ConfigServer Community Forum

Under MSFE-Front End >> Bulk Actions.
Would it be possible to add a bulk action to add the offending IP addresses to CSF Firewall blocklist.

At the moment, you have to enter inside each message and choose block from within, which is time consuming.
It would be nice to highlight them in bulk and block from there.

Hello,

My server is running Mailscanner v5.0.2 since 2016 and does not update to latest versions.
I checked mailscanner.info website and it is being continuously updated and current version is 5.1.1-1 released in 25 August 2018.

Would you please inform how can I fix Mailscanner Front End in order for the update button appear and let me update Mailscanner to latest version?

Thanks for the help...

Every day when the script looks for new domains or sub domains to add to the different rules like:

spam.scanning.rules
spam.action.rules
spamhigh.action.rules
virus.delivery.rules

There is a particular subdomain that keeps getting added every day and is causing hundreds of duplicate entries in the above files. The interesting part is it feels like there is some pattern not matching correctly....

When a message is quarantined, the sender and recipients aren't notified.

How can we change things so the recipient gets a note with the original email (minus the attachment) saying if you really really trust the sender you can download your message from ?

When spam is suspected, we want the sender to get a reject notice.

Or some similar behavior.

Hi,
i just install new mailscanner and mailscanner fronted but MCP look like not working. Any advice?

some lines from maillog are here but there are no MCP process in there:
Jan 25 10:25:16 server MailScanner: New Batch: Scanning 1 messages, 483015 bytes
Jan 25 10:25:16 server MailScanner: Virus and Content Scanning: Starting
Jan 25 10:25:20 server MailScanner: Uninfected: Delivered 1 messages...

/usr/local/cpanel/logs/error_log:
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Parser.pm line 789.
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Entity.pm line 1887.

are these anything to worry about

Hello,

I'm experiencing problems with storing of non-spam messages in /var/spool/MailScanner/quarantine/ /nonspam . Even though I have disabled storing of non-spam messages, new messages are constantly appearing in nonspam directory and using a lot of disk space.

Here's the content of /usr/mscpanel/msconfig.txt

spam_wl_ini=From:
cpanelusers=/var/cpanel/users
spamhigh_action_rules_ini=To:...

With the MSFE configuration, where should I be placing custom spam scoring rules?

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment Ole Rosberg - week 5-8. Invoice_100029.pdf
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail...

I uninstalled MailScanner using the script and just noticed I have a significant number of messages starting to back up in the Pending Queue (per ConfigServer Mail Queues). I cannot seem to release these messages or even force the queue. Any help would be appreciated! Thanks -

After adding email domain to the blacklist I get an email titled cPanel -> MailScanner Report which tells me that an certain domains have been removed from the blacklist, for example;

mail.xxxx-clairvoyant.com removed from spam.blacklist.rules

A similar thing is happening with the whitelist rules

Why is this happening and how can I stop this?

URIBL_BLOCKED is not working in my server due to:
ADMINISTRATOR NOTICE: The query to URIBL was blocked. See for more information.

As far as I could test, spamassassin is using the resolvers configured for my server to navigate the web. These are my datacenter provided DNS servers. Probably they generate so many request from all the thousands servers in the datacenter that we are always blocked....

Hello,

We have had a request from a client to silently copy all inbound and outbound emails from a member of staff to their line manager. Normally we would use an exim custom filter, but having done this the filter did not work. We have now been told this is because we use mailscanner and the exim filters therefore will never work.

I've had a really good look around but I can't see a way to do...

I installed success but MailScanner don't show in WHM&Cpanel at Manager Plugin, please help me why
i used command
sh install.sh :confused: :confused:

For the last week or so I've been seeing a lot of these notifications in my logwatch email and was wondering if this is normal or not. I've been researching online but cannot find anything related to these logs to explain why this is happening or how to resolve it. Any ideas?

**Unmatched Entries**
Started MailControl MySQL process: 154 Time(s)
Connected to MailControl MySQL database: 154...

I feel like my Bayes is not auto-learning high scoring spam. When I look at my bayes DB info, it shows the # os Spam messages as 685, which has been pretty much me manually training it. In Mailwatch, I see a lot of high-scoring spam go by, but that does not seem to increment the # of spam.

Any ideas on how to troubleshoot this?

Number of Spam Messages: 685
Number of Ham Messages: 10,664
Number...

i have the latest version of of MS and MSFE running under Centos and they are working fine except for this issue.

I have set the default low scoring spam action to delete for all domains on my server and the the low score value to 5 however low scoring spam is still being delivered despite being scored above 5 which is the limit i set. i have carefully checked all my settings for low scoring...

Dear All,

I am running MailScanner and sendmail for couple of years with no issues
suddenly today morning i found that no mails can be sent or received
i also have mailwatch running so on loggin into mailwatch i found all mails in red status as virus
details told me denial of service attack in message.
also i found the in.mqueue has about 500 messages

clearing the in.mqueue folder ,restarting...

Hi,

We have a false positive:

The virus detector said this about the message:

Report: Report: MailScanner: Attempt to hide real filename extension (tmpA99C.tmp.png)

Report: MailScanner: Attempt to hide real filename extension (tmpA9AD.tmp.png)

Report: MailScanner: Attempt to hide real filename extension (tmpA999.tmp.png)

Report: MailScanner: Attempt to hide real filename extension...

Your blog says latest 3.09

I have 3.08 installed and force update still gives me 3.08
ConfigServer MailScanner Script - v3.08 installed and up to date

Is there an error somewhere my end or is there a caching error on your server