Re: [AMaViS-user] amavisd and perl vacation posibble ?

2007-03-17 Thread Mark Martinec
Benny, > http:...VIRTUAL_VACATION... > i need help to make this perl into amavisd.conf so it sends vacation for > users that are stored in mysql as so, the guide i have it from tells me to > use seperate unix account for this script, but problem is that i only have > virtual users > can i mix this

Re: [AMaViS-user] Amavisd-new on FreeBSD

2007-03-19 Thread Mark Martinec
Silvio, > FreeBSD 6.2, Postfix 2.3.8, Maia 1.0.2, Mysql Server 4.1.22, > SpamAssassin 3.1.8 (05633-01) lookup_sql select: SELECT *,users.id FROM users,policy WHERE (users.policy_id=policy.id) AND (users.email IN (?,?,?,?,?,?)) ORDER BY users.priority DESC (05633-01) lookup_sql: 1030, Got er

Re: [AMaViS-user] postfix amavis with user tabel email forward

2007-03-19 Thread Mark Martinec
Frank, > in the user table from amavis are mailaccounts (user1) not emailadress. amavisd sees recipient addresses as given to a content filter by MTA. It has no idea what transformation of addresses a MTA does before or after content filtering. > In the virtual1 table is [EMAIL PROTECTED] -> us

Re: [AMaViS-user] autolearn ?

2007-03-19 Thread Mark Martinec
Guilherme, > How works auto learn ? It requires user intervention or is automatic ? It is automatic. Check SpamAssassin documentation, like the section 'LEARNING OPTIONS' in the Mail::SpamAssassin::Conf man page. A message can also be manuanually learned, command is: sa-learn. Make sure to run i

Re: [AMaViS-user] How does one disable sql logging for certain policies?

2007-03-19 Thread Mark Martinec
Riaan, > > > So, how to do it? 'sql_clause' > > > IS a policy-able variable, but I'm not sure amavisd-new would be > > > stable if that is set to undef in a policy declaration. > > > > That could work, but I never tried it. Please see if it works, > > and if it doesn't I'd consider it a bug and f

Re: [AMaViS-user] Third public pre-release of amavisd-new: 2.5.0-pre3

2007-03-19 Thread Mark Martinec
Gary, > Can't locate object method "new" via package "Amavis" > at /usr/sbin/amavisd-new line 7128. > And it would not start while using Net::Server 0.87. > 0.93 also worked, 0.90 did not Thanks, I'll make it work again with 0.90: sub new { my($class) = shift; # make Amavis a subclass of

Re: [AMaViS-user] New modules in SpamAssassin 3.2.0-pre2

2007-03-19 Thread Mark Martinec
Vincent, > > These modules may either be listed in @additional_perl_modules > > (in file amavisd.conf), or the patch below can be applied > > to 2.4.5 or 2.5.0-pre2, which achieves the same. > > I am still stuck at amavisd-new 2.3.3, no @additional_perl_modules > available, after looking at 2.4.5,

Re: [AMaViS-user] Penpals and Postfix on dual ports

2007-03-20 Thread Mark Martinec
Lawrence, > I currently have postfix listening on port 25 with amavis, and > on 2525 that only allows SASL authenticated users and no amavis. > > Is there any way of passing the SASL authenticated users through > amavis with no checking so that it can build up a penpals list? > Or passing the fact

Re: [AMaViS-user] Problems with TB receipts and amavis

2007-03-20 Thread Mark Martinec
Alessandro, > I have a mailserver (i386) with etch and amavisd-new 2.4.2-6.1. The only > locales I have generated is en_US ISO-8859-1. On the client side I have > Thunderbird 1.5.0.9 with french localisation. > > Whenever a mail asks for a return receipt (accusé de réception) and > Thunderbird sen

Re: [AMaViS-user] Problem with caching

2007-03-20 Thread Mark Martinec
> Apparently someone has upgraded something on one of our gateways and now I > cant enable caching, still scratching my head on this one, here is the > problem: > Mar 20 11:02:14 /usr/sbin/amavisd[14770]: (!!)TROUBLE in > pre_loop_hook: db_init: BDB bad db env. at /var/amavis/db: Function not > im

Re: [AMaViS-user] Problem with caching

2007-03-20 Thread Mark Martinec
Also, always recompile and reinstall perl module BerkeleyDB after upgrading libdb. Mark - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opin

Re: [AMaViS-user] Resend email from original text file

2007-03-20 Thread Mark Martinec
Toz. > I have about 300 emails which, due to a failure in clamav, are stuck in > /var/amavis/tmp{various}/email.txt. If you detected the failure within 3 (or maybe 5) days, these messages are still in the MTA queue (or were already delivered after fixing the situation), so you may just delete the

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Mark Martinec
Robert, > > - phishing fraud as returned by ClamAV is now treated as spam, no > > longer as a virus; > > great, this was my biggest annoyance with clam's phishing detection, > does the email make it to bayes though? Yes it does. SA checks are invoked normally, and virus flag is turned off.

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Mark Martinec
Bob, > ah, does SA get any indication that clamav thinks the email is a phish? No, currectly not. An artificial header field could be inserted I guess, but for the moment I don't think it is really needed, these phishing scams collect enough spam points by themselves. > Otherwise I guess turning

Re: [AMaViS-user] the favor of your opinion appreciated ...

2007-03-21 Thread Mark Martinec
Larry, > I note with interest the two excerpts from the recommended debug below the > sig. About your second item: > 2. /usr/local/sbin/amavisd[1813]: INFO: no optional modules: > DBD::mysql Sys::Hostname::Long Mail::SPF::Query Razor2::Client::Agent > Net::CIDR::Lite Mail::SpamAssassin::BayesSt

Re: [AMaViS-user] mysql 2 postgres change in amavisd.conf

2007-03-21 Thread Mark Martinec
Benny, > i will try postgres also now, > for mysql i used > $timestamp_fmt_mysql = 1; This one becomes irrelevant with PostgreSQL, you may leave it as it is, or remove it. > @lookup_sql_dsn = ( ['DBI:mysql:database_for_logs:localhost', 'user', > 'password'] ); > @storage_sql_dsn = ( ['DBI:mysq

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Mark Martinec
Bill, > I like the artificial header idea. If you could at least make it an > optional flag that would be great. Would be nice to be able to add a > few SA points if ClamAV detects phish, image, scam, etc., messages, > otherwise it doesn't make much sense to use the additional ClamAV > signature

Re: [AMaViS-user] Setting the From address?

2007-03-23 Thread Mark Martinec
Lund, > Can I set the From address in virus-notify emails, in the style of > "Full Name <[EMAIL PROTECTED]>" ? Yes. > When I set "mailfrom_notify_recip" it only appears to support > "[EMAIL PROTECTED]" no extras. mailfrom-* is an envelope address (rfc2821), it can not contain comments like mail

[AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitable security vulnerability in file(1) utility

2007-03-23 Thread Mark Martinec
: file utility Priority: urgent Solution: update to file 4.20 or later References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1532 Author: Mark Martinec <[EMAIL PROTECTED]> Rainer Link <[EMAIL

Re: [AMaViS-user] Looks like amavis is injecting message twice

2007-03-23 Thread Mark Martinec
Stephen, > Hello everyone. We've run into a problem here with a mailing list in > that the message seems to be injected back in to postfix twice five > minutes after the first one. Here is the first time it gets sent: >... > Mar 22 06:09:10 mta4 postfix/smtpd[29247]: disconnect from > localhost

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitable security vulnerability in file(1) utility

2007-03-27 Thread Mark Martinec
alex, > > Vulnerability: file utility > > Priority: urgent > > Solution: update to file 4.20 or later > Is FreeBSD affected or is the BSD file not same as GNU file? The version from ports (sysutils/file) is 4.20 (since 2007-03-03) but you need to install it.

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1:exploitable security vulnerability in file(1) utility

2007-03-27 Thread Mark Martinec
Michael, > Is the stock on on FBSD vulnerable? So it appears. It is 4.12, and there were no other significant changes in funcs.c/file_printf up to 4.19, the real change is only in 4.20. Mark - Take Surveys. Earn Cash. Inf

Re: [AMaViS-user] no module: Mail::SpamAssassin::Plugin::URIDetail

2007-03-27 Thread Mark Martinec
Frank, > in the logfile from amavisd-new 2.4.5 found this messages: > INFO: no optional modules: Mail::SpamAssassin::Plugin::URIDetail > In Cpan or in the source from SpamAssassin 3.1.8 found not the Module. You may ignore the message. The Mail::SpamAssassin::Plugin::URIDetail appeared in January

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitablesecurity vulnerability in file(1) utility

2007-03-27 Thread Mark Martinec
Leon, > Is there any file 4.20 or newer src.rpm for SuSE? > I've tried to google but didn't find any :( ftp://ftp.astron.com/pub/file/ ./configure; make; make install Mark - Take Surveys. Earn Cash. Influence the Future

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitablesecurity vulnerability in file(1) utility

2007-03-27 Thread Mark Martinec
Julio, > Its necessary to patch "patch-4.20-REG_STARTEND > " ? No. It covers for missing REG_STARTEND flag/functionality in a system's REGEX(3) library (probably with some old OS versions). Mark --

Re: [AMaViS-user] slow SA checks, sa_timeout

2007-03-28 Thread Mark Martinec
Leo, > I've noticed that in my postfix before-queue (smtpd_proxy_filter) setup, > some connections to amavis terminate after 100 seconds with timeouts > (according to postfix' smtpd_proxy_timeout), even though amavisd's > sa_timeout should be at the default value of 30 seconds. (It's not set > in

Re: [AMaViS-user] slow SA checks, sa_timeout

2007-03-28 Thread Mark Martinec
Leo, > > - [...] allowed time is calculated as 2/3 of the remaining time > Hmm - that's bad. > I have $child_timeout set to 20 min (20*60) because in a before-queue > setup, it may take quite a long time till all the data is transferred > over the net. > > But smtpd_proxy_timeout is at the defaul

Re: [AMaViS-user] scanning powerpoint fiels with clamav takes ages !

2007-03-29 Thread Mark Martinec
Jakob, > We use an amavisd/SA/clamav setup for our production mail server and are > very happy with it. Recently however we experienced delivery delays and > large mail queues. When examining the reason we found that mails > containing PPT files brought the mail system to a crawl. One example was

Re: [AMaViS-user] how to allow banned file extensions within zip archives?

2007-03-29 Thread Mark Martinec
Richard, > I've looked around the list archives, and the readme files, but have only > found general pointers to this problem. Basically I want to allow certain > when they are included in a zip file, but not if they are attached > directly. [...] > I would expect the rule-7 bit to allow an exe fi

Re: [AMaViS-user] before queue filter

2007-03-29 Thread Mark Martinec
Alex, > Does someone have experience with running amavisd-new as > before-queue-filter? > I want to reject spam at the smtp level, because it is > far more transparent for the sender. > On top days we process 250 000 mails per day, running amavisd-new > with spamassassin, clamav and amavis unpack

Re: [AMaViS-user] amavisd-new-2.5.0-pre3: no viruses_that_fake_sender_maps anymore ???

2007-03-29 Thread Mark Martinec
Michael, > as far as I can see, you have removed the code which uses > @viruses_that_fake_sender_maps to suppress notifications for viruses, > which fake the sender address (sub unmangle_sender). However, I can't find > any reference to this fact in the release notes. Or am I wrong? Unintentional

Re: [AMaViS-user] verify whether p0f is working - howto

2007-03-29 Thread Mark Martinec
Robert, > today I started to look a bit deeper into p0f(1) and p0f-analyzer.pl. > Now I expected amavisd to output either some logging or some > X-Amavis-OS-Fingerprint header. But - nothing. [...] > Yet, only that the code was loaded is logged, I get no messages flagged, > nor any signs of p0f op

Re: [AMaViS-user] Outgoing messages scanned ?

2007-03-30 Thread Mark Martinec
Laurent, > > I use this mail as outgoing and incoming smtp gateway. > > And today, I see in my log that my outgoing mails are scanned by amavis. > > So I want to check incoming mails but not the outgoing mails. Here are some good reasons to continue checking outgoing mail: - prevent internal inf

Re: [AMaViS-user] Outgoing messages scanned ?

2007-03-30 Thread Mark Martinec
Gary, > > Here are some good reasons to continue checking outgoing mail: > > All good points and in fact I personally do not bypass spam scanning > in my MYNETS policy bank. There is one thing I have always questioned > about zombies however, I would have to guess that it is unlikely that > a zomb

Re: [AMaViS-user] amavis returns Bad SMTP Code 4.6.0 .. End data with .

2007-03-31 Thread Mark Martinec
ajmcello, > I think it may have something to do with attachments (multi part?). > Singles seem to go through ok. > Here's a debug level 5 snapshot (had to pastebin it, file was too big): > http://www.pastebin.ca/417646 > I think it might have something to do with multipart attachments? > 17:11

Re: [AMaViS-user] amavis returns Bad SMTP Code 4.6.0 .. End data with .

2007-04-01 Thread Mark Martinec
Clifton, > > I wonder why listening port 10025 response to data end with "354 End data > > with ." instead of ""250 Ok: queued as x". > > Well, this would seem to indicate that the two SMTP processes are out > of sync and/or that the far side didn't see the actual data transmitted > following

Re: [AMaViS-user] Collecting statistics

2007-04-03 Thread Mark Martinec
Tom, > Perhaps a common question, but I am interested in doing some logging on > e-mails which gets blocked due to SPAM or VIRUS. > > I am running amavis in a cluster behind a loadbalancer, so I need some > central point to collect these data. Preferably the simplest way would be > to insert a row

Re: [AMaViS-user] Decoding winmail.dat attachments using tnef & Amavis.

2007-04-03 Thread Mark Martinec
Jim, > We get a lot of emails that have winmail.dat attachments. > This is all fine and dandy if you are using outlook, > but for the ones who don't, you can't view them. Are sending clients out of your control? > Looks like amavis has some built in code for tnef. Indeed, it either uses Convert

Re: [AMaViS-user] ANI exploit

2007-04-03 Thread Mark Martinec
Henrik, > Hi, as we know there is ANI-file cursor exploit going on.. > http://www.kb.cert.org/vuls/id/191609 > > I patched my amavis pre3 to find those files. As I can see, > there is no easy way to add own magic-signatures in addition > to the default ones? Perhaps there could be some option? Th

Re: [AMaViS-user] ANI exploit

2007-04-03 Thread Mark Martinec
<< more likely than not the best place for some new entry. >> more likely than not NOT the best place for some new entry. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll g

Re: [AMaViS-user] file chokes on too many line feed chars

2007-04-03 Thread Mark Martinec
Conor, > file-4.20 has problems processing a file containing only a large number of > line feed characters (2.7 million in the case we are seeing). file-4.20 > takes a long time (11 minutes on my machine) to process this file. > file-4.19 processes the same file instantly. > Anyone else seeing th

Re: [AMaViS-user] file chokes on too many line feed chars

2007-04-03 Thread Mark Martinec
Henrik, Conor, > > $ perl -e 'for (1..2700) {print "\n" x 1000}' >0.lis > > $ time file 0.lis > Here 0.lis uses 100% CPU on Debian, using package or self > compiled. But no problems on Solaris. > I guess someone should report this bug. Please do so. The author's address is [EMAIL PROTECTED] . (

Re: [AMaViS-user] spurious crashes in sqlite code

2007-04-03 Thread Mark Martinec
Leo, > I'm experiencing some occasional crashes in sqlite-code, using an SQL > enabled amavisd-new-2.5.0-pre3. Those crashes appear once every 1000 mails. It's been a while since the last time I tried it with SQLite. In my experience it was very nice for read-only lookups, but totally inappropria

Re: [AMaViS-user] [SPAM] Re: file chokes on too many line feed chars

2007-04-03 Thread Mark Martinec
Vincent, > Is there anyway for amavisd to avoid the file-4.20 bug before someone use > this as DOS attack? I don't think there is, all mail parts are submitted to file(1) for assessment. The best path is to get file(1) fixed as soon as possible. Better a DOS than a free shell (nonprivileged) on

Re: [AMaViS-user] ANI exploit

2007-04-03 Thread Mark Martinec
John, > It's not completely clear to me. If I understand things correctly, this > patch makes it possible for amavisd to detect the RIFF ani exploit. > But I asume a entry in amavisd.conf is nessecary for blocking this. What > option to amavisd.conf should be added to block the RIFF ani exploit?

Re: [AMaViS-user] Store messages scored as spam?

2007-04-03 Thread Mark Martinec
Larry, > I would like to between spam_tag2_level and spam_kill_level store any of > these tagged message, yet still deliver them (in our case defanged) to the > end user. The purpose is I want to look at any falsely tagged spam and/or > for training bayes. How do I go setting the option to store

Re: [AMaViS-user] Collecting statistics

2007-04-04 Thread Mark Martinec
Tom, > Obviously it does, but it's too much data to store and scan, considering > the amount of mails that comes through our system. > The optimal format would be to store date, time, server, action > and spam sore / virus name The closest thing is to modify sub save_info_preliminary and save_inf

Re: [AMaViS-user] file chokes on too many line feed chars

2007-04-04 Thread Mark Martinec
Conor, > A bit more detail here, it has been narrowed down to 2 regex lines in > magic. Thanks! Here are two replacement lines to the magic file that limit the RE evaluation time on Linux, and produce comparable results. 100 regex/c =^[\ \t]{0,999}call[\ \t]{1,999}rxfu OS/2 REXX batch file text

[AMaViS-user] Fourth public pre-release of amavisd-new: 2.5.0-pre4

2007-04-05 Thread Mark Martinec
A fourth pre-release of amavisd-new-2.5.0 is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.5.0-pre4.tar.gz It is a functional and tested version, but not all work as planned has been completed yet - refinements to disclaimers code are still missing (no changes since -pre2), may

Re: [AMaViS-user] Fourth public pre-release of amavisd-new: 2.5.0-pre4

2007-04-05 Thread Mark Martinec
> http://www.ijs.si/software/amavisd/amavisd-new-2.5.0-pre4.tar.gz Oops, a small glitch, a remake will be availabe in few minutes. Mark - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay

Re: [AMaViS-user] Fourth public pre-release of amavisd-new: 2.5.0-pre4

2007-04-05 Thread Mark Martinec
> Oops, a small glitch, a remake will be availabe in few minutes. Ok, fixed. > > http://www.ijs.si/software/amavisd/amavisd-new-2.5.0-pre4.tar.gz Mark - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge

Re: [AMaViS-user] Amvisd-new and debian etch

2007-04-06 Thread Mark Martinec
Pier, > i see that the subject is not changed and even the headers are not added. > Apr 6 11:13:28 srv-mail amavis[12473]: (12473-01) headers CLUSTERING: > NEW CLUSTER <[EMAIL PROTECTED]>: score=1002.549, tag=0, > tag2=0, subj=0, subj_u=0, local=0, bl=, s= ^^^ th

Re: [AMaViS-user] Fourth public pre-release of amavisd-new: 2.5.0-pre4

2007-04-06 Thread Mark Martinec
Leo, > One change in initializing Net::SMTP since pre3 breaks amavisd on my > system (using Net::SMTP 2.26). This version doesn't accept the hostname > as a named parameter. It expects the hostname as the first argument. > (As amavisd did it in previous versions.) > - Host => $relayhost, Port

Re: [AMaViS-user] Customised original recipient

2007-04-11 Thread Mark Martinec
Jorgen, > We have a server with two names, "name1" and name2". (Used to originally > be two hardware boxes, but they were merged). > So the box is named "named1", and has "named2" as alias. ... ... > What does not work, is that the notify recipient email on virus. > For some reason, the To: is alw

Re: [AMaViS-user] Collecting statistics

2007-04-11 Thread Mark Martinec
Tom, > Looking at the latest release notes, it would appear the optimal way would > be to access the hook mail_done(), and simply connect to a mysql server, > insert the data you want, and disconnect. That is certainly a possibility too. You will have to duplicate some of the SQL connection manag

Re: [AMaViS-user] Amavisd and missing Courier module?

2007-04-11 Thread Mark Martinec
Poltsi, > Hello, I'm building a new email server with Courier 0.54.2 and > amavisd-new 2.4.5 (from Dag repository). I've done the config changes > listed in the README.courier and use amavisd as a perlfilter but when it > is executed amavisd bails out with the following error: > > Problem in the I

Re: [AMaViS-user] Customised original recipient

2007-04-11 Thread Mark Martinec
Lund, > Bummer, since obviously if I hosted mail for Sony and Microsoft on this > box, I do not think it would be ok for email to be sent to [EMAIL PROTECTED] I'm not sure I follow this. The To header field will reflect the actual envelope recipient address. A MTA can accept mail for multiple dom

Re: [AMaViS-user] tmp full, how to process queue ?

2007-04-12 Thread Mark Martinec
Guillaume, > My directory tmp was full. > I removed some old files to be able to start again amavis. > I would wish to treat the directorys which are still present and which > contain emails. > Doesn't Amavis seem to treat them, how to launch the treatment? Stop amavisd, delete all temporary dire

Re: [AMaViS-user] Customised original recipient

2007-04-12 Thread Mark Martinec
Lund, > Still need to hack source to get the "To:" that was actually used > in the email? The following patch achieves what you want. You need 2.5.0-pre2 or later (preferebly the latest: -pre4) to pull this trick. --- amavisd~Thu Apr 5 20:57:28 2007 +++ amavisd Thu Apr 12 17:18:15 200

Re: [AMaViS-user] ClamAV-clamd) FAILED

2007-04-12 Thread Mark Martinec
Jim, > Since the Upgrade on Debian Etch I receive this mistake again: > > (!!)ask_av (ClamAV-clamd) FAILED - unexpected result: > /var/lib/amavis/tmp/amavis-20070413T005640-32403/parts: lstat() > failed. ERROR\n > the entry in group is: amavis:x:109:clamav > and in the clamd.conf is > User clam

Re: [AMaViS-user] Problem starting amavisd-new

2007-04-13 Thread Mark Martinec
Nicklas, > However it seems to play nice now after I renamed some perl folders > (/usr/local/share/perl/5.8.4 > /usr/local/share/perl/5.8.8 and > /usr/local/share/perl/5.8.4 > /usr/local/share/perl/5.8.8 That is not a good practice. Perl modules should be reinstalled after an upgrade of Perl. Kee

Re: [AMaViS-user] What to whitelist?

2007-04-16 Thread Mark Martinec
Michael, > How to whitelist these? When companies insist on using 'VERP' type > envelope addresses? > SURE NOT GOING TO WHITELIST @bounce.mkt027.com > X-Envelope-From: <[EMAIL PROTECTED]> > From: XM Signal <[EMAIL PROTECTED]> Either use SA-based whitelisting mechanisms as Gary suggests, or if the

Re: [AMaViS-user] Marking spam for only one domain

2007-04-17 Thread Mark Martinec
Paolo wrote: > If the MX IP address is on a load balancer with port forwarding > capabilities instead of a real machine, it is also possible to let > postfix smtpd listen on different ports: Gary wrote: > Well, the default would be a maxproc of 100 per listener but I see your > point. As you increa

Re: [AMaViS-user] Marking spam for only one domain

2007-04-17 Thread Mark Martinec
Gary, > > What's the point? Spreading across different port numbers on the same > > host??? Mark > > Thinking about a setup with more than one IP address and the default > 100 maxproc on each interface. Wouldn't this essentially increase > maxproc to 100*interfaces for smtpd? maxproc is not 'no.

Re: [AMaViS-user] PgSQL storage doc clarification

2007-04-17 Thread Mark Martinec
Robert, > I am trying to setup storage in our PgSQL database using the following > doc, but I am not sure which schemas are to be loaded in which > databases. I assume I am to cut/paste the necessary CREATE TABLE > sections as the schema to use? But which tables should be created in > mail_logs an

Re: [AMaViS-user] select policy bank based on client ip when using before queue filter

2007-04-17 Thread Mark Martinec
Leo, > Is there a way to select a different policy bank depending on the client > ip address when using a before-queue setup? > (I know of the example using the FILTER option in postfix lookup tables > but I can't use this to select a different smtpd_proxy_filter.) Unfortunately it does not (yet)

Re: [AMaViS-user] PgSQL storage doc clarification

2007-04-17 Thread Mark Martinec
Robert, > Thanks, that clarified a lot, and WORKS! I had one other question. I see > it logs the from address and client ip, but is there any way to get it > to log recipient server and e-mail address? I'm not sure what you mean. The 'recipient server'? It does store the hostname of the machine

Re: [AMaViS-user] Strange encoding problem

2007-04-17 Thread Mark Martinec
> > http://tinyurl.com/2su6nf > That was the solution :-) Hopefully it will soon be fixed in CPAN. It is a terrible situation. It's been more than two months since this fatal flaw was reported, solution provided, the author made aware of the problem, but the community has been let with the status

Re: [AMaViS-user] FW: [ GLSA 200704-13 ] File: Denial of Service

2007-04-18 Thread Mark Martinec
Gary V wrote: > Yes but package managers for some distros have already patched this so > everyone should install the latest version and then check their system > to determine the need to be manually patched: > http://marc.info/?l=amavis-user&m=117570934617374 Actually the currently cleanest so

Re: [AMaViS-user] problem lha archive extract

2007-04-19 Thread Mark Martinec
On Thursday April 19 2007 08:09:15 Ryuhei Funatsu wrote: > I found a small problem concerning the lha extract. > > The lha file compressed with UNLHA32.DLL Ver 2.02e (Windows tool) > cannot be extract. > The problem is in the difference of the list format. > -rwxr--r-- 0/0 17 100.0% Ap

Re: [AMaViS-user] postfix -> amavis -> postfix (BOUNCE-why?)

2007-04-19 Thread Mark Martinec
> blix postfix/smtp[2330]: C6E011417765: > to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>, > relay=127.0.0.1 [127.0.0.1], delay=1, > status=sent (250 2.5.0 Ok, id=01963-03, BOUNCE) > Off hand it looks like amavis bounced this. Possibly, but not necessarily. Bouncing was the *_destiny of ch

[AMaViS-user] NOTICE: A release candidate of amavisd-new: 2.5.0-rc1

2007-04-19 Thread Mark Martinec
A release candidate for amavisd-new-2.5.0 is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.5.0-rc1.tar.gz Main changes since 2.5.0-pre4: - rewritten SMTP client code: get rid of the troublesome module Net::SMTP; now supports pipelining, client-side LMTP, IPv6, Unix sockets,

Re: [AMaViS-user] Maximum number of attachments

2007-04-20 Thread Mark Martinec
Luca, > there's any way to put a limit for the maximum number of attachments > in an email (like $MAXFILES for archives)? No, it is not available. You may only limit the total mail size. Quotas like $MAXFILES, $MAXLEVELS, $MAX_EXPANSION_QUOTA etc. are mostly intended to protect virus scanners fr

Re: [AMaViS-user] NOTICE: A release candidate of amavisd-new: 2.5.0-rc1

2007-04-20 Thread Mark Martinec
Michael, > I noticed it still loads Domainkeys and DKIM, didn't we do away with > DomainKeys in favor of DKIM? I guess you are right, we can do away with DomainKeys plugin: @@ -17359,4 +17359,5 @@ push(@modules, qw( - AWL AccessDB AntiVirus AutoLearnThreshold DCC DomainKeys MIMEHeader

Re: [AMaViS-user] NOTICE: A release candidate of amavisd-new:2.5.0-rc1

2007-04-20 Thread Mark Martinec
> > Also, I noticed that the amavisd-new freebsd port doesn't call DKIM as a > > runtime dependency, relying on SA to install it. That is fine, amavisd-new does not currently use Mail::DKIM directly. This may change in some future version. > > I should look at adding DKIM as a dependency? No. If

Re: [AMaViS-user] Changing Filtering order - Spam first

2007-04-20 Thread Mark Martinec
Azfar, > I want first amavisd-new perform antispam checks and then antivirus, > can i change this order. You can't. Why would you want that? - virus scanning is fast compared to SA, it's better to spare SA some work on viruses - for viruses a different handling is needed (no bounces, dedica

Re: [AMaViS-user] NOTICE: A release candidate of amavisd-new: 2.5.0-rc1

2007-04-20 Thread Mark Martinec
> I`ve now seen in my log the following error. And only by > restarting amavis. > > What`s wrong? > amavis[7027]: (!)_DIE: Can't locate > Mail/SpamAssassin/CompiledRegexps/body_0.pm in @INC (@INC > contains: /var/lib/spamassassin/compiled /3.002000 > /var/lib/spamassassin/compiled/3.002000/auto ..

[AMaViS-user] NOTICE(2): A release candidate of amavisd-new: 2.5.0-rc2

2007-04-20 Thread Mark Martinec
A second release candidate for amavisd-new-2.5.0 is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.5.0-rc2.tar.gz Only small changes since -rc1: - fixed templates in the program and config file, - cleaner smtp timing configuration options, - disclaimers use 2822.From address to

Re: [AMaViS-user] Spam tag subject line

2007-04-22 Thread Mark Martinec
> > @local_domains_maps = ( [".$mydomain", ".example.com", ".example2.com"]) > > I think you've got it set for ".example.com", which will not match > "example.com". Try removing the leading dots. No, no, the .example.com _does_ include example.com, along with its subdomains. See README.lookup

Re: [AMaViS-user] Spam tag subject line

2007-04-22 Thread Mark Martinec
Robert, > Still haven't been able to get multiple select domains to tag the > subject line. Here is all my related settings, can someone suggest why I > cannot get subject line tagging for example.com and example2.com? Do I > have my arrays setup correctly? > > @local_domains_maps = ( [".$mydomain

[AMaViS-user] ANNOUNCE: amavisd-new-2.5.0 RELEASED

2007-04-22 Thread Mark Martinec
A final release of amavisd-new-2.5.0 is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.5.0.tar.gz NEW FEATURES AT A GLANCE - new concept: blocking contents category; - true per-recipient defanging/sanitation of a mail body (previously a true per-recipient handling was avail

Re: [AMaViS-user] AMAVIS Dying

2007-04-23 Thread Mark Martinec
Luis Hernán Otegui, > Hi, list, I've got a recurrent problem, and I think I've been able to track > it down to its cause, but I would like to have some opinions from more > experienced people. > > Every sunday AMAVIS dies, and a lot of mail gets queued until I restart the > service. It appears to h

Re: [AMaViS-user] ANNOUNCE: amavisd-new-2.5.0 RELEASED

2007-04-23 Thread Mark Martinec
Some supplementary information on the new SMTP/LMTP client code, which didn't make it into release notes included with a package (but is now included in the on-line version or release notes): - drop the use of libnet (modules Net::SMTP and Net::Cmd), replaced by own code to implement client-sid

Re: [AMaViS-user] ANNOUNCE: amavisd-new-2.5.0 RELEASED

2007-04-23 Thread Mark Martinec
boricua, > getting this error not sure the vscan error what it is > > > Apr 23 20:00:42 pepino amavis[17865]: starting. /usr/bin/amavisd at > pepino.is-a-geek.org amavisd-new-2.5.0 (20070423), Unicode aware, > LANG="en_US" Apr 23 20:00:42 pepino amavis[17865]: Perl version > 5.00800

Re: [AMaViS-user] Policy Banks

2007-04-24 Thread Mark Martinec
Jason, > Policy Banks, being "new" to amavisd are definitely new to me. The > "originating" style policy bank is very appealing to me, and I would > like to implement this. I realize there are a few methods to > accommodate this. I think I would prefer to do it with XFORWARD from > postfix.

Re: [AMaViS-user] Quarantined Spammails sorted by date, again?

2007-05-09 Thread Mark Martinec
Matthias, > Is it possilble to change quarantine-settings for "file-naming" of > quarantined items and where do i have to do this? > new format: > /var/lib/amavis/virusmails/spam-zhUP2pIl4N2X.gz > old format: > /spam-57db2a646a8cd015efbfbae443b997c6-20060926-200024-32648-02.gz > I wrote a script

Re: [AMaViS-user] Modify the call for spamassassin in the SA-Plugin

2007-05-09 Thread Mark Martinec
Mauro, > The reasoning goes like this: we do all our alias- and > list-expansion before calling the spamfilters to handle the > inabilities of some of our mailfilters (not all are as flexible as > AMaViS) and particularly to have per-user-filtering even on > our lists. So when AMaViS gets the mail

Re: [AMaViS-user] How to receive quarantined spam?

2007-05-09 Thread Mark Martinec
Dave, > I'm sorry for jumping in, but I have a question about this. Is it > possible to configure amavis to do *both*...i.e., send caught spam to > the local quarantine directory, as well as send a copy of it to a > configurable email address? Possible. Do the quarantining as usual (e.g. to a fi

Re: [AMaViS-user] Template customization, %F variable

2007-05-09 Thread Mark Martinec
Teodor, > I need to modify the notification email send by amavis when a banned file > name is detected. Specifically, I need to customize the content of the %F > variable, because is too verbose and confuzing our users :) > > A tipically message for banned file graph.zip shows: > banned name: mult

Re: [AMaViS-user] original message body in banned warging message template

2007-05-09 Thread Mark Martinec
Teodor, > How can I put in the notify_virus_recips_templ the body of the original > message? Use defanging instead of recipient notifications: $defang_virus = 1; $final_virus_destiny = D_PASS; It will push the original infected message to an attachment, and prepend some warning text. It is

Re: [AMaViS-user] oversized quarantine

2007-05-09 Thread Mark Martinec
Dan, > I've been poking through the code lately, and looks like most of the > code is in there to quarantine messages based on size, but it doesn't > appear to be completely "done". I've got a client specifically asking > about this and so was curious what it might take to finish this up. > Ideas

Re: [AMaViS-user] postfix/amavisd-new

2007-05-10 Thread Mark Martinec
On Friday May 11 2007 00:51:14 Bill Landry wrote: > So explain a situation where the first filter would *not* apply. As > written, it applies to everything and anything after > "check_client_access pcre:/etc/postfix/filter_outbound" is useless, as > everything will be sent to the first content_fil

Re: [AMaViS-user] Amavisd listen on the public interface instead of localhost

2007-05-11 Thread Mark Martinec
Alejandro, > [...] I get amavisd daemon running > OK, listening on localhost:10024, and there I had this line: > @inet_acl = qw( 10.1.1.3 ) > where 10.1.1.3 is the public IP from the mail server. > > Now in the new amavisd-new version I have the /etc/amavis/conf.d files > and amavisd is listening

Re: [AMaViS-user] SQL Error

2007-05-13 Thread Mark Martinec
Markus, > Debian etch, amavisd-new 2.5.0, Perl 5.8.8, > mysql 5.0.32-Debian_7etch1-log > > May 11 17:29:22 localhost amavis[22607]: (22607-07-4) (!!)TROUBLE in > check_mail: quar+notif FAILED: temporarily unable to quarantine: 451 > 4.5.0 Storing to sql db as mail_id X97DK1raAEHO failed: writing m

Re: [AMaViS-user] SQL Error

2007-05-13 Thread Mark Martinec
Markus, Vahur, Michael, > Cannot add or update a child row: a foreign key constraint fails > `amavisd/quarantine`, CONSTRAINT `quarantine_ibfk_1` >FOREIGN KEY (`mail_id`) REFERENCES `msgs` (`mail_id`) I see, a bug indeed (an overoptimization). Here is a fix: --- amavisd~Mon Apr 23 05:25

Re: [AMaViS-user] NOD32/Amavis config

2007-05-14 Thread Mark Martinec
Simon, > > Hi There, We are running NOD32 on Debian Linux (sarge). We are using > > amavis-new (standard debian sarge package) to do the scanning of mail > > as it comes into our mail-gateway (postfix). We are having a > > configuration issue with amavis-new and nod32. This is the output of > > th

Re: [AMaViS-user] How to receive quarantined spam?

2007-05-14 Thread Mark Martinec
Jason, > >> I'm sorry for jumping in, but I have a question about this. Is it > >> possible to configure amavis to do *both*...i.e., send caught spam to > >> the local quarantine directory, as well as send a copy of it to a > >> configurable email address? > > > >Possible. Do the quarantining as

Re: [AMaViS-user] original message body in banned warging message template

2007-05-14 Thread Mark Martinec
Teodor, > > Use defanging instead of recipient notifications: [...] > > It will push the original infected message to an attachment, > > and prepend some warning text. > > It is currently not possible to provide mail body in notifications, > > as no macro is associated with mail body because mail

Re: [AMaViS-user] errors upon reload

2007-05-14 Thread Mark Martinec
Luis, > Hi, anyone has a clue on what could cause the command > # /etc/init.d/amavis reload > to fail? the line I find on syslog is > > May 13 06:25:50 nahuel amavis[7609]: Net::Server: 2007/05/13-06:25:50 > Server closing! > May 13 06:25:50 nahuel amavis[7609]: Net::Server: 2007/05/13-06:25:50 >

Re: [AMaViS-user] WARN: sending SMTP QUIT command failed: 599 Connection closed - what does it mean??

2007-05-15 Thread Mark Martinec
nikss, > i am getting in amavisd-new logs > WARN: sending SMTP QUIT command failed: 599 Connection closed > > what does it mean?? is it something wrong going on amavisd-new?? If there are no other errors logged before, it can be treated as an informational message only - it seems the server didn'

<    3   4   5   6   7   8   9   10   11   12   >