normal is the end of your log. You should see the parent spawning a new child, which it does... Aug ?1 19:45:00 border MailScanner[3918]: MailScanner Email Processor version 5.3.3 starting... but it appears it is stalling because there are no entries that it is reading in your configs. On 8/1/20 8:51 AM, Budi F wrote: > I found this in maillog, > > is this normal rebuild is due, Found 0 messages, and mailscanner child > dying after bayes rebuild? > > =====start > Aug ?1 19:44:58 border MailScanner[3910]: MailScanner Email Processor > version 5.3.3 starting... > Aug ?1 19:44:58 border MailScanner[3910]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Aug ?1 19:44:58 border MailScanner[3910]: Reading configuration file > /etc/MailScanner/conf.d/README > Aug ?1 19:44:58 border MailScanner[3910]: Read 1500 hostnames from the > phishing whitelist > Aug ?1 19:44:58 border MailScanner[3910]: Read 8480 hostnames from the > phishing blacklists > Aug ?1 19:44:58 border MailScanner[3910]: Config: calling custom init > function MailWatchLogging > Aug ?1 19:44:58 border MailScanner[3910]: MailWatch: Started MailWatch > SQL Logging child > **Aug ?1 19:44:58 border MailScanner[3910]: Bayes database rebuild is due* > Aug ?1 19:44:58 border MailScanner[3910]: Using SpamAssassin results cache > Aug ?1 19:44:58 border MailScanner[3910]: Connected to SpamAssassin > cache database > Aug ?1 19:44:58 border MailScanner[3910]: SpamAssassin Bayes database > rebuild starting > Aug ?1 19:44:59 border MailScanner[3910]: SpamAssassin Bayes database > rebuild completed > Aug ?1 19:44:59 border MailScanner[3910]: Enabling SpamAssassin > auto-whitelist functionality... > Aug ?1 19:45:00 border MailScanner[3910]: Connected to Processing > Attempts Database > **Aug ?1 19:45:00 border MailScanner[3910]: Found 0 messages in the > Processing Attempts Database* > Aug ?1 19:45:00 border MailScanner[3910]: Using locktype = flock > Aug ?1 19:45:00 border MailScanner[3910]: Config: calling custom end > function MailWatchLogging > **Aug ?1 19:45:00 border MailScanner[3910]: MailScanner child dying > after Bayes rebuild* > Aug ?1 19:45:00 border MailScanner[3918]: MailScanner Email Processor > version 5.3.3 starting... > =====end > > Regards > > On Sat, Aug 1, 2020 at 7:12 PM Shawn Iverson via MailScanner > > wrote: > > Any clues in /var/log/maillog or /var/log/messages in regard to > the MailScanner daemon? > > On 8/1/20 12:18 AM, Budi F wrote: >> Hi, >> >> I'm trying to install mailscanner in centos 7 with?postfix >> >> It's working fine, but at least in every 3,4 hours all the email >> stuck in incoming directory, >> /var/spool/postfix/hold >> >> Restarting the mailscanner will solved the problem, all emails in >> hold directory fill be delivered, but then this will happen again >> >> Temporary, with cron, I restart the mailscanner service in every >> 2 hours >> >> My configuration: >> Centos 7 >> postfix-2.10.1-9.el7.x86_64 >> MailWatch Version: 1.2.15 >> spamassassin-3.4.0-5.el7_7.x86_64 >> clamd-0.102.3-1.el7.x86_64 >> >> drwxrwx---. 2 postfix mtagroup ? ?6 Aug ?1 11:02 hold >> >> And the files under hold directory are own by postfix.postfix >> >> Member of mtagroup >> postfix mail clamscan apache >> >> Why is sometime the emails stuck in the hold directory, and what >> are the solutions? >> >> Regards >> > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Sat Aug 1 13:05:35 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sat, 1 Aug 2020 09:05:35 -0400 Subject: Incoming mail stuck in Hold directory In-Reply-To: References: Message-ID: Try setting this temporarily and see what happens: Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no I'm wondering if your child is hung waiting on a bayes rebuild that never completes. On 8/1/20 9:01 AM, Shawn Iverson via MailScanner wrote: > > The child dying is normal. What is not normal is the end of your log. > > You should see the parent spawning a new child, which it does... > > Aug ?1 19:45:00 border MailScanner[3918]: MailScanner Email Processor > version 5.3.3 starting... > > but it appears it is stalling because there are no entries that it is > reading in your configs. > > On 8/1/20 8:51 AM, Budi F wrote: >> I found this in maillog, >> >> is this normal rebuild is due, Found 0 messages, and mailscanner >> child dying after bayes rebuild? >> >> =====start >> Aug ?1 19:44:58 border MailScanner[3910]: MailScanner Email Processor >> version 5.3.3 starting... >> Aug ?1 19:44:58 border MailScanner[3910]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Aug ?1 19:44:58 border MailScanner[3910]: Reading configuration file >> /etc/MailScanner/conf.d/README >> Aug ?1 19:44:58 border MailScanner[3910]: Read 1500 hostnames from >> the phishing whitelist >> Aug ?1 19:44:58 border MailScanner[3910]: Read 8480 hostnames from >> the phishing blacklists >> Aug ?1 19:44:58 border MailScanner[3910]: Config: calling custom init >> function MailWatchLogging >> Aug ?1 19:44:58 border MailScanner[3910]: MailWatch: Started >> MailWatch SQL Logging child >> **Aug ?1 19:44:58 border MailScanner[3910]: Bayes database rebuild is >> due* >> Aug ?1 19:44:58 border MailScanner[3910]: Using SpamAssassin results >> cache >> Aug ?1 19:44:58 border MailScanner[3910]: Connected to SpamAssassin >> cache database >> Aug ?1 19:44:58 border MailScanner[3910]: SpamAssassin Bayes database >> rebuild starting >> Aug ?1 19:44:59 border MailScanner[3910]: SpamAssassin Bayes database >> rebuild completed >> Aug ?1 19:44:59 border MailScanner[3910]: Enabling SpamAssassin >> auto-whitelist functionality... >> Aug ?1 19:45:00 border MailScanner[3910]: Connected to Processing >> Attempts Database >> **Aug ?1 19:45:00 border MailScanner[3910]: Found 0 messages in the >> Processing Attempts Database* >> Aug ?1 19:45:00 border MailScanner[3910]: Using locktype = flock >> Aug ?1 19:45:00 border MailScanner[3910]: Config: calling custom end >> function MailWatchLogging >> **Aug ?1 19:45:00 border MailScanner[3910]: MailScanner child dying >> after Bayes rebuild* >> Aug ?1 19:45:00 border MailScanner[3918]: MailScanner Email Processor >> version 5.3.3 starting... >> =====end >> >> Regards >> >> On Sat, Aug 1, 2020 at 7:12 PM Shawn Iverson via MailScanner >> > > wrote: >> >> Any clues in /var/log/maillog or /var/log/messages in regard to >> the MailScanner daemon? >> >> On 8/1/20 12:18 AM, Budi F wrote: >>> Hi, >>> >>> I'm trying to install mailscanner in centos 7 with?postfix >>> >>> It's working fine, but at least in every 3,4 hours all the email >>> stuck in incoming directory, >>> /var/spool/postfix/hold >>> >>> Restarting the mailscanner will solved the problem, all emails >>> in hold directory fill be delivered, but then this will happen again >>> >>> Temporary, with cron, I restart the mailscanner service in every >>> 2 hours >>> >>> My configuration: >>> Centos 7 >>> postfix-2.10.1-9.el7.x86_64 >>> MailWatch Version: 1.2.15 >>> spamassassin-3.4.0-5.el7_7.x86_64 >>> clamd-0.102.3-1.el7.x86_64 >>> >>> drwxrwx---. 2 postfix mtagroup ? ?6 Aug ?1 11:02 hold >>> >>> And the files under hold directory are own by postfix.postfix >>> >>> Member of mtagroup >>> postfix mail clamscan apache >>> >>> Why is sometime the emails stuck in the hold directory, and what >>> are the solutions? >>> >>> Regards >>> >> -- >> >> Shawn Iverson >> shawniverson at summitgrid.com >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> > -- > > Shawn Iverson > shawniverson at summitgrid.com > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From bfebrian at gmail.com Sat Aug 1 15:24:56 2020 From: bfebrian at gmail.com (Budi F) Date: Sat, 1 Aug 2020 22:24:56 +0700 Subject: Incoming mail stuck in Hold directory In-Reply-To: References: Message-ID: Thanks Shawn, I made a very stupid mistake, in MailScanner.conf, I put Rebuild Bayes Every = 1 Instead of Rebuild Bayes Every = 86400 I compare this with my other mailscanner system. This mailscanner suppose to replace that system which is still mailscanner 4.85.2 (but still working fine with just desktop computer level) Thanks again. Regards -------------- next part -------------- An HTML attachment was scrubbed... URL: From info at topnetworks.nl Sat Aug 1 11:14:10 2020 From: info at topnetworks.nl (Fred Gerrits (Topnetworks)) Date: Sat, 01 Aug 2020 13:14:10 +0200 Subject: Incoming mail stuck in Hold directory Message-ID: <5h35h054178s4uthlu16hbj0.1596280263239@email.android.com> An HTML attachment was scrubbed... URL: -------------- next part -------------- Install webmin, then when log in to webmin, system, logfiles, mail.log and check where it's got stuck, probably a fqdn failure. Verzonden vanaf mijn Xperia Smartphone ---- Budi F schreef ---- Hi, I'm trying to install mailscanner in centos 7 with postfix It's working fine, but at least in every 3,4 hours all the email stuck in incoming directory, /var/spool/postfix/hold Restarting the mailscanner will solved the problem, all emails in hold directory fill be delivered, but then this will happen again Temporary, with cron, I restart the mailscanner service in every 2 hours My configuration: Centos 7 postfix-2.10.1-9.el7.x86_64 MailWatch Version: 1.2.15 spamassassin-3.4.0-5.el7_7.x86_64 clamd-0.102.3-1.el7.x86_64 drwxrwx---. 2 postfix mtagroup 6 Aug 1 11:02 hold And the files under hold directory are own by postfix.postfix Member of mtagroup postfix mail clamscan apache Why is sometime the emails stuck in the hold directory, and what are the solutions? Regards -- This message has been scanned by MailScanner. Messages are scanned by Mcafee AV - Spamcheck by Spamassasin. Eigen domain nodig ? Bezoek http://www.topnetworks.nl -- This message has been scanned by MailScanner. From kenneth at khansen-it.dk Sun Aug 2 14:42:52 2020 From: kenneth at khansen-it.dk (Kenneth Hansen) Date: Sun, 02 Aug 2020 16:42:52 +0200 Subject: What does it take to get featured on the homepage Message-ID: <6aad-5f26d100-1-544d9d00@231498830> Hi everyone For some time now, I have been wondering how a project can get featured on mailscanner.info. Could someone shine some light on how projects are selected -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Sun Aug 2 14:44:28 2020 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 2 Aug 2020 10:44:28 -0400 Subject: What does it take to get featured on the homepage In-Reply-To: <6aad-5f26d100-1-544d9d00@231498830> References: <6aad-5f26d100-1-544d9d00@231498830> Message-ID: <09533984-E012-4E32-A4BB-002B5B7CEB3B@mailborder.com> Those are projects that are or have directly contributed to the development of MailScanner over the years. - Jerry Benton www.mailborder.com > On Aug 2, 2020, at 10:42, Kenneth Hansen wrote: > > Hi everyone > For some time now, I have been wondering how a project can get featured on mailscanner.info. > Could someone shine some light on how projects are selected > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Wed Aug 5 02:22:44 2020 From: sales at edenusa.com (Paul Scott) Date: Wed, 5 Aug 2020 02:22:44 +0000 Subject: Install Latest Version Message-ID: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for "rhel" are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Wed Aug 5 10:30:42 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Wed, 5 Aug 2020 06:30:42 -0400 Subject: Install Latest Version In-Reply-To: References: Message-ID: |The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update| On 8/4/20 10:22 PM, Paul Scott wrote: > > Hello, > > I am currently running on MailScanner v5.12, and would like to update > to the very latest version (v5.3.3-1). > > Upon clicking on the download link, I noticed that the only release > types for ?rhel? are rpms. > > When I last installed MailScanner, I downloaded the following package: > > MailScanner-5.1.2.-2.rhel.tar.gz > > This type of package is no longer available.? Please let me know what > I should do.? Thank you! > > Also, I noticed that, although it appears to be running on the system, > I am not seeing the usual messages that MailScanner puts in the > /var/log/maillog while processing. > > I had a power outage at the building where the server is hosted, and > it seems this issue started after that. > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Fri Aug 7 18:51:03 2020 From: sales at edenusa.com (Paul Scott) Date: Fri, 7 Aug 2020 18:51:03 +0000 Subject: Install Latest Version In-Reply-To: References: Message-ID: Hello Shawn, I went ahead and downloaded and tried installing the latest version, and got many of these types of warnings: Warning: prerequisite strictures 1 not found. Checking if your kit is complete... Looks good Generating a Unix-style Makefile Writing Makefile for MooX::StrictConstructor Writing MYMETA.yml and MYMETA.json ---- Unsatisfied dependencies detected during ---- ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- strictures [requires] Shall I follow them and prepend them to the queue of modules we are processing right now? [yes] Warning: no success downloading '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 Is this going to cause any problems? However, the install seemed to complete okay, and I restarted all of the necessary services, but I still do not ever see MailScanner processing any new emails as they come in. When I restarted MailScanner, and viewed the maillog, and all that I see is the standard startup banners, but after that, MailScanner never does anything. Aug 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor version 5.3.3 starting... Aug 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/conf.d/README Aug 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the phishing whitelist Aug 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the phishing blacklists Aug 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache Aug 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin cache database Aug 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin auto-whitelist functionality... Aug 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd Aug 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock Do you know what might be wrong? Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Wednesday, August 05, 2020 3:31 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update On 8/4/20 10:22 PM, Paul Scott wrote: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for "rhel" are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Fri Aug 7 18:59:07 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Fri, 7 Aug 2020 14:59:07 -0400 Subject: Install Latest Version In-Reply-To: References: Message-ID: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> First and foremost I would figure out why CPAN cannot download sources and once resolved and re-run ms-configure --update On 8/7/20 2:51 PM, Paul Scott wrote: > > Hello Shawn, > > I went ahead and downloaded and tried installing the latest version, > and got many of these types of warnings: > > Warning: prerequisite strictures 1 not found. > > Checking if your kit is complete... > > Looks good > > Generating a Unix-style Makefile > > Writing Makefile for MooX::StrictConstructor > > Writing MYMETA.yml and MYMETA.json > > ----?? Unsatisfied dependencies detected during?? ---- > > ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- > > ??? strictures [requires] > > Shall I follow them and prepend them to the queue > > of modules we are processing right now? [yes] > > Warning: no success downloading > '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. > Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 > > Is this going to cause any problems? > > However, the install seemed to complete okay, and I restarted all of > the necessary services, but I still do not ever see MailScanner > processing any new emails as they come in.? When I restarted > MailScanner, and viewed the maillog, and all that I see is the > standard startup banners, but after that, MailScanner never does anything. > > Aug? 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor > version 5.3.3 starting... > > Aug? 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/MailScanner.conf > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/conf.d/README > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the > phishing whitelist > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the > phishing blacklists > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin > cache database > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin > auto-whitelist functionality... > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing > Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the > Processing Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock > > Do you know what might be wrong? > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *Shawn Iverson via MailScanner > *Sent:* Wednesday, August 05, 2020 3:31 AM > *To:* mailscanner at lists.mailscanner.info > *Cc:* Shawn Iverson > *Subject:* Re: Install Latest Version > > |The distribution specific packages are no longer tarballs and are > distributed entirely as a package.| > || > |To update your system:| > || > |rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm| > |/usr/sbin/ms-configure --update| > > On 8/4/20 10:22 PM, Paul Scott wrote: > > Hello, > > I am currently running on MailScanner v5.12, and would like to > update to the very latest version (v5.3.3-1). > > Upon clicking on the download link, I noticed that the only > release types for ?rhel? are rpms. > > When I last installed MailScanner, I downloaded the following package: > > MailScanner-5.1.2.-2.rhel.tar.gz > > This type of package is no longer available.? Please let me know > what I should do.? Thank you! > > Also, I noticed that, although it appears to be running on the > system, I am not seeing the usual messages that MailScanner puts > in the /var/log/maillog while processing. > > I had a power outage at the building where the server is hosted, > and it seems this issue started after that. > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Fri Aug 7 19:06:47 2020 From: sales at edenusa.com (Paul Scott) Date: Fri, 7 Aug 2020 19:06:47 +0000 Subject: Install Latest Version In-Reply-To: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: Hello Shawn, I tried using cpanmin to download a CPAN module, and it worked okay: [root at fs9 ~]# cpanm XML::Parser::Lite --> Working on XML::Parser::Lite Fetching http://www.cpan.org/authors/id/P/PH/PHRED/XML-Parser-Lite-0.722.tar.gz ... OK Configuring XML-Parser-Lite-0.722 ... OK Building and testing XML-Parser-Lite-0.722 ... OK Successfully installed XML-Parser-Lite-0.722 1 distribution installed [root at fs9 ~]# Not sure what else to test or try, as the CPAN download mechanism that you use, is embedded somewhere in your install code. Do you have something for me to try out, so that I can find the underlying cause of this issue? Thank you very much! ? Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Friday, August 07, 2020 11:59 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version First and foremost I would figure out why CPAN cannot download sources and once resolved and re-run ms-configure --update On 8/7/20 2:51 PM, Paul Scott wrote: Hello Shawn, I went ahead and downloaded and tried installing the latest version, and got many of these types of warnings: Warning: prerequisite strictures 1 not found. Checking if your kit is complete... Looks good Generating a Unix-style Makefile Writing Makefile for MooX::StrictConstructor Writing MYMETA.yml and MYMETA.json ---- Unsatisfied dependencies detected during ---- ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- strictures [requires] Shall I follow them and prepend them to the queue of modules we are processing right now? [yes] Warning: no success downloading '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 Is this going to cause any problems? However, the install seemed to complete okay, and I restarted all of the necessary services, but I still do not ever see MailScanner processing any new emails as they come in. When I restarted MailScanner, and viewed the maillog, and all that I see is the standard startup banners, but after that, MailScanner never does anything. Aug 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor version 5.3.3 starting... Aug 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/conf.d/README Aug 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the phishing whitelist Aug 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the phishing blacklists Aug 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache Aug 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin cache database Aug 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin auto-whitelist functionality... Aug 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd Aug 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock Do you know what might be wrong? Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Wednesday, August 05, 2020 3:31 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update On 8/4/20 10:22 PM, Paul Scott wrote: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for ?rhel? are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Fri Aug 7 19:37:06 2020 From: sales at edenusa.com (Paul Scott) Date: Fri, 7 Aug 2020 19:37:06 +0000 Subject: Install Latest Version In-Reply-To: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: Hello again Shawn, I just tried CPAN (not using cpanm), and found that it appears to be working okay: [root at fs9 ~]# cpan XML::Parser::Lite CPAN: Storable loaded ok (v2.20) Going to read '/root/.cpan/Metadata' Database was generated on Fri, 07 Aug 2020 17:29:03 GMT XML::Parser::Lite is up to date (0.722). [root at fs9 ~]# Not sure what I need to do to fix the install issues. I also do not understand why MailScanner is not showing anything in the maillog. Is there a setting in the .conf file for the logging level? Thank you for your help! Silncerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Friday, August 07, 2020 11:59 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version First and foremost I would figure out why CPAN cannot download sources and once resolved and re-run ms-configure --update On 8/7/20 2:51 PM, Paul Scott wrote: Hello Shawn, I went ahead and downloaded and tried installing the latest version, and got many of these types of warnings: Warning: prerequisite strictures 1 not found. Checking if your kit is complete... Looks good Generating a Unix-style Makefile Writing Makefile for MooX::StrictConstructor Writing MYMETA.yml and MYMETA.json ---- Unsatisfied dependencies detected during ---- ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- strictures [requires] Shall I follow them and prepend them to the queue of modules we are processing right now? [yes] Warning: no success downloading '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 Is this going to cause any problems? However, the install seemed to complete okay, and I restarted all of the necessary services, but I still do not ever see MailScanner processing any new emails as they come in. When I restarted MailScanner, and viewed the maillog, and all that I see is the standard startup banners, but after that, MailScanner never does anything. Aug 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor version 5.3.3 starting... Aug 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/conf.d/README Aug 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the phishing whitelist Aug 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the phishing blacklists Aug 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache Aug 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin cache database Aug 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin auto-whitelist functionality... Aug 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd Aug 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock Do you know what might be wrong? Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Wednesday, August 05, 2020 3:31 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update On 8/4/20 10:22 PM, Paul Scott wrote: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for "rhel" are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Fri Aug 7 23:42:36 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Fri, 7 Aug 2020 19:42:36 -0400 Subject: Install Latest Version In-Reply-To: References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: The ms-configure script uses the same cpan commands you are entering, so I'm surprised it isn't working properly.? You may try using cpan against Test::Needs, which is one you indicated that failed to download. These modules will affect SpamAssassin more than they'll affect MailScanner. MailScanner logs everything to maillog.? If you don't see anything it is because nothing is processing.? Verify that MailScanner can read the postfix/hold directory and that permissions look correct. On 8/7/20 3:37 PM, Paul Scott wrote: > > Hello again Shawn, > > I just tried CPAN (not using cpanm), and found that it appears to be > working okay: > > [root at fs9 ~]# cpan XML::Parser::Lite > > CPAN: Storable loaded ok (v2.20) > > Going to read '/root/.cpan/Metadata' > > ? Database was generated on Fri, 07 Aug 2020 17:29:03 GMT > > XML::Parser::Lite is up to date (0.722). > > [root at fs9 ~]# > > Not sure what I need to do to fix the install issues. > > I also do not understand why MailScanner is not showing anything in > the maillog.? Is there a setting in the .conf file for the logging level? > > Thank you for your help! > > Silncerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *Shawn Iverson via MailScanner > *Sent:* Friday, August 07, 2020 11:59 AM > *To:* mailscanner at lists.mailscanner.info > *Cc:* Shawn Iverson > *Subject:* Re: Install Latest Version > > First and foremost I would figure out why CPAN cannot download sources > and once resolved and re-run > > ms-configure --update > > On 8/7/20 2:51 PM, Paul Scott wrote: > > Hello Shawn, > > I went ahead and downloaded and tried installing the latest > version, and got many of these types of warnings: > > Warning: prerequisite strictures 1 not found. > > Checking if your kit is complete... > > Looks good > > Generating a Unix-style Makefile > > Writing Makefile for MooX::StrictConstructor > > Writing MYMETA.yml and MYMETA.json > > ----?? Unsatisfied dependencies detected during?? ---- > > ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- > > ??? strictures [requires] > > Shall I follow them and prepend them to the queue > > of modules we are processing right now? [yes] > > Warning: no success downloading > '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. > Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 > > Is this going to cause any problems? > > However, the install seemed to complete okay, and I restarted all > of the necessary services, but I still do not ever see MailScanner > processing any new emails as they come in.? When I restarted > MailScanner, and viewed the maillog, and all that I see is the > standard startup banners, but after that, MailScanner never does > anything. > > Aug? 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email > Processor version 5.3.3 starting... > > Aug? 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/MailScanner.conf > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/conf.d/README > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from > the phishing whitelist > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from > the phishing blacklists > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results > cache > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin > cache database > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin > auto-whitelist functionality... > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus > scanners: clamd > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing > Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the > Processing Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock > > Do you know what might be wrong? > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > > > *On Behalf Of *Shawn Iverson via MailScanner > *Sent:* Wednesday, August 05, 2020 3:31 AM > *To:* mailscanner at lists.mailscanner.info > > *Cc:* Shawn Iverson > > *Subject:* Re: Install Latest Version > > |The distribution specific packages are no longer tarballs and are > distributed entirely as a package.| > > || > > |To update your system:| > > || > > |rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm| > > |/usr/sbin/ms-configure --update| > > On 8/4/20 10:22 PM, Paul Scott wrote: > > Hello, > > I am currently running on MailScanner v5.12, and would like to > update to the very latest version (v5.3.3-1). > > Upon clicking on the download link, I noticed that the only > release types for ?rhel? are rpms. > > When I last installed MailScanner, I downloaded the following > package: > > MailScanner-5.1.2.-2.rhel.tar.gz > > This type of package is no longer available.? Please let me > know what I should do.? Thank you! > > Also, I noticed that, although it appears to be running on the > system, I am not seeing the usual messages that MailScanner > puts in the /var/log/maillog while processing. > > I had a power outage at the building where the server is > hosted, and it seems this issue started after that. > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > > > > > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Sat Aug 8 19:01:46 2020 From: sales at edenusa.com (Paul Scott) Date: Sat, 8 Aug 2020 19:01:46 +0000 Subject: Install Latest Version In-Reply-To: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: Hello Mailscanner list, Does anyone have a suggestion on what else I should do to fix this CPAN downloading issue? Again, if I run CPAN from the command line to perform a download, it works fine. It just doesn't seem to be working in the MailScanner install script. I don't know what this means: Warning: no success downloading '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 Anybody? Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Friday, August 07, 2020 11:59 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version First and foremost I would figure out why CPAN cannot download sources and once resolved and re-run ms-configure --update On 8/7/20 2:51 PM, Paul Scott wrote: Hello Shawn, I went ahead and downloaded and tried installing the latest version, and got many of these types of warnings: Warning: prerequisite strictures 1 not found. Checking if your kit is complete... Looks good Generating a Unix-style Makefile Writing Makefile for MooX::StrictConstructor Writing MYMETA.yml and MYMETA.json ---- Unsatisfied dependencies detected during ---- ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- strictures [requires] Shall I follow them and prepend them to the queue of modules we are processing right now? [yes] Is this going to cause any problems? However, the install seemed to complete okay, and I restarted all of the necessary services, but I still do not ever see MailScanner processing any new emails as they come in. When I restarted MailScanner, and viewed the maillog, and all that I see is the standard startup banners, but after that, MailScanner never does anything. Aug 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor version 5.3.3 starting... Aug 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/conf.d/README Aug 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the phishing whitelist Aug 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the phishing blacklists Aug 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache Aug 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin cache database Aug 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin auto-whitelist functionality... Aug 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd Aug 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock Do you know what might be wrong? Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Wednesday, August 05, 2020 3:31 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update On 8/4/20 10:22 PM, Paul Scott wrote: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for "rhel" are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Sat Aug 8 19:24:04 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sat, 8 Aug 2020 15:24:04 -0400 Subject: Install Latest Version In-Reply-To: References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: Are you able to install to install Test::Needs manually, out of curiosity, using cpan or cpanm? On 8/8/20 3:01 PM, Paul Scott wrote: > > Hello Mailscanner list, > > Does anyone have a suggestion on what else I should do to fix this > CPAN downloading issue? > > Again, if I run CPAN from the command line to perform a download, it > works fine. > > It just doesn?t seem to be working in the MailScanner install script.? > I don?t know what this means: > > Warning: no success downloading > '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. > Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 > > Anybody? > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *Shawn Iverson via MailScanner > *Sent:* Friday, August 07, 2020 11:59 AM > *To:* mailscanner at lists.mailscanner.info > *Cc:* Shawn Iverson > *Subject:* Re: Install Latest Version > > First and foremost I would figure out why CPAN cannot download sources > and once resolved and re-run > > ms-configure --update > > On 8/7/20 2:51 PM, Paul Scott wrote: > > Hello Shawn, > > I went ahead and downloaded and tried installing the latest > version, and got many of these types of warnings: > > Warning: prerequisite strictures 1 not found. > > Checking if your kit is complete... > > Looks good > > Generating a Unix-style Makefile > > Writing Makefile for MooX::StrictConstructor > > Writing MYMETA.yml and MYMETA.json > > ----?? Unsatisfied dependencies detected during?? ---- > > ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- > > ??? strictures [requires] > > Shall I follow them and prepend them to the queue > > of modules we are processing right now? [yes] > > Is this going to cause any problems? > > However, the install seemed to complete okay, and I restarted all > of the necessary services, but I still do not ever see MailScanner > processing any new emails as they come in.? When I restarted > MailScanner, and viewed the maillog, and all that I see is the > standard startup banners, but after that, MailScanner never does > anything. > > Aug? 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email > Processor version 5.3.3 starting... > > Aug? 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/MailScanner.conf > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file > /etc/MailScanner/conf.d/README > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from > the phishing whitelist > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from > the phishing blacklists > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results > cache > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin > cache database > > Aug? 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin > auto-whitelist functionality... > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus > scanners: clamd > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing > Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the > Processing Attempts Database > > Aug? 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock > > Do you know what might be wrong? > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > > > *On Behalf Of *Shawn Iverson via MailScanner > *Sent:* Wednesday, August 05, 2020 3:31 AM > *To:* mailscanner at lists.mailscanner.info > > *Cc:* Shawn Iverson > > *Subject:* Re: Install Latest Version > > |The distribution specific packages are no longer tarballs and are > distributed entirely as a package.| > > || > > |To update your system:| > > || > > |rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm| > > |/usr/sbin/ms-configure --update| > > On 8/4/20 10:22 PM, Paul Scott wrote: > > Hello, > > I am currently running on MailScanner v5.12, and would like to > update to the very latest version (v5.3.3-1). > > Upon clicking on the download link, I noticed that the only > release types for ?rhel? are rpms. > > When I last installed MailScanner, I downloaded the following > package: > > MailScanner-5.1.2.-2.rhel.tar.gz > > This type of package is no longer available.? Please let me > know what I should do.? Thank you! > > Also, I noticed that, although it appears to be running on the > system, I am not seeing the usual messages that MailScanner > puts in the /var/log/maillog while processing. > > I had a power outage at the building where the server is > hosted, and it seems this issue started after that. > > Thank you very much for your help. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > > > > > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Sun Aug 9 22:21:51 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 9 Aug 2020 22:21:51 +0000 Subject: Install Latest Version In-Reply-To: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> References: <7791742f-e532-b1b1-2309-bf9ed1204019@summitgrid.com> Message-ID: Okay, I was able to figure out why the CPAN issues were happening, and resolved it. If ICMP is disabled on our edge firewall (a Cisco ASA5540) for this particular machine, the MailScanner update process would fail. I ran the upgrade process again, and it worked without exhibiting any errors. However, MailScanner still does NOT seem to be working as it should, because each email that comes in, is simply handled by Sendmail only. MailScanner does not do anything, i.e., there is info in the maillog to indicate that it scanned the incoming email at all. It starts okay, and logs during startup, but after that, nothing. I have no idea what is going on. Where should I start, in debugging what is going on? Here is my system configuration: [root at fs9 log]# lsb_release -a LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-4.0-amd64:printing-4.0-noarch Distributor ID: CentOS Description: CentOS release 6.10 (Final) Release: 6.10 Codename: Final [root at fs9 log]# sendmail -d0.4 -bv root Version 8.14.4 Compiled with: DNSMAP HESIOD HES_GETMAILHOST LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING SASLv2 SCANF SOCKETMAP STARTTLS TCPWRAPPERS USERDB USE_LDAP_INIT Canonical name: fs9.edenhosting.net UUCP nodename: fs9.edenhosting.net ============ SYSTEM IDENTITY (after readcf) ============ (short domain name) $w = fs9 (canonical domain name) $j = fs9.edenhosting.net (subdomain name) $m = edenhosting.net (node name) $k = fs9.edenhosting.net ======================================================== root... deliverable: mailer local, user root [root at fs9 log]# And I am using dovecot for the email delivery. Please let me know what I can do to get MailScanner working again. Very much appreciated. Thank you! Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Friday, August 07, 2020 11:59 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version First and foremost I would figure out why CPAN cannot download sources and once resolved and re-run ms-configure --update On 8/7/20 2:51 PM, Paul Scott wrote: Hello Shawn, I went ahead and downloaded and tried installing the latest version, and got many of these types of warnings: Warning: prerequisite strictures 1 not found. Checking if your kit is complete... Looks good Generating a Unix-style Makefile Writing Makefile for MooX::StrictConstructor Writing MYMETA.yml and MYMETA.json ---- Unsatisfied dependencies detected during ---- ---- HARTZELL/MooX-StrictConstructor-0.011.tar.gz ---- strictures [requires] Shall I follow them and prepend them to the queue of modules we are processing right now? [yes] Warning: no success downloading '/root/.cpan/sources/authors/id/H/HA/HAARG/Test-Needs-0.002006.tar.gz.tmp18049'. Giving up on it. at /usr/share/perl5/CPAN/Distribution.pm line 379 Is this going to cause any problems? However, the install seemed to complete okay, and I restarted all of the necessary services, but I still do not ever see MailScanner processing any new emails as they come in. When I restarted MailScanner, and viewed the maillog, and all that I see is the standard startup banners, but after that, MailScanner never does anything. Aug 7 11:45:29 fs9 MailScanner[21876]: MailScanner Email Processor version 5.3.3 starting... Aug 7 11:45:29 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/MailScanner.conf Aug 7 11:45:30 fs9 MailScanner[21876]: Reading configuration file /etc/MailScanner/conf.d/README Aug 7 11:45:30 fs9 MailScanner[21876]: Read 1500 hostnames from the phishing whitelist Aug 7 11:45:30 fs9 MailScanner[21876]: Read 8463 hostnames from the phishing blacklists Aug 7 11:45:30 fs9 MailScanner[21876]: Using SpamAssassin results cache Aug 7 11:45:30 fs9 MailScanner[21876]: Connected to SpamAssassin cache database Aug 7 11:45:30 fs9 MailScanner[21876]: Enabling SpamAssassin auto-whitelist functionality... Aug 7 11:45:33 fs9 MailScanner[21876]: Auto: Found virus scanners: clamd Aug 7 11:45:33 fs9 MailScanner[21876]: Connected to Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Found 0 messages in the Processing Attempts Database Aug 7 11:45:33 fs9 MailScanner[21876]: Using locktype = flock Do you know what might be wrong? Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Wednesday, August 05, 2020 3:31 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Install Latest Version The distribution specific packages are no longer tarballs and are distributed entirely as a package. To update your system: rpm -Uvh MailScanner-5.3.3-1.rhel.noarch.rpm /usr/sbin/ms-configure --update On 8/4/20 10:22 PM, Paul Scott wrote: Hello, I am currently running on MailScanner v5.12, and would like to update to the very latest version (v5.3.3-1). Upon clicking on the download link, I noticed that the only release types for "rhel" are rpms. When I last installed MailScanner, I downloaded the following package: MailScanner-5.1.2.-2.rhel.tar.gz This type of package is no longer available. Please let me know what I should do. Thank you! Also, I noticed that, although it appears to be running on the system, I am not seeing the usual messages that MailScanner puts in the /var/log/maillog while processing. I had a power outage at the building where the server is hosted, and it seems this issue started after that. Thank you very much for your help. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Mon Aug 10 19:07:56 2020 From: sales at edenusa.com (Paul Scott) Date: Mon, 10 Aug 2020 19:07:56 +0000 Subject: MailScanner Lint Error Message-ID: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the "maillog" log file. It only shows its startup messages, and that's it. The process ID remains running, but MailScanner is effectively dead (doesn't do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner -lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don't know what this error means, or how to fix it-I did run "sa-update", and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From belle at bazuin.nl Mon Aug 10 19:54:14 2020 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Mon, 10 Aug 2020 21:54:14 +0200 Subject: MailScanner Lint Error Message-ID: I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root.? I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott : ? Hello MailScanner folks and friends: ? I continue to hammer away at trying to get MailScanner working again.? I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the ?maillog? log file.? It only shows its startup messages, and that?s it.? The process ID remains running, but MailScanner is effectively dead (doesn?t do any work).? I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. ? [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 ? running on Perl version 5.10.1 [root at fs9 log]# ? ? After that, I tried MailScanner ?lint, and had some issues, which I fixed, until I now have this result: ? [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) ? Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists ? Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. ? Your envelope_sender_header in spamassassin.conf is correct. ? Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" ? If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. ? I don?t know what this error means, or how to fix it?I did run ?sa-update?, and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update ? Can you please let me know how to fix this? ? ? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated.? I tried that, but it did NOT get recreated, not sure why.? Any ideas? ? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail.? I am having a great deal of trouble figure this out.? Please help.? Thank you very much! ? Sincerely, ? Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com ? ? ? -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Mon Aug 10 20:06:17 2020 From: sales at edenusa.com (Paul Scott) Date: Mon, 10 Aug 2020 20:06:17 +0000 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: Hello Louis, Thank you very much for your reply. This is turning out to be a very difficult issue to fix. I went in to the /etc/MailScanner/spamassassin.conf file, and found this option, and uncommented it: # =============== RBSL related items =============== # By default, SpamAssassin will run RBL checks. If your ISP already # does this, stop RBL checks in SpamAssassin by un-commenting the # following line skip_rbl_checks 1 I then ran the sa-update again, and then MailScanner -lint again, and now it's clean (see below-looking good). I also ran the spamassassin -D -lint command, and it produced a massive amount of output, which seemed to show that all was good. So, I think spamassassin is okay, and is working fine. Therefore, the only program still remaining is that MailScanner itself is not doing any processing of any incoming messages. That is, nothing at all is appearing in the maillog to indicate that MailScanner is processing messages. Any ideas what may be wrong? Thank you for your help! [root at fs9 MailScanner]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of L.P.H. van Belle via MailScanner Sent: Monday, August 10, 2020 12:54 PM To: mailscanner at lists.mailscanner.info Cc: L.P.H. van Belle Subject: Re: MailScanner Lint Error I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root. I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott >: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the "maillog" log file. It only shows its startup messages, and that's it. The process ID remains running, but MailScanner is effectively dead (doesn't do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner -lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don't know what this error means, or how to fix it-I did run "sa-update", and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Mon Aug 10 23:29:18 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 10 Aug 2020 19:29:18 -0400 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: I think my replies are falling on deaf ears... if someone could help Paul with sendmail & mailscanner, much appreciated.? I don't think he is getting my replies to the list, and direct replies are bouncing. On 8/10/20 4:06 PM, Paul Scott wrote: > > Hello Louis, > > Thank you very much for your reply.? This is turning out to be a very > difficult issue to fix. > > I went in to the /etc/MailScanner/spamassassin.conf file, and found > this option, and uncommented it: > > # =============== RBSL related items =============== > > # By default, SpamAssassin will run RBL checks.? If your ISP already > > # does this, stop RBL checks in SpamAssassin by un-commenting the > > # following line > > skip_rbl_checks 1 > > I then ran the sa-update again, and then MailScanner ?lint again, and > now it?s clean (see below?looking good). > > I also ran the spamassassin -D ?lint command, and it produced a > massive amount of output, which seemed to show that all was good. > > So, I think spamassassin is okay, and is working fine. > > Therefore, the only program still remaining is that MailScanner itself > is not doing any processing of any incoming messages. > > That is, nothing at all is appearing in the maillog to indicate that > MailScanner is processing messages. > > Any ideas what may be wrong? > > Thank you for your help! > > [root at fs9 MailScanner]# MailScanner --lint > > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > > Reading configuration file /etc/MailScanner/conf.d/README > > Read 1500 hostnames from the phishing whitelist > > Read 7949 hostnames from the phishing blacklists > > Checking version numbers... > > Version number in MailScanner.conf (5.3.3) is correct. > > Your envelope_sender_header in spamassassin.conf is correct. > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Using locktype = flock > > MailScanner.conf says "Virus Scanners = auto" > > Found these virus scanners installed: clamd > > =========================================================================== > > Filename Checks: Windows/DOS Executable (1 eicar.com) > > Other Checks: Found 1 problems > > Virus and Content Scanning: Starting > > Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com > > Virus Scanning: Clamd found 2 infections > > Infected message 1 came from 10.1.1.1 > > Virus Scanning: Found 2 viruses > > =========================================================================== > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" > > If any of your virus scanners (clamd) > > are not listed there, you should check that they are installed correctly > > and that MailScanner is finding them correctly via its > virus.scanners.conf. > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *L.P.H. van Belle via MailScanner > *Sent:* Monday, August 10, 2020 12:54 PM > *To:* mailscanner at lists.mailscanner.info > *Cc:* L.P.H. van Belle > *Subject:* Re: MailScanner Lint Error > > I don't know your running os, but on debian, running su-update is done > as the user running the service. > > i suspect wrong rights somewhere. > > i had it myself, also due running sa-update as root. > > I hope it helps. > > Greetz, > > Louis > > Op 10 aug. 2020 21:08 schreef Paul Scott >: > > > > Hello MailScanner folks and friends: > > > > I continue to hammer away at trying to get MailScanner working > again.? I managed to get the install to run without error, but I > still do not see MailScanner actively processing any SPAM at all > in the ?maillog? log file.? It only shows its startup messages, > and that?s it.? The process ID remains running, but MailScanner is > effectively dead (doesn?t do any work).? I also did successfully > use CPAN to upgrade Spam Assassin to the very latest version, just > now. > > > > [root at fs9 log]# spamassassin -V > > SpamAssassin version 3.4.4 > > ? running on Perl version 5.10.1 > > [root at fs9 log]# > > > > > > After that, I tried MailScanner ?lint, and had some issues, which > I fixed, until I now have this result: > > > > [root at fs9 ~]# MailScanner --lint > > Trying to setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > Reading configuration file /etc/MailScanner/conf.d/README > > Read 1500 hostnames from the phishing whitelist > > Read 7949 hostnames from the phishing blacklists > > > > Checking version numbers... > > Version number in MailScanner.conf (5.3.3) is correct. > > > > Your envelope_sender_header in spamassassin.conf is correct. > > > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > config: registryboundaries: no tlds defined, need to run sa-update > > SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Using locktype = flock > > MailScanner.conf says "Virus Scanners = auto" > > Found these virus scanners installed: clamd > > =========================================================================== > > > Filename Checks: Windows/DOS Executable (1 eicar.com) > > Other Checks: Found 1 problems > > Virus and Content Scanning: Starting > > Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com > > Virus Scanning: Clamd found 2 infections > > Infected message 1 came from 10.1.1.1 > > Virus Scanning: Found 2 viruses > > =========================================================================== > > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" > > > > If any of your virus scanners (clamd) > > are not listed there, you should check that they are installed > correctly > > and that MailScanner is finding them correctly via its > virus.scanners.conf. > > > > I don?t know what this error means, or how to fix it?I did run > ?sa-update?, and it did not fix it: > > config: registryboundaries: no tlds defined, need to run sa-update > > > > Can you please let me know how to fix this? > > > > > > Also, of interest, I read in the spamassassin.conf that there is a > Processing.db, that is in the /var/spool/MailScanner/incoming > folder, and to clear it, you delete it, and it should be recreated > when MailScanner is restarted, it will be recreated.? I tried > that, but it did NOT get recreated, not sure why.? Any ideas? > > > > The bottom line here is that MailScanner is not doing what it > should be doing, and that is scanning incoming mail.? I am having > a great deal of trouble figure this out.? Please help.? Thank you > very much! > > > > Sincerely, > > > > > > Paul Scott > Engineer, Eden USA, Incorporated > > 866.501.3336 | 951.505.6967 | sales at edenusa.com > > > https://www.edenusa.com > > > > > > > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Mon Aug 10 23:40:47 2020 From: sales at edenusa.com (Paul Scott) Date: Mon, 10 Aug 2020 23:40:47 +0000 Subject: MailScanner Lint Error In-Reply-To: References: , Message-ID: Well, I just received this email, no problem, but indeed it is the first that I've I've receieved from you since last week sometime. My direct email address is sales at edenusa.com. And I actually am deaf, having ruined my ears playing very loud concerts most of my life as a touring musician. I appreciate your help Shawn. Thank you. Get Outlook for Android ________________________________ From: MailScanner on behalf of Shawn Iverson via MailScanner Sent: Monday, August 10, 2020 4:29:18 PM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: MailScanner Lint Error I think my replies are falling on deaf ears... if someone could help Paul with sendmail & mailscanner, much appreciated. I don't think he is getting my replies to the list, and direct replies are bouncing. On 8/10/20 4:06 PM, Paul Scott wrote: Hello Louis, Thank you very much for your reply. This is turning out to be a very difficult issue to fix. I went in to the /etc/MailScanner/spamassassin.conf file, and found this option, and uncommented it: # =============== RBSL related items =============== # By default, SpamAssassin will run RBL checks. If your ISP already # does this, stop RBL checks in SpamAssassin by un-commenting the # following line skip_rbl_checks 1 I then ran the sa-update again, and then MailScanner ?lint again, and now it?s clean (see below?looking good). I also ran the spamassassin -D ?lint command, and it produced a massive amount of output, which seemed to show that all was good. So, I think spamassassin is okay, and is working fine. Therefore, the only program still remaining is that MailScanner itself is not doing any processing of any incoming messages. That is, nothing at all is appearing in the maillog to indicate that MailScanner is processing messages. Any ideas what may be wrong? Thank you for your help! [root at fs9 MailScanner]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of L.P.H. van Belle via MailScanner Sent: Monday, August 10, 2020 12:54 PM To: mailscanner at lists.mailscanner.info Cc: L.P.H. van Belle Subject: Re: MailScanner Lint Error I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root. I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott >: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the ?maillog? log file. It only shows its startup messages, and that?s it. The process ID remains running, but MailScanner is effectively dead (doesn?t do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner ?lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don?t know what this error means, or how to fix it?I did run ?sa-update?, and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Tue Aug 11 01:02:37 2020 From: sales at edenusa.com (Paul Scott) Date: Tue, 11 Aug 2020 01:02:37 +0000 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: Oh, and the running OS is CentOS 6. Sorry, I should have put that in the email. Thank you! [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of L.P.H. van Belle via MailScanner Sent: Monday, August 10, 2020 12:54 PM To: mailscanner at lists.mailscanner.info Cc: L.P.H. van Belle Subject: Re: MailScanner Lint Error I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root. I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott >: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the "maillog" log file. It only shows its startup messages, and that's it. The process ID remains running, but MailScanner is effectively dead (doesn't do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner -lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don't know what this error means, or how to fix it-I did run "sa-update", and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From belle at bazuin.nl Tue Aug 11 07:10:16 2020 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Tue, 11 Aug 2020 09:10:16 +0200 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: Hai Paul, ? I've had a better look here on my Debian Buster system. ? ? If i compair my MailScanner --lint output. im missing some part in yours. Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. ? Your envelope_sender_header in spamassassin.conf is correct. MailScanner setting GID to? (113)??????? <<<<<<< MailScanner setting UID to? (108)??????? <<<<<<< Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache ..... im running it all as user postfix? with these as member in mtagroup. mtagroup:x:1001:clamav,Debian-exim,postfix,mail,www-data clamav:x:119:postfix ssl-cert:x:112:postfix check which user your MTA is running, and setup the new config. /etc/MailScanner/conf.d/01-mycompanysettings.conf ? Run As User =?YourServiceUsers Run As?Group = YourServiceUsers ? so im still thinking your rights are off somewhere. If you?ever changed the MailScanner.conf, revert it back to defaults and add you settings in a seperated files as shown. i would suggest, backup the old config file. install the new one dont change it. make of copy of the new one (clean on) ?and add one in /etc/MailScanner/conf.d/01-mycompanysettings.conf???and only change whats needed there ? ? On the "CPAN" upgrade of SpamAssassin. I then do hope you removed the "packages" or set it to hold, because what if .... you now get an upgrade of SpamAssassin packages.. I dont know Centos that good. ? Review you MailScanner.conf settings but start with a clean file. Remove the updated spamassassin and use the system packaged one. but since your using Centos-6 well, upgrade it. yes, you are "maintained" but that stops in 3,5 months. Dont wait it out, this is the chance to start fresh, but thats my advice. ? See how far you get. Can you also ( on a next attempt to make it run) post a output of the mail.log. Dont neeed it all, only the MailScanner/Spamassassin parts ? So far, Sorry for later reply, my previous we i think 15m before i feel a sleep. ;-) ? ? Greetz, ? Louis ? Van: MailScanner [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.info] Namens Paul Scott Verzonden: maandag 10 augustus 2020 21:08 Aan: MailScanner Discussion Onderwerp: MailScanner Lint Error ? Hello MailScanner folks and friends: ? I continue to hammer away at trying to get MailScanner working again.? I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the ?maillog? log file.? It only shows its startup messages, and that?s it.? The process ID remains running, but MailScanner is effectively dead (doesn?t do any work).? I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. ? [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 ? running on Perl version 5.10.1 [root at fs9 log]# ? ? After that, I tried MailScanner ?lint, and had some issues, which I fixed, until I now have this result: ? [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) ? Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists ? Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. ? Your envelope_sender_header in spamassassin.conf is correct. ????? HERE WE ARE MISSING OUTPUT. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update????<<<< ?this one is one i am missing ..??i get : internal error, python traceback seen in response SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" ? If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. ? I don?t know what this error means, or how to fix it?I did run ?sa-update?, and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update ? Can you please let me know how to fix this? ? ? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated.? I tried that, but it did NOT get recreated, not sure why.? Any ideas? ? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail.? I am having a great deal of trouble figure this out.? Please help.? Thank you very much! ? Sincerely, ? Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com ? ? ? -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailinglists at feedmebits.nl Tue Aug 11 07:15:18 2020 From: mailinglists at feedmebits.nl (Maarten) Date: Tue, 11 Aug 2020 09:15:18 +0200 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: <34f7e1efef8a322613d3cfe15ff2a0d1@feedmebits.nl> Centos 6 EOL is 30-11-2020, be aware that you won't receive any more updates after that. On 2020-08-11 03:02, Paul Scott wrote: > Oh, and the running OS is CentOS 6. Sorry, I should have put that in > the email. > > Thank you! > > Paul Scott > Engineer, Eden USA, Incorporated > > 866.501.3336 [1] | 951.505.6967 [2] | sales at edenusa.com > > https://www.edenusa.com [3] > > From: MailScanner > On > Behalf Of L.P.H. van Belle via MailScanner > Sent: Monday, August 10, 2020 12:54 PM > To: mailscanner at lists.mailscanner.info > Cc: L.P.H. van Belle > Subject: Re: MailScanner Lint Error > > I don't know your running os, but on debian, running su-update is done > as the user running the service. > > i suspect wrong rights somewhere. > > i had it myself, also due running sa-update as root. > > I hope it helps. > > Greetz, > > Louis > > Op 10 aug. 2020 21:08 schreef Paul Scott : > >> Hello MailScanner folks and friends: >> >> I continue to hammer away at trying to get MailScanner working >> again. I managed to get the install to run without error, but I >> still do not see MailScanner actively processing any SPAM at all in >> the "maillog" log file. It only shows its startup messages, and >> that's it. The process ID remains running, but MailScanner is >> effectively dead (doesn't do any work). I also did successfully use >> CPAN to upgrade Spam Assassin to the very latest version, just now. >> >> [root at fs9 log]# spamassassin -V >> >> SpamAssassin version 3.4.4 >> >> running on Perl version 5.10.1 >> >> [root at fs9 log]# >> >> After that, I tried MailScanner -lint, and had some issues, which I >> fixed, until I now have this result: >> >> [root at fs9 ~]# MailScanner --lint >> >> Trying to setlogsock(unix) >> >> Reading configuration file /etc/MailScanner/MailScanner.conf >> >> Reading configuration file /etc/MailScanner/conf.d/README >> >> Read 1500 hostnames from the phishing whitelist >> >> Read 7949 hostnames from the phishing blacklists >> >> Checking version numbers... >> >> Version number in MailScanner.conf (5.3.3) is correct. >> >> Your envelope_sender_header in spamassassin.conf is correct. >> >> Checking for SpamAssassin errors (if you use it)... >> >> Using SpamAssassin results cache >> >> Connected to SpamAssassin cache database >> >> config: registryboundaries: no tlds defined, need to run sa-update >> >> SpamAssassin reported no errors. >> >> Auto: Found virus scanners: clamd >> >> Using locktype = flock >> >> MailScanner.conf says "Virus Scanners = auto" >> >> Found these virus scanners installed: clamd >> >> > =========================================================================== >> >> >> Filename Checks: Windows/DOS Executable (1 eicar.com) >> >> Other Checks: Found 1 problems >> >> Virus and Content Scanning: Starting >> >> Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com >> >> Virus Scanning: Clamd found 2 infections >> >> Infected message 1 came from 10.1.1.1 >> >> Virus Scanning: Found 2 viruses >> >> > =========================================================================== >> >> >> Virus Scanner test reports: >> >> Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" >> >> If any of your virus scanners (clamd) >> >> are not listed there, you should check that they are installed >> correctly >> >> and that MailScanner is finding them correctly via its >> virus.scanners.conf. >> >> I don't know what this error means, or how to fix it--I did run >> "sa-update", and it did not fix it: >> >> config: registryboundaries: no tlds defined, need to run sa-update >> >> Can you please let me know how to fix this? >> >> Also, of interest, I read in the spamassassin.conf that there is a >> Processing.db, that is in the /var/spool/MailScanner/incoming >> folder, and to clear it, you delete it, and it should be recreated >> when MailScanner is restarted, it will be recreated. I tried that, >> but it did NOT get recreated, not sure why. Any ideas? >> >> The bottom line here is that MailScanner is not doing what it should >> be doing, and that is scanning incoming mail. I am having a great >> deal of trouble figure this out. Please help. Thank you very much! >> >> >> Sincerely, >> >> Paul Scott >> Engineer, Eden USA, Incorporated >> >> 866.501.3336 | 951.505.6967 | sales at edenusa.com >> >> https://www.edenusa.com > > > > Links: > ------ > [1] tel:866.501.3336 > [2] tel:951.505.6967 > [3] https://www.edenusa.com/ From shawniverson at summitgrid.com Tue Aug 11 09:29:31 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Tue, 11 Aug 2020 05:29:31 -0400 Subject: MailScanner Lint Error In-Reply-To: References: Message-ID: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Are you running sendmail? If so... chkconfig sendmail off chkconfig sm-client off chkconfig ms-sendmail on service ms-sendmail start On 8/10/20 9:02 PM, Paul Scott wrote: > > Oh, and the running OS is CentOS 6.? Sorry, I should have put that in > the email. > > Thank you! > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *L.P.H. van Belle via MailScanner > *Sent:* Monday, August 10, 2020 12:54 PM > *To:* mailscanner at lists.mailscanner.info > *Cc:* L.P.H. van Belle > *Subject:* Re: MailScanner Lint Error > > I don't know your running os, but on debian, running su-update is done > as the user running the service. > > i suspect wrong rights somewhere. > > i had it myself, also due running sa-update as root. > > I hope it helps. > > Greetz, > > Louis > > Op 10 aug. 2020 21:08 schreef Paul Scott >: > > > > Hello MailScanner folks and friends: > > > > I continue to hammer away at trying to get MailScanner working > again.? I managed to get the install to run without error, but I > still do not see MailScanner actively processing any SPAM at all > in the ?maillog? log file.? It only shows its startup messages, > and that?s it.? The process ID remains running, but MailScanner is > effectively dead (doesn?t do any work).? I also did successfully > use CPAN to upgrade Spam Assassin to the very latest version, just > now. > > > > [root at fs9 log]# spamassassin -V > > SpamAssassin version 3.4.4 > > ? running on Perl version 5.10.1 > > [root at fs9 log]# > > > > > > After that, I tried MailScanner ?lint, and had some issues, which > I fixed, until I now have this result: > > > > [root at fs9 ~]# MailScanner --lint > > Trying to setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > Reading configuration file /etc/MailScanner/conf.d/README > > Read 1500 hostnames from the phishing whitelist > > Read 7949 hostnames from the phishing blacklists > > > > Checking version numbers... > > Version number in MailScanner.conf (5.3.3) is correct. > > > > Your envelope_sender_header in spamassassin.conf is correct. > > > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > config: registryboundaries: no tlds defined, need to run sa-update > > SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Using locktype = flock > > MailScanner.conf says "Virus Scanners = auto" > > Found these virus scanners installed: clamd > > =========================================================================== > > > Filename Checks: Windows/DOS Executable (1 eicar.com) > > Other Checks: Found 1 problems > > Virus and Content Scanning: Starting > > Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com > > Virus Scanning: Clamd found 2 infections > > Infected message 1 came from 10.1.1.1 > > Virus Scanning: Found 2 viruses > > =========================================================================== > > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" > > > > If any of your virus scanners (clamd) > > are not listed there, you should check that they are installed > correctly > > and that MailScanner is finding them correctly via its > virus.scanners.conf. > > > > I don?t know what this error means, or how to fix it?I did run > ?sa-update?, and it did not fix it: > > config: registryboundaries: no tlds defined, need to run sa-update > > > > Can you please let me know how to fix this? > > > > > > Also, of interest, I read in the spamassassin.conf that there is a > Processing.db, that is in the /var/spool/MailScanner/incoming > folder, and to clear it, you delete it, and it should be recreated > when MailScanner is restarted, it will be recreated.? I tried > that, but it did NOT get recreated, not sure why.? Any ideas? > > > > The bottom line here is that MailScanner is not doing what it > should be doing, and that is scanning incoming mail.? I am having > a great deal of trouble figure this out.? Please help.? Thank you > very much! > > > > Sincerely, > > > > > > Paul Scott > Engineer, Eden USA, Incorporated > > 866.501.3336 | 951.505.6967 | sales at edenusa.com > > > https://www.edenusa.com > > > > > > > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Wed Aug 12 02:51:08 2020 From: sales at edenusa.com (Paul Scott) Date: Wed, 12 Aug 2020 02:51:08 +0000 Subject: MailScanner Lint Error In-Reply-To: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: Hello Shawn, Awesome! That did the trick! I am not sure of the reason why, but it appears that ms-sendmail starts a different sendmail configuration? I used to have a startup script that restarted mailscanner and sendmail all together in one swoop. Do you know where I could get that? I had a perfectly good working configuration, and the building had a total blackout, and this somehow wacked my firewall, this server, and an Exchange server. Also, do you know of a good reference on how to install DCC and Pyzor? Thank you again for your assistance. It is very much appreciated. I'll be sure to donate on your site. Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Tuesday, August 11, 2020 2:30 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: MailScanner Lint Error Are you running sendmail? If so... chkconfig sendmail off chkconfig sm-client off chkconfig ms-sendmail on service ms-sendmail start On 8/10/20 9:02 PM, Paul Scott wrote: Oh, and the running OS is CentOS 6. Sorry, I should have put that in the email. Thank you! [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of L.P.H. van Belle via MailScanner Sent: Monday, August 10, 2020 12:54 PM To: mailscanner at lists.mailscanner.info Cc: L.P.H. van Belle Subject: Re: MailScanner Lint Error I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root. I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott >: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the "maillog" log file. It only shows its startup messages, and that's it. The process ID remains running, but MailScanner is effectively dead (doesn't do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner -lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don't know what this error means, or how to fix it-I did run "sa-update", and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Wed Aug 12 20:29:13 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Wed, 12 Aug 2020 16:29:13 -0400 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: <2e182ca1-ff68-3298-da12-6264b4a634f3@summitgrid.com> MailScanner was decoupled from sendmail quite a while ago on RedHat-based systems. The old v4 script no longer works. As for DCC and Pyzor, I can probably did some notes up for you on my installations. On 8/11/20 10:51 PM, Paul Scott wrote: > Hello Shawn, > > Awesome!? That did the trick!? I am not sure of the reason why, but it > appears that ms-sendmail starts a different sendmail configuration? > > I used to have a startup script that restarted mailscanner and > sendmail all together in one swoop. Do you know where I could get that? > > I had a perfectly good working configuration, and the building had a > total blackout, and this somehow wacked my firewall, this server, and > an Exchange server. > > Also, do you know of a good reference on how to install DCC and Pyzor? > > Thank you again for your assistance.? It is very much appreciated.? > I?ll be sure to donate on your site. > > Sincerely, > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > *On > Behalf Of *Shawn Iverson via MailScanner > *Sent:* Tuesday, August 11, 2020 2:30 AM > *To:* mailscanner at lists.mailscanner.info > *Cc:* Shawn Iverson > *Subject:* Re: MailScanner Lint Error > > Are you running sendmail? If so... > > chkconfig sendmail off > > chkconfig sm-client off > > chkconfig ms-sendmail on > > service ms-sendmail start > > On 8/10/20 9:02 PM, Paul Scott wrote: > > Oh, and the running OS is CentOS 6. Sorry, I should have put that > in the email. > > Thank you! > > photo > > > > > *Paul Scott* > Engineer, Eden USA, Incorporated > > 866.501.3336 |951.505.6967 > |sales at edenusa.com > > https://www.edenusa.com > > > *From:* MailScanner > > > *On Behalf Of *L.P.H. van Belle via MailScanner > *Sent:* Monday, August 10, 2020 12:54 PM > *To:* mailscanner at lists.mailscanner.info > > *Cc:* L.P.H. van Belle > *Subject:* Re: MailScanner Lint Error > > I don't know your running os, but on debian, running su-update is > done as the user running the service. > > i suspect wrong rights somewhere. > > i had it myself, also due running sa-update as root. > > I hope it helps. > > Greetz, > > Louis > > Op 10 aug. 2020 21:08 schreef Paul Scott >: > > > > Hello MailScanner folks and friends: > > > > I continue to hammer away at trying to get MailScanner working > again.? I managed to get the install to run without error, but > I still do not see MailScanner actively processing any SPAM at > all in the ?maillog? log file.? It only shows its startup > messages, and that?s it.? The process ID remains running, but > MailScanner is effectively dead (doesn?t do any work).? I also > did successfully use CPAN to upgrade Spam Assassin to the very > latest version, just now. > > > > [root at fs9 log]# spamassassin -V > > SpamAssassin version 3.4.4 > > ? running on Perl version 5.10.1 > > [root at fs9 log]# > > > > > > After that, I tried MailScanner ?lint, and had some issues, > which I fixed, until I now have this result: > > > > [root at fs9 ~]# MailScanner --lint > > Trying to setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > Reading configuration file /etc/MailScanner/conf.d/README > > Read 1500 hostnames from the phishing whitelist > > Read 7949 hostnames from the phishing blacklists > > > > Checking version numbers... > > Version number in MailScanner.conf (5.3.3) is correct. > > > > Your envelope_sender_header in spamassassin.conf is correct. > > > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > config: registryboundaries: no tlds defined, need to run > sa-update > > SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Using locktype = flock > > MailScanner.conf says "Virus Scanners = auto" > > Found these virus scanners installed: clamd > > =========================================================================== > > > Filename Checks: Windows/DOS Executable (1 eicar.com) > > Other Checks: Found 1 problems > > Virus and Content Scanning: Starting > > Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com > > Virus Scanning: Clamd found 2 infections > > Infected message 1 came from 10.1.1.1 > > Virus Scanning: Found 2 viruses > > =========================================================================== > > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" > > > > If any of your virus scanners (clamd) > > are not listed there, you should check that they are installed > correctly > > and that MailScanner is finding them correctly via its > virus.scanners.conf. > > > > I don?t know what this error means, or how to fix it?I did run > ?sa-update?, and it did not fix it: > > config: registryboundaries: no tlds defined, need to run > sa-update > > > > Can you please let me know how to fix this? > > > > > > Also, of interest, I read in the spamassassin.conf that there > is a Processing.db, that is in the > /var/spool/MailScanner/incoming folder, and to clear it, you > delete it, and it should be recreated when MailScanner is > restarted, it will be recreated.? I tried that, but it did NOT > get recreated, not sure why.? Any ideas? > > > > The bottom line here is that MailScanner is not doing what it > should be doing, and that is scanning incoming mail.? I am > having a great deal of trouble figure this out.? Please help.? > Thank you very much! > > > > Sincerely, > > > > > > Paul Scott > Engineer, Eden USA, Incorporated > > 866.501.3336 | 951.505.6967 | sales at edenusa.com > > > https://www.edenusa.com > > > > > > > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From 247amhosting at gmail.com Wed Aug 19 22:03:34 2020 From: 247amhosting at gmail.com (Support Team) Date: Thu, 20 Aug 2020 03:33:34 +0530 Subject: MailScanner deleteing WordPress MySql database backup email Message-ID: Hello, WordPress MySql database backup email notification is getting blocked by mail scanner. This message has been rejected. The filters said this: Report: MailScanner: Could not analyze message This message contained potentially dangerous content which has been removed. Can you guide me on this in order to fix the issue? -------------- next part -------------- An HTML attachment was scrubbed... URL: From Antony.Stone at mailscanner.open.source.it Thu Aug 20 09:02:44 2020 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Thu, 20 Aug 2020 11:02:44 +0200 Subject: MailScanner deleting WordPress MySql database backup email In-Reply-To: References: Message-ID: <202008201102.44301.Antony.Stone@mailscanner.open.source.it> On Thursday 20 August 2020 at 00:03:34, Support Team wrote: > Hello, > > WordPress MySql database backup email notification is getting blocked by > mail scanner. > > This message has been rejected. The filters said this: > Report: MailScanner: Could not analyze message > This message contained potentially dangerous content which has been > removed. > > > Can you guide me on this in order to fix the issue? What do you have in your config file for file type blocking and extension blocking? Antony. -- If at first you don't succeed, destroy all the evidence that you tried. Please reply to the list; please *don't* CC me. From rforeman at lsfiore.com Thu Aug 20 14:33:37 2020 From: rforeman at lsfiore.com (Robert Foreman) Date: Thu, 20 Aug 2020 14:33:37 +0000 Subject: Anti-phishing using FROM text field information? Message-ID: <2D88DF5005F21148A721DDC080F7C4E86395B8FF@FIORE-EXCH.lsfiore.com> I am trying to describe an anti-phishing technique with an official VALID_LIST, without using AI or statistical analysis. I don?t know why this hasn?t been implemented as an option for smaller organizations. * Define VALID_LIST[1]: "CEO Smith" * Define VALID_LIST[2]: "CEO Smith" Examine the mail header FROM. * Define VALID_LIST[1]: "CEO Smith" * Define VALID_LIST[2]: "CEO Smith" If a FROM ?Name? is found in VALID_LIST[any] and does NOT match any line in VALID_LIST, then DENY. I should not need to define invalid email addresses for ?CEO Smith?. * Example Invalid: "CEO Smith" Is this implemented anywhere? Am I completely wrong that this pseudocode example will not help stop phishing messages attempting to use the FROM field to impersonate people?s names? CONFIDENTIAL ? This message and any attachments are confidential, and intended only for the individual or entity named above. If you are not the intended recipient, please do not read, copy, use or disclose this communication to others; also please notify the sender by replying to this message, and then delete it from your system. Thank you. From rforeman at lsfiore.com Thu Aug 20 17:21:20 2020 From: rforeman at lsfiore.com (Robert Foreman) Date: Thu, 20 Aug 2020 17:21:20 +0000 Subject: Anti-phishing using FROM text field information? In-Reply-To: <2D88DF5005F21148A721DDC080F7C4E86395B8FF@FIORE-EXCH.lsfiore.com> References: <2D88DF5005F21148A721DDC080F7C4E86395B8FF@FIORE-EXCH.lsfiore.com> Message-ID: <2D88DF5005F21148A721DDC080F7C4E86395BA0F@FIORE-EXCH.lsfiore.com> Sorry, I duplicated the VALID_LIST examples. If a FROM ?Name? is found in VALID_LIST[any] and does NOT match any line in VALID_LIST, then DENY. I should not need to define all possible invalid email addresses for ?CEO Smith?. No AI or Bayes algorithm is needed. * Example Invalid: "CEO Smith" For small organizations with a limited number of people, including outside contacts, it should not be difficult to implement and avoid a large number of impersonation attacks. CONFIDENTIAL ? This message and any attachments are confidential, and intended only for the individual or entity named above. If you are not the intended recipient, please do not read, copy, use or disclose this communication to others; also please notify the sender by replying to this message, and then delete it from your system. Thank you. From mailscanner at replies.cyways.com Thu Aug 20 18:03:45 2020 From: mailscanner at replies.cyways.com (Peter H. Lemieux) Date: Thu, 20 Aug 2020 14:03:45 -0400 Subject: Anti-phishing using FROM text field information? In-Reply-To: <2D88DF5005F21148A721DDC080F7C4E86395BA0F@FIORE-EXCH.lsfiore.com> References: <2D88DF5005F21148A721DDC080F7C4E86395B8FF@FIORE-EXCH.lsfiore.com> <2D88DF5005F21148A721DDC080F7C4E86395BA0F@FIORE-EXCH.lsfiore.com> Message-ID: <5874f6c0-adae-62c6-6df5-3909828d1831@cyways.com> I generally handle situations like this with SpamAssassin rules. I'd give a negative score to messages with realname at realdomain and a larger positive score to messages with "CEO Smith" in the From line. header REAL_PEOPLE From =~ /mydomain\.com/i score REAL_PEOPLE -5 header PHONY_CEO From =~ /CEO Smith/ score PHONY_CEO 15 Don't know if this would help with your problem. To avoid spoofing I also have a rule on my inbound server that blocks messages arriving from outside allegedly from mydomain.com. That may not work for you if your users can send mail from outside the network with their actual addresses. Peter On 8/20/20 1:21 PM, Robert Foreman wrote: > Sorry, I duplicated the VALID_LIST examples. > > If a FROM ?Name? is found in VALID_LIST[any] and does NOT match any line in VALID_LIST, then DENY. > > I should not need to define all possible invalid email addresses for ?CEO Smith?. No AI or Bayes algorithm is needed. > * Example Invalid: "CEO Smith" > > For small organizations with a limited number of people, including outside contacts, it should not be difficult to implement and avoid a large number of impersonation attacks. From 247amhosting at gmail.com Thu Aug 20 18:26:27 2020 From: 247amhosting at gmail.com (Support Team) Date: Thu, 20 Aug 2020 23:56:27 +0530 Subject: MailScanner deleting WordPress MySql database backup email In-Reply-To: <202008201102.44301.Antony.Stone@mailscanner.open.source.it> References: <202008201102.44301.Antony.Stone@mailscanner.open.source.it> Message-ID: Hi, The filetype rules' and archive filetype rules' conf contain the following respectively: https://imgur.com/FYn7Y5i https://imgur.com/jZA2tKH Is this the one you are looking for? Or else, if this is some other directive in mailscanner conf, let me know the entry to look. On Thu, Aug 20, 2020 at 2:33 PM Antony Stone < Antony.Stone at mailscanner.open.source.it> wrote: > On Thursday 20 August 2020 at 00:03:34, Support Team wrote: > > > Hello, > > > > WordPress MySql database backup email notification is getting blocked by > > mail scanner. > > > > This message has been rejected. The filters said this: > > Report: MailScanner: Could not analyze message > > This message contained potentially dangerous content which has been > > removed. > > > > > > Can you guide me on this in order to fix the issue? > > What do you have in your config file for file type blocking and extension > blocking? > > > Antony. > > -- > If at first you don't succeed, destroy all the evidence that you tried. > > Please reply to the > list; > please *don't* CC > me. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From 247amhosting at gmail.com Fri Aug 21 17:19:55 2020 From: 247amhosting at gmail.com (Support Team) Date: Fri, 21 Aug 2020 22:49:55 +0530 Subject: MailScanner deleting WordPress MySql database backup email In-Reply-To: References: <202008201102.44301.Antony.Stone@mailscanner.open.source.it> Message-ID: Hello, Any updates on this? On Thu, Aug 20, 2020 at 11:56 PM Support Team <247amhosting at gmail.com> wrote: > Hi, > > The filetype rules' and archive filetype rules' conf contain the following > respectively: > > https://imgur.com/FYn7Y5i > https://imgur.com/jZA2tKH > > Is this the one you are looking for? > Or else, if this is some other directive in mailscanner conf, let me know > the entry to look. > > > On Thu, Aug 20, 2020 at 2:33 PM Antony Stone < > Antony.Stone at mailscanner.open.source.it> wrote: > >> On Thursday 20 August 2020 at 00:03:34, Support Team wrote: >> >> > Hello, >> > >> > WordPress MySql database backup email notification is getting blocked by >> > mail scanner. >> > >> > This message has been rejected. The filters said this: >> > Report: MailScanner: Could not analyze message >> > This message contained potentially dangerous content which has been >> > removed. >> > >> > >> > Can you guide me on this in order to fix the issue? >> >> What do you have in your config file for file type blocking and extension >> blocking? >> >> >> Antony. >> >> -- >> If at first you don't succeed, destroy all the evidence that you tried. >> >> Please reply to the >> list; >> please *don't* >> CC me. >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Sun Aug 23 18:15:51 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 18:15:51 +0000 Subject: MailScanner Lint Error In-Reply-To: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: Hello, While trying to get this all working again, I decided to install MailWatch, and after a long and ardous installation process, finally got it to mostly work, but have found (using phpMyAdmin), that nothing is getting written to the database tables, and I cannot login to the MailWatch interface. So there seems to be a MySQL database connection issue, but for the life of me, I cannot figure it out. I tried running the upgrade.php script again to see if it would reveal anything, and here is the output: [root at fs9 MailWatch-1.2.10]# php upgrade.php Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) So, I checked the status, and it is running okay: [root at fs9 MailWatch-1.2.10]# service mysqld status mysqld (pid 12946) is running... Tried restarting it, and then ran upgrade.php again, and received the same error. Any ideas as to where I can start looking to get this working? Thank you very much! Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Tuesday, August 11, 2020 2:30 AM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: MailScanner Lint Error Are you running sendmail? If so... chkconfig sendmail off chkconfig sm-client off chkconfig ms-sendmail on service ms-sendmail start On 8/10/20 9:02 PM, Paul Scott wrote: Oh, and the running OS is CentOS 6. Sorry, I should have put that in the email. Thank you! [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of L.P.H. van Belle via MailScanner Sent: Monday, August 10, 2020 12:54 PM To: mailscanner at lists.mailscanner.info Cc: L.P.H. van Belle Subject: Re: MailScanner Lint Error I don't know your running os, but on debian, running su-update is done as the user running the service. i suspect wrong rights somewhere. i had it myself, also due running sa-update as root. I hope it helps. Greetz, Louis Op 10 aug. 2020 21:08 schreef Paul Scott >: Hello MailScanner folks and friends: I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the "maillog" log file. It only shows its startup messages, and that's it. The process ID remains running, but MailScanner is effectively dead (doesn't do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now. [root at fs9 log]# spamassassin -V SpamAssassin version 3.4.4 running on Perl version 5.10.1 [root at fs9 log]# After that, I tried MailScanner -lint, and had some issues, which I fixed, until I now have this result: [root at fs9 ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 1500 hostnames from the phishing whitelist Read 7949 hostnames from the phishing blacklists Checking version numbers... Version number in MailScanner.conf (5.3.3) is correct. Your envelope_sender_header in spamassassin.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database config: registryboundaries: no tlds defined, need to run sa-update SpamAssassin reported no errors. Auto: Found virus scanners: clamd Using locktype = flock MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. I don't know what this error means, or how to fix it-I did run "sa-update", and it did not fix it: config: registryboundaries: no tlds defined, need to run sa-update Can you please let me know how to fix this? Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas? The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much! Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailscanner at replies.cyways.com Sun Aug 23 18:37:01 2020 From: mailscanner at replies.cyways.com (Peter H. Lemieux) Date: Sun, 23 Aug 2020 14:37:01 -0400 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: What happens if you run "telnet localhost 3306"? Do you see Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. I don't use MailWatch, but does it connect to MySQL via a socket (typically /var/lib/mysql/mysql.sock) or via TCP on port 3306? Peter On 8/23/20 2:15 PM, Paul Scott wrote: > Error: Database connection failed: it is possible that the database is > overloaded or otherwise not running properly; contact the system > administrator if the problem persists (dbconnecterror99_plain) From sales at edenusa.com Sun Aug 23 19:14:44 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 19:14:44 +0000 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: Hello Peter, Thank you very much for your email! I tried your suggestion, and this is what came back: [root at fs9 MailWatch-1.2.10]# telnet localhost 3306 Trying ::1... telnet: connect to address ::1: Connection refused Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. J 5.5.55;xm:wi*?]];O[Z57Rv!9mysql_native_passwordConnection closed by foreign host. [root at fs9 MailWatch-1.2.10]# So, I do get connected via the localhost address, BUT...if I try the server's actual IP address, this is what I get: [root at fs9 MailWatch-1.2.10]# telnet 10.1.252.245 3306 Trying 10.1.252.245... Connected to 10.1.252.245. Escape character is '^]'. THost 'edenusa-fs9.edenhosting.net' is not allowed to connect to this MySQL serverConnection closed by foreign host. [root at fs9 MailWatch-1.2.10]# So maybe that's the issue? Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -----Original Message----- From: MailScanner On Behalf Of Peter H. Lemieux Sent: Sunday, August 23, 2020 11:37 AM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error What happens if you run "telnet localhost 3306"? Do you see Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. I don't use MailWatch, but does it connect to MySQL via a socket (typically /var/lib/mysql/mysql.sock) or via TCP on port 3306? Peter On 8/23/20 2:15 PM, Paul Scott wrote: > Error: Database connection failed: it is possible that the database is > overloaded or otherwise not running properly; contact the system > administrator if the problem persists (dbconnecterror99_plain) -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From shawniverson at summitgrid.com Sun Aug 23 19:19:45 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sun, 23 Aug 2020 15:19:45 -0400 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: So, what you have is IPv6 localhost taking precedence over IPv4 possibly.... Two ways to potentially resolve. One is to edit your /etc/hosts file so localhost resolves to IPv4 only Another is to bind to both ::1 and 127.0.0.1 for the database connection. I would say the first option is probably the quick and easy way. On 8/23/20 3:14 PM, Paul Scott wrote: > Hello Peter, > > Thank you very much for your email! > > I tried your suggestion, and this is what came back: > > [root at fs9 MailWatch-1.2.10]# telnet localhost 3306 > Trying ::1... > telnet: connect to address ::1: Connection refused > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > J > 5.5.55;xm:wi*?]];O[Z57Rv!9mysql_native_passwordConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So, I do get connected via the localhost address, BUT...if I try the server's actual IP address, this is what I get: > > [root at fs9 MailWatch-1.2.10]# telnet 10.1.252.245 3306 > Trying 10.1.252.245... > Connected to 10.1.252.245. > Escape character is '^]'. > THost 'edenusa-fs9.edenhosting.net' is not allowed to connect to this MySQL serverConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So maybe that's the issue? > > Sincerely, > > Paul Scott > Engineer, Eden USA, Incorporated > 866.501.3336 | 951.505.6967 | sales at edenusa.com > https://www.edenusa.com > > > > > > -----Original Message----- > From: MailScanner On Behalf Of Peter H. Lemieux > Sent: Sunday, August 23, 2020 11:37 AM > To: mailscanner at lists.mailscanner.info > Subject: Re: MailScanner Lint Error > > What happens if you run "telnet localhost 3306"? Do you see > > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > > I don't use MailWatch, but does it connect to MySQL via a socket > (typically /var/lib/mysql/mysql.sock) or via TCP on port 3306? > > Peter > > > On 8/23/20 2:15 PM, Paul Scott wrote: > >> Error: Database connection failed: it is possible that the database is >> overloaded or otherwise not running properly; contact the system >> administrator if the problem persists (dbconnecterror99_plain) > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailscanner at replies.cyways.com Sun Aug 23 19:28:10 2020 From: mailscanner at replies.cyways.com (Peter H. Lemieux) Date: Sun, 23 Aug 2020 15:28:10 -0400 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> Message-ID: <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> Most MySQL configurations default to listening only on localhost for security reasons. You have to insert a "bind-address=0.0.0.0" directive in my.cnf to make it listen on all interfaces. Peter On 8/23/20 3:14 PM, Paul Scott wrote: > Hello Peter, > > Thank you very much for your email! > > I tried your suggestion, and this is what came back: > > [root at fs9 MailWatch-1.2.10]# telnet localhost 3306 > Trying ::1... > telnet: connect to address ::1: Connection refused > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > J > 5.5.55;xm:wi*?]];O[Z57Rv!9mysql_native_passwordConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So, I do get connected via the localhost address, BUT...if I try the server's actual IP address, this is what I get: > > [root at fs9 MailWatch-1.2.10]# telnet 10.1.252.245 3306 > Trying 10.1.252.245... > Connected to 10.1.252.245. > Escape character is '^]'. > THost 'edenusa-fs9.edenhosting.net' is not allowed to connect to this MySQL serverConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So maybe that's the issue? > > Sincerely, > > Paul Scott > Engineer, Eden USA, Incorporated > 866.501.3336 | 951.505.6967 | sales at edenusa.com > https://www.edenusa.com > > > > > > -----Original Message----- > From: MailScanner On Behalf Of Peter H. Lemieux > Sent: Sunday, August 23, 2020 11:37 AM > To: mailscanner at lists.mailscanner.info > Subject: Re: MailScanner Lint Error > > What happens if you run "telnet localhost 3306"? Do you see > > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > > I don't use MailWatch, but does it connect to MySQL via a socket > (typically /var/lib/mysql/mysql.sock) or via TCP on port 3306? > > Peter > > > On 8/23/20 2:15 PM, Paul Scott wrote: > >> Error: Database connection failed: it is possible that the database is >> overloaded or otherwise not running properly; contact the system >> administrator if the problem persists (dbconnecterror99_plain) > > > > From sales at edenusa.com Sun Aug 23 20:25:29 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 20:25:29 +0000 Subject: MailScanner Lint Error In-Reply-To: <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> Message-ID: Hello Peter and Shawn, Thank you both for your assistance. Much appreciated. I did everything as suggested, but still could not get the telnet test to work, whilst using the machine's internal IP address. So I did the following: mysql> GRANT ALL ON *.* to root@'10.1.252.219' IDENTIFIED BY 'root'; Query OK, 0 rows affected (0.00 sec) mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) And lo-and-behold, I can now perform the telnet test, using the machine's IP address, as follows: [root at fs9 etc]# telnet 10.1.252.219 3306 Trying 10.1.252.219... Connected to 10.1.252.219. Escape character is '^]'. J 5.5.55D'6vs\U?h.KomT On Behalf Of Peter H. Lemieux Sent: Sunday, August 23, 2020 12:28 PM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error Most MySQL configurations default to listening only on localhost for security reasons. You have to insert a "bind-address=0.0.0.0" directive in my.cnf to make it listen on all interfaces. Peter On 8/23/20 3:14 PM, Paul Scott wrote: > Hello Peter, > > Thank you very much for your email! > > I tried your suggestion, and this is what came back: > > [root at fs9 MailWatch-1.2.10]# telnet localhost 3306 > Trying ::1... > telnet: connect to address ::1: Connection refused > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > J > 5.5.55;xm:wi*?]];O[Z57Rv!9mysql_native_passwordConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So, I do get connected via the localhost address, BUT...if I try the server's actual IP address, this is what I get: > > [root at fs9 MailWatch-1.2.10]# telnet 10.1.252.245 3306 > Trying 10.1.252.245... > Connected to 10.1.252.245. > Escape character is '^]'. > THost 'edenusa-fs9.edenhosting.net' is not allowed to connect to this MySQL serverConnection closed by foreign host. > [root at fs9 MailWatch-1.2.10]# > > So maybe that's the issue? > > Sincerely, > > Paul Scott > Engineer, Eden USA, Incorporated > 866.501.3336 | 951.505.6967 | sales at edenusa.com > https://www.edenusa.com > > > > > > -----Original Message----- > From: MailScanner On Behalf Of Peter H. Lemieux > Sent: Sunday, August 23, 2020 11:37 AM > To: mailscanner at lists.mailscanner.info > Subject: Re: MailScanner Lint Error > > What happens if you run "telnet localhost 3306"? Do you see > > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > > I don't use MailWatch, but does it connect to MySQL via a socket > (typically /var/lib/mysql/mysql.sock) or via TCP on port 3306? > > Peter > > > On 8/23/20 2:15 PM, Paul Scott wrote: > >> Error: Database connection failed: it is possible that the database is >> overloaded or otherwise not running properly; contact the system >> administrator if the problem persists (dbconnecterror99_plain) > > > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From mark at msapiro.net Sun Aug 23 20:39:34 2020 From: mark at msapiro.net (Mark Sapiro) Date: Sun, 23 Aug 2020 13:39:34 -0700 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> Message-ID: <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> On 8/23/20 1:25 PM, Paul Scott wrote: > > However, the same connection issue occurs when I try to run the upgrade.php script: > > [root at fs9 MailWatch-1.2.10]# php upgrade.php > Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) > [root at fs9 MailWatch-1.2.10]# I have no answer for this, but is there some reason this is being discussed here rather than on the MailWatch list? -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From sales at edenusa.com Sun Aug 23 20:46:16 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 20:46:16 +0000 Subject: MailScanner Lint Error In-Reply-To: <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> Message-ID: Hello Mark, Thank you for your email. I have tried putting questions up on the mailwatch list, but found that there is no activity. It was a few weeks ago, so I'll try again, and see if I get any bites. Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -----Original Message----- From: MailScanner On Behalf Of Mark Sapiro Sent: Sunday, August 23, 2020 1:40 PM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error On 8/23/20 1:25 PM, Paul Scott wrote: > > However, the same connection issue occurs when I try to run the upgrade.php script: > > [root at fs9 MailWatch-1.2.10]# php upgrade.php > Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) > [root at fs9 MailWatch-1.2.10]# I have no answer for this, but is there some reason this is being discussed here rather than on the MailWatch list? -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From sales at edenusa.com Sun Aug 23 21:25:10 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 21:25:10 +0000 Subject: MailScanner Lint Error In-Reply-To: <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> Message-ID: Hello Mark, Just an FYI, but the last activity on the MailWatch users list is 4-years ago, in 2016. I love using MailWatch with MailScanner, and had it up and running prior to upgrading to CentOS 6, but am not able to get it running this time around. The installation page is quite difficult to use, being that it has mistakes and omissions. It was a bit of a miracle that I even got this far...took many hours of wrangling, and I don't really want to give up on it just yet. Googling the subject isn't working. Trust me, I spend a great deal of time wrestling with things on my own before ever seeking assistance. Any help is very much appreciated. Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -----Original Message----- From: MailScanner On Behalf Of Mark Sapiro Sent: Sunday, August 23, 2020 1:40 PM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error On 8/23/20 1:25 PM, Paul Scott wrote: > > However, the same connection issue occurs when I try to run the upgrade.php script: > > [root at fs9 MailWatch-1.2.10]# php upgrade.php > Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) > [root at fs9 MailWatch-1.2.10]# I have no answer for this, but is there some reason this is being discussed here rather than on the MailWatch list? -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From shawniverson at summitgrid.com Sun Aug 23 21:59:28 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Sun, 23 Aug 2020 17:59:28 -0400 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> Message-ID: <22cb1220-bcc7-223a-69f6-8cc08a896abe@summitgrid.com> Paul, The latest post to Mailwatch-users was July 23rd, 2020. I encourage you to post there as it is indeed active. I don't mind helping, but this is starting to get deeper into MailWatch itself and less so with MailScanner. :) On 8/23/20 5:25 PM, Paul Scott wrote: > Hello Mark, > > Just an FYI, but the last activity on the MailWatch users list is 4-years ago, in 2016. I love using MailWatch with MailScanner, and had it up and running prior to upgrading to CentOS 6, but am not able to get it running this time around. The installation page is quite difficult to use, being that it has mistakes and omissions. It was a bit of a miracle that I even got this far...took many hours of wrangling, and I don't really want to give up on it just yet. Googling the subject isn't working. Trust me, I spend a great deal of time wrestling with things on my own before ever seeking assistance. Any help is very much appreciated. > > Sincerely, > > Paul Scott > Engineer, Eden USA, Incorporated > 866.501.3336 | 951.505.6967 | sales at edenusa.com > https://www.edenusa.com > > > > > > -----Original Message----- > From: MailScanner On Behalf Of Mark Sapiro > Sent: Sunday, August 23, 2020 1:40 PM > To: mailscanner at lists.mailscanner.info > Subject: Re: MailScanner Lint Error > > On 8/23/20 1:25 PM, Paul Scott wrote: >> However, the same connection issue occurs when I try to run the upgrade.php script: >> >> [root at fs9 MailWatch-1.2.10]# php upgrade.php >> Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) >> [root at fs9 MailWatch-1.2.10]# > > I have no answer for this, but is there some reason this is being > discussed here rather than on the MailWatch list? > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at msapiro.net Sun Aug 23 22:14:13 2020 From: mark at msapiro.net (Mark Sapiro) Date: Sun, 23 Aug 2020 15:14:13 -0700 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> Message-ID: On 8/23/20 2:25 PM, Paul Scott wrote: > Hello Mark, > > Just an FYI, but the last activity on the MailWatch users list is 4-years ago, in 2016. I don't use MailWatch and know very little about it, however, I think the error 99 comes from MySQL. It is not a failure to connect to the server, but rather a response from the server refusing the connection for some reason. If you look at the upgrade.php script and find the mysqli_connect call and duplicate that in a small script that displays the error as in the first example at , does that help? -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From sales at edenusa.com Sun Aug 23 22:47:22 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 22:47:22 +0000 Subject: MailScanner Lint Error In-Reply-To: <22cb1220-bcc7-223a-69f6-8cc08a896abe@summitgrid.com> References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> <22cb1220-bcc7-223a-69f6-8cc08a896abe@summitgrid.com> Message-ID: Hello Shawn, I agree that this is off the MailScanner train, and I am trying to use the MailWatch list. I didn?t see where the latest post was in 2020. Maybe that?s in the Developers area. I did post there first?I just don?t get any answers. If I figure this out, I will indeed update you on how I fixed it, and will also let the developers of MailWatch know. Thank you very much for your help! Sincerely, [photo] Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com From: MailScanner On Behalf Of Shawn Iverson via MailScanner Sent: Sunday, August 23, 2020 2:59 PM To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: MailScanner Lint Error Paul, The latest post to Mailwatch-users was July 23rd, 2020. I encourage you to post there as it is indeed active. I don't mind helping, but this is starting to get deeper into MailWatch itself and less so with MailScanner. :) On 8/23/20 5:25 PM, Paul Scott wrote: Hello Mark, Just an FYI, but the last activity on the MailWatch users list is 4-years ago, in 2016. I love using MailWatch with MailScanner, and had it up and running prior to upgrading to CentOS 6, but am not able to get it running this time around. The installation page is quite difficult to use, being that it has mistakes and omissions. It was a bit of a miracle that I even got this far...took many hours of wrangling, and I don't really want to give up on it just yet. Googling the subject isn't working. Trust me, I spend a great deal of time wrestling with things on my own before ever seeking assistance. Any help is very much appreciated. Sincerely, Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -----Original Message----- From: MailScanner On Behalf Of Mark Sapiro Sent: Sunday, August 23, 2020 1:40 PM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error On 8/23/20 1:25 PM, Paul Scott wrote: However, the same connection issue occurs when I try to run the upgrade.php script: [root at fs9 MailWatch-1.2.10]# php upgrade.php Error: Database connection failed: it is possible that the database is overloaded or otherwise not running properly; contact the system administrator if the problem persists (dbconnecterror99_plain) [root at fs9 MailWatch-1.2.10]# I have no answer for this, but is there some reason this is being discussed here rather than on the MailWatch list? -- [http://mailserver.summitgrid.org/logo_text_sig.png] Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From sales at edenusa.com Sun Aug 23 22:52:13 2020 From: sales at edenusa.com (Paul Scott) Date: Sun, 23 Aug 2020 22:52:13 +0000 Subject: MailScanner Lint Error In-Reply-To: References: <85ae2ccd-a5ee-f94a-0eae-233862cfb4d7@summitgrid.com> <4ebea54a-776b-333a-fc41-64561f49854e@cyways.com> <5a51ead3-e479-2929-ef14-3ccd64acca0e@msapiro.net> Message-ID: Hello Mark, Yes, you are right, the error is indeed coming from MySQL itself. And the MailScanner logs are showing that the custom functions are being initialized, but nothing is getting written to the database. I have been looking through the script and can barely understand the code, as I am a C and VB programmer, but will try as you suggest. And yes, anything and everything that you guys suggest helps very much actually, as it leads me to places I probably wouldn't have found on my own. I'll keep working on this and once I've figured it out, will share it, just so that others will know what caused it. Much appreciated! Paul Scott Engineer, Eden USA, Incorporated 866.501.3336 | 951.505.6967 | sales at edenusa.com https://www.edenusa.com -----Original Message----- From: MailScanner On Behalf Of Mark Sapiro Sent: Sunday, August 23, 2020 3:14 PM To: mailscanner at lists.mailscanner.info Subject: Re: MailScanner Lint Error On 8/23/20 2:25 PM, Paul Scott wrote: > Hello Mark, > > Just an FYI, but the last activity on the MailWatch users list is 4-years ago, in 2016. I don't use MailWatch and know very little about it, however, I think the error 99 comes from MySQL. It is not a failure to connect to the server, but rather a response from the server refusing the connection for some reason. If you look at the upgrade.php script and find the mysqli_connect call and duplicate that in a small script that displays the error as in the first example at , does that help? -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner From n.kilner at kilner-vacuum-lifting.com Tue Aug 25 13:42:58 2020 From: n.kilner at kilner-vacuum-lifting.com (Nigel Kilner) Date: Tue, 25 Aug 2020 14:42:58 +0100 Subject: Mailscanner not using Clamd Message-ID: Hello, I am using MailScanner 5.3.3, Postfix 2.8.11 & Clamd 0.102.4 on Suse Linux 12.2 (yes its is old). Until recently I had F-prot working with Mailscanner to scan emails but Cyren have stopped supporting F-prot (or will have by July 2021). Si I thought I would use Clamav (clamd) to do virus scanning. Unfortunately although Mailscanner finds clamd and detects the Eicar.com test file emails don't seem to be going through clamd. e.g. I sent an Eicar test file to my gmail account expecting it to be found by mailscanner/clamd but it doesn't get found. In fact there are no log entries in mail for clamd during sending/receiving emails. I have checked my configuration for mailscanner, clamd and postfix but can't see anything obvious. However I found the mailscanner postfix instructions https://www.mailscanner.info/postfix/?? which states postfix needs to be CHROOTED to work with Mailscanner.? Is this necessary? my postfix is a suse system package v 2.8.11-2.6.1 which I can Chroot it if necessary via Sysconfig. Thank you Nigel -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at msapiro.net Tue Aug 25 15:55:22 2020 From: mark at msapiro.net (Mark Sapiro) Date: Tue, 25 Aug 2020 08:55:22 -0700 Subject: Mailscanner not using Clamd In-Reply-To: References: Message-ID: <816ae5d6-8832-d07b-58da-92ef7cf54c68@msapiro.net> On 8/25/20 6:42 AM, Nigel Kilner wrote: > > I have checked my configuration for mailscanner, clamd and postfix but > can't see anything obvious. However I found the mailscanner postfix > instructions https://www.mailscanner.info/postfix/?? which states > postfix needs to be CHROOTED to work with Mailscanner.? Is this > necessary? my postfix is a suse system package v 2.8.11-2.6.1 which I > can Chroot it if necessary via Sysconfig. It is not necessary to CHROOT Postfix for use with MailScanner. I do not run Postfix CHROOTed. I currently use the ms-milter method for integrating MailScanner with Postfix, but for years I used the method described at , but without CHROOTing Postfix with no problems. Is MailScanner scanning your mails at all? If so, your issue is not with Postfix/MailScanner integration. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From n.kilner at kilner-vacuum-lifting.com Thu Aug 27 09:31:53 2020 From: n.kilner at kilner-vacuum-lifting.com (Nigel Kilner) Date: Thu, 27 Aug 2020 10:31:53 +0100 Subject: Mailscanner not using Clamd Message-ID: Mailscanner worked previously with f-prot scanmail without postfix being chrooted. but? scanmail is set within postfix as an smtp content filter. I decided to Chroot postfix to see if that helped. surprisingly everything now works!, MailScanner postfix & clamd. Perhaps its some SuSe related thing.. as I just used suse sysconfig to configure the chroot. At least I now have a working setup. Thanks for your input. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From mailscanner at barendse.to Thu Aug 27 14:21:24 2020 From: mailscanner at barendse.to (Remco Barendse) Date: Thu, 27 Aug 2020 16:21:24 +0200 (CEST) Subject: How to break HTML links? Message-ID: I noticed that attacks are getting smarter and more targeted. Previously the usual yada yada would come in (fake WeTranser / DHL etc.) but the attacks are now getting more serious by sending emails pretending to come from very specific companies we actually work with. Because the attackers get smarter I would like to break all HTML links so nothing becomes clickable anymore (yes, I do understand that this will break pretty graphics in mailing lists, I don't care). How to break links in a way that the any link doesn't work immediately in the browser will after manual intervention? So change for example: http://www.linktosupersneakyvirus.com/whatever.html into http://AREYOUSUREYOUWANTTOOPENKTHISwww.linktosupersneakyvirus.com/whatever.html Thanks! Remco -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From belle at bazuin.nl Thu Aug 27 14:43:49 2020 From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=) Date: Thu, 27 Aug 2020 16:43:49 +0200 Subject: How to break HTML links? In-Reply-To: References: Message-ID: Simple, it mail set you client to text only. Only look at HTML mails after you verified it. > -----Oorspronkelijk bericht----- > Van: MailScanner > [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. > info] Namens Remco Barendse > Verzonden: donderdag 27 augustus 2020 16:21 > Aan: MailScanner mailing list > Onderwerp: How to break HTML links? > > I noticed that attacks are getting smarter and more targeted. > > Previously the usual yada yada would come in (fake WeTranser > / DHL etc.) > but the attacks are now getting more serious by sending emails > pretending to come from very specific companies we actually work with. > > Because the attackers get smarter I would like to break all > HTML links so > nothing becomes clickable anymore (yes, I do understand that > this will > break pretty graphics in mailing lists, I don't care). > > How to break links in a way that the any link doesn't work > immediately > in the browser will after manual intervention? > > So change for example: > http://www.linktosupersneakyvirus.com/whatever.html > into > http://AREYOUSUREYOUWANTTOOPENKTHISwww.linktosupersneakyvirus. > com/whatever.html > > Thanks! > Remco > > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > From mailscanner at barendse.to Thu Aug 27 15:35:56 2020 From: mailscanner at barendse.to (Remco Barendse) Date: Thu, 27 Aug 2020 17:35:56 +0200 (CEST) Subject: How to break HTML links? In-Reply-To: References: Message-ID: I thought of that option but that totally ruins the layout of most emails but still leaves a "clickable" link intact On Thu, 27 Aug 2020, L.P.H. van Belle via MailScanner wrote: > Simple, it mail set you client to text only. > Only look at HTML mails after you verified it. > > >> -----Oorspronkelijk bericht----- >> Van: MailScanner >> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner. >> info] Namens Remco Barendse >> Verzonden: donderdag 27 augustus 2020 16:21 >> Aan: MailScanner mailing list >> Onderwerp: How to break HTML links? >> >> I noticed that attacks are getting smarter and more targeted. >> >> Previously the usual yada yada would come in (fake WeTranser >> / DHL etc.) >> but the attacks are now getting more serious by sending emails >> pretending to come from very specific companies we actually work with. >> >> Because the attackers get smarter I would like to break all >> HTML links so >> nothing becomes clickable anymore (yes, I do understand that >> this will >> break pretty graphics in mailing lists, I don't care). >> >> How to break links in a way that the any link doesn't work >> immediately >> in the browser will after manual intervention? >> >> So change for example: >> http://www.linktosupersneakyvirus.com/whatever.html >> into >> http://AREYOUSUREYOUWANTTOOPENKTHISwww.linktosupersneakyvirus. >> com/whatever.html >> >> Thanks! >> Remco >> >> >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From serverhelp66 at yahoo.com Thu Aug 27 12:17:25 2020 From: serverhelp66 at yahoo.com (Am Am) Date: Thu, 27 Aug 2020 12:17:25 +0000 (UTC) Subject: MailScanner: Could not analyze message References: <1135971056.218338.1598530645655.ref@mail.yahoo.com> Message-ID: <1135971056.218338.1598530645655@mail.yahoo.com> Hi, Mailscanner is not sending outbound mails for a domain and send it to quarantine.In the default mail account, we get a mail, like a bounce back mail, with the following content: This message has been rejected. The filters said this: Report: MailScanner: Could not analyze message . Since there aren't any further details mentioned, I don't know where to look.So please help me with this and let me know how to fix it. -------------- next part -------------- An HTML attachment was scrubbed... URL: From Antony.Stone at mailscanner.open.source.it Thu Aug 27 15:59:29 2020 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Thu, 27 Aug 2020 17:59:29 +0200 Subject: MailScanner: Could not analyze message In-Reply-To: <1135971056.218338.1598530645655@mail.yahoo.com> References: <1135971056.218338.1598530645655.ref@mail.yahoo.com> <1135971056.218338.1598530645655@mail.yahoo.com> Message-ID: <202008271759.30181.Antony.Stone@mailscanner.open.source.it> On Thursday 27 August 2020 at 14:17:25, Am Am via MailScanner wrote: > Hi, > Mailscanner is not sending outbound mails for a domain and send it to > quarantine.In the default mail account, we get a mail, like a bounce back > mail, with the following content: This message has been rejected. The > filters said this: > Report: MailScanner: Could not analyze message > . > Since there aren't any further details mentioned, I don't know where to > look.So please help me with this and let me know how to fix it. Well, tell us something about the emails which are being blocked. Are they plain text, HTML, do they have attachments, if so what sort of files are they? Can you upload a (possibly slightly redacted for privacy) sample email to pastebin or similar, and then post the link here so we can see the content for ourselves? Regards, Antony. -- +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++ Please reply to the list; please *don't* CC me. From serverhelp66 at yahoo.com Thu Aug 27 17:32:57 2020 From: serverhelp66 at yahoo.com (Am Am) Date: Thu, 27 Aug 2020 17:32:57 +0000 (UTC) Subject: MailScanner: Could not analyze message In-Reply-To: <202008271759.30181.Antony.Stone@mailscanner.open.source.it> References: <1135971056.218338.1598530645655.ref@mail.yahoo.com> <1135971056.218338.1598530645655@mail.yahoo.com> <202008271759.30181.Antony.Stone@mailscanner.open.source.it> Message-ID: <1253085551.8619736.1598549577579@mail.yahoo.com> Hi, Actually, we are trying to send wordpress backup file to an email address (using the default wordpress backup utility).When we give an email account and click on 'Email backup to ', wordpress creates a new backup file and after it isn't sending to the email account.Once the backup is created, mailscanner checks the mail and move it directly into quarantine. Meanwhile, we can actually download the backup file directly into local machine. The backup file is a gzip archive and is about 316KB.Its name will be like 'peterpau_pauer_wp_20200827_768.sql.gz'. So what should we do now?Any help is appreciated. On Thursday, August 27, 2020, 9:29:49 PM GMT+5:30, Antony Stone wrote: On Thursday 27 August 2020 at 14:17:25, Am Am via MailScanner wrote: > Hi, > Mailscanner is not sending outbound mails for a domain and send it to > quarantine.In the default mail account, we get a mail, like a bounce back > mail, with the following content: This message has been rejected. The > filters said this: > Report: MailScanner: Could not analyze message > . > Since there aren't any further details mentioned, I don't know where to > look.So please help me with this and let me know how to fix it. Well, tell us something about the emails which are being blocked. Are they plain text, HTML, do they have attachments, if so what sort of files are they? Can you upload a (possibly slightly redacted for privacy) sample email to pastebin or similar, and then post the link here so we can see the content for ourselves? Regards, Antony. -- +++ Divide By Cucumber Error.? Please Reinstall Universe And Reboot +++ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Please reply to the list; ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? please *don't* CC me. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Tue Aug 25 13:50:43 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Tue, 25 Aug 2020 09:50:43 -0400 Subject: Mailscanner not using Clamd In-Reply-To: References: Message-ID: No, postfix isn't the culprit here if MailScanner is actually processing the emails.? Do you see clamd being invoked by MailScanner in your mail log at all? On 8/25/20 9:42 AM, Nigel Kilner wrote: > Hello, > > I am using MailScanner 5.3.3, Postfix 2.8.11 & Clamd 0.102.4 on Suse > Linux 12.2 (yes its is old). Until recently I had F-prot working with > Mailscanner to scan emails but Cyren have stopped supporting F-prot > (or will have by July 2021). Si I thought I would use Clamav (clamd) > to do virus scanning. Unfortunately although Mailscanner finds clamd > and detects the Eicar.com test file emails don't seem to be going > through clamd. e.g. I sent an Eicar test file to my gmail account > expecting it to be found by mailscanner/clamd but it doesn't get > found. In fact there are no log entries in mail for clamd during > sending/receiving emails. > > I have checked my configuration for mailscanner, clamd and postfix but > can't see anything obvious. However I found the mailscanner postfix > instructions https://www.mailscanner.info/postfix/ which states > postfix needs to be CHROOTED to work with Mailscanner.? Is this > necessary? my postfix is a suse system package v 2.8.11-2.6.1 which I > can Chroot it if necessary via Sysconfig. > > Thank you > > Nigel > > > > > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Tue Aug 25 13:51:55 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Tue, 25 Aug 2020 09:51:55 -0400 Subject: Mailscanner not using Clamd In-Reply-To: References: Message-ID: <5bf48aa7-66f3-10d4-63e0-b4cf1987b669@summitgrid.com> Also, do you see MailScanner getting invoked otherwise? On 8/25/20 9:50 AM, Shawn Iverson wrote: > > No, postfix isn't the culprit here if MailScanner is actually > processing the emails.? Do you see clamd being invoked by MailScanner > in your mail log at all? > > On 8/25/20 9:42 AM, Nigel Kilner wrote: >> Hello, >> >> I am using MailScanner 5.3.3, Postfix 2.8.11 & Clamd 0.102.4 on Suse >> Linux 12.2 (yes its is old). Until recently I had F-prot working with >> Mailscanner to scan emails but Cyren have stopped supporting F-prot >> (or will have by July 2021). Si I thought I would use Clamav (clamd) >> to do virus scanning. Unfortunately although Mailscanner finds clamd >> and detects the Eicar.com test file emails don't seem to be going >> through clamd. e.g. I sent an Eicar test file to my gmail account >> expecting it to be found by mailscanner/clamd but it doesn't get >> found. In fact there are no log entries in mail for clamd during >> sending/receiving emails. >> >> I have checked my configuration for mailscanner, clamd and postfix >> but can't see anything obvious. However I found the mailscanner >> postfix instructions https://www.mailscanner.info/postfix/ which >> states postfix needs to be CHROOTED to work with Mailscanner.? Is >> this necessary? my postfix is a suse system package v 2.8.11-2.6.1 >> which I can Chroot it if necessary via Sysconfig. >> >> Thank you >> >> Nigel >> >> >> >> >> >> > -- > > Shawn Iverson > shawniverson at summitgrid.com -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Thu Aug 27 17:58:04 2020 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Thu, 27 Aug 2020 13:58:04 -0400 Subject: MailScanner: Could not analyze message In-Reply-To: <1253085551.8619736.1598549577579@mail.yahoo.com> References: <1135971056.218338.1598530645655.ref@mail.yahoo.com> <1135971056.218338.1598530645655@mail.yahoo.com> <202008271759.30181.Antony.Stone@mailscanner.open.source.it> <1253085551.8619736.1598549577579@mail.yahoo.com> Message-ID: I think your problem is that this is a sql dump and MailScanner sees it when it opens the attachment. Can you add sql your archive filetype and filename allow lists for this sender? On 8/27/20 1:32 PM, Am Am via MailScanner wrote: > > Hi, > > Actually, we are trying to send wordpress backup file to an email > address (using the default wordpress backup utility). > When we give an email account and click on 'Email backup to address>', wordpress creates a new backup file and after it isn't > sending to the email account. > Once the backup is created, mailscanner checks the mail and move it > directly into quarantine. > > Meanwhile, we can actually download the backup file directly into > local machine. > > The backup file is a gzip archive and is about 316KB. > Its name will be like 'peterpau_pauer_wp_20200827_768.sql.gz'. > > So what should we do now? > Any help is appreciated. > On Thursday, August 27, 2020, 9:29:49 PM GMT+5:30, Antony Stone > wrote: > > > On Thursday 27 August 2020 at 14:17:25, Am Am via MailScanner wrote: > > > > Hi, > > Mailscanner is not sending outbound mails for a domain and send it to > > quarantine.In the default mail account, we get a mail, like a bounce > back > > mail, with the following content: This message has been rejected. The > > filters said this: > > Report: MailScanner: Could not analyze message > > . > > Since there aren't any further details mentioned, I don't know where to > > look.So please help me with this and let me know how to fix it. > > > Well, tell us something about the emails which are being blocked. > > Are they plain text, HTML, do they have attachments, if so what sort > of files > are they? > > Can you upload a (possibly slightly redacted for privacy) sample email to > pastebin or similar, and then post the link here so we can see the > content for > ourselves? > > > Regards, > > > Antony. > > -- > +++ Divide By Cucumber Error.? Please Reinstall Universe And Reboot +++ > > ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Please reply to the > list; > please *don't* CC me. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > -- Shawn Iverson shawniverson at summitgrid.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From 247amhosting at gmail.com Fri Aug 28 01:29:51 2020 From: 247amhosting at gmail.com (Support Team) Date: Fri, 28 Aug 2020 06:59:51 +0530 Subject: MailScanner: Could not analyze message In-Reply-To: References: <1135971056.218338.1598530645655.ref@mail.yahoo.com> <1135971056.218338.1598530645655@mail.yahoo.com> <202008271759.30181.Antony.Stone@mailscanner.open.source.it> <1253085551.8619736.1598549577579@mail.yahoo.com> Message-ID: Hello, Can you share the steps for this? On Fri, Aug 28, 2020 at 4:49 AM Shawn Iverson via MailScanner < mailscanner at lists.mailscanner.info> wrote: > I think your problem is that this is a sql dump and MailScanner sees it > when it opens the attachment. > > Can you add sql your archive filetype and filename allow lists for this > sender? > On 8/27/20 1:32 PM, Am Am via MailScanner wrote: > > > Hi, > > Actually, we are trying to send wordpress backup file to an email address > (using the default wordpress backup utility). > When we give an email account and click on 'Email backup to address>', wordpress creates a new backup file and after it isn't sending > to the email account. > Once the backup is created, mailscanner checks the mail and move it > directly into quarantine. > > Meanwhile, we can actually download the backup file directly into local > machine. > > The backup file is a gzip archive and is about 316KB. > Its name will be like 'peterpau_pauer_wp_20200827_768.sql.gz'. > > So what should we do now? > Any help is appreciated. > On Thursday, August 27, 2020, 9:29:49 PM GMT+5:30, Antony Stone > > wrote: > > > On Thursday 27 August 2020 at 14:17:25, Am Am via MailScanner wrote: > > > > Hi, > > Mailscanner is not sending outbound mails for a domain and send it to > > quarantine.In the default mail account, we get a mail, like a bounce back > > mail, with the following content: This message has been rejected. The > > filters said this: > > Report: MailScanner: Could not analyze message > > . > > Since there aren't any further details mentioned, I don't know where to > > look.So please help me with this and let me know how to fix it. > > > Well, tell us something about the emails which are being blocked. > > Are they plain text, HTML, do they have attachments, if so what sort of > files > are they? > > Can you upload a (possibly slightly redacted for privacy) sample email to > pastebin or similar, and then post the link here so we can see the content > for > ourselves? > > > Regards, > > > Antony. > > -- > +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++ > > Please reply to the list; > please *don't* CC > me. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > -- > > Shawn Iverson > shawniverson at summitgrid.com > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -------------- next part -------------- An HTML attachment was scrubbed... URL: