ConfigServer Community Forum

I've searched the net and these forums and can't seem to find an answer.

I'm getting a lot of spam with the subject starting with {Spam? 0} but the headers show MailScanner-SpamScore: ssssssssssssssssssss and I can't figure out why it does that.

Here's the headers from an email doing that and another spam not doing that.

subject showing 0:...

How can i prevent spam from spammer that use same domains hosted in my server to send garbage to my clients.
I need to block this, and need to add this domains to the whitelist cause real emails some times gets blocked. :confused:

Thx

I have this setting in my mailscanner.conf file
Remove These Headers = remove.headers.rules

It always worked till last MSFE update to MailScanner - v4.76.24 and ConfigServer MailScanner Script - v2.74.

I did not edit the remove.headers.rules file, so it should not change the behavior.

Now all the headers I need to remove are left intact.

Is anyone else having this problem?

How do I...

There is a spammer sending spam with larger image files attached to one particular email address. They are bypassing the spam feature by sending large files (300k and above) so spam report score is Too Large (I presume that means the files are too large to scan for spam)

I initially tried blocking the small IP range which stop them for a while, but now they are using a variety of IP address,...

Hello,

works Mailscanner with Plesk - Plesk 9.2.1 use new Postfix?

Best regards

Now that I am running MailScanner does it still read the Spam Assassin rules that is stored in .spammassassin/ user_prefs. I would like to add custom rules.

If not how do I update the rules? I did see the updates in mailwatch but I am still getting tons of spam since moving to mail scanner.

Thanks
Joe

Hello,

I want to block mail as Spam when the sender mail address equal the recipient mail address.

Is there a way to do this with mailscanner.

I need your help thank's.

Hi,
When I enable MailScanner in MSFE I see:

Shutting down spamd: Is that normal?

Thanks,
Hilário

P.S. Log bellow:

Enabling MailScanner...
Configuration file passes test! New configuration file was installed.
Enabled ACL options in block ACL_RBL_BLOCK:
......
Mail Scanner exim.conf updating...`/etc/exim.conf' -> `/etc/exim_outgoing.conf'
Done
/scripts/mailscannerupdate: This script...

Hello to all,

I'm receiving emails with subject: Suspicious process running under user nobody

The executable is: /var/dcc/libexec/dccifd

Command Line (often faked in exploits):

/var/dcc/libexec/dccifd -Inobody -tCMN,5, -llog -wwhiteclnt -Uuserdirs -SHELO -Smail_host -SSender -SList-ID

Thanks,
Wilson

Would you please help me?
It fails with the following log:

MailScanner E-Mail Virus Scanner version 4.74.16 starting...
May 6 00:51:31 alfa MailScanner : Read 810 hostnames from the phishing whitelist
May 6 00:51:31 alfa MailScanner : Read 3195 hostnames from the phishing blacklist
May 6 00:51:31 alfa MailScanner : Config: calling custom init function MailWatchLogging
May 6 00:51:31 alfa...

Hi,

I want Mailscanner to check for RBLs for a specific hosted domain only. In MailScanner.conf I have

Spam List Definitions = %etc-dir%/spam.lists.conf

and

Spam List = CBL

Doing that checks all the incoming emails against the CBL list. But I only need to check the incoming emails for 1 domain only against the spam list; I check all the other emails for CBL at SMTP level via Exim.

Can Spam...

I store 30 days of non spam. I have a user that has lost all their e-mail, I'd like to release all messages to this user that I still have in the /nonspam folders to them. How can I do this easily?

I can do it from the Mailscanner Front End->Mailwatch report list, but there are 300 messages. It would take me too long.

The folder layout is like this:
20090416/nonspam/1LuUa5-0002fA-PJ

Jason.

Hello,
I try to install MailScanner on my new server. it worked very well before but in new installation I have some problem!
My server is a core 2 quad Q9300 with 8GB ram and CentOS 5.2 x86_64
here is my related application version:
MailScanner: 4.74.13
ClamAV: 0.94.2/8856
Perl: 5.8.8
PathTools: 3.29

the problem is that MailScanner continually restarting. here is the its log in...

Does cPanel's User Level Filtering still work when MailScanner is installed?

If so, do the filters precede MailScanner's actions?

In other words, if I set up a filter which discards the message, will I ever see the message in Mailwatch or will it have already been deleted?

I want to set up some rules in antivirus.exim for some targeted spam that is too large for MailScanner. When the rule triggers, I do get a log entry saying the message was cancelled. Then it just gets delivered anyway. I am wondering if it is because MS has a deliver statement in MS settings for non-spam actions?

Here is a sample of my antivirus rules:
if $header_subject contains keyword 1 or...

Noticing a lot of Excel 2007 files getting blocked in recent weeks from clients

seems to be when theres multiple workbooks saved as the one xlsx file

for example:

Mailscanner found workbook.xml1.rel within ASXPlantSim.xlsx

now these is a normal format so im a bit puzzled as to how i should modify the rules to allow this to not get blocked, without causing issues or without preventing things...

/home/MailScannerLogs/quarantine has reached 125GB. How do I tell Mailscanner to useless space? Fewer Days? etc...

Thanks
Jason

Im getting customers complianing of false positives

At Mon Mar 2 13:19:17 2009 the scanner said: Clamd: message was infected: Phishing.Heuristics.Email.SpoofedDomain

in mailscanner phishing is turned off

Find Phishing Fraud = NO
Also Find Numeric Phishing =YES

How can I tweak the phising filter to catch less false positives ?

got an issue installing mailscanner ( or re-installing actually) on a server thats been upgraded to perl 5.8.9

Can't locate LWP/UserAgent.pm in @INC (@INC contains: /usr/local/lib/perl5/5.8.9/i686-linux /usr/local/lib/perl5/5.8.9 /usr/local/lib/perl5/site_perl/5.8.9/i686-linux /usr/local/lib/perl5/site_perl/5.8.9 .) at msinstall.pl line 789.
BEGIN failed--compilation aborted at msinstall.pl...

isn't there some type of rule/setting I can set so that mailscanner only scans a file if its under a certain file size? I cant seem to find that setting. To much spam is getting through because the email file size is so large. Need to increase that setting.