mailscanner help

[silvernetuk]

Hi,

When mailscanner find a virus it save it on the server under:
quarantine/DATE/MSG-ID/virusfile.zip

Do I delete the MSG-ID folder or just the virus file ?

Also I got MailScanner from CPanel Layer 1 how do I stop/start and restart it as it not a service ?

Regards,
Garry

[chirpy]

Garry,

To answer the second part first, the package from Layer1 should have created ajob in your root crontab to run a check on whether MailScanner is running, and if not start it. It should look something like:

*/10 * * * * /usr/mailscanner/bin/check_mailscanner > /dev/null 2<&1

For the first part. If you'd done the install of MailScanner from source it would have created the following file that cleans your quarantine directory for you. You should create this, as root, in /etc/cron.daily/clean.quarantine

#!/usr/bin/perl

#
# IMPORTANT NOTE:
#
# Change the next line to 0 instead of 1 to enable this script.
# By default it will be disabled and will not do anything.
#

$disabled = 0;

$quarantine_dir = '/var/spool/MailScanner/quarantine';
$days_to_keep   = 30;

exit if $disabled;

# Standardise the format of the directory name
die 'Path for quarantine_dir must be absolute' unless $quarantine_dir =~ /^\//;
$quarantine_dir =~ s/\/$//; # Delete trailing slash

# Now get the content list for the directory.
opendir(QDIR, $quarantine_dir) or die "Couldn't read directory $quarantine_dir";

# Loop through this list looking for any *directory* which hasn't been
# modified in the last $days_to_keep days.
# Unfortunately this will do nothing if the filesystem is backed up using tar.
while($entry = readdir(QDIR)) {
        next if $entry =~ /^\./;
        $entry = $quarantine_dir . '/' . $entry;
        system("rm -rf $entry") if -d $entry &&
                                   -M $entry > $days_to_keep;
}
closedir(QDIR);

[silvernetuk]

Hi,

So if I ever wanted to stop it for awhile, I would have to remvoe the cron job and kill the task is that right ?

Regards,
Garry

[chirpy]

To stop it cleaning the quarantine area edit the script you created and change $disabled = 1; to $disabled = 0;

The crontab I mentioned is to make sure MailScanner is running. If you disable that (and killall MailScanner) then outgoing email wont' be sent and incoming email won't be delivered to your POP3 accounts.

[Creazioni1]

Don't work


i do
pico /etc/cron.daily/clean.quarantine
and i choose
$days_to_keep = 1;
$disabled = 1

but none file is deleted


i do something in cron?

THANKS

[chirpy]

You need to set:

$disabled = 0;

1 = true, 0 = false (fixed my previous post, sorry about that)

[Creazioni1]

to enable i write o?

i try

THANKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

[chirpy]

Yes, it should be 0 (zero)

[jameshsi]

Thanks for this thread.