[Mimedefang] spamassassin error messages

Lisa Casey lisa at jellico.com
Thu May 12 11:18:50 EDT 2005


Hi Jason,

>
> Are you sure no scanning is happening?  Check email headers to see if the
> X-Scanned-By header is there.  It just may not be logging vice no 
> scanning.

Yes, I'm absolutely positive. Here are the headers from your e-mail to me. 
The mimedefang/canit stuff is coming from you (or the mimedefang list). The 
only scanning on here done on my end is the renattach which I'm using to 
remove virus attachments.

Return-Path: <mimedefang-bounces at lists.roaringpenguin.com>
Received: from www.roaringpenguin.com (www.roaringpenguin.com 
[206.191.13.82])
 by radius.jellico.com (8.13.1/8.13.1) with ESMTP id j4CEQQFI053323
 for <lisa at jellico.com>; Thu, 12 May 2005 10:26:27 -0400 (EDT)
Received: from www.roaringpenguin.com (localhost.localdomain [127.0.0.1])
 by www.roaringpenguin.com (8.13.4/8.13.1) with ESMTP id j4CE6SV7025446;
 Thu, 12 May 2005 10:06:44 -0400
Received: from miscanthus.jasongurtz.com (65.172.152.16.dsl.99main.com
 [65.172.152.16])
 by www.roaringpenguin.com (8.13.4/8.13.1) with ESMTP id j4CE6KVl025438
 for <mimedefang at lists.roaringpenguin.com>;
 Thu, 12 May 2005 10:06:25 -0400
Received: from [204.60.70.253] (204.60.70.253.snet.net [204.60.70.253] (may 
be
 forged)) (authenticated bits=0)
 by miscanthus.jasongurtz.com (8.12.9/8.12.9) with ESMTP id
 j4CE6FGK005252
 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO)
 for <mimedefang at lists.roaringpenguin.com>;
 Thu, 12 May 2005 10:06:17 -0400
Message-ID: <428362D6.2070601 at jasongurtz.com>
Date: Thu, 12 May 2005 10:06:14 -0400
From: Jason Gurtz <jason at jasongurtz.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
To: mimedefang at lists.roaringpenguin.com
Subject: Re: [Mimedefang] spamassassin error messages
References: <002d01c5565f$68f4e950$d580a23f at lisac> 
<42825E22.6060002 at roaringpenguin.com>
 <004301c55669$d284cac0$d580a23f at lisac>
In-Reply-To: <004301c55669$d284cac0$d580a23f at lisac>
X-Spam-Status: No, hits=-2.0 required=5.0
 tests=EMAIL_ATTRIBUTION,IN_REP_TO,REFERENCES,REPLY_WITH_QUOTES,
 USER_AGENT version=2.54
X-Spam-Checker-Version: SpamAssassin 2.54 (1.174.2.17-2003-05-11-exp)
X-Scanned-By: CanIt (www . roaringpenguin . com) on 206.191.13.82
X-Scanned-By: MIMEDefang 2.35
X-Spam-Score: undef - SENDER Whitelisted (Sender jason at jasongurtz.com is
 whitelisted)
X-Canit-Stats-ID: 124387 - af8d63f26302
X-CanItPRO-Stream: nolinks
X-BeenThere: mimedefang at lists.roaringpenguin.com
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: mimedefang at lists.roaringpenguin.com
List-Id: For users of the MIMEDefang mail scanner
 <mimedefang.lists.roaringpenguin.com>
List-Unsubscribe: 
<http://lists.roaringpenguin.com/mailman/listinfo/mimedefang>,
 <mailto:mimedefang-request at lists.roaringpenguin.com?subject=unsubscribe>
List-Archive: <http://lists.roaringpenguin.com/pipermail/mimedefang>
List-Post: <mailto:mimedefang at lists.roaringpenguin.com>
List-Help: <mailto:mimedefang-request at lists.roaringpenguin.com?subject=help>
List-Subscribe: 
<http://lists.roaringpenguin.com/mailman/listinfo/mimedefang>,
 <mailto:mimedefang-request at lists.roaringpenguin.com?subject=subscribe>
Sender: mimedefang-bounces at lists.roaringpenguin.com
Errors-To: mimedefang-bounces at lists.roaringpenguin.com
X-Filtered-With: renattach 1.2.1
X-RenAttach-Info: mode=badlist action=rename count=0
X-UIDL: 0YX!!])J"!3)e!!d?8!!
X-Antivirus: AVG for E-mail 7.0.308 [266.11.9]
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=ISO-8859-1

Mimedefang is running:


47287  ??  S      0:00.02 /usr/local/bin/mimedefang-multiplexor -p 
/var/spool/MIMEDefang/mimedefang-multiplexor.pid -m 2 -x 10 -U defang -b 
600 -l -s /var/spool/MIMEDefang/mimedef
47289  ??  I      0:05.89 /usr/bin/perl /usr/local/bin/mimedefang.pl -server
47300  ??  S      0:00.22 /usr/local/bin/mimedefang -P 
/var/spool/MIMEDefang/mimedefang.pid -m 
/var/spool/MIMEDefang/mimedefang-multiplexor.sock -U defang -p 
/var/spool/MIMEDefang
47301  ??  I      0:05.99 /usr/bin/perl /usr/local/bin/mimedefang.pl -server
47310  ??  Ss     0:14.23 sendmail: accepting connections (sendmail)


but when I use md-mx-ctrl, I see this:

# md-mx-ctrl status
Max slaves: 10
Slave 0: idle
Slave 1: idle
Slave 2: stopped
Slave 3: stopped
Slave 4: stopped
Slave 5: stopped
Slave 6: stopped
Slave 7: stopped
Slave 8: stopped
Slave 9: stopped
# md-mx-ctrl load
 Load:             Msgs:       Msgs/Sec:    Avg ms/scan:   Avg Busy Slaves:
10 Sec               0            0.00             0.0            1.00
 1 Min               0            0.00             0.0            1.00
 5 Min               0            0.00             0.0            1.00
10 Min               0            0.00             0.0            1.00
# md-mx-ctrl msgs
0


Mimedefang is running but just sitting there doing nothing. I'm quite 
perplexed at this point. It's happy with it's config file, it just doesn't 
want to DO anything:

# mimedefang.pl -test
Filter /usr/local/etc/mimedefang/mimedefang-filter seems syntactically 
correct.

Lets look at the output of mimedefang.pl -features. There are some perl 
modules listed as missing. Are any of these necessary for Mimedefang to 
function? Could this be the problem?

radius# mimedefang.pl -features
MIMEDefang version 2.51

Archive::Zip                  : yes
File::Scan                    : yes
HTML::Parser                  : yes
HTML::TokeParser              : yes
Path:CONFDIR                  : yes (/usr/local/etc/mimedefang)
Path:QUARANTINEDIR            : yes (/var/spool/MD-Quarantine)
Path:SENDMAIL                 : yes (/usr/sbin/sendmail)
Path:SPOOLDIR                 : yes (/var/spool/MIMEDefang)
SpamAssassin                  : yes
Virus:FileScan                : yes
HTMLCleaner                   : no
Net::DNS                      : no
Unix::Syslog                  : no
Virus:AVP                     : no
Virus:AVP5                    : no
Virus:BDC                     : no
Virus:CLAMAV                  : no
Virus:CLAMD                   : no
Virus:CSAV                    : no
Virus:FPROT                   : no
Virus:FPROTD                  : no
Virus:FSAV                    : no
Virus:HBEDV                   : no
Virus:NAI                     : no
Virus:NVCC                    : no
Virus:OpenAV                  : no
Virus:SOPHIE                  : no
Virus:SOPHOS                  : no
Virus:SymantecCSS             : no
Virus:TREND                   : no
Virus:TROPHIE                 : no
Virus:VEXIRA                  : no

Anomy::HTMLCleaner            : missing
Archive::Zip                  : Version 1.14
Digest::SHA1                  : Version 2.10
File::Scan                    : Version 1.36
HTML::Parser                  : Version 3.45
HTML::TokeParser              : Version 2.30
IO::Socket                    : Version 1.28
IO::Stringy                   : Version 2.109
MIME::Base64                  : Version 3.05
MIME::Tools                   : Version 5.417
MIME::Words                   : Version 5.417
Mail::Mailer                  : Version 1.67
Mail::SpamAssassin            : Version 3.000003
Net::DNS                      : missing
Unix::Syslog                  : missing


Thanks,

Lisa






-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.11.9 - Release Date: 5/12/2005




More information about the MIMEDefang mailing list