Mailscanner + spamassassin + clamav package

ikbendeman

you advice to run: /usr/local/sbin/mailscanner (where mailscanner is in the hidden .sbin directory)

ll /usr/local/sbin/mailscanner
lrwxr-xr-x 1 root wheel 43 Dec 8 06:37 /usr/local/sbin/mailscanner -> /usr/pbi/mailscanner-i386/.sbin/mailscanner

Then mailscanner doesn't return an error but mailscanner is not started!

ps ax | grep -i mailscanner
19657 ?? Is 3:02.05 /usr/pbi/mailscanner-i386/sbin/clamd
93386 0 R+ 0:00.00 grep -i mailscanner

The confusion starts with two mailscanner scripts:

ll /usr/pbi/mailscanner-i386/sbin/mailscanner
-r-xr-xr-x 1 root wheel 67459 Dec 8 06:40 /usr/pbi/mailscanner-i386/sbin/mailscanner
ll /usr/pbi/mailscanner-i386/.sbin/mailscanner
-rwxr-xr-x 1 root wheel 8956 Dec 6 17:04 /usr/pbi/mailscanner-i386/.sbin/mailscanner

Restarting mailscanner in the GUI doesn't work either.

Pls advice

Regards

Bob

capitangiaco

I am not able to set this:

Sign Clean Message = no

I created the file:
/usr/pbi/mailscanner-i386/etc/MailScanner/conf.d/custom.conf
and put there the option and restart mailscanner, but nothing happens.

some help ?
thanks

Giacomo

ics

Hi Marcello,

Did you try MailWatch on 2.1 ?
You said in another post that in 2.0 it breaks pfsense php…

The most wanted feature of mailwatch is probably the Quarantine management.
Is it still in the roadmap for mailscanner ?

Thanks

Ivart

Hello Marcelloc, after update mailscanner fails with SpamAssassin, and I think not scanning messages anymore.
Maillog showing messages below in loop.

MailScanner E-Mail Virus Scanner version 4.84.5 starting…
MailScanner[99955]: Reading configuration file /usr/pbi/mailscanner-i386/etc/MailScanner/MailScanner.conf
MailScanner[99955]: Reading configuration file /usr/pbi/mailscanner-i386/etc/MailScanner/conf.d/README
MailScanner[99955]: Read 869 hostnames from the phishing whitelist
MailScanner[99955]: Read 5435 hostnames from the phishing blacklists
MailScanner[99955]: Message Content Protection SpamAssassin installation could not be found

m.mascheroni

Hi Marcello, how can i totally disable Attachment scan and replace?

Ivart

@marcelloc:

I could get it working only if I change user to root.

I'll keep trying to use it with unprivileged user.

Have you found any solution for clamd error?

m.mascheroni

@m.mascheroni:

Hi Marcello, how can i totally disable Attachment scan and replace?

Setting Maximum Archive depth to 0 did the trick.
A reboot is also necessary because somehow a service restart throw an error not having permission to stop and restart postfix.

ikbendeman

I've still problems with starting MailScanner.

I did a fresh install of pfSense 2.1 and restored my config. But still a red cross for MailScanner.

When I start MailScanner manually, I get these messages:

Stopping mailscanner.
Waiting for PIDS: 8725.
Starting mailscanner.
/usr/pbi/mailscanner-i386/libexec/MailScanner/mailscanner_create_locks: not found
Error: Attempt to create locks in /var/spool/MailScanner/incoming/Locks failed!
/usr/pbi/mailscanner-i386/libexec/MailScanner/mailscanner_create_locks: not found
Error: Attempt to create locks in /var/spool/MailScanner/incoming/Locks failed!

I believe the permissions on the Locks directory are right.

drwxr-xr-x 2 postfix wheel 512 Dec 17 21:37 Locks

Pls advice.

Bob

marcelloc

I'm not getting this folder permission error but I've pushed fixes to service status and pyzor checks.

Try to reinstall the package.

capitangiaco

Hi

I've upgrade the mailscanner pkg to 4.84.5_3 pkg v.0.2.4 but I've still problems with spamassassin.
If I turn on spam check, every MailScanner children go zombie and from logs I can only see:
mailscanner: Process did not exit cleanly, returned 0 with signal 11
If I try /usr/pbi/mailscanner-i386/bin/spamassassin –lint I don't see syntax error
The daemon is running:

ps aux | grep spamd

root 60399 0.0 0.8 36664 34000 ?? Ss 3Dec13 4:16.37 /usr/pbi/mailscanner-i386/bin/spamd -c -d -r /var/run/spamd/spamd.pid (perl)
root 70258 0.0 0.9 37688 34692 ?? I 3Dec13 0:02.40 spamd child (perl)
root 70542 0.0 0.8 36664 34000 ?? I 3Dec13 0:02.44 spamd child (perl)

I don't know what to try...
There is the way to pass custom directives to mailscanner ?

thanks

Giacomo

marcelloc

Disable pyzor checks and see if spamassassin starts working.

capitangiaco

@marcelloc:

Disable pyzor checks and see if spamassassin starts working.

negative, same problem…
thanks

Giacomo

marcelloc

What you get with

Spamassassin –lint

And sa-update

ikbendeman

Hi Marcello,

I did reinstall the latest mailscanner, but still not able to start MailScanner. (remove and install)

/usr/local/etc/rc.d/mailscanner onerestart
mailscanner not running? (check /var/run/MailScanner.pid).
Starting mailscanner.
eval: /usr/pbi/mailscanner-i386/sbin/mailscanner: not found

ls -l /usr/pbi/mailscanner-i386/sbin/mailscanner
-r-xr-xr-x 1 root wheel 67431 Dec 6 17:04 /usr/pbi/mailscanner-i386/sbin/mailscanner

ps -aux | grep MailScanner
postfix 4262 0.0 1.2 27712 24872 ?? INs Tue08PM 0:00.02 MailScanner: master waiting for children, sleeping (perl5.16.3)
postfix 4589 0.0 2.8 61108 58584 ?? SN Tue08PM 0:20.49 MailScanner: waiting for messages (perl5.16.3)
postfix 21247 0.0 2.8 61108 58580 ?? SN Tue08PM 0:19.67 MailScanner: waiting for messages (perl5.16.3)
postfix 28672 0.0 2.8 61108 58580 ?? SN Tue08PM 0:20.55 MailScanner: waiting for messages (perl5.16.3)
postfix 37414 0.0 2.8 61108 58580 ?? SN Tue08PM 0:19.78 MailScanner: waiting for messages (perl5.16.3)
postfix 38894 0.0 2.8 61108 58580 ?? SN Tue08PM 0:19.59 MailScanner: waiting for messages (perl5.16.3)
postfix 39779 0.0 1.2 27712 25060 ?? Is Tue08PM 0:00.02 MailScanner: master waiting for children, sleeping (perl5.16.3)
postfix 39788 0.0 2.8 61108 58724 ?? S Tue08PM 0:21.14 MailScanner: waiting for messages (perl5.16.3)
postfix 41053 0.0 2.8 61108 58720 ?? S Tue08PM 0:20.84 MailScanner: waiting for messages (perl5.16.3)
postfix 42573 0.0 2.8 61108 58724 ?? S Tue08PM 0:19.89 MailScanner: waiting for messages (perl5.16.3)
postfix 45571 0.0 1.2 27712 25060 ?? INs 8:34AM 0:00.02 MailScanner: master waiting for children, sleeping (perl5.16.3)
postfix 45822 0.0 2.8 61108 58640 ?? SN 8:34AM 0:13.29 MailScanner: waiting for messages (perl5.16.3)
postfix 46515 0.0 2.8 61108 58720 ?? SN 8:34AM 0:13.29 MailScanner: waiting for messages (perl5.16.3)
postfix 47267 0.0 2.8 61108 58720 ?? S Tue08PM 0:20.13 MailScanner: waiting for messages (perl5.16.3)
postfix 47560 0.0 2.8 61108 58720 ?? SN 8:35AM 0:13.38 MailScanner: waiting for messages (perl5.16.3)
postfix 47883 0.0 2.8 61108 58720 ?? SN 8:35AM 0:13.07 MailScanner: waiting for messages (perl5.16.3)
postfix 49200 0.0 2.8 61108 58720 ?? SN 8:35AM 0:12.99 MailScanner: waiting for messages (perl5.16.3)
postfix 51141 0.0 2.8 61108 58720 ?? S Tue08PM 0:20.76 MailScanner: waiting for messages (perl5.16.3)
postfix 63879 0.0 1.2 27712 25060 ?? INs 8:36AM 0:00.02 MailScanner: master waiting for children, sleeping (perl5.16.3)
postfix 63908 0.0 2.8 61108 58720 ?? SN 8:36AM 0:13.31 MailScanner: waiting for messages (perl5.16.3)
postfix 65098 0.0 2.8 61108 58720 ?? SN 8:36AM 0:13.19 MailScanner: waiting for messages (perl5.16.3)
postfix 65636 0.0 2.8 61108 58720 ?? SN 8:36AM 0:13.24 MailScanner: waiting for messages (perl5.16.3)
postfix 66067 0.0 2.8 61108 58720 ?? SN 8:36AM 0:13.07 MailScanner: waiting for messages (perl5.16.3)
postfix 66291 0.0 2.8 61108 58720 ?? SN 8:36AM 0:13.02 MailScanner: waiting for messages (perl5.16.3)
root 79263 0.0 0.1 3468 1252 0 S+ 2:42PM 0:00.00 grep MailScanner

spamassassin –lint
Dec 20 14:44:50.920 [19574] warn: config: failed to parse line, skipping, in "/usr/pbi/mailscanner-i386/etc/mail/spamassassin/mailscanner.cf": use_auto_whitelist 0
Dec 20 14:44:55.677 [19574] warn: lint: 1 issues detected, please rerun with debug enabled for more information

Hope this will give you a little bit inside.

marcelloc

Mailscanner daemon should be perl_mailscanner instead of perl 5.16. Are you sure you reinstalled it?

Amd64 version still has perl 5.14

capitangiaco

@marcelloc:

What you get with

Spamassassin –lint

And sa-update

/usr/pbi/mailscanner-i386/bin/spamassassin –lint

/usr/pbi/mailscanner-i386/bin/sa-update

it seems all normal.

Giacomo

ikbendeman

Marcello,

I did a fresh install with pfSense 2.1 install pfblocker, nrpe, postfix forwarder, mailscanner and openvpn.
At your advice I did remove mailscanner and reinstalled it again.

marcelloc

@ikbendeman:

Marcello,

I did a fresh install with pfSense 2.1 install pfblocker, nrpe, postfix forwarder, mailscanner and openvpn.
At your advice I did remove mailscanner and reinstalled it again.

Is it working now?

ikbendeman

Marcello,

No it's not working… upgrade from previous pfSense release also fails.

I don't understand why so few people experience these problems.

ikbendeman

Marcello,

I just want to inform you that did a reboot of the firewall and now all services are green including mailscanner.

Thanks for your support.

Bob

ckoehler

Dear all,

I have running pfSense 2.1 with Postfix Forwarder 2.10.2 pkg v2.3.7 and MailScanner 4.84.5_3 pkg v.0.2.4. Postfix is set in the section of "Third part Antispam Settings" to make use of MailScanner in "Auto mode".

When having a look into Status -> Services, I see, that MailScanner is not startet (postfix is startet).
A 'ps -aux' did not show a running MailScanner process.

The output of:
ls -l /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner
shows an empty file

Is this correct?
As far as I know, it should be the startup script.

Any ideas how to solve the problem?

Thanks alot and best regards,
Christian

ikbendeman

Anyone,

I'm facing a problem with receiving mails from a customer who send their mail via a Trend Micro service.

My firewall is accepting mail on port 25 except for this customer I see blocked rules in the firewall log.

e.g.

block Jan 6 18:09:00 WAN 150.70.239.23:54950 192.168.1.254:25 TCP:S
block Jan 6 18:09:03 WAN 150.70.239.23:54950 192.168.1.254:25 TCP:S

Add the easy rule doesn't fix the problem.

I have postfix forwarder and the mailscanner enabled. I also add all Trend Micro related ip addresses to the firewall.

Please advice to start receiving these Trend Micro routed mails.

Ivart

@marcelloc:

I could get it working only if I change user to root.

I'll keep trying to use it with unprivileged user.

marcelloc, any solution for clamd permission problem?

jaredadams

So my company started getting the cryptolocker virus being sent through spam email recently. Definitly need an email scanner now. Saw this package, but it looks really in depth. Is there any documentation out there other than the random stuff in this thread?

Found this thread via the package info link in the packages plugin.

ckoehler

Hi,

can someone give me the location of the mailscanner startup script and the size of the file + permissions?

It seems so as my startup script ist empty.

Thanks alot and best regards,
Christian

yaboc

hi

first of all thank you for a great package marcelloc. im using postfix forwarder and it's doing great job but my question is do i need mailscanner + spamassassin + clamav package ?

my pfsense 2.1-RELEASE (amd64) has only 1.5 GB. will it struggle with the additional overhead of mailscanner + spamassassin + clamav package ?

Thanks for any input

yaboc

capitangiaco

@marcelloc:

Disable pyzor checks and see if spamassassin starts working.

Hi Marcello

I found that the problem is bayes
If I disable 'use bayes (YES)' spamassassin starts!
I've tried sa-learn –sync, but it didn't fixed

here the spamassassin -D --lint output

http://nopaste.info/2ebbbaca23.html

Giacomo

ics

Hi,

I have a huge quantity of msg files in /usr/local/dcc/log (about 3GB).
It seems to be very old emails as well as recent emails (maybe all email since the installation).

What are these files ?
Can I delete it safely ?
Is there a setting to do in order to stop the retention of this emails in this folder ?

Thanks

ics

reply to myself.
I found the solution: add /usr/local/dcc/libexec/cron-dccd in my crontab.

manfred

HI,

I have a lot of trouble to install mailscanner on ALIX2C2 bord (on ALIX2D13 is OK) I tried it on version 2.0.3 but never get succes it never finish, alwas frezzing, usualy stop on file p5-Mozilla-CA-20130114.tbz, I also tried on version 2.1 but frezz at the end, if needed I can post scrennshots.

any help will be apriciated, thanks.

here is instalation log on ALIX2C board and version of pfsense 2.0.3 on 512Mb CF card, the instalation takes almost 3 hours (180minutes ?!?!?)

Beginning package installation for mailscanner…
Downloading package configuration file... done.
Saving updated package information... done.
Downloading mailscanner and its dependencies...
Checking for package installation...
Downloading http://files.pfsense.org/packages/8/All/MailScanner-4.84.5_3.tbz ... (extracting)

Downloading http://files.pfsense.org/packages/8/All/ca_root_nss-3.15.2_1.tbz ... (extracting)