Linux Help
guides forums blogs
Home Desktops Distributions ISO Images Logos Newbies Reviews Software Support & Resources Linuxhelp Wiki

Welcome Guest ( Log In | Register )



Advanced DNS Management
New ZoneEdit. New Managment.

FREE DNS Is Back

Sign Up Now
 
Reply to this topicStart new topic
> Postfix Mail Server, On Wbel Ala Hughesjr
jsbaill
post Jun 26 2004, 02:18 PM
Post #1


Whats this Lie-nix Thing?
*

Group: Members
Posts: 5
Joined: 26-June 04
Member No.: 3,235



Hello,

I used HughesJRs how-to and everything installed without a hitch. (thanks for the concise instructions)

I tested by sending your_details.pif which is infected with Sobig and it went right through.

I went through the log files and nothing looks out of sorts. Not sure where to start with trouble shooting except google.

Thanks for any hints or links to further info on managing this group of programs.

John
Go to the top of the page
 
+Quote Post
hughesjr
post Jun 26 2004, 03:02 PM
Post #2


Its GNU/Linuxhelp.net
*******

Group: Admin
Posts: 3,433
Joined: 25-July 03
From: Corpus Chrsiti, TX, USA
Member No.: 1,151



ClamAV definately finds the sobig virus (I have plenty in my log)... but it searches by signature, not by attachment name. Are you sure the attachment is infected (or just named the same thing)?

In the maillog (/var/log/maillog), does it show that item being scanned?

Is the ClamAV virus database updated? ... to check, type the command:

freshclam
---------------------
BTW, you can set some files (like .pif files) so that they are quarantined wether they are infected or not by editing the file:

/etc/filename.rules.conf

In fact, by default, that type file (.pif)should not be delivered.
----------------------
Are you sure you have virus scanning turned on ... check for these lines in /etc/MailScanner.conf:

Virus Scanning = yes

Virus Scanners = clamavmodule

Deliver Disinfected Files = no

Quarantine Infections = yes



----------------------
Are you sure MailScanner (and not postfix or sendmail) is running?

/etc/init.d/postfix stop

/etc/init.d/sendmail stop

/etc/init.d/MailScanner restart
---------------------


--------------------
Johnny Hughes
hughesjr@linuxhelp.net
Enterprise Alternatives: CentOS, WhiteBoxEL
Favorite Workstation Distros (in order): CentOS, Gentoo, Debian Sarge, Ubuntu, Mandrake, FedoraCore, Slackware, SUSE
Favorite Server Distros (in order): CentOS, WhiteBoxEL, Debian Sarge, Slackware, Mandrake, FedoraCore, Gentoo, SUSE
Go to the top of the page
 
+Quote Post
jsbaill
post Jun 26 2004, 06:16 PM
Post #3


Whats this Lie-nix Thing?
*

Group: Members
Posts: 5
Joined: 26-June 04
Member No.: 3,235



OK, my install must not have been on the up and up.

I found this in the log file:

User's home directory /var/spool/postfix is not writable
Jun 26 18:44:05 littlewhite MailScanner[24467]: You need to set the "SpamAssassin User State Dir" to a directory that the "Run As User" can write to

-----------------------------------------------------------------------------------------------------------------------

I checked:


[root@littlewhite MailScanner]# ls -l
total 8
drwx------ 2 postfix postfix 4096 Jun 26 02:29 incoming
drwx------ 2 postfix postfix 4096 Jun 26 02:29 quarantine
-----------------------------------------------------------------------------------------------------------------------

also checked: /etc/MailScanner/MailScanner.conf

Run As User = postfix
SpamAssassin User State Dir =

-----------------------------------------------------------------------------------------------------------------------

I'll go over the config files and compare them with yours

Thanks,
John
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 17th October 2017 - 09:14 PM