ConfigServer Community Forum

No changes to Mailscanner on my end recently other than tightening some spam rules for specific domains

Yet the phishing filter is finding emails from paypal, verizon and ebay that are legit and have no obscured urls in them as phishing

These kinds of emails Ive been receiving for years with no issue

did something in rulesets reset recently ?

some of my settings
Find Phishing Fraud = no...

A while ago I disabled MailScanner via WHM, but today I noticed that it was apparently running. Here is the output from ps aux | grep MailSc:

mailnull 4973 0.0 0.0 156456 2036 ? Ss May05 0:00 MailScanner: starting child
mailnull 15417 0.0 0.9 249792 58292 ? S 00:18 0:11 MailScanner: waiting for messages
mailnull 15436 0.0 0.9 249792 58292 ? S 00:19 0:10 MailScanner: waiting for messages...

Hi Sarah,

ClamAV and Clamavconnector addon installed by mistake by our support folks on our server where MailScanner is running.
Now, clamav is failing and getting restarted once in a while.
Currently, MailScanner and clamd are running.

What do we need to check and fix now?

Thank you.

We are migrating to a new server and wish to know what is needed to keep the Mailscanner license valid since it will be an IP change.
Thanks,
George

I am starting to see these php error lines in my logs and was wondering if something has changed in mailwatch/mailscanner to cause this:

PHP Deprecated: Function ereg_replace() is deprecated in /usr/local/cpanel/whostmgr/docroot/cgi/mailwatch/functions.php on line 926

I'm also seeing this:

Possible syntax error on line 75 of /usr/mailscanner/etc/filename.rules.conf : 29 Time(s)

Has anyone...

ClamAV is reporting it's out of date on my server where it's already been recently installed by ConfigServer so I decided to have a stab at upgrading it myself. I'm not doing very well.

I followed the instructions here:

http: / / config server. com/free/clamav.html

I downloaded the correct archive and put it in my /bin/ folder on my server (running Centos 6.3) and then extracted it fine. Did...

Something has changed on one of my servers since last night. I can't get MailScanner to run. I have disabled it for now so new mail will get delivered via Exim. But there is a ton of mail in the MailScanner queue that won't get delivered until it gets properly restarted (or removed, I guess). Here is what I have done.

When I try to start MailScanner using /sbin/service MailScanner start I get...

I've read through the config file and searched through this forum for anything related to allowing .cab and .sai files to be sent in mailscanner but can't seem to find anything in the subject lines that relates to my issue. I have to send my simply accounting files to my accountant and mailscanner won't let them through. Is it possible to allow these files to pass on a one time basis when I need...

ineed to allow double file extension like name.xls.pdf or any name.*.pdf

Dear All,
We all have some ways to make out MS installation works better and more efficient in fighting spam. It would benefit for all of us to share our rules we use in MS along with some information how to apply them. Correct me and participate in this thread.

My etc/mail/spamassasin/myrules.cf

score BAYES_50 1.5
score BAYES_60 2.0
score BAYES_80 4.3
score BAYES_95 5.5
score BAYES_99 8.5...

Hi

I'm being using mailscanner for years, but considering cpanel has added a bunch of few new features, is still MailScanner the best option?
I'm asking because I'm configuring a new box, and remembering what have to do to install MailSacanner and tempted to test the cpanel options (clamavconector, spamd ...)
I went to cpanel forums and couldn't find any recent post regarding the...

My server updated itself to WHM 11.34.0 a couple of days ago and ever since I have been receiving MailScanner warnings and finding many, many undelivered emails in MailWatch as Bad Content/Infected . In fact it seems every email from IP.Board is not being delivered. Most emails I receive from the server about this contain:

Our virus detector failed to completely analyse a message you sent:-...

Hello to all, we are using the cPanel MailScanner Service Package and it's simply great but we are having some problems with spam bypassing the MailScanner by using some accounts in whitelist.

so customers are getting fake spam e-mail from

whitelistemail@domain0001.com to whitelistemail@domain0001.com

Is there a way to block this without the use of spf ?

Thanks and hope to have news :)

Hi,
Checking my exim_paniclog, I discovered many messages as these:

2012-11-06 10:05:03 1TVki7-0000i5-JO spam acl condition: warning - spamd connection to 127.0.0.1, port 783 failed: Connection refused
2012-11-06 10:05:03 1TVki7-0000i5-JO spam acl condition: all spamd servers failed

I have MailScanner installed.
Searching Google for similar problems, nothing has a clear solution to this, except...

Hello guys, i´m translate the reports to my language, and i´m getting only one problem, the date format is D m - d - H:i:s Y, and i need the dd/mm/YY H:i:s, how can i change this?

Another doubt, if i put in the reports txt an HTML, the message will show and html on email or the HTML code?

thanks

I have a few addresses which can not be white listed. Some of them are coming from like yahoo and having the structure xxx.xxxATyahooDOTcom or even xxx.xxx.xxxATyahooDOTcom . So now I don't want to whitelist all of the yahoo accounts with *ATyahooDOTcom . I have tried to use regular expressions and write it xxx\.xxxATyahooDOTcom or *xxxATyahooDOTcom but the addresses are removed immediately when...

I just realized that the postmaster and abuse forwards that were originally installed with your package are no longer working. I have tried reinstalling them and have moved them to just before the RBL, but they still do not work.

Where are you installing them now with the new interface so they stay and do not disappear with updates?

# Always accept mail to postmaster & abuse for any local...

I get a lot of frozen mails in my server mail queue because Mailscanner is replying to incoming mails which have dodgy attachments, saying words to the effect of:

You have emailed a dodgy attachment which this server does not allow .

But the addresses it's sending those bounces to do not exist or are rejecting the message for some other reason, so they get frozen.

Wondering how to make...

Hello,

how do I clear mailscanners cache. I realise some mails have been cached and some RBL notes are in there. However, th IP has been un-blacklisted and it still shows the RBL message as its cached.

Thanks

Hi, we have a domain that we send email to often that has an IP address for an MX record. Wrong, I know but nevertheless, since I moved a new customer over to our servers they can't email to this domain any longer. I have added allow_mx_to_ip = yes (or true, have tried both), but I still get the below. It seems there is something else I need to change in mailscanner also for this to work? Thanks...