The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Why isn't mailscanner a built-in option for WHM / cPanel?

Discussion in 'E-mail Discussions' started by spaceman, Feb 4, 2004.

  1. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
    Hi All,

    As I understand it, if I wanted to install MailScanner on my dedicated linux server then I could install it from layer1.cpanel.net. Some say 'it works great', others say 'buggy' or 'too CPU intensive'.

    Being of a conservative nature when it comes to installing 'non-built-in' 3rd party software on my dedicated Linux box in case it negatively impacts 100+ business clients of ours, my question is this: does anyone know why MailScanner hasn't yet risen to the status of being a standard feature within WHM / cPanel? Given that it can be installed at present from layer1.cpanel.net, does this indicate that it's currently being considered for inclusion as a standard feature? And if not, why not!? :)

    Curious. Thanks for your comments.

    P.S. I'm personally much more interested at present in introducing anti-virus software on my server (that strips off the virus but still delivers the message with appropriate advisories of what has been done) than the much more controversial policy of attempting spam control on behalf of my clients.
     
    #1 spaceman, Feb 4, 2004
    Last edited: Feb 4, 2004
  2. pagedeveloping

    pagedeveloping Well-Known Member

    Joined:
    Jun 11, 2003
    Messages:
    219
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    New York
    I can't tell you why cpanel does not incorporate MailScanner into their installation like they do with exim. but, I can tell you that it works greate on my servers.

    If you don't like it, or it is giving your server a hard time with email, than you can unstall it with ease.

    I haven't found MailScanner to be cpu sensitive yet.

    cpanel has their own recommended config settings that fit well into exim "one of the reasons I chose cpanel install over every one else" In fact I had to un-install my last MailScanner installation on one server that was recommended in another post "lot of work".

    cpanel installation of MailScanner comes with ClamAV and does what you want it to do.


    Here is the basic setup I used if you want to try it out.
    NOTE: My servers all have RedHat 7.3 to 9.0, If the installation is different for other OS than any ones input is more than welcome.

    Code:
    wget http://layer1.cpanel.net/mailscanner-autoinstall-1.5.tar.gz
    Code:
    tar -zxvf mailscanner-autoinstall-1.5.tar.gz
    Code:
    cd mailscanner-autoinstall-1.5
    Code:
    ./install
    "After you install, You can setup your config."

    Code:
    edit /usr/mailscanner/etc/MailScanner.conf
    "When you are done you need to resart MailScanner"

    Code:
    killall -9 MailScanner
    Code:
    /usr/mailscanner/bin/check_mailscanner
    If you have any problems and nothing seems to work to your advantage than you can un-install

    Code:
    cd mailscanner-autoinstall-1.5
    Code:
    uninstall
     
  3. underzen

    underzen Member

    Joined:
    Jan 14, 2003
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    1
    it works very good on my server as well. No complaints and it kept the mydoom virus complaints down to a minimum!
     
  4. sphost

    sphost Well-Known Member

    Joined:
    Jan 19, 2004
    Messages:
    59
    Likes Received:
    0
    Trophy Points:
    6
    am using fedora, i tried installing it, the installation completed but i had this message :

    This installer is currently an unsupported release.!

    looks like its not supported by fedora yet
     
  5. Marty

    Marty Well-Known Member

    Joined:
    Oct 10, 2001
    Messages:
    630
    Likes Received:
    1
    Trophy Points:
    18
    No, that is a message from the cpanel people that though they provide this installer on their site, they do not support it so don't submit a ticket for help.

    It may not be supported by Fedora, but that is not what that particular message is about.
     
  6. sphost

    sphost Well-Known Member

    Joined:
    Jan 19, 2004
    Messages:
    59
    Likes Received:
    0
    Trophy Points:
    6

    oh :rolleyes:

    thank you for the explanation :)

    so how to know if it is supported or not ?

    can anyone please recommend the best configurations for mailscanner ? am running a celeron 2.0 server. i dont want to put high load on the server.

    thanks
     
  7. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
    Thanks pagedeveloping for your comprehensive reply. I think we might just give it a go...
     
  8. xWho

    xWho Well-Known Member

    Joined:
    Apr 23, 2003
    Messages:
    112
    Likes Received:
    0
    Trophy Points:
    16
    Just wanted to add that I followed the directions in this post on my brand new Fedora installation and it worked perfectly.

    In fact, about 5 minutes ago, mailscanner blocked it's first virus.

    Woot!
     
  9. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
    OK, we're installed and running here too!

    One question - has anyone changed the default .conf settings that are supplied from layer1 and pre-configured for exim? I notice that anti-spam scanning is set to 'off' by default, which is perfect for us. I've just had a speed-read of the .conf file, and nothing jumped out at me as something I should change. Anyone?

    Just thought of another question - how to keep ClamAV automatically up-to-date with the latest anti-virus definitions so the next time Mydoom or similar comes along the anti-virus protection will kick in quickly...? A cron job I would imagine...?

    Thanks.
     
    #9 spaceman, Feb 4, 2004
    Last edited: Feb 4, 2004
  10. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    The only thing i've changed is to turn off sender notices ( no point sending a "you are infected" notice to a non existant address ( more recent viruses spoof the from field ). Turned of sending cleaned message ( more likely than not the message was created by the virus, no point in cluttering the mail queue ) and turned off notice to sys admin.. again just useless atm w/ all the virus hits we're getting.

    As for keeping up 2 date w/ clam av. you can run freshclam at the command or when upcp runs it checks as well. cat /scripts/upcp | grep freshclam and its there.

    Also to be sure check the clam log in /var/log as the upcp freshclam update writes to that log.
     
  11. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    .. And to the thread starter..

    I don't think a lot of people would appreciate mailscanner being built into cpanel. A few reasons;

    1. Some people use other third party virus utils and are quite happy as is, they'd be mighty pissed if that was changed i'd imagine.

    2. Not everyone wants a virus scanner.

    3. I don't see it as cPanels responsibility to provide an anti virus solution. I do however feel that it is there responsibility to ensure that exim is antivirus software friendly. That is, the customer info is not overwritten.

    Finally, as posted above, its not exactly rocket science to install. cPanel do not want to support this product and its nice enough they've provided us w/ an easy to use installer.

    THANK YOU CPANEL!!!
     
  12. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
    I agree with all this - thanks. For the benefit of others (and someone please correct me here if I'm wrong), both of these should be set to 'no' if you don't want the intended recipient of a virus-infected email to receive notification of the event:

    # Should I attempt to disinfect infected attachments and then deliver
    # the clean ones. "Disinfection" involves removing viruses from files
    # (such as removing macro viruses from documents). "Cleaning" is the
    # replacement of infected attachments with "VirusWarning.txt" text
    # attachments.
    # This can also be the filename of a ruleset.
    Deliver Disinfected Files = no

    # Do you want to deliver messages once they have been cleaned of any
    # viruses?
    # By making this a ruleset, you can re-create the "Deliver From Local"
    # facility of previous versions.
    Deliver Cleaned Messages = no

    Thanks again. Can you tell me how often upcp runs by default? In other words, should I concern myself with setting up a cron job to run freshclam every 24 hours or has upcp already go that covered?

    Another BIG THANKS to all contributors to this thread that I started. I've been itching to get something like this installed on my server to help protect our clients, and I really didn't think it was this easy. Nice one! :)
     
  13. Dreamer

    Dreamer Well-Known Member

    Joined:
    Jun 23, 2003
    Messages:
    129
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Bulgaria
    Just installed MailScanner + ClamAV and for about a hour MS found ~20-30 viruses.

    Thanks for this topic :)
     
  14. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
    Yes - it's a goodie!

    As mentioned earlier, I've turned off the sending/forwarding (to the intended recipient) of infected messages. So what I'm thinking now is - it would be excellent if I could send a weekly or monthly summary report to each valid POP account on my server to report how many virus-infected emails were blocked on their behalf by the server. Otherwise they'll never know the good work we're doing! :) Is anyone doing any work/research in this area that they would like to share?
     
  15. Dreamer

    Dreamer Well-Known Member

    Joined:
    Jun 23, 2003
    Messages:
    129
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Bulgaria
    I found only notices to administrators (where you define from and to postmaster user). Check the option category name too see. Are you sure it sends notification to users and not only admin?

    I've made special mail account so all admin notices go there and not my root mail (where the important things are sent).

    Another hour has passed and another 52 viruses are found. Cool.
     
    #15 Dreamer, Feb 5, 2004
    Last edited: Feb 5, 2004
  16. spaceman

    spaceman Well-Known Member

    Joined:
    Mar 25, 2002
    Messages:
    481
    Likes Received:
    0
    Trophy Points:
    16
  17. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    By default upcp runs every 24 hours. Unless you've changed this setting manually. To confirm what time it runs, issue crontab -e at the command line. You will see a /scripts/upcp setting.
     
  18. baohx

    baohx Member

    Joined:
    Sep 2, 2003
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    AZ, USA
    Just a suggestion for the script, change all ssystem calls to just system. That way in case one of the scripts (like the perl module installers) needs any values entered, you can enter it.
     
    #18 baohx, Feb 6, 2004
    Last edited: Feb 7, 2004
  19. Angel78

    Angel78 Well-Known Member

    Joined:
    May 9, 2002
    Messages:
    413
    Likes Received:
    1
    Trophy Points:
    16
    Is anyone of you using RHE 3.0 and mailscanner (cpanel version from layer 1)?

    thank you
     
  20. Silverado

    Silverado Well-Known Member

    Joined:
    Mar 19, 2003
    Messages:
    154
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Backyard - Poolside
    Thanks pagedeveloping for the "how to".

    I installed it on a test server last week then slowly added it to all my servers.
    We average about 300+ a day we now catch on the servers.

    Anyone thinking about installing it should just do it.
    It didn't hurt the CPU or burn up any extra resources.

    In fact, we have had several clients email us and thank us for finally adding AV to the servers.

    Easy, quick, and painless install for anyone.
    Highly recommended!
     
    #20 Silverado, Feb 7, 2004
    Last edited: Feb 7, 2004
Loading...

Share This Page