Mailscanner + spamassassin + clamav package

[ics]

Hi,

I have a huge quantity of msg files in /usr/local/dcc/log (about 3GB).
It seems to be very old emails as well as recent emails (maybe all email since the installation).

What are these files ?
Can I delete it safely ?
Is there a setting to do in order to stop the retention of this emails in this folder ?

Thanks

[ics]

reply to myself.
I found the solution: add /usr/local/dcc/libexec/cron-dccd in my crontab.

[manfred]

HI,

I have a lot of trouble to install mailscanner on ALIX2C2 bord (on ALIX2D13 is OK) I tried it on version 2.0.3 but never get succes it never finish, alwas frezzing, usualy stop on file p5-Mozilla-CA-20130114.tbz, I also tried on version 2.1 but frezz at the end, if needed I can post scrennshots.

any help will be apriciated, thanks.

here is instalation log on ALIX2C board and version of pfsense 2.0.3 on 512Mb CF card, the instalation takes almost 3 hours (180minutes ?!?!?)

Beginning package installation for mailscanner…
Downloading package configuration file... done.
Saving updated package information... done.
Downloading mailscanner and its dependencies...
Checking for package installation...
Downloading http://files.pfsense.org/packages/8/All/MailScanner-4.84.5_3.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/ca_root_nss-3.15.2_1.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Crypt-OpenSSL-Random-0.06.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Crypt-OpenSSL-Bignum-0.04.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Crypt-OpenSSL-RSA-0.28.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Digest-SHA1-2.13.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-WWW-RobotRules-6.02.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-LWP-MediaTypes-6.02.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTTP-Date-6.02.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-File-Listing-6.04.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Authen-NTLM-1.09.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Sys-Hostname-Long-1.4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Filesys-Df-0.92.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Net-Ident-1.23.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Net-CIDR-0.17.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTML-Tagset-3.20.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTML-Parser-3.71.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Socket-2.013.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Net-SSLeay-1.55.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-IO-Socket-IP-0.24.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-IO-Socket-SSL-1.962.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Net-HTTP-6.06.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/curl-7.33.0_1.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/razor-agents-2.84.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-TimeDate-2.30_1,1.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Mail-Tools-2.12.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Mail-DKIM-0.40.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Time-HiRes-1.9726,1.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Sys-SigAction-0.20.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-IO-stringy-2.110.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-OLE-Storage_Lite-0.19.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-IO-HTML-1.00.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/libltdl-2.4.2_2.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-DBI-1.630.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-DBD-SQLite-1.40.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/tnef-1.4.9.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Encode-Locale-1.03.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTTP-Message-6.06_2.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTTP-Negotiate-6.01.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTTP-Daemon-6.01.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-HTTP-Cookies-6.01.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-libwww-6.05.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/perl5-5.16.3_4.tbz ...  (extracting)

Downloading http://files.pfsense.org/packages/8/All/p5-Mozilla-CA-20130114.tbz ...  could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/p5-Mozilla-CA-20130114.tbz.
of MailScanner-4.84.5_3 failed!

Installation aborted.Backing up libraries...
Removing package...
Starting package deletion for dcc-dccd-1.3.141...done.
Starting package deletion for perl5-5.16.3_4...done.
Starting package deletion for pyzor-0.5.0_3...done.
Starting package deletion for python27-2.7...done.
Starting package deletion for py27-gdbm-2.7...done.
Starting package deletion for python27-2.7...done.
Starting package deletion for python-2...done.
Starting package deletion for python27-2.7...done.
done.
Starting package deletion for gdbm-1...done.
Starting package deletion for p5-Mail-SPF-2.9.0_1...done.
Starting package deletion for perl5-5.16...done.
Starting package deletion for p5-NetAddr-IP-4...done.
Starting package deletion for perl5-5.16...done.
Starting package deletion for p5-Error-0...done.
Starting package deletion for perl5-5.16...done.
Starting package deletion for p5-Net-DNS-Resolver-Programmable-0...done.
Starting package deletion for perl5-5.16...done.
Starting package deletion for p5-IP-Country-2.28...done.
Starting package deletion for perl5-5.16...done.
done.
Starting package deletion for MailScanner-4.84.5_3...done.
Removing mailscanner components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file mailscanner.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Cleaning up... Failed to install package.

Installation halted.

Manfred
ps. thanks for helping

[Ivart]

@Ivart:

@marcelloc:

I could get it working only if I change user to root.

I'll keep trying to use it with unprivileged user.

Have you found any solution for clamd error?

Marcelo any solution? How can I change user to root to make antivirus (clamd) work again with MailScanner?

[serialdie]

Under –- System ----- User Manager

Add the user clamav.

Worked for me.

[Ivart]

@serialdie:

Under –- System ----- User Manager

Add the user clamav.

Worked for me.

I can´t do that. Please explain how to register a clamav user that is reserved for system.

[serialdie]

@Ivart:

@serialdie:

Under –- System ----- User Manager

Add the user clamav.

Worked for me.

I can´t do that. Please explain how to register a clamav user that is reserved for system.

What do you mean you cant do that?

You don't have access to the GUI?

Regards,

[Ivart]

serialdie, when I try do insert new user with name "clamav" pfSens reply The following input errors were detected: That username is reserved by the system.

[Ivart]

I can´t change config file MailScanner.conf in /usr/pbi/mailscanner-i386/etc/MailScanner, I´m trying to change user to  root and disable "Sign clean messages", but after postfix restart or pfSense reboot settings still unchanged.

Run As User = postfix > root
Run As Group = postfix > root
Sign Clean Messages = yes > no

I trying to fix clamd permission issue as marcelloc replied in previous post: https://forum.pfsense.org/index.php/topic,43687.msg380590.html#msg380590

[Ivart]

Ok I found a post telling to change MailScanner.conf.template in /usr/local/pkg in order to change main MailScanner.conf, so MailScanner is running with user and group "root" but the error persists whith clamd:

Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming/95705

I don´t know what to do to fix because antivirus isn´t working.

[capitangiaco]

After 2.1.3 upgrade I needed to add:

ln -fs /usr/pbi/postfix-i386/sbin/sendmail /usb/sbin/sendmail

Giaco

[capitangiaco]

Is it possible to disable the Mailscanner inline sig from the web gui ?
At the moment I erased the content of the two files: inline.sig.txt and inline.sig.html.
But I have to do at each update.

Giaco

[Ivart]

Giaco, if you want to remove inline signature
Install Filer package to keep  files after updates, load in Filer file /usr/local/pkg/mailscanner.conf.template and edit these lines, save and after that restart MailScanner

Sign Messages Already Processed = no
Sign Clean Messages = no

[capitangiaco]

@marcelloc:

I use it with Message Hold mode= manual using acls

and I put /^from:/ HOLD on header acls

What are the differences between:

/^Received:/ HOLD or /^From:/ HOLD

on postfix header_check ?

Giacomo

[capitangiaco]

I use splunk to analyze logs, but I would like to use also the sqlite search system integrated with postfix pkg.
Is there the way to use both /var/log/maillog and system logs as logging destinations ?

Giacomo

[Bismarck]

root@:~# /usr/local/bin/sa-update -D –no-gpg
dbg: logger: adding facilities: all
dbg: logger: logging level is DBG
dbg: generic: SpamAssassin version 3.4.0
dbg: generic: Perl 5.016003, PREFIX=/usr/pbi/mailscanner-amd64, DEF_RULES_DIR=/usr/pbi/mailscanner-amd64/share/spamassassin, LOCAL_RULES_DIR=/usr/pbi/mailscanner-amd64/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/db/spamassassin
dbg: config: timing enabled
dbg: config: score set 0 chosen.
dbg: generic: sa-update version svn1475932
dbg: generic: using update directory: /var/db/spamassassin/3.004000
dbg: diag: perl platform: 5.016003 freebsd
dbg: diag: […] module installed: Digest::SHA, version 5.71
dbg: diag: […] module installed: HTML::Parser, version 3.71
dbg: diag: […] module installed: Net::DNS, version 0.74
dbg: diag: […] module installed: NetAddr::IP, version 4.069
dbg: diag: […] module installed: Time::HiRes, version 1.9726
dbg: diag: […] module installed: Archive::Tar, version 1.82
dbg: diag: […] module installed: IO::Zlib, version 1.10
dbg: diag: […] module not installed: Digest::SHA1 ('require' failed)
dbg: diag: […] module installed: MIME::Base64, version 3.13
dbg: diag: […] module installed: DB_File, version 1.826
dbg: diag: […] module installed: Net::SMTP, version 2.31
dbg: diag: […] module installed: Mail::SPF, version v2.009
dbg: diag: […] module not installed: Geo::IP ('require' failed)
dbg: diag: […] module not installed: Razor2::Client::Agent ('require' failed)
dbg: diag: […] module installed: IO::Socket::IP, version 0.29
dbg: diag: […] module installed: IO::Socket::INET6, version 2.69
dbg: diag: […] module installed: IO::Socket::SSL, version 1.981
dbg: diag: […] module installed: Compress::Zlib, version 2.048
dbg: diag: […] module not installed: Mail::DKIM ('require' failed)
dbg: diag: […] module installed: DBI, version 1.631
dbg: diag: […] module installed: Getopt::Long, version 2.38
dbg: diag: […] module not installed: LWP::UserAgent ('require' failed)
dbg: diag: […] module installed: HTTP::Date, version 6.02
dbg: diag: […] module installed: Encode::Detect, version 1.01
dbg: diag: […] module not installed: Net::Patricia ('require' failed)
dbg: channel: attempting channel updates.spamassassin.org
dbg: channel: using existing directory /var/db/spamassassin/3.004000/updates_spamassassin_org
dbg: channel: channel cf file /var/db/spamassassin/3.004000/updates_spamassassin_org.cf
dbg: channel: channel pre file /var/db/spamassassin/3.004000/updates_spamassassin_org.pre
dbg: channel: metadata version = 1588424, from file /var/db/spamassassin/3.004000/updates_spamassassin_org.cf
dbg: dns: 0.4.3.updates.spamassassin.org => 1588424, parsed as 1588424
dbg: channel: current version is 1588424, new version is 1588424, skipping channel
dbg: diag: updates complete, exiting with code 1
root@:~#

How to fix this?

I've tried to install the missing modules manually in:

/usr/pbi/mailscanner-amd64/lib/perl5

and

/usr/local/lib/perl5

but nothing changed?

2.1.3-RELEASE (amd64)
built on Thu May 01 15:52:13 EDT 2014
FreeBSD 8.3-RELEASE-p16

mailscanner 4.84.6 pkg v.0.2.5

[Bismarck]

Can we please have a change log for the new 0.2.6 version? Thanks.

Unrar virus scanning is broken, I've fixed it by installing the pkg's via

pkg_add -r unrar

even unrar already exists in /usr/pbi/mailscanner-amd64/bin?

[mflyagin]

Installed on my pfSense Postfix Forwarder + Mailscanner. It all started, in the logs there are no errors, the mail goes through Postfix Forwarder (seen in the logs), but the feeling that the mail is not processed in Mailscanner. Because attaches are not cut, no entries in the logs. Where could be the problem? In the Third part Antispam Settings checkbox enabled, the package is selected.

[FlashPan]

Hi guys,

Guess this could be more of a mental healthcheck :)

In my MailScanner.conf file I have the follolwing entries:

Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf
Country Sub-Domains List = %etc-dir%/country.domains.conf

I have noticed that the content of these never update, the file timestamp never chanegs as well.

Should these file update?  I cannot see an option within MailScanner to updates (or schedule) and nothing in Cron is jumping out at me?

To be honest I am not even sure what other .conf or clamav files should update? (EDIT- ahh just realised clamav is installed with postfix. Still not finding info on the other.conf files though)

Am I missing something here?

Thanks in advance for you help.

Cheers

[Bismarck]

MailScanner uses spamassassin, so you need to check

**/var/db/spamassassin/3.004000 >

/var/db/spamassassin/3.004000/updates_spamassassin_org**

for updates. Execute

/usr/local/bin/sa-update -v –no-gpg

and look if anything is changing in the above shown paths.