[AMaViS-user] Connection refused
Hi, I have a problem that stop delivery mails, in log file: Oct 20 11:29:25 mail amavisd: Avvio amavisd succeeded Oct 20 11:29:39 mail ntpd[3187]: synchronized to 138.195.xxx.xxx, stratum 2 Oct 20 11:35:34 mail amavisd: Chiusura amavisd failed Oct 20 11:35:36 mail runuser: Couldn't find pid in existing pid_file at /usr/lib/perl5/vendor_perl/5.8.5/Net/Server/Daemonize.pm line 61. Oct 20 11:35:36 mail amavisd: Avvio amavisd succeeded Oct 20 11:40:04 mail postfix/qmgr[3423]: 767CA8309FA: from=[EMAIL PROTECTED], size=1325, nrcpt=1 (queue active) Oct 20 11:40:04 mail postfix/qmgr[3423]: 767CA8309FA: to=[EMAIL PROTECTED], relay=none, delay=2, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: Connection refused) I have this mail server from one year and I haven't nobody problems, I use this version: - amavisd-new-2.3.2-1.1 - postfix-2.1.5-5 - clamav-0.88.5 - spamassassin-3.0.4-1 Thanks. -- Salvatore. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Connection refused
Hi, sorry for my banal question, I have solved with: #rm /var/amavis/amavisd.pid Thanks. -- Salvatore. - Original Message - From: Admin pixteam.biz [EMAIL PROTECTED] To: amavis-user@lists.sourceforge.net Sent: Friday, October 20, 2006 12:18 PM Subject: [AMaViS-user] Connection refused Hi, I have a problem that stop delivery mails, in log file: Oct 20 11:29:25 mail amavisd: Avvio amavisd succeeded Oct 20 11:29:39 mail ntpd[3187]: synchronized to 138.195.xxx.xxx, stratum 2 Oct 20 11:35:34 mail amavisd: Chiusura amavisd failed Oct 20 11:35:36 mail runuser: Couldn't find pid in existing pid_file at /usr/lib/perl5/vendor_perl/5.8.5/Net/Server/Daemonize.pm line 61. Oct 20 11:35:36 mail amavisd: Avvio amavisd succeeded Oct 20 11:40:04 mail postfix/qmgr[3423]: 767CA8309FA: from=[EMAIL PROTECTED], size=1325, nrcpt=1 (queue active) Oct 20 11:40:04 mail postfix/qmgr[3423]: 767CA8309FA: to=[EMAIL PROTECTED], relay=none, delay=2, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: Connection refused) I have this mail server from one year and I haven't nobody problems, I use this version: - amavisd-new-2.3.2-1.1 - postfix-2.1.5-5 - clamav-0.88.5 - spamassassin-3.0.4-1 Thanks. -- Salvatore. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] can't keep up...
Setup is via dual-sendmail and latest amavisd. It seems that the ammount of spam received is too much and basically I have sendmail accepting more mail that it can process... Our sendmail-rx takes everything (does have some rate limits in place) but do not do any RBLs nor username checks. We are still running the latest SA 3.0.x but will switch soon to 3.1.x. No immediate plans to switch to postfix (although this might change if we need to add support for spf). Would going to sendmail-milter help with this ? I might have to do RBLs if not (suggestions for this ?) Is there anyone with good experience in a dual setup that can provide some pointers with regards on setting up more restrictions on the sendmail-rx part of it ? Timing looks ok, with over 75% of it being SA which has some safe rules from the SARE ninjas and also Fred rules. We get about 300K messages per day, with 90% of it being spam Hardware probably needs to be upgraded at this point (P4 3.0ghz, 2Gb RAM - 2 boxes). -- °(((=((===°°°(((=== - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Spam with embedded gif...
Hi all, We are using amavisd-new (Spamassasin, DCC, Pyzor) and postgrey, on a Centos 4.3 server. Running for over a year, no problem. Recently, we are receiving more and more spam with embedded Gif. What are the best settings to block that type of spam? Regards, François - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Francois Meehan [EMAIL PROTECTED] [2006-10-20 12:19]: Recently, we are receiving more and more spam with embedded Gif. What are the best settings to block that type of spam? I recently added the fuzzyocr spamassassin plugin into the mix and I really like it. http://wiki.apache.org/spamassassin/FuzzyOcrPlugin http://www200.pair.com/mecham/spam/image_spam.html http://dev.davidnet.hu/gentoo-portage/fuzzyocr-gentoo-3.tar.bz2 is a link to an updated ebuild, if you are running Gentoo. Shane -- Shane Hickey [EMAIL PROTECTED]: Network/System Consultant GPG KeyID: 777CBF3F Key fingerprint: 254F B2AC 9939 C715 278C DA95 4109 9F69 777C BF3F - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Shane Hickey wrote: Francois Meehan [EMAIL PROTECTED] [2006-10-20 12:19]: Recently, we are receiving more and more spam with embedded Gif. What are the best settings to block that type of spam? I recently added the fuzzyocr spamassassin plugin into the mix and I really like it. http://wiki.apache.org/spamassassin/FuzzyOcrPlugin http://www200.pair.com/mecham/spam/image_spam.html http://dev.davidnet.hu/gentoo-portage/fuzzyocr-gentoo-3.tar.bz2 is a link to an updated ebuild, if you are running Gentoo. Shane What's the performance hit ? TIA... -- °(((=((===°°°(((=== - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Ricardo, fuzzyocr spamassassin plugin into the mix and I really like it. What's the performance hit ? It is quite hefty, somewhat instable, but worth it if you can afford it. A very lightweight but still quite effective against picture spam is ImageInfo plugin: ImageInfo.pm (plugin) - http://www.rulesemporium.com/plugins/ImageInfo.pm imageinfo.cf (ruleset) - http://www.rulesemporium.com/plugins/imageinfo.cf Mark - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] can't keep up...
Ricardo, Setup is via dual-sendmail and latest amavisd. It seems that the ammount of spam received is too much and basically I have sendmail accepting more mail that it can process... Our sendmail-rx takes everything (does have some rate limits in place) but do not do any RBLs nor username checks. We are still running the latest SA 3.0.x but will switch soon to 3.1.x. Rejecting mail addressed to nonexistent local users is paramount. I see two possible directions: add more servers to the mix, or go for greylisting. I still manage to do without graylisting, hope it stays that way, but it a single major tool to cut down the traffic reaching SA without doing too much harm. No immediate plans to switch to postfix (although this might change if we need to add support for spf). Mentioning SPF on a Postfix list is banned :) The future is supposed to be in DKIM, but there's still a long way to go. Would going to sendmail-milter help with this ? Not much. SA is the major burden, you can only escape it by not letting it see all the traffic (RBL, greylisting, rejecting mail to nonexistent users, sender address verification, ...) I might have to do RBLs if not (suggestions for this ?) RBLs impose higher risks of rejecting valid mail than greylisting. In my view RBLs only belongs into SA rules, otherwise one is putting (arbitraty) decisions into foreign hands with little control over it. Is there anyone with good experience in a dual setup that can provide some pointers with regards on setting up more restrictions on the sendmail-rx part of it ? Timing looks ok, with over 75% of it being SA which has some safe rules from the SARE ninjas and also Fred rules. We get about 300K messages per day, with 90% of it being spam Hardware probably needs to be upgraded at this point (P4 3.0ghz, 2Gb RAM - 2 boxes). When you switch to 3.1.x don't forget the sa-update rules. Mark - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
On Fri, Oct 20, 2006 at 06:49:52PM +0200, Mark Martinec wrote: Ricardo, fuzzyocr spamassassin plugin into the mix and I really like it. What's the performance hit ? It is quite hefty, somewhat instable, but worth it if you can afford it. Though you need to remember that it is only run, when there is images to scan. Yesterday, from 14989 messages scanned, 134 were checked by FuzzyOCR. Each of those takes maybe 5-20 seconds, depending on how many ocr runs you like. Or maybe we are a statistical anomality? :) Cheers, Henrik - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] OT: Amavis-stats missing (weekly/monthly..) text display
Hi, I installed amavis-stats 0.1.21, I can look at the weekly/monthly..statistics fine. But the weekly/monthly...text are displayed as question mark from Safari, red cross mark from IE, nothing in FireFox. I read some old thread from here, someone suggested downgrade php, someone offered a patch. I tried the patch, not working though. Anybody could clue me in. There is no php error log in apache log. I am running php-5.1.6/apache-2.2.3. Vincent Li http://pingpongit.homelinux.com Opensource .Implementation. .Consulting. Platform.Fedora. .Debian. .Mac OS X. Bloghttp://bl0g.blogdns.com - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] can't keep up...
Mark Martinec wrote: Ricardo, Setup is via dual-sendmail and latest amavisd. It seems that the ammount of spam received is too much and basically I have sendmail accepting more mail that it can process... Our sendmail-rx takes everything (does have some rate limits in place) but do not do any RBLs nor username checks. We are still running the latest SA 3.0.x but will switch soon to 3.1.x. Rejecting mail addressed to nonexistent local users is paramount. I see two possible directions: add more servers to the mix, or go for greylisting. I still manage to do without graylisting, hope it stays that way, but it a single major tool to cut down the traffic reaching SA without doing too much harm. I don't handle the mail servers - only the anti-spam/virus stuff. I've been pushing for some time to get up-to-date and valid user listsings autoupdated for some time, but it's been way to slow... The thing was that allowing only valid users would basically provide verification of valid email addresses. Since we forward the mail to the final mail store servers, would milter help in this regard ? Ie, would the message be denied since the destination server would rejected it as the user is unkown ? I believe milter now is mature enough and allows the addition of x-spam-status to the message, right ? I think I can get funding to get new hardware. Looking at a couple of Xeon Dual Core dual proc. boxes with more memory and 15K scsi disks. I might have to do RBLs if not (suggestions for this ?) RBLs impose higher risks of rejecting valid mail than greylisting. In my view RBLs only belongs into SA rules, otherwise one is putting (arbitraty) decisions into foreign hands with little control over it. That's been my major concern. I do need to look more into greylisting though. Is this something possible on a sendmail-dual scenario or even milter? Also, what about adding a milter to sendmail-rx - is this possible ? -- °(((=((===°°°(((=== - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Henrik Krohns wrote: Yesterday, from 14989 messages scanned, 134 were checked by FuzzyOCR. Each of those takes maybe 5-20 seconds, depending on how many ocr runs you like. I implemented it last week with similar results. I think it is an excellent product. Hopefully the gocr (OCR piece) component will improve over time. FYI, if you do install it, most people have better luck with gocr .40 with the patch available from the fuzzyocr site, as opposed to gocr .41. -Matthew - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] can't keep up...
Ricardo, I don't handle the mail servers - only the anti-spam/virus stuff. I've been pushing for some time to get up-to-date and valid user listsings autoupdated for some time, but it's been way to slow... The thing was that allowing only valid users would basically provide verification of valid email addresses. Since we forward the mail to the final mail store servers, would milter help in this regard ? Ie, would the message be denied since the destination server would rejected it as the user is unkown ? Don't know how that can be handled best in sendmail, I'm only aware of statical table of valir users. Likely there are other choices. With Postfix there are a couple of choices, like shared SQL or LDAP database of users accessible from all MX hosts, or if that is not possible, use of address verification probes, which query the next MTA if address is valid - this happens during original SMTP session and only if the answer is not yet in a cache. I believe milter now is mature enough and allows the addition of x-spam-status to the message, right ? You mean invoking amavisd-new through milter interface? I wouldn't recommend it, there are limitations in functionality and poor control on load, which can be fatal on an already heavily loaded system. I think I can get funding to get new hardware. Looking at a couple of Xeon Dual Core dual proc. boxes with more memory and 15K scsi disks. It is probably cheaper to get more of consumer grade boxes with SATA II disks then a single high-grade box. I wouldn't recommend this for MTA host, but I think it is perfectly acceptable for running amavisd-new + SA, as a loss of a host would not imply a loss of messages. SA is mostly CPU and memory hungry, somewhat slower disks don't matter that much. That's been my major concern. I do need to look more into greylisting though. Is this something possible on a sendmail-dual scenario or even milter? Also, what about adding a milter to sendmail-rx - is this possible ? You can attach milters to sendmail-rx, no problem. I'm sure there is a greylisting milter available, although I never bothered to look. Mark - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Matthew wrote: FYI, if you do install it, most people have better luck with gocr .40 with the patch available from the fuzzyocr site, as opposed to gocr .41. -Matthew That jives with my experience too. Gary V - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] can't keep up...
On Fri, Oct 20, 2006 at 02:50:21PM -0400, Ricardo Stella ([EMAIL PROTECTED]) wrote: I've been pushing for some time to get up-to-date and valid user listsings autoupdated for some time, but it's been way to slow... The thing was that allowing only valid users would basically provide verification of valid email addresses. That's silly. What happens with nonexistent addresses in the mail store servers now? If they send DSN messages that also provides verification, if they silently discard the messages you could just as well do that in sendmail-rx. Since we forward the mail to the final mail store servers, would milter help in this regard ? Ie, would the message be denied since the destination server would rejected it as the user is unkown ? You don't need milter for that. All you need is virtusertable in sendmail-rx with all known addresses and wildcard, which can either reject or discard unknown addresses. Easy, fast and efficient. I believe milter now is mature enough and allows the addition of x-spam-status to the message, right ? While I haven't followed amavisd-new milter setup progress lately, the major problem with it when I last looked was performance. -- Tapani Tarvainen - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
On 10/21/06, Gary V [EMAIL PROTECTED] wrote: Matthew wrote: FYI, if you do install it, most people have better luck with gocr .40 with the patch available from the fuzzyocr site, as opposed to gocr .41. -Matthew That jives with my experience too. Ditto. I had terrible results with gocr .41 and with gocr .40 it's working pretty nice on a very busy gateway. Perfomance impact is not too big. The hash saving database is actually helping a lot. Here's some statistics from our gateway - it's detecting about 400.000 spam messages per day (you will see that only small percentage is ran through fuzzyOCR): $ zgrep FUZZY_OCR messages.gz | wc -l 18536 $ zgrep FUZZY_OCR_KNOWN_HASH messages.gz | wc -l 12568 Bojan - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/