ConfigServer Community Forum

Hey guys.

I have been using MailScanner for some time and have had few challenges improving its filtering.

One of these few challenges is being able to identify some messages correctly, my current challenge is.

Let's say I have a domain called
domain1.com hosted on MSFE.

I have received messages from outside the server with a falsified from header, they add the same recipient address to the...

Hi, Sarah.
Is there an option in MailScanner that could block emails that comes with nothing on the subject?

Regards,
Sergio

I am receiving spam from the following domains:
support@frommy.from-mn.com
support@frommy.from-dc.com
support@frommy.from-ky.com
support@frommy.from-nv.com
realiuup0310177@from-pa.com
bancoitau66068@pontsita.from-in.com
domiuup0166233@from-vt.com
vivoconta90394@noticses.from-in.com

notice that it is always the type: *@*.from-**.com
Is there any way to blacklist this *.from-**.com?

Hello,

I would need some advice regarding phishing fight with spamassassin and Mailscanner Front End.
I've found this instruction:
I've created a bash scripts cronjob to download openphish, phistank, phishstats, and mailscanner phishing feeds.
Some of them are running every 90 minutes, 4 hours, every 12, and some daily.
Cronjobs transfer data from CSV files to txt format only with url (one url...

Hwo to setup RelayCountry:
I've found this script:
loadplugin Mail::SpamAssassin::Plugin::RelayCountry
ifplugin Mail::SpamAssassin::Plugin::RelayCountry
add_header all Relay-Countries _RELAYCOUNTRY_
add_header all Relay-Country _RELAYCOUNTRY_
report X-Relay-Countries: _RELAYCOUNTRY_
report X-Relay-Country: _RELAYCOUNTRY_
header RC_GOD X-Relay-Countries =~ /(BA|HR|DE)/
describe RC_GOD...

Righ now MailsCanner Front-End just have 4 buttons when checking an email, they are:
BLACKLIST EMAIL, BLACKLIST DOMAIN, WHITELIST EMAIL and WHITELIST DOMAIN.

Would you please consider 2 more:
BLACKLIST *.DOMAIN AND WHITELIST *.DOMAIN ?

Right now there a thousand of attacks from domains like:
root@bn14.ujiso.com
root@bn15.ujiso.com
root@bn16.ujiso.com
root@bn21.ujiso.com
root@bn3.ujiso.com

And...

How do I setup a global filter to block all email sent to the server with certain words in the Body, Subject or Header?

Hello!

I'm facing the following situation:

I have two interconnected servers, one with WHM and cPanel, and the other as a Mailnode with only WHM.

Both servers have Mailscanner installed, but on my Mailnode server, due to the absence of cPanel accounts, I encounter difficulties in manipulating user settings.

On my main server, I can access the interface normally. The question that arises is:...

Sarah,
Would you be kind to check the possibility to add a SUBJECT COUNT into MSFE Statistics, please?

It will be great if it could send a warning mail when more that 100 emails (or threshold defined by admin) with the same subject are sent, this will help to track any email account that is compromised.

Thanks.

Regards,
Sergio

hello,
i new with mailscanner frontend . i found some spam starting from an email address.

i have blacklisted address:

Add to blacklist
Redirecting to /bin/systemctl reload MailScanner.service
System black and white lists updated
Completed

first of all i want to know if this is server wide block
...and also if there is window in GUi or command to check all blacklisted address
thanks

Hi
Can I clone my virtual machine with Cpanel + MSFE( licensed and working perfectly) , and then acquire another license for that (new) machine?
with another public IP, logically

Is there a procedure, or will simply detecting the new public IP corresponding to the license work?

thanks! :)

On a shared server, we have a hotel account with a number of users sending between each other. All of them send/receive successfully except one. They routinely get mail marked as high scoring spam and in mail control it looks like this:

In the exim log we get this:

2023-09-20 11:25:39 1qiz58-0000T5-1J no immediate delivery: queued in mailscanner by ACL

Their originating IP *is* listed in...

With MailScanner and MailScanner Front End installed, is the Report Junk setting in the end user's email interface of RoundCube integrated to MailScanner's learning? If not, could that feature be added to have MSFE become the handler for when this action is called from RoundCube?

At least Horde and Squirrel Mail have been deprecated, at least there is only one mail client to have to program for.

I just spun up a new server to upgrade the OS to Almalinux 8. I purchased a new license to MailScanner FE and had ConfigServer install it on the new system. When the new and old systems swapped IP addresses, MSFE on both servers stopped working up in WHM (i.e. when I visit /cgi/configserver/mailscanner.cgi the page is blank). How do I fix this?

I don't think that I can use ConfigServer Servics...

Hello,

I am having an issue where all incoming mail from amazon and google that have HTML embedded are being flsgged as infected and therfore not delivered.

Also outgoing emails that have attachments like pdf or jpg and also being flagged as infected and not delivered.

Has anyone else had that problem and do you have a solution for that?

Thank you!
Harold

Hi I need to know if good way to block spam is just by putting:

Spam List = BARRACUDA SORBS SPAMHAUS SPAMCOP

Will that be enough to start getting blocklists and spam from this list start to be rejected?

I also have the option in exim for bl.spamcop.net and zen.spamhaus.org enabled

Regards

For the last few days I've been attempting to remove a user from my server's whitelist, but every 24 hours the whitelist document seems to be restoring to the state it was in the day before. Is this a configserver setting or is something else possibly at play here?

In MailScanner v9.23 when you Release (resend) a message to someone it indicates that it modifies the email header To: field but in fact it inserts a duplicate To: header which makes the message RFC 5322 non-compliant. Google automatically bounces these messages so they never get to the recipient. How do I fix this?

Hello,

In the past I've used the RelayCountry plugin in Spamassassin to create rulesets in our custom.cf to score certain countries higher when email has passed through servers within that country. Here's an example of the config from the Apache Wiki:

header RELAYCOUNTRY_BAD X-Relay-Countries =~ /CN/
describe RELAYCOUNTRY_BAD Relayed through China at some point
scoreRELAYCOUNTRY_BAD 3.0...