Hi,
I saw this recent post on a UK security mailing list, regarding blocking
any attachment that starts with TVqQAAMA i.e. anything executable by
windows.
I'm currently blocking the following extensions with qmail-scanner-1.16:
.vbe .vbs .lnk .scr .wsh .hta .pif .exe .com .bat .cmd .cpl
Hi,
We've had a raft of complaints about the quarantine notification emails
that qmail-scanner 1.16 has been sending it out. These are to the
innocents that have had their from address forged by the recent SoBig.F
virus.
I wondered before I waded in and started hacking, whether anyone else
had
Mark Simon Powell wrote:
Hi,
I saw this recent post on a UK security mailing list, regarding blocking
any attachment that starts with TVqQAAMA i.e. anything executable by
windows.
I'm currently blocking the following extensions with qmail-scanner-1.16:
.vbe .vbs .lnk .scr .wsh .hta .pif .exe
If you haven't heard, Osirusoft have been DDoS'd, so they've given up,
setting all hosts to BLOCK.
(oh and SPEWS as well, but I don't use them as they're painful...)
http://slashdot.org/articles/03/08/27/0214238.shtml?tid=111tid=126
Set in local.cf:
score RCVD_IN_OSIRUSOFT_COM 0
Setting any score to 0 turns off the test.
---
Ed Henderson
Certainty Tech
http://www.certainty.net/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Cream[DONut]
Sent: Wednesday, August 27,
Hello all,
I need to make with that qmail-scanner scan only outgoing messages, this
is possible?
I did not find no documentation about this :(
greats
Carlos Cesario
signature.asc
Description: This is a digitally signed message part
Is there a way qmail scanner can perform the above block of TVqQAAMA to
prevent anything that this list may miss?
AFAICT there doesn't seem to be.
Cheers.
Russell Nelson's qmail-smtpd patch does exactly this. It's in the Microsoft Virus
Prevention section of qmail.org.
Josh
Just wondering if anyone had any ideas as to how to add my own spamassassin
scripts to qmail-scanner.
See original message below.
Tyler
- Original Message -
From: Tyler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, August 25, 2003 11:16 PM
Subject: [Qmail-scanner-general]Spam
-Original Message-
From: Tyler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 10:19 AM
To: [EMAIL PROTECTED]
Subject: Re: [Qmail-scanner-general]Spam Assassin Scripts
Just wondering if anyone had any ideas as to how to add my
own spamassassin scripts to
I don't think SA is working correctly.
According to my logs:
maillog:
Aug 26 14:40:14 chopin spamd[580]: server started on port 783 (running
version 2.55)
[EMAIL PROTECTED] qmailscan]# tail qmail-queue.log
Wed, 27 Aug 2003 13:24:03 -0400:24929: w_c: primary Content-Type of
text/plain found
-Original Message-
From: Tyler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 12:08 PM
To: [EMAIL PROTECTED]
Subject: Re: [Qmail-scanner-general]Spam Assassin Scripts
Here are the scripts I am using. Right now, the QMAILQUEUE
env variable is set to
-Original Message-
From: Jennifer Fountain [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 12:32 PM
To: [EMAIL PROTECTED]
Subject: [Qmail-scanner-general]problems with SA
--scanners clamscan,verbose_spamassassin
see what @scanners has in it... jsut because you
Can I just deleted what ends up in the quarantine directory, or is there
more I need to be doing? Are those messages also somewhere in the Qmail
quueue still?
(Sorry, I'm new to this...out of necessity to stop ~1000 Sobig
messages/day!).
Thanks,
-marc
I have qmail +uvscan installed under openBSD
3.3
It was working when it was openBSD 3.2.
I recompile qmail-scanner, cpan modules and it is
not working.
# ./test_installation.sh -doitsetting
QMAILQUEUE to /var/qmail/bin/qmail-scanner-queue.pl for this
test...
Sending standard test
-Original Message-
From: Jennifer Fountain [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 1:41 PM
To: Dallas L. Engelken
Subject: RE: [Qmail-scanner-general]problems with SA
this is the only thing in my scanner_array:
my @scanner_array=(clamscan_scanner);
so I
Title: Re: [Qmail-scanner-general]qmail-scanner error
Youre probably not invoking qmail-scanner from tcpserver (or whatever your equivalent is).
-marc
On 27/8/03 14:33, Ricardo Souza [EMAIL PROTECTED] wrote:
I have qmail +uvscan installed under openBSD 3.3
It was working when it was openBSD
Hi There,
Since i'm new to qmail-scanner, i am having a very
strange problem here.
I've installed spamassassin and ClamAv on a RH9
system.
So far so good!!
Also installed qmail-scanner, wich went smoothly ..
changed the settings in qmail replaced the qmail-scanner.pl script and restarted
Title: Re: [Qmail-scanner-general]qmail-scanner error
but at this time, only to test i need to invoke
it?
- Original Message -
From:
Marc
Nicholas
To: Ricardo Souza ; [EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 4:01
PM
Subject: Re:
On Fri, Aug 22, 2003 at 12:48:26PM +0300, Pasi Kärkkäinen wrote:
The server version has a scanning daemon which is running continuously,
making scanning much faster. Workstation version comes without the
daemon component.
Hmm.. the scanning daemon seems to be in the workstation version
PS: here the new output of fsav --version : I guess it's just
because a small parsing issue in the ./configure script that
the version file is empty:
---
fsav --version
F-Secure Anti-Virus for Linux version 4.51 build 2312
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.
Title: Re: [Qmail-scanner-general]qmail-scanner error
(I miss read the message...ignore my comment!)
-marc
On 27/8/03 15:01, Marc Nicholas [EMAIL PROTECTED] wrote:
Youre probably not invoking qmail-scanner from tcpserver (or whatever your equivalent is).
-marc
On 27/8/03 14:33, Ricardo
Like so many others, with the recent flood of SoBig spam coming through
our server, I decided to turn on qmail-scanner.
Our box handles about 300,000 incoming messages per day to around 10k
users. As soon as I enabled the scanner it basically brought our server
to it's knees, using every last
-Original Message-
From: Nick Lomonte [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 3:14 PM
To: [EMAIL PROTECTED]
Subject: [Qmail-scanner-general]performance issue
Like so many others, with the recent flood of SoBig spam
coming through our server, I decided to
-Original Message-
From: Jennifer Fountain [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 4:15 PM
To: Dallas L. Engelken; [EMAIL PROTECTED]
Subject: RE: [Qmail-scanner-general]problems with SA
I just confirmed. Although, I didn't install Spamassassin
prior to the
Hi!
I'm not quite sure where to put this, that's why it is cross-posted to both
mailing-lists.
Anyway, I wonder whether a sort-of domain setup is possible with
qmail-scanner and SpamAssassin ? What I want to achieve, is that all mail
for a specific domain uses its own bayesian database - and
25 matches
Mail list logo
