Re: [AMaViS-user] skipped check of .gif.exe attachment

2006-11-01 Thread Henrik Krohns
On Wed, Nov 01, 2006 at 08:50:48AM +0100, Jakob Curdes wrote:
 Patrick T. Tsang schrieb:
 
 
  The .exe is banned in amavis but it still penetrates to the mailboxes.
  in /etc/amavisd.conf:
  ...
  # block certain double extensions anywhere in the base name
  qr'\.[^./]*\.(vbs|pif|scr|bat|cmd|com|cpl|dll|exe)\.?$'i, 
 
 The comment text claims too much, the expression blocks any occurrence
 of .exe in the name, not any occurence of exe.
 The latter would be dangerous because it might well be part of a
 legitimate file name aka executive summary. Please have a look at the
 new blocking syntax in the sample config provided with amavisd-new; by
 combination of rules you will be able to block this case.

Such attachment can not be executed because it's not .exe (is there some
silly client that removes the spaces?), but it's easy to block. Just add
check for optional whitespace (\s*):

qr'\.[^./]*\.\s*(vbs|pif|scr|bat|cmd|com|cpl|dll|exe)\.?$'i,

Cheers,
Henrik

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] approaches to wiring in list managers?

2006-11-01 Thread Miles Fidelman
Hi Folks,

I was just fine-tuning some of my anti-virus/spam software and realized 
that my current setup is horribly inefficient.

My machine is used primarily for email list management.  I use Sympa, 
but I believe which list manager is irrelevant.

My setup is pretty standard:
Linux (Debian)
Postfix
amavisd-new
spamassassin
clamAV

And then I add Sympa to the mix.

Every message is scanned on it's way into to the system, before being 
passed on for delivery - i.e., the messages that reach the list manager 
are already scanned.

But... the list manager then generates lots and lots of messages from 
each original, and re-inserts all of them into the mail system via a 
basic sendmail  statement (executed, of course, by Postfix).  The result 
is that each of these copies is needlessly run through the scanning 
process - which is an awful waste of resources.

There's got to be a better way.  Can anybody suggest one?  (Note: of 
course then I'll have to figure out how to deal with messages posted via 
Sympa's web interface.)

Thanks much,

Miles

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] ANN: German Postfix - amavisd-new Howto

2006-11-01 Thread Patrick Ben Koetter
All (German readers),

I've written a Howto Amavisd-new In Postfix Integrieren, which is available
at http://postfix.state-of-mind.de/patrick.koetter/amavisd-new/.

It covers various ways to integrate amavisd-new into the Postfix mail delivery
process.

[EMAIL PROTECTED]

-- 
state of mind
Agentur für Kommunikation und Design

Patrick KoetterTel: 089 45227227
Echinger Strasse 3 Fax: 089 45227226
85386 Eching   Web: http://www.state-of-mind.de

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Re: [AMaViS-user] approaches to wiring in list managers?

2006-11-01 Thread Gary V
Miles wrote:

 Hi Folks,

 I was just fine-tuning some of my anti-virus/spam software and realized 
 that my current setup is horribly inefficient.

 My machine is used primarily for email list management.  I use Sympa, 
 but I believe which list manager is irrelevant.

 My setup is pretty standard:
 Linux (Debian)
 Postfix
 amavisd-new
 spamassassin
 clamAV

 And then I add Sympa to the mix.

 Every message is scanned on it's way into to the system, before being 
 passed on for delivery - i.e., the messages that reach the list manager 
 are already scanned.

 But... the list manager then generates lots and lots of messages from 
 each original, and re-inserts all of them into the mail system via a 
 basic sendmail  statement (executed, of course, by Postfix).  The result 
 is that each of these copies is needlessly run through the scanning 
 process - which is an awful waste of resources.

 There's got to be a better way.  Can anybody suggest one?  (Note: of 
 course then I'll have to figure out how to deal with messages posted via 
 Sympa's web interface.)

 Thanks much,

 Miles

I think all you would need to do either disable content_filter or
override content_filter and use a policy bank for the pickup service.
http://www200.pair.com/mecham/spam/bypassing.html#11

Gary V


-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Amavis closing SMTP connections prematurely?

2006-11-01 Thread Gary V
_AA_ wrote:

 Originally posted here: http://forums.gentoo.org/viewtopic-t-512336.html

 Hope someone can help me with this.

  Setup
  AMD64, postfix, mysql, courierauth, amavis, spamassassin and clamav
 doing virtual mailboxes.



  Now the mail system works perfectly until I add amavis.

  This is what happens once amavis is thrown into the equation:



  elvira ~ # telnet 127.0.0.1 10024
  Trying 127.0.0.1...
  Connected to 127.0.0.1.
  Escape character is '^]'.
  220 [127.0.0.1] ESMTP amavisd-new service ready
  ehlo localhost
  250-[127.0.0.1]
  250-VRFY
  250-PIPELINING
  250-SIZE
  250-ENHANCEDSTATUSCODES
  250-8BITMIME
  250-DSN
  250 XFORWARD NAME ADDR PROTO HELO
  MAIL FROM: [EMAIL PROTECTED]
  250 2.1.0 Sender [EMAIL PROTECTED] OK
  RCPT TO: [EMAIL PROTECTED]
  421 4.3.2 Service shutting down, closing channel
  Connection closed by foreign host.
  elvira ~ # 

  SMTP error code 421: The service is not available and the connection
 will be closed.




 In /var/log/messages :

 elvira amavis[5281]: (05281-01) (!) lookup_sql: sql exec: err=1146,
 S1000, DBD::mysql::st execute failed: Table 'vmail_db.policy' doesn't
 exist at (eval 38) line 138, line 3., 1146, Table 'vmail_db.policy'
 doesn't exist
 Oct 31 22:05:17 elvira amavis[5281]: (05281-01) (!!) TROUBLE in
 process_request: sql exec: err=1146, S1000, DBD::mysql::st execute
 failed: Table 'vmail_db.policy' doesn't exist at (eval 38) line 138,
 line 3. at (eval 41) line 262, line 3.
  Oct 31 22:05:17 elvira amavis[5281]: (05281-01) (!) Requesting
 process rundown after fatal error
  Oct 31 22:05:17 elvira amavis[5336]: TIMING [total 5 ms] - bdb-open:
 5 (100%)100, rundown: 0 (0%)100



From /etc/amavisd.conf

 @lookup_sql_dsn =
 ( ['DBI:mysql:database=vmail_db;host=127.0.0.1;port=3306',
 'vmail_user', 'vmail_password'] );


 Why is it looking for a policy table when I have not set up per
 recipient policies?

 Any help would be muchly appreciated. Ta.

 P.S. I followed this guide (amongst others):
 http://gentoo-wiki.com/HOWTO_Spam_Filtering_with_Gentoo,_Postfix,_Amavis

Amavisd-new by default has its own database structure as shown in:
http://www.ijs.si/software/amavisd/README.sql.txt

http://www.ijs.si/software/amavisd/release-notes.txt
added some support for non amavisd-new tables - search for:
- added global configuration variables $sql_lookups_no_at_means_domain

If using a table not designed for amavisd-new, you also need to change
$sql_select_policy. There are a couple examples in amavisd.conf-sample
included with 2.4.3.

The default is:
#   $sql_select_policy = 'SELECT *,users.id FROM users,policy'.
# ' WHERE (users.policy_id=policy.id) AND (users.email IN (%k))'.
# ' ORDER BY users.priority DESC';

and a sample:

# Here is an example of a SELECT clause that fabricates an artificial 'users'
# table from actual table 'postfix_domains' containing a field 'domain_name'.
# The effect is that domains listed in the 'postfix_domains' table will be
# treated as local by amavisd, and be given settings from a policy id 99
# if such a policy id exists, or just fall back to static lookups.
# The user.id (with a value 1) is there only to provide a user id (same id
# for all listed domains) when global SQL-based white/blacklisting is used.
#
# $sql_lookups_no_at_means_domain = 1;
# $sql_select_policy =
#   'SELECT *, user.id'.
#   ' FROM (SELECT 1 as id, 99 as policy_id, Y AS local'.
# ' FROM postfix_domains WHERE domain_name IN (%k)) AS user'.
#   ' LEFT JOIN policy ON policy_id=policy.id';

Gary V


-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] approaches to wiring in list managers?

2006-11-01 Thread Miles Fidelman
Thanks!  That looks like the approach I'm looking for.

Gary V wrote:
 Miles wrote:

   
 Hi Folks,
 

   
 I was just fine-tuning some of my anti-virus/spam software and realized 
 that my current setup is horribly inefficient.
 

   
 My machine is used primarily for email list management.  I use Sympa, 
 but I believe which list manager is irrelevant.
 

   
 My setup is pretty standard:
 Linux (Debian)
 Postfix
 amavisd-new
 spamassassin
 clamAV
 

   
 And then I add Sympa to the mix.
 

   
 Every message is scanned on it's way into to the system, before being 
 passed on for delivery - i.e., the messages that reach the list manager 
 are already scanned.
 

   
 But... the list manager then generates lots and lots of messages from 
 each original, and re-inserts all of them into the mail system via a 
 basic sendmail  statement (executed, of course, by Postfix).  The result 
 is that each of these copies is needlessly run through the scanning 
 process - which is an awful waste of resources.
 

   
 There's got to be a better way.  Can anybody suggest one?  (Note: of 
 course then I'll have to figure out how to deal with messages posted via 
 Sympa's web interface.)
 

   
 Thanks much,
 

   
 Miles
 

 I think all you would need to do either disable content_filter or
 override content_filter and use a policy bank for the pickup service.
 http://www200.pair.com/mecham/spam/bypassing.html#11

 Gary V


 -
 Using Tomcat but need to do more? Need to support web services, security?
 Get stuff done quickly with pre-integrated technology to make your job easier
 Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
 http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
 ___
 AMaViS-user mailing list
 AMaViS-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/amavis-user
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
 AMaViS-HowTos:http://www.amavis.org/howto/
   


-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] approaches to wiring in list managers?

2006-11-01 Thread Mark Burdick
One of the things the I like to do is use IPTABLES on a Linux machine to 
redirect certain mailers (that I trust implicitly and KNOW that they 
can't send infected e-mails) to port 10025 on the box w/ Amavis.

This allows me to not have to worry about sender, recipient, domains, 
whatever... I know that the originating server is clean and protected, 
so I ship it right to the I've already been scanned, thank you port of 
my mail server.

Of course, this assumes a few things:

- Your machine w/ amavis is running a new-enough version of Linux to 
have IPTABLES (although, you could do something similar with the older 
kernel and IPCHAINS)
- You can trust the originating server for ALL mail messages it originates
- You are running  Postfix as your MTA on the Amavis box, and are using 
10025 as the backside port that doesn't do content filtering
- Your secondary port of Postfix is listening on an IP Address that the 
originating server can reach.
- You have added the originating server's IP Address to the list of 
hosts to relay for in the config of the secondary port.

- Mark

Gary V wrote:
 Miles wrote:

   
 Hi Folks,
 

   
 I was just fine-tuning some of my anti-virus/spam software and realized 
 that my current setup is horribly inefficient.
 

   
 My machine is used primarily for email list management.  I use Sympa, 
 but I believe which list manager is irrelevant.
 

   
 My setup is pretty standard:
 Linux (Debian)
 Postfix
 amavisd-new
 spamassassin
 clamAV
 

   
 And then I add Sympa to the mix.
 

   
 Every message is scanned on it's way into to the system, before being 
 passed on for delivery - i.e., the messages that reach the list manager 
 are already scanned.
 

   
 But... the list manager then generates lots and lots of messages from 
 each original, and re-inserts all of them into the mail system via a 
 basic sendmail  statement (executed, of course, by Postfix).  The result 
 is that each of these copies is needlessly run through the scanning 
 process - which is an awful waste of resources.
 

   
 There's got to be a better way.  Can anybody suggest one?  (Note: of 
 course then I'll have to figure out how to deal with messages posted via 
 Sympa's web interface.)
 

   
 Thanks much,
 

   
 Miles
 

 I think all you would need to do either disable content_filter or
 override content_filter and use a policy bank for the pickup service.
 http://www200.pair.com/mecham/spam/bypassing.html#11

 Gary V


 -
 Using Tomcat but need to do more? Need to support web services, security?
 Get stuff done quickly with pre-integrated technology to make your job easier
 Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
 http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
 ___
 AMaViS-user mailing list
 AMaViS-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/amavis-user
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
 AMaViS-HowTos:http://www.amavis.org/howto/


   

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] msgs table full?

2006-11-01 Thread Kenneth Kalmer
Hi list

This is my first post to the list, please bear with me if I'm missing
some critical information here.

We've suddenly had a weird issue with out amavis installation, where
DBD::mysql reports our tables in the amavisd db as being 'full'. I
cannot understand we on earth it would do this, granted that users on
this list have reported database size in excess of 60GB.

Below is some additional information, starting with the log file excerpt:

maillog
Nov  1 20:09:34 mx-0 amavis[27148]: storage and lookups will use the
same connection to SQL
Nov  1 20:09:34 mx-0 amavis[27144]: (27144-01) save_info_preliminary:
rollback done
Nov  1 20:09:34 mx-0 amavis[27144]: (27144-01) (!) WARN
save_info_preliminary: sql exec: err=1114, S1000, DBD::mysql::st
execute failed: The table 'msgs' is full at (eval 52) line 138, GEN8
line 25.
/maillog

# amavisd help
amavisd-new-2.4.1 (20060508)

mta: postfix (not-chroot'ed)
perl: 5.8.8
os: gentoo (Xen 3.0.2 domU)
mysql: Version: '5.0.26-log'  socket: '/var/run/mysqld/mysqld.sock'
port: 3306  Gentoo Linux mysql-5.0.26

# df -h
/dev/hda1 5.0G  3.8G  944M  81% /

Additional MySQL info: The MySQL tables used by amavis forms part of a
multi-master replication setup, where this specific db is both a
replication master and slave

Can anyone please advise on these errors, google has been nothing
short of useless on this one...

Thanks in advance

-- 

Kenneth Kalmer
[EMAIL PROTECTED]

[EMAIL PROTECTED] stats
http://fah-web.stanford.edu/cgi-bin/main.py?qtype=userpageusername=kenneth%2Ekalmer

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] Bypassing filtering when using SMTP with TLS

2006-11-01 Thread bsd
Hello,

I would like to bypass filtering (as when posting from my local  
networks) when users are authenticated with SSL - TLS.

Nov  1 21:02:06 newmail postfix/smtpd[25021]: connect from me.xyz.biz 
[82.62.91.222]
Nov  1 21:02:06 newmail postfix/smtpd[25021]: setting up TLS  
connection from me.xyz.biz[82.62.91.222]
Nov  1 21:02:06 newmail postfix/smtpd[25021]: TLS connection  
established from me.xyz.biz[82.62.91.222]: TLSv1 with cipher AES128- 
SHA (128/128 bits)
Nov  1 21:02:06 newmail postfix/smtpd[25021]: DB45A2A34E:  
client=me.xyz.biz[82.62.91.222], sasl_method=PLAIN, sasl_username=bob01


How could I do that / is it possible ?


Sincerly yours.


«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§


P Please consider your environmental responsibility before printing  
this e-mail



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Bypassing filtering when using SMTP with TLS

2006-11-01 Thread Miles Fidelman
funny thing, I asked a related question last week - focused on turning 
off just SPF checks - but most of the answers still applied

take a look at the archives for [EMAIL PROTECTED] - around 10/30

bsd wrote:
 Hello,

 I would like to bypass filtering (as when posting from my local  
 networks) when users are authenticated with SSL - TLS.

 Nov  1 21:02:06 newmail postfix/smtpd[25021]: connect from me.xyz.biz 
 [82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: setting up TLS  
 connection from me.xyz.biz[82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: TLS connection  
 established from me.xyz.biz[82.62.91.222]: TLSv1 with cipher AES128- 
 SHA (128/128 bits)
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: DB45A2A34E:  
 client=me.xyz.biz[82.62.91.222], sasl_method=PLAIN, sasl_username=bob01


 How could I do that / is it possible ?


 Sincerly yours.

 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 
 Gregober --- PGP ID -- 0x1BA3C2FD
 bsd @at@ todoo.biz
 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 

 P Please consider your environmental responsibility before printing  
 this e-mail



 -
 Using Tomcat but need to do more? Need to support web services, security?
 Get stuff done quickly with pre-integrated technology to make your job easier
 Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
 http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
 ___
 AMaViS-user mailing list
 AMaViS-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/amavis-user
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
 AMaViS-HowTos:http://www.amavis.org/howto/
   


-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Bypassing filtering when using SMTP with TLS

2006-11-01 Thread bsd
The solution you exposed is very tied to Postfix and I would like to  
have a solution more oriented to amavisd //


Does anyone have a solution to solve that problem with amavisd ?


Thanks anyway.

Le 1 nov. 06 à 21:30, Miles Fidelman a écrit :

 funny thing, I asked a related question last week - focused on  
 turning off just SPF checks - but most of the answers still applied

 take a look at the archives for [EMAIL PROTECTED] - around  
 10/30

 bsd wrote:
 Hello,

 I would like to bypass filtering (as when posting from my local   
 networks) when users are authenticated with SSL - TLS.

 Nov  1 21:02:06 newmail postfix/smtpd[25021]: connect from  
 me.xyz.biz [82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: setting up TLS   
 connection from me.xyz.biz[82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: TLS connection   
 established from me.xyz.biz[82.62.91.222]: TLSv1 with cipher  
 AES128- SHA (128/128 bits)
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: DB45A2A34E:   
 client=me.xyz.biz[82.62.91.222], sasl_method=PLAIN,  
 sasl_username=bob01


 How could I do that / is it possible ?


 Sincerly yours.


«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§


P Please consider your environmental responsibility before printing  
this e-mail



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Bypassing filtering when using SMTP with TLS

2006-11-01 Thread Miles Fidelman
Not me - though whatever solution you end up with is going to be tied to 
interaction between your MTA and amavisd, either:

a. your MTA bypasses amavisd entirely for authenticated sessions, or,

b. your MTA forwards enough information to amavisd that it can make a 
decision to bypass scanning - and that is very MTA dependent (for 
example, the latest version of postfix can include a header that amavisd 
can make use of, earlier versions can't)

Miles

bsd wrote:
 The solution you exposed is very tied to Postfix and I would like to 
 have a solution more oriented to amavisd //


 Does anyone have a solution to solve that problem with amavisd ?


 Thanks anyway.

 Le 1 nov. 06 à 21:30, Miles Fidelman a écrit :

 funny thing, I asked a related question last week - focused on 
 turning off just SPF checks - but most of the answers still applied

 take a look at the archives for [EMAIL PROTECTED] - around 10/30

 bsd wrote:
 Hello,

 I would like to bypass filtering (as when posting from my local  
 networks) when users are authenticated with SSL - TLS.

 Nov  1 21:02:06 newmail postfix/smtpd[25021]: connect from 
 me.xyz.biz [82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: setting up TLS  
 connection from me.xyz.biz[82.62.91.222]
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: TLS connection  
 established from me.xyz.biz[82.62.91.222]: TLSv1 with cipher AES128- 
 SHA (128/128 bits)
 Nov  1 21:02:06 newmail postfix/smtpd[25021]: DB45A2A34E:  
 client=me.xyz.biz[82.62.91.222], sasl_method=PLAIN, sasl_username=bob01


 How could I do that / is it possible ?


 Sincerly yours.

 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 
 Gregober --- PGP ID -- 0x1BA3C2FD
 bsd @at@ todoo.biz
 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 

 P Please consider your environmental responsibility before printing 
 this e-mail



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Bypassing filtering when using SMTP with TLS

2006-11-01 Thread Gary V
bsd wrote:

 Hello,

 I would like to bypass filtering (as when posting from my local  
 networks) when users are authenticated with SSL - TLS.

 How could I do that / is it possible ?

 Sincerly yours.
 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 
Gregober --- PGP ID -- 0x1BA3C2FD
 bsd @at@ todoo.biz
 
 «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§
 

http://www200.pair.com/mecham/spam/bypassing.html#10

Gary V


-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/