Mailscanner + spamassassin + clamav package

hammeraus001

Resolved the dcc_conf issue, with a chmod 744 on /usr/local/dcc/dcc_conf.

All I have now is the following:

May 14 12:48:45 php: : Config sync not being done because of missing sync IP (normal on secondary systems).
May 14 12:48:41 clamd[61980]: MaxThreads * MaxRecursion is too high: 25500, open file descriptor limit is: 11095
May 14 12:48:39 php: : Config sync not being done because of missing sync IP (normal on secondary systems).
May 14 12:48:37 root: /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner
May 14 12:48:35 php: /pkg_edit.php: The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 14 12:48:35 php: /pkg_edit.php: Reload mailscanner

Mailscanner exists:

ls -la /usr/local/sbin/mailscanner

-r-xr-xr-x 1 root wheel 67367 May 14 12:18 /usr/local/sbin/mailscanner

Mailscanner isn't running:

ls -la /var/run/MailScanner.pid

ls: /var/run/MailScanner.pid: No such file or directory

ps -aux | grep mailscanner

root 13419 0.0 0.1 3524 1264 0 S+ 12:53PM 0:00.00 grep mailscanner

hammeraus001

Testing a VM of a clean AMD install. Will advise how it goes.

hammeraus001

The clean install on the VM is working perfectly. I have redirected all SMTP traffic through the new VM for the time being and will rebuild the firewall on the weekend (love this "out of hours" stuff ;)).

Thanks for your help, fast responses and most of all the combination "mailscanner + spamassassin + clamav" package. Brilliant work!

marcelloc

I've pushed some updates to improve boot process, and checks to perl version and config files.

The clean install now, select all default options.

att,
Marcello Coutinho

expert_az

marcelloc ,in order use mailscanner package is checking on Postfix Forwarder>>>Antispam>>>Use Third part antispam box enough?any another settings?

marcelloc

I use it with Message Hold mode= manual using acls

and I put /^from:/ HOLD on header acls

ics

Hi,

I would like to disable the change on email subject when mailscanner "disarm" an email.
So I modified Mailscanner.conf and the line "Disarmed Modify Subject = no"
but it comes back to its previous settings "Disarmed Modify Subject = start" on reboot.

What can I do ?

Thanks

marcelloc

@ics:

What can I do ?

change /usr/local/pkg/mailscanner.conf.template and apply changes.

att,
Marcello Coutinho

ics

@marcelloc:

change /usr/local/pkg/mailscanner.conf.template and apply changes.

Thanks for the reply.

This file doesn't exist so I modified the file /usr/local/pkg/mailscanner.inc
And it seems to work :)

marcelloc

Will be there when you update/upgrade the package. :)

ics

@marcelloc:

Will be there when you update/upgrade the package. :)

And about updates, is there a procedure to update packages ?
Or I just need to click on "Reinstall this package" in the package manager ?

package.png_thumb

marcelloc

Normally, just update.

A backup first is always a good idea. :)

expert_az

Hello Marcello

i just installed postfix and mailscanner on my pre production pf box,and getting this error on my system log

My pf version:
2.0.1-RELEASE (amd64)
built on Mon Dec 12 18:16:13 EST 2011
FreeBSD 8.1-RELEASE-p6

Jun 7 16:32:39 MailScanner[15521]: Syntax error in line 145, value "" for allowscripttags is not one of allowed values "yes","disarm","no"
Jun 7 16:32:39 MailScanner[15521]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Jun 7 16:32:39 MailScanner[15521]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Jun 7 16:32:39 MailScanner[15521]: MailScanner E-Mail Virus Scanner version 4.83.5 starting…
Jun 7 16:32:39 mailscanner: Process did not exit cleanly, returned 1 with signal 0
Jun 7 16:32:39 MailScanner[3723]: ClamAV Module ERROR:: Could not load databases from /var/db/clamav
Jun 7 16:32:39 MailScanner[3723]: I have found clamavmodule scanners installed, and will use them all by default.
Jun 7 16:32:34 MailScanner[8485]: Enabling SpamAssassin auto-whitelist functionality…
Jun 7 16:32:34 MailScanner[8485]: Connected to SpamAssassin cache database
Jun 7 16:32:34 MailScanner[8485]: Using SpamAssassin results cache

ics

Your antivirus is up to date ?
freshclam –version

clamav is not automatically updated, you have configure your crontab.
To update manually :
/usr/local/bin/freshclam

expert_az

/usr/local/bin/freshclam
ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

freshclam –version
ClamAV 0.97.3

Chuckit

/usr/local/bin/sa-update -> this one too ;)

expert_az

sa-update
/usr/local/lib/perl5/site_perl/5.12.4 /usr/local/lib/perl5/5.12.3/BSDPAN /usr/local/lib/perl5/site_perl/5.12.3/mach /usr/local/lib/perl5/site_perl/5.12.3 /usr/local/lib/perl5/5.12.3/mach /usr/local/lib/perl5/5.12.3) at /usr/local/bin/sa-update line 80.
BEGIN failed–compilation aborted at /usr/local/bin/sa-update line 80.

marcelloc

@expert_az:

sa-update
/usr/local/lib/perl5/site_perl/5.12.4 /usr/local/lib/perl5/5.12.3/BSDPAN /usr/local/lib/perl5/site_perl/5.12.3/mach /usr/local/lib/perl5/site_perl/5.12.3 /usr/local/lib/perl5/5.12.3/mach /usr/local/lib/perl5/5.12.3) at /usr/local/bin/sa-update line 80.
BEGIN failed–compilation aborted at /usr/local/bin/sa-update line 80.

Are you using the latest mailscanner package version?

expert_az

mailscanner-dev Services Package Info 4.83.5 pkg v.0.2.1

mschiek01

Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming

Is anyone seeing this error in the /var/log/maillog. It's obviously a permissions error, but I can not figure out how to get rid of it.

the /var/spool/MailScanner/ is created by postfix. I tried adding clamav to the postfix group as well as www and wheel the error still occurs.