ConfigServer Community Forum

I have a mail server that configured with mailscanner and spamaassassin. Lately, I have received a kind of bot attack of email which the sender send an email to multiple recipient( >100) in a short time.

One of my rule in spamassassin is to detect any sender in which is sending to more then 20 person as high scoring spam value.
However, since the attack is a private 1 to 1 mail, my rule cant hit...

Hello

I see in the release notes of WHM/CPANEL

changes in perl, exim, dovecot...
is it OK / tested to do the upgrade with mailscanner FE alreeady installed ?

Thanks for your work
Yves

Hi, i'm planning to deploy mailscanner and i have a question.

In my current setup I've enabled, along with spamassassin, Enable Sender Rewriting Scheme (SRS) Support in exim basic editor, in order, emails that are being forwarded to external providers like gmail, yahoo etc, to pass spf checks.

That leads to a risk, that the external mailserver will blacklist my ip, assuming that the spam emails...

Im having trouble

A back fieldworker (*.zap) has a file in it thats triggering a block

This message has had one or more attachments removed (Siemens.Simatic.Lang.xml

And

MailScanner: No programs allowed (_aa_1.del)

I have added allow for the zap file

What other allow do I need to add to get this attachment to be ignored ?

Hello. It can be done to configure Mailscanner to send email to server administrator of the Other Bad Content Detected emails but configure it to each domain?. Thanks.

Kind regards.

Hey, i´m stuck.

Mailscanner is breaking my DKIM check, mailscanner disable all good. I dont know why but mailscanne ris always adding a = at the End of my text, but only on the plain text part of the email.

here is the part of the email on my outgoing mail:
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Test3

And thats the part on the...

Hi Everyone,

I am getting a lot of spam from quite a large US hosting company, Eonix, it seems they are a spammers paradise from what I can see.

I can get a list of all their IP's

I would like to some how create my own custom RBL list with all their IP's on if that possible? I dont want to totally block the emails just assign them a high SA score.

What is the best way to do this in...

Hi, All,

MailScanner v5.3.3
ConfigServer MailScanner Script v5.02
MailScanner Front-Ind v9.07
ConfigServer Security & Firewall v14.08

Not sure exactly when this started, but certain outbound mails to them are being marked Disarmed .

Have:
whitelisted the sending IP in both /etc/csf.allow and /etc/csf.ignore
Restarted CSF
whitelisted the sending email address in...

Just started this morning, getting a ton of false positive RBL rejects.

For example, one entry:

2021-02-01 13:11:58 H=shvf21.jpmchase.com :53368 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F= rejected RCPT : JunkMail rejected - shvf21.jpmchase.com :53368 is in an RBL:

In my mailscanner.conf I only have SBL+XBL spamcop.net as the only RBL's in the text box. But, none of these IP's are in...

Good morning,

Is there a way to check if From header matches authenticated user and block via MailScanner or OSM if it is not matching?

Thanks in advance.

Hi,

I'm upgrading my Cpanel server in-place from Centos 6 -> 7, and need to know if MailScanner will just work w/o needing reinstalllation. Anyone have insight into this? Thanks!

Mike

Hi guys,

We have about 30 servers, all of them run MailScanner and MSFE.

The majority of them correctly scan mail and the SPAM Report will show grey list etc..

Some servers had URIBL_BLOCKED which we easily fixed with setting dns_server 127.0.0.1

Our issue is that a number of other servers do not reference URIBL_ in the SPAM Report headers at all.

Where can we check that URIBL_ is enabled...

I have installed MailScanner FE and recently I started to notice outbound spam from one of the accounts

going to logs I found this

grep 1ja0kz-0004qR-E2 /var/log/exim_mainlog
2020-05-16 20:37:53 1ja0kz-0004qR-E2 -E1ja0kz-0004qR-E2
2020-05-16 20:38:03 1ja0l9-0004rg-9Y R=1ja0kz-0004qR-E2 U=mailnull P=local S=3203 T= Mail delivery failed: returning message to sender for oriental@webtop.vra.ro...

Randomly yesterday everything went from working fine to not working at all. We have a WHM/cPanel dedicated server, and MailScanner was installed manually years ago, not as a WHM module but just directly in CentOS.

I believe it's version 4.84.5.

We restarted the server just to be sure of a fresh start. Then tried to run service MailScanner restart and receive errors like this:

Can't locate...

Hi,
We needed to reboot the server last night. After we did, it seems Mailscanner did not start properly.
We noticed the mail queue had over 800 emails pending. Tried to restart Mailscanner - that did not work (I was in a panic, so I did not properly make note of the error.) Then I just disabled Mailscanner to get email moving again.

Exim services were restored and email is delivering now, but...

I see v5.2.1-1 available on GitHub, but it doesn't show as an available update on my WHM.
WHM is showing v5.0.2

Has 5.2.1-1 been put on general release ?

Hey there,
I've set up Mailscanner to send out notification to the server admin and the sender when an email is blocked, say for having multiple extensions in the filename.

The notification email to the server admin goes out correctly, using the Notices From and Local Postmaster parameters from MailScanner Config.

The notification email to the sender however doesn't seem to use the Notices From...

Hi,

I've added some tld's to the Blacklist via MSFE > Front-End Settings > Server Spam Blacklist in the format of

*@*.tld

eg: *@*.icu

Clicked Change and then went on to reload and restart MailScanner for good luck.

All emails from .icu are now being marked as Blacklisted in MSFE and the Spam Report shows spam (blacklisted) but these emails are still being delivered to an account where they...

Hi,

My clients are having issues emailing themselves with the above score of 2.84 not helping.

How can I reduce the 'Delivered to internal network by host with dynamic-looking rDNS' score to ZERO ....

Thanks