Looks like installed the new mailscanner but not done the upgrade also check out about clamd hope it should be clamav module or clam<br><br><b>Version installed (4.73.4) does not match version stated in<br>MailScanner.conf file (4.68.8), you may want to run upgrade_MailScanner_conf</b><br>
<br><br><br><div class="gmail_quote">On Tue, Jul 28, 2009 at 5:12 PM, Marco mangione <span dir="ltr"><<a href="mailto:marco.mangione@gmail.com">marco.mangione@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
root@filtro6:~# MailScanner -lint output<br>Trying to setlogsock(unix)<br>Read 817 hostnames from the phishing whitelist<br>Read 5141 hostnames from the phishing blacklist<br>Config: calling custom init function SQLBlacklist<br>
Starting up SQL Blacklist<br>Read 0 blacklist entries<br>Config: calling custom init function MailWatchLogging<br>Started SQL Logging child<br>Config: calling custom init function SQLWhitelist<br>Starting up SQL Whitelist<br>
Read 2 whitelist entries<br>Checking version numbers...<br>Version installed (4.73.4) does not match version stated in<br>MailScanner.conf file (4.68.8), you may want to run upgrade_MailScanner_conf<br>to ensure your MailScanner.conf file contains all the latest settings.<br>
<br>ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf<br>ERROR: is not correct, it should match X-COLT-ENGINE-MailScanner-From<br><br>MailScanner setting GID to (33)<br>MailScanner setting UID to (109)<br>
<br>Checking for SpamAssassin errors (if you use it)...<br>SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/Spam<br>SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp<br>
Using SpamAssassin results cache<br>
Connected to SpamAssassin cache database<br>SpamAssassin reported no errors.<br>Using locktype = posix<br>MailScanner.conf says "Virus Scanners = clamav"<br>Found these virus scanners installed: clamd<br>===========================================================================<br>
Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com" target="_blank">eicar.com</a>)<br>Other Checks: Found 1 problems<br>Virus and Content Scanning: Starting<br>/var/spool/MailScanner/incoming/30510/./1.message: Eicar-Test-Signature FOUND<br>
<br>/var/spool/MailScanner/incoming/30510/./1/<a href="http://eicar.com" target="_blank">eicar.com</a>: Eicar-Test-Signature FOUND<br><br>Virus Scanning: ClamAV found 2 infections<br>Infected message 1 came from 10.1.1.1<br>
Infected message 1.message came from<br>
Virus Scanning: Found 2 viruses<br>===========================================================================<br>Virus Scanner test reports:<br>ClamAV said "<a href="http://eicar.com" target="_blank">eicar.com</a> contains Eicar-Test-Signature"<br>
<br>If any of your virus scanners (clamd)<br>are not listed there, you should check that they are installed correctly<br>and that MailScanner is finding them correctly via its virus.scanners.conf.<br>Config: calling custom end function SQLBlacklist<br>
Closing down by-domain spam blacklist<br>Config: calling custom end function MailWatchLogging<br>Config: calling custom end function SQLWhitelist<br>Closing down by-domain spam whitelist<br>root@filtro6:~#<br><br><br><div class="gmail_quote">
2009/7/28 shprahi shprahi <span dir="ltr"><<a href="mailto:shprahi@gmail.com" target="_blank">shprahi@gmail.com</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div></div><div class="h5">
What is MailScanner version and MailScanner --lint output also spamassassin --lint output<br><br>Just see is there any errors on the output<br><br><div class="gmail_quote"><div><div></div><div>On Tue, Jul 28, 2009 at 4:43 PM, Marco mangione <span dir="ltr"><<a href="mailto:marco.mangione@gmail.com" target="_blank">marco.mangione@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div>this is the detail of bayes table<br><br>| bayes_seen | BASE TABLE | 406301568 | MyISAM |<br>
| bayes_token | BASE TABLE | 1028785670 | MyISAM |<br><br><br><br><div class="gmail_quote">2009/7/28 Marco mangione <span dir="ltr"><<a href="mailto:marco.mangione@gmail.com" target="_blank">marco.mangione@gmail.com</a>></span><div>
<div></div><div><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">seems there are some hang when mailscanner connect to SA db .. that is bigger than 2GB.... what can i do in this case ?<br>
<br><div class="gmail_quote">2009/7/28 MailScanner <span dir="ltr"><<a href="mailto:MailScanner@ecs.soton.ac.uk" target="_blank">MailScanner@ecs.soton.ac.uk</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div><p>If the mail is only being processed very slowly, then unless you have the parallelism set too *high* (Max Children should be 5 to start with) then there must be some good reason why it is taking a long time. Set "Log Speed = yes" in MailScanner.conf and restart MailScanner. Then look at your logs and work out what is taking all the time?</p>
<p>When you ran with "--debug --sa-debug", were there any long pauses in the output? There shouldn't be, once it has started doing the spam scanning.</p>
<p>Also, you can try switching off the spam scanning altogether, just to double check that is where the problem lies and not in your virus scanning. What is "Virus Scanners =" set to in MailScanner.conf?</p><div>
<div></div><div>
<p>On Tue, 28 Jul 2009 10:48:42 +0200, Marco mangione <<a href="mailto:marco.mangione@gmail.com" target="_blank">marco.mangione@gmail.com</a>> wrote:</p>
<blockquote style="border-left: 2px solid rgb(16, 16, 255); padding-left: 5px; margin-left: 5px; width: 100%;">
<p>DNS are ok. resolution are quick.<br>can i try to increase parallels postfix or mailscanner process ?<br>server have much cpu and ram unused...</p>
<p> </p>
<div class="gmail_quote">2009/7/27 Julian Field <span><<a href="mailto:MailScanner@ecs.soton.ac.uk" target="_blank">MailScanner@ecs.soton.ac.uk</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Most likely DNS lookups. Check your DNS is working properly and you can reach all the blacklists you use very quickly.<br>
<br> Start by doing a "MailScanner --debug --sa-debug" and watch for any long pauses.
<div>
<div>
<div><br><br> On 27/07/2009 11:29, Marco mangione wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hello,<br><br> i have a big queue: 3800mails and very slow load: 0.20 seems postfix and mailscanner dont want use server resource to speed up ... any idea?<br>
<br> marco<br></blockquote>
<br></div>
</div>
Jules<br><br> -- <br> Julian Field MEng CITP CEng<br><a href="http://www.MailScanner.info" target="_blank">www.MailScanner.info</a><br> Buy the MailScanner book at <a href="http://www.MailScanner.info/store" target="_blank">www.MailScanner.info/store</a><br>
<br> Need help customising MailScanner?<br> Contact me!<br> Need help fixing or optimising your systems?<br> Contact me!<br> Need help getting you started solving new requirements from your boss?<br> Contact me!<br><br> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<br>
Follow me at <a href="http://twitter.com/JulesFM" target="_blank">twitter.com/JulesFM</a> and <a href="http://twitter.com/MailScanner" target="_blank">twitter.com/MailScanner</a><br><br><br> -- <br> This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br> believed to be clean.<br><span style="color: rgb(136, 136, 136);"> <br> -- <br> MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br> Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br> Support MailScanner development - buy the book off the website! <br></span></div>
</blockquote>
</div>
<br></blockquote>
<p> </p>
</div></div><div>
<pre>--
Jules
<div><a href="mailto:MailScanner@ecs.soton.ac.uk" target="_blank">MailScanner@ecs.soton.ac.uk</a></div></pre>
</div><br><div><div></div><div>--
<br>This message has been scanned for viruses and
<br>dangerous content by
<a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>, and is
<br>believed to be clean.
</div></div><br></div></div>--<div><br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></div></blockquote></div><br>
</blockquote></div></div></div><br>
<br></div></div>--<div><br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></div></blockquote></div><br>
<br></div></div>--<div class="im"><br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></div></blockquote></div><br>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>