Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

HOW TO: Exim, Exiscan, & ClamAV

Discussion in 'General Discussion' started by wish, Apr 15, 2004.

Page 1 of 2
  1. wish

    wish Member

    Joined:
    Aug 14, 2003
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    151
    I was keen on getting exiscan to work with CPanel, but I couldn't find much on it or many that had done it, so after working through it, I put this together as a cookbook for setting up exiscan on systems identical to ours.

    I tried to include enough information so that others can puzzle it out for their own systems. Exiscan works like a charm for us, and I'm very happy with it. Your mileage may vary, of course.

    The text is a bit too long for a post, so I've attached it as a file.

    This is a work in progress...comments are encouraged.
     

    Attached Files:

    #1 wish, Apr 15, 2004
  2. dario2

    dario2 Member

    Joined:
    Sep 21, 2002
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    151
    Really great article, Wish! Thanks!

    I've been using MailScanner (with McAffee's VirusScan), but it's a HUGE processor and memory hog, so I'm seriously considering moving to Exiscan. I've managed to create a patched Exim for Cpanel RPM. But, after I installed it, without even modifying the exim.conf file, Exim started rejecting e-mails, like this (domais and IP altered for privacy):

    2004-05-04 02:25:25 H=(remote.mailserver.com) [64.11.11.11] F=<some@sender.com> temporarily rejected RCPT <local@email.com>: cannot test verify in RCPT ACL

    The e-mail queue grew wildly, so I had to return to my previous config. Question is: did you have the same problem? Do you know what that error is?

    Thx!
    -Dario
     
    #2 dario2, May 4, 2004
  3. wish

    wish Member

    Joined:
    Aug 14, 2003
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    151
    Thanks.

    No, I didn't see this problem. If exim is having trouble with verify in the RCPT ACL, first I'd look at what user your new RPM build is running under (not likely to be your problem, but...), then verify that the exim config file was not overwritten or that even a different one is being used by your new build.
     
    #3 wish, May 4, 2004
  4. dario2

    dario2 Member

    Joined:
    Sep 21, 2002
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    151
    Thanks for the help! Turns out that I applied patch

    exiscan-acl-4.30-13

    which had a bug! I reapplied patch version -14, which, in my defense, was not mentioned in the Exiscan changelog, and it worked.

    -Dario
     
    #4 dario2, May 5, 2004
  5. tAzMaNiAc

    tAzMaNiAc Well-Known Member

    Joined:
    Feb 16, 2003
    Messages:
    559
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Sachse, TX
    Does exiscan actually work with lower levels? I'd be interested in trying ths out if so. I use MailScanner and have noticed processor hogging with mailing lists..

    Brenden
     
    #5 tAzMaNiAc, May 5, 2004
  6. tawfiq

    tawfiq Active Member

    Joined:
    Mar 13, 2004
    Messages:
    37
    Likes Received:
    0
    Trophy Points:
    156
    i am interested in why did u chosse exisan over MailScanner or if u considered MailScanner at all?
     
    #6 tawfiq, May 6, 2004
  7. wish

    wish Member

    Joined:
    Aug 14, 2003
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    151
    Brenden: It's not so much that exiscan works at a lower level but that it works at SMTP connect, instead of after mail has been accepted. Scanning during the SMTP dialog seems to be less resource intensive on several levels.

    tawfiq: MailScanner is excellent, best-in-class even. Our current server was seeing what Brenden was seeing: high cpu loads. We wanted to see if exiscan could help us. So far it has, though I don't have anything but anectdotal evidence, no hard tests, since our server isn't up to full load yet.

    I'd be very interested to hear what others experience if they decide to try exiscan.
     
    #7 wish, May 6, 2004
  8. maras

    maras Registered

    Joined:
    Oct 17, 2003
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    151
    #8 maras, May 8, 2004
  9. chrisbond

    chrisbond Well-Known Member

    Joined:
    Apr 12, 2003
    Messages:
    59
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Hereford, United Kingdom
    BTW Nicks just released exim 4.34 that includes the exiacl patches. So you can skip a lot of the steps. I might update it later today if i get chance.
     
    #9 chrisbond, May 11, 2004
  10. rs-freddo

    rs-freddo Well-Known Member

    Joined:
    May 13, 2003
    Messages:
    832
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    I would be interested in how to use exiscan with the new 4.34
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 rs-freddo, May 11, 2004
  11. Valetia

    Valetia Well-Known Member

    Joined:
    Jun 20, 2002
    Messages:
    213
    Likes Received:
    1
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    Same here, any updates?
     
    #11 Valetia, May 17, 2004
  12. anand

    anand Well-Known Member

    Joined:
    Nov 11, 2002
    Messages:
    1,435
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    India
    cPanel Access Level:
    DataCenter Provider
    I got it working perfectly fine with the new exim. I have the auto installer also ready on this. Just finishing my notes, once done i will post everything here.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #12 anand, May 18, 2004
  13. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    191
    anand, could you also post what the advantages/disadvantages are to this over mailscanner? Does exiscan come with quarantine functions and the like? Does it add {virus?} or some other text to e-mails? Can it be customized?

    Sorry. I'm too lazy to test it myself.:)
     
    #13 casey, May 18, 2004
  14. anand

    anand Well-Known Member

    Joined:
    Nov 11, 2002
    Messages:
    1,435
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    India
    cPanel Access Level:
    DataCenter Provider
    hey casey :)

    The only thing i can say is the advantages are very serious, i got this running on 10 servers till now and on all servers i saw improvement on cpu loads. Mailscanner was choking the server with mail traffic increasing, atleast with this the load is reduced.

    As for quarantine, understand this, the patch allows you to reject mail at the MTA level, so basically the mail doesn't enter your queue. This helps in reducing the load on the server considerably.

    Let me know if i confused you. ;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #14 anand, May 18, 2004
  15. rs-freddo

    rs-freddo Well-Known Member

    Joined:
    May 13, 2003
    Messages:
    832
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    Cool!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #15 rs-freddo, May 18, 2004
  16. chrisbond

    chrisbond Well-Known Member

    Joined:
    Apr 12, 2003
    Messages:
    59
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Hereford, United Kingdom
    Loads dropped from 2.00+ (quite often it would jump to 10+) to 0.40!!
     
    #16 chrisbond, May 18, 2004
  17. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    191
    Nope, not at all. I'm almost sold on it. :)

    What I meant by the quarantine, though, is when a virus is found. What happens to emails with viruses? Does the sender get the email returned to him or is it just rejected? My customers will want one of the following:

    1) If viruses are stripped and delivered, they will want to be able to retrieve the original message if it was a wrongful detection.

    2) If viruses are simply rejected, the customers will want the email returned to the sender, so that again, if a message is wrongfully detected the sender will know to send again by some other means.
     
    #17 casey, May 18, 2004
  18. JohnL

    JohnL Member

    Joined:
    Apr 10, 2003
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    151
    no exim .src available

    Hello there!

    Problem here with rebuilding Exim ... as there is no .src available for any of the newer Exim relases. I have two RH 9 servers, but the same seems true for RHEL. cPanel v. 9.2.x comes with exim-4.34, but I just don't see any source code for that:

    http://diff.cpanel.net/exim-cpanel7.2.0/s9/

    Any suggestions?? First downgrading cPanel, then installing, and later upgradinga again?? By the way, would any cPanel upgrade overwrite the anti-virus package installed in this thread?

    John
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #18 JohnL, May 19, 2004
  19. anand

    anand Well-Known Member

    Joined:
    Nov 11, 2002
    Messages:
    1,435
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    India
    cPanel Access Level:
    DataCenter Provider

    :D
    The mail is rejected moment the virus info is found in them with info as "Mailware or Virus found in mail (Virus Name)". This looks like those mail server errors which you usually see.

    The mail is just completely rejected. When exim accepts the data section, clam scans for virus or malware stuff, if found, the mail session is closed with an MTA error retuned to the sender stating that there is malware or virus.

    I have been closely watching the 10 servers i have this installed now, the load has been very low on them. To compare it, with mailscanner i hardly remember a time when i saw the load less than 4-5, even shot up to 10 at times with heavy mail traffic. Now the load sits cool at < 1, i think thats a considerable gain :)

    Just got stuck with something more, i have everything ready and with the auto installer it should be a piece of cake for anyone to install. I will try to post info asap.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #19 anand, May 19, 2004
  20. anand

    anand Well-Known Member

    Joined:
    Nov 11, 2002
    Messages:
    1,435
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    India
    cPanel Access Level:
    DataCenter Provider
    Re: no exim .src available

    Just upgrade to current releases, run the following on shell

    /scripts/updated
    /scripts/updatenow
    /scripts/exim4

    This should give you the new exim.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #20 anand, May 19, 2004
(You must log in or sign up to post here.)
Page 1 of 2
Loading...
Similar Threads - Exim Exiscan ClamAV
  1. netronicus

    New Thread exim configuration files wrong group name

    netronicus, Aug 14, 2018 at 12:30 PM, in forum: E-mail Discussion
    Replies:
    0
    Views:
    31
    netronicus
    Aug 14, 2018 at 12:30 PM
  2. ascalotoru

    Why is my Exim SSL certificate changing every day?

    ascalotoru, Aug 10, 2018 at 4:54 AM, in forum: Security
    Replies:
    1
    Views:
    54
    cPanelLauren
    Aug 13, 2018 at 11:25 AM
  3. stbolen

    /var/cpanel/eximstats_db.sqlite3 size issue

    stbolen, Aug 7, 2018, in forum: Database Discussion
    Replies:
    1
    Views:
    51
    cPanelLauren
    Aug 8, 2018 at 2:01 PM
  4. ruiz

    Change eximstats_spam_check in crontab

    ruiz, Jul 29, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    65
    cPanelMichael
    Aug 2, 2018
  5. alias harun

    Exim configuration manager save timeout

    alias harun, Jul 25, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    81
    cPanelMichael
    Jul 31, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice