[AMaViS-user] Notifity Virus Sender Problem

2008-04-15 Thread Erin D. Hughes
All, I have been trying for 3 days to enable a notification for virus senders on our out going SMTP servers. I want local LDAP users to receive a notification if a virus is detected in their outgoing mail. I do not want to scan for spam (although I wish I could). I would also like to

Re: [AMaViS-user] Backscatter

2008-04-15 Thread Crosby, Scott F.
A great document on helping with this problem is: http://www.postfix.org/BACKSCATTER_README.html This certainly can help, but my tests have shown that SA catches pretty much all of this type of backscatter, anyway. In fact, most of the messages caught by this method would end up with an SA

Re: [AMaViS-user] Backscatter

2008-04-15 Thread Mark Martinec
Scott, Could the amavisd penpals feature be of some help here? Yes. For inbound NDRs, the original recipient of the NDR could be checked for a corresponding outbound message from the original sender. Without a match, the SA score could be bumped a few points. It seems that the major

[AMaViS-user] spamassassin + module vbounce + sieve script

2008-04-15 Thread Oberdan Albertoni
Hello, I set up vbounce module in spamassassin and in my /var/amavis/.spamassassin/user_prefs I set : score BOUNCE_MESSAGE4.5 score CRBOUNCE_MESSAGE 4.5 score VBOUNCE_MESSAGE 4.5 score ANY_BOUNCE_MESSAGE4.5

Re: [AMaViS-user] Backscatter

2008-04-15 Thread Eray Aslan
On 15.04.2008 15:22, Mark Martinec wrote: For inbound NDRs, the original recipient of the NDR could be checked for a corresponding outbound message from the original sender. Without a match, the SA score could be bumped a few points. It seems that the major challenge would be in identifying

Re: [AMaViS-user] spamassassin + module vbounce + sieve script

2008-04-15 Thread Gary V
On 4/15/08, Oberdan Albertoni wrote: Hello, I set up vbounce module in spamassassin and in my /var/amavis/.spamassassin/user_prefs I set : score BOUNCE_MESSAGE4.5 score CRBOUNCE_MESSAGE 4.5 score VBOUNCE_MESSAGE 4.5 score

Re: [AMaViS-user] spamassassin + module vbounce + sieve script

2008-04-15 Thread Oberdan Albertoni
How is the message submitted to Postfix? If I were to assume that sendmail is used to submit the vacation messages to the pickup daemon (due to NO_RELAYS hitting) , this might help: http://www200.pair.com/mecham/spam/bypassing.html#11 Thank You very much, I set policy_bank and now is

[AMaViS-user] SA logging ability

2008-04-15 Thread Munroe Sollog
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am trying to get amavis-logwatch and other various log analyzers to report the hit frequency of various SA rules. But I do not see amavis logging in /var/log/mail.log which rules are being hit per message. How do I enable this? - -- Munroe Sollog

Re: [AMaViS-user] SA logging ability

2008-04-15 Thread Munroe Sollog
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I don't see that option anywhere in my conf file. I am using debian, so I have conf.d directory, but I grepped for log and verbose and the only thing I see is: $syslog_priority = 'debug'; # switch to info to drop debug output, etc am I missing an

Re: [AMaViS-user] SA logging ability

2008-04-15 Thread Alexander Wirt
Munroe Sollog schrieb am Tuesday, den 15. April 2008: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am trying to get amavis-logwatch and other various log analyzers to report the hit frequency of various SA rules. But I do not see amavis logging in /var/log/mail.log which rules are

Re: [AMaViS-user] SA logging ability

2008-04-15 Thread Alexander Wirt
Munroe Sollog schrieb am Tuesday, den 15. April 2008: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I don't see that option anywhere in my conf file. I am using debian, so I have conf.d directory, but I grepped for log and verbose and the only thing I see is: $syslog_priority = 'debug'; #

Re: [AMaViS-user] SA logging ability

2008-04-15 Thread Mark Martinec
Munroe, I am trying to get amavis-logwatch and other various log analyzers to report the hit frequency of various SA rules. But I do not see amavis logging in /var/log/mail.log which rules are being hit per message. How do I enable this? Modify $log_templ and include any macro calls you

Re: [AMaViS-user] SA logging ability

2008-04-15 Thread Munroe Sollog
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 That did it, thank you, and thank you for your great work with the package. Munroe Sollog Systems Engineer Digirati Consulting, Inc [EMAIL PROTECTED] Alexander Wirt wrote: Munroe Sollog schrieb am Tuesday, den 15. April 2008: -BEGIN PGP

[AMaViS-user] notify users when a file is banned

2008-04-15 Thread Federico Nan
Hi! i'm new in this great list. I was looking fot it on google but i don't find the solution. When an email comes whit an attachement on it (.exe) my amavis stop that mail. This it ok! But i want Amavis send the email to the original user without the file or send a notifcation to the user. Is

Re: [AMaViS-user] Customizing the Amavis' header tag names

2008-04-15 Thread Clifton Royston
On Tue, Apr 15, 2008 at 09:50:25PM +0200, mouss wrote: Clifton Royston wrote: [snip] If you want to brute-force the solution, while you look for the true reason amavisd is failing to strip the previous headers, you could add a Postfix header_checks rule to be run on the pre-amavisd

Re: [AMaViS-user] Customizing the Amavis' header tag names

2008-04-15 Thread Mark Martinec
Jose, I should be getting the default behavior but duplicate header tags are appearing. Below is an example. Return-Path: Delivered-To: spam-quarantine X-Envelope-From: [EMAIL PROTECTED] X-Envelope-To: [EMAIL PROTECTED] X-Quarantine-ID: u79lpchtlym0 X-Spam-Flag: YES X-Spam-Score:

Re: [AMaViS-user] Customizing the Amavis' header tag names

2008-04-15 Thread Jose Hales-Garcia
On Apr 15, 2008, at 4:54 PM, Mark Martinec wrote: You are looking at a quarantined message, not at a message passed to a recipient! A quarantined message keeps original header section, plus receives some more header fields. A passed message gets existing X-Spam* headers stripped. Thank

[AMaViS-user] Amavis seg fault

2008-04-15 Thread Luis Daniel Lucio Quiroz
is anyone familliar with this message? Amavis 2.5.4 under mandriva 2007.1 64bits 2GB RAM 2 CPUs amavisd[15286] general protection rip:2b77d0cfbb84 rsp:7fffdc5016d0 error:0 amavisd[15192] general protection rip:2b77d0cc8f74 rsp:7fffdc501800 error:0 amavisd[14044] general protection