?
Solved

mailscanner/sendmail integration problem

Posted on 2004-08-24
3
Medium Priority
?
657 Views
Last Modified: 2013-12-17
Hi.

I've got a slackware server with sendmail 8.12.11, and spamassassin installed and working happily for multiple domains.

I've recently installed clamav and mailscanner and know nothing about it except what the documentation tells me and other websites tutorial's.

I'm running mailscanner, (bin/check_mailscanner ) with MailScanner.conf setup to use clamav but I cant see anything in /var/log/maillog about MailScanner working apart from the initial 5-child setups. No logs of mail scanning, virus scanning etc. I've sent an eicar file to myself on the same server but it appears to come through unimpeded.

could anyone give me a general kinda overview on the theory/schematics of mailscanner's operation and how the heck to get sendmail to get mailscanner to scan a mail it gets please? :)

thanks

Daryn
0
Comment
Question by:daryn
  • 2
3 Comments
 
LVL 40

Accepted Solution

by:
jlevie earned 1600 total points
ID: 11880411
That sounds like you haven't modified the sendmail configuration to place incomming email in an input-only queue for MailScanner to pick up. In that case MailScanner will start, but it'll never have any work to do and email will bypass it.

Usually, one creates /var/spool/mqueue.in and changes the normal Sendmail MTA process to start like:

sendmail -L mta -bd --ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in

and, of course, specifies /var/spool/mqueue.in in MailScanner.conf.
0
 

Author Comment

by:daryn
ID: 11881712
so if this is a portion of my sendmail startup script in rc.sendmail :

# Start sendmail:
sendmail_start() {
  if [ -x /usr/sbin/sendmail ]; then
    echo "Starting sendmail MTA daemon:  /usr/sbin/sendmail -L sm-mta -bd -q25m"
    /usr/sbin/sendmail -d99 -L sm-mta -bd -q25m
    echo "Starting sendmail MSP queue runner:  /usr/sbin/sendmail -L sm-msp-queue -Ac -q25m"
    /usr/sbin/sendmail -d99 -L sm-msp-queue -Ac -q25m
  fi
}

then I would replace the "/usr/sbin/sendmail -d99 -L sm-mta -bd -q25m" with
"/usr/sbin/sendmail -d99 -L sm-mta -bd -q25m --ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in"

right?

thanks v. much

Daryn
0
 
LVL 40

Expert Comment

by:jlevie
ID: 11888297
Right, that would start a sendmail process that listens for inbound connections and places the messages in the input-only queue. MailScanner will pick up the messgaes from ther, scan them and place the result in /var/spool/mqueue. You also need a queue runner to pick up messgaes from /var/spool/mqueue and deliver them, like:

/usr/sbin/sendmail -L sm-mtq -bd -q25m
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Phishing emails are a popular malware delivery vehicle for attack.  While there are many ways for an attacker to increase the chances of success for their phishing emails, one of the most effective methods involves spoofing the message to appear to …
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses
Course of the Month8 days, 7 hours left to enroll

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question