<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello MailScanner folks and friends:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the “maillog” log file. It only shows its
startup messages, and that’s it. The process ID remains running, but MailScanner is effectively dead (doesn’t do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@fs9 log]# spamassassin -V<o:p></o:p></p>
<p class="MsoNormal">SpamAssassin version 3.4.4<o:p></o:p></p>
<p class="MsoNormal"> running on Perl version 5.10.1<o:p></o:p></p>
<p class="MsoNormal">[root@fs9 log]#<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">After that, I tried MailScanner –lint, and had some issues, which I fixed, until I now have this result:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@fs9 ~]# MailScanner --lint<o:p></o:p></p>
<p class="MsoNormal">Trying to setlogsock(unix)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Reading configuration file /etc/MailScanner/MailScanner.conf<o:p></o:p></p>
<p class="MsoNormal">Reading configuration file /etc/MailScanner/conf.d/README<o:p></o:p></p>
<p class="MsoNormal">Read 1500 hostnames from the phishing whitelist<o:p></o:p></p>
<p class="MsoNormal">Read 7949 hostnames from the phishing blacklists<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking version numbers...<o:p></o:p></p>
<p class="MsoNormal">Version number in MailScanner.conf (5.3.3) is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Your envelope_sender_header in spamassassin.conf is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking for SpamAssassin errors (if you use it)...<o:p></o:p></p>
<p class="MsoNormal">Using SpamAssassin results cache<o:p></o:p></p>
<p class="MsoNormal">Connected to SpamAssassin cache database<o:p></o:p></p>
<p class="MsoNormal">config: registryboundaries: no tlds defined, need to run sa-update<o:p></o:p></p>
<p class="MsoNormal">SpamAssassin reported no errors.<o:p></o:p></p>
<p class="MsoNormal">Auto: Found virus scanners: clamd <o:p></o:p></p>
<p class="MsoNormal">Using locktype = flock<o:p></o:p></p>
<p class="MsoNormal">MailScanner.conf says "Virus Scanners = auto"<o:p></o:p></p>
<p class="MsoNormal">Found these virus scanners installed: clamd<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Filename Checks: Windows/DOS Executable (1 eicar.com)<o:p></o:p></p>
<p class="MsoNormal">Other Checks: Found 1 problems<o:p></o:p></p>
<p class="MsoNormal">Virus and Content Scanning: Starting<o:p></o:p></p>
<p class="MsoNormal">Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Clamd found 2 infections<o:p></o:p></p>
<p class="MsoNormal">Infected message 1 came from 10.1.1.1<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Found 2 viruses<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Virus Scanner test reports:<o:p></o:p></p>
<p class="MsoNormal">Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If any of your virus scanners (clamd)<o:p></o:p></p>
<p class="MsoNormal">are not listed there, you should check that they are installed correctly<o:p></o:p></p>
<p class="MsoNormal">and that MailScanner is finding them correctly via its virus.scanners.conf.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I don’t know what this error means, or how to fix it—I did run “sa-update”, and it did not fix it:<o:p></o:p></p>
<p class="MsoNormal">config: registryboundaries: no tlds defined, need to run sa-update<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can you please let me know how to fix this?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be
recreated. I tried that, but it did NOT get recreated, not sure why. Any ideas?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Sincerely,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="470" style="width:352.5pt">
<tbody>
<tr>
<td width="10" valign="top" style="width:7.5pt;padding:0in 7.5pt 0in 0in">
<p class="MsoNormal"><img width="67" height="48" style="width:.6979in;height:.5in" id="_x0000_i1025" src="https://d36urhup7zbd7q.cloudfront.net/9e4f2f04-230b-48c6-8181-fde14e22749e/NewLogo.format_png.resize_200x.png#logo" alt="photo"><o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-right:solid #45668E 1.0pt;padding:0in 0in 0in 0in">
</td>
<td valign="top" style="padding:0in 7.5pt 0in 7.5pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464">Paul Scott</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464"><br>
Engineer, Eden USA, Incorporated <o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="470" style="width:352.5pt">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;color:#8D8D8D"><a href="tel:866.501.3336"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">866.501.3336</span></a>
</span><span style="font-size:9.0pt;color:#45668E">|</span><span style="font-size:9.0pt;color:#8D8D8D">
<a href="tel:951.505.6967"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">951.505.6967</span></a>
</span><span style="font-size:9.0pt;color:#45668E">|</span><span style="font-size:9.0pt;color:#8D8D8D">
<a href="mailto:sales@edenusa.com"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">sales@edenusa.com</span></a>
<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;color:#8D8D8D"><a href="https://www.edenusa.com/" target="_blank"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">https://www.edenusa.com</span></a></span>
<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464;display:none"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:7.5pt 0in 0in 0in"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>