<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1170" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>if you
have a standard install of MailScanner you should have the file
/etc/MailScanner/rules/spam.whitelist.rules . It is called from
MailScanner via:</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>Is
Definitely Not Spam = /etc/MailScanner/rules/spam.whitelist.rules
.</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>An
example of a rule that would whitelist anything going to an internal
domain:</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2>To: *@myinternaldomain.com
yes</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>If you
wanted to whitelist inbound mail to a specific user, you would do something
like:</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2>To: joe@myinternaldomain.com
yes</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>In the
rules directory there is an excellent README and EXAMPLES file that helps
explain how to do this, by the way</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2>Evert
Ford</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2>Information Analyst</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2>Westone Laboratories</FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff size=2><A
href="http://www.westone.com">http://www.westone.com</A></FONT></SPAN></DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=960180221-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK]<B>On Behalf Of </B>Chris
Yuzik<BR><B>Sent:</B> Monday, July 14, 2003 2:50 PM<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Re: strange glitch results in
lost mail<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>Hi Evert,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Everything in my MailScanner.conf file looks ok
from what I can tell. MTA and Sendmail are as you show, and sendmail is
in /usr/bin/sendmail.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I haven't noticed anything particularly strange
in the /var/log/maillog file...but I'm not sure what I'm supposed to look for
either. Any hints?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have added a crontab for
/usr/lib/opcenter/virtualhosting/MailQueueCleaner and set it to run every 5
minutes. Not sure if this will help anything or not. I read somewhere that it
might help, but certainly won't hurt anything.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Where exactly do you whitelist the internal
domains? Is that in "/etc/MailScanner/spam.whitelist.rules"? I don't have this
file on my system and am not sure what format to use. Could you give me a
couple of examples, or point me to the right place in the docs for
this?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks.</FONT></DIV>
<DIV><FONT face=Arial size=2>Chris Yuzik</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=richard_cipher@YAHOO.COM
href="mailto:richard_cipher@YAHOO.COM">Evert Ford</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, July 14, 2003 11:36
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: strange glitch results in
lost mail</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>since you aren't having any mail delivery problems when you start
sendmail outside of MailScanner, I'd suggest looking at your whitelist rules
and blacklist rules, and next I'd suggest looking for a configuration error
in MailScanner.conf. I had a similar problem until I whitelisted the
internal domains I manage.</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff size=2>in
MailScanner.conf, look at the following settings(just for
starters):</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>MTA = sendmail</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>and</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>Sendmail = /usr/sbin/sendmail</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff size=2>if
you are using a standard install path on Redhat 7.3 for
sendmail</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>also, are you seeing any errors in your maillog on the e-mails that
aren'd delivered?</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>Evert Ford</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>Information Analyst</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff
size=2>Westone Laboratories</FONT></SPAN></DIV>
<DIV><SPAN class=770492018-14072003><FONT face=Arial color=#0000ff size=2><A
href="http://www.westone.com">http://www.westone.com</A></FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK]<B>On Behalf Of </B>Chris
Yuzik<BR><B>Sent:</B> Monday, July 14, 2003 11:54 AM<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> strange glitch results in
lost mail<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>Hi everyone,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have SpamAssassin and MailScanner running
on my RedHat 7.3 machine. The server is running Ensim WEBppliance PRO
3.5.10. The server hosts about a dozen domains. I run sendmail and
procmail. Almost everything works great. Almost.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Mail from the outside world works as
expected, gets scanned and scored and so forth. I've got SA's threshold
set to 5 and am running DCC and Razor...in the two days I tested it over
the weekend, it correctly identified 99%+ of spam.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>My big problem is that sometimes mail from
within the server never arrives...never bounces...just goes to a
black hole.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I'll list some examples so it makes more
sense:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>1) let's pretend that domain1.com and
domain2.com are hosted on my server. external1.com is not hosted on
my server.</FONT></DIV>
<DIV><FONT face=Arial size=2>2) <A
href="mailto:steve@domain1.com">steve@domain1.com</A> and <A
href="mailto:john@domain1.com">john@domain1.com</A> can both sent to
and receive email from <A
href="mailto:susan@external1.com">susan@external1.com</A> just
fine. <A href="mailto:dave@domain2.com">dave@domain2.com</A> and <A
href="mailto:scott@domain2.com">scott@domain2.com</A> can also sent to and
receive email from <A
href="mailto:susan@external1.com">susan@external1.com</A> to. Internal to
the outside world works.</FONT></DIV>
<DIV><FONT face=Arial size=2>3) <A
href="mailto:steve@domain1.com">steve@domain1.com</A> can not email <A
href="mailto:john@domain1.com">john@domain1.com</A> and vice-versa.
Internal to internal is not working.</FONT></DIV>
<DIV><FONT face=Arial size=2>4) it gets stranger. <A
href="mailto:dave@domain2.com">dave@domain2.com</A> can send email to <A
href="mailto:scott@domain2.com">scott@domain2.com</A>, but not the other
way around. If scott replies to dave's message, then dave never gets the
reply.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>As I said before, the message doesn't bounce
or anything...it just goes into a black hole and is never seen
again.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>When I installed MailScanner, the
documentation said I was supposed to do the following (which is what
I did):</FONT></DIV>
<DIV><FONT face=Arial size=2>1) "service sendmail stop"</FONT></DIV>
<DIV><FONT face=Arial size=2>2) "service MailScanner start"</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>In an attempt to troubleshoot the problem, I
tried the following:</FONT></DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>1) "service MailScanner stop"</FONT></DIV>
<DIV><FONT face=Arial size=2>2) "service sendmail start"</FONT></DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>3) "service MailScanner start"</FONT></DIV>
<DIV> </DIV>
<DIV>Now everyone can email everyone else: internal<-> internal and
internal<->external just fine. Unfortunately, now nothing gets
processed through spamassassin.</DIV>
<DIV> </DIV>
<DIV>How do I go about fixing this?</DIV>
<DIV> </DIV>
<DIV>Please help.</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Chris
Yuzik</DIV></FONT></DIV></FONT></DIV></FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>