ConfigServer Community Forum

Hi,
i just install new mailscanner and mailscanner fronted but MCP look like not working. Any advice?

some lines from maillog are here but there are no MCP process in there:
Jan 25 10:25:16 server MailScanner: New Batch: Scanning 1 messages, 483015 bytes
Jan 25 10:25:16 server MailScanner: Virus and Content Scanning: Starting
Jan 25 10:25:20 server MailScanner: Uninfected: Delivered 1 messages...

/usr/local/cpanel/logs/error_log:
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Parser.pm line 789.
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Entity.pm line 1887.

are these anything to worry about

Hello,

I'm experiencing problems with storing of non-spam messages in /var/spool/MailScanner/quarantine/ /nonspam . Even though I have disabled storing of non-spam messages, new messages are constantly appearing in nonspam directory and using a lot of disk space.

Here's the content of /usr/mscpanel/msconfig.txt

spam_wl_ini=From:
cpanelusers=/var/cpanel/users
spamhigh_action_rules_ini=To:...

With the MSFE configuration, where should I be placing custom spam scoring rules?

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment Ole Rosberg - week 5-8. Invoice_100029.pdf
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail...

I uninstalled MailScanner using the script and just noticed I have a significant number of messages starting to back up in the Pending Queue (per ConfigServer Mail Queues). I cannot seem to release these messages or even force the queue. Any help would be appreciated! Thanks -

After adding email domain to the blacklist I get an email titled cPanel -> MailScanner Report which tells me that an certain domains have been removed from the blacklist, for example;

mail.xxxx-clairvoyant.com removed from spam.blacklist.rules

A similar thing is happening with the whitelist rules

Why is this happening and how can I stop this?

URIBL_BLOCKED is not working in my server due to:
ADMINISTRATOR NOTICE: The query to URIBL was blocked. See for more information.

As far as I could test, spamassassin is using the resolvers configured for my server to navigate the web. These are my datacenter provided DNS servers. Probably they generate so many request from all the thousands servers in the datacenter that we are always blocked....

Hello,

We have had a request from a client to silently copy all inbound and outbound emails from a member of staff to their line manager. Normally we would use an exim custom filter, but having done this the filter did not work. We have now been told this is because we use mailscanner and the exim filters therefore will never work.

I've had a really good look around but I can't see a way to do...

I installed success but MailScanner don't show in WHM&Cpanel at Manager Plugin, please help me why
i used command
sh install.sh :confused: :confused:

For the last week or so I've been seeing a lot of these notifications in my logwatch email and was wondering if this is normal or not. I've been researching online but cannot find anything related to these logs to explain why this is happening or how to resolve it. Any ideas?

**Unmatched Entries**
Started MailControl MySQL process: 154 Time(s)
Connected to MailControl MySQL database: 154...

I feel like my Bayes is not auto-learning high scoring spam. When I look at my bayes DB info, it shows the # os Spam messages as 685, which has been pretty much me manually training it. In Mailwatch, I see a lot of high-scoring spam go by, but that does not seem to increment the # of spam.

Any ideas on how to troubleshoot this?

Number of Spam Messages: 685
Number of Ham Messages: 10,664
Number...

i have the latest version of of MS and MSFE running under Centos and they are working fine except for this issue.

I have set the default low scoring spam action to delete for all domains on my server and the the low score value to 5 however low scoring spam is still being delivered despite being scored above 5 which is the limit i set. i have carefully checked all my settings for low scoring...

Dear All,

I am running MailScanner and sendmail for couple of years with no issues
suddenly today morning i found that no mails can be sent or received
i also have mailwatch running so on loggin into mailwatch i found all mails in red status as virus
details told me denial of service attack in message.
also i found the in.mqueue has about 500 messages

clearing the in.mqueue folder ,restarting...

Hi,

We have a false positive:

The virus detector said this about the message:

Report: Report: MailScanner: Attempt to hide real filename extension (tmpA99C.tmp.png)

Report: MailScanner: Attempt to hide real filename extension (tmpA9AD.tmp.png)

Report: MailScanner: Attempt to hide real filename extension (tmpA999.tmp.png)

Report: MailScanner: Attempt to hide real filename extension...

Your blog says latest 3.09

I have 3.08 installed and force update still gives me 3.08
ConfigServer MailScanner Script - v3.08 installed and up to date

Is there an error somewhere my end or is there a caching error on your server

Hi,
I have not been able to figure out how to keep mail any longer than the default. What I mean is this: When I login to MailWatch, I can run reports for a particular account or email address, and when I click on one, I'm taken to a screen where I can click on a link at the bottom and the actual message will be show. With any message older than a couple of months, however, that link at the...

Hi guys!

We are tryin' to solve this issue:

So far the conclusion is that google is inside /etc/MailScanner/phishing.bad.sites.conf .
Any particular reason for doing that?
We have read some threads that google had some large phishing attacks back in 2014 ... but is it necessary to still be in that CONF?
How can we solve that please?
With best regards

Hi. Since today, Clamd is detecting all .DOC files, sent or received in server, as Win.Exploit.CVE_2016_3316-1 virus. Has someone the same problem?. How I can resend emails that have been detected as virus?.

Kind regards.

Good day,

Received: from (port=15889 helo=node-45-112-69-32.alliancebroadband.in)
by panel.uhlhosting.ch with esmtp (Exim 4.87)
(envelope-from )
id 1bIyUG-0009Hq-Fu
for ganja@highacid.com; Fri, 01 Jul 2016 15:28:04 +0200
From:
To:
Date: 1 Jul 2016 22:28:20 +0400
MIME-Version: 1.0
Subject: We offer new vacancy
Message-ID:
Priority: normal
X-mailer: Pegasus Mail for Windows (4.52)...