Re: [courier-users] Courier is malware

2016-06-02 Thread Mark Constable
On 03/06/16 11:44, Sam Varshavchik wrote:
> If Sourceforge doesn't resolve it tomorrow, or I get an unhelpful
> response, they won't follow-up until Monday; and I'll just replace
> all the links with the direct download links, bypassing Sourceforge's
> banner ads, for now.

FWIW how about replacing SF altogether with...

https://help.github.com/articles/creating-releases/

scriptable API for above...

https://developer.github.com/v3/repos/releases/#create-a-release

and this could also be useful...

https://help.github.com/articles/versioning-large-files/


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] Courier is malware

2016-06-02 Thread Sam Varshavchik

Zenon Panoussis writes:



Apocalypse has happened: the sun rose from the west and Sam
is now peddling malware. Proof:

http://qdh.nl/tmp/courier-is-malware.png .)

Sam, will you have a word with them?


I saw that about an hour ago with courier-imap-4.71.1. Verified the pgp sig,  
so Sourceforge has not been compromised, so that's good. Just to be sure, I  
uploaded courier-imap-4.71.1 to virustotal.com, and it didn't find anything.  
After that, I opened a support ticket with Sourceforge.


Now, given that Sourceforge is apparently doing this with other files too  
(and I won't waste my time uploading another file to virustotal), I did some  
digging around their help center (Sourceforge will probably not get around  
to reading my ticket until tomorrow), and found this page:


https://sourceforge.net/projects/courier/malware

which appears to be only visible to me, so here's the dump:

http://www.courier-mta.org/sourceforge-malware.pdf

From that, it's obvious to me that Sourceforge's malware scanner is on the  
fritz; and they rigged their system with a failsafe that if their virus  
scanner blows up, it defaults to malware being detected. Which is not really  
such a bad idea.


But one thing's bugging me, according to that, Sourceforge's malware scanner  
has been tossing its cookies for well over a month now, and this is the  
first time someone noticed it.


That could mean only one of two things. 1) Courier project isn't really  
getting much traffic for anyone to notice, and that's entirely plausible;  
and/or 2) Even the dates on that page are bogus.


Anyway, I'll give Sourceforge until tomorrow to figure out what's going on.  
My links from the download page are Sourceforge's default download links,  
that put up an interstitial with Sourceforge's banner ads, before starting  
the download. I am fine with Sourceforge trying to make a few pennies, here  
or there; but it looks like that it's possible to link directly to the  
downloads, bypassing Sourceforge's interstitial page with the bogus warnings.


If Sourceforge doesn't resolve it tomorrow, or I get an unhelpful response,  
they won't follow-up until Monday; and I'll just replace all the links with  
the direct download links, bypassing Sourceforge's banner ads, for now.




pgpoEFE6GIKVM.pgp
Description: PGP signature
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] courier-analog 0.17 released

2016-06-02 Thread Sam Varshavchik

Zenon Panoussis writes:



> • Added BuildRequires: perl-generators to the Fedora rpm spec file.

It breaks RHEL7 and its clones. There's no perl-generators there,
and if you grab it from Fedora and compile it, when you try to
install it you run into


[ … ]

Yeah. Feel free to ditch that BuildRequires: line. At some point,  
eventually, down the road, a future version of RHEL will, of course,  
incorporate the current RPM configuration. But that's some ways from now.  
For now, I need to figure out the best way to support both the current  
Fedora build requirements, and the legacy config.


However, since /usr/lib/rpm/perl.req appears to already exist, in some form,  
on RHEL, perhaps a BuildRequires: /usr/lib/rpm/perl.req will work, instead.  
Will do some testing.




pgpDlN1PTfMMm.pgp
Description: PGP signature
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] Courier is malware

2016-06-02 Thread Zenon Panoussis

Apocalypse has happened: the sun rose from the west and Sam
is now peddling malware. Proof:

http://qdh.nl/tmp/courier-is-malware.png .)

Sam, will you have a word with them?

Z



--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] courier-analog 0.17 released

2016-06-02 Thread Zenon Panoussis

> • Added BuildRequires: perl-generators to the Fedora rpm spec file.

It breaks RHEL7 and its clones. There's no perl-generators there,
and if you grab it from Fedora and compile it, when you try to
install it you run into

Transaction check error:
  file /usr/lib/rpm/perl.prov from install of perl-generators-1.06-1.el7.noarch 
conflicts with file from package rpm-build-4.11.3-17.el7.x86_64
  file /usr/lib/rpm/perl.req from install of perl-generators-1.06-1.el7.noarch 
conflicts with file from package rpm-build-4.11.3-17.el7.x86_64

Z



--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] courier-analog 0.17 released

2016-06-02 Thread Sam Varshavchik

Download: http://www.courier-mta.org/download.php#analog

Changes:

• Added BuildRequires: perl-generators to the Fedora rpm spec file.

• Fixes inadvertent creation of empty directories in the root directory if  
courier-analog is executed without the --html option.




pgp7QZ6QSuAqc.pgp
Description: PGP signature
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] courier-analog creates directories in root

2016-06-02 Thread SZÉPE Viktor

Good afternoon!

After some grepping in the source, changing

  mkdir ("$htmldir/*", 0777);

to

  mkdir ("$htmldir/*", 0777) if $html;

solves the problem. Altogether 14 times.
I use analog for stdout reporting only, no HTML necessary.

All the best!


SZÉPE Viktor
-- 
+36-20-4242498  s...@szepe.net  skype: szepe.viktor
Budapest, III. kerület





--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users