***ACHTUNG UNGEPRUEFT*** RE: Amavis stats

2021-02-04 Thread Hoyer-Reuther, Christian
--- Begin Message --- Hello, you could use logwatch. It provides some of the information you need. Example: logwatch --service amavis --range yesterday --detail medium Regards, Christian -Ursprüngliche Nachricht- Von: amavis-users Im Auftrag von Nikolaos Milas Gesendet: Mittwoch,

RE: Finding the version number from amavis.

2020-01-17 Thread Hoyer-Reuther, Christian
grep myversion_id amavisd-new -Ursprüngliche Nachricht- Von: amavis-users Im Auftrag von Philip Gesendet: Samstag, 18. Januar 2020 05:32 An: amavis-users@amavis.org Betreff: Finding the version number from amavis. How do I find out what version of amavis-new is running on your server?

RE: compressed files and 3rd-party tools to unpack them - why not let them do the job?

2019-08-01 Thread Hoyer-Reuther, Christian
Hi Stefan, amavis needs the decoders to detect banned files in archives. For example, if no decoder for .rar is used then exe files in rar archives will not be detected. Regards, Christian Von: amavis-users Im Auftrag von Stefan Bauer Gesendet: Donnerstag, 1. August 2019 14:46 An:

Re: Email WhiteListing Attachments with Amavis and Microsoft Files

2018-11-09 Thread Hoyer-Reuther, Christian
Hello, you could try this: [ qr'^application/(doc|docx|ppt|pdf|xls|vsd)$'i => 0 ], Regards, Christian -Ursprüngliche Nachricht- Von: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-chem...@amavis.org] Im Auftrag von Johnny Time Gesendet: Freitag, 9. November

RE: detect and block ACE archive

2018-04-20 Thread Hoyer-Reuther, Christian
> Is it possible to add map_full_type_to_short_type_re to > /etc/amavisd/amavisd.conf as any update of package is going to wipe ACE > detection from /usr/sbin/amavisd ? I don't know, but you can try if it works when you copy the $map_full_type_to_short_type_re section to amavisd.conf. > Is

Re: detect and block ACE archive

2018-04-20 Thread Hoyer-Reuther, Christian
Hello Marcin, here is how you can block ACE archives: First you need to add the following line to $map_full_type_to_short_type_re in /usr/sbin/amavisd-new: $map_full_type_to_short_type_re = [ … [qr/^ACE archive\b/i => 'ace-unwanted'], <=== add this line …

Re: Block ..rar files in amavisd

2018-01-12 Thread Hoyer-Reuther, Christian
Hello Jonathan, this should work: qr'.\.(com|exe|rar)$' Regards, Christian -Ursprüngliche Nachricht- Von: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-chem...@amavis.org] Im Auftrag von Jonathan Sélea Gesendet: Freitag, 12. Januar 2018 14:25 An:

Re: Mail Banned Message confusing Blocked BANNED (_rels)

2017-09-07 Thread Hoyer-Reuther, Christian
Hello Götz, you can copy the "%smtp_reason_by_ccat = ( ..." section from /usr/sbin/amavisd-new to your amavisd config and then modify it. Here is an example: %smtp_reason_by_ccat = ( # currently only used for blocked messages only, status 5xx # a multiline message will produce a valid

Re: Tag spam only for recipients from a domain

2017-06-06 Thread Hoyer-Reuther, Christian
Hello, you can try the following: @spam_lovers_maps = ({ 'b...@example.com' => 0, # never, even if domain matches 'example.com' => 1, # this domain, but not it's subdomains '.example.com' => 1, # this domain and it's subdomains }); Using the ..._lovers_maps amavis scans the

Re: block exe in pdf-files?

2017-05-31 Thread Hoyer-Reuther, Christian
Hello, we use the settings posted by Dino and recently ClamAV detected MS office macros (Heuristics.OLE2.ContainsMacros) in several mails with attached pdf files. I guess these mails contained the Jaff ransomware. Regards, Christian -Original Message- From: amavis-users

Re: @score_sender_maps not working for some addresses

2017-03-30 Thread Hoyer-Reuther, Christian
domain-a@amavis.org$'i => -10.0], ), ], }); In addition we need to escape the + with \ inside of new_RE. Regards, Christian From: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-chem...@amavis.org] On Behalf Of Hoyer-Reuther, Christian Sent: Tuesday, March 14, 2017

Re: Keep X-Spam-... header lines when releasing message from quarantine?

2017-03-28 Thread Hoyer-Reuther, Christian
amavis.org Betreff: Re: Keep X-Spam-... header lines when releasing message from quarantine? Hello Christian, Would this cause any headers added by SpamAssassin to still be there, even on initial delivery, or does this only affect the AMaViS headers? Thanks, Markus On 03/28/2017 09:48 AM, Hoy

Re: Keep X-Spam-... header lines when releasing message from quarantine?

2017-03-28 Thread Hoyer-Reuther, Christian
Hello Rich, you can try if the following helps: $remove_existing_spam_headers = undef; $remove_existing_x_scanned_headers = undef; Regards, Christian -Ursprüngliche Nachricht- Von: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac-chem...@amavis.org] Im

Re: @score_sender_maps not working for some addresses

2017-03-20 Thread Hoyer-Reuther, Christian
Hello, thanks, but escaping the "+" does not help. Any other ideas? Regards, Christian -Original Message- From: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com] Sent: Wednesday, March 15, 2017 9:24 AM To: Hoyer-Reuther, Christian Subject: Re: @score_s

@score_sender_maps not working for some addresses

2017-03-14 Thread Hoyer-Reuther, Christian
Hello, I use @score_sender_maps for soft-whitelisting mails from some senders to some recipients (Amavis 2.10.1). Here is an example: @score_sender_maps = ({ 're...@domain-b.com' => [{'sen...@domain-a.com' => -10.0}], 're...@domain-b.com' =>

Re: Modifying subject for encrypted attachments

2016-10-25 Thread Hoyer-Reuther, Christian
Hello Alex, you can use: $undecipherable_subject_tag = '+++Virus scan failed+++ '; The is '***UNCHECKED*** ' Regards, Christian > -Original Message- > From: amavis-users [mailto:amavis-users-bounces+christian.hoyer-reuther=cac- > chem...@amavis.org] On Behalf Of Alex > Sent: Tuesday,

How to modify banned reason

2016-10-18 Thread Hoyer-Reuther, Christian
Hello, using amavisd-new 2.10.1 on Debian 8 I want to modify the banned reason as follows: %smtp_reason_by_ccat = ( # currently only used for blocked messages only, status 5xx # a multiline message will produce a valid multiline SMTP response CC_VIRUS, 'id=%n - INFECTED: %V', #

Re: List issues?

2016-09-21 Thread Hoyer-Reuther, Christian
er=cac- > chem...@amavis.org] On Behalf Of Patrick Ben Koetter > Sent: Tuesday, September 20, 2016 11:41 PM > To: amavis-users@amavis.org > Subject: Re: List issues? > > * Hoyer-Reuther, Christian <christian.hoyer-reut...@cac-chem.de>: > > It seems the prob

Re: Encrypted archives and 7z on Debian Jessie (amavis 2.10.1)

2016-09-21 Thread Hoyer-Reuther, Christian
er=cac- > chem...@amavis.org] On Behalf Of Hoyer-Reuther, Christian > Sent: Wednesday, September 14, 2016 2:11 PM > To: amavis-users@amavis.org > Subject: Encrypted archives and 7z on Debian Jessie (amavis 2.10.1) > > Hello, > > our mailserver run amavisd-new-2.10.1 on Debi

Re: List issues?

2016-09-20 Thread Hoyer-Reuther, Christian
It seems the problem is when we reply then the e-mail is not addressed to amavis-users@amavis.org but to the sender of the last mail. > -Original Message- > From: Hoyer-Reuther, Christian > Sent: Friday, September 16, 2016 2:34 PM > To: '@lbutlr' > Subject: Re: List iss

Re: Encrypted archives and 7z on Debian Jessie (amavis 2.10.1)

2016-09-20 Thread Hoyer-Reuther, Christian
Using the internal decoder for 7z archives doesn't work. I created unencrypted 7z archives with 7-Zip [64] 16.02 (Windows version) with 4 different compression methods (lzma2, lzma, ppmd, bzip2). Here are the results: Test 7z-file with internal decoder (lzma2) amavis[5901]: (05901-01) p002 1/2