<div dir="ltr"><div><div><div>I am terribly wrong. <br>I have been able to prove to myself the configuration file /etc/MailScanner/conf.d/CNM-MailScanner.conf is read and affects many configuration parameters.<br><br></div>
However this line:<br>%org-name% = CNM<br></div>does not take precedence over this line in /etc/MailScanner/MailScanner.conf:<br> %org-name% = unconfigured-debian-site<br></div>So all the places it should modify other configuration parameters they are not modified.<br>
When I look in the internet headers of email passed through I see lines like these:<br>X-unconfigured-debian-site-MailScanner-From: xxxxxxxxxx@yyyyyyyy.zzzz<br>X-unconfigured-debian-site-MailScanner: Found to be clean<br>
X-unconfigured-debian-site-MailScanner-ID: 7E9D75F8D.AA75F<br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Mar 22, 2013 at 10:20 AM, Robert Lopez <span dir="ltr"><<a href="mailto:rlopezcnm@gmail.com" target="_blank">rlopezcnm@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div><div>Martin,<br><br></div>I had done that. There are some "errors"; part related to the fact the local conf file is not loaded.<br>
<br></div>The first error is <br>ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf<br>
ERROR: is not correct, it should match X-unconfigured-debian-site-MailScanner-From<br></div>and it is because the /etc/MailScanner/conf.d/CNM-MailScanner.conf file sets <br>envelope_sender_header X-CNM-MailScanner-From<br>
<br></div>The second error/warning is<br>config: failed to parse line, skipping, in "/etc/MailScanner/spam.assassin.prefs.conf": use_auto_whitelist 0<br>SpamAssassin reported an error.<br></div>which I have never been able to understand, but is there because I want the whitelist off. Also<br>
</div>I assume the "SpamAssassin reported an error" refers to the line above it.<br><br></div>The result of the run is below.<br><div><div><br><br><br># MailScanner -debug --lint<br>Trying to setlogsock(unix)<div class="im">
<br>
<br>Reading configuration file /etc/MailScanner/MailScanner.conf<br>Reading configuration file /etc/MailScanner/conf.d/CNM-MailScanner.conf<br></div>Read 869 hostnames from the phishing whitelist<br>Read 5414 hostnames from the phishing blacklists<br>
<br>Checking version numbers...<br>Version number in MailScanner.conf (4.84.5) is correct.<br><br>ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf<br>ERROR: is not correct, it should match X-unconfigured-debian-site-MailScanner-From<br>
<br>MailScanner setting GID to (117)<br>MailScanner setting UID to (108)<br><br>Checking for SpamAssassin errors (if you use it)...<br>Using SpamAssassin results cache<br>Connected to SpamAssassin cache database<br>config: failed to parse line, skipping, in "/etc/MailScanner/spam.assassin.prefs.conf": use_auto_whitelist 0<br>
SpamAssassin reported an error.<br>I have found clamd scanners installed, and will use them all by default.<br>Connected to Processing Attempts Database<br>Created Processing Attempts Database successfully<br>There are 0 messages in the Processing Attempts Database<br>
Using locktype = posix<br>MailScanner.conf says "Virus Scanners = auto"<br>Found these virus scanners installed: clamd<br>===========================================================================<br>Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com" target="_blank">eicar.com</a>)<br>
Other Checks: Found 1 problems<br>Virus and Content Scanning: Starting<br>Clamd::INFECTED::Eicar-Test-Signature :: ./1/<br>Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a href="http://eicar.com" target="_blank">eicar.com</a><br>
Virus Scanning: Clamd found 2 infections<br>
Infected message 1 came from 10.1.1.1<br>Virus Scanning: Found 2 viruses<br>===========================================================================<br>Virus Scanner test reports:<br>Clamd said "<a href="http://eicar.com" target="_blank">eicar.com</a> was infected: Eicar-Test-Signature"<br>
<br>If any of your virus scanners (clamd)<br>are not listed there, you should check that they are installed correctly<br>and that MailScanner is finding them correctly via its virus.scanners.conf.<br><br><div><div><div><div>
<br><br></div></div></div></div></div></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Mar 22, 2013 at 5:43 AM, Martin Hepworth <span dir="ltr"><<a href="mailto:maxsec@gmail.com" target="_blank">maxsec@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">run in debug mode and see if you've a problem with the info in the include directory<br><br>also try a "MailScanner --lint" as well.<br>
<br clear="all"><div>-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div>
<br><br><div class="gmail_quote"><div><div>On 21 March 2013 23:48, Robert Lopez <span dir="ltr"><<a href="mailto:rlopezcnm@gmail.com" target="_blank">rlopezcnm@gmail.com</a>></span> wrote:<br></div></div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<div dir="ltr"><div><div><div><div>MailScanner version 4.84.5<br><br>NAME="Ubuntu"<br>VERSION="12.04.2 LTS, Precise Pangolin"<br>ID=ubuntu<br>ID_LIKE=debian<br>PRETTY_NAME="Ubuntu precise (12.04.2 LTS)"<br>
VERSION_ID="12.04"<br><br></div>None of the configuration parameters in /etc/MailScanner/conf.d/CNM-MailScanner.conf are incorporated.<br></div>Last of /etc/MailScanner/MailScanner.conf still says:<br><br>include /etc/MailScanner/conf.d/*<br>
<br></div>For each startup log file says:<br><br>Reading configuration file /etc/MailScanner/MailScanner.conf<br>Reading configuration file /etc/MailScanner/conf.d/CNM-MailScanner.conf<br><br></div>What have I done wrong?<span><font color="#888888"><br clear="all">
<div><div><div><div><div><br>-- <br>Robert Lopez<br>Unix Systems Administrator<br>Central New Mexico Community College (CNM)<br>525 Buena Vista SE<br>Albuquerque, New Mexico 87106
</div></div></div></div></div></font></span></div>
<br></div></div><span><font color="#888888">--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></font></span></blockquote></div><br>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Robert Lopez<br>Unix Systems Administrator<br>Central New Mexico Community College (CNM)<br>525 Buena Vista SE<br>Albuquerque, New Mexico 87106
</div>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Robert Lopez<br>Unix Systems Administrator<br>Central New Mexico Community College (CNM)<br>525 Buena Vista SE<br>Albuquerque, New Mexico 87106
</div>