sendmail , sophos and mailscanner

From: Rezk Mekhael (rezk@clunet.edu)
Date: Mon Jun 23 2003 - 12:41:03 EDT


Hi Managers,

OS: Tru64 5.1
Machine: DS20
Mail Demon: Sendmail 8.12

I am using sendmail with mailscanner and sophos, my problem is Incoming
mail ok, outgoing mail Not.

the server holding the mail and not release it.

 

Any idea ????

I need help please +

I did step I and Step II

I-MailScanner Installation Guide - MailScanner

My copy of MailScanner is installed under /opt/MailScanner so all
references in the following text apply to that location. Note that
version 3 usually installed into /opt/mailscanner so you should be able
to leave the old version running on your system while you get the new
version installed and configured.
Download the distribution and unpack it into the destination directory
with a command such as
# cd /opt
# tar xvf MailScanner-4.01-1.tar
# ln -sf MailScanner-4.01-1 MailScanner
You will then need to check the paths for your particular system setup.
Check the paths in each of these files:
/opt/MailScanner/bin/check_mailscanner
/opt/MailScanner/bin/MailScanner (just line 1)
/opt/MailScanner/lib/MailScanner/SystemDefs.pm
/opt/MailScanner/etc/virus.scanners.conf
/opt/MailScanner/etc/MailScanner.conf
/opt/MailScanner/lib/*
You should also compile the "tnef" binary for your system. The source
code (and compiled versions for Solaris and Linux) are in the "bin"
directory in the MailScanner tar file you downloaded. I advise you put
the "tnef" program into somewhere such as /opt/MailScanner/bin/tnef. You
will also need to check the MailScanner.conf file to ensure that the
setting for "TNEF Expander" points to where you put the program.
The directories
    /var/spool/mqueue
    /var/spool/mqueue.in
must be in the same filesystem for MailScanner to work. If you are using
Exim instead of sendmail, please see the Exim notes. Furthermore, the
incoming and quarantine directories need to be writable by the "mail"
user that Exim will be running as.
For extra reliability, I advise putting all the directories
    /var/spool/mqueue
    /var/spool/mqueue.in
    /var/spool/MailScanner/incoming
    /var/spool/MailScanner/quarantine
in the same filesystem. Then sendmail will ensure you don't run out of
disk space, and handle the situation gracefully.
Configuration Options
These are all documented in a separate page of their own.
Starting it & Checking it
The check_mailscanner script mentioned above is used both to start it
running and re-start it if it fails for some reason. It is best run as
root by cron, a suitable crontab entry being
# 18/05/2000 JKF Ensure my e-mail virus scanner is still running
0,20,40 * * * * [ -x /opt/MailScanner/bin/check_mailscanner ] &&
/opt/MailScanner/bin/check_mailscanner >/dev/null 2>&1

II-MailScanner Installation Guide - Sendmail

I have tested this system on sendmail version 8.9.3 and 8.11.3.

Your existing sendmail installation currently listens on the SMTP port
(TCP port 25) collecting messages from there, places them in a queue,
and delivers them to their destination as soon as possible. This needs
to be split into two separate processes, each handled by separate
sendmail processes and separate queues:

one provides SMTP on port 25 and builds MailScanner's incoming work
queue
the other handles delivery of MailScanner's output
Create the Second Queue
Your copy of sendmail probably uses the default queue location
/var/spool/mqueue. If this directory does not exist, check your sendmail
documentation and/or sendmail.cf file for the location of the
QueueDirectory. Assuming it is /var/spool/mqueue, create a second queue
directory alongside it called mqueue.in and set it to the same ownership
and permissions as mqueue. For example,

    # cd /var/spool
    # ls -ld mqueue
    drwxr-x--- 2 root bin 62976 Oct 23 16:18 mqueue
    # mkdir mqueue.in
    # chown root mqueue.in
    # chgrp bin mqueue.in
    # chmod u=rwx,g=rx,o-rwx mqueue.in
    # ls -ld mqueue mqueue.in
    drwxr-x--- 2 root bin 62976 Oct 23 16:18 mqueue
    drwxr-x--- 2 root bin 41472 Oct 23 16:18 mqueue.in

This new queue mqueue.in will be used by the copy of sendmail providing
the SMTP service.

Change Commands That Start Sendmail
Currently, your copy of sendmail will be started by a script such as
/etc/init.d/mail or /etc/rc.d/init.d/sendmail. Somewhere in this script
will be the command to start sendmail itself. This should look like
this:

    sendmail -bd -q15m
You should change this to the following two lines:
    sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly
-OQueueDirectory=/var/spool/mqueue.in
    sendmail -q15m
This first starts the copy of sendmail that provides SMTP service,
building the work queue for MailScanner. It then starts the copy of
sendmail that delivers the output from MailScanner.

You also might need to change the commands used to shut down sendmail as
it now needs to find 2 copies and kill them both. However, this is not
critical and the system will work without it.

--
Sincerely,
Rezk Mekhael
Manager, Internet Systems and Services
ISS Department
California Lutheran University
60 W. Olsen Rd.
Thousand Oaks, CA 91361
Office  : (805) 493-3947
Pager  : (805) 230-4926
Cell     : (818) 634-9410
Fax     : (805) 493-3842
E-mail : Rezk@clunet.edu
 


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:24 EDT