After upgrade, all messages getting stopped as Other Infection

[stevis]

I upgraded to 3.0.1.5 earlier today, and ever since, all of my incoming email is getting blocked as follows:

Other Infection: Y
Report: MailScanner: killedmailscanner

I don't know if this is the cause, or just related, but when I run the MailScanner Lint test (or restart MailScanner), I get the following errors:

Code: Select all

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Could not read file /usr/share/MailScanner/reports/en/deleted.content.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1331, file "/usr/share/MailScanner/reports/en/deleted.content.message.txt" for deletedcontentmessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/deleted.filename.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1332, file "/usr/share/MailScanner/reports/en/deleted.filename.message.txt" for deletedfilenamemessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/deleted.size.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1334, file "/usr/share/MailScanner/reports/en/deleted.size.message.txt" for deletedsizemessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/deleted.virus.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1333, file "/usr/share/MailScanner/reports/en/deleted.virus.message.txt" for deletedvirusmessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/disinfected.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1347, file "/usr/share/MailScanner/reports/en/disinfected.report.txt" for disinfectedreporttext does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /etc/MailScanner/reports/en/inline.sig.in.html at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Syntax error in line 1 of ruleset file /etc/MailScanner/rules/sig.html.rules at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2803
Could not read file /etc/MailScanner/reports/en/inline.sig.out.html at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Syntax error in line 2 of ruleset file /etc/MailScanner/rules/sig.html.rules at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2803
Found syntax errors in /etc/MailScanner/rules/sig.html.rules. at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2658
Could not read file /usr/share/MailScanner/reports/en/inline.warning.html at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1369, file "/usr/share/MailScanner/reports/en/inline.warning.html" for inlinehtmlwarning does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/inline.spam.warning.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2608, file "/usr/share/MailScanner/reports/en/inline.spam.warning.txt" for inlinespamwarning does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /etc/MailScanner/reports/en/inline.sig.in.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Syntax error in line 1 of ruleset file /etc/MailScanner/rules/sig.text.rules at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2803
Could not read file /etc/MailScanner/reports/en/inline.sig.out.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Syntax error in line 2 of ruleset file /etc/MailScanner/rules/sig.text.rules at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2803
Found syntax errors in /etc/MailScanner/rules/sig.text.rules. at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2658
Could not read file /usr/share/MailScanner/reports/en/inline.warning.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1370, file "/usr/share/MailScanner/reports/en/inline.warning.txt" for inlinetextwarning does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/languages.conf at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1322, file "/usr/share/MailScanner/reports/en/languages.conf" for languagestrings does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/recipient.mcp.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2911, file "/usr/share/MailScanner/reports/en/recipient.mcp.report.txt" for recipientmcpreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/recipient.spam.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2613, file "/usr/share/MailScanner/reports/en/recipient.spam.report.txt" for recipientspamreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/rejection.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1326, file "/usr/share/MailScanner/reports/en/rejection.report.txt" for rejectionreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.content.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1376, file "/usr/share/MailScanner/reports/en/sender.content.report.txt" for sendercontentreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.error.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1377, file "/usr/share/MailScanner/reports/en/sender.error.report.txt" for sendererrorreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.filename.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1378, file "/usr/share/MailScanner/reports/en/sender.filename.report.txt" for senderfilenamereport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.spam.rbl.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2602, file "/usr/share/MailScanner/reports/en/sender.spam.rbl.report.txt" for senderrblspamreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.spam.sa.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2603, file "/usr/share/MailScanner/reports/en/sender.spam.sa.report.txt" for sendersaspamreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.mcp.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2912, file "/usr/share/MailScanner/reports/en/sender.mcp.report.txt" for sendersamcpreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.size.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1380, file "/usr/share/MailScanner/reports/en/sender.size.report.txt" for sendersizereport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.spam.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 2601, file "/usr/share/MailScanner/reports/en/sender.spam.report.txt" for senderbothspamreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/sender.virus.report.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1379, file "/usr/share/MailScanner/reports/en/sender.virus.report.txt" for sendervirusreport does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/stored.content.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1339, file "/usr/share/MailScanner/reports/en/stored.content.message.txt" for storedcontentmessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/stored.filename.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1340, file "/usr/share/MailScanner/reports/en/stored.filename.message.txt" for storedfilenamemessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/stored.size.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1342, file "/usr/share/MailScanner/reports/en/stored.size.message.txt" for storedsizemessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Could not read file /usr/share/MailScanner/reports/en/stored.virus.message.txt at /usr/share/MailScanner/perl/MailScanner/Config.pm line 2856
Error in line 1341, file "/usr/share/MailScanner/reports/en/stored.virus.message.txt" for storedvirusmessage does not exist (or can not be read) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3058
Read 1500 hostnames from the phishing whitelist
Read 21302 hostnames from the phishing blacklists
Config: calling custom init function SQLBlacklist
Config: calling custom init function MailWatchLogging
Started SQL Logging child
Config: calling custom init function SQLWhitelist

Checking version numbers...
Version number in MailScanner.conf (5.0.3) is correct.
MailScanner setting GID to  (89)
MailScanner setting UID to  (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd"
Found these virus scanners installed: clamavmodule, clamd
===========================================================================
Looked up unknown string mailscanner in language translation file  at /usr/share/MailScanner/perl/MailScanner/Config.pm line 1364
Looked up unknown string unreadablearchive in language translation file  at /usr/share/MailScanner/perl/MailScanner/Config.pm line 1364
Looked up unknown string passwordedarchive in language translation file  at /usr/share/MailScanner/perl/MailScanner/Config.pm line 1364
Looked up unknown string nonpasswordedarchive in language translation file  at /usr/share/MailScanner/perl/MailScanner/Config.pm line 1364
Looked up unknown string archivetoodeep in language translation file  at /usr/share/MailScanner/perl/MailScanner/Config.pm line 1364
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::INFECTED:: {HEX}EICAR.TEST.10.UNOFFICIAL :: ./1/eicar.com
Virus Scanning: Clamd found 1 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 1 viruses
===========================================================================
Virus Scanner test reports:
Clamd said "eicar.com was infected: {HEX}EICAR.TEST.10.UNOFFICIAL"

If any of your virus scanners (clamavmodule,clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function SQLBlacklist
Config: calling custom end function MailWatchLogging
Config: calling custom end function SQLWhitelist

Any suggestions?

[stevis]

Also, here are the contents of /usr/share/MailScanner/reports/en

Code: Select all

deleted.content.message.txt.rpmsave
deleted.filename.message.txt.rpmsave
deleted.size.message.txt.rpmsave
deleted.virus.message.txt.rpmsave
disinfected.report.txt.rpmsave
inline.sig.html.rpmsave
inline.sig.txt.rpmsave
inline.spam.warning.txt.rpmsave
languages.conf.strings
recipient.mcp.report.txt.rpmsave
recipient.spam.report.txt.rpmsave
rejection.report.txt.rpmsave
sender.content.report.txt.rpmsave
sender.error.report.txt.rpmsave
sender.filename.report.txt.rpmsave
sender.mcp.report.txt.rpmsave
sender.size.report.txt.rpmsave
sender.spam.rbl.report.txt.rpmsave
sender.spam.report.txt.rpmsave
sender.spam.sa.report.txt.rpmsave
sender.virus.report.txt.rpmsave
stored.content.message.txt.rpmsave
stored.filename.message.txt.rpmsave
stored.size.message.txt.rpmsave
stored.virus.message.txt.rpmsave

I'm assuming something didn't complete correctly.

[stevis]

Still no luck getting mail to flow. I did spin up a new 3.0.1.5 VM and grabbed all of the files in /usr/share/MailScanner/reports/en and put them on my broken instance. That resolved the errors on MailScanner restart, but did not resolve my issues with mail not getting anywhere.

Any suggestions would be appreciated.

[stevis]

So, after further troubleshooting and making it actually get worse, I ended up just spinning up a new EFA VM and calling it a day.