[ previous ] [ next ] [ threads ]
 
 From:  "Kris Shaw" <monowall at wealdclose dot co dot uk>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Virus Scanning when MailScanner is set to ignore domain
 Date:  Tue, 2 Jan 2007 14:12:17 -0000
Hello,

I building a new mail relay and it currently sits in front of an existing MailScanner server that is
working OK. The new relay has MailScanner installed, but as I don't want to double scan messages
until I switch things over I have created a ruleset that disables MailScanner scanning by default.

Scan Messages = %rules-dir%/scan.messages.rules

scan.messages.rules contains:
To:             kshaw at xxxx dot co dot uk       yes
FromOrTo:       default                 no

Even though it takes no action, MailScanner is still virus checking messages, as seen by clamav
activity using 'top'. Running MailScanner in debug mode reveals:

Jan  2 14:02:24 mx2 MailScanner[28092]: MailScanner E-Mail Virus Scanner version
 4.57.6 starting...
Jan  2 14:02:25 mx2 MailScanner[28092]: Read 759 hostnames from the phishing whi
telist
Jan  2 14:02:25 mx2 MailScanner[28092]: Using SpamAssassin results cache
Jan  2 14:02:25 mx2 MailScanner[28092]: Connected to SpamAssassin cache database

Jan  2 14:02:25 mx2 MailScanner[28092]: Enabling SpamAssassin auto-whitelist fun
ctionality...
Jan  2 14:02:28 mx2 MailScanner[28092]: lock.pl sees Config  LockType =  posix
Jan  2 14:02:28 mx2 MailScanner[28092]: lock.pl sees have_module =  0
Jan  2 14:02:28 mx2 MailScanner[28092]: Using locktype = posix
Jan  2 14:02:28 mx2 MailScanner[28092]: Creating hardcoded struct_flock subrouti
ne for linux (Linux-type)
Jan  2 14:02:28 mx2 MailScanner[28092]: New Batch: Scanning 5 messages, 90497 by
tes
Jan  2 14:02:28 mx2 MailScanner[28092]: Created attachment dirs for 5 messages
Jan  2 14:02:28 mx2 MailScanner[28092]: About to deliver 5 messages
Jan  2 14:02:28 mx2 MailScanner[28092]: Unscanned: Delivered 5 messages
Jan  2 14:02:28 mx2 MailScanner[28092]: Virus and Content Scanning: Starting
Jan  2 14:02:28 mx2 MailScanner[28092]: Commencing scanning by clamav...
Jan  2 14:02:36 mx2 MailScanner[28092]: Completed scanning by clamav
Jan  2 14:02:36 mx2 MailScanner[28092]: Completed checking by /usr/bin/file
Jan  2 14:02:36 mx2 MailScanner[28092]: MailScanner child dying of old age

Mailscanner version:
root@mx2:~# /opt/MailScanner/bin/MailScanner --version
Running on
Linux mx2 2.4.33.3 #21 Fri Sep 1 04:42:41 CDT 2006 i686 athlon-4 i386 GNU/Linux
This is Perl version 5.008008 (5.8.8)
This is MailScanner version 4.57.6

Any ideas??


Regards,

Kris.