ConfigServer Community Forum

We've setup some new accounts on the server and emails between the various accounts on the same server are being tagged as spam: Subject: {Spam?} Re: XXXXX

I checked the new domain in the mailscanner reports and it's indeed there:

domain.com added to spam.scanning.rules
domain.com added to virus.scanning.rules
domain.com added to spam.action.rules
domain.com added to spamhigh.action.rules...

I'm trying to help out a buddy on a server with the ConfigServer mail scanner installed. He is having some issues with spam and has not tracked it down yet. All of the spam has the same subject and some comment email headers. Is there any way with MailScanner/SpamAssassin/EXIM to filter outbound email by subject or headers?

Mailscanner is blocking some legitimate emails with the following error:

MailScanner: No programs allowed (Templates)

If I release the email, the released email gets re-blocked with the same error and ends up back in quarantine!

How do I get these emails through to the recipient?

The persons domain is configured with Deliver Cleaned Emails=Yes

Also, I've changed the recipients domain to...

I looked at the whole MailScanner.conf and searched Google, but can't find the answer.

Is there a way to notify only the outboud user that there email have been blocked as spam ?

I mean,

external Spam blocked by MailScanner -> local domain user = No Notify
local domain user Spam blocked by MailScanner -> external = Notify

The only way I see right now is having two server (one in, one out)...

Hi

I'm suffering from ClamAV not being able to compile. It's a known issue, for which there is a bug fix - see -

https:// wwws.clamav.net/bugzilla/show_bug.cgi?id=1737 (remove the space to make the URL work)

I running FC10 but get identical issues when I try upgrading to the latest ClamAV.

A new version of ClamAV (Current:v0.95.2 New:v0.95.3) is available

The current ClamAV wont start....

Hi , I know it's slightly off topic but I have an issue with one of my servers and Clamav updating , can anyone assist fit the following error:

Last Status:
main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
ERROR: chdir_tmp: Can't create directory ./clamav-3faf2f1e467352775a2a06d517bb619f
WARNING: Incremental update failed, trying to download daily.cvd
ERROR:...

Hi,

How do I go about blocking a specific email address with cfg/mailscanner? I noticed in MailWatch one specific address sending phising mail to all accounts ibx@fakebank.co.uk

Regards,

Messages with certain attachments are being rejected with this message:

MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages (name of file is exactly 14 characters with a .doc extension)

That's absurd! Many files have names that long or longer.

Is there a MailScanner setting to fix this?

The Cpanel File Manager has a WYSISYG editor. But when clients try to use it now they get a file not found error (the file is clearly there). Cpanle support says this is caused by the install of Clamav. Their reccomendations:

What is probably happening is clamav is interfering. You seem to have a manually installed version of Clamav running, which is known to do this at times.

What you can do...

I haven't been near our Mail Scanner software in a little over a year, an admin who just left had been handling it.

But as I remember sending scripts would be tagged in message headers, that way it is easy to identify malicious scripts.

We've recently had a run-in with a script sending spam, it was sending from localhost at 127.0.0.1 and random ports, so I assume it's a script but as such...

Hello,

What is exim command line to see what is a number of messages awaiting processing by MailScanner, because if I use exim -bpc I see queue of email waiting for delivery.

Thanks

Leo

Dear All,

Today the bug of the year 2010 showed its face in spamassassin
cPanel issued a fast bugfix, but it did not work in my server. I suspect the problem is that cpanel uses standard paths for spamassassin while configserver uses a customized installation path

cPanel tells you to run the following script:
/scripts/autorepair spamd_y2010_fix

But it may fail because of wrong directory or...

i had ordered server package last month , but due to some issues i had to reinstall os on server , i had installed all but dont know how to setup cron to run daily in the root crontab which checks /etc/localdomains and makes sure that there is an entry for any domain listed within the rules files

please let me know process , thank you

Turning up a new server and somewhat baffled by what is going on..The only thing i did was a cpanel update, however since i only use configserver tools for my anti-spam i am at a loss as to why i am getting these repeated errors on my server

2009-12-21 00:01:15 1NMaOR-0001K9-K0 spam acl condition: warning - spamd connection to 127.0.0.1, port 783 failed: Connection refused
2009-12-21 00:01:15...

Can someone tell me where the list of found words is so I can edit it? We are getting too many emails triggered as SPAM since this feature was introduced.

Thanks.

Has there been a change?

Upon noting that my mailscanner db was very large, I tried the usual fix:

mysql -e drop database mailscanner
perl /usr/local/cpanel/whostmgr/docroot/3rdparty/mailwatch/install/mwadd.pl

But there is no longer a /mailwatch directory within /3rdparty

Here did mwadd.pl go, and how can I get it back?

Hello,

New files of office 2007, using extension docx is blocked by default from mailscanner.

example:

MailScanner: Attempt to hide real filename extension

(document.xml.rel)

What is the best solution to not block this file, but without remove checking for hide filename extensions?

Thanks

I upgraded both MSFE (4.29) and the Mail Scanner Script (2.76) this morning and now I'm getting all kinds of errors and some users are reporting problems sending messages (but not receiving them.)

CPanel has been sending me messages like this:

exim-465 failed @ Tue Oct 13 13:19:27 2009. A restart was attempted automagically.
Service Check Method:

Failure Reason: Timeout while trying to get...

I've had MailScanner installed for 3 or so years with no problems. I've recently noticed that dostech_sare.txt has the original time stamp of Aug 14, 2007 grabbed from your site. I'm not sure if it's supposed to be a static file but my suspicion is no.

Can you shed any light on this? Thanks.