Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Mailscanner + spamassassin + clamav package

    Scheduled Pinned Locked Moved pfSense Packages
    313 Posts 54 Posters 274.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @andrew0401:

      Try to load the package and all I get is

      Checking for package installation…
      Downloading http://e-sac.siteseguro.ws/pfsense/8/All/MailScanner-4.83.5.tbz ...  could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/MailScanner-4.83.5.tbz.
      of MailScanner-4.83.5 failed!

      Regards

      Andrew

      Hi Andrew,

      Can you try to browse this folder http://e-sac.siteseguro.ws/pfsense/8/All/

      I just reinstalled the package to test and it worked.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • A
        andrew0401
        last edited by

        NO - tried IE & firefox

        Andrew

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          I'll check with my host provider and feedback

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • A
            andrew0401
            last edited by

            Unable to resolve e-sac.siteseguro.ws on a dns lookup.

            Regards

            Andrew

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              @andrew0401:

              Unable to resolve e-sac.siteseguro.ws on a dns lookup.

              I've tried access this url from many random web proxies and all listed site content.

              can you try changing you dns server to 8.8.8.8 (google)?

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                I got the page to view

                1 Reply Last reply Reply Quote 0
                • A
                  andrew0401
                  last edited by

                  We run pfblocker on the firewall - disabled it and the page appears - I wonder which list your site is on?

                  Regards

                  Andrew

                  1 Reply Last reply Reply Quote 0
                  • A
                    andrew0401
                    last edited by

                    Spoke too soon - yes I can see the page - but still unable to install the package - exact same fail message  "unable to download"

                    Andrew

                    1 Reply Last reply Reply Quote 0
                    • A
                      andrew0401
                      last edited by

                      Tried to download the package manually - Clamd rejected access to the page?

                      Andrew

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        @andrew0401:

                        We run pfblocker on the firewall - disabled it and the page appears - I wonder which list your site is on?

                        The host is in Brazil, maybe you applied deny both on top spammers list.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • A
                          andrew0401
                          last edited by

                          Tring to put an exception for your site above the pfblock list - otherwise I might have to be less harsh on what is blocked!

                          The package now seems to be installed OK - time to start tuning!

                          Andrew

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @andrew0401:

                            I might have to be less harsh on what is blocked!

                            There are good guys on Brazil too  ;)

                            You can change pfBlocker top spammers action to alias online and then block access only to port 25.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • A
                              andrew0401
                              last edited by

                              After a bit of playing it appears that everything is working - I say appears because whilst known good messages get passed and deliberate bad messages do not appear, I seem unable to get any report/log/message about what mailscanner is actually doing. What is it rejecting beyond my known, deliberately introduced spam.  Looked at a few guides to mailscanner and finished up confused.

                              Is there a simple(!) "how to get activity reports out of mailscanner"

                              Thanks

                              Andrew

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                It's quite simple

                                If you have selected on general tab

                                • log destination = /var/log/maillog

                                • update frequency = every Xminutes

                                Simple go to diagnostics -> search mail

                                Select:

                                • log type = QUEUE

                                • iCTRL+CLICK Status info on Message fields

                                • select sqlite file(s) to search

                                • and press search

                                spam_search.png
                                spam_search.png_thumb

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • A
                                  andrew0401
                                  last edited by

                                  Thanks, but what I was after is why things are rejected and potentially review rejected/quarantined items for subsequent approval (or have I missed something in my setup?)

                                  Andrew

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    On this current version, you are able only to see amount of messages on quarantine.

                                    status -> postfix queue

                                    the mailscanner package use native sqlite2 databases while mailscanner use sqlite3 to store quarantine data.

                                    There is a way to enable sqlite3 on mailscanner, but I'll need to rewrite a lot to update it to sqlite3 only.

                                    Maybe next version I include a tab for quarantine.

                                    Today I use only reject, attach or subject action for spam on my system.

                                    If you really need this, you can make a donation to mailscanner package so I can write it for you.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      andrew0401
                                      last edited by

                                      Just found the following in the log

                                      php: : The command '/usr/local/dcc/dcc_conf stop' returned exit code '126', the output was '/usr/local/dcc/dcc_conf: Permission denied'

                                      Also seem to be having some problems with what should be spam identified by rules in postfix is actually being passed - maybe best in the morning rather than late on a sunday night!

                                      Andrew

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Did you:

                                        Inlcude /^Subject:/ WARN line in Acl Headers after all your Subject rules.
                                        enabled thirdpart antispam, selected message hold mode and software?
                                        enabled all default options(yes) on mailscanner gui?

                                        Can you see mailscanner action with a tail -f /var/log/maillog | grep -i mailscanner

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          andrew0401
                                          last edited by

                                          Had the WARN line as the first line in the ACL header - trying as last line

                                          Mailscanner enables, queue set to auto and mailscanner+ spam+ virus selected.

                                          Exactly which option in mailscanner gui are you referring to?

                                          One discovery - it looks like most of the problems are related to mail retrieved from a pop3 mailbox by fetchmail.

                                          Andrew

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @andrew0401:

                                            One discovery - it looks like most of the problems are related to mail retrieved from a pop3 mailbox by fetchmail.

                                            Mailscanner works together with postfix, how fetchmail forward these messages to postfix daemon?

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.