ConfigServer Community Forum

Please log a ticket on the helpdesk for further assistance with this. Thank you.

https://support.configserver.com/

It looks like an unofficial eicar test. Try it using the official eicar file. Also, you do not appear to have --qoptions set in your cxs command line. I'm not sure how you've done that since it should be set to --qoptions Mv if the --quarantine option is set.

Have you configured MailScanner to store a copy of all emails? Those options will only appear if the email is stored on the server.

https://support.configserver.com/en/kno ... quarantine

No, but there is a similar feature within the MailScanner Front-End that you can enable. Go to the MSFE UI in WHM, click on Front-End Settings, and look for "Allow users and defaults to use MSFE SpamBox (BETA)".

If you're running MailScanner, you should disable Spamassassin in WHM, both in Tweak Settings and Service Manager. To try to find out what is happening to those emails, check this knowledgebase article: https://support.configserver.com/en/knowledgebase/article/emails-are-disappearing-my-customer-has...

It looks like the same issue that you had with lfd in your ticket. You need to speak to cPanel or your Data Centre.

Regards,
Sarah

This is nothing to do with MailScanner Front-End. It is related to a SpamAssassin test. The link in the error gives further information. If you do not want to create an account with Validity you can disable the validity rules by following the steps in this article: https://support.configserver.com/e...

It makes no difference what type of match it is, MD5SUM or fingerprint or virus, unless it was detected via cxs modsecurity scanning, cxs cannot get the IP address.

Unless the file is detected via cxs modsecurity scanning, cxs has no information about the IP address of the attacker. I'm not sure what type of scan you are referring to.

It is only possible to block cxs modsecurity hits in csf because otherwise cxs does not have the IP address of the attacker. You can use LF_CXS to configure this.