<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Courier New \;color\:\#1F497D";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Times New Roman \,serif";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Shawan,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Until fix is released, is there a temporary way for disabling the check QP DOS<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Thanks<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Chaminda Indrajith<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> MailScanner <mailscanner-bounces+indrajith=sltidc.lk@lists.mailscanner.info> <b>On Behalf Of </b>Chaminda Indrajith<br><b>Sent:</b> Wednesday, November 25, 2020 10:42 PM<br><b>To:</b> 'Shawn Iverson' <shawniverson@summitgrid.com>; 'MailScanner Discussion' <mailscanner@lists.mailscanner.info><br><b>Subject:</b> RE: MailScanner: Suspected QP DOS<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Thanks Shawn,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Awaiting for your patch.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Regards<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Chaminda Indrajith<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Shawn Iverson <<a href="mailto:shawniverson@summitgrid.com">shawniverson@summitgrid.com</a>> <br><b>Sent:</b> Wednesday, November 25, 2020 10:20 PM<br><b>To:</b> Chaminda Indrajith <<a href="mailto:indrajith@sltidc.lk">indrajith@sltidc.lk</a>>; 'MailScanner Discussion' <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br><b>Subject:</b> Re: MailScanner: Suspected QP DOS<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p>Thank you for the information, your permissions look good.<span style='font-size:12.0pt'><o:p></o:p></span></p><p>I think I see the problem. There is step on the MIME parsing in this check that assumes that the email contains a regular body. This is not always true.<o:p></o:p></p><p>I will prepare a patch.<o:p></o:p></p><div><p class=MsoNormal>On 11/25/20 11:21 AM, Chaminda Indrajith wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>Thanks Shawn, for the reply. </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>This happened after the upgrade from 5.0.3 to the latest. OS is CentOS 7. So, the directory permission remains unchanged. SELINUX is in permissive mode. MailScanner runs as user postfix. By the way, Is there a way of disabling QP DOC Checking? For your information, here it shows the permissions of /var/spool/MailScanner</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot ~]# cd /var/spool/MailScanner/</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot MailScanner]# ls -la</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>total 4</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 9 root root 122 Nov 24 14:40 .</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 17 root root 215 Apr 11 2018 ..</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwxr-x. 2 root mtagroup 6 Nov 4 22:21 archive</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 9 postfix mtagroup 220 Nov 25 21:41 incoming</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwxr-x. 2 postfix mtagroup 6 Nov 4 22:21 milterin</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwxr-x. 2 postfix mtagroup 6 Nov 4 22:21 milterout</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwxr-x. 26 postfix apache 4096 Nov 25 00:00 quarantine</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 5 postfix mtagroup 107 Nov 24 14:33 ramdisk_store</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwsr-x. 2 postfix apache 58 Sep 30 08:15 spamassassin</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot MailScanner]# cd incoming</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot incoming]# ls -la</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>total 308</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 9 postfix mtagroup 220 Nov 25 21:45 .</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 9 root root 122 Nov 24 14:40 ..</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 2 postfix mtagroup 40 Nov 25 21:44 3063</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 2 postfix mtagroup 40 Nov 25 21:44 3225</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 2 postfix mtagroup 40 Nov 25 21:42 3325</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 4 postfix mtagroup 160 Nov 25 21:45 3489</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 2 postfix mtagroup 40 Nov 25 21:41 3526</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 2 root postfix 200 Nov 25 18:31 Locks</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>-rw-------. 1 postfix postfix 4096 Nov 25 21:45 Processing.db</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>-rw-------. 1 postfix postfix 310272 Nov 25 21:45 SpamAssassin.cache.db</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 2 postfix root 100 Nov 25 21:45 SpamAssassin-Temp</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot incoming]# cd ../quarantine/</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot quarantine]# ls -la</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>total 8</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwxr-x. 26 postfix apache 4096 Nov 25 00:00 .</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxr-xr-x. 9 root root 122 Nov 24 14:40 ..</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 4 postfix apache 31 Nov 2 23:13 20201102</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 12 postfix apache 215 Nov 3 15:05 20201103</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 6 postfix apache 77 Nov 4 08:00 20201104</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 10 postfix apache 169 Nov 5 20:31 20201105</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 14 postfix apache 261 Nov 6 18:00 20201106</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 5 postfix apache 54 Nov 7 01:27 20201107</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 6 postfix apache 77 Nov 8 10:45 20201108</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>drwxrwx---. 8 postfix apache 123 Nov 9 15:37 20201109</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot quarantine]# groups postfix</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>postfix : postfix mail mtagroup</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot quarantine]# groups clamav</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>groups: clamav: no such user</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>[root@dot quarantine]# groups clamscan</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Courier New ;color:#1F497D",serif'>clamscan : clamscan virusgroup mtagroup</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Regards</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Chaminda Indrajith</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> MailScanner <a href="mailto:mailscanner-bounces+indrajith=sltidc.lk@lists.mailscanner.info"><mailscanner-bounces+indrajith=sltidc.lk@lists.mailscanner.info></a> <b>On Behalf Of </b>Shawn Iverson via MailScanner<br><b>Sent:</b> Wednesday, November 25, 2020 9:24 PM<br><b>To:</b> <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><b>Cc:</b> Shawn Iverson <a href="mailto:shawniverson@summitgrid.com"><shawniverson@summitgrid.com></a><br><b>Subject:</b> Re: MailScanner: Suspected QP DOS<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><div><div><p class=MsoNormal>"could not read file" seems to indicate some form of permissions or access control problem. Have you double checked permissions on key folders such as those within /var/spool/MailScanner?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div></div><div><p class=MsoNormal>On 11/25/20 3:11 AM, Chaminda Indrajith wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal>After upgraded to the latest MailScanner (5.3.4), some of the read receipts are blocked by MailScanner.<o:p></o:p></p><p class=MsoNormal>It shows the below message in the MailWatch. Let me know how to allow these read receipts.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>MailScanner: Suspected QP DOS<br>checks failed<br>could not read file<o:p></o:p></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana",sans-serif;color:black;background:#EBEBEB'> </span><o:p></o:p></p><p class=MsoNormal>Thanks<o:p></o:p></p><p class=MsoNormal>Chaminda Indrajith<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:12.0pt;font-family:"Times New Roman ,serif",serif'><br><br></span><o:p></o:p></p><pre> <o:p></o:p></pre><pre> <o:p></o:p></pre></blockquote><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman ,serif",serif'>-- <br><img border=0 id="_x0000_i1025" src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>Shawn Iverson<br><a href="mailto:shawniverson@summitgrid.com">shawniverson@summitgrid.com</a></span><o:p></o:p></p></div></blockquote><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>-- <br><img border=0 id="_x0000_i1026" src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>Shawn Iverson<br><a href="mailto:shawniverson@summitgrid.com">shawniverson@summitgrid.com</a><o:p></o:p></span></p></div></div></body></html>