Re: [AMaViS-user] relationship whitelisting

2009-04-17 Thread Mark Martinec
Larry, We have a need to do whitelisting of email based on a relationship pattern, not just a single recipient/sender match. e.g. mail from users in list A to users in list B should bypass filtering I'd like to know if there are suggestions to accomplish that. Amavis has a policy

Re: [AMaViS-user] list of SA plugins and daylight rules

2009-04-17 Thread Mark Martinec
Giuseppe, Of these 10s, 7-8 seconds are usually taken by DNSBL SA checking; Note that DNS-based checks only add to latency and have little effect on throughput. Extra latency can easily be compensated for by running more concurrent processes (at the expense of more memory consumed).

Re: [AMaViS-user] infected message forwarded / Avira for UNIX 3.x

2009-04-17 Thread Mark Martinec
Thomas, i've installed the new version from avira for unix, version 3. @av_scanner snippet: ### Avira for UNIX 3.x ['Avira AntiVir', ['avscan'], '-s --batch --alert-action=none {}', [0], qr/ALERT:/, qr/ALERT: (.+)/m ], playing around i found a (maybe) misbehaviour of amavisd:

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-17 Thread Mark Martinec
William, As auto-learning only makes sense when combined with some other spam scanner such as SpamAssassin, I'd say the cleanest solution would be to create a DSPAM plugin for SpamAssassin. Since DSPAM invocation is similar to CRM114, I think the easiest would be to take a CRM114 plugin

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-17 Thread Mark Martinec
Thomas, ok, installed 2.6.3-rc1. passed mails contain the CRM114-Cache-ID. :) As with the patch before, quarantined messages are missing the CRM114- Cache-ID. Before a lng time also quarantined messages had the Cache- ID header. I'll provide the cacheid and crm status in the quarantined

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-17 Thread Mark Martinec
Thomas, if perl module DBD::Pg is not avaiable this message is printed on startup: fetch_modules: error loading optional module Mail/SpamAssassin/BayesStore/ PgSQL.pm: Can't locate DBD/Pg.pm in @INC (@INC contains: /etc/perl /usr/local/lib/ perl/5.10.0 /usr/local/share/perl/5.10.0

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-17 Thread Mark Martinec
Thomas, - better support for CRM114, either as a SpamAssassin plugin, or by directly calling it - instead of, or in addition to SpamAssassin; does this means it will pass the CRM114-Cache-ID header from sa crm114 plugin without the patch from http://mschuette.name/wp/crm114-

Re: [AMaViS-user] sanesecurity sigs and bounce_killer ?

2009-04-17 Thread Mark Martinec
Mark, would it be possible to have some option to only do the stuff that bounce killer needs and not write unnecessary parts to disk? Amavisd-New already does this, just set bypass-decode_parts = 1 in your amavisd.conf file, and your good to go (works with amavisd-new 2.5.1-pre1 and

Re: [AMaViS-user] sanesecurity sigs and bounce_killer ?

2009-04-17 Thread Michael Scheidell
Perhaps a good compromise is to only do MIME decoding but no other archives decoding, and let a virus scanner also see the complete message: @decoders = (); @keep_decoded_original_maps = (new_RE( qr'^MAIL$' )); So this will work on 2.6.2? Both bounce killer and penpals? --

Re: [AMaViS-user] sanesecurity sigs and bounce_killer ?

2009-04-17 Thread Mark Martinec
Michael, Perhaps a good compromise is to only do MIME decoding but no other archives decoding, and let a virus scanner also see the complete message: @decoders = (); @keep_decoded_original_maps = (new_RE( qr'^MAIL$' )); So this will work on 2.6.2? Both bounce killer and penpals? I

[AMaViS-user] second release candidate: amavisd-new-2.6.3-rc2

2009-04-17 Thread Mark Martinec
The second release candidate amavisd-new-2.6.3-rc2 is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.6.3-rc2.tar.gz release notes: http://www.ijs.si/software/amavisd/release-notes.txt Changes from rc1: the interface code to external spam scanning programs has been

Re: [AMaViS-user] sanesecurity sigs and bounce_killer ?

2009-04-17 Thread Henrik K
On Sat, Apr 18, 2009 at 01:06:51AM +0200, Mark Martinec wrote: Michael, Perhaps a good compromise is to only do MIME decoding but no other archives decoding, and let a virus scanner also see the complete message: @decoders = (); @keep_decoded_original_maps = (new_RE(