Messages

1

E-Mail / Re: ClamAV not working

« on: May 31, 2025, 07:47:54 AM »

ClamAV can be used to scan files.

Only incoming/ outgoig emails are not being scanned by ClamAV

2

E-Mail / Re: ClamAV not working

« on: May 31, 2025, 06:47:47 AM »

Check processes running on your server/vps and make sure ClamAV is up and working.

If ClamAV works then check the mail headers of the test email received by you.

Also, send test emails from a 3rd party server to your email address located at your CWP server. If you send emails locally (the sender and recipient are located at the same server then the mail could be delivered bypass ClamAV)

ClamAV is up and running

No mention of ClamAV in headers

Sending from gmail

3

E-Mail / Re: ClamAV not working

« on: May 31, 2025, 06:46:26 AM »

Make sure all of ClamAV is installed, it won't hurt if it already is.

Code: [Select]

dnf install clamav* clamd
Then check with:

Code: [Select]

systemctl status clamd

[root@server ~]# systemctl status clamd
● clamd.service - clamd scanner () daemon
   Loaded: loaded (/usr/lib/systemd/system/clamd.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2025-05-30 16:36:59 +09; 23h ago
     Docs: man:clamd(
           man:clamd.conf(5)
           https://www.clamav.net/documents/
 Main PID: 1558721 (clamd)
    Tasks: 2 (limit: 36141)
   Memory: 1.3G
   CGroup: /system.slice/clamd.service
           └─1558721 /usr/sbin/clamd -c /etc/clamd.d/amavisd.conf --foreground=yes

May 31 14:52:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 14:52:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:02:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:02:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:12:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:12:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:22:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:22:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:32:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.
May 31 15:32:52 server.my server.com clamd[1558721]: SelfCheck: Database status OK.

Test sending the mail with code. Still not working

4

E-Mail / Re: Stop forwarding SPAM emails

« on: May 30, 2025, 07:38:18 AM »

I see some hints at https://talk.plesk.com/threads/do-not-forward-spam-emails-to-external-mailbox.370124/

Using postfix-pcre to block outgoing emails with SPAM in subject line

Have implemented the same.

If it works, I will update it here.

5

E-Mail / Re: CBPolicyD: Source 'any' is not a valid specification

« on: May 30, 2025, 05:37:26 AM »

I would say at this point all bets are off on CentOS 7.9... it is now EOL so best to ELevate to AlmaLinux 8 for production purposes. Then we can support you better with current advice and a better foundation going forward.

I am running alma linux 8.10

I see the following warning

May 30 14:34:40 server.myserver.tld cbpolicyd[1544046]: [2025/05/30-14:34:40 - 1544046] [POLICIES] WARNING: [ID:6/Name:Default Server Limit]=>(group:cwp_domains): - Source 'any' is not a valid specification

6

E-Mail / Re: ClamAV not working

« on: May 30, 2025, 05:33:26 AM »

Check processes running on your server/vps and make sure ClamAV is up and working.

If ClamAV works then check the mail headers of the test email received by you.

Also, send test emails from a 3rd party server to your email address located at your CWP server. If you send emails locally (the sender and recipient are located at the same server then the mail could be delivered bypass ClamAV)

7

E-Mail / Re: ClamAV not working

« on: May 30, 2025, 05:23:27 AM »

What OS was CWP installed on?

CentOS elevated to Alma Linux 8.10

8

E-Mail / ClamAV not working

« on: May 29, 2025, 06:14:49 AM »

As mentioned in wiki at https://wiki.centos-webpanel.com/test-spamassassin-and-clamav

I am sending an email with content

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

I dont see any flagging in log.

Mail is also getting landed in inbox

What might have gone wrong?

I have built mail servers with ClamAV enabled

Any settings to be done as it is the case with SpamAssassin ?

9

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 29, 2025, 06:07:12 AM »

I am able to make this all work in one go in 3rd VPS

https://wiki.centos-webpanel.com/how-to-configure-spamassassin is what I followed with the following additional things

1. edit /etc/sysconfig/spamassassin had some code. Replaced that with

SAHOME="/var/lib/spamassassin/"
SPAMDOPTIONS="-c -m5 -u nobody -s ${SAHOME}spamd.log"

2. Used

systemctl daemon-reload

with

sa-update
systemctl restart postfix spamassassin

3.

nano /usr/lib/systemd/system/spamassassin.service

Added

StartLimitBurst=0

in last line of [Service] block as suggested here earlier

systemctl daemon-reload

The email with content

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

went to Junk folder

Thanks all for the support

systemctl daemon-reload

10

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 28, 2025, 12:52:28 PM »

I could finally make this SPAMASSASSIN work in 2 servers.

I dont know exactly what made it work but here are the few steps I guess I had missed / did again

1. Ran

sudo chown -R nobody:nobody  /var/lib/spamassassin/

2. Rerun

systemctl daemon-reload
systemctl restart postfix spamassassin

3. Restarted all mail related services from CWP admin login

Somewhere spamassassin started working.

Have to make 1 more server work with this. Hope will figure out exactly what is going wrong when I follow the steps in wiki / forum topics.

11

E-Mail / Re: How to configure Spamassassin [updated]

« on: May 27, 2025, 07:33:34 AM »

Check if /var/lib/spamassassin/ exist, if not create. Check if user and groutp owned by nobody.

In my case its owned by root root

What should be done?

12

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 26, 2025, 08:40:43 AM »

Looks like I am seriously missing something big

3 different servers running on alma linux with SpamAssassin

Followed instructions at https://wiki.centos-webpanel.com/how-to-configure-spamassassin

Read this thread and tried using

Emails never marked as SPAM or sent to SPAM folder

13

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 24, 2025, 11:23:16 AM »

I see error in maillog

spamd[3368847]: razor2: razor2 check failed: No such file or directory razor2: Can't read: /var/lib/razor/ at /usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Razor2.pm line 331.

14

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 24, 2025, 08:42:09 AM »

Also have

/usr/share/spamassassin/local.cf with options below:

rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
required_score 5.0
use_bayes 1
bayes_auto_learn 1
bayes_ignore_header X-Bogosity
bayes_ignore_header X-Spam-Flag
bayes_ignore_header X-Spam-Status
include /usr/share/spamassassin/

15

E-Mail / Re: spamassassin.service: Failed with result 'start-limit-hit'

« on: May 24, 2025, 08:35:42 AM »

First of all, sorry for the delay of about 2 months in replying. I read your answer, and I really appreciate it.

However, during this time I have been looking for information by conducting tests ... etc ... and although I could have answered before, I have chosen to answer after having carried out tests and to say forcefully, that the results are positive after a month having implemented the last change / test.

Effectively your answer / solution solves the initial problem that I expose in this thread, even so, it has always surprised me a lot that, spamassassin raises the cpu consumption to 0.90 - 1.00 on average, regardless of the fact that, no matter how much we configure spamassassin such and as the cwp wiki says, also as it supports cwp (I requested support for it) never send any mail to the spam folder ... this was very strange to me.
The answer to this increase in cpu is that perhaps, I would have many emails on my server ...

The tests I have done on 4 servers, I have 3 for testing 1 in production.

Gradually I was eliminating mails from the main test server, and the consumption was always the same ... there came a day that, I eliminated all the accounts of that server, no account, no mail, nothing, the consumption of spamassassin was still the same, I raised the server to 0.90 - 1.00 on average. Something very very high.

Too bad it didn't save the url where I got the information, I did write it down in kate (linux notepad) and I have it saved in my documents. If you have saved the url, you could say the clear terms of the explanation.

Well, the change happens by modifying / etc / sysconfig / spamassassin file:
In wiki they indicate:

Code: [Select]

SPAMDOPTIONS = "- d -c -m5 -u nobody -s $ {SAHOME} spamd.log" But we actually remove the "-d" from the beginning, looking like this:

Code: [Select]

SPAMDOPTIONS = "-c -m5 -u nobody -s $ {SAHOME} spamd.log" If my memory does not fail me (and it is easy for it to fail) this causes spamassassin to be executed as a service (I do not remember exactly if it was a service or another ...) and now it does, spamassassin, without making the changes that you mention in your post and that I had also seen in other internet threads, it is always executed, without any crash and without load on the server, the server load is normal, if you are using apache, then whatever Apache loads or whatever, and during non-use hours, the server load is 0.00 and spamassassin is active.

The reason why, despite this, spamassassin does not filter, does not take the identified emails to the spam folder and does not rename them with *** SPAM *** as indicated in the wiki, is because it should not be configured in / usr / share /spamassassin/local.cf
Rather, it must be configured in another path.

After that, you can test by sending an email with the subject:
"XJS * C4JDBQADN1.NSBN3 * 2IDNEN * GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL * C.34X" (without quotes) and it looks like the mail is put in the spam folder and renamed the subject to *** SPAM ***.

Greetings.

I have in / etc / sysconfig / spamassassin file

# Options to spamd
SPAMDOPTIONS="-c -m5 -H --razor-home-dir='/var/lib/razor/' --razor-log-file='sys-syslog'"

SAHOME="/var/lib/spamassassin/"
SPAMDOPTIONS="-d -c -m5 -u nobody -s ${SAHOME}spamd.log"

/etc/postfix/master.cf  I have

smtp      inet  n       -       n       -       -       smtpd
  -o content_filter=smtp-amavis:127.0.0.1:10024
  -o receive_override_options=no_address_mappings
  -o content_filter=spamassassin



spamassassin      unix -      n      n      -      -      pipe
  user=nobody argv=/usr/bin/spamc -f -e
  /usr/sbin/sendmail -oi -f ${sender} ${recipient}

What else should I be looking?