Every day when the script looks for new domains or sub domains to add to the different rules like:

spam.scanning.rules
spam.action.rules
spamhigh.action.rules
virus.delivery.rules

There is a particular subdomain that keeps getting added every day and is causing hundreds of duplicate entries in the above files. The interesting part is it feels like there is some pattern not matching correctly....

Hello,

I always have no lines in rep_audit_log.php. (No rows retrieved!)

I laready edited /usr/local/cpanel/whostmgr/docroot/3rdparty/mailwatch/conf.php

and set: define(AUDIT, true);

It still do ot work. did I miss anything?

Thanks

Hilário

Just realised that since the upgrade last night of WHM to v70.0.32 no emails seem to be being processed.

Tail of maillog:

May 9 10:50:27 server7 MailScanner: MailScanner Email Processor version 5.0.2 starting...
May 9 10:50:27 server7 MailScanner: Could not use Custom Function code /usr/mailscanner/usr/share/MailScanner/perl/custom/MailControl.pm, it could not be require d. Make sure the last...

When a message is quarantined, the sender and recipients aren't notified.

How can we change things so the recipient gets a note with the original email (minus the attachment) saying if you really really trust the sender you can download your message from ?

When spam is suspected, we want the sender to get a reject notice.

Or some similar behavior.

Hi,
i just install new mailscanner and mailscanner fronted but MCP look like not working. Any advice?

some lines from maillog are here but there are no MCP process in there:
Jan 25 10:25:16 server MailScanner: New Batch: Scanning 1 messages, 483015 bytes
Jan 25 10:25:16 server MailScanner: Virus and Content Scanning: Starting
Jan 25 10:25:20 server MailScanner: Uninfected: Delivered 1 messages...

Hi, i'm planning to deploy mailscanner and i have a question.

In my current setup I've enabled, along with spamassassin, Enable Sender Rewriting Scheme (SRS) Support in exim basic editor, in order, emails that are being forwarded to external providers like gmail, yahoo etc, to pass spf checks.

That leads to a risk, that the external mailserver will blacklist my ip, assuming that the spam emails...

Hi, i'm going to install mailscanner and i would like to know if, apart from the recommended settings etc, i have to delete from exim advanced configuration the :
av_scanner clamd:/var/clamd
entry.
Thank you

Am suddenly getting this error when using MSFE and clicking on Learn as spam and report.

Oct 4 08:39:49.391 warn: reporter: razor2 report failed: Connection reset by peer reporter: razor2 had unknown error during authenticate at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Mail/SpamAssassin/Plugin/Razor2.pm line 216, line 1. at...

/usr/local/cpanel/logs/error_log:
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Parser.pm line 789.
mailscanner.cgi: no decoder for windows-1251 at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/MIME/Entity.pm line 1887.

are these anything to worry about

this morning I had a weird situation as I discovered mailscanner was stopped (was so since yesterday afternoon, no reason found but in any case config file empty, no rules anymore, just a dead duck). Forced a re install, then forced rules etc to get it back up and running.

Luckily server retained all the mails in queue all that time so nothing was lost. Though all root mails were also queued,...

Hello,

I'm experiencing problems with storing of non-spam messages in /var/spool/MailScanner/quarantine/ /nonspam . Even though I have disabled storing of non-spam messages, new messages are constantly appearing in nonspam directory and using a lot of disk space.

Here's the content of /usr/mscpanel/msconfig.txt

spam_wl_ini=From:
cpanelusers=/var/cpanel/users
spamhigh_action_rules_ini=To:...

For some reason today I just got an email from RulesDuJour Run Summary.
In this email it gave me a breakdown of the SARE rulesets (not sure what all that is)

but at the end I get this:
***WARNING***: spamassassin --lint -p /usr/mailscanner/etc/spam.assassin.prefs.conf failed.
Rolling configuration files back, not restarting SpamAssassin.
Rollback command is: mv -f...

With the MSFE configuration, where should I be placing custom spam scoring rules?

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment Ole Rosberg - week 5-8. Invoice_100029.pdf
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail...

I would like to block some of the new TLD's, as they are entirely spam. I can do this by adding *@*.top to the Blacklist under Front End Settings, but then the spam filter is still dealing with the volume.
Can I setup a custom filter for the TLD's in the Exim sysfilter to just reject all email from those TLD's outright, just rejecting it before it ever gets to MailScanner?

I uninstalled MailScanner using the script and just noticed I have a significant number of messages starting to back up in the Pending Queue (per ConfigServer Mail Queues). I cannot seem to release these messages or even force the queue. Any help would be appreciated! Thanks -

After adding email domain to the blacklist I get an email titled cPanel -> MailScanner Report which tells me that an certain domains have been removed from the blacklist, for example;

mail.xxxx-clairvoyant.com removed from spam.blacklist.rules

A similar thing is happening with the whitelist rules

Why is this happening and how can I stop this?

URIBL_BLOCKED is not working in my server due to:
ADMINISTRATOR NOTICE: The query to URIBL was blocked. See for more information.

As far as I could test, spamassassin is using the resolvers configured for my server to navigate the web. These are my datacenter provided DNS servers. Probably they generate so many request from all the thousands servers in the datacenter that we are always blocked....

Hello,

We have had a request from a client to silently copy all inbound and outbound emails from a member of staff to their line manager. Normally we would use an exim custom filter, but having done this the filter did not work. We have now been told this is because we use mailscanner and the exim filters therefore will never work.

I've had a really good look around but I can't see a way to do...