Discussion:
emails that attempt to kill mailscanner
Jonathan Horne
2013-08-13 15:28:02 UTC
Permalink
i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.



if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?



thanks,

jonathan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130813/912fcadd/attachment.html
Martin Hepworth
2013-08-13 16:06:50 UTC
Permalink
this problem is normally caused by config issues, like not having the -U
switch set in the main MailScanner executable.

--
Martin Hepworth, CISSP
Oxford, UK


On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com> wrote:

> i didnt try it yet... but if i set the number of attempts to 0 what will
> happen? i would like to just delete these emails immeidately, i dont see a
> need to retry it after 5 minutes.
>
> if 0 is not the right way to accomplish this, what is the correct way to
> dump emails that attempt to kill the process?
>
> thanks,
> jonathan
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130813/0b7608e3/attachment.html
Jonathan Horne
2013-08-13 17:28:18 UTC
Permalink
hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).



taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?



jonathan




Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com
To: mailscanner at lists.mailscanner.info


this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.


--
Martin Hepworth, CISSP
Oxford, UK


On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com> wrote:



i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!



-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130813/477c9e24/attachment.html
Martin Hepworth
2013-08-13 18:38:26 UTC
Permalink
You need to put the -U at the first line on the MailScanner perl script

On Tuesday, 13 August 2013, Jonathan Horne wrote:

> hmmm, its only some emails, not all of them (and its always emails that i
> would never accept anyway, high scoring spam).
>
> taking a look at hte mailscanner.conf file, i dont see offhand where to
> add a -U. any tips?
>
> jonathan
>
> ------------------------------
> Date: Tue, 13 Aug 2013 17:06:50 +0100
> Subject: Re: emails that attempt to kill mailscanner
> From: maxsec at gmail.com <javascript:_e({}, 'cvml', 'maxsec at gmail.com');>
> To: mailscanner at lists.mailscanner.info <javascript:_e({}, 'cvml',
> 'mailscanner at lists.mailscanner.info');>
>
> this problem is normally caused by config issues, like not having the -U
> switch set in the main MailScanner executable.
>
> --
> Martin Hepworth, CISSP
> Oxford, UK
>
>
> On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com<javascript:_e({}, 'cvml', 'jonathanmhorne at outlook.com');>
> > wrote:
>
> i didnt try it yet... but if i set the number of attempts to 0 what will
> happen? i would like to just delete these emails immeidately, i dont see a
> need to retry it after 5 minutes.
>
> if 0 is not the right way to accomplish this, what is the correct way to
> dump emails that attempt to kill the process?
>
> thanks,
> jonathan
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <javascript:_e({}, 'cvml',
> 'mailscanner at lists.mailscanner.info');>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
> -- MailScanner mailing list mailscanner at lists.mailscanner.info<javascript:_e({}, 'cvml', 'mailscanner at lists.mailscanner.info');>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before
> posting, read http://wiki.mailscanner.info/posting Support MailScanner
> development - buy the book off the website!
>


--
--
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130813/9f30f4e7/attachment.html
Ritchie P. Fraser
2013-08-14 08:17:14 UTC
Permalink
At the end of the first line in /usr/sbin/MailScanner... like so...

#!/usr/bin/perl -I/usr/lib/MailScanner -U

Ritchie

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: 13 August 2013 19:38
To: MailScanner discussion
Subject: Re: emails that attempt to kill mailscanner {Scanned}

You need to put the -U at the first line on the MailScanner perl script

On Tuesday, 13 August 2013, Jonathan Horne wrote:
hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).

taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?

jonathan

________________________________
Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com<javascript:_e(%7b%7d,%20'cvml',%20'maxsec at gmail.com');>
To: mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');>
this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.

--
Martin Hepworth, CISSP
Oxford, UK

On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com<javascript:_e(%7b%7d,%20'cvml',%20'jonathanmhorne at outlook.com');>> wrote:
i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


-- MailScanner mailing list mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!


--
--
Martin Hepworth, CISSP
Oxford, UK

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130814/85ca0acf/attachment.html
Richard Mealing
2013-08-14 10:27:23 UTC
Permalink
This issue only happens to me when my server is over loaded. Once I gave it more CPU's and RAM I've not had this problem again.
I find that running spamassassin as daemon and restarting that sometimes helps. The -U switch didn't do anything for me. I'm using FreeBSD.

You should look at installing fail2ban or RBL's on the MTA and check the server loan / swap information.

I do have a lot of mail coming my way, so I might be way off the mark here..

Rich


From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ritchie P. Fraser
Sent: 14 August 2013 09:17
To: MailScanner discussion
Subject: RE: emails that attempt to kill mailscanner {Scanned}

At the end of the first line in /usr/sbin/MailScanner... like so...

#!/usr/bin/perl -I/usr/lib/MailScanner -U

Ritchie

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: 13 August 2013 19:38
To: MailScanner discussion
Subject: Re: emails that attempt to kill mailscanner {Scanned}

You need to put the -U at the first line on the MailScanner perl script

On Tuesday, 13 August 2013, Jonathan Horne wrote:
hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).

taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?

jonathan

________________________________
Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com<javascript:_e(%7b%7d,%20'cvml',%20'maxsec at gmail.com');>
To: mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');>
this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.

--
Martin Hepworth, CISSP
Oxford, UK

On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com<javascript:_e(%7b%7d,%20'cvml',%20'jonathanmhorne at outlook.com');>> wrote:
i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


-- MailScanner mailing list mailscanner at lists.mailscanner.info<javascript:_e(%7b%7d,%20'cvml',%20'mailscanner at lists.mailscanner.info');> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!


--
--
Martin Hepworth, CISSP
Oxford, UK

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130814/c9b0e6c2/attachment.html
Jonathan Horne
2013-08-14 13:43:10 UTC
Permalink
Hi richard, thanks for your reply.



personally, i dont have much mail traffic thru my server, i just have my one email domain, and an average day i process about 150 on a heavy day, 120 or so of which will be spam. my server doesnt even hit a 1.0 load average.



i did install fail2ban, and i built some pretty effective regex to keep the repeaters from continually sending more spam to my server, but its these strange emails that try to kill mailscanner process that i see every day all day. as i mentioned, they seem to be always high scoring spams anyway, i just wonder if there is malicious code in the emails that i doing this. since my last /var/log/messages turn over, its happened 170 times.



thanks,

Jonathan




From: richard at fastnet.co.uk
To: mailscanner at lists.mailscanner.info
Subject: RE: emails that attempt to kill mailscanner {Scanned}
Date: Wed, 14 Aug 2013 10:27:23 +0000







This issue only happens to me when my server is over loaded. Once I gave it more CPU?s and RAM I?ve not had this problem again.
I find that running spamassassin as daemon and restarting that sometimes helps. The ?U switch didn?t do anything for me. I?m using FreeBSD.

You should look at installing fail2ban or RBL?s on the MTA and check the server loan / swap information.

I do have a lot of mail coming my way, so I might be way off the mark here..

Rich





From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ritchie P. Fraser
Sent: 14 August 2013 09:17
To: MailScanner discussion
Subject: RE: emails that attempt to kill mailscanner {Scanned}

At the end of the first line in /usr/sbin/MailScanner? like so?

#!/usr/bin/perl -I/usr/lib/MailScanner -U

Ritchie

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: 13 August 2013 19:38
To: MailScanner discussion
Subject: Re: emails that attempt to kill mailscanner {Scanned}

You need to put the -U at the first line on the MailScanner perl script

On Tuesday, 13 August 2013, Jonathan Horne wrote:


hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).

taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?

jonathan





Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com
To: mailscanner at lists.mailscanner.info

this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.



--
Martin Hepworth, CISSP
Oxford, UK


On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com> wrote:


i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!


--
--
Martin Hepworth, CISSP
Oxford, UK

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130814/77268f16/attachment.html
Richard Mealing
2013-08-19 10:43:31 UTC
Permalink
Hi Jonathan,

Has --debug or --lint shown you anything?

Thanks,
Rich


From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jonathan Horne
Sent: 14 August 2013 14:43
To: MailScanner discussion
Subject: RE: emails that attempt to kill mailscanner {Scanned}

Hi richard, thanks for your reply.

personally, i dont have much mail traffic thru my server, i just have my one email domain, and an average day i process about 150 on a heavy day, 120 or so of which will be spam. my server doesnt even hit a 1.0 load average.

i did install fail2ban, and i built some pretty effective regex to keep the repeaters from continually sending more spam to my server, but its these strange emails that try to kill mailscanner process that i see every day all day. as i mentioned, they seem to be always high scoring spams anyway, i just wonder if there is malicious code in the emails that i doing this. since my last /var/log/messages turn over, its happened 170 times.

thanks,
Jonathan

________________________________
From: richard at fastnet.co.uk<mailto:richard at fastnet.co.uk>
To: mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
Subject: RE: emails that attempt to kill mailscanner {Scanned}
Date: Wed, 14 Aug 2013 10:27:23 +0000
This issue only happens to me when my server is over loaded. Once I gave it more CPU's and RAM I've not had this problem again.
I find that running spamassassin as daemon and restarting that sometimes helps. The -U switch didn't do anything for me. I'm using FreeBSD.

You should look at installing fail2ban or RBL's on the MTA and check the server loan / swap information.

I do have a lot of mail coming my way, so I might be way off the mark here..

Rich

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ritchie P. Fraser
Sent: 14 August 2013 09:17
To: MailScanner discussion
Subject: RE: emails that attempt to kill mailscanner {Scanned}

At the end of the first line in /usr/sbin/MailScanner... like so...

#!/usr/bin/perl -I/usr/lib/MailScanner -U

Ritchie

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: 13 August 2013 19:38
To: MailScanner discussion
Subject: Re: emails that attempt to kill mailscanner {Scanned}

You need to put the -U at the first line on the MailScanner perl script

On Tuesday, 13 August 2013, Jonathan Horne wrote:
hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).

taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?

jonathan

________________________________
Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com<mailto:maxsec at gmail.com>
To: mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.

--
Martin Hepworth, CISSP
Oxford, UK

On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com<mailto:jonathanmhorne at outlook.com>> wrote:
i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


-- MailScanner mailing list mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!


--
--
Martin Hepworth, CISSP
Oxford, UK

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

-- MailScanner mailing list mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info> http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130819/81fbb8f3/attachment.html
Stef Morrell
2013-08-16 12:37:03 UTC
Permalink
On 14 August 2013 11:27 Richard Mealing wrote:
> This issue only happens to me when my server is over loaded. Once I gave
> it more CPU's and RAM I've not had this problem again.
> I find that running spamassassin as daemon and restarting that sometimes
> helps. The -U switch didn't do anything for me. I'm using FreeBSD.

I get something very similar. For whatever reason MS gets upset with a particular email and requeues it for multiple further attempts at scanning, finally dumping it with a "tried to kill me" error.

I've got a process watching the logfile looking for "attempt 4" (whatever the wording is). If it sees that, then it kills MS, clears the processing database and restarts. This will normally cure the problem.

This may be due to an obscure bug hiding somewhere in the depths of MS, but it happens so rarely it would be hard to pin down. Certainly the load on the machine is a factor, but that load is dramatically dropped by restarting MS in this circumstance, then doesn't ramp up again when processing the same email queue.

In any event, my workaround is very satisfactory for me and removes the headache in my case.

Stef
Remco Barendse
2013-10-01 03:46:17 UTC
Permalink
On Fri, 16 Aug 2013, Stef Morrell wrote:

> On 14 August 2013 11:27 Richard Mealing wrote:
>> This issue only happens to me when my server is over loaded. Once I gave
>> it more CPU's and RAM I've not had this problem again.
>> I find that running spamassassin as daemon and restarting that sometimes
>> helps. The -U switch didn't do anything for me. I'm using FreeBSD.
>
> I get something very similar. For whatever reason MS gets upset with a particular email and requeues it for multiple further attempts at scanning, finally dumping it with a "tried to kill me" error.

I have this problem with 2 specific people sending mail to our servers.
When i open the emails, the mail does look legit and without and weird
code in it.

> In any event, my workaround is very satisfactory for me and removes the headache in my case.

What was your workaround?

Thanks!
Jason Ede
2013-08-13 18:41:20 UTC
Permalink
At the top of the file called MailScanner normally in /usr/sbin on rh based systems.

Jonathan Horne <jonathanmhorne at outlook.com> wrote:

>--
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>Before posting, read http://wiki.mailscanner.info/posting
>
>Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130813/453f4968/attachment.html
Jonathan Horne
2013-08-14 13:35:10 UTC
Permalink
I tried the -U in /usr/sbin/MailScanner. like this:



[jhorne at dlp-centos64 ~]$ head /usr/sbin/MailScanner
#!/usr/bin/perl -I/usr/lib/MailScanner -U
#
# MailScanner - SMTP E-Mail Virus Scanner
# Copyright (C) 2002 Julian Field
#
# $Id: mailscanner.sbin 5120 2013-06-17 13:49:45Z sysjkf $
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or



i didnt get time to inspect the entire process operation, but i have it configured to not append the "mailscaner checked this email for virus and believed to be clean" at the bottom of emails. after i added the -U, this started appearing. for fear that other settings that i specified might also be ignored, i removed the -U until i can get a better handle on what it is doing.



i dont see offhand in the man page what exactly the -U does... can someone point me to where i can read about this switch?



thanks,

jonathan




Date: Tue, 13 Aug 2013 19:41:20 +0100
Subject: RE: emails that attempt to kill mailscanner
From: Jason at theedes.co.uk
To: mailscanner at lists.mailscanner.info

At the top of the file called MailScanner normally in /usr/sbin on rh based systems.

Jonathan Horne <jonathanmhorne at outlook.com> wrote:


hmmm, its only some emails, not all of them (and its always emails that i would never accept anyway, high scoring spam).

taking a look at hte mailscanner.conf file, i dont see offhand where to add a -U. any tips?

jonathan




Date: Tue, 13 Aug 2013 17:06:50 +0100
Subject: Re: emails that attempt to kill mailscanner
From: maxsec at gmail.com
To: mailscanner at lists.mailscanner.info


this problem is normally caused by config issues, like not having the -U switch set in the main MailScanner executable.


--
Martin Hepworth, CISSP
Oxford, UK


On 13 August 2013 16:28, Jonathan Horne <jonathanmhorne at outlook.com> wrote:



i didnt try it yet... but if i set the number of attempts to 0 what will happen? i would like to just delete these emails immeidately, i dont see a need to retry it after 5 minutes.

if 0 is not the right way to accomplish this, what is the correct way to dump emails that attempt to kill the process?

thanks,
jonathan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!



-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content and is believed to be clean.
-- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130814/ceb2b10b/attachment.html
Robert Lopez
2013-08-15 23:50:09 UTC
Permalink
Jonathan Horne <jonathanmhorne at outlook.com> wrote:
> i dont see offhand in the man page what exactly the -U does... can someone point me to where i can read about this switch?

man perlrun

--
Robert Lopez
Loading...