Re: [Mimedefang] what are the different headers possible?
Le jeudi 21 avril 2011 21:46, fakessh a écrit : Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit : On Thu, 21 Apr 2011, fakessh wrote: Hi fakessh, please keep in mind that MIMEDefang bases on a complete programming language with plenty of modules. You need to learn this language in order to get the configuration work in a production environment properly. changes made without any result: here is my code my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm citate: ( $country, $region ) = $gi-region_by_addr('24.24.24.24'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. ( $country, $region ) = $gi-region_by_name('www.xyz.com'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. Things to consider to get the code going: 1) MIMEDefang only knows the numerical IP the connection comes from, the symbolical name stems from reverse DNS lookups, hence, I would never use region_by_name() personally, but stick to region_by_addr(). Otherwise you need to know how region_by_name() behaves, if you pass it [a.b.c.d] symbolical names for IPs, that does not resolve. 2) region and country may be undef, hence, you ought to handle the case the function does not return defined values. 3) open() may fail, too, you ought to handle that case as well. Regards, only seems to work $country = $gi-country_code_by_name('yahoo.com'); any idea ? I managed to get a result as I wanted with this code use Geo::IP::PurePerl; $gi = Geo::IP::PurePerl-new( /usr/share/GeoIP/GeoLiteCity.dat, GEOIP_STANDARD ); $country = $gi-country_code_by_name($Helo); my ( $country_code, $country_code3, $country_name, $region, $city, $postal_code, $latitude, $longitude, $metro_code, $area_code ) = $gi-get_city_record($Helo); action_add_header(X-Header-Country, $country_code); action_add_header(X-Header-CountryCode3, $country_code3); action_add_header(X-Header-CountryName, $country_name); action_add_header(X-Header-Region, $region); action_add_header(X-Header-City , $city); action_add_header(X-Header-PostalCode , $postal_code); action_add_header(X-Header-Latitude, $latitude); action_add_header(X-Header-Longitude, $longitude); action_add_header(X-Header-MetroCode, $metro_code); action_add_header(X-Header-AreaCode, $area_code); -- http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgpg9IlTPVGHP.pgp Description: PGP signature ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
On Thu, 21 Apr 2011 21:46:41 +0200, fakessh wrote: Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit : On Thu, 21 Apr 2011, fakessh wrote: Hi fakessh, please keep in mind that MIMEDefang bases on a complete programming language with plenty of modules. You need to learn this language in order to get the configuration work in a production environment properly. changes made without any result: here is my code my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm citate: ( $country, $region ) = $gi-region_by_addr('24.24.24.24'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. ( $country, $region ) = $gi-region_by_name('www.xyz.com'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. Things to consider to get the code going: 1) MIMEDefang only knows the numerical IP the connection comes from, the symbolical name stems from reverse DNS lookups, hence, I would never use region_by_name() personally, but stick to region_by_addr(). Otherwise you need to know how region_by_name() behaves, if you pass it [a.b.c.d] symbolical names for IPs, that does not resolve. 2) region and country may be undef, hence, you ought to handle the case the function does not return defined values. 3) open() may fail, too, you ought to handle that case as well. Regards, only seems to work $country = $gi-country_code_by_name('yahoo.com'); any idea ? I'm looking for some documentation on mimedefang: here what I've found http://whatever.frukt.org/mdf-filter.text.shtml Surely you advise me to completely revise the filter by looking carefully at this example for good writing any other ideas thanks ... ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
On Fri, 22 Apr 2011 21:23:35 +0200 fakessh fake...@fakessh.eu wrote: I'm looking for some documentation on mimedefang: man mimedefang-filter http://www.mimedefang.org/static/mimedefang-lisa04.pdf Regards, David. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 21 Apr 2011, fakessh wrote: Hi fakessh, please keep in mind that MIMEDefang bases on a complete programming language with plenty of modules. You need to learn this language in order to get the configuration work in a production environment properly. changes made without any result: here is my code my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm citate: ( $country, $region ) = $gi-region_by_addr('24.24.24.24'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. ( $country, $region ) = $gi-region_by_name('www.xyz.com'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. Things to consider to get the code going: 1) MIMEDefang only knows the numerical IP the connection comes from, the symbolical name stems from reverse DNS lookups, hence, I would never use region_by_name() personally, but stick to region_by_addr(). Otherwise you need to know how region_by_name() behaves, if you pass it [a.b.c.d] symbolical names for IPs, that does not resolve. 2) region and country may be undef, hence, you ought to handle the case the function does not return defined values. 3) open() may fail, too, you ought to handle that case as well. Regards, - -- Steffen Kaiser -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBTa/YUf41+pMevzVSAQKgJQgAiSkCzlF05CJK3SgmpYP3/PyrYoMTSRKv OirQwWPTFx/u5etPLls1zytUf4qM9k/NA47xgD4dVWgBH2UNhQQrqPti6MFA25Ro OLEUdXbF0opnV1rL9FEhmHMKU0KkuXIOHdVKX6J1YVLPRRWIM+dMTEIFEt2MpRHf YIbVhZ9k91sjrckrZalhXEvvv1JuQyoFseUhITA2SgCXpc/X13fLoRxmKKGJTDk0 Y15ynk4QKygMPeS/RmVUfhiH83zgPcJjMbE8PzGlIGKj559EmnJ2u/cAaFnAPDtV 7Xr7ryh4BAxyiwQ8QEGE5R9WcymxeiayCMbt6A5gBhQYN03T8k4jfw== =wfc1 -END PGP SIGNATURE-___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit : On Thu, 21 Apr 2011, fakessh wrote: Hi fakessh, please keep in mind that MIMEDefang bases on a complete programming language with plenty of modules. You need to learn this language in order to get the configuration work in a production environment properly. changes made without any result: here is my code my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm citate: ( $country, $region ) = $gi-region_by_addr('24.24.24.24'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. ( $country, $region ) = $gi-region_by_name('www.xyz.com'); Returns a list containing country and region. If region and/or country is unknown, undef is returned. Sure this works only for region databases. Things to consider to get the code going: 1) MIMEDefang only knows the numerical IP the connection comes from, the symbolical name stems from reverse DNS lookups, hence, I would never use region_by_name() personally, but stick to region_by_addr(). Otherwise you need to know how region_by_name() behaves, if you pass it [a.b.c.d] symbolical names for IPs, that does not resolve. 2) region and country may be undef, hence, you ought to handle the case the function does not return defined values. 3) open() may fail, too, you ought to handle that case as well. Regards, only seems to work $country = $gi-country_code_by_name('yahoo.com'); any idea ? -- http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgpSKn9X9Kqbt.pgp Description: PGP signature ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
On Wed, 20 Apr 2011 00:44:47 +0200 fakessh fake...@fakessh.eu wrote: X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks) X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.; longitude=2.; http://maps.google.com/maps?q=**.,2.z=6 X-CanItPRO-Stream: nolinks (inherits from default) X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418 X-CanIt-Archived-As: base/2018/C / 013C Those headers are all added by our commercial CanIt software. http://roaringpenguin.com/products Regards, David. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
Le mercredi 20 avril 2011 13:01, David F. Skoll a écrit : On Wed, 20 Apr 2011 00:44:47 +0200 fakessh fake...@fakessh.eu wrote: X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks) X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.; longitude=2.; http://maps.google.com/maps?q=**.,2.z=6 X-CanItPRO-Stream: nolinks (inherits from default) X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418 X-CanIt-Archived-As: base/2018/C / 013C Those headers are all added by our commercial CanIt software. http://roaringpenguin.com/products Regards, David. i wrote a minimal perl script without succes exemple a perl script my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($Helo); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); can you tell me how to make it work. headers are added but empty thanks -- http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgp8cYPPM4PuI.pgp Description: PGP signature ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
--On Wednesday, April 20, 2011 16:26 +0200 fakessh fake...@fakessh.eu wrote: i wrote a minimal perl script without succes exemple a perl script my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($Helo); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); can you tell me how to make it work. headers are added but empty I'm not familiar with Geo::IP, but you seem to be getting no output from the function. If it expects an IP address, use $RelayAddr. $Helo is whatever string the remote host says, and sometimes it is garbage. Maybe you just had one of those cases. Joseph Brennan Columbia University Information Technology ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] what are the different headers possible?
Le mercredi 20 avril 2011 16:52, Joseph Brennan a écrit : --On Wednesday, April 20, 2011 16:26 +0200 fakessh fake...@fakessh.eu wrote: i wrote a minimal perl script without succes exemple a perl script my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($Helo); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); can you tell me how to make it work. headers are added but empty I'm not familiar with Geo::IP, but you seem to be getting no output from the function. If it expects an IP address, use $RelayAddr. $Helo is whatever string the remote host says, and sometimes it is garbage. Maybe you just had one of those cases. Joseph Brennan Columbia University Information Technology changes made without any result: here is my code my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD); my ($country, $region) = $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country, $country); action_add_header(X-Header-Region, $region); -- http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgpUYOh7gGbht.pgp Description: PGP signature ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] what are the different headers possible?
hello guru of mimedefang I just saw that there were other available mimedefang header as X-anti-abuse on the list it appears X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks) X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.; longitude=2.; http://maps.google.com/maps?q=**.,2.z=6 X-CanItPRO-Stream: nolinks (inherits from default) X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418 X-CanIt-Archived-As: base/2018/C / 013C headers you can give me an explanation of this series of header and how to incorporate them into my machine this is a good reliable software and loves PERL thanks -- http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgpLILy43SSBs.pgp Description: PGP signature ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang