<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p><tt>I think my replies are falling on deaf ears... if someone
could help Paul with sendmail & mailscanner, much
appreciated. I don't think he is getting my replies to the
list, and direct replies are bouncing.</tt><br>
</p>
<div class="moz-cite-prefix">On 8/10/20 4:06 PM, Paul Scott wrote:<br>
</div>
<blockquote type="cite"
cite="mid:BY5PR10MB4353140FE6329B561363D3ACB0440@BY5PR10MB4353.namprd10.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello Louis,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you very much for your reply. This
is turning out to be a very difficult issue to fix.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I went in to the
/etc/MailScanner/spamassassin.conf file, and found this
option, and uncommented it:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># =============== RBSL related items
===============<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># By default, SpamAssassin will run RBL
checks. If your ISP already<o:p></o:p></p>
<p class="MsoNormal"># does this, stop RBL checks in
SpamAssassin by un-commenting the
<o:p></o:p></p>
<p class="MsoNormal"># following line<o:p></o:p></p>
<p class="MsoNormal">skip_rbl_checks 1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I then ran the sa-update again, and then
MailScanner –lint again, and now it’s clean (see below—looking
good).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I also ran the spamassassin -D –lint
command, and it produced a massive amount of output, which
seemed to show that all was good.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So, I think spamassassin is okay, and is
working fine.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Therefore, the only program still remaining
is that MailScanner itself is not doing any processing of any
incoming messages.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">That is, nothing at all is appearing in the
maillog to indicate that MailScanner is processing messages.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any ideas what may be wrong?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your help!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@fs9 MailScanner]# MailScanner --lint<o:p></o:p></p>
<p class="MsoNormal">Trying to setlogsock(unix)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Reading configuration file
/etc/MailScanner/MailScanner.conf<o:p></o:p></p>
<p class="MsoNormal">Reading configuration file
/etc/MailScanner/conf.d/README<o:p></o:p></p>
<p class="MsoNormal">Read 1500 hostnames from the phishing
whitelist<o:p></o:p></p>
<p class="MsoNormal">Read 7949 hostnames from the phishing
blacklists<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking version numbers...<o:p></o:p></p>
<p class="MsoNormal">Version number in MailScanner.conf (5.3.3)
is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Your envelope_sender_header in
spamassassin.conf is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking for SpamAssassin errors (if you
use it)...<o:p></o:p></p>
<p class="MsoNormal">Using SpamAssassin results cache<o:p></o:p></p>
<p class="MsoNormal">Connected to SpamAssassin cache database<o:p></o:p></p>
<p class="MsoNormal">SpamAssassin reported no errors.<o:p></o:p></p>
<p class="MsoNormal">Auto: Found virus scanners: clamd <o:p></o:p></p>
<p class="MsoNormal">Using locktype = flock<o:p></o:p></p>
<p class="MsoNormal">MailScanner.conf says "Virus Scanners =
auto"<o:p></o:p></p>
<p class="MsoNormal">Found these virus scanners installed: clamd<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Filename Checks: Windows/DOS Executable (1
eicar.com)<o:p></o:p></p>
<p class="MsoNormal">Other Checks: Found 1 problems<o:p></o:p></p>
<p class="MsoNormal">Virus and Content Scanning: Starting<o:p></o:p></p>
<p class="MsoNormal">Clamd::INFECTED:: Win.Test.EICAR_HDB-1 ::
./1/eicar.com<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Clamd found 2 infections<o:p></o:p></p>
<p class="MsoNormal">Infected message 1 came from 10.1.1.1<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Found 2 viruses<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Virus Scanner test reports:<o:p></o:p></p>
<p class="MsoNormal">Clamd said "eicar.com was infected:
Win.Test.EICAR_HDB-1"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If any of your virus scanners (clamd)<o:p></o:p></p>
<p class="MsoNormal">are not listed there, you should check that
they are installed correctly<o:p></o:p></p>
<p class="MsoNormal">and that MailScanner is finding them
correctly via its virus.scanners.conf.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" style="width:352.5pt" width="470"
cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="width:7.5pt;padding:0in 7.5pt 0in 0in"
width="10" valign="top">
<p class="MsoNormal"><img
style="width:.6979in;height:.5in" id="_x0000_i1025"
src="https://d36urhup7zbd7q.cloudfront.net/9e4f2f04-230b-48c6-8181-fde14e22749e/NewLogo.format_png.resize_200x.png#logo"
alt="photo" moz-do-not-send="true" width="67"
height="48"><o:p></o:p></p>
</td>
<td style="border:none;border-right:solid #45668E
1.0pt;padding:0in 0in 0in 0in" valign="top">
<br>
</td>
<td style="padding:0in 7.5pt 0in 7.5pt" valign="top">
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464">Paul
Scott</span></b><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464"><br>
Engineer, Eden USA, Incorporated <o:p></o:p></span></p>
<table class="MsoNormalTable" style="width:352.5pt"
width="470" cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span
style="font-size:9.0pt;color:#8D8D8D"><a
href="tel:866.501.3336"
moz-do-not-send="true"><span
style="font-family:"Arial",sans-serif;color:#8D8D8D">866.501.3336</span></a>
</span><span
style="font-size:9.0pt;color:#45668E">|</span><span
style="font-size:9.0pt;color:#8D8D8D">
<a href="tel:951.505.6967"
moz-do-not-send="true"><span
style="font-family:"Arial",sans-serif;color:#8D8D8D">951.505.6967</span></a>
</span><span
style="font-size:9.0pt;color:#45668E">|</span><span
style="font-size:9.0pt;color:#8D8D8D">
<a href="mailto:sales@edenusa.com"
moz-do-not-send="true"><span
style="font-family:"Arial",sans-serif;color:#8D8D8D">sales@edenusa.com</span></a>
<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span
style="font-size:9.0pt;color:#8D8D8D"><a
href="https://www.edenusa.com/"
target="_blank" moz-do-not-send="true"><span
style="font-family:"Arial",sans-serif;color:#8D8D8D">https://www.edenusa.com</span></a></span>
<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464;display:none"><o:p> </o:p></span></p>
<table class="MsoNormalTable" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<td style="padding:7.5pt 0in 0in 0in"><br>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> MailScanner
<a class="moz-txt-link-rfc2396E" href="mailto:mailscanner-bounces+sales=edenusa.com@lists.mailscanner.info"><mailscanner-bounces+sales=edenusa.com@lists.mailscanner.info></a>
<b>On Behalf Of </b>L.P.H. van Belle via MailScanner<br>
<b>Sent:</b> Monday, August 10, 2020 12:54 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<b>Cc:</b> L.P.H. van Belle <a class="moz-txt-link-rfc2396E" href="mailto:belle@bazuin.nl"><belle@bazuin.nl></a><br>
<b>Subject:</b> Re: MailScanner Lint Error<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I don't know your running os, but on
debian, running su-update is done as the user running the
service.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">i suspect wrong rights somewhere.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">i had it myself, also due running
sa-update as root. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hope it helps.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Greetz,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Louis<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Op 10 aug. 2020 21:08 schreef Paul
Scott <<a href="mailto:sales@edenusa.com"
moz-do-not-send="true">sales@edenusa.com</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC
1.0pt;padding:0in 0in 0in
6.0pt;margin-left:4.8pt;margin-right:0in">
<p style="margin-bottom:12.0pt"> <br>
<br>
Hello MailScanner folks and friends: <br>
<br>
<br>
<br>
I continue to hammer away at trying to get MailScanner
working again. I managed to get the install to run
without error, but I still do not see MailScanner
actively processing any SPAM at all in the “maillog” log
file. It only shows its startup messages, and that’s
it. The process ID remains running, but MailScanner is
effectively dead (doesn’t do any work). I also did
successfully use CPAN to upgrade Spam Assassin to the
very latest version, just now.
<br>
<br>
<br>
<br>
[root@fs9 log]# spamassassin -V <br>
<br>
SpamAssassin version 3.4.4 <br>
<br>
running on Perl version 5.10.1 <br>
<br>
[root@fs9 log]# <br>
<br>
<br>
<br>
<br>
<br>
After that, I tried MailScanner –lint, and had some
issues, which I fixed, until I now have this result:
<br>
<br>
<br>
<br>
[root@fs9 ~]# MailScanner --lint <br>
<br>
Trying to setlogsock(unix) <br>
<br>
<br>
<br>
Reading configuration file
/etc/MailScanner/MailScanner.conf <br>
<br>
Reading configuration file
/etc/MailScanner/conf.d/README <br>
<br>
Read 1500 hostnames from the phishing whitelist <br>
<br>
Read 7949 hostnames from the phishing blacklists <br>
<br>
<br>
<br>
Checking version numbers... <br>
<br>
Version number in MailScanner.conf (5.3.3) is correct. <br>
<br>
<br>
<br>
Your envelope_sender_header in spamassassin.conf is
correct. <br>
<br>
<br>
<br>
Checking for SpamAssassin errors (if you use it)... <br>
<br>
Using SpamAssassin results cache <br>
<br>
Connected to SpamAssassin cache database <br>
<br>
config: registryboundaries: no tlds defined, need to run
sa-update <br>
<br>
SpamAssassin reported no errors. <br>
<br>
Auto: Found virus scanners: clamd <br>
<br>
Using locktype = flock <br>
<br>
MailScanner.conf says "Virus Scanners = auto" <br>
<br>
Found these virus scanners installed: clamd <br>
<br>
===========================================================================
<br>
<br>
Filename Checks: Windows/DOS Executable (1 eicar.com) <br>
<br>
Other Checks: Found 1 problems <br>
<br>
Virus and Content Scanning: Starting <br>
<br>
Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com
<br>
<br>
Virus Scanning: Clamd found 2 infections <br>
<br>
Infected message 1 came from 10.1.1.1 <br>
<br>
Virus Scanning: Found 2 viruses <br>
<br>
===========================================================================
<br>
<br>
Virus Scanner test reports: <br>
<br>
Clamd said "eicar.com was infected:
Win.Test.EICAR_HDB-1" <br>
<br>
<br>
<br>
If any of your virus scanners (clamd) <br>
<br>
are not listed there, you should check that they are
installed correctly <br>
<br>
and that MailScanner is finding them correctly via its
virus.scanners.conf. <br>
<br>
<br>
<br>
I don’t know what this error means, or how to fix it—I
did run “sa-update”, and it did not fix it:
<br>
<br>
config: registryboundaries: no tlds defined, need to run
sa-update <br>
<br>
<br>
<br>
Can you please let me know how to fix this? <br>
<br>
<br>
<br>
<br>
<br>
Also, of interest, I read in the spamassassin.conf that
there is a Processing.db, that is in the
/var/spool/MailScanner/incoming folder, and to clear it,
you delete it, and it should be recreated when
MailScanner is restarted, it will be recreated. I tried
that, but it did NOT get recreated, not sure why. Any
ideas? <br>
<br>
<br>
<br>
The bottom line here is that MailScanner is not doing
what it should be doing, and that is scanning incoming
mail. I am having a great deal of trouble figure this
out. Please help. Thank you very much!
<br>
<br>
<br>
<br>
Sincerely, <br>
<br>
<br>
<br>
<br>
<br>
Paul Scott <br>
Engineer, Eden USA, Incorporated <br>
<br>
866.501.3336 | 951.505.6967 | <a
href="mailto:sales@edenusa.com" moz-do-not-send="true">sales@edenusa.com</a>
<br>
<br>
<a href="https://www.edenusa.com" moz-do-not-send="true">https://www.edenusa.com</a>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<img src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>
Shawn Iverson<br>
<a class="moz-txt-link-abbreviated" href="mailto:shawniverson@summitgrid.com">shawniverson@summitgrid.com</a><br>
</div>
</body>
</html>