Re: [AMaViS-user] zero length pid file caused amavisd not to start

2010-05-09 Thread mouss
Michael Scheidell a écrit : don't know why, I can't find any log entries to tell me, and it never happened before, not on this one, or any of the others. but, amavisd stopped, (no log entries). amavisd start Missing process ID in file /var/amavis/amavisd.pid at /usr/local/sbin/amavisd

Re: [AMaViS-user] Bypassing eXE files

2010-03-14 Thread mouss
Noel Jones a écrit : On 3/13/2010 2:26 AM, Luis Daniel Lucio Quiroz wrote: What param do I have to set to avoid when user change its extension of exe files? I wonder to block if possible better by file recogition rather than a extension LD look in your amavisd.conf for the

Re: [AMaViS-user] Greeting amavis-postfix

2009-06-21 Thread mouss
Eduardo Júnior a écrit : Hi, I have set my Amavis in a independent machine, separate of postfix. But when my Amavis is reinjecting the message to postfix, it does a tcp connection to port 10025 (my config) And, i'm using smtpd_helo_required = yes, and then my Amavis must provide its

Re: [AMaViS-user] If some one can help me understand somesthing from my logs

2009-06-14 Thread mouss
Ilo Lorusso a écrit : Hi, ive run postifx-logwatch and amavis-logwatch and have the results below, something i dont understand is shouldnt the amount of Accepted message in postfix (79975 Accepted ) match the amount of Total scanned messages in amavisd-new (47106 Total messages

Re: [AMaViS-user] Receiving double the email for each message

2009-05-16 Thread mouss
LDB a écrit : Thank you Eric ... yes, the email message have the exact same times and headers. My MTA is postfix. I am using POP. My mail client is Thunderbird. Dovecot is POP/IMAP server. did you disable address rewrite before the content filter. check amavisd-new docs

Re: [AMaViS-user] No subject with spam

2009-05-16 Thread mouss
troxlinux a écrit : I solved my problem , the problema was this line @local_domains_maps = ( [.$mydomain .domain.net.ni .domain.org.ni] ) you were quoting the whole list, which makes it a single string. y changed this form @local_domains_maps = ( [.$mydomain] ) if you need to add

Re: [AMaViS-user] No subject with spam

2009-05-10 Thread mouss
troxlinux a écrit : Hi list, I am trying to configure amavisd-new 2.6.2-3.1 with spamassassin 3.2.5 + dcc +razor2+dkim , and for some reason, which is not able to identify some mail like spam, doesn't mark them , for example the test of GTUBE it doesn't put in the subject SPAM. is the

Re: [AMaViS-user] Adding Header

2009-04-16 Thread mouss
Jeff Grossman a écrit : I have just started using Postfix along with Amavis and everything appears to be running pretty well. I do have one question, and I am not sure if it relates to Amavis or to Postfix. I was running Sendmail with MIMEDefang. I had my filter in MIMEDefang configured so

Re: [AMaViS-user] What functionality does amavisd add?

2009-04-05 Thread mouss
Dmitri Snytkine a écrit : Hello! I am just wondering what are the advantages of using Amavisd over just using Spamassassin in daemon mode (spamd) I mean spamd has support for dcc, razor, pyzor, dnsrbl, SPF, DKIM You can also configure your own regex rules to check headers What does the

Re: [AMaViS-user] RCVD_ILLEGAL_IP

2009-02-01 Thread mouss
Luigi Rosa a écrit : Hi, a big Italian ISP is using 1.x.x.x for its internal network. This annoying behaviour is triggering a lot of false positive spam reports because of RCVD_ILLEGAL_IP is worth 3.196 spam points. Assuming that complaining with the folks of above-mentioned ISP is more

Re: [AMaViS-user] can not get password reminder or unsubscribe

2009-01-27 Thread mouss
Curtis a écrit : from this list. Something with the mailing list is broken. Please advise. look at the headers. they contain: List-Id: General discussion list about AMaViS amavis-user.lists.sourceforge.net List-Unsubscribe: https://lists.sourceforge.net/lists/listinfo/amavis-user,

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-29 Thread mouss
Ralf Heidenreich a écrit : Hello, before i was using amavis in post-queue mode. But due to german law, i must use amavis in pre-queue mode. How can i accelerate amavis, to use it in pre-queue mode? Ralf Alexander Wirt schrieb: Ralf Heidenreich schrieb am Montag, den 29. Dezember 2008:

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-29 Thread mouss
Henrik K a écrit : On Mon, Dec 29, 2008 at 12:15:22PM -0500, Michael Scheidell wrote: Hello, before i was using amavis in post-queue mode. But due to german law, i must use amavis in pre-queue mode. How can i accelerate amavis, to use it in pre-queue mode? \ Just curious: What is english

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-29 Thread mouss
Steve a écrit : Original-Nachricht Datum: Mon, 29 Dec 2008 12:15:22 -0500 Von: Michael Scheidell scheid...@secnap.net [snip] Just curious: What is english translation of german law, something like You must use amabisd-new in pre-queue mode under penalty of law? Sie

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-29 Thread mouss
Michael Scheidell a écrit : The point is that German law is saying that IF you take the mail, then you HAVE to deliver it. You can theoretically take the mail into queue and not deliver it but you need to get permission from the mail owner to do so. And if it comes hard on hard, then the

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-29 Thread mouss
Michael Scheidell a écrit : mouss wrote: now, what if spam is stored on an old and cheap HD? dog ate my HD. as well, I read its illegal to deliver harmful content.. like a virus. I guess we can add all forms of fraud (phishes, 419, scam). The case of falsification (forged From

[AMaViS-user] SF lists break more (Was: dkim signing issues ...)

2008-12-19 Thread mouss
Mark Martinec a écrit : [snip] SourceForge mailing lists unfortunately break signatures. Perhaps it's time to consider moving the mailing list elsewhere. They break more! see this header (will be wrapped by my mua?): They add a X-Spam-Report header but don't encode it. so when the poster has

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-17 Thread mouss
Ralf Heidenreich a écrit : Hello mouss, Hi Ralf, my idea was to let amavis decide what to do with the mails. But it is not easy, i think it is impossible. Now I have the same idea as you. I let postfix run on 2 IPs. One IP for reject, and one IP for taganddeliver. Thank you for your

Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode]

2008-12-17 Thread mouss
Ralf Heidenreich a écrit : Original-Nachricht Betreff: Re: [AMaViS-user] Amavis in pre-queue mode Datum: Wed, 17 Dec 2008 09:26:09 +0100 Von: Ralf Heidenreich r...@lx-work.de An: Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com Referenzen: 4947b648.8040...@lx-work.de

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-17 Thread mouss
Ralf Heidenreich a écrit : Hello, i think i preferr the option with two ipaddresses. and I agree with you! cheers, -- mouss -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future

Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode]

2008-12-17 Thread mouss
Steve a écrit : Hey! I am Swiss and looking what is happening over in Germany in some area just makes me shake my head. But who am I? I don't get it and probably will never get some of those strange laws. we don't yet have such laws in .fr and I don't read german, but as (I may) have said

Re: [AMaViS-user] Amavis in pre-queue mode

2008-12-16 Thread mouss
Ralf Heidenreich a écrit : Hello, i have a problem. I have a mailserver (postfix), and amavis is working. I am receiving mail for several domains. Some customers want the spam delivering mode taganddeliver or reject. I have this realized with policy banks. Amavis in post-queue mode works

Re: [AMaViS-user] Error?

2008-12-09 Thread mouss
Luis Daniel Lucio Quiroz a écrit : Using CAT (language pluging) I got this: Dec 8 20:07:04 soekris amavis[24051]: (24051-06) (!!)TROUBLE in check_mail: parts_decode_ext FAILED: file(1) utility (/usr/bin/file) error: run_command (open pipe): Can't fork at

Re: [AMaViS-user] debian package

2008-11-19 Thread mouss
Ralf Hildebrandt a écrit : * Stefan Förster [EMAIL PROTECTED]: #!/bin/bash /etc/init.d/amavisd stop cp -p /usr/sbin/amavisd /usr/sbin/amavisd.old install -o root -g root -m 755 -p amavisd amavisd-agent amavisd-nanny amavisd-release p0f-analyzer.pl /usr/sbin /etc/init.d/amavisd start

Re: [AMaViS-user] bizaare log entry ... any know what this is ?

2008-11-04 Thread mouss
John Andersen wrote: Ok, someone please take that programmer out behind the wood shed. grin Return the installation CDROM and you'll get your money back ;-p /grin Gawd I hate cryptic useless error messages. Programmers should lose a knuckle for each one written. Then don't ask if all

Re: [AMaViS-user] Suppress recipient delimiters on outgoing mail?

2008-10-12 Thread mouss
John Andersen a écrit : We scan mail inbound and outbound via Amavisd-New. (2.4.3 via Opensuse). Occasionally someone will send something outbound that might get flagged as spammy. Amavis then attaches our recipient delimiter +spam on the outbound mail, all of which bounce. amavisd-new

Re: [AMaViS-user] Suppress recipient delimiters on outgoing mail?

2008-10-12 Thread mouss
sorry for the dups. there's a problem somewhere... lost connection with mx.sourceforge.net[216.34.181.68] while sending end of data -- message may be sent more than once - This SF.Net email is sponsored by the Moblin Your

Re: [AMaViS-user] Suppress recipient delimiters on outgoing mail?

2008-10-12 Thread mouss
Sahil Tandon a écrit : John Andersen [EMAIL PROTECTED] wrote: On Sun, Oct 12, 2008 at 2:12 AM, mouss [EMAIL PROTECTED] wrote: John Andersen a écrit : We scan mail inbound and outbound via Amavisd-New. (2.4.3 via Opensuse). Occasionally someone will send something outbound

Re: [AMaViS-user] relaying the mail after removing the infected attachment

2008-10-09 Thread mouss
Michael Scheidell a écrit : Well what i want to do is not to quarantinize a mail which includes a virus, but to relay it as it is after removing the attachment and adding a little notification, that the infected attachment was errased. Amavisd does not want to 'edit/modify/muck with'

Re: [AMaViS-user] RBL checks when amavisd-new runs on a separate server?

2008-10-09 Thread mouss
Tomasz Chmielewski a écrit : mouss schrieb: Tomasz Chmielewski wrote: As I'm not sure if it's Spamassassin's or amavisd-new's configuration problem, I sent a similar mail to spamassasin list. [snip] just to close the issue for those who don't read spamassassin-users (as well

Re: [AMaViS-user] Using RelayCountry with amavis?

2008-10-05 Thread mouss
Per olof Ljungmark wrote: mouss wrote: Per olof Ljungmark wrote: OK, thanks. I've gotten so far now that amavisd reports the header but it is not inserted into the actual message headers. I tested the snippet I sent you and it worked. amavis[1968]: (01968-01) header: X-Relay-Countries

Re: [AMaViS-user] Using RelayCountry with amavis?

2008-10-05 Thread mouss
Per olof Ljungmark wrote: Yes, I suspect the recipient is not regarded as local in this case. I use the unmodified snippet you provided (thanks). All spams end up in [EMAIL PROTECTED] which I presumed was a local recipient because inter-sonic.com is in the local domain list and

[AMaViS-user] List Posting issue? (Was: Using RelayCountry with amavis?)

2008-10-05 Thread mouss
Per olof Ljungmark wrote: mouss wrote: Per olof Ljungmark wrote: Yes, I suspect the recipient is not regarded as local in this case. I use the unmodified snippet you provided (thanks). All spams end up in [EMAIL PROTECTED] which I presumed was a local recipient because inter-sonic.com

Re: [AMaViS-user] Using RelayCountry with amavis?

2008-10-04 Thread mouss
Per olof Ljungmark wrote: OK, thanks. I've gotten so far now that amavisd reports the header but it is not inserted into the actual message headers. I tested the snippet I sent you and it worked. amavis[1968]: (01968-01) header: X-Relay-Countries: VN\n --per

Re: [AMaViS-user] please remove CR moron:From: [EMAIL PROTECTED]

2008-10-04 Thread mouss
Michael Scheidell wrote: we really don't need amavisd-new mailing list cluttered up by idiots and their backscanner/chalange response crap. how stupid can you get? subscribe to a mailing list and point to a CR system? how about a postfix header_checks: /^X-Delivery-Agent: TMDA/

Re: [AMaViS-user] Using RelayCountry with amavis?

2008-10-03 Thread mouss
Per olof Ljungmark wrote: [snip] Also, the docs say Also for 3.1.0, you can apply a patch [WWW] http://bugzilla.spamassassin.org/show_bug.cgi?id=3815 which will allow you to add a separate MIME header that shows all the message's relay countries, independent of the rules. add_header

Re: [AMaViS-user] sender callouts from mx.sourceforge.net?

2008-09-21 Thread mouss
Sahil Tandon wrote: Anyone else seeing this every time you send an email to this list? It looks like mx.sourceforge.net initiates the check right after the RCPT TO: stage in the SMTP session (mind the wrapping): yes, been like that since a long time. here is a recent log. Sep 19 01:48:07

Re: [AMaViS-user] Attachment filtering question

2008-09-18 Thread mouss
Jake Vickers wrote: Does Amavisd-new have the capability of blocking zip files that contain EXE files? I'd like to allow zip files, but only if they do not contain EXE files within them. That's the default behaviour. amavisd-new will see the banned file inside the zip.

Re: [AMaViS-user] mail recognized as spam doesnt fall into user spam folder

2008-09-07 Thread mouss
Patrick Domack wrote: Quoting mouss [EMAIL PROTECTED]: Halil A??n wrote: so it's a question for the maildrop mailing list. see below however. [snip] # Drop anything listed as Spam into .Spam # if (/^X-Spam-Flag: *YES/) { to $DEFAULT/spam/ Shouldn't that be: if (/^X-Spam

Re: [AMaViS-user] mail recognized as spam doesnt fall into user spam folder

2008-09-06 Thread mouss
Halil Ağın wrote: Hello List; I have a mailing system with postfix+ldap+courier+amavisd-new+clamav+maildrop. The os is debian etch. There is no problem receiving and sending mail either it is spam or not. I am trying to enable spam folder for each user on my system. I want to

Re: [AMaViS-user] feature request [ different subject line tagging based on score ]

2008-09-06 Thread mouss
Juan Miscaro wrote: Is it possible to have 2 levels of subject-line tagging based on score? So that for all forwarded mail: A score = B gets tagged with SPAM1 B score gets tagged with SPAM2 That way, spam 1 can be filtered to a folder normal_spam and spam 2 can be filtered to

Re: [AMaViS-user] Allow access from remote hosts

2008-09-05 Thread mouss
Patrick Baer wrote: Hi all, I feel a bit dumb asking this question, but... I have a pretty buggy spamassassin issue here and need to use an external amavis-server while debugging, otherwise the whole company will be after me soon :) The problem is, I cannot connect to 10024 of the

Re: [AMaViS-user] Bad Header in Quarantine

2008-09-01 Thread mouss
Sebastian Deiszner wrote: Hello, some of my Mails are moved to quarantine with header: what do you mean by moved? they are copied. but the recipient gets the message since the corresponding action is D_PASS. X-Amavis-Alert: BAD HEADER Non-encoded 8-bit data (char E4 hex): Date: ...8

Re: [AMaViS-user] Getting Amavisd-new To Use Clamav

2008-08-19 Thread mouss
Carlos Williams wrote: On Tue, Aug 19, 2008 at 3:35 PM, Alexander Wirt [EMAIL PROTECTED] wrote: If you use clamav-daemon, make sure that it is configured to init supplementary groups when it drops priviledges, and that you add the clamav user to the amavis group: add

Re: [AMaViS-user] how to fix this passed clean but with score above kill?

2008-07-30 Thread mouss
Len Conrad wrote: [snip] I changed the file to vscan:vscan, su'd to vscan and command line spamassassin returned: Content analysis details: (6.8 points, 5.0 required) what tests where hit? also, what results do you see if you reinject the message into amavisd-new? it is possible that

Re: [AMaViS-user] How to prevent amavisd-new being called for outgoing email

2008-07-17 Thread mouss
James Brown wrote: I have amavisd-new recently installed on my mail server (postfix running on Mac OS X 10.4.11). How can I stop it scanning outgoing email? This is more or less a FAQ here and on the postfix list. http://www200.pair.com/mecham/spam/bypassing.html

Re: [AMaViS-user] Blacklisting IP

2008-07-16 Thread mouss
Marcelo Diniz wrote: No, it's not opensource for now. Maybe in the future =] if you want to manage amavisd-new options, understand the available options and manage them. do not take it the other way around. 2008/7/15 Murilo Opsfelder Araújo [EMAIL PROTECTED]: On Tue, Jul 15, 2008 at 5:10

Re: [AMaViS-user] Blacklisting IP

2008-07-16 Thread mouss
Marcelo Diniz wrote: Well, i think this discussion it's getting to another way. All i want to know if it is possible to blacklist ip's in AMaViS because AMaViS is already doing the work for domains and emails. Is it possible? AFAIK, not without changing the code.

Re: [AMaViS-user] Blacklisting IP

2008-07-15 Thread mouss
Marcelo Diniz wrote: Hi, I searched at the AMaViS documentation and didn't found this information. Can the AMaViS black list IP's? why don't you do that in your MTA? - This SF.Net email is sponsored by the Moblin Your

Re: [AMaViS-user] yahoo.com adds new domains.

2008-06-20 Thread mouss
Michael Scheidell wrote: [snip] sharpen up your SA rules, justin: time to watch those rules, including the 'forged from yahoo' rules. no spf records. wonder if they will dkim sign them: $ host -t txt ymail.com ymail.com has no TXT record $ host -t txt rocketmail.com rocketmail.com

Re: [AMaViS-user] blackholes.wirehub.net error ?

2008-06-19 Thread mouss
Tom Brown wrote: Usually that's an indication that the BL has shut down or moved long ago and has finally given up on getting people to respect it and remove the config. Googling, I find a message from 2003 (!) indicating that blackholes.wirehub.net had changed its name.

Re: [AMaViS-user] FW: [Clamav-announce] Sourcefi re¹s rejection of unsolicited bid

2008-05-30 Thread mouss
Michael Scheidell wrote: I am confused, this press release says barracuda networks tried to buy sourcefire, not that sourcefire tried to buy clamav. Anyone know what is going on? Did sourcefire buy clamav or not?

Re: [AMaViS-user] OT: Score on Subject Line

2008-05-23 Thread mouss
[EMAIL PROTECTED] wrote: Is there a way to do this? i.e. if a subject line matches a certain string and possibly the same recipient to add a score in order to make it a spam mail? Use SpamAssassin rules for this, no need to duplicate its functionality in amavisd. Something like

Re: [AMaViS-user] amavislogsumm

2008-05-19 Thread mouss
Stefan Jakobs wrote: Hello list, I tried to verify the results of Mike Capella's amavis-logwatch scripts and had to notice that the amavislogsumm.pl scripts had some faults. I fixed them and put the new script online: https://po2.uni-stuttgart.de/~rusjako/amavislogsumm I recommend to

Re: [AMaViS-user] how to check an email from the command line?

2008-05-19 Thread mouss
Tomasz Chmielewski wrote: Wazir Shpoon schrieb: Try: sendmail -i [EMAIL PROTECTED] virusmail.eml Did I forget to mention that I don't have any MTA running on the machine where amavisd-new sits? # sendmail -i [EMAIL PROTECTED] spam-3+qujZLjJ2Sg postdrop: warning: unable to

Re: [AMaViS-user] reject but still deliver mail to lovers?

2008-05-17 Thread mouss
Sahil Tandon wrote: * Oskar Liljeblad [EMAIL PROTECTED] [05-16-2008]: if you are running amavisd-new after the queue, then it is too late to reject spam: this will only cause backscatter. That's why I only use amavis before queue! IMHO after-queue is not acceptable nowadays

Re: [AMaViS-user] HELO name / myheloname

2008-05-15 Thread mouss
Thomas Gelf wrote: Amavisd-new seems to use localhost_name for it's own EHLO, but is using $myheloname for it's own SMTP greeting banner (and 250 reply to HELO). I'm curious to find out why this variable is defined as follows: my($myheloname); # $myheloname = c('myhostname'); #

Re: [AMaViS-user] reject but still deliver mail to lovers?

2008-05-15 Thread mouss
Oskar Liljeblad wrote: Would it be possible to set up/hack amavis to return a reject response (554 - D_REJECT) for spam but still deliver it to addresses in the spam lovers list? With the current behaviour you would get an OK result (250 - D_PASS) from amavis and the mail would be sent to the

Re: [AMaViS-user] SECOND RELEASE CANDIDATE amavisd-new-2.6.0-rc2 is available

2008-04-21 Thread mouss
Martin Orr wrote: On 21/04/08 00:32, Gary V wrote: msa:~# apt-get -t testing install libmail-dkim-perl Reading package lists... Done Building dependency tree... Done The following extra packages will be installed: binutils libc6 libc6-dev libc6-i686 libcrypt-openssl-bignum-perl

Re: [AMaViS-user] local sendmail command.

2008-04-06 Thread mouss
mouss wrote: Andrew Nady wrote: Hi, I am having some difficulties with programs that use postfix's or other MTA's sendmail command to send out email as oppose to SMTP connection. The sendmail triggered email gets marked as SPAM, and I have no idea as to how to trick amavis to not check

Re: [AMaViS-user] local sendmail command.

2008-04-06 Thread mouss
Andrew Nady wrote: Hi, I am having some difficulties with programs that use postfix's or other MTA's sendmail command to send out email as oppose to SMTP connection. The sendmail triggered email gets marked as SPAM, and I have no idea as to how to trick amavis to not check the emails

Re: [AMaViS-user] Net::DNS .060 allows remote attackers to cause DOS

2008-03-27 Thread mouss
Michael Scheidell wrote: From: http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes Fix rt.cpan.org #30316 Security issue with Net::DNS Resolver. Net/DNS/RR/A.pm in Net::DNS 0.60 build 654 allows remote attackers to cause a denial of service (program croak) via a crafted DNS response

Re: [AMaViS-user] MTA-BLOCKED?

2008-03-14 Thread mouss
Mark Martinec wrote: Luis Daniel, I was debugging amavisd and I found this: brandmauer amavis[6320]: (06320-02-3) TIMING [total 45329 ms] - SMTP pre-DATA-flush: 403 (1%)1, SMTP DATA: 62 (0%)1, check_init: 126 (0%)1, digest_hdr: 2 (0%)1, digest_body: 9 (0%)1, gen_mail_id: 8 (0%)1,

Re: [AMaViS-user] MTA-BLOCKED?

2008-03-13 Thread mouss
Luis Daniel Lucio Quiroz wrote: I also got: Mar 13 11:54:00 brandmauer amavis[24026]: (24026-01) (!!)TROUBLE in process_request: Error writing a SMTP response to the socket: Broken pipe at (eval 41) line 874, GEN3 line 4. at my /var/log/mail/error.log Port 10025 is open: [EMAIL

Re: [AMaViS-user] Postfix and Amavisd-new on different servers, where point MX record to?

2008-03-12 Thread mouss
Daniel Mayer [COUGA.net] wrote: Hi, we are working on evolving our amavisd-new setup from one to two machines. Box 1 providing the final delivery to the mailbox and box 2 performing spam and virus filtering guided by amavisd-new. The question is where to point the MX's of the domains to?

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-18 Thread mouss
Christopher J Shaker wrote: Clifton: I am pretty sure amavisd-new does *not* work this way. It has an implicit list of checks to run on each incoming mail, starting with virus scanning, and works its way through them. If it's working this way for you, it may be the result of something

Re: [AMaViS-user] Why does amavis have a very low spam score (compared to spamassassin)?

2008-02-10 Thread mouss
Jef Driesen wrote: I have a small postfix/amavis/dovecot mailserver for my home network. Mails are retrieved with fetchmail and delivered to postfix with amavis as a after-queue content filter. It works great, except that after the upgrade from Ubuntu 7.04 (Feisty Fawn) to 7.10 (Gutsy

Re: [AMaViS-user] Why does amavis have a very low spam score (compared to spamassassin)?

2008-02-10 Thread mouss
Jef Driesen wrote: mouss wrote: [snip] Since IPs and domains are dynamically added to DNSBLs and URIBLs, the example you show is normal: some IPs and URIs have been listed since the first run. This happens all the time. That said, make sure amavisd is started with the right config

Re: [AMaViS-user] Spam folder daily summary?

2008-02-09 Thread mouss
Mike Cisar wrote: Hi all, Running Sendmail/Amavis/Spamassassin/Dovecot on a couple of servers. About 50% of the users prefer to be spoon-fed their SPAM in their inbox, for the other 50% or so we've set up to sort their SPAM into an IMAP spam folder using plussed addressing. A number of

Re: [AMaViS-user] score

2008-02-07 Thread mouss
MrC wrote: Andrea Bencini wrote: Andrea Bencini wrote: I installed postfix-2.4.5-2.fc8, amavisd-new-2.5.2-2.fc8 and spamassassin-3.2.3-2.fc8. They are running. I would like to test spam changing score in local.cf. My local.cf is: score FREE_PORN 1000 score

Re: [AMaViS-user] Subject line oddities...

2008-01-26 Thread mouss
Mike Cisar wrote: Have had a few messages getting through lately that should have been tagged as spam but appear not to have the subject line tagged. I check the headers and see (some headers removed)... X-Spam-Flag: YES X-Spam-Score: 9.498 X-Spam-Level: * X-Spam-Status: Yes,

Re: [AMaViS-user] Filtering before banned attachments

2008-01-25 Thread mouss
Robert Fitzpatrick wrote: I see a message get sent through and labeled 'WARNING: contains banned part' like it should according to our banned policies as it scores zero in SA. I am assuming zero means that SA didn't even scan the content? If I take the source of the message without the

Re: [AMaViS-user] amavis cuts the domainname in emails to virtuall domain

2008-01-24 Thread mouss
rupert wrote: Hi, i have a cyrus murder cluster with postfix and started integrating amavis for content filtering. When I send an email to a user of a virtuall domain that isnt the local domain the postfix host is in everthing is fine. When i send an email to a user that is in the same

Re: [AMaViS-user] male enhancement spam with google link inside -- filter??

2008-01-22 Thread mouss
lartc wrote: hi all, i've been getting tons of male-enhancement spam mails that are making it through amavis ... they look like: Women DO luv it bigger. http://google.co.uk//search?hl=enq=inurl:rhtawy.com%2BVPXL%2BMade% 2BEasybtnI=markov I don't want to filter on a google link

Re: [AMaViS-user] ibm.comspf record? what does blank one do?

2008-01-18 Thread mouss
Michael Scheidell wrote: host -t txt ibm.com ibm.com descriptive text v=spf1 -all What does that mean? with -all, does that mean that since there are NO records at all that all email should hardfail? or all should pass? ibm: what were you thinking? Why bother? That's a correct choice

Re: [AMaViS-user] amavisd-new accepting e-mails from a remote machine

2008-01-17 Thread mouss
Jordi Moles wrote: hi, i've got 2 debian servers, one with postfix and the other one with amavisd-new running. I've read a lot of examples about how to set up amavisd-new to filter emails that come from postfix. The thing is that in amavisd.conf i have to put something like this:

Re: [AMaViS-user] amavis[xx]: (!)DENIED ACCESS from IP x.x.x.43, policy bank ''

2007-12-21 Thread mouss
john bender wrote: Thanks mouss, I'll try that. Regarding the other notes, the smtp/lmtp are there because I was following the amavis install guide. but you only need one. and if you configure both, chose different names. Regarding the mynetworks, etc, that's all from me trying

Re: [AMaViS-user] amavis[xx]: (!)DENIED ACCESS from IP x.x.x.43, policy bank ''

2007-12-18 Thread mouss
john bender wrote: Hi there! I'm running Qmail, and on the same system I run postfix as a smart host or spam firewall. Qmail listens on x.x.x.42 and postfix listens on x.x.x.43 From what I read, this setup might be causing the error in question. My question is: would anyone know

Re: [AMaViS-user] Suggestion: Modify Amavis to optionally retain a virgin copy of each message processed...

2007-12-18 Thread mouss
Ken Morley wrote: I'm using Postfix 2.4.6, Amavisd-new 2.5.2, ClamAV 0.91.2 and Mail-SpamAssassin 3.2.3 in a Linux mail filter. I'm having problems conveniently getting enough ham and spam for Bayes training. I'm aware that Bayes is more closely related to SA than Amavisd, but please humor

Re: [AMaViS-user] Local Spam

2007-12-17 Thread mouss
Rocco Scappatura wrote: Hello, from my amavid-new log I saw that a significant protion of spam is generated inside my network. Here the command: # cat /var/log/amavis | grep -i Blocked SPAM, LOCAL I have configured Postfix so that it lookups an IP for client access to my SMTP gataway.

Re: [AMaViS-user] Local Spam

2007-12-17 Thread mouss
Rocco Scappatura wrote: from my amavid-new log I saw that a significant protion of spam is generated inside my network. Here the command: # cat /var/log/amavis | grep -i Blocked SPAM, LOCAL I have configured Postfix so that it lookups an IP for client access to my SMTP gataway. If

Re: [AMaViS-user] amavis on lotus?

2007-10-24 Thread mouss
Javier wrote: thank you all for your kind answers... i understand the solution is a non-lotus smtp server to process the mail routing... but i have another question regarding your sugestions... can i perhaps have a smtp (postfix) in front of my lotus smtp? something like this..

Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread mouss
MrC wrote: Voytek Eymont wrote: On Mon, October 15, 2007 5:55 pm, Jordi Espasa Clofent wrote: I didn't know amavislogsumm, but I can see in the changelog that the last version is dated on feb-2004. It seems an old and out-of-date project. ¿Do you know amavis-logwatch [1]? It's devepelod by

Re: [AMaViS-user] Antivirus programs?

2007-10-10 Thread mouss
Adam65535 wrote: On 10/9/07, Pelletier, Robert [EMAIL PROTECTED] wrote: I'm using ClamAV. It's a perfect match with Amavis, it's fast and get's high in the reviews. In my experiences clamav/clamd is much slower than other mail scanners (even when up against command line scanners like

Re: [AMaViS-user] Antivirus programs?

2007-10-10 Thread mouss
Adam65535 wrote: On 10/10/07, mouss [EMAIL PROTECTED] wrote: Adam65535 wrote: On 10/9/07, Pelletier, Robert [EMAIL PROTECTED] wrote: I'm using ClamAV. It's a perfect match with Amavis, it's fast and get's high in the reviews. In my experiences clamav/clamd is much slower than other mail

Re: [AMaViS-user] local.cf being ignored

2007-10-09 Thread mouss
Ricardo Stella wrote: We are currently testing (not my choice) a hosted anti-spam server, primarily to get rid of the bulk of spam. So our domain MX records point to their servers, and they deliver lower level junk to us. Trying to gray and whitelist some senders, it seems that my local.cf

[AMaViS-user] When is it safe to bounce (Was: use SPF to prevent backscatter?)

2007-09-25 Thread mouss
Michael Scheidell wrote: Ah, ok, I had not seen enough additional value using p0f (I turned it off, too much cpu usage for a very small point percentage) and the fact that it really can't figure out the difference between a windows 2000 server and an XP workstation. So, if there a regex

Re: [AMaViS-user] rbl in SA or in MTA, which is better

2007-09-07 Thread mouss
Miguel wrote: I mean, both can do the same tests, where is the best place to do that? regards do both: - use few safe DNSBLs (zen.spamhaus.org for example) in the MTA to reject transaction without having to process data or queue the message - use whatever DNSBLs you want in SA. - you can

Re: [AMaViS-user] Foreign Keys Necessary?

2007-08-29 Thread mouss
Nate wrote: I've read all the back threads regarding purge performance in the logging database, specifically in mysql. It seems like a still pending issue. In our application where we are increasing the rows in the msgs table by roughly 1million per day, purging the database creates an

Re: [AMaViS-user] How to manage spam scores?

2007-07-28 Thread mouss
Justin Kim wrote: Gary wrote: Justin wrote: Hello Everyone, I am using amavis with postfix+mysql setup. Amavis is scanning messages and is reinjecting messages to postfix through smtp. I would like to know how can I manage spam scores so that

Re: [AMaViS-user] Rewrite subject of virus infected mails

2007-07-22 Thread mouss
Cian Davis wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I was wondering if there's an easy way of getting amavisd-new to rewrite the subject of virus infected e-mail? I just want to add a INFECTED tag or something. Our users scream if we bounce any mail on them but most

Re: [AMaViS-user] Rewrite subject of virus infected mails

2007-07-22 Thread mouss
Tomas Macek wrote: But if the user is virus lover, it's his thing if he want the virus to be delivered into his mailbox and in this case he should be noticed, that the message contains a virus. Will said virus lover pay for the consequences when his machine infects the rest of the

Re: [AMaViS-user] Rewrite subject of virus infected mails

2007-07-22 Thread mouss
Cian Davis wrote: mouss wrote on 22/07/07 18:20: Will said virus lover pay for the consequences when his machine infects the rest of the world? viruses are different than spam. They are digital massive destruction weapons. I understand the argument against delivering viruses

Re: [AMaViS-user] Always - BAD HEADER, Missing required header field: Date

2007-07-05 Thread mouss
Stefan.G wrote: On Wed, Jul 04, 2007 at 05:27:47PM +0200, mouss wrote: Stefan.G wrote: Sometimes i get not the Date BAD HEADER Error X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char E2 hex): X-eBay-due:\n\t\\342\\25431,76\\n Some webmail and bulkware clients

Re: [AMaViS-user] Always - BAD HEADER, Missing required header field: Date

2007-07-04 Thread mouss
Stefan.G wrote: Sometimes i get not the Date BAD HEADER Error X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char E2 hex): X-eBay-due:\n\t\\342\\25431,76\\n Some webmail and bulkware clients are broken and send 8bit headers without encoding them. There's nothing you can do about

Re: [AMaViS-user] SPAM: Ms outlook test message

2007-06-28 Thread mouss
Azfar Hashmi wrote: when ever I test ms outlook connection settings amavisd-new consider it spam any idea how to fix it. how can we tell without the full headers? - This SF.net email is sponsored by DB2 Express

Re: [AMaViS-user] RBL Monitoring.

2007-06-27 Thread mouss
Azfar Hashmi wrote: thanks guys now where do I get long list of rbl servers to add those in script. Prefer quality over quantity. but if you insist on quantity, take a look at the lists on dnsstuff site or google for check rbl and on the sites that you find, do a lookup of an IP and you'll

Re: [AMaViS-user] RBL Monitoring.

2007-06-26 Thread mouss
Xueron Nee wrote: Hi Azfar Hashmi, Here is a simple perl script to do this :) #!/usr/bin/perl -w [snip] a less sofisticated shell version: #!/bin/sh ip_list=`grep -v ^# /path/to/ips` rbl_zones=`grep -v ^# /path/to/rbls` check_ip() { ip=$1 zone=$2 rev_ip=`echo $ip | awk

Re: [AMaViS-user] Give message back from maildrop to amavis

2007-06-19 Thread mouss
Renato Botelho wrote: Hello, I'm working on a SMTP server project that involves a lot of filters. I'm using postfix, amavisd-new and maildrop. Amavisd-new is quarantining messages on PostgreSQL server. After message is checked by amavisd-new, postfix forward this to maildrop to make some

Re: [AMaViS-user] One more reason not to use an autoresponder

2007-06-17 Thread mouss
Gary V wrote: I am doing some tests on a Debian machine with the Debian 2.4.2 package and the postfixadmin vacation.pl script and I noticed that because the vacation program sends a mail out on the recipient's behalf the sender is now a penpal. If a spammer sends out more than one message

  1   2   >