ConfigServer Community Forum

Hi,

I want Mailscanner to check for RBLs for a specific hosted domain only. In MailScanner.conf I have

Spam List Definitions = %etc-dir%/spam.lists.conf

and

Spam List = CBL

Doing that checks all the incoming emails against the CBL list. But I only need to check the incoming emails for 1 domain only against the spam list; I check all the other emails for CBL at SMTP level via Exim.

Can Spam...

I store 30 days of non spam. I have a user that has lost all their e-mail, I'd like to release all messages to this user that I still have in the /nonspam folders to them. How can I do this easily?

I can do it from the Mailscanner Front End->Mailwatch report list, but there are 300 messages. It would take me too long.

The folder layout is like this:
20090416/nonspam/1LuUa5-0002fA-PJ

Jason.

Hello,
I try to install MailScanner on my new server. it worked very well before but in new installation I have some problem!
My server is a core 2 quad Q9300 with 8GB ram and CentOS 5.2 x86_64
here is my related application version:
MailScanner: 4.74.13
ClamAV: 0.94.2/8856
Perl: 5.8.8
PathTools: 3.29

the problem is that MailScanner continually restarting. here is the its log in...

Does cPanel's User Level Filtering still work when MailScanner is installed?

If so, do the filters precede MailScanner's actions?

In other words, if I set up a filter which discards the message, will I ever see the message in Mailwatch or will it have already been deleted?

I want to set up some rules in antivirus.exim for some targeted spam that is too large for MailScanner. When the rule triggers, I do get a log entry saying the message was cancelled. Then it just gets delivered anyway. I am wondering if it is because MS has a deliver statement in MS settings for non-spam actions?

Here is a sample of my antivirus rules:
if $header_subject contains keyword 1 or...

Noticing a lot of Excel 2007 files getting blocked in recent weeks from clients

seems to be when theres multiple workbooks saved as the one xlsx file

for example:

Mailscanner found workbook.xml1.rel within ASXPlantSim.xlsx

now these is a normal format so im a bit puzzled as to how i should modify the rules to allow this to not get blocked, without causing issues or without preventing things...

/home/MailScannerLogs/quarantine has reached 125GB. How do I tell Mailscanner to useless space? Fewer Days? etc...

Thanks
Jason

Im getting customers complianing of false positives

At Mon Mar 2 13:19:17 2009 the scanner said: Clamd: message was infected: Phishing.Heuristics.Email.SpoofedDomain

in mailscanner phishing is turned off

Find Phishing Fraud = NO
Also Find Numeric Phishing =YES

How can I tweak the phising filter to catch less false positives ?

got an issue installing mailscanner ( or re-installing actually) on a server thats been upgraded to perl 5.8.9

Can't locate LWP/UserAgent.pm in @INC (@INC contains: /usr/local/lib/perl5/5.8.9/i686-linux /usr/local/lib/perl5/5.8.9 /usr/local/lib/perl5/site_perl/5.8.9/i686-linux /usr/local/lib/perl5/site_perl/5.8.9 .) at msinstall.pl line 789.
BEGIN failed--compilation aborted at msinstall.pl...

isn't there some type of rule/setting I can set so that mailscanner only scans a file if its under a certain file size? I cant seem to find that setting. To much spam is getting through because the email file size is so large. Need to increase that setting.

I would like to mantain my own Spam Block List to improve the filter of spam in more than one server with MailScanner. Do you know how can I do it?

1- Subdomain delegation
rbl.mydomain.com. in ns rbl.mydomain.com.
rbl.mydomain.com. in a xx.xx.xx.xx

2- Spam.lists.conf

This file translates the names of the spam lists and spam domains lists into the real DNS domains to search....

Lately my log has been giving me this message.

At start of SA checks could not open /var/spool/MailScanner/incoming/Locks/MS.bayes.rebuild.lock, : 223 Time(s)
Could not open Bayes rebuild lock file /var/spool/MailScanner/incoming/Locks/MS.bayes.rebuild.lock, No such file or directory : 223 Time(s)

I am at a loss to know what this means or if it needs to be corrected and how.

Any help is...

Have more than 1200 emails and growing.
Happened after I upgraded the MailScanner script from MSFE interface.

Here are errors in the maillog:
Syntax error(s) in configuration file:
Unrecognised keyword spamlistdefinitions at line 1801

Warning: syntax errors in /usr/mailscanner/etc/MailScanner.conf.

Cannot read definitions from /etc/MailScanner/spam.lists.conf, No such file or directory...

Can anyone explain if I mark something as HAM then it is valid email?

What is the differences between HAM and SPAM?

Sorry for the dumb question but want to make sure I am doing this correctly?

Also what do most folks set there low scoring number to?

Thanks
Joe

Hi,

After upgrading to the latest version no emails are processed by MailScanner anymore. The maillog entries show:

Jan 12 15:01:20 server MailScanner : Virus and Content Scanning: Starting
Jan 12 15:01:23 server MailScanner : Content Checks: Detected and have disarmed web bug tags in HTML message in 1LMNK8-0002Tg-Qj from xxx@xxx.com
Jan 12 15:01:23 server MailScanner : Failed to link message...

Hi

today i tried to upgrade mailscanner latest version which updates some perl installer
from cpan but its getting stack after some stage.

CPAN: Compress::Zlib loaded ok (v1.42)
............................................................................DON
E
CPAN: LWP::UserAgent loaded ok (v5.810)
CPAN: Time::HiRes loaded ok (v1.9715)
Fetching with LWP:

its not going beyond from the...

I'm having a lot of issues lately with spam from my users , seems to be a spoofing issue. But i don't know any solution to stop this kind of spam

any of you have the same issues?

any idea to stop this?

best regards,

Heinz

I have a situation that is confusing me....

Here is the Mailscanner rule from cpanel:

Domain: harrison-township.org
Spam Scanning: yes
Low Scoring Spam: delete
High Scoring Spam: delete
Virus Scanning: yes
Deliver Cleaned Emails: no

Here is the MS info:

Spam: Y Action(s): deliver
High Scoring Spam: Y Action(s): deliver
SpamAssassin Spam: N
Listed in RBL: Y
Spam Whitelisted: N
Spam...

received this error when doing update

ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)

and in Mailwatch now read

Warning: mysql_pconnect() : Access denied for user 'mailwatch'@'localhost' (using password: YES) in /usr/local/cpanel/whostmgr/docroot/3rdparty/mailwatch/functions.php on line 508
Could not connect to database: Access denied for user...

New versions of CPanel are embracing Dovecot

What if any impact will switching have on Mail scanner - or the MS FE