<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello Louis,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you very much for your reply. This is turning out to be a very difficult issue to fix.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I went in to the /etc/MailScanner/spamassassin.conf file, and found this option, and uncommented it:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># =============== RBSL related items ===============<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># By default, SpamAssassin will run RBL checks. If your ISP already<o:p></o:p></p>
<p class="MsoNormal"># does this, stop RBL checks in SpamAssassin by un-commenting the
<o:p></o:p></p>
<p class="MsoNormal"># following line<o:p></o:p></p>
<p class="MsoNormal">skip_rbl_checks 1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I then ran the sa-update again, and then MailScanner –lint again, and now it’s clean (see below—looking good).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I also ran the spamassassin -D –lint command, and it produced a massive amount of output, which seemed to show that all was good.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So, I think spamassassin is okay, and is working fine.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Therefore, the only program still remaining is that MailScanner itself is not doing any processing of any incoming messages.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">That is, nothing at all is appearing in the maillog to indicate that MailScanner is processing messages.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any ideas what may be wrong?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your help!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@fs9 MailScanner]# MailScanner --lint<o:p></o:p></p>
<p class="MsoNormal">Trying to setlogsock(unix)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Reading configuration file /etc/MailScanner/MailScanner.conf<o:p></o:p></p>
<p class="MsoNormal">Reading configuration file /etc/MailScanner/conf.d/README<o:p></o:p></p>
<p class="MsoNormal">Read 1500 hostnames from the phishing whitelist<o:p></o:p></p>
<p class="MsoNormal">Read 7949 hostnames from the phishing blacklists<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking version numbers...<o:p></o:p></p>
<p class="MsoNormal">Version number in MailScanner.conf (5.3.3) is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Your envelope_sender_header in spamassassin.conf is correct.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Checking for SpamAssassin errors (if you use it)...<o:p></o:p></p>
<p class="MsoNormal">Using SpamAssassin results cache<o:p></o:p></p>
<p class="MsoNormal">Connected to SpamAssassin cache database<o:p></o:p></p>
<p class="MsoNormal">SpamAssassin reported no errors.<o:p></o:p></p>
<p class="MsoNormal">Auto: Found virus scanners: clamd <o:p></o:p></p>
<p class="MsoNormal">Using locktype = flock<o:p></o:p></p>
<p class="MsoNormal">MailScanner.conf says "Virus Scanners = auto"<o:p></o:p></p>
<p class="MsoNormal">Found these virus scanners installed: clamd<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Filename Checks: Windows/DOS Executable (1 eicar.com)<o:p></o:p></p>
<p class="MsoNormal">Other Checks: Found 1 problems<o:p></o:p></p>
<p class="MsoNormal">Virus and Content Scanning: Starting<o:p></o:p></p>
<p class="MsoNormal">Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Clamd found 2 infections<o:p></o:p></p>
<p class="MsoNormal">Infected message 1 came from 10.1.1.1<o:p></o:p></p>
<p class="MsoNormal">Virus Scanning: Found 2 viruses<o:p></o:p></p>
<p class="MsoNormal">===========================================================================<o:p></o:p></p>
<p class="MsoNormal">Virus Scanner test reports:<o:p></o:p></p>
<p class="MsoNormal">Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If any of your virus scanners (clamd)<o:p></o:p></p>
<p class="MsoNormal">are not listed there, you should check that they are installed correctly<o:p></o:p></p>
<p class="MsoNormal">and that MailScanner is finding them correctly via its virus.scanners.conf.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="470" style="width:352.5pt">
<tbody>
<tr>
<td width="10" valign="top" style="width:7.5pt;padding:0in 7.5pt 0in 0in">
<p class="MsoNormal"><img width="67" height="48" style="width:.6979in;height:.5in" id="_x0000_i1025" src="https://d36urhup7zbd7q.cloudfront.net/9e4f2f04-230b-48c6-8181-fde14e22749e/NewLogo.format_png.resize_200x.png#logo" alt="photo"><o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-right:solid #45668E 1.0pt;padding:0in 0in 0in 0in">
</td>
<td valign="top" style="padding:0in 7.5pt 0in 7.5pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464">Paul Scott</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464"><br>
Engineer, Eden USA, Incorporated <o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="470" style="width:352.5pt">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;color:#8D8D8D"><a href="tel:866.501.3336"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">866.501.3336</span></a>
</span><span style="font-size:9.0pt;color:#45668E">|</span><span style="font-size:9.0pt;color:#8D8D8D">
<a href="tel:951.505.6967"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">951.505.6967</span></a>
</span><span style="font-size:9.0pt;color:#45668E">|</span><span style="font-size:9.0pt;color:#8D8D8D">
<a href="mailto:sales@edenusa.com"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">sales@edenusa.com</span></a>
<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;color:#8D8D8D"><a href="https://www.edenusa.com/" target="_blank"><span style="font-family:"Arial",sans-serif;color:#8D8D8D">https://www.edenusa.com</span></a></span>
<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#646464;display:none"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:7.5pt 0in 0in 0in"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> MailScanner <mailscanner-bounces+sales=edenusa.com@lists.mailscanner.info>
<b>On Behalf Of </b>L.P.H. van Belle via MailScanner<br>
<b>Sent:</b> Monday, August 10, 2020 12:54 PM<br>
<b>To:</b> mailscanner@lists.mailscanner.info<br>
<b>Cc:</b> L.P.H. van Belle <belle@bazuin.nl><br>
<b>Subject:</b> Re: MailScanner Lint Error<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I don't know your running os, but on debian, running su-update is done as the user running the service.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">i suspect wrong rights somewhere.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">i had it myself, also due running sa-update as root. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hope it helps.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Greetz,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Louis<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Op 10 aug. 2020 21:08 schreef Paul Scott <<a href="mailto:sales@edenusa.com">sales@edenusa.com</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p style="margin-bottom:12.0pt"> <br>
<br>
Hello MailScanner folks and friends: <br>
<br>
<br>
<br>
I continue to hammer away at trying to get MailScanner working again. I managed to get the install to run without error, but I still do not see MailScanner actively processing any SPAM at all in the “maillog” log file. It only shows its startup messages,
and that’s it. The process ID remains running, but MailScanner is effectively dead (doesn’t do any work). I also did successfully use CPAN to upgrade Spam Assassin to the very latest version, just now.
<br>
<br>
<br>
<br>
[root@fs9 log]# spamassassin -V <br>
<br>
SpamAssassin version 3.4.4 <br>
<br>
running on Perl version 5.10.1 <br>
<br>
[root@fs9 log]# <br>
<br>
<br>
<br>
<br>
<br>
After that, I tried MailScanner –lint, and had some issues, which I fixed, until I now have this result:
<br>
<br>
<br>
<br>
[root@fs9 ~]# MailScanner --lint <br>
<br>
Trying to setlogsock(unix) <br>
<br>
<br>
<br>
Reading configuration file /etc/MailScanner/MailScanner.conf <br>
<br>
Reading configuration file /etc/MailScanner/conf.d/README <br>
<br>
Read 1500 hostnames from the phishing whitelist <br>
<br>
Read 7949 hostnames from the phishing blacklists <br>
<br>
<br>
<br>
Checking version numbers... <br>
<br>
Version number in MailScanner.conf (5.3.3) is correct. <br>
<br>
<br>
<br>
Your envelope_sender_header in spamassassin.conf is correct. <br>
<br>
<br>
<br>
Checking for SpamAssassin errors (if you use it)... <br>
<br>
Using SpamAssassin results cache <br>
<br>
Connected to SpamAssassin cache database <br>
<br>
config: registryboundaries: no tlds defined, need to run sa-update <br>
<br>
SpamAssassin reported no errors. <br>
<br>
Auto: Found virus scanners: clamd <br>
<br>
Using locktype = flock <br>
<br>
MailScanner.conf says "Virus Scanners = auto" <br>
<br>
Found these virus scanners installed: clamd <br>
<br>
=========================================================================== <br>
<br>
Filename Checks: Windows/DOS Executable (1 eicar.com) <br>
<br>
Other Checks: Found 1 problems <br>
<br>
Virus and Content Scanning: Starting <br>
<br>
Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com <br>
<br>
Virus Scanning: Clamd found 2 infections <br>
<br>
Infected message 1 came from 10.1.1.1 <br>
<br>
Virus Scanning: Found 2 viruses <br>
<br>
=========================================================================== <br>
<br>
Virus Scanner test reports: <br>
<br>
Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" <br>
<br>
<br>
<br>
If any of your virus scanners (clamd) <br>
<br>
are not listed there, you should check that they are installed correctly <br>
<br>
and that MailScanner is finding them correctly via its virus.scanners.conf. <br>
<br>
<br>
<br>
I don’t know what this error means, or how to fix it—I did run “sa-update”, and it did not fix it:
<br>
<br>
config: registryboundaries: no tlds defined, need to run sa-update <br>
<br>
<br>
<br>
Can you please let me know how to fix this? <br>
<br>
<br>
<br>
<br>
<br>
Also, of interest, I read in the spamassassin.conf that there is a Processing.db, that is in the /var/spool/MailScanner/incoming folder, and to clear it, you delete it, and it should be recreated when MailScanner is restarted, it will be recreated. I tried
that, but it did NOT get recreated, not sure why. Any ideas? <br>
<br>
<br>
<br>
The bottom line here is that MailScanner is not doing what it should be doing, and that is scanning incoming mail. I am having a great deal of trouble figure this out. Please help. Thank you very much!
<br>
<br>
<br>
<br>
Sincerely, <br>
<br>
<br>
<br>
<br>
<br>
Paul Scott <br>
Engineer, Eden USA, Incorporated <br>
<br>
866.501.3336 | 951.505.6967 | <a href="mailto:sales@edenusa.com">sales@edenusa.com</a>
<br>
<br>
<a href="https://www.edenusa.com">https://www.edenusa.com</a> <br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>