ConfigServer Community Forum

Hi,
I have been using MS for a number of years without issue. Lately I notice that mail stops flowing. I login to my whm and the load is fine, everything looks ok, the services are all running and check out ok. I go to plugins msfe and it says its running and happy. I check the status its ok. I go to mail ques and the incoming que is piling up. I go back to msfe and restart mailscanner and the...

Over the last few months on one of my servers I have been seeing this error (warning or whatever); check_mail_permissions could not determine the sender domain slowly increasing in number. It started with a couple of users on one domain when they sent mail remotely from their office out to their customers. Then a domain on the server that uses x-cart mailer (smtp) started showing the message....

MailScanner became oddly inactive on March 4. No more quarantine folders, no incoming, no scanning. All messages glide to the inbox.
I have run in debug mode. Here is the result:

In Debugging mode, not forking...
Trying to setlogsock(unix)
Argument 0.70_01 isn't numeric in numeric lt (<) at /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Dns.pm line 645.
Building a message batch to...

MailScanner had been running fine, but today seems to stall, no entries in maillog for several minutes, no changes in MailWatch. Then it will start again process a couple batches then stop again. Sometimes I have to hit MailScanner Restart in MSFE. Of course, now my Pending Queue number is climbing.

I also am seeing entries like this a lot in Maillog: SpamAssassin cache hit for message xxxxxx.

Hi,

I know that there are many more MailScanner rules than what typically shows up in the email header, but I wonder, what is logic of rules that display a zero (0.00) score?

For example, I am seeing a lot of these lately:

URIBL_BLOCKED 0.00

So, what does that mean? Does it mean that the incoming IP was indeed listed in this blacklist, but MailScanner did not place any importance on this...

Hi guys,

I enter a whitelist rule like From: *.domain yes into the spam.whitelist.rules file.

The next day I see it dissapearing or resetting. I do however see a few rules customers put in still at the top.
Just wondering why it keeps dissapearing when entered through terminal.

No changes to Mailscanner on my end recently other than tightening some spam rules for specific domains

Yet the phishing filter is finding emails from paypal, verizon and ebay that are legit and have no obscured urls in them as phishing

These kinds of emails Ive been receiving for years with no issue

did something in rulesets reset recently ?

some of my settings
Find Phishing Fraud = no...

A while ago I disabled MailScanner via WHM, but today I noticed that it was apparently running. Here is the output from ps aux | grep MailSc:

mailnull 4973 0.0 0.0 156456 2036 ? Ss May05 0:00 MailScanner: starting child
mailnull 15417 0.0 0.9 249792 58292 ? S 00:18 0:11 MailScanner: waiting for messages
mailnull 15436 0.0 0.9 249792 58292 ? S 00:19 0:10 MailScanner: waiting for messages...

Hi Sarah,

ClamAV and Clamavconnector addon installed by mistake by our support folks on our server where MailScanner is running.
Now, clamav is failing and getting restarted once in a while.
Currently, MailScanner and clamd are running.

What do we need to check and fix now?

Thank you.

We are migrating to a new server and wish to know what is needed to keep the Mailscanner license valid since it will be an IP change.
Thanks,
George

I am starting to see these php error lines in my logs and was wondering if something has changed in mailwatch/mailscanner to cause this:

PHP Deprecated: Function ereg_replace() is deprecated in /usr/local/cpanel/whostmgr/docroot/cgi/mailwatch/functions.php on line 926

I'm also seeing this:

Possible syntax error on line 75 of /usr/mailscanner/etc/filename.rules.conf : 29 Time(s)

Has anyone...

ClamAV is reporting it's out of date on my server where it's already been recently installed by ConfigServer so I decided to have a stab at upgrading it myself. I'm not doing very well.

I followed the instructions here:

http: / / config server. com/free/clamav.html

I downloaded the correct archive and put it in my /bin/ folder on my server (running Centos 6.3) and then extracted it fine. Did...

Something has changed on one of my servers since last night. I can't get MailScanner to run. I have disabled it for now so new mail will get delivered via Exim. But there is a ton of mail in the MailScanner queue that won't get delivered until it gets properly restarted (or removed, I guess). Here is what I have done.

When I try to start MailScanner using /sbin/service MailScanner start I get...

I've read through the config file and searched through this forum for anything related to allowing .cab and .sai files to be sent in mailscanner but can't seem to find anything in the subject lines that relates to my issue. I have to send my simply accounting files to my accountant and mailscanner won't let them through. Is it possible to allow these files to pass on a one time basis when I need...

ineed to allow double file extension like name.xls.pdf or any name.*.pdf

Dear All,
We all have some ways to make out MS installation works better and more efficient in fighting spam. It would benefit for all of us to share our rules we use in MS along with some information how to apply them. Correct me and participate in this thread.

My etc/mail/spamassasin/myrules.cf

score BAYES_50 1.5
score BAYES_60 2.0
score BAYES_80 4.3
score BAYES_95 5.5
score BAYES_99 8.5...

Hi

I'm being using mailscanner for years, but considering cpanel has added a bunch of few new features, is still MailScanner the best option?
I'm asking because I'm configuring a new box, and remembering what have to do to install MailSacanner and tempted to test the cpanel options (clamavconector, spamd ...)
I went to cpanel forums and couldn't find any recent post regarding the...

My server updated itself to WHM 11.34.0 a couple of days ago and ever since I have been receiving MailScanner warnings and finding many, many undelivered emails in MailWatch as Bad Content/Infected . In fact it seems every email from IP.Board is not being delivered. Most emails I receive from the server about this contain:

Our virus detector failed to completely analyse a message you sent:-...

Hello to all, we are using the cPanel MailScanner Service Package and it's simply great but we are having some problems with spam bypassing the MailScanner by using some accounts in whitelist.

so customers are getting fake spam e-mail from

whitelistemail@domain0001.com to whitelistemail@domain0001.com

Is there a way to block this without the use of spf ?

Thanks and hope to have news :)

Hi,
Checking my exim_paniclog, I discovered many messages as these:

2012-11-06 10:05:03 1TVki7-0000i5-JO spam acl condition: warning - spamd connection to 127.0.0.1, port 783 failed: Connection refused
2012-11-06 10:05:03 1TVki7-0000i5-JO spam acl condition: all spamd servers failed

I have MailScanner installed.
Searching Google for similar problems, nothing has a clear solution to this, except...