Perl taint issue and instability

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Perl taint issue and instability

I'm on the same boat. I have several servers which have taint issues. Mostly faults at File.pm and scanning
attachments. I'm not a programmer, and unfortunately cannot help. It sucks. I'm not sure where the
breakage is. If its MS causing deprecated code, or is it actually perl?


--
Jeremy McSpadden

On Oct 1, 2011, at 12:02 PM, "Dave Jones" <davejones70 <at> gmail.com> wrote:

> Is anyone else frustrated with the taint issue causing MailScanner instability?
> 
> I have 8 MailScanner servers -- half are CentOS 5 with Sendmail and the other half are SL6 using Postfix.  My
new boxes are running the latest version of MailScanner with the "#!/usr/bin/perl
-I/usr/lib/MailScanner -U" setting.
> 
> The SL6 servers running perl-5.10.1-119.el6.x86_64 are not stable.  Icinga is constantly telling me to
restart MailScanner on one of them every few days.  I have a script that pushes out changes from a central
location and runs "service MailScanner reload."  Many times the reload fails causing me to have to
manually run a full restart.
> 
> I know the Baruwa mailing also has many posts with the same problems.
> 
> Is MailScanner fixed and the problem is cause by the underlying perl modules that are not updated to run
under perl 5.10?
> 
> I have been waiting for over 6 months to put my SL6 boxes into a full production load once they are stable but
it's about time to reload them with SL5 to get back to perl 5.8.8 and stability.
> 
> Dave
> -- 
> MailScanner mailing list
> mailscanner <at> lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner

> 
> Before posting, read http://wiki.mailscanner.info/posting

> 
> Support MailScanner development - buy the book off the website! 

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Perl taint issue and instability

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Perl taint issue and instability

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Monitoring ClamAV and MailScanner

Hello Group,

How do I monitor ClamAV and MailScanner?  I have SpamAssassin installed
too and I can see it is working via /var/log/maillog and incoming
e-mails marked as spam.  But how do I monitor ClamAV scanning e-mails
(incoming/outgoing) and mark/flag the infected e-mails?

I searched the net and results mentioned mailqueue and I looked and
nothing is in there but is there a "live look-in" to see the actual
scanning taking place like that of SpamAssassin in /var/log/maillog?

Thank you.

Mike

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Monitoring ClamAV and MailScanner

What do you mean monitor? You mean view the output of each scanned email with more verbose? 


--
Jeremy McSpadden

On Oct 1, 2011, at 4:02 PM, "Mike" <mike <at> leawood.com> wrote:

> Hello Group,
> 
> How do I monitor ClamAV and MailScanner?  I have SpamAssassin installed
> too and I can see it is working via /var/log/maillog and incoming
> e-mails marked as spam.  But how do I monitor ClamAV scanning e-mails
> (incoming/outgoing) and mark/flag the infected e-mails?
> 
> I searched the net and results mentioned mailqueue and I looked and
> nothing is in there but is there a "live look-in" to see the actual
> scanning taking place like that of SpamAssassin in /var/log/maillog?
> 
> Thank you.
> 
> 
> Mike
> 
> -- 
> MailScanner mailing list
> mailscanner <at> lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner

> 
> Before posting, read http://wiki.mailscanner.info/posting

> 
> Support MailScanner development - buy the book off the website! 
> 

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Monitoring ClamAV and MailScanner

On Sat, 1 Oct 2011, Jeremy McSpadden wrote:

> What do you mean monitor? You mean view the output of each scanned email with more verbose?

Yes, similar to that of SpamAssassin.  I can see the "spamd" processing
each e-mail in /var/log/maillog but I'm not seeing in for clamd/clamav.

Thank you.

Mike

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Monitoring ClamAV and MailScanner

On Sat, Oct 1, 2011 at 11:16 PM, Mike <mike <at> leawood.com> wrote:
> Yes, similar to that of SpamAssassin.  I can see the "spamd" processing
> each e-mail in /var/log/maillog but I'm not seeing in for clamd/clamav.

First of all, you shouldn't use spamd with MailScanner. Logging is set
in the configuration of MailScanner and ClamAV respectively, also
check syslog.conf.

/peter
--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Monitoring ClamAV and MailScanner

On Sun, 2 Oct 2011, Peter Bonivart wrote:

> On Sat, Oct 1, 2011 at 11:16 PM, Mike <mike <at> leawood.com> wrote:
>> Yes, similar to that of SpamAssassin.  I can see the "spamd" processing
>> each e-mail in /var/log/maillog but I'm not seeing in for clamd/clamav.
>
> First of all, you shouldn't use spamd with MailScanner. Logging is set
> in the configuration of MailScanner and ClamAV respectively, also
> check syslog.conf.

I should turn SpamAssassin off then?  MailScanner automatically uses
SpamAssassin even when it's not running? (i.e. similar to that of
sendmail?).

// from /etc/clamd.conf

LogFile /var/log/clamav/clamd.log
#LogVerbose yes

I'm not seeing any scan results in clamd.log, should I turn on
LogVerbose for more information to be updated in clamd.log?

# Execute a command when virus is found. In the command string %v will
# be replaced with the virus name.
# Default: no
#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"

Should this option also be on?

Thank you.

Mike

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

RE: Monitoring ClamAV and MailScanner

HI Mike, everyone..

  Yes, you should disable spamassassin in your init.d startup, unless you're using for something else.
MS calls the SA routines directly and does not need the SA daemon.

  To verify your clamav is working and logging properly... send yourself one of the Eicar sigs until
you get the desired effect.

--Dave

-----Original Message-----
From: mailscanner-bounces <at> lists.mailscanner.info
[mailto:mailscanner-bounces <at> lists.mailscanner.info] On Behalf Of Mike
Sent: Saturday, October 01, 2011 5:42 PM
To: MailScanner discussion
Subject: Re: Monitoring ClamAV and MailScanner

On Sun, 2 Oct 2011, Peter Bonivart wrote:

> On Sat, Oct 1, 2011 at 11:16 PM, Mike <mike <at> leawood.com> wrote:
>> Yes, similar to that of SpamAssassin.  I can see the "spamd"
>> processing each e-mail in /var/log/maillog but I'm not seeing in for clamd/clamav.
>
> First of all, you shouldn't use spamd with MailScanner. Logging is set
> in the configuration of MailScanner and ClamAV respectively, also
> check syslog.conf.

I should turn SpamAssassin off then?  MailScanner automatically uses SpamAssassin even when it's not
running? (i.e. similar to that of sendmail?).

// from /etc/clamd.conf

LogFile /var/log/clamav/clamd.log
#LogVerbose yes

I'm not seeing any scan results in clamd.log, should I turn on LogVerbose for more information to be updated
in clamd.log?

# Execute a command when virus is found. In the command string %v will # be replaced with the virus name.
# Default: no
#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"

Should this option also be on?

Thank you.

Mike

--
This message has been scanned for viruses and dangerous content by MailScanner at KD0YU.COM, and is
believed to be clean.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner at KD0YU.COM, and is
believed to be clean.

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!