I have a new install and it's not working.

I have a working instance of qmail running on port 25 in my DMZ. 
That instance is configured to accept mail for the local machine
and relay mail to another instance of qmail running on another
machine:

locals: (Default.) Messages for me are delivered locally.

rcpthosts:
SMTP clients may send messages to recipients at theotherbell.com.
SMTP clients may send messages to recipients at dmz.theotherbell.com.

smtproutes:
SMTP route: .theotherbell.com:bellux.theotherbell.com:825
SMTP route: theotherbell.com:bellux.theotherbell.com:825

There are no mailboxes in the DMZ.  I have an alias set up for
root, postmaster and mailer-daemon; they all resolve to a valid
user with a valid mailbox on the internal qmail.  I've tested
sending and receiving mail from inside and outside my network
to and from root, postmaster and myself and it all works.

I installed clamav-0.80 and qmail-scanner-1.24 as per the how-to
at http://www.tldp.org/HOWTO/Qmail-ClamAV-HOWTO/.  I did find
some errors in the document, but I'm pretty sure I caught them
all.

Everything in section 3 regarding the installation of clamav and
getting it running with daemontools went without a hitch.

I successfully built and installed qmail-scanner and all of its
dependencies.  When I ran the configure script, I used the
following options:

--local-domains "dmz.theotherbell.com,theotherbell.com"
--domain "theotherbell.com"
--add-dscr-hdrs all

The first problem occurs when I run the test_installation.sh
script.  The script appears to run OK.  However, I only receive
emails 1 and 4 in my mailbox.  /var/log/mail/warnings shows the
following:

Nov 28 15:27:52 dmz qmail-scanner[16853]:
Perlscan:EICAR_Test_Virus:RC:1(127.0.0.1): 0.07728 979 <>
[EMAIL PROTECTED]
Qmail-Scanner_viral_test_(2/4):_checking_perlscanner...
<[EMAIL PROTECTED]>
1101673671.16855-0.dmz.theotherbell.com:300 Eicar.com:69
orig-dmz.theotherbell.com110167367148716853:979
Nov 28 15:27:52 dmz qmail-scanner[16864]:
CLAMDSCAN:Eicar-Test-Signature:RC:1(127.0.0.1): 0.055294 1254 <>
[EMAIL PROTECTED]
Qmail-Scanner_viral_test_(3/4):_checking_non-perlscanner_AV...
<[EMAIL PROTECTED]> sneaky.txt

I do not yet have a commercial scanner installed.  However, I
expected to receive 4 emails.

The next problem occurs when I send myself a test email from
an external account.  /var/log/qmail/smtpd/current shows the
following:

2004-11-28 15:53:02.380643500 tcpserver: status: 1/20
2004-11-28 15:53:02.380651500 tcpserver: pid 16939 from
65.54.187.85
2004-11-28 15:53:02.917174500 tcpserver: ok 16939
dmz.theotherbell.com:172.16.1.5:25
bay18-f35.bay18.hotmail.com:65.54.187.85::45698
2004-11-28 15:53:06.797652500 tcpserver: end 16939 status 256
2004-11-28 15:53:06.797660500 tcpserver: status: 0/20

At this point, it appears that smtpd has failed... the email gets
sent to my secondary MX and shows up sometime after I disable
qmail-scanner.

My tcp.smtp looks like this:

172.16.:allow,RELAYCLIENT=""
127.:allow,RELAYCLIENT=""
166.82.1.68:allow,RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
217.160.230.41:allow,RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
=.opmnetwork.net:deny
=.opmnet.net:deny
=.offersyouwant.net:deny
=.mynetoffers.com:deny
=.mindupmerchants.com:deny
=.discountdeals.net:deny
=.opinionsurveys.com:deny
=.edirectbroadcast.com:deny
=.yourinterestsonly.com:deny
=.naviantnetwork.net:deny
=.warp9ems.com:deny
=.travelfleamarket.com:deny
=64.119.215.38:deny
=68.32.199.231:deny
=216.52.237.172:deny
=216.52.237.248:deny
:allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

There's nothing in any of the other logs (/var/log/qmail/current,
/var/log/mail/*, /var/log/clamd/current or
/var/spool/qmailscan/qmail-queue.log).

Can someone point me in the right direction?


Brenda Bell
Henniker (the only one on earth)
New Hampshire (the state with 5 seasons: black fly, tourist, foliage, ski and 
mud)




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to