ConfigServer Community Forum

I've been field a number of complaints that spam has been getting worse on our servers using mailscanner. I am running the latest MailScanner etc but looking at the headers I see

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

I think this is causing the SA scores to be low thus letting spam thru. I was using Googles open DNS servers so instead I changed my...

I am hopeful to get info regarding my Technical Support company's comments when I reported my server email stopped working.

Them - I checked and it seems to be hanging when sending the mail. We will need to remove Mailscanner and reset exim to the defaults to be able to debug this further.

Them - This has been fixed now, please try it now. Exim is working fine now and mailscanner has been...

For the last two days I keep seeing these errors in the Mailscanner front end where the update buttons should be:
MailScanner - v4.79.11 installed
Failed to determine the latest version of the MailScanner Package
Failed to determine the latest version of ClamAV
Failed to determine the latest version of the MailScanner Front-End

I also seem to be getting the same errors with every config...

I keep getting emails quarantined saying:

MailScanner: A long gap in a name is often used to hide part of it

This is on messages from our PBX when it sends out voicemail as an attachment. I can't change it on that side, so where do I change it on the WHM Side?

Hi

My server (with csf and mailscanner installed) is bouncing mail sent to me from a yahoo account

They are getting the following bounce error

Remote host said: 550 signature_incorrect

Where do i look to see why this is being bounced ? (It never happened before mailscanner was installed)

Lately I'm getting server messages that say: The file system /dev/sda3, which is mounted at /var, has reached warn status because it is 83% full.

Tech support says This seems to be generated from the spam filtering of email traffic on the server.

What about the files in /var/log/sa ?
This has only been a problem in the last month, so I’m trying to figure out what is different.

The biggest...

We recently had to rebuild a server due to a crashed hard drive.
We had you folks install MailScanner before, and I am just trying to get it going again.

MailScanner seems to be fine, but I am getting this when attempting to open the MailWatch window:

Error:
Unable to select a regular expression for your primary virus scanner (auto) - please see the examples in functions.php to create one....

Is it possible to use the exiqgrep to look at the MailScanner queues since they are in an alternate location?

I tried the following but it didn't work.

exiqgrep -r someuser@domain.com /etc/exim_outgoing.conf

Best regards,
Eric

I have setup the quarantine log to capture copies of all accepted, and rejected emails.

Is there any way I can filter these results, to filter out emails that meet criteria like Subject content, or from address?

After upgrading the 4 components of the MailScanner FE today the users are receiving a lot of Warning: E-mail error detected error messages. Also many messages are being tagged as Other in the FE.

The version #'s are:
MailScanner - v4.84.5
ConfigServer MailScanner Script - v2.91
ClamAV - v0.98.1
MailScanner Front-End - v4.49

What do I need to do to get rid of these error messages?

Thanks...

hi,

It seems my server is unable to use Mail::ClamAV everytime i set clamavmodule as the virusscanner and do

Service MailScanner restart && tail /var/log/maillog

i get a message like

MailScanner: ClamAV Perl module not found, did you install it?

Yes i did ...

I recently installed MailScanner on a server, using the configuration from another server where it is successfully working as an example. (Both servers are the same, CPanel, OS, etc.)

All mail is being blocked as Bad Content/Infected.

The today's total box:

Processed: 216 10.7Mb
Clean: 0 0.0%
Viruses: 0 0.0%
Top Virus: None
Blocked files: 0 0.0%
Others: 216 100.0%
Spam: 0 0.0%
High Scoring...

Im sending a test email with a file that had an .exe attachment which is blocked by our server.

The postmaster reply to the user stating that the email sent contains a virus is being blocked with the following spam report

Spam Report:
Score Matching Rule
cached not
score=35.798
5 required
0.10 ANY_BOUNCE_MESSAGE
-1.90 BAYES_00
2.00 DSN_NO_MIMEVERSION
-0.00 NO_RELAYS
0.00...

We are still getting hammered by spam from .pw .me .us .bix etc Top level domains

When it was just .us and .pw we blocked the entire tld but now that list is growing and we can block them all ..

what Im wondering is can see simply change the bayes scoring to assign any email from those tlds a higher level of scrutiny - or perhaps set it so that any email from *.me starts out with a higher...

Was wondering if someone could help me figure out why when I send an email using webmail (squirrel mail) to someone I know with a pdf attachment and cc it to my own email address the email isn't delivered. It gets flagged in mailscanner/mailwatch as bad content/infected and I have to release it as ham in order for me to see it. When I send it using thunderbird however it get sent just fine. Is...

Hi Sarah,
do you know why MailScanner is adding everyday the same account and reporting:
domain.com added to spam.scanning.rules
domain.com added to virus.scanning.rules
domain.com added to spam.action.rules
domain.com added to spamhigh.action.rules
domain.com added to virus.delivery.rules ?

How may I can fix this?

Best Regards,

Sergio

An account on my machine is being bombed by thousands of messages to non-existent users with faked gmail from fields (and the faked gmail accounts are all different). These pile up in the undeliverable queue and so do gmail bounce messages. (Currently averaging 12K mesages per day). I banned a handful of the sending IP addresses, but there are still many more coming.
I don't want to do a server...

Hi, I hope someone can answer this pickle!

In the default MS config, the Find Phishing Fraud value was set to yes, but this caused an issue where our own outgoing mail to a customer got scary red text in their Email (from us) warning it's a phishing fraud! MS didn't like the link we used I guess.

In MS it says I can use a rules file for this setting, so I created a rules file and pointed the...

I have noticed recently that every day on my cPanel server, sometimes multiple times per day, but not necessarily at the same time, MS will hang --i.e., stop processing mail. MS reports that it is up and running, but the queues build up significantly and no mail is being delivered. The only solution is to restart MS manually from within MSFE, at which point MS begins processing again and...