Re: [AMaViS-user] is amavisd/milter supposed to forge a Received header for SpamAssassin?

2006-12-01 Thread Jo Rhett
Petr Rehor wrote: There is a patch for testing (relative to amavisd-milter 1.2.0): http://home.i.cz/reho/amavisd-milter/received.diff release? -- Jo Rhett Network/Software Engineer Net Consonance - Take Surveys. Earn

[AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use on internal postfix server?

2006-12-01 Thread Peter Farrell
Hi all: I have set up 2 DMZ postfix serveris 2.0.18 and 2.2.2 I want to check the mail on the DMZ, and forward it to the internal mail server, which should not have to check the mail a second time. I thought I should send it to 192.168.0.99:10025 (the feedback from AMaViS to the Postfix queue)

Re: [AMaViS-user] amavis

2006-12-01 Thread Mark Martinec
Macci, I'm running FC5 with postfix, amavisd-new and spamassassin and ClamAv. The spam is being tag as spam, but its not forwarded to my junk mail box and it does not looks like it is being scaned by ClamAv. Here is my maillog. Dec 1 13:04:09 genesisprojects spamd[17004]: spamd: connection

Re: [AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use on internal postfix server?

2006-12-01 Thread Mark Martinec
Peter, I thought I should send it to 192.168.0.99:10025 (the feedback from AMaViS to the Postfix queue) in order for it not to be double checked. The connections are refused: (no firewall) Dec 1 14:31:01 pollux.scarceskills.com /usr/local/sbin/amavisd[22381]: (22381-03) (!)FWD via SMTP:

Re: [AMaViS-user] amavis

2006-12-01 Thread Kai Fürstenberg
Maccie Roux wrote: Hi there. Hello, I'm running FC5 with postfix, amavisd-new and spamassassin and ClamAv. The spam is being tag as spam, but its not forwarded to my junk mail box and it does not looks like it is being scaned by ClamAv. Here is my maillog. Dec 1 13:04:08 genesisprojects

Re: [AMaViS-user] Determining which rules a clean message violated

2006-12-01 Thread Mark Martinec
Michael, ... To facilitate training I quarantine clean messages for 7 days along with all the others. The problem I have, is in finding out which SpamAssassin rules a clean message actually triggered. These show up in the headers of the delivered message, but not in the quarantined message

Re: [AMaViS-user] [OT] Virus heads up

2006-12-01 Thread Gary V
Gary wrote: Public service announcement. For the last 18 hours I have been receiving an undetected virus (only recently detected on my system by BitDefender). It is an encrypted zip with a provided (gif image) password. The name of the zip file has the word 'prices' within it. It is another

Re: [AMaViS-user] [OT] Virus heads up

2006-12-01 Thread Mike Husmann
On Fri, December 1, 2006 10:54 am, Gary V wrote: Gary wrote: Public service announcement. For the last 18 hours I have been receiving an undetected virus (only recently detected on my system by BitDefender). It is an encrypted zip with a provided (gif image) password. The name of the zip

Re: [AMaViS-user] [OT] Virus heads up

2006-12-01 Thread Mark Martinec
We got our first specimen on Nov 30 19:40 UTC, and at first these only hit 'Blocked UNCHECKED'. The first recognized by Sophos as W32/Bagle-Zip came in on Dec 1 03:10 UTC, but still not all of them are recognized. P.S. all of these UNCHECKED (not yet recognized as infected) scored 21..25 hits

Re: [AMaViS-user] [OT] Virus heads up

2006-12-01 Thread Mark Martinec
P.S. all of these UNCHECKED (not yet recognized as infected) scored 21..25 hits by SA, so luckily it's not a big deal when spam checking is turned on. Pictures in a virus are bogging down virus propagation, nice! P.P.S: some of the more pronounced SA tests hit by W32/Bagle-Zip: BAYES_60 = 1

Re: [AMaViS-user] spam reports get spam treatment, how to workaround ?

2006-12-01 Thread MrC
I have amavisd-new and postfix; I use Postconf's spamreport to send blocked email reports to some users; as of few weeks ago, *some* of my spam reports get canned as 'spam' and, don't go very far. what's my best solution to exempt or what should I do to allow spam reports to be delivered

Re: [AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use oninternal postfix server?

2006-12-01 Thread MrC
I have set up 2 DMZ postfix serveris 2.0.18 and 2.2.2 I want to check the mail on the DMZ, and forward it to the internal mail server, which should not have to check the mail a second time. I thought I should send it to 192.168.0.99:10025 (the feedback from AMaViS to the Postfix queue)

Re: [AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use on internal postfix server?

2006-12-01 Thread Mark Martinec
Peter, You have restricted smtpd service to bind on a loopback interface, which is why it won't listen on other interfaces. Remove the restriction: 10025 inet n -n - - smtpd -o mynetworks=127.0.0.0/8,192.168.0.0/24 Do you mean in master.cf, on the receiving server - remove the 10025 line

[AMaViS-user] Messages getting caught in Postfix's Queue

2006-12-01 Thread MBGaskins
I know that I mentioned Postfix in the subject but I think the behaviour I'm witnessing is caused by Amavisd-new. I am building up lots and lots of messages caught in my postfix queue with the following message: (host 127.0.0.1[127.0.0.1] said: 421 4.3.2 Service shutting down, closing channel

Re: [AMaViS-user] FW: Your message to AMaViS-user awaits moderator approval

2006-12-01 Thread Mark Martinec
Melissa, I keep getting this when I try to post to the list. Do you know why? Your mail to 'AMaViS-user' with the subject @bypass_spam_checks_acl not working? Is being held until the list moderator can review it for approval. The list has no active moderators, so I can only guess. The

Re: [AMaViS-user] SA whitelist usage

2006-12-01 Thread Mark Martinec
Andres, RCVD_IN_DSBL=2.6, RCVD_IN_SORBS_DUL=2.046, The user is sending email OUTSIDE my network, because he works at other location. And uses SASL Auth. He uses an automatic IP given by his ISP ( Could it be that IP being blacklisted because of the public condition?) Mail is being checked