Re: [Mimedefang] what are the different headers possible?

2011-04-25 Thread fakessh
Le jeudi 21 avril 2011 21:46, fakessh a écrit :
 Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit :
  On Thu, 21 Apr 2011, fakessh wrote:
 
  Hi fakessh,
 
  please keep in mind that MIMEDefang bases on a complete programming
  language with plenty of modules. You need to learn this language in order
  to get the configuration work in a production environment properly.
 
   changes made ​​without any result: here is my code
  
  my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat,
   GEOIP_STANDARD);
  my ($country, $region) =
   $gi-region_by_name($RelayAddr); action_add_header(X-Header-Country,
   $country); action_add_header(X-Header-Region, $region);
 
  I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on
  http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm
 
  citate:
 
  
  ( $country, $region ) = $gi-region_by_addr('24.24.24.24');
  Returns a list containing country and region. If region and/or country is
  unknown, undef is returned. Sure this works only for region databases.
  ( $country, $region ) = $gi-region_by_name('www.xyz.com');
  Returns a list containing country and region. If region and/or country is
  unknown, undef is returned. Sure this works only for region databases.
  
 
  Things to consider to get the code going:
 
  1) MIMEDefang only knows the numerical IP the connection comes from, the
  symbolical name stems from reverse DNS lookups, hence, I would never use
  region_by_name() personally, but stick to region_by_addr(). Otherwise you
  need to know how region_by_name() behaves, if you pass it [a.b.c.d]
  symbolical names for IPs, that does not resolve.
 
  2) region and country may be undef, hence, you ought to handle the case
  the function does not return defined values.
 
  3) open() may fail, too, you ought to handle that case as well.
 
  Regards,

 only seems to work
 $country = $gi-country_code_by_name('yahoo.com');

 any idea ?


I managed to get a result as I wanted with this code


use Geo::IP::PurePerl;
   
$gi =   
Geo::IP::PurePerl-new( /usr/share/GeoIP/GeoLiteCity.dat, GEOIP_STANDARD );
$country = $gi-country_code_by_name($Helo);
 my (
$country_code, $country_code3, $country_name, 
$region,
$city, $postal_code,   $latitude, 
$longitude,
$metro_code,   $area_code
   ) = $gi-get_city_record($Helo);
 action_add_header(X-Header-Country, $country_code);
 action_add_header(X-Header-CountryCode3, $country_code3);
 action_add_header(X-Header-CountryName, $country_name);
 action_add_header(X-Header-Region,   $region);
 action_add_header(X-Header-City , $city);
 action_add_header(X-Header-PostalCode , $postal_code);
 action_add_header(X-Header-Latitude, $latitude);
 action_add_header(X-Header-Longitude,   $longitude);
action_add_header(X-Header-MetroCode, $metro_code);
action_add_header(X-Header-AreaCode,   $area_code);

-- 
 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgpg9IlTPVGHP.pgp
Description: PGP signature
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-22 Thread fakessh

On Thu, 21 Apr 2011 21:46:41 +0200, fakessh wrote:

Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit :

On Thu, 21 Apr 2011, fakessh wrote:

Hi fakessh,

please keep in mind that MIMEDefang bases on a complete programming
language with plenty of modules. You need to learn this language in 
order

to get the configuration work in a production environment properly.

 changes made ​​without any result: here is my code

my $gi = 
Geo::IP-open(/usr/share/GeoIP/GeoIP.dat,

 GEOIP_STANDARD);
my ($country, $region) = 
$gi-region_by_name($RelayAddr);

action_add_header(X-Header-Country, $country);
action_add_header(X-Header-Region, $region);

I don't use Geo::IP either (as Joseph Brennan), but I refer to the 
doc on

http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm

citate:


( $country, $region ) = $gi-region_by_addr('24.24.24.24');
Returns a list containing country and region. If region and/or 
country is
unknown, undef is returned. Sure this works only for region 
databases.

( $country, $region ) = $gi-region_by_name('www.xyz.com');
Returns a list containing country and region. If region and/or 
country is
unknown, undef is returned. Sure this works only for region 
databases.



Things to consider to get the code going:

1) MIMEDefang only knows the numerical IP the connection comes from, 
the
symbolical name stems from reverse DNS lookups, hence, I would never 
use
region_by_name() personally, but stick to region_by_addr(). 
Otherwise you
need to know how region_by_name() behaves, if you pass it 
[a.b.c.d]

symbolical names for IPs, that does not resolve.

2) region and country may be undef, hence, you ought to handle the 
case

the function does not return defined values.

3) open() may fail, too, you ought to handle that case as well.

Regards,


only seems to work
$country = $gi-country_code_by_name('yahoo.com');

any idea ?



I'm looking for some documentation on mimedefang: here what I've found
http://whatever.frukt.org/mdf-filter.text.shtml

Surely you advise me to completely revise the filter by looking 
carefully at this example for good writing


any other ideas


thanks ...
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-22 Thread David F. Skoll
On Fri, 22 Apr 2011 21:23:35 +0200
fakessh fake...@fakessh.eu wrote:

 I'm looking for some documentation on mimedefang:

man mimedefang-filter

http://www.mimedefang.org/static/mimedefang-lisa04.pdf

Regards,

David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-21 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 21 Apr 2011, fakessh wrote:

Hi fakessh,

please keep in mind that MIMEDefang bases on a complete programming 
language with plenty of modules. You need to learn this language in order 
to get the configuration work in a production environment properly.



changes made ​​without any result: here is my code

   my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat,
GEOIP_STANDARD);
   my ($country, $region) = $gi-region_by_name($RelayAddr);
   action_add_header(X-Header-Country, $country);
   action_add_header(X-Header-Region, $region);


I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on 
http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm


citate:


( $country, $region ) = $gi-region_by_addr('24.24.24.24');
Returns a list containing country and region. If region and/or country is 
unknown, undef is returned. Sure this works only for region databases.

( $country, $region ) = $gi-region_by_name('www.xyz.com');
Returns a list containing country and region. If region and/or country is 
unknown, undef is returned. Sure this works only for region databases.



Things to consider to get the code going:

1) MIMEDefang only knows the numerical IP the connection comes from, the 
symbolical name stems from reverse DNS lookups, hence, I would never use 
region_by_name() personally, but stick to region_by_addr(). Otherwise you 
need to know how region_by_name() behaves, if you pass it [a.b.c.d] 
symbolical names for IPs, that does not resolve.


2) region and country may be undef, hence, you ought to handle the case 
the function does not return defined values.


3) open() may fail, too, you ought to handle that case as well.

Regards,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTa/YUf41+pMevzVSAQKgJQgAiSkCzlF05CJK3SgmpYP3/PyrYoMTSRKv
OirQwWPTFx/u5etPLls1zytUf4qM9k/NA47xgD4dVWgBH2UNhQQrqPti6MFA25Ro
OLEUdXbF0opnV1rL9FEhmHMKU0KkuXIOHdVKX6J1YVLPRRWIM+dMTEIFEt2MpRHf
YIbVhZ9k91sjrckrZalhXEvvv1JuQyoFseUhITA2SgCXpc/X13fLoRxmKKGJTDk0
Y15ynk4QKygMPeS/RmVUfhiH83zgPcJjMbE8PzGlIGKj559EmnJ2u/cAaFnAPDtV
7Xr7ryh4BAxyiwQ8QEGE5R9WcymxeiayCMbt6A5gBhQYN03T8k4jfw==
=wfc1
-END PGP SIGNATURE-___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-21 Thread fakessh
Le jeudi 21 avril 2011 09:10, Steffen Kaiser a écrit :
 On Thu, 21 Apr 2011, fakessh wrote:

 Hi fakessh,

 please keep in mind that MIMEDefang bases on a complete programming
 language with plenty of modules. You need to learn this language in order
 to get the configuration work in a production environment properly.

  changes made ​​without any result: here is my code
 
 my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat,
  GEOIP_STANDARD);
 my ($country, $region) = $gi-region_by_name($RelayAddr);
 action_add_header(X-Header-Country, $country);
 action_add_header(X-Header-Region, $region);

 I don't use Geo::IP either (as Joseph Brennan), but I refer to the doc on
 http://search.cpan.org/~borisz/Geo-IP-1.38/lib/Geo/IP.pm

 citate:

 
 ( $country, $region ) = $gi-region_by_addr('24.24.24.24');
 Returns a list containing country and region. If region and/or country is
 unknown, undef is returned. Sure this works only for region databases.
 ( $country, $region ) = $gi-region_by_name('www.xyz.com');
 Returns a list containing country and region. If region and/or country is
 unknown, undef is returned. Sure this works only for region databases.
 

 Things to consider to get the code going:

 1) MIMEDefang only knows the numerical IP the connection comes from, the
 symbolical name stems from reverse DNS lookups, hence, I would never use
 region_by_name() personally, but stick to region_by_addr(). Otherwise you
 need to know how region_by_name() behaves, if you pass it [a.b.c.d]
 symbolical names for IPs, that does not resolve.

 2) region and country may be undef, hence, you ought to handle the case
 the function does not return defined values.

 3) open() may fail, too, you ought to handle that case as well.

 Regards,

only seems to work
$country = $gi-country_code_by_name('yahoo.com');

any idea ?

-- 
 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgpSKn9X9Kqbt.pgp
Description: PGP signature
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-20 Thread David F. Skoll
On Wed, 20 Apr 2011 00:44:47 +0200
fakessh fake...@fakessh.eu wrote:

 X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks)
 X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.;
 longitude=2.; http://maps.google.com/maps?q=**.,2.z=6
 X-CanItPRO-Stream: nolinks (inherits from default)
 X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418
 X-CanIt-Archived-As: base/2018/C / 013C

Those headers are all added by our commercial CanIt software.

http://roaringpenguin.com/products

Regards,

David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-20 Thread fakessh
Le mercredi 20 avril 2011 13:01, David F. Skoll a écrit :
 On Wed, 20 Apr 2011 00:44:47 +0200

 fakessh fake...@fakessh.eu wrote:
  X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks)
  X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.;
  longitude=2.; http://maps.google.com/maps?q=**.,2.z=6
  X-CanItPRO-Stream: nolinks (inherits from default)
  X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418
  X-CanIt-Archived-As: base/2018/C / 013C

 Those headers are all added by our commercial CanIt software.

 http://roaringpenguin.com/products

 Regards,

 David.


i wrote a minimal perl script without succes

exemple a perl script 
my  $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD);
my  ($country, $region) = $gi-region_by_name($Helo);
 action_add_header(X-Header-Country, $country);
 action_add_header(X-Header-Region, $region);

can you tell me how to make it work. headers are added but empty



thanks 
-- 
 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgp8cYPPM4PuI.pgp
Description: PGP signature
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-20 Thread Joseph Brennan



--On Wednesday, April 20, 2011 16:26 +0200 fakessh fake...@fakessh.eu 
wrote:



i wrote a minimal perl script without succes

exemple a perl script
my  $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD);
my  ($country, $region) = $gi-region_by_name($Helo);
 action_add_header(X-Header-Country, $country);
 action_add_header(X-Header-Region, $region);

can you tell me how to make it work. headers are added but empty



I'm not familiar with Geo::IP, but you seem to be getting no output
from the function. If it expects an IP address, use $RelayAddr.

$Helo is whatever string the remote host says, and sometimes it is
garbage. Maybe you just had one of those cases.

Joseph Brennan
Columbia University Information Technology


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] what are the different headers possible?

2011-04-20 Thread fakessh
Le mercredi 20 avril 2011 16:52, Joseph Brennan a écrit :
 --On Wednesday, April 20, 2011 16:26 +0200 fakessh fake...@fakessh.eu

 wrote:
  i wrote a minimal perl script without succes
 
  exemple a perl script
  my  $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, GEOIP_STANDARD);
  my  ($country, $region) = $gi-region_by_name($Helo);
   action_add_header(X-Header-Country, $country);
   action_add_header(X-Header-Region, $region);
 
  can you tell me how to make it work. headers are added but empty

 I'm not familiar with Geo::IP, but you seem to be getting no output
 from the function. If it expects an IP address, use $RelayAddr.

 $Helo is whatever string the remote host says, and sometimes it is
 garbage. Maybe you just had one of those cases.

 Joseph Brennan
 Columbia University Information Technology


changes made ​​without any result: here is my code

my $gi = Geo::IP-open(/usr/share/GeoIP/GeoIP.dat, 
GEOIP_STANDARD);
my ($country, $region) = $gi-region_by_name($RelayAddr);
action_add_header(X-Header-Country, $country);
action_add_header(X-Header-Region, $region);



-- 
 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgpUYOh7gGbht.pgp
Description: PGP signature
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] what are the different headers possible?

2011-04-19 Thread fakessh
hello guru of mimedefang

I just saw that there were other available mimedefang header as X-anti-abuse 

on the list it appears 
 X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN, nolinks)
X-CanIt-Geo: ip=94.23.60.***; country=FR; latitude=**.; longitude=2.;
http://maps.google.com/maps?q=**.,2.z=6
X-CanItPRO-Stream: nolinks (inherits from default)
X-Canit-Stats-ID: 0b33C - 3aaf718c - 20110418
X-CanIt-Archived-As: base/2018/C / 013C

headers you can give me an explanation of this series of header and how to 
incorporate them into my machine

this is a good reliable software and loves PERL

thanks 


-- 
 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7
 gpg --keyserver pgp.mit.edu --recv-key 092164A7


pgpLILy43SSBs.pgp
Description: PGP signature
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang