Re: [AMaViS-user] False positive

. amavis-release should be in /usr/sbin/ -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com -- Download new Adobe(R) Flash(R) Builder(TM) 4 The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4

Re: [AMaViS-user] Pharmacy / Chemical industry

/spam. There are fp options for clamav, and you can adjust scores in spamassassin as needed. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com -- Download new Adobe(R) Flash(R) Builder(TM) 4

Re: [AMaViS-user] Message banned due to mime type

those extensions inside the zip file. It appears that you need to use banned_namepath_re to do this, but I have yet to unravel the secrets of that regex. If I could, I'd use it to allow .emf and .wmf only in .docx files (and ban them in other archives or standalone) -- Daniel J McDonald, CCIE

[AMaViS-user] Exceeded storage quota?

)) -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment

Re: [AMaViS-user] Updated sa config to use with spam_score_maps?

On Fri, 2009-10-16 at 13:47 -0400, Ricardo Stella wrote: The latest version added several virus_name_to_spam_score_maps. Does anyone have a corresponding spamassassin config file? The one from the list archives (amavis-sanesecurity_v2.cf) is missing several of the recently added ones,

Re: [AMaViS-user] How to examine the quarantine

. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment

[AMaViS-user] UNCHECKED with pgp

as UNCHECKED ? -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design

Re: [AMaViS-user] amavis stopped to work, help!

connect to UNIX socket /var/run/clamav/clamd.ctl: Conexi\303\263n rechazada) at (eval 42) line 266. Jul 23 11:00:49 pc009 amavis[12335]: (12335-02) WARN: all primary virus scanners failed, considering backup clamd stopped. Restart the clamd service and you should be fine. -- Daniel J

[AMaViS-user] Pre-Loading additional modules

statement properly? Amavisd-new version 2.5.2 on Mandriva Corporate Server 4.0 -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - This SF.net email is sponsored by DB2 Express

Re: [AMaViS-user] OS Fingerprinting

of the p0f signatures. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take

[AMaViS-user] False positive BANNED on message using charset GB2312

3733 100 3839 3132 3137 3636 2020 d020 cfed c9c8 110 0afa e7b5 d3d7 cad3 e4cf 203a 7578 6168 120 6669 6e65 3667 3838 3140 3632 632e 6d6f 130 2020 000a 133 -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http

Re: [AMaViS-user] amavis-stats: Hand-over, Archiving, Redirection

it keeps working. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take

Re: [AMaViS-user] Problems with Amavis and URIDNSBL plugin in SA

modules. Maybe two months ago. If you don't want to upgrade amavisd-new to 2.5, then you should go back and scour the archives. Luix -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

[AMaViS-user] amavis-stats specfile?

spec file I'd greatly appreciate not having to re-invent the wheel. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - This SF.net email is sponsored by DB2 Express Download DB2

Re: [AMaViS-user] How to print running configuration?

that a variable has the value I imagine and I'd like to check at runtime. ok... perl -d /usr/sbin/amavisd 1 b (some point in the code where everything is defined) 2 r 3 p $warnvirussender -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

Re: [AMaViS-user] razor and connection resets?

? Outgoing TCP port 2703 (Razor2), only. Previous versions used TCP port 7 (echo), but this is no longer used. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

Re: [AMaViS-user] The ruleset that wouldn't die!

On Thu, 2007-02-08 at 14:52 -0900, Joshua J. Kugler wrote: [Possibly the wrong list?] Several days ago, I started getting warnings about the update failing for Matt Kettler's AntiDrug ruleset. Digging in, I read the warnings in the file as well as the fact that the ruleset is no longer

Re: [AMaViS-user] plain text mail banned as .EXE ???

system (Human-5, if memory serves). it was ok, though, since the messages were spam telling our users about a HUGE sale -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - Take

Re: [AMaViS-user] amavis

file that had some obsolete entries. I updated it from the current bogon list and forgot to remove 127.0.0.1/8. Mail from remote sites was being delivered fine, while mail from localhost died... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

Re: [AMaViS-user] amavisd-new-2.4.4 RELEASE CANDIDATE 1 is available

, syntax, missing, and multiple. But it would be nice to have definitions for those... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - Using Tomcat but need to do more? Need

Re: [AMaViS-user] MANY directories in amavis/tmp

down some now, Greylisting has cut the number of concurrent sessions I need to maintain. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com - Using Tomcat but need to do more? Need

Re: [AMaViS-user] Can't update rules for spamassassin

that deleting everything in the /etc/mail/spamassassin/RulesDuJour/ directory, then re-running the rulesdujour script, cleans it all up. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

Re: [AMaViS-user] cannot find p0f-analyser.pl for amavisd-new 2.4.2

PROTECTED] mail]$ rpm -ql amavisd-new | grep p0f /usr/sbin/p0f-analyzer.pl -- Daniel J McDonald, CCIE #2495, CNX, CISSP #78281 Austin Energy gpg Key: http://austinnetworkdesign.com/pgp.key Key fingerprint = B527 F53D 0C8C D38B DCC7 901D 2F19 A13A 22E8 A76A Using Tomcat but need to do more

Re: [AMaViS-user] three questions

/.spamassassin/user_prefs ? /etc/mail/spamassassin/x.cf - does amavisd have to be restarted if any changes are made in /etc/mail/spamassassin/local.cf or ~amavis/.spamassassin/user_prefs ? yes -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED

Re: [AMaViS-user] Killing mails with spam hit superior to 9.00

if at, or above that level$sa_tag2_level_deflt = 4.5; # add 'spam detected' headers at that level $sa_kill_level_deflt = 9.0; # triggers spam evasive actions $final_spam_destiny = D_DISCARD; -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED

Re: [AMaViS-user] exe in zip file

will be encountered first and rules for zip members won't be tried. -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED] --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San

Re: [AMaViS-user] exe in zip file

On Thu, 2005-09-08 at 17:56 +0530, KISHOR.MV wrote: Hi How about encypted/password protected zip files which may contains documents I tried the below option [ qr'^\.(zip|rar)$'= 0 ], # allow any within such archives And it still deletes it as virus Then looking at Banned files won't help.

Re: [AMaViS-user] User complaints of spam

=DATE_IN_FUTURE_96_XX, SUBJ_HAS_UNIQ_ID, UPPERCASE_25_50 I should probably hit them with 3 points or so... -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED] --- SF.Net email is Sponsored by the Better Software Conference

Re: [AMaViS-user] Activated razor2, but how to make sure it works?

2.75 Then, watch for RAZOR messages in the log (assuming log level 2): sa:root[~] $grep -c RAZOR2_CHECK /var/log/mail/info 43552 -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED] --- SF.Net email