After upgrading to 4.78, I'm having problems getting MailScanner to process mail properly. It seems to only process mail originating from our domain. Incoming email seems to hang in the queue indefinitely.<br><br>Specifically, I believe the problem is here:<br>
<br><br>[root@mailserver incoming]# /usr/sbin/MailScanner --debug<br><br>In Debugging mode, not forking...<br>Trying to setlogsock(unix)<br>Building a message batch to scan...<br>Can't call method "print" on an undefined value at /usr/lib/MailScanner/MailScanner/PFDiskStore.pm line 743.<br>
<br>Some searching lead to checking the permission on the working dir:<br>drwxrwxr-x 14 clamav clamav 4096 Nov 2 10:04 incoming<br><br>But, not matter how much worldwritable permission I give it, it still complains, so I'm not so sure it's a permission issue.<br>
<br><br><br>Not sure if they're related, but I also receive this in --lint:<br><br>[root@mailserver incoming]# MailScanner --lint<br>Trying to setlogsock(unix)<br><br>Reading configuration file /etc/MailScanner/MailScanner.conf<br>
Read 856 hostnames from the phishing whitelist<br>Read 6690 hostnames from the phishing blacklists<br><br>Checking version numbers...<br>Version number in MailScanner.conf (4.78.17) is correct.<br><br>Unrar is not installed, it should be in /usr/bin/unrar.<br>
This is required for RAR archives to be read to check<br>filenames and filetypes. Virus scanning is not affected.<br><br><br>Your envelope_sender_header in spam.assassin.prefs.conf is correct.<br>MailScanner setting GID to (89)<br>
MailScanner setting UID to (89)<br><br>Checking for SpamAssassin errors (if you use it)...<br>Using SpamAssassin results cache<br>Connected to SpamAssassin cache database<br>SpamAssassin reported no errors.<br>Connected to Processing Attempts Database<br>
Created Processing Attempts Database successfully<br>There are 763 messages in the Processing Attempts Database<br>Using locktype = posix<br>MailScanner.conf says "Virus Scanners = clamav"<br>Found these virus scanners installed: clamavmodule<br>
===========================================================================<br>Error in tempdir() using MSlintXXXXXX: Parent directory (.) is not writable<br> at /usr/lib/MailScanner/MailScanner/MessageBatch.pm line 1210<br>
<br><br><br><br>MailScanner.conf:<br><br>[root@mailserver MailScanner]# cat /etc/MailScanner/MailScanner.conf |grep -v ^# |grep -v ^$ <br>%org-name% = ##Hidden to protect Privacy##<br>%org-long-name% = ##Hidden to protect Privacy##<br>
%web-site% = www.##Hidden to protect Privacy##.com<br>%etc-dir% = /etc/MailScanner<br>%report-dir% = /etc/MailScanner/reports/en<br>%rules-dir% = /etc/MailScanner/rules<br>%mcp-dir% = /etc/MailScanner/mcp<br>Max Children = 12<br>
Run As User = postfix<br>Run As Group = postfix<br>Queue Scan Interval = 6<br>Incoming Queue Dir = /var/spool/postfix/hold<br>Outgoing Queue Dir = /var/spool/postfix/incoming<br>Incoming Work Dir = /var/spool/MailScanner/incoming<br>
Quarantine Dir = /var/spool/MailScanner/quarantine<br>PID file = /var/run/MailScanner.pid<br>Restart Every = 7200<br>MTA = postfix<br>Sendmail = /usr/sbin/sendmail<br>Sendmail2 = /usr/sbin/sendmail<br>Incoming Work User = clamav<br>
Incoming Work Group = clamav<br>Incoming Work Permissions = 0640<br>Quarantine User = root<br>Quarantine Group = apache<br>Quarantine Permissions = 0660<br>Max Unscanned Bytes Per Scan = 100m<br>Max Unsafe Bytes Per Scan = 50m<br>
Max Unscanned Messages Per Scan = 30<br>Max Unsafe Messages Per Scan = 30<br>Max Normal Queue Size = 800<br>Scan Messages = %rules-dir%/scan.messages.rules<br>Reject Message = no<br>Maximum Processing Attempts = 6<br>Processing Attempts Database = /var/spool/MailScanner/incoming/Processing.db<br>
Maximum Attachments Per Message = 200<br>Expand TNEF = yes<br>Use TNEF Contents = replace<br>Deliver Unparsable TNEF = no<br>TNEF Expander = /usr/bin/tnef --maxsize=100000000<br>TNEF Timeout = 120<br>File Command = /usr/bin/file<br>
File Timeout = 20<br>Gunzip Command = /bin/gunzip<br>Gunzip Timeout = 50<br>Unrar Command = /usr/bin/unrar<br>Unrar Timeout = 50<br>Find UU-Encoded Files = no<br>Maximum Message Size = %rules-dir%/max.message.size.rules<br>
Maximum Attachment Size = -1<br>Minimum Attachment Size = -1<br>Maximum Archive Depth = %rules-dir%/max-depth-archive.rules<br>Find Archives By Content = yes<br>Unpack Microsoft Documents = yes<br>Zip Attachments = no<br>
Attachments Zip Filename = MessageAttachments.zip<br>Attachments Min Total Size To Zip = 100k<br>Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml<br>Add Text Of Doc = no<br>
Antiword = /usr/bin/antiword -f<br>Antiword Timeout = 50<br>Unzip Maximum Files Per Archive = 0<br>Unzip Maximum File Size = 50k<br>Unzip Filenames = *.txt *.ini *.log *.csv<br>Unzip MimeType = text/plain<br>Virus Scanning = yes<br>
Virus Scanners = clamav<br>Virus Scanner Timeout = 300<br>Deliver Disinfected Files = no<br>Silent Viruses = HTML-IFrame All-Viruses<br>Still Deliver Silent Viruses = no<br>Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar<br>
Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:<br>Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/*<br>Block Encrypted Messages = no<br>Block Unencrypted Messages = no<br>Allow Password-Protected Archives = %rules-dir%/passprotected.zipok.rules<br>
Check Filenames In Password-Protected Archives = yes<br>Allowed Sophos Error Messages =<br>Sophos IDE Dir = /opt/sophos-av/lib/sav<br>Sophos Lib Dir = /opt/sophos-av/lib<br>Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide<br>
Monitors for ClamAV Updates = /usr/local/share/clamav/*.cld /usr/local/share/clamav/*.cvd<br>ClamAVmodule Maximum Recursion Level = 8<br>ClamAVmodule Maximum Files = 1000<br>ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes)<br>
ClamAVmodule Maximum Compression Ratio = 250<br>Clamd Port = 3310<br>Clamd Socket = /var/run/clamav/clamd<br>Clamd Lock File = # /var/lock/subsys/clamd<br>Clamd Use Threads = yes<br>ClamAV Full Message Scan = yes<br>Fpscand Port = 10200<br>
Dangerous Content Scanning = %rules-dir%/content.scanning.rules<br>Allow Partial Messages = no<br>Allow External Message Bodies = no<br>Find Phishing Fraud = yes<br>Also Find Numeric Phishing = yes<br>Use Stricter Phishing Net = yes<br>
Highlight Phishing Fraud = yes<br>Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf<br>Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf<br>Country Sub-Domains List = %etc-dir%/country.domains.conf<br>
Allow IFrame Tags = disarm<br>Allow Form Tags = %rules-dir%/formtag.rules<br>Allow Script Tags = disarm<br>Allow WebBugs = disarm<br>Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap shim<br>Known Web Bug Servers = <a href="http://msgtag.com">msgtag.com</a><br>
Web Bug Replacement = <a href="http://www.mailscanner.tv/1x1spacer.gif">http://www.mailscanner.tv/1x1spacer.gif</a><br>Allow Object Codebase Tags = disarm<br>Convert Dangerous HTML To Text = no<br>Convert HTML To Text = no<br>
Archives Are = zip rar ole<br>Allow Filenames = \.pdf$<br>Deny Filenames =<br>Filename Rules = %rules-dir%/filename.rules<br>Allow Filetypes =<br>Allow File MIME Types =<br>Deny Filetypes =<br>Deny File MIME Types =<br>Filetype Rules = %rules-dir%/filetype.rules<br>
Archives: Allow Filenames =<br>Archives: Deny Filenames =<br>Archives: Filename Rules = %etc-dir%/archives.filename.rules.conf<br>Archives: Allow Filetypes =<br>Archives: Allow File MIME Types =<br>Archives: Deny Filetypes =<br>
Archives: Deny File MIME Types =<br>Archives: Filetype Rules = %etc-dir%/archives.filetype.rules.conf<br>Quarantine Infections = yes<br>Quarantine Silent Viruses = no<br>Quarantine Modified Body = no<br>Quarantine Whole Message = yes<br>
Quarantine Whole Messages As Queue Files = no<br>Keep Spam And MCP Archive Clean = no<br>Language Strings = %report-dir%/languages.conf<br>Rejection Report = %report-dir%/rejection.report.txt<br>Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt<br>
Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt<br>Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt<br>Deleted Size Message Report = %report-dir%/deleted.size.message.txt<br>
Stored Bad Content Message Report = %report-dir%/stored.content.message.txt<br>Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt<br>Stored Virus Message Report = %report-dir%/stored.virus.message.txt<br>
Stored Size Message Report = %report-dir%/stored.size.message.txt<br>Disinfected Report = %report-dir%/disinfected.report.txt<br>Inline HTML Signature = %report-dir%/inline.sig.html<br>Inline Text Signature = %report-dir%/inline.sig.txt<br>
Signature Image Filename = %report-dir%/sig.jpg<br>Signature Image <img> Filename = signature.jpg<br>Inline HTML Warning = %report-dir%/inline.warning.html<br>Inline Text Warning = %report-dir%/inline.warning.txt<br>
Sender Content Report = %report-dir%/sender.content.report.txt<br>Sender Error Report = %report-dir%/sender.error.report.txt<br>Sender Bad Filename Report = %report-dir%/sender.filename.report.txt<br>Sender Virus Report = %report-dir%/sender.virus.report.txt<br>
Sender Size Report = %report-dir%/sender.size.report.txt<br>Hide Incoming Work Dir = yes<br>Include Scanner Name In Reports = yes<br>Mail Header = X-%org-name%-MailScanner:<br>Spam Header = X-%org-name%-MailScanner-SpamCheck:<br>
Spam Score Header = X-%org-name%-MailScanner-SpamScore:<br>Information Header = X-%org-name%-MailScanner-Information:<br>Add Envelope From Header = yes<br>Add Envelope To Header = no<br>Envelope From Header = X-%org-name%-MailScanner-From:<br>
Envelope To Header = X-%org-name%-MailScanner-To:<br>ID Header = X-%org-name%-MailScanner-ID:<br>IP Protocol Version Header = # X-%org-name%-MailScanner-IP-Protocol:<br>Spam Score Character = s<br>SpamScore Number Instead Of Stars = no<br>
Minimum Stars If On Spam List = 0<br>Clean Header Value = Found to be clean<br>Infected Header Value = Found to be infected<br>Disinfected Header Value = Disinfected<br>Information Header Value = Please contact the ISP for more information<br>
Detailed Spam Report = yes<br>Include Scores In SpamAssassin Report = yes<br>Always Include SpamAssassin Report = no<br>Multiple Headers = append<br>Place New Headers At Top Of Message = no<br>Hostname = the %org-name% ($HOSTNAME) MailScanner<br>
Sign Messages Already Processed = no<br>Sign Clean Messages = no<br>Attach Image To Signature = no<br>Attach Image To HTML Message Only = yes<br>Allow Multiple HTML Signatures = no<br>Dont Sign HTML If Headers Exist = # In-Reply-To: References:<br>
Mark Infected Messages = yes<br>Mark Unscanned Messages = yes<br>Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details<br>Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2:<br>
Deliver Cleaned Messages = yes<br>Notify Senders = no<br>Notify Senders Of Viruses = no<br>Notify Senders Of Blocked Filenames Or Filetypes = yes<br>Notify Senders Of Blocked Size Attachments = yes<br>Notify Senders Of Other Blocked Content = yes<br>
Never Notify Senders Of Precedence = list bulk<br>Scanned Modify Subject = no # end<br>Scanned Subject Text = {Scanned}<br>Virus Modify Subject = start<br>Virus Subject Text = {Virus?}<br>Filename Modify Subject = start<br>
Filename Subject Text = {Rejected File Attachment}<br>Content Modify Subject = start<br>Content Subject Text = {Dangerous Content?}<br>Size Modify Subject = start<br>Size Subject Text = {Size}<br>Disarmed Modify Subject = no<br>
Disarmed Subject Text = {Disarmed}<br>Phishing Modify Subject = no<br>Phishing Subject Text = {Fraud?}<br>Spam Modify Subject = start<br>Spam Subject Text = {Spam}<br>High Scoring Spam Modify Subject = start<br>High Scoring Spam Subject Text = {High Scoring Spam}<br>
Warning Is Attachment = yes<br>Attachment Warning Filename = %org-name%-Attachment-Warning.txt<br>Attachment Encoding Charset = ISO-8859-1<br>Archive Mail =<br>Missing Mail Archive Is = directory<br>Send Notices = yes<br>
Notices Include Full Headers = yes<br>Hide Incoming Work Dir in Notices = no<br>Notice Signature = -- \nMailScanner\nEmail Virus Scanner\<a href="http://nwww.mailscanner.info">nwww.mailscanner.info</a><br>Notices From = MailScanner<br>
Notices To = postmaster<br>Local Postmaster = postmaster<br>Spam List Definitions = %etc-dir%/spam.lists.conf<br>Virus Scanner Definitions = %etc-dir%/virus.scanners.conf<br>Spam Checks = yes<br>Spam List = # spamhaus-ZEN # You can un-comment this to enable them<br>
Spam Domain List =<br>Spam Lists To Be Spam = 1<br>Spam Lists To Reach High Score = 3<br>Spam List Timeout = 10<br>Max Spam List Timeouts = 7<br>Spam List Timeouts History = 10<br>Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules<br>
Is Definitely Spam = %rules-dir%/spam.blacklist.rules<br>Definite Spam Is High Scoring = yes<br>Ignore Spam Whitelist If Recipients Exceed = 20<br>Max Spam Check Size = 512k<br>Use Watermarking = no<br>Add Watermark = yes<br>
Check Watermarks With No Sender = yes<br>Treat Invalid Watermarks With No Sender as Spam = nothing<br>Check Watermarks To Skip Spam Checks = yes<br>Watermark Secret = %org-name%-Secret<br>Watermark Lifetime = 604800<br>Watermark Header = X-%org-name%-MailScanner-Watermark:<br>
Use SpamAssassin = yes<br>Max SpamAssassin Size = 200k<br>Required SpamAssassin Score = 5<br>High SpamAssassin Score = 8<br>SpamAssassin Auto Whitelist = yes<br>SpamAssassin Timeout = 75<br>Max SpamAssassin Timeouts = 10<br>
SpamAssassin Timeouts History = 30<br>Check SpamAssassin If On Spam List = yes<br>Include Binary Attachments In SpamAssassin = no<br>Spam Score = yes<br>Cache SpamAssassin Results = yes<br>SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db<br>
Rebuild Bayes Every = 86400<br>Wait During Bayes Rebuild = no<br>Use Custom Spam Scanner = no<br>Max Custom Spam Scanner Size = 20k<br>Custom Spam Scanner Timeout = 20<br>Max Custom Spam Scanner Timeouts = 10<br>Custom Spam Scanner Timeout History = 20<br>
Spam Actions = Spam Actions = store store-nonspam deliver header "X-Spam-Status: Yes"<br>High Scoring Spam Actions = store<br>Non Spam Actions = %rules-dir%/nonspam.rules<br>SpamAssassin Rule Actions =<br>Sender Spam Report = %report-dir%/sender.spam.report.txt<br>
Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt<br>Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt<br>Inline Spam Warning = %report-dir%/inline.spam.warning.txt<br>Recipient Spam Report = %report-dir%/recipient.spam.report.txt<br>
Enable Spam Bounce = %rules-dir%/bounce.rules<br>Bounce Spam As Attachment = no<br>Syslog Facility = mail<br>Log Speed = no<br>Log Spam = no<br>Log Non Spam = no<br>Log Delivery And Non-Delivery = no<br>Log Permitted Filenames = no<br>
Log Permitted Filetypes = no<br>Log Permitted File MIME Types = no<br>Log Silent Viruses = no<br>Log Dangerous HTML Tags = no<br>Log SpamAssassin Rule Actions = yes<br>SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp<br>
SpamAssassin User State Dir = /var/spool/MailScanner/spamassassin<br>SpamAssassin Install Prefix =<br>SpamAssassin Site Rules Dir = /etc/mail/spamassassin<br>SpamAssassin Local Rules Dir =<br>SpamAssassin Local State Dir = # /var/lib/spamassassin<br>
SpamAssassin Default Rules Dir =<br>MCP Checks = no<br>First Check = spam<br>MCP Required SpamAssassin Score = 1<br>MCP High SpamAssassin Score = 10<br>MCP Error Score = 1<br>MCP Header = X-%org-name%-MailScanner-MCPCheck:<br>
Non MCP Actions = deliver<br>MCP Actions = deliver<br>High Scoring MCP Actions = deliver<br>Bounce MCP As Attachment = no<br>MCP Modify Subject = start<br>MCP Subject Text = {MCP?}<br>High Scoring MCP Modify Subject = start<br>
High Scoring MCP Subject Text = {MCP?}<br>Is Definitely MCP = no<br>Is Definitely Not MCP = no<br>Definite MCP Is High Scoring = no<br>Always Include MCP Report = no<br>Detailed MCP Report = yes<br>Include Scores In MCP Report = no<br>
Log MCP = no<br>MCP Max SpamAssassin Timeouts = 20<br>MCP Max SpamAssassin Size = 100k<br>MCP SpamAssassin Timeout = 10<br>MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf<br>MCP SpamAssassin User State Dir =<br>
MCP SpamAssassin Local Rules Dir = %mcp-dir%<br>MCP SpamAssassin Default Rules Dir = %mcp-dir%<br>MCP SpamAssassin Install Prefix = %mcp-dir%<br>Recipient MCP Report = %report-dir%/recipient.mcp.report.txt<br>Sender MCP Report = %report-dir%/sender.mcp.report.txt<br>
Use Default Rules With Multiple Recipients = no<br>Read IP Address From Received Header = no<br>Spam Score Number Format = %d<br>MailScanner Version Number = 4.78.17<br>SpamAssassin Cache Timings = 1800,300,10800,172800,600<br>
Debug = no<br>Debug SpamAssassin = no<br>Run In Foreground = no<br>Always Looked Up Last = no<br>Always Looked Up Last After Batch = no<br>Deliver In Background = yes<br>Delivery Method = batch<br>Split Exim Spool = no<br>
Lockfile Dir = /var/spool/MailScanner/incoming/Locks<br>Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions<br>Lock Type = <br>Syslog Socket Type =<br>Automatic Syntax Check = yes<br>Minimum Code Status = supported<br>