Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Mailscanner + spamassassin + clamav package

    Scheduled Pinned Locked Moved pfSense Packages
    313 Posts 54 Posters 274.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jeppunenJ
      jeppunen
      last edited by

      Ok, to resolve my slow scanning problen, I'm trying to get to the starting point and I have removed all packages (Postfix, Mailscanner, HAVP) and deleted all the files I could find that are related to mailscanner or postfix and PERL. Then I have reinstalled postfix and mailscanner (nothing else packages).

      Commands I executed and came out clear:

      ps ax | grep -i mailscanner:
      11207  ??  S      0:01.13 MailScanner: waiting for messages (perl5.12.4)
      14283  ??  S      0:00.75 MailScanner: waiting for messages (perl5.12.4)
      14518  ??  S      0:00.77 MailScanner: waiting for messages (perl5.12.4)

      /usr/local/bin/sa-update
      /usr/local/bin/spamassassin –lint

      But:
      /usr/local/bin/freshclam gives error:

      ERROR: Parse error at line 20: Unknown option MilterSocket
      ERROR: Can't open/parse the config file /usr/local/etc/freshclam.conf

      Mail is flowing through the scanner but in the maillog there is error:

      Mar 22 12:24:25 pfsense MailScanner[50143]: Virus and Content Scanning: Starting
      Mar 22 12:24:25 pfsense MailScanner[50143]: ERROR: Can't open file or directory
      Mar 22 12:24:25 pfsense MailScanner[50143]: Spam Checks: Starting

      Are these errors related and how can I resolve the MilterSocket error?

      Cheers!

      1 Reply Last reply Reply Quote 0
      • jeppunenJ
        jeppunen
        last edited by

        @jeppunen:

        Mar 22 12:24:25 pfsense MailScanner[50143]: Virus and Content Scanning: Starting
        Mar 22 12:24:25 pfsense MailScanner[50143]: ERROR: Can't open file or directory
        Mar 22 12:24:25 pfsense MailScanner[50143]: Spam Checks: Starting

        Are these errors related and how can I resolve the MilterSocket error?

        Yes, they were! Virus Scanner did not complete, because it did not found any database. I fixed the MilterSocker error just by uncommenting the row from the /usr/local/etc/freshclam.conf (plus few other lines gave me an error) and I had to add line "DatabaseMirror db.fi.clamav.net" to the freshclam.conf.

        After this freshclam downloaded latest database and now I see nice results, only 10 seconds of scanning time and this is fine by me:

        Mar 22 13:38:56 pfsense MailScanner[14670]: Virus and Content Scanning: Starting
        Mar 22 13:39:06 pfsense MailScanner[14670]: Spam Checks: Starting

        So problem solved, hope my few past posts helps someone else also to debug their slow scanning problem.

        But one question still remains; is the clamav better to use or clamd? Am I correct if I say that clamd is a service and clamav has to start each time to do the scanning? At least in my enviroment clamav takes about 15-20 seconds to pass the message and with clamd it is only about 5 seconds. So I'm currently going with the clamd.

        1 Reply Last reply Reply Quote 0
        • C
          cymesa
          last edited by

          I have a fresh install of pfSense 2.0.3 with lasted Postfix 2.10.0, after spending a good time setting up the whole system and Postfix, I installed the Mailscanner 4.84.5_3 and then Squid 3.1.20. But Mailscanner not start, this is the error:
          ############################################################################
          php: /pkg_edit.php: The command '/usr/local/etc/rc.d/mailscanner start' returned exit code '1', the output was 'Starting mailscanner. Can't load '/usr/local/lib/perl5/site_perl/5.12.4/mach/auto/Filesys/Df/Df.so' for module Filesys::Df: /usr/local/lib/perl5/site_perl/5.12.4/mach/auto/Filesys/Df/Df.so: Undefined symbol "PL_stack_max" at /usr/local/lib/perl5/5.12.4/mach/DynaLoader.pm line 200. at /usr/local/sbin/mailscanner line 91 Compilation failed in require at /usr/local/sbin/mailscanner line 91. BEGIN failed–compilation aborted at /usr/local/sbin/mailscanner line 91. /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner'
          #############################################################################
          I removed the Mailscanner and I installed again with the same result.
          My pkg_info | grep perl show:
          p5-DBI-1.616_1
          p5-Error-0.17016
          p5-MIME-Tools-5.502,2
          perl-5.12.4_3
          perl-threaded-5.12.4_4
          What should I do? And thank you very much for your excellent work.
          Cy

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @cymesa:

            What should I do? And thank you very much for your excellent work.

            Change first line of mailscanner package to match perl version your using.

            Or try to uninstall all perl versions and then install mailscanner package.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • C
              cymesa
              last edited by

              Thanks for the early response, I really appreciate it.
              The problem was in the installation of squid3 and mailscanner, both programs install different versions of perl and clamav respectively. Installing in this order:
              squid3
              postfix
              mailscanner
              They're working well, now I'm configure and testing.
              Excellent work marcelloc, good health! and good luck! my friend.
              Att.
              Cy

              1 Reply Last reply Reply Quote 0
              • D
                dsy
                last edited by

                Hello

                The mailscanner service does not start on my pfsense 2.1RC0 (buid may 31):

                Jun 4 08:40:51	postfix/postfix-script[97787]: fatal: the Postfix mail system is already running
Jun 4 08:40:49	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
Jun 4 08:40:29	php: : Starting MailScanner
Jun 4 08:40:29	root: /usr/pbi/mailscanner-i386/etc/rc.d/clamav-clamd: WARNING: failed precmd routine for clamav_clamd
Jun 4 08:40:29	root: /usr/pbi/mailscanner-i386/etc/rc.d/clamav-clamd: WARNING: /var/db/clamav is not a directory.
Jun 4 08:40:29	php: : Starting clamav-clamd daemon
Jun 4 08:40:29	php: : No clamav database found, running freshclam in background.
Jun 4 08:40:29	check_reload_status: Syncing firewall
Jun 4 08:40:06	php: : Starting MailScanner

                But postfix forwarder service seems to work fine:

                Jun 4 08:36:50	php: : sync_package_postfix called with via_rpc=no
Jun 4 08:36:50	php: : sync_package_postfix called with via_rpc=no
Jun 4 08:36:50	php: : sync_package_postfix called with via_rpc=no
Jun 4 08:36:50	php: : sync_package_postfix called with via_rpc=no
Jun 4 08:36:50	php: : Postfix setup completed
Jun 4 08:36:50	php: : Reloading/starting postfix
Jun 4 08:36:49	php: : Writing rc_file
Jun 4 08:36:47	php: : Writing out configuration
Jun 4 08:36:47	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was '/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix'
Jun 4 08:36:47	postfix/postfix-script[6805]: fatal: the Postfix mail system is not running
Jun 4 08:36:47	syslogd: kernel boot file is /boot/kernel/kernel
Jun 4 08:36:47	syslogd: exiting on signal 15
Jun 4 08:36:45	php: : sync_package_postfix called with via_rpc=no

                Packages versions:
                -mailscanner = 4.84.5_3 pkg v.0.2.2
                -postfix forwarder = 2.10.0 pkg v.2.3.5
                -squid3 = 3.1.20 pkg 2.0.6
                -perl = 5.12.4_4

                Postfix antispam parameters:
                -use third part antispam = checked
                -message hold mode = manual
                -software = mailscanner

                Parameters in /usr/pbi/mailscanner-i386/etc:
                -clamd.conf: User = postfix
                -freshclam.conf: Databaseowner = postfix
                -MailScanner.conf: Run As User = postfix

                Thanks

                1 Reply Last reply Reply Quote 0
                • Z
                  zlyzwy
                  last edited by

                  Hi Marcelloc,

                  I just found the mailscanner service can't startup at boot time. The postfix and other services are totally no problem. Only mailscanner service status is 'stopped' in service tab. I've tried to restart it many times… It never works...
                  Here is my startup log:

                  Jun 19 20:20:07	kernel: VMware memory control driver initialized
Jun 19 20:20:07	php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
Jun 19 20:20:07	postfix/postfix-script[18716]: fatal: the Postfix mail system is already running
Jun 19 20:20:04	php: : Restarting dccifd
Jun 19 20:19:27	php: : Restarting clamav-clamd daemon
Jun 19 20:19:25	check_reload_status: Syncing firewall
Jun 19 20:19:21	php: : Restarting dccifd
Jun 19 20:18:45	php: : Restarting clamav-clamd daemon
Jun 19 20:18:42	check_reload_status: Syncing firewall
Jun 19 20:18:38	php: : Restarting dccifd
Jun 19 20:18:02	php: : Restarting clamav-clamd daemon
Jun 19 20:17:59	check_reload_status: Syncing firewall
Jun 19 20:17:54	php: : Restarting dccifd
Jun 19 20:17:18	php: : Restarting clamav-clamd daemon
Jun 19 20:17:16	check_reload_status: Syncing firewall
Jun 19 20:17:12	php: : Restarting dccifd
Jun 19 20:16:35	php: : Restarting clamav-clamd daemon
Jun 19 20:16:34	check_reload_status: Syncing firewall
Jun 19 20:16:29	php: : Restarting dccifd
Jun 19 20:15:52	php: : Restarting clamav-clamd daemon
Jun 19 20:15:50	check_reload_status: Syncing firewall
Jun 19 20:15:45	php: : Restarting dccifd
Jun 19 20:13:18	php: : Restarting clamav-clamd daemon
Jun 19 20:13:17	check_reload_status: Syncing firewall
Jun 19 20:13:15	php: : Restarting dccifd
Jun 19 20:12:39	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
Jun 19 20:12:39	check_reload_status: Syncing firewall
Jun 19 20:12:38	php: : Restarting clamav-clamd daemon
Jun 19 20:12:27	php: : Starting dccifd
Jun 19 20:12:27	php: : Starting clamav-clamd daemon
Jun 19 20:12:26	check_reload_status: Syncing firewall
Jun 19 20:12:20	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:19	apinger: rrdtool respawning too fast, waiting 300s.
Jun 19 20:12:17	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:15	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:12	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:10	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:07	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:05	postfix/postfix-script[53596]: fatal: mail system startup failed
Jun 19 20:12:04	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:04	postfix/master[46800]: fatal: daemon initialization failure
Jun 19 20:12:03	postfix/master[46887]: fatal: open lock file pid/master.pid: unable to set exclusive lock: Resource temporarily unavailable
Jun 19 20:12:02	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:12:01	php: : The command '/usr/local/etc/rc.d/radiusd.sh stop' returned exit code '1', the output was 'radiusd not running?'
Jun 19 20:11:58	php: : Postfix setup completed
Jun 19 20:11:57	php: : Reloading/starting postfix
Jun 19 20:11:56	php: : Writing rc_file
Jun 19 20:11:54	php: : Writing out configuration
Jun 19 20:11:54	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was '/usr/local/sbin/postconf: warning: /usr/local/etc/postfix/master.cf: unused parameter: user=postfix'
Jun 19 20:11:54	postfix/postfix-script[34252]: fatal: the Postfix mail system is not running
Jun 19 20:11:53	syslogd: kernel boot file is /boot/kernel/kernel
Jun 19 20:11:53	syslogd: exiting on signal 15
Jun 19 20:11:52	check_reload_status: Syncing firewall
Jun 19 20:11:48	php: : Postfix setup completed
Jun 19 20:11:48	postfix/postfix-script[35685]: fatal: the Postfix mail system is not running
Jun 19 20:11:47	php: : Reloading/starting postfix
Jun 19 20:11:46	php: : Writing rc_file
Jun 19 20:11:44	php: : Writing out configuration
Jun 19 20:11:44	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was '/usr/local/sbin/postconf: warning: /usr/local/etc/postfix/master.cf: unused parameter: user=postfix'
Jun 19 20:11:44	postfix/postfix-script[9249]: fatal: the Postfix mail system is not running
Jun 19 20:11:43	syslogd: kernel boot file is /boot/kernel/kernel
Jun 19 20:11:43	syslogd: exiting on signal 15
Jun 19 20:11:39	php: : Postfix setup completed
Jun 19 20:11:39	postfix/postfix-script[42277]: fatal: the Postfix mail system is not running
Jun 19 20:11:39	php: : Reloading/starting postfix
Jun 19 20:11:38	php: : Writing rc_file
Jun 19 20:11:36	php: : Writing out configuration
Jun 19 20:11:36	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was '/usr/local/sbin/postconf: warning: /usr/local/etc/postfix/master.cf: unused parameter: user=postfix'
Jun 19 20:11:36	postfix/postfix-script[39102]: fatal: the Postfix mail system is not running

                  I am running 2.0.3-RELEASE (i386) in a vm machine. It was working fine until I reboot it yesterday…

                  Thanks for any help in advance...
                  Zlyzwy

                  1 Reply Last reply Reply Quote 0
                  • E
                    expert_az
                    last edited by

                    Hello,

                    i'm getting this error on my /var/log/maillog file

                    Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming/5559

                    anyway fix this issue?seems permisssion error ,i did some search /usr/local/etc/MailScanner/MailScanner.conf.

                    But this file do not retain changes after first MailScanner save from web gui.

                    1 Reply Last reply Reply Quote 0
                    • E
                      expert_az
                      last edited by

                      @expert_az:

                      Hello,

                      i'm getting this error on my /var/log/maillog file

                      Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming/5559

                      anyway fix this issue?seems permisssion error ,i did some search /usr/local/etc/MailScanner/MailScanner.conf.

                      But this file do not retain changes after first MailScanner save from web gui.

                      HELLO,

                      I  changed user in conf file  /usr/local/etc/clamd.conf from clamav to postfix

                      issue resolved

                      1 Reply Last reply Reply Quote 0
                      • D
                        DraNick
                        last edited by

                        Hello,

                        Upon MailScanner –lint I have the following output:

                        
MailScanner --lint
Trying to setlogsock(unix)
...
Checking version numbers...
Version number in MailScanner.conf (4.84.5) is correct.

Your envelope_sender_header in spam.assassin.prefs.conf is correct.
MailScanner setting GID to  (1003)
MailScanner setting UID to  (1003)
...

Cannot chdir to /var/spool/MailScanner/incoming/47712, Permission denied at /usr/local/lib/MailScanner/MailScanner/WorkArea.pm line 235

                        I have chowned /var/spool/MailScanner/incoming to postfix -> chown -R postfix:postfix (as MailScanner runs with GID/UID 1003 and that corresponds to postfix on my system) but I still get the error.

                        Please help!

                        Thank you,

                        Nick

                        1 Reply Last reply Reply Quote 0
                        • E
                          expert_az
                          last edited by

                          changeuser clamav to postfix in conf file  /usr/local/etc/clamd.conf

                          1 Reply Last reply Reply Quote 0
                          • D
                            DraNick
                            last edited by

                            @expert_az:

                            changeuser clamav to postfix in conf file  /usr/local/etc/clamd.conf

                            Thank you for your reply but it didn't work. I have the same error even with user postfix in clamd.conf.

                            On a different note, do you happen to know how I can prevent the system to overwrite permission settings on restart? Also, if I restart MailScanner it overwrites the manual changes I make to MaiScanner.conf :(

                            Thank you in advance!

                            1 Reply Last reply Reply Quote 0
                            • N
                              n3tg33k
                              last edited by

                              Hi, Milscanner package is start but its shows stop on the gui and when i restart it in terminal

                              cd /usr/pbi/mailscanner-amd64/etc/rc.d
                              ./mailscanner restart

                              I get these errors http://pastebin.com/CLH9Yi4h

                              I read previews posts and they didn't work

                              Thank you

                              1 Reply Last reply Reply Quote 0
                              • E
                                expert_az
                                last edited by

                                hello ,i'm getting following error on new pf 2.1 amd64

                                Sep 26 12:43:56 mailscanner: Process did not exit cleanly, returned 2 with signal 0
                                Sep 26 12:44:01 mailscanner: Process did not exit cleanly, returned 2 with signal 0

                                any idea?

                                1 Reply Last reply Reply Quote 0
                                • E
                                  expert_az
                                  last edited by

                                  any answer?

                                  1 Reply Last reply Reply Quote 0
                                  • Z
                                    zlyzwy
                                    last edited by

                                    Hi Marcelloc,

                                    I upgrade my pf from 2.03 to 2.1 release version, it seems postfix and mailscanner is not working properly. I can still receive email but I believe mailscanner is not working in background. There is no log in "search mail" option.

                                    # postfix check
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
/usr/pbi/postfix-i386/sbin/postconf: warning: /usr/pbi/postfix-i386/etc/postfix/master.cf: unused parameter: user=postfix
postfix/postfix-script: warning: not owned by root: /var/spool/postfix


                                    # MailScanner --lint
Trying to setlogsock(unix)

Reading configuration file /usr/pbi/mailscanner-i386/etc/MailScanner/MailScanner.conf
Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Read 865 hostnames from the phishing whitelist
Read 5278 hostnames from the phishing blacklists

Checking version numbers...
Version installed (4.84.5) does not match version stated in
MailScanner.conf file (4.83.5), you may want to run upgrade_MailScanner_conf
to ensure your MailScanner.conf file contains all the latest settings.

Your envelope_sender_header in spam.assassin.prefs.conf is correct.
MailScanner setting GID to  (125)
MailScanner setting UID to  (125)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
I have found  scanners installed, and will use them all by default.
You appear to have no virus scanners installed at all! This is not good. If you have installed any, then check your virus.scanners.conf file to make sure the locations of your scanners are correct at /usr/pbi/mailscanner-i386/lib/MailScanner/MailScanner/SweepViruses.pm line 518
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There is 1 message in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed:
===========================================================================
Cannot chdir to /var/spool/MailScanner/incoming/87670, Permission denied at /usr/pbi/mailscanner-i386/lib/MailScanner/MailScanner/WorkArea.pm line 235

                                    Thanks
                                    Zlyzwy

                                    1 Reply Last reply Reply Quote 0
                                    • I
                                      Ivart
                                      last edited by

                                      Marcelloc, same issue from Zlyzwy, any solution?

                                      Thanks.

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        expert_az
                                        last edited by

                                        Hi Marcelloc,

                                        any success running mailscanner on amd64 2.1  platform?

                                        I wrote it before but any answer?

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          I'll check it.

                                          Sorry for the late response.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • E
                                            expert_az
                                            last edited by

                                            log was like this

                                            Sep 26 12:43:56  mailscanner: Process did not exit cleanly, returned 2 with signal 0
                                            Sep 26 12:44:01  mailscanner: Process did not exit cleanly, returned 2 with signal 0

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.