HOW TO : MailScanner

[@how@]

Post move here (http://www.web4host.net/forum/viewtopic.php?f=2&t=1)

[koh]

Personally I find Michele's guide useful too, heres the link:

http://www.mneylon.com/blog/archives/2006/01/16/installing-mailscanner-on-directadmin-with-exim/

If you followed Michele's guide, and you want to uninstall mailscanner, the following is the steps:


first, verify that /etc/exim.back and /etc/init.d/exim.orig is fine. Once verified, key the following in ssh:rpm -e mailscanner

The command will remove all the files installed by mailscanner. Next up, we will
remove exim symlink in /etc/init.d and rename exim.orig to exim
and /etc/exim.back to exim.conf.
By doing so, the exim should be revert to it’s previous state.

Now, remove the following directories:

#rm -f /var/spool/exim.in
#rm -f /var/spool/exim.in/input
#rm -f /var/spool/exim.in/data
#rm -f /var/spool/exim.in/db
#rm -f /usr/local/exim/
#rm -f /usr/local/exim/bin

now do a restart exim command and see if it work

#service exim restart
and the uninstallation is done.

[@how@]

if you want use it wait ClamAV just sent

Virus Scanners = auto
and remove clamav from exim.cont then restart mailscanner.
in corn add

42 * * * * root /opt/MailScanner/bin/update_virus_scanners


Wael

[arutha]

Mail doesnt appear to be coming in from external sources. I have tested locally and with some sources such as my ISP webmail and hotmail.

Any suggestions as to where i should be looking?

Edit** Reverted to original exim.conf and it is working. Not sure where to be looking though

[Maniak]

Hi,

Wael, you did a typo :


37 5 * * * roor /opt/MailScanner/bin/update_phishing_sites

should be :


37 5 * * * root /opt/MailScanner/bin/update_phishing_sites

no ?

[@how@]

Originally posted by Maniak
Hi,

Wael, you did a typo :



should be :



no ?
:D :D
fix it ;)

[bluecherry]

Does mailscanner need to be triggered by a custom init.d script or does it start automatically?

Thx!

[arutha]

The cron job will start its update periodocally and the MTA will pass mail to be scanned when setup correctly from what I can gather. (eg. no)

[bluecherry]

Thx for the clarification!

And t hx for the original how-to ofcourse ;)!!

[FastAttack]

time for an update script for mailscanner?

[@how@]

soon ill add more in update script :)


Wael

[DhoTjai]

After installation of mailscanner, directadmin shows

Unable to setup spamassassin

Details

Spamd is not running on your system.
Click Here to learn how to enable it


And if follow this http://help.directadmin.com/item.php?id=36
then mailscanner wont work.

How can I configure spamassassin on direct admin?

[wildnight]

Question! I install Spamassasin whit mailscanner and clamAV. The process is working find but i dont received the email in my mailbox! I have to restart exim and all mail a deliver! Somebody have an idea?

Thanks!

[bluecherry]

Hi,

after I successfully setup mailscanner on a previous server, I'm experiencing trouble on a new one.

I followed the instructions from a - z except for:
* using version 4.56.8 instead of 4.55.10
* installing bitdefender, clamav and spamassasin before installing mailscanner
* using the mailscanner clamav/SA installer script

Mail is getting through and whenever email is processing I see 2 exim processes.

When I look at the messages in my inbox I see NO:
* mailscanner signature
* changes to the headers at all (no spamassassin nor mailscanner headers)

I've got up to 6 mailscanner instances running, this number doesn't change when exim is processing email.

Please find some recent log excerpts attached.

I hope somebody is still following up on this thread :s.


Thx!

/var/log/mail.log


Nov 9 18:58:50 vm01-debian MailScanner[31191]: MailScanner E-Mail Virus Scanner version 4.56.8 starting...
Nov 9 18:58:51 vm01-debian MailScanner[31191]: Read 755 hostnames from the phishing whitelist
Nov 9 18:58:52 vm01-debian MailScanner[31191]: Using SpamAssassin results cache
Nov 9 18:58:52 vm01-debian MailScanner[31191]: Connected to SpamAssassin cache database
Nov 9 18:58:52 vm01-debian MailScanner[31191]: Enabling SpamAssassin auto-whitelist functionality...
Nov 9 18:58:54 vm01-debian MailScanner[31191]: Using locktype = posix
Nov 9 18:58:54 vm01-debian MailScanner[31191]: Creating hardcoded struct_flock subroutine for linux (Linux-type)
Nov 9 18:59:02 vm01-debian MailScanner[31234]: MailScanner E-Mail Virus Scanner version 4.56.8 starting...
Nov 9 18:59:02 vm01-debian MailScanner[31234]: Read 755 hostnames from the phishing whitelist
Nov 9 18:59:03 vm01-debian MailScanner[31234]: Using SpamAssassin results cache
Nov 9 18:59:03 vm01-debian MailScanner[31234]: Connected to SpamAssassin cache database
Nov 9 18:59:03 vm01-debian MailScanner[31234]: Enabling SpamAssassin auto-whitelist functionality...
Nov 9 18:59:05 vm01-debian MailScanner[31234]: Using locktype = posix
Nov 9 18:59:05 vm01-debian MailScanner[31234]: Creating hardcoded struct_flock subroutine for linux (Linux-type)

....


Nov 9 19:03:03 vm01-debian MailScanner[31171]: New Batch: Scanning 1 messages, 976 bytes
Nov 9 19:03:03 vm01-debian MailScanner[31171]: Virus and Content Scanning: Starting
Nov 9 19:03:11 vm01-debian MailScanner[31171]: Uninfected: Delivered 1 messages

[roly]

hi

i installed mailscanner after intalling clamav and spamassassin using the update script. however when reading the log i seem to get these errors:

Nov 21 14:05:33 myhost MailScanner[31869]: MailScanner E-Mail Virus Scanner version 4.55.10 starting...
Nov 21 14:05:34 myhost MailScanner[31869]: Read 748 hostnames from the phishing whitelist
Nov 21 14:05:34 myhost MailScanner[31869]: You want to use SpamAssassin but have not installed it.
Nov 21 14:05:34 myhost MailScanner[31869]: Please download http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/install-Clam-SA.tar.gz and unpack it and run ./install.sh to install it, then restart MailScanner.
Nov 21 14:05:34 myhost MailScanner[31869]: I will run without SpamAssassin for now, you will not detect much spam until you install SpamAssassin.
Nov 21 14:05:34 myhost MailScanner[31869]: Using locktype = posix
Nov 21 14:05:34 myhost MailScanner[31869]: Creating hardcoded struct_flock subroutine for linux (Linux-type)
Nov 21 14:05:34 myhost MailScanner[31869]: New Batch: Found 108 messages waiting
Nov 21 14:05:34 myhost MailScanner[31869]: New Batch: Scanning 30 messages, 44211 bytes
Nov 21 14:05:34 myhost MailScanner[31869]: Virus and Content Scanning: Starting
Nov 21 14:05:36 myhost MailScanner[31869]: ERROR: Unable to open file or directory


has anyone got any idea what file or directory it is refering to that it says it can't open? it also says spamassasin isn't intstalled but it is, any ideas there also?

thanks in advance

roland

[SupermanInNY]

What exactly is MailScanner?
How is it different than just running SpamAssasin and ClamAV?
I'm sorry that this is such a simple question, I just didn't see an explanation of what it doesn, or how is it different than the current run of SA + ClamAV.

Thanks,

-Alon.

[prexk]

Question : How do you flush the queued /defered emails in MailScanner ?

Without MailScanner..I know how to force delivery but under MailScanner, I'm not sure how..

[antpeks]

today i installed the mailscanner according to this thread, my maillog is saying this.

Dec 18 22:08:43 server MailScanner[26732]: Read 748 hostnames from the phishing whitelist
Dec 18 22:08:45 server vm-pop3d[26610]: User 'beter' logged in from 86.86.8x.xx, nmsgs=0
Dec 18 22:08:45 server vm-pop3d[26610]: Session ended for user: 'beter' from 86.86.8x.xx, nmsgs=0, ndel=0
Dec 18 22:08:52 server MailScanner[26739]: MailScanner E-Mail Virus Scanner version 4.55.10 starting...
Dec 18 22:08:53 server MailScanner[26739]: Could not read directory /usr/sbin/exim
Dec 18 22:08:53 server MailScanner[26739]: Error in configuration file line 153, directory /usr/sbin/exim -C /etc/exim_outgoing.conf for outqueuedir does not exist (or is not readable)

Anyone care to help me out, server is running at cent os 4.4 and latest DA

Peter

[prexk]

Dude...repeat the steps as per the first posting...

[mbear]

Mail doesnt appear to be coming in from external sources. I have tested locally and with some sources such as my ISP webmail and hotmail.

Any suggestions as to where i should be looking?

Edit** Reverted to original exim.conf and it is working. Not sure where to be looking though

Did you get this fixed? I installed and found exactly the same result. But nothing anywhere to help fix it. Only thing I can think of is that it's a conflict with SpamBlocker, which is now built in and activated by default in DirectAdmin...

[bigmo]

Hi..

Apologies for reviving an ol thread.. (Newbies tend to do that)
Could you tell me how to uninstall Mailscanner? I used Wael's method for installing it.
I have tried "rpm -e mailscanner" but I get:

[root@mds1 MailScanner-install-4.55.10]# rpm -e mailscanner
error: package mailscanner is not installed

Many thanks
Mo

[bigmo]

Never mind guys.. got the solution..
removed the directories that were created
reinstalled exim (downloaded new exim.com and exim.pl)
restarted exim.
All working now..

[@how@]

updated.

Wael

[Dauser2007]

step 7 :

37 5 * * * /opt/MailScanner/bin/update_phishing_sites
07 * * * * /opt/MailScanner/bin/update_bad_phishing_sites
58 23 * * * /opt/MailScanner/bin/clean.quarantine
42 * * * * /opt/MailScanner/bin/update_virus_scanners
3,23,43 * * * * /opt/MailScanner/bin/check_mailscanner


add it into crontab ? i think only here!

BR.,

[@how@]

Yes you can add in crontab.


Wael

[daveyw]

I have installed MailScanner without any problems, and i'm using it with ClamAV. It work's great!

Thank you!

[Dauser2007]

4/1/2008 New in Version 4.66.5-3
================================
* New Features and Improvements *
1 New optional configuration setting "Syslog Socket Type". By default this is
left blank, as it will work it out according to the operating system you
are using. Some Solaris users may want to set this to "native".
1 Addition of new message property for use by MailWatch 2.
1 Update of Sophos.install for Sophos version 6.
2 Updated to handle new MailTools 2.02. This includes the use of several new
Perl modules, so you'll have to use the install.sh to install all the
requirements of the new MailTools code (unless you are doing clever things
with yum repositories).
3 Improvement to the phishing net for multiple "blocked::" prefixes on links.
3 Improvements to speed up StartTiming() and StopTiming() greatly.
3 Updated to MIME-tools 5.425. This should solve lots of problems people are
having with using yum repositories.
4 Added startup code to check for consistent version numbers with MIME-tools.
4-2 Better install.sh for RHEL and CentOS 5.
4-3 Added some more modules to the compulsory list for RHEL and CentOS 5.
These are all labelled "yes" in the right-most column of the module list
near the bottom of install.sh.
5 Improved eTrust-wrapper and -autoupdate to handle latest version 8.1 of
eTrust, and allow more flexibility in setting of eTrust location in
virus.scanners.conf. Can now just put /opt/CA if you are running 8.1 or later.
5 Improved easy-to-install ClamAV & SpamAssassin package so that it will always
install my patched Mail::ClamAV and Mail::SpamAssassin modules even if un-
patched versions are already installed.
5-3 Changed Perl IO module to always force installation.

[DhoTjai]

Hello,

After the installation of Mailscanner, DirectAdmin shows the following:


Unable to setup spamassassin

Details

Spamd is not running on your system.
Click Here to learn how to enable it


When I follow this: http://help.directadmin.com/item.php?id=36
then SpamAssassin works fine, but MailScanner not.

How can I configure spamassassin on DirectAdmin with MailScanner enabled?

Thanks in advance.

Regards,

DhoTjai

[albyb]

Brilliant, Thanks for this guide!


:p

[albyb]

So a setup mailscanner with spamassasin and calmav, and is look like work, but if i understood for the log file mailscanner+spamassasin scan all email come inside my server ( i test it with "eicar" for the antivirus and another test file for spamassassin) but spamassasin d'not work from the pannel of my client! So is not a big dial but i just like to know if this is normal or not!?

Thanks

[hanh_bk]

I want to remove mailscanner.
please tell me how to

[Arkaos]

Hi Guys,

I set up mailscanner on another box successfully but getting a problem on another now


/opt/MailScanner/bin/check_mailscanner
Starting MailScanner...Can't locate DBI.pm in @INC (@INC contains: /opt/MailScanner/lib /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8 . /opt/MailScanner/lib) at /opt/MailScanner/lib/MailScanner/SA.pm line 41.
BEGIN failed--compilation aborted at /opt/MailScanner/lib/MailScanner/SA.pm line 41.
Compilation failed in require at /opt/MailScanner/bin/MailScanner line 81.
BEGIN failed--compilation aborted at /opt/MailScanner/bin/MailScanner line 81.
Failed.


Any help is much appreciated

[LemonBarley]

installed, no mail comes in, no mail goes out.

reinstalled everything back to orginial using http://www.directadmin.com/help/item.php?id=51


maybe there is some reason or errors :(

[LemonBarley]

8795 ? Z 0:00 [MailScanner] <defunct>
8797 ? Ss 0:00 MailScanner: starting children
8798 ? Z 0:00 [MailScanner] <defunct>
8801 ? Z 0:00 [MailScanner] <defunct>
8802 ? Z 0:00 [MailScanner] <defunct>
8807 ? Z 0:00 [MailScanner] <defunct>
8808 ? Z 0:00 [MailScanner] <defunct>
8815 ? Z 0:00 [MailScanner] <defunct>
8818 ? Z 0:00 [MailScanner] <defunct>
8825 ? Z 0:00 [MailScanner] <defunct>
8826 ? S 0:00 MailScanner: starting children



why is it so many pids are running. my memory is getting low :( how to i stop all this? i am no longer using mailscanner

[smtalk]

You must uninstall it (redo the steps you did).

[nimafire]

Hello how can i add cron?

37 5 * * * root /opt/MailScanner/bin/update_phishing_sites

[nimafire]

hell again

installed, no mail comes in, no mail goes out.

reinstalled everything back to orginial using http://www.directadmin.com/help/item.php?id=51


maybe there is some reason or errors TOO

[@how@]

hell again

installed, no mail comes in, no mail goes out.

reinstalled everything back to orginial using http://www.directadmin.com/help/item.php?id=51


maybe there is some reason or errors TOO

you can read LOG file.

[nobaloney]

This question is to everyone/anyone using Mailscanner:

Why?

What do you use that requires it.

Thanks.

Jeff

[@how@]

This question is to everyone/anyone using Mailscanner:

Why?

What do you use that requires it.

Thanks.

Jeff

:) i dont like use Mailscanner :) just i post this how to if any use want use or tset it.

Wael

[nobaloney]

I've created a new thread under the E-mail topic for the discussion of why to use MailScanner and possibly how to replace it with a more customized (or perhaps even standardized) exim.conf file.

Jeff

[stardot]

where is the thread?

[nobaloney]

Sorry; I should have posted it earlier; it's here (http://www.directadmin.com/forum/showthread.php?t=28637).

Jeff