qmail-scanner not scanning 1

[ManagerJay]

Recently, in an effort to block certain types of attachments that seem to be endlessly being sent to my office, I installed qmail-scanner-1.23 with netqmail-1.05.

During the installation, I realized that I did not have suidperl installed, so as opposed to recompiling perl with the correct options, I used the qmail-scanner-queue.c file in the contrib directory. Not a big deal, followed the instructions at the top of the file.

During testing, qmail-scanner delivered the four test e-mails properly marked.

In order to implement scanning on all incoming mail, I changed my /etc/tcp.smtp file to read

:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/ \ qmail-scanner-queue.pl"

Following this change, I used qmailctl cdb to reload the database.

When an e-mail is sent from an outside source, the e-mail is delivered without any problems. However, even when an attachment is included with the e-mail (i.e. exe) the e-mail is not quarantined and the recipient receives the e-mail as it was sent. Nothing is noted in the qmail-scanner log files either.

I am using perl-5.8.2 and permissions on the file are 755. qmail-scanner-queue.pl has permissions of 0755 and qmail-scanner-queue has permissions of 4755. Both are owned by qscand:qscand.

I'm sure this is something obvious that I am missing, but I can not find it. Any help would be greatly appreciated.

Thanks in advance.


Jay

 

[thedaver]

My QMAILQUEUE value is
/var/qmail/bin/qmail-scanner-queue.pl

I also define it in my /var/qmail/supervise/qmail-smtpd/run file, but that's a matter of style.

You may want to alter your path to match my construct and try again.

http://www.surfinbox.com/hosting/

 

[ManagerJay]

OK. Checked the path for qmailqueue in tcp.smtp and corrected it and I added a definition for QMAILQUEUE to /var/qmail/supervise/qmail-smtpd/run.

Now, when I attempt to have mail delivered from an outside source it is not delivered. If I change /etc/tcp.smtp back to QMAILQUEUE="/var/qmail/bin/qmail-queue" deliveries work again.

Nothing was logged by qmail-scanner.

Could this be an suid problem since the version of PERL I am using did not include suidperl?

Thanks for your help. Any additional insights would be greatly appreciated.

Jay

 

[BIS]

Can you check the /var/log/qmail/smtp/current log file?

 

[ManagerJay]

Thank both of your for your assistance. This is a summary of what I found was wrong. Hopefully this will help someone.

I had specified the path to QMAILQUEUE incorrectly in /etc/tcp.smtp

Looking for error messages in the right place helps. They were being logged in /var/log/qmail/smtp/current, and I was looking in /var/spool/qmailscan/qmail-queue.log.

One of the files qmail-scanner needs had incorrect permissions. Once these were corrected, everything started working just like it should.

Thanks again for all your help.


Jay