Mailscanner + spamassassin + clamav package

alessandroa

Hi,
excuse me but I not understand if mailscanner is working. The postfix is fine, no errors in log, but I'm not able to find any log or activity about mailscanner.

The service is up, the processes are up.. but where is the log?

My impression is that postfix forward direct to mail server.

Thank you,

bye

marcelloc

@alessandroa:

My impression is that postfix forward direct to mail server.

Did you enabled "Use Third part antispam" on postfix antispam tab?

check mailscanner logs with tail -f /var/log/maillog | grep -i mailscanner

postfix_mailscanner.png_thumb

expert_az

1)Check use third party anti spam
Message hold mode "manual mode using acls"
Choose mailscanner+spam assassin + clamav

2)put /^from:/ HOLD on header acls

alessandroa

@expert_az:

1)Check use third party anti spam
Message hold mode "manual mode using acls"
Choose mailscanner+spam assassin + clamav

2)put /^from:/ HOLD on header acls

Hi everyone, I come back from holiday today.

This work for me, thank you.
The problem now is that antivirus not work. Before to ask a help, my question is: do not exist a guide for this package? A base guide, no advanced instruction. For example, it is not clear if I must install the HAVP package.

Thank you qa lot.

Good new year

marcelloc

@alessandroa:

It is not clear if I must install the HAVP package.

No need to install havp pfsense package, clamav is installed during postfix install.

you can try to run fresclam on console to see if clamav is installed and updating.

alessandroa

@marcelloc:

No need to install havp pfsense package, clamav is installed during postfix install.

you can try to run fresclam on console to see if clamav is installed and updating.

I've just reinstalled my pfsense (2.0.1-RELEASE (i386)
built on Mon Dec 12 17:53:52 EST 2011
FreeBSD 8.1-RELEASE-p6), no firmware upgrade.
I've reisntalled postfix forwarder (2.8.7,1 pkg v.2.3.4_1 ) and I not find any clamv file and freschclam command…

Now I try to update my pfsense firmware and reinstall the package, after this I try to install mailscanner.

Thank you.

alessandroa

@alessandroa:

I've just reinstalled my pfsense (2.0.1-RELEASE (i386)
built on Mon Dec 12 17:53:52 EST 2011
FreeBSD 8.1-RELEASE-p6), no firmware upgrade.
I've reisntalled postfix forwarder (2.8.7,1 pkg v.2.3.4_1 ) and I not find any clamv file and freschclam command…

I've upgraded pfsense firmware and no clamv file or process are present. After I've installed mailscanner package and /var/log/clamav folder is present and /usr/local/etc/clamd.conf is present. User in conf file is clamv, now I change the user in "postfix" and I try.

Thank you

alessandroa

@alessandroa:

@alessandroa:

I've just reinstalled my pfsense (2.0.1-RELEASE (i386)
built on Mon Dec 12 17:53:52 EST 2011
FreeBSD 8.1-RELEASE-p6), no firmware upgrade.
I've reisntalled postfix forwarder (2.8.7,1 pkg v.2.3.4_1 ) and I not find any clamv file and freschclam command…

I've upgraded pfsense firmware and no clamv file or process are present. After I've installed mailscanner package and /var/log/clamav folder is present and /usr/local/etc/clamd.conf is present. User in conf file is clamv, now I change the user in "postfix" and I try.

Thank you

Ok, now is working right but I had to change permission in two folder, /var/run/clamav and /var/db/clamav

The question now is: how I can view the log of SPAM messages? The problem is the fine tuning of the system and I need to view the log.

Thank you.

marcelloc

@alessandroa:

The question now is: how I can view the log of SPAM messages? The problem is the fine tuning of the system and I need to view the log.

enable postfix log and do a tail -f /var/log/maillog | grep-i spam

alessandroa

@marcelloc:

@alessandroa:

The question now is: how I can view the log of SPAM messages? The problem is the fine tuning of the system and I need to view the log.

enable postfix log and do a tail -f /var/log/maillog | grep-i spam

Thank you marcelloc but this isn't a good solution for me. In my organization people want know if a message was arrived or not. The classic question is: "I'm waiting an e-mail from xxxx@yy.com, is it arrived?" then I check the log and I can change the antispam rules if was blocked.

Maybe the best solution is bouce spam in a mailbox with auto-deletion in 7 days.

Thank you marcelloc!!

marcelloc

@alessandroa:

In my organization people want know if a message was arrived or not. The classic question is: "I'm waiting an e-mail from xxxx@yy.com, is it arrived?" then I check the log and I can change the antispam rules if was blocked.

Just enable the database logs on package gui and search mails on search mail tab

You can also create users on pfsense with just search mail permissions.

alessandroa

@marcelloc:

Just enable the database logs on package gui and search mails on search mail tab

You can also create users on pfsense with just search mail permissions.

Thank you marcelloc, in postfix configuration I've set log destination in /var/log/maillog and update sqllite every minute, Search mail is already ok.
Now I receive a domain with only 10-15 mail at day and no spam so I can't check earnest the packages. I see only relay denied but no spam reject. At the end of month I'll point the MX of my principal domain, about 5500 spam messages at day.

Thank you.

marcelloc

run saupdate on console to be sure spamassassin rules are fine/up-to-date.

In one server I forgot to check it and got no messages marked as spam.

FiSHswe

Hi Marcelloc!
i've never been able to make Mailscanner start :(
This is what i keep gettin' in log, any ideas?

php: /pkg_edit.php: The command '/usr/local/etc/rc.d/mailscanner start' returned exit code '1', the output was 'Starting mailscanner. eval: /usr/local/sbin/mailscanner: not found /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner'

marcelloc

@FiSHswe:

i've never been able to make Mailscanner start :(

Did you tried to check and save all config tabs on it's gui?

FiSHswe

Yep, Done that!
I have tried to uninstall and reinstall several times and still the same error in log.

When i try to run sa-update i get "command not found"
freshclam gives me "ERROR: Can't create temporary directory /var/db/clamav/clamav-3294ff160111fb6d1625622676d2d9c9
Hint: The database directory must be writable for UID 106 or GID 106"

ps ax | grep -i mailscanner
259 0 S+ 0:00.00 grep -i mailscanner

running spamassassin –lint gives me "spamassassin: Command not found

Dont recall that i ever uninstalled any old version of mailscanner.
Whats the proper way to do a total manual cleanup of mailscanner?

marcelloc

@FiSHswe:

When i try to run sa-update i get "command not found"

weird

@FiSHswe:

freshclam gives me "ERROR: Can't create temporary directory /var/db/clamav/clamav-3294ff160111fb6d1625622676d2d9c9
Hint: The database directory must be writable for UID 106 or GID 106"

try to fix this missing dir/permission

fabiana

Hi

First I want to say thanks for this cool Package. The only problem we have is, that I think the Option Antivirus -> "Allow Pssword-Protected archives" is ignored. If I set this in the config File it works, but in the GUI it's ignored.

Thanks.
Fabian

marcelloc

@fabiana:

I think the Option Antivirus -> "Allow Pssword-Protected archives" is ignored. If I set this in the config File it works, but in the GUI it's ignored.

Thanks for your feedback fabiana,

I've pushed a fix for it.

reinstall the package in 15 minutes or manually fix /usr/local/pkg/mailscanner_antivirus.xml following this

https://github.com/bsdperimeter/pfsense-packages/commit/2d121b3b6fe79e301daf57b6a1060675a8886023

att,
Marcello Coutinho

fabiana

Hi

Thanks, I just reinstalled the package. But now I get in /var/log/system.log:

Jan 22 09:52:48 legatech root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

If I try to start "/usr/local/etc/rc.d/clamav-clamd start" I get:

Starting clamav_clamd.
ERROR: Can't open /var/log/clamav/clamd.log in append mode (check permissions!).
ERROR: Can't initialize the internal logger
/usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

Then I "touch /var/log/clamav/clamd.log", "chown postfix:clamav clamd.log", "chmod 777 clamd.log" (could be more restrictive I guess) and try to start I get:


Starting clamav_clamd.

ERROR: LOCAL: Socket file /var/run/clamav/clamd.sock could not be bound: Permission denied
/usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

chmod 777 /var/run/clamav fixed the problem. But also here, maybe it should be more restrictive.

And after reinstall, I miss "/usr/local/etc/rc.d/mailscanner", in the "services" Tab, I can't start the mailscanner…HELP! :)

Ok, I extracted the file from the .tbz and mailscanner finally works. postfix and mailscanner services don't start automatically after reboot, but I can start them manually in Status -> Services, then everything is fine.

Regards,
Fabian