Hello,

Sorry all, this is the wrong list!

Kris.

----- Original Message ----- 
From: "Kris Shaw" <monowall at wealdclose dot co dot uk>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Tuesday, January 02, 2007 2:12 PM
Subject: [m0n0wall] Virus Scanning when MailScanner is set to ignore domain


Hello,

I building a new mail relay and it currently sits in front of an existing 
MailScanner server that is working OK. The new relay has MailScanner 
installed, but as I don't want to double scan messages until I switch things 
over I have created a ruleset that disables MailScanner scanning by default.

Scan Messages = %rules-dir%/scan.messages.rules

scan.messages.rules contains:
To:             kshaw at xxxx dot co dot uk       yes
FromOrTo:       default                 no

Even though it takes no action, MailScanner is still virus checking 
messages, as seen by clamav activity using 'top'. Running MailScanner in 
debug mode reveals:

Jan  2 14:02:24 mx2 MailScanner[28092]: MailScanner E-Mail Virus Scanner 
version
 4.57.6 starting...
Jan  2 14:02:25 mx2 MailScanner[28092]: Read 759 hostnames from the phishing 
whi
telist
Jan  2 14:02:25 mx2 MailScanner[28092]: Using SpamAssassin results cache
Jan  2 14:02:25 mx2 MailScanner[28092]: Connected to SpamAssassin cache 
database

Jan  2 14:02:25 mx2 MailScanner[28092]: Enabling SpamAssassin auto-whitelist 
fun
ctionality...
Jan  2 14:02:28 mx2 MailScanner[28092]: lock.pl sees Config  LockType = 
posix
Jan  2 14:02:28 mx2 MailScanner[28092]: lock.pl sees have_module =  0
Jan  2 14:02:28 mx2 MailScanner[28092]: Using locktype = posix
Jan  2 14:02:28 mx2 MailScanner[28092]: Creating hardcoded struct_flock 
subrouti
ne for linux (Linux-type)
Jan  2 14:02:28 mx2 MailScanner[28092]: New Batch: Scanning 5 messages, 
90497 by
tes
Jan  2 14:02:28 mx2 MailScanner[28092]: Created attachment dirs for 5 
messages
Jan  2 14:02:28 mx2 MailScanner[28092]: About to deliver 5 messages
Jan  2 14:02:28 mx2 MailScanner[28092]: Unscanned: Delivered 5 messages
Jan  2 14:02:28 mx2 MailScanner[28092]: Virus and Content Scanning: Starting
Jan  2 14:02:28 mx2 MailScanner[28092]: Commencing scanning by clamav...
Jan  2 14:02:36 mx2 MailScanner[28092]: Completed scanning by clamav
Jan  2 14:02:36 mx2 MailScanner[28092]: Completed checking by /usr/bin/file
Jan  2 14:02:36 mx2 MailScanner[28092]: MailScanner child dying of old age

Mailscanner version:
root@mx2:~# /opt/MailScanner/bin/MailScanner --version
Running on
Linux mx2 2.4.33.3 #21 Fri Sep 1 04:42:41 CDT 2006 i686 athlon-4 i386 
GNU/Linux
This is Perl version 5.008008 (5.8.8)
This is MailScanner version 4.57.6

Any ideas??


Regards,

Kris.