root & mailer-daemon mail rejected - may apply to all mailscanner users

[nickp666]

Basically what was happening was all mail from mailer-daemon@my.box.net and root@my.box.net was being rejected with:

sender verify defer for <root@my.box.net>: require_files: error for /root/.spamassassinenable: Permission denied

Turns out there were the exim checks for SA in the exim conf, sa_virtualuser directives, as we run mailscanner these are not used, yet seems to check them anyway, given the fact the config will be re-written on upgrade I figured it best to edit the config via WHM, however the lines in the config file didnt exist there (not even in the non-editable bit) so I needed to manually remove them to get things working again, however I am now concerned that they will re-appear when a newer exim RPM is available.

Any advice greatly welcomed!

[hostww]

I dont' use mailscanner... but I do use SA v3.2

You may want to make sure you have the below ACL's in your config...

#!!# ACL that is used after the RCPT command
check_recipient:
# Exim 3 had no checking on -bs messages, so for compatibility
# we accept if the source is local SMTP (i.e. not over TCP/IP).
# We do this by testing for an empty sending host field.
accept hosts = :

# Accept bounces to lists even if callbacks or other checks would fail
warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes
condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
{yes}{no}}

accept condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
{yes}{no}}


# Accept bounces to lists even if callbacks or other checks would fail
warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes
condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \
{yes}{no}}

accept condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \
{yes}{no}}

#if it gets here it isn't mailman

[aeroweb]

We actually ran into it recently.

[mooony]

I chmod the /root directory to 755 and now the problem is fixed and mail gets send.

it seems spamd needs to be able to read the .spamassassinenable but it can't as the directory is 750.

I hope this helps.

Ronald

[mfpoulsen]

Hi Ronald,

I am also using SA 3.20 - and your solution worked great for me. Thanks for posting it.

[jdstallings]

Thanks!! Worked here also.