Issues with Baruwa - The Perfect Spamsnake Ubuntu 10.10

[Rocky]

Make sure your mailscanner.conf file has:

MTA = postfix

Restart your system once you've set that and give me another sample of your mail.log. It seems as though you might have missed a few steps or so, but you're very close.

[neofire]

Hey Rocky

I check the mailscanner.conf and MTA = postfix is there

sorry if these are trival or stupid issues i am not used to using postfix etc, but i am trying to learn, i am a Lotus Domino administrator but would like to use this as a Spam/Virus Filter for external mail

i have rebooted the server aswell to be safe and still no go, and now i am getting bounce backs due to rich text errors, Bounce Back E-Mail Below

Our virus detector failed to completely analyse a message you sent:-
To: setswei@hotmail.com
Subject: Fw: Other Bad Content Detected
Date: Tue Feb 15 10:50:21 2011
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner


--
MailScanner
Email Virus Scanner
cybercrysis.net.au
www.cybercrysis.net.au

For all your IT requirements visit: http://www.transtec.co.uk

[topdog]

That is a mailscanner issue, please run mailscanner in debug mode, it should be able to point you in the right direction.

[Rocky]

You'll have to completely purge clamav and it's definitions, then reinstall it.

Do something like:
apt-get remove --purge clamav* libclamav6
Delete everything from /var/lib/clamav if anything is there.

Do:
apt-get update
apt-get install clamav-daemon libclamav6

Make sure to configure clamav according to section 7 of the guide.

Let me know how you make out.

[neofire]

Hey Rocky

i have managed to get a green status light on the Baruwa Installation

but now i am still having mail routing issues

i have reinstalled Clamav as per the guide but still having issues, i dont understand where i have gone wrong with the tutorial

[topdog]

What routing issues are you having ? Please provide some detail (error messages, logs etc)

[neofire]

hey topdog sorry i was vague with the last post

its the same issue i was having before, e-mails are being bounced by the spamsnake box

Example

Our virus detector failed to completely analyse a message you sent:-
To:
Subject:
Date: Wed Feb 16 19:19:09 2011
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner


--
MailScanner
Email Virus Scanner
cybercrysis.net.au
www.cybercrysis.net.au

For all your IT requirements visit: http://www.transtec.co.uk



I have reinstalled clamav and confirmed the configuration but when i send a e-mail and i monitor the mail.log this is what i get

Feb 16 19:36:14 spamsnake postfix/cleanup[10619]: CC1D010097F: message-id=<OF558A88E2.9B5F3B6B-ON4A257839.0034C7E5-4A257839.0034C24D@cybercrysis.net.au>
Feb 16 19:36:14 spamsnake postfix/smtpd[10616]: disconnect from cc-mailrouter.cybercrysis.net.au[192.168.0.249]
Feb 16 19:36:17 spamsnake MailScanner[10562]: New Batch: Scanning 1 messages, 23244 bytes
Feb 16 19:36:17 spamsnake MailScanner[10562]: Virus and Content Scanning: Starting
Feb 16 19:36:17 spamsnake MailScanner[10623]: MailScanner E-Mail Virus Scanner version 4.81.4 starting...
Feb 16 19:36:17 spamsnake MailScanner[10623]: Reading configuration file /opt/MailScanner/etc/MailScanner.conf
Feb 16 19:36:17 spamsnake MailScanner[10623]: Reading configuration file /opt/MailScanner/etc/conf.d/README
Feb 16 19:36:17 spamsnake MailScanner[10623]: Read 867 hostnames from the phishing whitelist
Feb 16 19:36:17 spamsnake MailScanner[10623]: Read 7155 hostnames from the phishing blacklists
Feb 16 19:36:17 spamsnake MailScanner[10623]: Config: calling custom init function BaruwaLowScore
Feb 16 19:36:17 spamsnake MailScanner[10623]: Config: calling custom init function BaruwaBlacklist
Feb 16 19:36:17 spamsnake MailScanner[10623]: Config: calling custom init function BaruwaSQL
Feb 16 19:36:17 spamsnake MailScanner[10623]: Config: calling custom init function BaruwaHighScore
Feb 16 19:36:17 spamsnake MailScanner[10623]: Using SpamAssassin results cache
Feb 16 19:36:17 spamsnake MailScanner[10623]: Connected to SpamAssassin cache database
Feb 16 19:36:17 spamsnake MailScanner[10623]: Enabling SpamAssassin auto-whitelist functionality...
Feb 16 19:36:25 spamsnake MailScanner[10623]: Connected to Processing Attempts Database
Feb 16 19:36:25 spamsnake MailScanner[10623]: Found 1 messages in the Processing Attempts Database
Feb 16 19:36:25 spamsnake MailScanner[10623]: Using locktype = flock


Spamsnake holds the message and it tries to scan it but bounces it back with the above message

[topdog]

Did you try what i suggested in my earlier post, running mailscanner in debug mode ?

[neofire]

yes i did, but i couldn't see any differences in the log files, does debug mode output files else where

[Rocky]

Run freshclam and restart your system, check your logs and post a sample.

What's the specs of your system?