Re: [vchkpw] Simscan clamav error
Found the problem. It was apparmor. If apparmor is enabled on Ubuntu clamd has issues. Once I disabled apparmor everything worked. Thanks for all of your help. Andrew Remo Mattei wrote: Here is mine drwxr-x--- 4 clamav root 4096 Mar 2 08:27 /var/qmail/simscan Ciao On 3/2/10 07:06 , Bob Hutchinson hutchli...@midwales.com wrote: /var/qmail/simscan !DSPAM:4b92abe432712120659372!
Re: [vchkpw] Simscan clamav error
On Sunday 28 February 2010, Andrew Simon wrote: Hi all, I've just built out a new mail system using vpopmail and simscan on the latest version of Ubuntu. Everything is working well with one exception. When I check the clamav.log I see the following error WARNING: lstat() failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as the owner and the group. And clamav is a member of the simscan group. And the permission seem correct. Any suggestions ? Andrew I have /var/qmail/simscan owned by clamav:root and no user/group simscan at all. Using shupp toaster. -- - Bob Hutchinson Midwales dot com - !DSPAM:4b8d1b8732711671929756!
Re: [vchkpw] Simscan clamav error
Here is mine drwxr-x--- 4 clamav root 4096 Mar 2 08:27 /var/qmail/simscan Ciao On 3/2/10 07:06 , Bob Hutchinson hutchli...@midwales.com wrote: /var/qmail/simscan !DSPAM:4b8d2e8832716884914849!
Re: [vchkpw] Simscan clamav error
Title: Re: [vchkpw] Simscan clamav error I think /var/qmail/simscan directory should be setgid. Clamav creates files with 600 permissions, so group members can't access them. This is from my server: drwxr-s--- 71 simscan simscan 4096 Mar 1 11:34 simscan Clamd is running as simscan. Tren Blackburn wrote: What user is clamd running as? - Original Message - From: Andrew Simonasi...@i3tcorp.com To:vchkpw@inter7.comvchkpw@inter7.com Sent: Sun Feb 28 12:53:58 2010 Subject: [vchkpw] Simscan clamav error Hi all, I've just built out a new mail system using vpopmail and simscan on the latest version of Ubuntu. Everything is working well with one exception. When I check the clamav.log I see the following error WARNING: lstat() failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as the owner and the group. And clamav is a member of the simscan group. And the permission seem correct. Any suggestions ? Andrew -- Best regards, Pavel mailto:bal...@msmu.ru !DSPAM:4b8b7ce632711591472733!
Re: [vchkpw] Simscan clamav error
The /var/qmail/simscan directory is set as follows: drwxr-s--- 2 simscan simscan 4.0K 2010-03-01 08:46 simscan I've also noticed that everything is working in that mail is going in and out and getting scanned. I checked the log files and the issue began Friday 2/26/10 at around 3:00pm EST just after the database reloaded. Before that it was working properly. I'm really not sure what is going on. Is there an update or something I don't know about? Andrew Pavel V. Yanchenko wrote: I think /var/qmail/simscan directory should be setgid. Clamav creates files with 600 permissions, so group members can't access them. This is from my server: drwxr-s--- 71 simscan simscan 4096 Mar 1 11:34 simscan Clamd is running as simscan. Tren Blackburn wrote: What user is clamd running as? - Original Message - From: Andrew Simon asi...@i3tcorp.com mailto:asi...@i3tcorp.com To: vchkpw@inter7.com mailto:vchkpw@inter7.com vchkpw@inter7.com mailto:vchkpw@inter7.com Sent: Sun Feb 28 12:53:58 2010 Subject: [vchkpw] Simscan clamav error Hi all, I've just built out a new mail system using vpopmail and simscan on the latest version of Ubuntu. Everything is working well with one exception. When I check the clamav.log I see the following error WARNING: lstat() failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as the owner and the group. And clamav is a member of the simscan group. And the permission seem correct. Any suggestions ? Andrew /-- Best regards, Pavelmailto:bal...@msmu.ru / !DSPAM:4b8bc7d832713372117754!
Re: [vchkpw] Simscan clamav error
What user is clamd running as? - Original Message - From: Andrew Simon asi...@i3tcorp.com To: vchkpw@inter7.com vchkpw@inter7.com Sent: Sun Feb 28 12:53:58 2010 Subject: [vchkpw] Simscan clamav error Hi all, I've just built out a new mail system using vpopmail and simscan on the latest version of Ubuntu. Everything is working well with one exception. When I check the clamav.log I see the following error WARNING: lstat() failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as the owner and the group. And clamav is a member of the simscan group. And the permission seem correct. Any suggestions ? Andrew !DSPAM:4b8ad96e32711871166817!
Re: [vchkpw] Simscan clamav error
Clamd is running as simscan. Tren Blackburn wrote: What user is clamd running as? - Original Message - From: Andrew Simon asi...@i3tcorp.com To: vchkpw@inter7.com vchkpw@inter7.com Sent: Sun Feb 28 12:53:58 2010 Subject: [vchkpw] Simscan clamav error Hi all, I've just built out a new mail system using vpopmail and simscan on the latest version of Ubuntu. Everything is working well with one exception. When I check the clamav.log I see the following error WARNING: lstat() failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as the owner and the group. And clamav is a member of the simscan group. And the permission seem correct. Any suggestions ? Andrew !DSPAM:4b8adbf532718809316924!
Re: [vchkpw] Simscan and Clam 0.95.3
I just upgraded too but I am using the chkuser and did not have any problems installing. I do not recall to have patch simscan though :) On 1/27/10 11:35 , DAve dave.l...@pixelhammer.com wrote: Good afternoon all, I was just getting going upgrading our Clamav install and beginning to use clamav on our outbound mail as well as SA. I patched netqmail to use the reject-message.patch, no issues there. I then patched simscan 1.40 using JS patch, simscan-1.4.0-combined.2.patch and then tested in the simscan source directory before installing. (All one line at the prompt) QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2 NOP0FCHECK=1 /var/qmail/bin/qmail-inject mail-1.txt But it doesn't seem to work, clamdscan still crashes with error 71. Here is the debug output. [r...@smtp1:/usr/local/src/simscan-1.4.0]# QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2 NOP0FCHECK=1 /var/qmail/bin/qmail-inject mail-1.txt simscan: cdb looking up simscan: cdb for found clam=no,spam=yes,attach=.exe:.scr:.com:.pif:.bat simscan: pelookup clam = no simscan: pelookup spam = yes simscan: pelookup attach = .exe:.scr:.com:.pif:.bat simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat simscan: .exe is attachment number 0 simscan: .scr is attachment number 1 simscan: .com is attachment number 2 simscan: .pif is attachment number 3 simscan: .bat is attachment number 4 simscan: starting: work dir: /var/qmail/simscan/1264616927.742599.63398 simscan: pelookup: called with sysad...@smtp1.tls.net simscan: pelookup: domain is smtp1.tls.net simscan: cdb looking up smtp1.tls.net simscan: pelookup: local part is sysadmin simscan: cdb looking up sysad...@smtp1.tls.net simscan: pelookup: called with dave.l...@pixelhammer.com simscan: pelookup: domain is pixelhammer.com simscan: cdb looking up pixelhammer.com simscan: pelookup: local part is dave.list simscan: cdb looking up dave.l...@pixelhammer.com simscan: cdb for dave.l...@pixelhammer.com found clam=yes,spam=yes,attach=.exe:.scr:.com:.pif:.bat simscan: pelookup clam = yes simscan: pelookup spam = yes simscan: pelookup attach = .exe:.scr:.com:.pif:.bat simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat simscan: .exe is attachment number 0 simscan: .scr is attachment number 1 simscan: .com is attachment number 2 simscan: .pif is attachment number 3 simscan: .bat is attachment number 4 simscan: cdb looking up version attach simscan: calling clamdscan simscan: cdb looking up version clamav simscan: fatal error executing clamdscan simscan: exit error code: 71 qmail-inject: fatal: mail server temporarily rejected message (#4.3.0) [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan . /usr/local/src/simscan-1.4.0/.: OK --- SCAN SUMMARY --- Infected files: 0 Time: 0.264 sec (0 m 0 s) [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan -V ClamAV 0.95.3/10326/Fri Jan 22 13:18:42 2010 I have not seen anything new on this issue, am I in need of a clue bat? Compiling Clam and simscan showed no errors. Thanks, DAve !DSPAM:4b60894132711447313053!
Re: [vchkpw] Simscan and Clam 0.95.3
On 27/01/2010 1:35 PM, DAve wrote: Good afternoon all, I was just getting going upgrading our Clamav install and beginning to use clamav on our outbound mail as well as SA. simscan: calling clamdscan simscan: cdb looking up version clamav simscan: fatal error executing clamdscan simscan: exit error code: 71 qmail-inject: fatal: mail server temporarily rejected message (#4.3.0) [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan . /usr/local/src/simscan-1.4.0/.: OK Could be a permissions problem. I've seen that error message with permission problems before. I've also sen it with selinux installed as well. Regards, Rick !DSPAM:4b6092a132711732464874!
Re: [vchkpw] Simscan and Clam 0.95.3
I donot have selinux configured on my qmail since it will not work with that Remo On 1/27/10 12:23 , Rick Macdougall ri...@ummm-beer.com wrote: On 27/01/2010 1:35 PM, DAve wrote: Good afternoon all, I was just getting going upgrading our Clamav install and beginning to use clamav on our outbound mail as well as SA. simscan: calling clamdscan simscan: cdb looking up version clamav simscan: fatal error executing clamdscan simscan: exit error code: 71 qmail-inject: fatal: mail server temporarily rejected message (#4.3.0) [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan . /usr/local/src/simscan-1.4.0/.: OK Could be a permissions problem. I've seen that error message with permission problems before. I've also sen it with selinux installed as well. Regards, Rick !DSPAM:4b6097fc32711643916076!
Re: [vchkpw] simscan value
Thanks I found it. - Original Message - From: Remo Mattei To: vchkpw@inter7.com Sent: Friday, November 04, 2005 9:32 PM Subject: [vchkpw] simscan value Hello all, I have a question about the simscan since I want to increase the value (5.0) to like 8.0 or higher for a specific domain etc.. here is the log: simscan:[9047]:CLEAN (0.30/5.00):0.8216s:vediamo:68.142.228.50:[EMAIL PROTECTED]:[EMAIL PROTECTED] here is the setting in the simscan control.. italy1.com:clam=yes,spam=yes,spam_hits=1.0,attach=.mp3:clam=yes,spam=yes,spam_hits=20.1 which I set it at 1.0 but again it shows still 5.0 Thanks... BTW. I follow bill shupp installation.
Re: [vchkpw] simscan value
Thanks I found it. - Original Message - From: Remo Mattei To: vchkpw@inter7.com Sent: Friday, November 04, 2005 9:32 PM Subject: [vchkpw] simscan value Hello all, I have a question about the simscan since I want to increase the value (5.0) to like 8.0 or higher for a specific domain etc.. here is the log: simscan:[9047]:CLEAN (0.30/5.00):0.8216s:vediamo:68.142.228.50:[EMAIL PROTECTED]:[EMAIL PROTECTED] here is the setting in the simscan control.. italy1.com:clam=yes,spam=yes,spam_hits=1.0,attach=.mp3:clam=yes,spam=yes,spam_hits=20.1 which I set it at 1.0 but again it shows still 5.0 Thanks... BTW. I follow bill shupp installation.
Re: [vchkpw] simscan/vpopmail etc
Jimmy Stewpot wrote: Hello, I am currently running a fairly busy email server with around 30 domains and several hundred high usage users sending and receiving email. I have currently setup the system so that It is running without any virus scanning. Its setup something like this rblsmtpd -- qmail -- .qmail file (which then pipes to spamc) then vpopmail delivers the email. The whole system works fairly well however I would like to start using virus scanning. I have been recommended simscan by people on the qmail list. There are some questions that I have im hoping that people can answer. Does simscan integrate perfectly with vpopmail. I cant see any reason why it wouldnt but i would still like clarification on that. Thanks Jimmy. Actually simscan has nothing to do with vpopmail, because simscan operates at the smtp level. If it detects a virus or spam with a higher score than that set by you it will reject the message. I'm currently using simscan with clamav and spamassassin and have no problems. signature.asc Description: OpenPGP digital signature
Re: [vchkpw] simscan not rejecting spams
On Monday 25 October 2004 05:36 am, Juliano Simes wrote: Hi Guys, I am trying to make simscan reject spam above a given SA score, with the following setup: - simscan-1.0.6rc3 - Mail-SpamAssassin-3.0.1 - Qmail 1.03 + qmail-queue_patch + many_other_patches I built simscan with the following options: ./configure \ --enable-clamav=n \ --enable-per-domain=n \ --enable-ripmime=/usr/local/bin/ripmime \ --enable-spam=y \ --enable-spam-hits=25 \ --enable-spamc=/usr/bin/spamc \ --enable-qmail-queue=/var/qmail/bin/qmail-queue.bin Everything works fine (mail gets scored by SA and delivered) but spams above score 25 still pass through. Any ideas? If there's a better list to place this question, let me know. [EMAIL PROTECTED] is the mailing list for your question. Check the spamc arguments. rc3 has a new --enable-spamc-args option. I usually set it to --enable-spamc-args=-U /tmp/spamd.sock -- Ken Jones
Re: [vchkpw] SIMSCAN
At 27/09/2004 27/09/2004 -0300, you wrote: i am running simscan with vpopmail user. I feel you should run simscan as qmaild user, as vpopmail user cannot write in qmail spool archives. but when i set the QMAILQUEUE to simscan i receive this message. (unable to exec qq) That should be the reason: no permission for vpopmail user. Ciao, Tonino Itamar Reis Peixoto Analista Consultor TreyNet Consultoria - Uberlândia Tel : + 55 34 3231 0598 Cel: +55 38 9107 1250 http://www.treynet.com.br [EMAIL PROTECTED]Interazioni di Antonio Nati http://www.interazioni.it [EMAIL PROTECTED]
Re: [vchkpw] SIMSCAN working directory privs
At 28/09/2004 28/09/2004 +0200, you wrote:
Simscan creates the working directory with a privilege of 700. in this way
clamd
must run with the same owner of simscan to access the msg.
They work on the same files (and only on those files), so why should they
have different users?
I feel this design to be very safe, because clamd should be dedicated to
e-mail only.
There should be more safety having them only accessing the files with the
same uid/permissions.
To complete the security of the system, clamd client should be activated by
simscan user only.
Changing the privilege to 755 clamd and spamd can access the working
directory regardless of clamd process user.
mod 755 means every one in the system may access those files.
Ciao,
Tonino
To apply the change - search this
/* create the directory */
if ( mkdir(workdir, 0700) == -1 ) {
_exit(EXIT_400);
}
and replace with this
/* create the directory */
if ( mkdir(workdir, 0755) == -1 ) {
_exit(EXIT_400);
}
--
Fa
[EMAIL PROTECTED]Interazioni di Antonio Nati
http://www.interazioni.it [EMAIL PROTECTED]
Re: [vchkpw] SIMSCAN working directory privs
At 10.14 28/09/2004, you wrote:
At 28/09/2004 28/09/2004 +0200, you wrote:
Simscan creates the working directory with a privilege of 700. in this
way clamd
must run with the same owner of simscan to access the msg.
To complete the security of the system, clamd client should be activated
by simscan user only.
Ok, I admit, I've lost a cople of hours to figure out why simscan rejected
all my mails with a 500:
my clamd user was wrong (qscand).
I suggest, then, a line in the INSTALL doc:
check that clamd runs under the same simscan user.
I feel this design to be very safe, because clamd should be dedicated to
e-mail only.
There should be more safety having them only accessing the files with the
same uid/permissions.
I agree with you, clamd should be called only by simscan, but now,that
simscan is new, everybody tries
to test it on servers configured for other solutions (ie qmailscan).
if simscan is a little friendly with other solutions it can can be tested
and adopted very fast.
mod 755 means every one in the system may access those files.
Yes, that's a fact. But the directory is created processed by clamd and
then removed.
Ciao,
Tonino
Ciao
Fa
To apply the change - search this
/* create the directory */
if ( mkdir(workdir, 0700) == -1 ) {
_exit(EXIT_400);
}
and replace with this
/* create the directory */
if ( mkdir(workdir, 0755) == -1 ) {
_exit(EXIT_400);
}
--
Fa
[EMAIL PROTECTED]Interazioni di Antonio Nati
http://www.interazioni.it [EMAIL PROTECTED]
Re: [vchkpw] simscan still not working
Payal Rathod wrote: Hi, I am still not able to get simscan working. I even tried something as easy as this, # export QMAILQUEUE=/var/qmail/bin/simscan /usr/local/bin/tcpserver -vHRl 0 0 25 /var/qmail/bin/qmail-smtpd But still I get an error like this when I send a message, 451 mail server temporarily rejected message (#4.3.0) What is the reason for this? Hi, What user does qmail-smtpd run as ? What user does clamd run as ? Are the two users above the same ? If not, make them the same. Regards, Rick
Re: [vchkpw] simscan still not working
On Tue, Sep 28, 2004 at 06:30:06AM -0400, Rick Macdougall wrote: What user does qmail-smtpd run as ? root. What user does clamd run as ? root. Thanks, -Payal
Re: [vchkpw] simscan
On Tuesday 28 September 2004 09:04 am, Itamar Reis Peixoto wrote: I am testing simscan . when i send a mail with a .pif attachment i receive this message. An unknown error has occurred. Subject 'Enviando email: enderecos', Account: 'mail', Server: '200.XXX.XXX.XXX', Protocol: SMTP, Server Response: '554 mail server permanently rejected message (#5.3.0)', Port: 25, Secure(SSL): No, Server Error: 554, Error Number: 0x800CCC6F how to change this message for this new message [snip] qmail-smtpd's rejection message is based on the exit code of simscan. Therefore you can only have one, because simscan doesn't differentiate between different rejection types. To change the message that is returned, you'll have to look at the qmail source code. -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc pgpF7sFsqYrGC.pgp Description: PGP signature
Re: [vchkpw] SIMSCAN
On Monday 27 September 2004 01:27 pm, Itamar Reis Peixoto wrote: i need a help. i am running simscan with vpopmail user. but when i set the QMAILQUEUE to simscan i receive this message. (unable to exec qq) make sure you're setting the environment variable properly. unable to exec qq usually means you made a typo when typing in the QMAILQUEUE setting. -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc pgpu97IObj1rH.pgp Description: PGP signature
Re: [vchkpw] simscan quesiton: error
On Friday 24 September 2004 01:16 am, Payal Rathod wrote: Hi, Since there is no official list for simscan and this was the list where few simscan questions were asked and answered, I am taking the liberty of asking it here. I have simscan-1.0 which i installed by, ./configure make make install-strip In my smtpd/run file I have, export QMAILQUEUE=/var/qmail/bin/simscan But when I try to send a message I get, 451 mail server temporarily rejected message (#4.3.0) I tried to increase softlimit but still the same error. Can someone tell what is wrong? If you are not running qmail-smtpd as root you may need to change the ownership of simscan to match qmail-smtpd. Ken Jones
Re: [vchkpw] simscan quesiton: error
On Fri, Sep 24, 2004 at 09:41:09AM -0500, Ken Jones wrote: If you are not running qmail-smtpd as root you may need to change the ownership of simscan to match qmail-smtpd. I run qmail-smtpd as qmaild and now I have, # ls -l simscan -rwxr-xr-x 1 qmaild nofiles 6136 Sep 24 11:25 simscan Still the same problem. I am running Mandrake 10.0 With warm regards, -Payal
Re: [vchkpw] simscan quesiton: error
Check the permissions on the working dir too. Bas At 17:25 9/24/2004, you wrote: On Fri, Sep 24, 2004 at 09:41:09AM -0500, Ken Jones wrote: If you are not running qmail-smtpd as root you may need to change the ownership of simscan to match qmail-smtpd. I run qmail-smtpd as qmaild and now I have, # ls -l simscan -rwxr-xr-x 1 qmaild nofiles 6136 Sep 24 11:25 simscan Still the same problem. I am running Mandrake 10.0 With warm regards, -Payal
Re: [vchkpw] simscan quesiton: error
Bastiaan van der Put wrote: # ls -l simscan -rwxr-xr-x 1 qmaild nofiles 6136 Sep 24 11:25 simscan chmod --reference /var/qmail/bin/qmail-queue \ /var/qmail/bin/simscan /var/qmail/simscan chown --reference /var/qmail/bin/qmail-queue \ /var/qmail/bin/simscan /var/qmail/simscan -- +---+ | Kiril Todorov + System::Network Administrator | +---+ | /* waiting... dreaming... wishing... */ | +---+
Re: [vchkpw] simscan quesiton: error
On Fri, Sep 24, 2004 at 07:01:20PM +0300, Kiril Todorov wrote: chmod --reference /var/qmail/bin/qmail-queue \ /var/qmail/bin/simscan /var/qmail/simscan chown --reference /var/qmail/bin/qmail-queue \ /var/qmail/bin/simscan /var/qmail/simscan Why do I need to have permission of qmail-queue? # ls -l qmail-queue -rws--x--x 1 qmailq qmail 15912 Sep 24 11:38 qmail-queue I believe that simscan appear at smtp level i.e. before the mail hits the queue. -Payal
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Hello Rick, Rick romero wrote on Sat, 31 Jul 2004 19:52:43 -0500 UTC: Rr I don't have a copy, and don't have time to test right now, but is the Rr rejection based on the score, or the Yes/No? Rr Currently, I'm sending anything over 15 to /dev/null via a maildrop Rr script, but 5 is marked as spam.. That's how we do it also. -- Regards, Charles. pgpnuDALqYtJh.pgp Description: PGP signature
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
It's based on the return code from spamc. Exitcode is 1 if the message is spam, 0 if not spam. The threshold is based on your local required_hits configuration. I guess we could write in code to support how you are doing it. Ken On Saturday 31 July 2004 07:52 pm, Rick romero wrote: I don't have a copy, and don't have time to test right now, but is the rejection based on the score, or the Yes/No? Currently, I'm sending anything over 15 to /dev/null via a maildrop script, but 5 is marked as spam.. Rick On Jul 31, 2004, at 6:40 PM, Ken Jones wrote: Sure, some other folks suggested the same option. Perhaps a configuration option to decide to reject or just process Ken On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote: Ken, Is it possible to scan for spam and use tagging only, not rejecting the msg? Greetings, Bas At 19:43 7/29/2004, you wrote: Here you go Ken The installation instructions are in the INSTALL file On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote: Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Also I was wondering if there is a way to tell qmail-smtpd to exit with a 5xx error code rather than a 4xx error on spam or a virus? I am running qmail out of supervise, not that it should make any difference that I can see. Look at the end of qmail.c in the qmail distribution. The exit code of the child program (qmail-queue or $QMAILQUEUE) determines what error message is spit out in SMTP. The short answer is: Exit code 0 means successful delivery. Exit codes between 11 and 40 are permanent (5xx) errors. All other exit codes are temportary (4xx) errors. A longer answer is: Have your program exit with a specific exit code and then add a custom message in qmail.c to handle that code. For example: case 32: return Dmail server thinks this message is spam(#5.3.0); case 33: return Dvirus rejected(#5.3.0); case 34: return Dyou send us nothing but crap(#5.3.0); case 35: return Dyou are listed in the our blackhole list(#5.3.0); case 36: return Dleave us alone, jackass(#5.3.0); case 41: return Zif you are not a spammer, try again in 5 minutes(#4.3.0); -- Eric Ziegast
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Ken, Is it possible to scan for spam and use tagging only, not rejecting the msg? Greetings, Bas At 19:43 7/29/2004, you wrote: Here you go Ken The installation instructions are in the INSTALL file On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote: Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Sure, some other folks suggested the same option. Perhaps a configuration option to decide to reject or just process Ken On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote: Ken, Is it possible to scan for spam and use tagging only, not rejecting the msg? Greetings, Bas At 19:43 7/29/2004, you wrote: Here you go Ken The installation instructions are in the INSTALL file On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote: Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
I don't have a copy, and don't have time to test right now, but is the rejection based on the score, or the Yes/No? Currently, I'm sending anything over 15 to /dev/null via a maildrop script, but 5 is marked as spam.. Rick On Jul 31, 2004, at 6:40 PM, Ken Jones wrote: Sure, some other folks suggested the same option. Perhaps a configuration option to decide to reject or just process Ken On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote: Ken, Is it possible to scan for spam and use tagging only, not rejecting the msg? Greetings, Bas At 19:43 7/29/2004, you wrote: Here you go Ken The installation instructions are in the INSTALL file On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote: Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
RE: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Hi Ken, A small configure option that I had when compiling was that the --enable-attach=y always gave a attachement scan = OFF at the end of configure. I overcame this by setting ENABLE_ATTACH=1 in the configure file. Also I was wondering if there is a way to tell qmail-smtpd to exit with a 5xx error code rather than a 4xx error on spam or a virus? I am running qmail out of supervise, not that it should make any difference that I can see. Also well done on a great little piece of software. Regards Shane Chrisp -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Friday, 30 July 2004 1:44 AM To: [EMAIL PROTECTED] Subject: Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Here you go Ken The installation instructions are in the INSTALL file On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote: Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Ken Jones schrieb: Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. Hi, I am very interested, please send it to me Werner
RE: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Please send me a copy Ken. cheers Shane -Original Message- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Wednesday, 28 July 2004 1:57 AM To: [EMAIL PROTECTED] Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan test release
On Thursday 29 July 2004 12:31 pm, Itamar Reis Peixoto wrote: Its a good ideia to put simscan on a web-page or an FTP server. I will, there is a bit of extra coordination on our web site since we changed to a new php template. when i have a FREE-TIME I am Write an how to INSTALL simscan in portuguese Language. That would be great. Ken
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Pe data de Tuesday 27 July 2004 20:57, Ken Jones a scris: Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. Can you send it to me please ? Or put it on ftp. Thanks.
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Ken Jones wrote: Anyone interested in trying simscan before I release it? If you are interested, please email me directly and I'll send you a tar ball. Absolutely. I'd love to test it on our test mail machine. :) Thanks in advance! Chris Kalin
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
Ken Jones wrote: Anyone interested in trying simscan before I release it? Yes, definitely interested!
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
pelase send for me. - Original Message - From: Ken Jones [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 27, 2004 2:57 PM Subject: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin Anyone interested in trying simscan before I release it? It is a simplified replacement for qscanq. We have been running it on our server for over a week and it is solid. Like qscanq it can call clamdscan to check for viri. It is invoked via the QMAILQUEUE patch. Differences: - uses configure ; make ; make install-strip - automatically deletes working directories when done - uses one program instead of qscanq's two programs per email - optionally calls spamassassin to reject spam during smtp - optionally blocks list of attachments - does not require svscan - simplified C code (one simscan.c file) If you are interested, please email me directly and I'll send you a tar ball. -- Ken Jones inter7.com
Re: [vchkpw] simscan ideas
Okay, looking at the INSTALL file and the simscan.c file here are some ideas: * move bk_attachments array to /var/qmail/simscan/blockattachments (or similiar external config file) * make spam blocking at smtp level optional, add an option to inject in the queue the output of spamc instead of the original mail. (so we have the X-Spam headers added to it) * import the QMAILRCPTS functionality from qmail-qfilter and add an option for spamc_args to run spamc -u $QMAILRCPTS * add -m 20 or simliar limiting option to the spamd options in rc.spamd someone might get surprised with all his memory and swap eaten :) that's all for now :) I hope it makes sense.
Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin
On Tue, 27 Jul 2004 12:57:20 -0500, Ken Jones [EMAIL PROTECTED] wrote: Anyone interested in trying simscan before I release it? Can you send it to me ? I will love to try it. -- Regards Manny Unix is simple, but it takes a genius to understand the simplicity. - Dennis Ritchie
