<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Cambria, sans-serif; ">
<div>
<div>
<div>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">Open mailscanner’s binary and add –U to the # line. /usr/sbin/MailScanner <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><br>
</span></p>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">#!/usr/bin/perl –I/Usr/share/MailScanner … add –U</span></p>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><br>
</span></p>
</div>
<div>
<div>
<div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">--<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Jeremy McSpadden<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Flux Labs, Inc<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><a href="http://www.fluxlabs.net/" style="color: blue; text-decoration: underline; "><span style="color: rgb(31, 73, 125); ">http://www.fluxlabs.net</span></a><br>
Endless Solutions<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Office</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-588-4626</span><span style="font-size: 11pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "><o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Cell</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div>
</div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Kocisky <<a href="mailto:kocisky@autistici.org">kocisky@autistici.org</a>><br>
<span style="font-weight:bold">Reply-To: </span>MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
<span style="font-weight:bold">Date: </span>Mon, 27 Feb 2012 22:22:33 -0500<br>
<span style="font-weight:bold">To: </span>MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
<span style="font-weight:bold">Subject: </span>Re: MailScanner 4.84 - attempted to kill MailScanner<br>
</div>
<div><br>
</div>
i've removed the virus scanning from MailScanner.conf and now it doesn't hang anymore, thats a start!
<div><br>
</div>
<div>Virus Scanning = no</div>
<div><br>
</div>
<div>(i've removed also that <span style="">/var/spool/MailScanner/</span><span style="">incoming/Processing.db which i didn't really understand what it is</span>)</div>
<div><br>
<div class="gmail_quote">On 27 February 2012 22:00, Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org">kocisky@autistici.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
talked too early, it crashed again:
<div><br>
</div>
<div>
<div><br>
</div>
<div>
<div>MailScanner --debug</div>
<div><br>
</div>
<div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div><br>
</div>
<div>In Debugging mode, not forking...</div>
<div>Trying to setlogsock(unix)</div>
<div class="im">
<div>Building a message batch to scan...</div>
</div>
<div>Have a batch of 30 messages.</div>
<div>Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.</div>
<div>[root@mail incoming]# </div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>the following is an extract of the /var/log/maillog:</div>
<div><br>
</div>
<div>
<div>Feb 27 22:01:02 mail postfix/cleanup[2118]: 45D07200106: message-id=<<a href="mailto:20120228030102.45D07200106@myserver.com" target="_blank">20120228030102.45D07200106@myserver.com</a>></div>
<div>Feb 27 22:01:02 mail update.bad.phishing.sites: Delaying cron job up to 600 seconds</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Started SQL Logging child</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:03 mail MailScanner[2247]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:05 mail MailScanner[2247]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:05 mail MailScanner[2247]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:05 mail MailScanner[2247]: Using locktype = flock</div>
<div>Feb 27 22:01:05 mail MailScanner[2247]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:05 mail MailScanner[2247]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Started SQL Logging child</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:08 mail MailScanner[2252]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:10 mail MailScanner[2252]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:10 mail MailScanner[2252]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:10 mail MailScanner[2252]: Using locktype = flock</div>
<div>Feb 27 22:01:10 mail MailScanner[2252]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:10 mail MailScanner[2252]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Started SQL Logging child</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:13 mail MailScanner[2257]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Using locktype = flock</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Making attempt 4 at processing message 264A7200231.A7517</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:15 mail MailScanner[2257]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Started SQL Logging child</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:18 mail MailScanner[2262]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Using locktype = flock</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Making attempt 4 at processing message 23EBD20023A.AA792</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:20 mail MailScanner[2262]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Started SQL Logging child</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:23 mail MailScanner[2267]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:25 mail MailScanner[2267]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:25 mail MailScanner[2267]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:26 mail MailScanner[2267]: Using locktype = flock</div>
<div>Feb 27 22:01:26 mail MailScanner[2267]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:26 mail MailScanner[2267]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Started SQL Logging child</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:28 mail MailScanner[2303]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:30 mail MailScanner[2303]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:30 mail MailScanner[2303]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:30 mail MailScanner[2303]: Using locktype = flock</div>
<div>Feb 27 22:01:31 mail MailScanner[2303]: Making attempt 6 at processing message EC11020005B.A3395</div>
<div>Feb 27 22:01:31 mail MailScanner[2303]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times</div>
<div>Feb 27 22:01:31 mail MailScanner[2303]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Started SQL Logging child</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:33 mail MailScanner[2308]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:35 mail MailScanner[2308]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:35 mail MailScanner[2308]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:35 mail MailScanner[2308]: Using locktype = flock</div>
<div>Feb 27 22:01:35 mail MailScanner[2308]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times</div>
<div>Feb 27 22:01:35 mail MailScanner[2308]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Started SQL Logging child</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:38 mail MailScanner[2313]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:40 mail MailScanner[2313]: Connected to Processing Attempts Database</div>
<div>Feb 27 22:01:40 mail MailScanner[2313]: Found 79 messages in the Processing Attempts Database</div>
<div>Feb 27 22:01:40 mail MailScanner[2313]: Using locktype = flock</div>
<div>Feb 27 22:01:40 mail MailScanner[2313]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times</div>
<div>Feb 27 22:01:40 mail MailScanner[2313]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them.</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Read 869 hostnames from the phishing whitelist</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Read 5345 hostnames from the phishing blacklists</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLBlacklist</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Blacklist</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Read 0 blacklist entries</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function MailWatchLogging</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Started SQL Logging child</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLWhitelist</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Whitelist</div>
<div>Feb 27 22:01:43 mail MailScanner[2319]: Read 0 whitelist entries</div>
<div>Feb 27 22:01:44 mail MailScanner[2319]: Using SpamAssassin results cache</div>
<div>Feb 27 22:01:44 mail MailScanner[2319]: Connected to SpamAssassin cache database</div>
<div>Feb 27 22:01:44 mail MailScanner[2319]: Enabling SpamAssassin auto-whitelist functionality...</div>
<div>Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection rate 2/60s for (smtp:220.248.164.185) at Feb 27 21:58:23</div>
<div>Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection count 2 for (smtp:220.248.164.185) at Feb 27 21:58:23</div>
<div>Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max cache size 1 at Feb 27 21:58:23</div>
</div>
<div><br>
</div>
<div>
<div>[root@mail ~]# MailScanner --lint</div>
<div class="im">
<div>Trying to setlogsock(unix)</div>
<div><br>
</div>
<div>Reading configuration file /etc/MailScanner/MailScanner.conf</div>
</div>
<div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div class="im">
<div>Read 869 hostnames from the phishing whitelist</div>
</div>
<div>Read 5345 hostnames from the phishing blacklists</div>
<div class="im">
<div>Config: calling custom init function SQLBlacklist</div>
<div>Starting up SQL Blacklist</div>
<div>Read 0 blacklist entries</div>
<div>Config: calling custom init function MailWatchLogging</div>
<div>Started SQL Logging child</div>
<div>Config: calling custom init function SQLWhitelist</div>
<div>Starting up SQL Whitelist</div>
<div>Read 0 whitelist entries</div>
<div><br>
</div>
<div>Checking version numbers...</div>
<div>Version number in MailScanner.conf (4.84.3) is correct.</div>
<div><br>
</div>
<div>Unrar is not installed, it should be in /usr/bin/unrar.</div>
<div>This is required for RAR archives to be read to check</div>
<div>filenames and filetypes. Virus scanning is not affected.</div>
<div><br>
</div>
<div><br>
</div>
<div>Your envelope_sender_header in spam.assassin.prefs.conf is correct.</div>
<div>MailScanner setting GID to (89)</div>
<div>MailScanner setting UID to (89)</div>
<div><br>
</div>
<div>Checking for SpamAssassin errors (if you use it)...</div>
<div>Using SpamAssassin results cache</div>
<div>Connected to SpamAssassin cache database</div>
</div>
<div class="im">
<div>SpamAssassin reported no errors.</div>
<div>Connected to Processing Attempts Database</div>
<div>Created Processing Attempts Database successfully</div>
</div>
<div>There are 79 messages in the Processing Attempts Database</div>
<div class="im">
<div>Using locktype = posix</div>
<div>MailScanner.conf says "Virus Scanners = clamd"</div>
<div>Found these virus scanners installed: clamd</div>
<div>===========================================================================</div>
<div>Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com" target="_blank">
eicar.com</a>)</div>
<div>Other Checks: Found 1 problems</div>
<div>Virus and Content Scanning: Starting</div>
<div>Clamd::INFECTED::Eicar-Test-Signature :: ./1/</div>
<div>Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a href="http://eicar.com" target="_blank">eicar.com</a></div>
<div>Virus Scanning: Clamd found 2 infections</div>
<div>Infected message 1 came from 10.1.1.1</div>
<div>Virus Scanning: Found 2 viruses</div>
<div>===========================================================================</div>
<div>Virus Scanner test reports:</div>
<div>Clamd said "<a href="http://eicar.com" target="_blank">eicar.com</a> was infected: Eicar-Test-Signature"</div>
<div><br>
</div>
<div>If any of your virus scanners (clamd)</div>
<div>are not listed there, you should check that they are installed correctly</div>
<div>and that MailScanner is finding them correctly via its virus.scanners.conf.</div>
<div>Config: calling custom end function SQLBlacklist</div>
<div>Closing down by-domain spam blacklist</div>
<div>Config: calling custom end function MailWatchLogging</div>
<div>Config: calling custom end function SQLWhitelist</div>
<div>Closing down by-domain spam whitelist</div>
</div>
<div>[root@mail ~]#</div>
</div>
<div><br>
</div>
<div>any ideas? something to say: i've kust updated, for the MailScanner configuration i've used:</div>
<div><br>
</div>
<div>
<div>upgrade_MailScanner_conf MailScanner.conf MailScanner.conf.rpmnew > MailScanner.new</div>
<div>mv -f MailScanner.conf MailScanner.old</div>
<div>mv -f MailScanner.new MailScanner.conf</div>
</div>
<div><br>
</div>
<div>thanks again!!</div>
<span class="HOEnZb"><font color="#888888">
<div>kocisky</div>
</font></span>
<div>
<div class="h5"><br>
<div class="gmail_quote">On 27 February 2012 18:34, Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
removing the file /var/spool/MailScanner/incoming/Processing.db it restarted to deliver the messages, i only need to figure out how to requeue the messages that were quarantined, should i move them into:
<div><br>
</div>
<div>Incoming Queue Dir = /var/spool/postfix/hold ?
<div>can i move the FOLDER/message directly?</div>
<div><br>
</div>
<div>Thanks!!</div>
<span><font color="#888888">
<div>kocisky</div>
</font></span>
<div>
<div>
<div>
<div><br>
<div class="gmail_quote">On 27 February 2012 18:07, Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Thanks Martin for the quick reply, i didn't find anything on <a href="http://wiki.mailscanner.info/" target="_blank">http://wiki.mailscanner.info/</a>
<div><br>
</div>
<div>I'm actually using Maildir format for emails with postfix as mta, this is the filesystem structure for the quarantine files:</div>
<div><br>
</div>
<div>
<div>[root@mail quarantine]# ls -l 20120227/</div>
<div>total 420</div>
<div>drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F</div>
<div>drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E</div>
<div><br>
</div>
<div>
<div>[root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message </div>
<div>-rw-rw----. 1 postfix clam 80013 Feb 27 00:41 20120227/00C2D202033.A443F/message</div>
<div>[root@mail quarantine]#</div>
<div><br>
</div>
<div><br>
</div>
<div>i've tried to move the messages in /var/spool/postfix/incoming/ and changed the ownership but nothing happend.</div>
<div><br>
</div>
<div>*EDIT*</div>
<div><br>
</div>
<div>i've just noticed that since the update the mta is not delivering messages:</div>
<div><br>
</div>
<div>Found 250 messages in the Processing Attempts Database</div>
<div>Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock</div>
<div>Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times</div>
<div>Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times</div>
<div>Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
<div>Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file /etc/MailScanner/MailScanner.conf </div>
<div><br>
</div>
<div><br>
</div>
<div>my MailScanner --lint:</div>
<div><br>
</div>
<div>
<div>[root@mail bayes]# MailScanner --lint</div>
<div>Trying to setlogsock(unix)</div>
<div><br>
</div>
<div>Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div>Read 869 hostnames from the phishing whitelist</div>
<div>Read 5361 hostnames from the phishing blacklists</div>
<div>Config: calling custom init function SQLBlacklist</div>
<div>Starting up SQL Blacklist</div>
<div>Read 0 blacklist entries</div>
<div>Config: calling custom init function MailWatchLogging</div>
<div>Started SQL Logging child</div>
<div>Config: calling custom init function SQLWhitelist</div>
<div>Starting up SQL Whitelist</div>
<div>Read 0 whitelist entries</div>
<div><br>
</div>
<div>Checking version numbers...</div>
<div>Version number in MailScanner.conf (4.84.3) is correct.</div>
<div><br>
</div>
<div>Unrar is not installed, it should be in /usr/bin/unrar.</div>
<div>This is required for RAR archives to be read to check</div>
<div>filenames and filetypes. Virus scanning is not affected.</div>
<div><br>
</div>
<div><br>
</div>
<div>Your envelope_sender_header in spam.assassin.prefs.conf is correct.</div>
<div>MailScanner setting GID to (89)</div>
<div>MailScanner setting UID to (89)</div>
<div><br>
</div>
<div>Checking for SpamAssassin errors (if you use it)...</div>
<div>Using SpamAssassin results cache</div>
<div>Connected to SpamAssassin cache database</div>
<div>bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db update ignored: Permission denied</div>
<div>SpamAssassin reported no errors.</div>
<div>
<div>Connected to Processing Attempts Database</div>
</div>
<div>Created Processing Attempts Database successfully</div>
<div>There are 250 messages in the Processing Attempts Database</div>
<div>Using locktype = posix</div>
<div>MailScanner.conf says "Virus Scanners = clamd"</div>
<div>Found these virus scanners installed: clamd</div>
<div>===========================================================================</div>
<div>Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com" target="_blank">
eicar.com</a>)</div>
<div>Other Checks: Found 1 problems</div>
<div>
<div>Virus and Content Scanning: Starting</div>
</div>
<div>Clamd::INFECTED::Eicar-Test-Signature :: ./1/</div>
<div>Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a href="http://eicar.com" target="_blank">eicar.com</a></div>
<div>Virus Scanning: Clamd found 2 infections</div>
<div>Infected message 1 came from 10.1.1.1</div>
<div>Virus Scanning: Found 2 viruses</div>
<div>===========================================================================</div>
<div>Virus Scanner test reports:</div>
<div>Clamd said "<a href="http://eicar.com" target="_blank">eicar.com</a> was infected: Eicar-Test-Signature"</div>
<div><br>
</div>
<div>If any of your virus scanners (clamd)</div>
<div>are not listed there, you should check that they are installed correctly</div>
<div>and that MailScanner is finding them correctly via its virus.scanners.conf.</div>
<div>Config: calling custom end function SQLBlacklist</div>
<div>Closing down by-domain spam blacklist</div>
<div>Config: calling custom end function MailWatchLogging</div>
<div>Config: calling custom end function SQLWhitelist</div>
<div>Closing down by-domain spam whitelist</div>
<div>[root@mail bayes]#</div>
</div>
<div>
<div>
<div><br>
<div class="gmail_quote">On 27 February 2012 16:09, Martin Hepworth <span dir="ltr">
<<a href="mailto:maxsec@gmail.com" target="_blank">maxsec@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Depends on how u saved the file as mbox files or queue files
<div><br>
</div>
<div>Should be info on the wiki on how to rerun depending on the mta etc </div>
<span><font color="#888888">
<div><br>
</div>
</font></span>
<div><span><font color="#888888">Martin </font></span>
<div>
<div><br>
<br>
On Monday, 27 February 2012, Kocisky wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi all,
<div><br>
</div>
<div>I had the same issue, updating the os it updated also that perl/archive package, my question now is how do i re run MailScanner over all the messages that have been quarantined?</div>
<div><br>
</div>
<div>in particular that perl/archive pkg was crashing because of docx and xlsx files, the problem is that all those are valid files/emails and i need to reprocess them.</div>
<div><br>
</div>
<div>Thanks!</div>
<div>Kociscky</div>
<div><br>
</div>
<div>
<div>Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times</div>
<div>Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times</div>
<div>Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus Scanner version 4.84.3 starting...</div>
</div>
<div><br>
<div class="gmail_quote">On 2 December 2011 01:32, Martin Hepworth <span dir="ltr">
<<a>maxsec@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
That's a perl issue and patch<span><font color="#888888"><br>
<br>
Martin</font></span>
<div>
<div><br>
<br>
<br>
On Thursday, 1 December 2011, Michel Bulgado <<a>michel@casa.co.cu</a>> wrote:<br>
> John Wilcock wrote:<br>
><br>
> Le 01/12/2011 18:44, Michel Bulgado a écrit :<br>
><br>
> Insecure dependency in chmod while running with -T switch at<br>
> /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed.<br>
><br>
> There's a patch for that in <a href="https://rt.cpan.org/Public/Bug/Display.html?id=61930" target="_blank">
https://rt.cpan.org/Public/Bug/Display.html?id=61930</a><br>
><br>
> Ok, i download the patch file, i see the patch is for perl files, so i ask , the problem is perl o MailScanner?<br>
><br>
> So, when a go to apply the patch, I get a error, he can't find the file 10_chmod.t<br>
><br>
> [root@server MailScanner]# patch -p1 < patch_MailScanner.txt<br>
> can't find file to patch at input line 5<br>
> Perhaps you used the wrong -p or --strip option?<br>
> The text leading up to this was:<br>
> --------------------------<br>
> |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm<br>
> |index f86ef75..4bb2171 100644<br>
> |--- a/lib/Archive/Zip/Member.pm<br>
> |+++ b/lib/Archive/Zip/Member.pm<br>
> --------------------------<br>
> File to patch: /usr/share/perl5/Archive/Zip/Member.pm<br>
> patching file /usr/share/perl5/Archive/Zip/Member.pm<br>
> can't find file to patch at input line 46<br>
> Perhaps you used the wrong -p or --strip option?<br>
> The text leading up to this was:<br>
> --------------------------<br>
> |diff --git a/t/10_chmod.t b/t/10_chmod.t<br>
> |index 7ae647f..0495062 100644<br>
> |--- a/t/10_chmod.t<br>
> |+++ b/t/10_chmod.t<br>
> --------------------------<br>
> File to patch:<br>
> Skip this patch? [y] n<br>
> File to patch:<br>
> Skip this patch? [y] y<br>
> Skipping patch.<br>
> 1 out of 1 hunk ignored<br>
> Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch<br>
><br>
> Ideas?<br>
><br>
><br>
><br>
<br>
</div>
</div>
<div>
<div>-- <br>
-- <br>
Martin Hepworth<br>
Oxford, UK<br>
</div>
</div>
<br>
--<br>
MailScanner mailing list<br>
<a>mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
</div>
</div>
<div>
<div><br>
<br>
-- <br>
-- <br>
Martin Hepworth<br>
Oxford, UK<br>
</div>
</div>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
-- MailScanner mailing list <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a> Before posting, read
<a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a> Support MailScanner development - buy the book off the website!
</span>
</body>
</html>