From shawniverson at summitgrid.com  Thu Apr  1 11:59:04 2021
From: shawniverson at summitgrid.com (Shawn Iverson)
Date: Thu, 1 Apr 2021 07:59:04 -0400
Subject: latest release mailscanner?
In-Reply-To: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
Message-ID: <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>

Hello,

The site is a bit behind.? v5.3.4-3 is the latest stable.

On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
> Hello Everyone,
>
> On the website(mailscanner.info) it says that v5.3.3-1 is the latest 
> stable and on the github page it says that v5.3.4-3 is the latest 
> release.
> So which of the two is it or is the advised version always the one on 
> the mailscanner.info download page?
>
> Regards,
> Maarten
>
>

From jerry.benton at mailborder.com  Thu Apr  1 12:14:12 2021
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 1 Apr 2021 08:14:12 -0400
Subject: latest release mailscanner?
In-Reply-To: <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
 <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
Message-ID: <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>

I updated the website with the latest version info. 


-
Jerry Benton
www.mailborder.com

> On Apr 1, 2021, at 07:59, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:
> 
> Hello,
> 
> The site is a bit behind.  v5.3.4-3 is the latest stable.
> 
> On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
>> Hello Everyone,
>> 
>> On the website(mailscanner.info) it says that v5.3.3-1 is the latest stable and on the github page it says that v5.3.4-3 is the latest release.
>> So which of the two is it or is the advised version always the one on the mailscanner.info download page?
>> 
>> Regards,
>> Maarten
>> 
>> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210401/07c83718/attachment.html>

From shawniverson at summitgrid.com  Thu Apr  1 12:37:44 2021
From: shawniverson at summitgrid.com (Shawn Iverson)
Date: Thu, 1 Apr 2021 08:37:44 -0400
Subject: latest release mailscanner?
In-Reply-To: <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
 <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
 <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
Message-ID: <3050194e-c225-78f8-7a29-4431330a9540@summitgrid.com>

Thanks Jerry.

Can you do me a favor and take a peek at the Phishtank sync?

On 4/1/21 8:14 AM, Jerry Benton wrote:
> I updated the website with the latest version info.
>
>
> -
> Jerry Benton
> www.mailborder.com <http://www.mailborder.com>
>
>> On Apr 1, 2021, at 07:59, Shawn Iverson via MailScanner 
>> <mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>> wrote:
>>
>> Hello,
>>
>> The site is a bit behind.? v5.3.4-3 is the latest stable.
>>
>> On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
>>> Hello Everyone,
>>>
>>> On the website(mailscanner.info <http://mailscanner.info>) it says 
>>> that v5.3.3-1 is the latest stable and on the github page it says 
>>> that v5.3.4-3 is the latest release.
>>> So which of the two is it or is the advised version always the one 
>>> on the mailscanner.info <http://mailscanner.info> download page?
>>>
>>> Regards,
>>> Maarten
>>>
>>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210401/d2bc1f71/attachment.html>

From jerry.benton at mailborder.com  Thu Apr  1 12:46:54 2021
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 1 Apr 2021 08:46:54 -0400
Subject: latest release mailscanner?
In-Reply-To: <3050194e-c225-78f8-7a29-4431330a9540@summitgrid.com>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
 <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
 <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
 <3050194e-c225-78f8-7a29-4431330a9540@summitgrid.com>
Message-ID: <246FD5AB-7CE6-4ED9-8D39-72AFA7538FB3@mailborder.com>

What about it? I downloaded the latest file. This is the head:

# Built by Mailborder Systems
# Build Time: Thu, 01 Apr 21 08:15:02 -0400
# https://www.mailborder.com
# Mailborder - Phishing Bad Sites
#


Is there something wrong?


-
Jerry Benton
www.mailborder.com

> On Apr 1, 2021, at 08:37, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:
> 
> Thanks Jerry.
> 
> Can you do me a favor and take a peek at the Phishtank sync?
> 
> On 4/1/21 8:14 AM, Jerry Benton wrote:
>> I updated the website with the latest version info. 
>> 
>> 
>> -
>> Jerry Benton
>> www.mailborder.com <http://www.mailborder.com/>
>> 
>>> On Apr 1, 2021, at 07:59, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>> wrote:
>>> 
>>> Hello,
>>> 
>>> The site is a bit behind.  v5.3.4-3 is the latest stable.
>>> 
>>> On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
>>>> Hello Everyone,
>>>> 
>>>> On the website(mailscanner.info <http://mailscanner.info/>) it says that v5.3.3-1 is the latest stable and on the github page it says that v5.3.4-3 is the latest release.
>>>> So which of the two is it or is the advised version always the one on the mailscanner.info <http://mailscanner.info/> download page?
>>>> 
>>>> Regards,
>>>> Maarten
>>>> 
>>>> 
>>> 
>>> 
>>> -- 
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>>> 
>> 
>> 
>> 
>> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210401/9a6a2236/attachment.html>

From shawniverson at summitgrid.com  Thu Apr  1 12:54:05 2021
From: shawniverson at summitgrid.com (Shawn Iverson)
Date: Thu, 1 Apr 2021 08:54:05 -0400
Subject: latest release mailscanner?
In-Reply-To: <246FD5AB-7CE6-4ED9-8D39-72AFA7538FB3@mailborder.com>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
 <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
 <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
 <3050194e-c225-78f8-7a29-4431330a9540@summitgrid.com>
 <246FD5AB-7CE6-4ED9-8D39-72AFA7538FB3@mailborder.com>
Message-ID: <0f5abe69-3780-142b-48bf-94d5b43b3e8e@summitgrid.com>

I would say no, then.? I had a report that it was not updating, but I 
believe it is a client side problem, not us.

On 4/1/21 8:46 AM, Jerry Benton wrote:
> What about it? I downloaded the latest file. This is the head:
>
> # Built by Mailborder Systems
> # Build Time: Thu, 01 Apr 21 08:15:02 -0400
> # https://www.mailborder.com <https://www.mailborder.com>
> # Mailborder - Phishing Bad Sites
> #
>
>
> Is there something wrong?
>
>
> -
> Jerry Benton
> www.mailborder.com <http://www.mailborder.com>
>
>> On Apr 1, 2021, at 08:37, Shawn Iverson via MailScanner 
>> <mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>> wrote:
>>
>> Thanks Jerry.
>>
>> Can you do me a favor and take a peek at the Phishtank sync?
>>
>> On 4/1/21 8:14 AM, Jerry Benton wrote:
>>> I updated the website with the latest version info.
>>>
>>>
>>> -
>>> Jerry Benton
>>> www.mailborder.com <http://www.mailborder.com/>
>>>
>>>> On Apr 1, 2021, at 07:59, Shawn Iverson via MailScanner 
>>>> <mailscanner at lists.mailscanner.info 
>>>> <mailto:mailscanner at lists.mailscanner.info>> wrote:
>>>>
>>>> Hello,
>>>>
>>>> The site is a bit behind.? v5.3.4-3 is the latest stable.
>>>>
>>>> On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
>>>>> Hello Everyone,
>>>>>
>>>>> On the website(mailscanner.info <http://mailscanner.info/>) it 
>>>>> says that v5.3.3-1 is the latest stable and on the github page it 
>>>>> says that v5.3.4-3 is the latest release.
>>>>> So which of the two is it or is the advised version always the one 
>>>>> on the mailscanner.info <http://mailscanner.info/> download page?
>>>>>
>>>>> Regards,
>>>>> Maarten
>>>>>
>>>>>
>>>>
>>>>
>>>> -- 
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info 
>>>> <mailto:mailscanner at lists.mailscanner.info>
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>
>>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210401/52c0d1ba/attachment.html>

From mailinglists at feedmebits.nl  Thu Apr  1 13:10:12 2021
From: mailinglists at feedmebits.nl (Maarten)
Date: Thu, 1 Apr 2021 15:10:12 +0200
Subject: latest release mailscanner?
In-Reply-To: <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
References: <9f6d82fa-5357-e4ae-177b-5e07f0b5bef1@feedmebits.nl>
 <838871ac-ea2f-9889-1e41-4da9173bd2a5@summitgrid.com>
 <378FA859-A5E7-45BD-8AE9-2B94E8075894@mailborder.com>
Message-ID: <fd2087d3-5585-7d6f-d834-0b5b1f5d3443@feedmebits.nl>

Thanks for verifying that and updating the website Jerry!

On 4/1/21 2:14 PM, Jerry Benton wrote:
> I updated the website with the latest version info.
>
>
> -
> Jerry Benton
> www.mailborder.com <http://www.mailborder.com>
>
>> On Apr 1, 2021, at 07:59, Shawn Iverson via MailScanner 
>> <mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>> wrote:
>>
>> Hello,
>>
>> The site is a bit behind.? v5.3.4-3 is the latest stable.
>>
>> On 3/31/21 10:33 AM, Maarten via MailScanner wrote:
>>> Hello Everyone,
>>>
>>> On the website(mailscanner.info <http://mailscanner.info>) it says 
>>> that v5.3.3-1 is the latest stable and on the github page it says 
>>> that v5.3.4-3 is the latest release.
>>> So which of the two is it or is the advised version always the one 
>>> on the mailscanner.info <http://mailscanner.info> download page?
>>>
>>> Regards,
>>> Maarten
>>>
>>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210401/2eed4eab/attachment.html>

From v.andrews at noc.ac.uk  Thu Apr  1 14:20:07 2021
From: v.andrews at noc.ac.uk (Andrews, Vincent)
Date: Thu, 1 Apr 2021 14:20:07 +0000
Subject: MailScanner 5.3.4 clamd does not appear to be participating.
In-Reply-To: <c7f0b9f5-7764-ee86-1d9d-dd1dbbb25952@adsl.cgsecurity.org>
References: <CWXP123MB4584FB8665FBAE55B75EBAAEA47C9@CWXP123MB4584.GBRP123.PROD.OUTLOOK.COM>
 <c7f0b9f5-7764-ee86-1d9d-dd1dbbb25952@adsl.cgsecurity.org>
Message-ID: <28624052-0755-4034-8BD7-42DFD2E26A2E@noc.ac.uk>

Hello,
Thanks for those pointers, it was an ownership issue to do with /var/run/clamd.mailscanner/clamd.sock. It was owned by the wrong account. It seems to be up and running now.

Vince.

?On 31/03/2021, 15:17, "MailScanner on behalf of Christophe GRENIER" <mailscanner-bounces+v.andrews=noc.ac.uk at lists.mailscanner.info on behalf of grenier at cgsecurity.org> wrote:

    Caution: This email has originated from outside of the organisation. Do not click links or open attachments unless you have verified the sender and content is safe. Thank you.



    On Wed, 31 Mar 2021, Andrews, Vincent wrote:

    > Hello,
    >
    > We have a new MailScanner V5.3.4 on a CentOS 7 system. Running the ?lint command proves that it can use both Sophos and clamd, however it is only Sophos that appears to be catching
    > viruses.
    >
    > Clamd is installed via the OS route ? version is 0.103.0-3.
    >
    > MailScanner.conf is ?Virus Scanners = auto? was ?Virus Scanners = clamd, sophos?.
    >
    > Virus.scanners.conf entry for clamd is /bin/false, but as I cannot see a specific wrapper I assume that is Ok.
    >
    > I am loath to cut out Sophos from the list and see what happens.
    >
    > Do I need to do anything else?

    Hello

    A good start is to check your clamd configuration.
    On my CentOS servers, I am using /etc/clamd.d/mailscanner.conf
    MaxThreads 50
    FixStaleSocket true
    LocalSocket /var/run/clamd.mailscanner/clamd.sock
    User postfix
    LogFile /var/log/clamd.mailscanner
    LogFileMaxSize 0
    LogVerbose yes
    LogClean no
    Debug no
    LogTime yes
    TemporaryDirectory /var/tmp

    Check the daemon with
    systemctl status clamd at mailscanner.service

    If it's OK, use clamdscan (not clamscan) to check a file that can be read
    by everyone (ie. /etc/hosts):
    clamdscan -c /etc/clamd.d/mailscanner.conf /etc/hosts
    /etc/hosts: OK

    ----------- SCAN SUMMARY -----------
    Infected files: 0
    Time: 0.002 sec (0 m 0 s)
    Start Date: 2021:03:31 16:13:29
    End Date:   2021:03:31 16:13:29

    Regards,
            Christophe
    --
        ,-~~-.___.     ._.
       / |  '     \    | |--------.   Christophe GRENIER
      (  )         0   | |        | grenier at cgsecurity.org
       \_/-, ,----'    | |        |
          ====         !_!-v---v--.
          /  \-'~;      .--------.   TestDisk & PhotoRec
         /  __/~| ._-""||        |   Data Recovery
       =(  _____|_|____||________|   https://www.cgsecurity.org



This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system.
The National Oceanography Centre (NOC) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. NOC does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses.
Opinions, conclusions or other information in this message and attachments that are not related directly to NOC business are solely those of the author and do not represent the views of NOC.