Welcome to the ConfigServer MailScanner Forum. Please note that this thread is for general questions about MailScanner, SpamAssassin, and ClamAV. If you need urgent assistance and have had us perform the MailScanner service on your server in the past, you should log a support ticket on our helpdesk at .
More and more spam emails are arriving at my servers with message bodies that look legit so they pass as NOT spam. But their PDF attachment contains blatant spam, so they are using this method to get by the spam filters. Does Mailscanner scan PDF files for spam? If not, what can be done to stop this?
We've been using Mailscanner on our servers and so far it's been very helpful.
However, we would like to find a way to NOT forward emails that are flagged as High Spam Score to any email forwarders our clients might have.
We want to do this in order to prevent any further rate limiting from clients like Gmail and Outlook that is being caused due to the massive spam emails our servers...
I'd like to send all RBL lookup queries to a remote standalone DNS server dedicated to RBL lookups only.
Our cPanel install uses the non-caching version of pDNS, a remote Bind install would go some way to getting access to our RBLs back without the your query was blocked issues we're currently facing.
If I were to add the following to /etc/mail/spamassassin/local.cf would MailScanner...
I've been trying to stop a bot from sending email with a subject like:
(proper_name) some random porn sentence
by creating filters in cPanel>>Global Email Filters but I am seeing this error in my logs:
warn Encountered error
in Email::has_spam_as_acl: Email::has_spam_as_acl(1) failed: This feature
requires the “spamassassin” option and is not enabled on your account.
I currently have Mailscanner running under CPanel and i was wondering if anyone managed to set it up in a way a user can just forward the email to a spam@ to pipe the emails into learning and also add it to the whitelist or even just auto-whitelist address when a learn request is issued.
Hello!
Today a few clients received an email from their own accounts saying they've been hacked and the hacker has access to their mail and cPanel account,
We verified and the mail was sent from a different server.
Because of that we're making some changes to the SPF, exim and mailScanner configuration, there is some some mailScanner option to block remote mail from an account to itself or just...
Hello Sarah,
would you be kind to tell how to fix this?
Warning! directive_matcher could not parse error:
cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -bV -C /etc/exim.conf.test.work.8b674329
Exim configuration error:
new_router virtual_user not found for virtual_user_mailscanner router
Steps to reproduce the message:
- Open EXIM MAIL CONFIGURATION
- Open ADVANCED OPTIONS...
Is there a setting within Mailscanner that allows for the rejection of mail at SMTP time when the score exceeds a predefined threshold?
This feature exists within the Exim Configuration Manager although I have not enabled it as the advice is not to tinker with Spamassassin settings when Mailscanner is installed. We have this feature running on an old server and it works really well.
that was about winmail.dat files
I see now the creation of files like 20000.dat of 310000.dat in the
/var/spool/MailScanner/quarantine/20220114/xyz
directory as a result of scanning a mail that has *not* this attachments in its source.
Then MailScanner says Bad Filename Detected and
Report: MailScanner: No programs allowed (310000.dat)
Has someone found a reason /...
I am trying to create a filter to rewrite the from and to of messages we send to our internal fax service.
My requirements are:
Determine if the message is from one of three allowed domains
If yes, then determine if the message is being sent to our fax software.
if yes, then
change the from address to the address our fax software will respond to
change the to address to the format our fax...
It seems like Mailscanner should automatically block email that has no From: address. We are getting a ton of these now and they are all 100% spam. We can block the IP but we obviously can't block the From: address if there is nothing to block. Are we missing a setting somewhere? If there is no From: address how can it be legitimate mail and why doesn't Mailscanner automatically block it?...
We have a disgruntled customer that specifically created an email address to subscribe it to spam lists/newsletters and then they set up that email address to forward all emails to one of our support emails, creating a large amount of spam that can't really be blocked by traditional means. The original senders are, more or less, legitimate and mostly legitimate newsletters, so I wouldn't...
Having the instant IP block is an awesome feature and we use it frequently for repeat offenders. But these days so many spammers are sending from multiple IPs from a single CIDR 24 block. It would be so cool to have two options to click to block. One like the current single IP block, and a second one right next to it that blocks the entire range, ie NN.NN.NN.0/24. We do this manually at times but...
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum