<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Shawn,</p>
<p>this is in maillog:<br>
</p>
<p>Apr 26 19:39:48 ns MailScanner[14367]: Spam Actions: message
x3QGKubV014105 actions are deliver,header,attachment <br>
Apr 26 19:44:31 ns MailScanner[14480]: Making attempt 6 at
processing message x3QGKubV014105 <br>
Apr 26 19:44:36 ns MailScanner[14480]: Message x3QGKubV014105 from
91.196.126.199 (<a class="moz-txt-link-abbreviated" href="mailto:info@somedomain.bg">info@somedomain.bg</a>) to festa.bg is spam,
SpamAssassin (not cached, score=4.956, required 3, BAYES_05 -0.50,
FUZZY_XPILL 2.80, HTML_IMAGE_ONLY_20 1.55, HTML_MESSAGE 0.00,
HTML_MIME_NO_HTML_TAG 0.38, MIME_HTML_ONLY 0.72, T_REMOTE_IMAGE
0.01) <br>
Apr 26 19:44:36 ns MailScanner[14480]: Spam Actions: message
x3QGKubV014105 actions are deliver,header,attachment <br>
Apr 26 19:44:37 ns MailScanner[12651]: Warning: skipping message
x3QGKubV014105 as it has been attempted too many times <br>
Apr 26 19:44:37 ns MailScanner[12651]: Quarantined message
x3QGKubV014105 as it caused MailScanner to crash several times <br>
Apr 26 19:44:37 ns MailScanner[12651]: Saved entire message to
/var/spool/MailScanner/quarantine/20190426/x3QGKubV014105 <br>
</p>
<p>Yesterday I removed "attachment" but forgot to delete
custom.conf~ made by joe text editor and this overrided my changes
in custom.conf</p>
<p>Will see and write tomorrow. <br>
</p>
<p>Now I saw this ERROR: The "envelope_ ... in <br>
</p>
<p>root@ns:/home/laskov# MailScanner --lint<br>
Trying to setlogsock(unix)<br>
Skipping Custom Function file CustomAction.pm.orig as its name
does not end in .pm or .pl<br>
<br>
Reading configuration file /etc/MailScanner/MailScanner.conf<br>
Reading configuration file /etc/MailScanner/conf.d/README<br>
Reading configuration file
/etc/MailScanner/conf.d/custom.laskov.conf<br>
Read 1501 hostnames from the phishing whitelist<br>
Read 16624 hostnames from the phishing blacklists<br>
<br>
Checking version numbers...<br>
Version number in MailScanner.conf (5.1.3) is correct.<br>
<br>
ERROR: The "envelope_sender_header" in your spamassassin.conf<br>
ERROR: is not correct, it should match
X-FestaHolding-MailScanner-From<br>
<br>
<br>
Checking for SpamAssassin errors (if you use it)...<br>
Using SpamAssassin results cache<br>
Connected to SpamAssassin cache database<br>
SpamAssassin reported no errors.<br>
Connected to Processing Attempts Database<br>
Created Processing Attempts Database successfully<br>
There are 0 messages in the Processing Attempts Database<br>
Using locktype = posix<br>
MailScanner.conf says "Virus Scanners = clamd"<br>
mktemp: invalid option -- '-'<br>
Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]<br>
Found these virus scanners installed: clamd<br>
===========================================================================<br>
Filename Checks: Windows/DOS Executable (1 eicar.com)<br>
Other Checks: Found 1 problems<br>
Virus and Content Scanning: Starting<br>
Clamd::INFECTED::Eicar-Test-Signature :: ./1/<br>
Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com<br>
Virus Scanning: Clamd found 2 infections<br>
Infected message 1 came from 10.1.1.1<br>
Virus Scanning: Found 2 viruses<br>
===========================================================================<br>
Virus Scanner test reports:<br>
Clamd said "eicar.com was infected: Eicar-Test-Signature"<br>
<br>
If any of your virus scanners (clamd)<br>
are not listed there, you should check that they are installed
correctly<br>
and that MailScanner is finding them correctly via its
virus.scanners.conf.<br>
root@ns:/home/laskov# <br>
</p>
<p>... and now it says<br>
</p>
<p>Your envelope_sender_header in spamassassin.conf is correct.</p>
"...<br>
mktemp: invalid option -- '-'<br>
Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]<br>
..."
<p>persists from many MailScanner versions in the past. My OS is
Slackware 14-2<br>
</p>
<p>Regards</p>
<p>Valentin<br>
</p>
<div class="moz-cite-prefix">На 26.04.19 г. в 17:13 ч., Shawn
Iverson via MailScanner написа:<br>
</div>
<blockquote type="cite"
cite="mid:CABu_8zLN3JmDxEWt9XhiXz=sBmX-OjCa4q9mF6DJ+euwK-c3_g@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div>Valentin,</div>
<div><br>
</div>
Is there any additional information in the mail log to help
explain the "Message attempted to kill MainScanner" message?</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Apr 25, 2019 at 12:09
PM Valentin Laskov <<a href="mailto:it@festa.bg"
moz-do-not-send="true">it@festa.bg</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hello,<br>
<br>
Yesterday I updated MailScanner from 5.0.7 to 5.1.3<br>
<br>
I noticed messages like this<br>
<br>
Subject: Other Bad Content Detected<br>
<br>
Report: MailScanner: Message attempted to kill MailScanner<br>
<br>
All of letters causing this are Spam. In MailScanner.conf I
have<br>
<br>
Spam Actions = deliver attachment header "X-Spam-Status: Yes"<br>
<br>
Letters are not delivered but quarantined.<br>
<br>
Regards!<br>
<br>
Valentin Laskov<br>
<br>
<br>
</blockquote>
</div>
</blockquote>
</body>
</html>