[Mimedefang] on the fly s/mime signing

Hi, is there an easy way to sign outgoing emails from a single user with s/mime on the fly? I found https://signing-milter.org/ milter, but don't want to set up another milter. Did someone implemented this with mimedefang? Ciao Marcus ___ NOTE: If

Re: [Mimedefang] filter on header from display name

Am Montag, den 26.11.2018, 13:02 -0500 schrieb Dianne Skoll: > On Mon, 26 Nov 2018 17:55:57 +0100 > Marcus Schopen wrote: > > > is always the same, but I can't catch it with blacklist_from. Can I > > get > > that from $entity->head->get('From') or any better ide

[Mimedefang] filter on header from display name

Hi, I see a spammer, who sends with different envelope from and header from, but the "display name" in header from always contains the same substring, e.g.: From: "Spammer " The part From: "Spammer " is always the same, but I can't catch it with blacklist_from. Can I get that from

Re: [Mimedefang] action_drop_with_warning and refuse to sender

Am Freitag, den 24.08.2018, 08:42 + schrieb Paul Murphy: > > > a REJECT is not a bounce, its a denied to accept it > > A REJECT is potentially likely to cause a bounce, but yeah... it > > won't > > be backscatter from your machine. > > Plus a REJECT is only possible if you don't stream by

Re: [Mimedefang] action_drop_with_warning and refuse to sender

Am Donnerstag, den 23.08.2018, 19:50 +0200 schrieb Benny Pedersen via MIMEDefang: > Paul Murphy skrev den 2018-08-23 18:49: > > Yes, but pointless - either just drop the attachment, or drop the > > whole message with action_discard. Don't bounce it > > a REJECT is not a bounce, its a denied to

[Mimedefang] action_drop_with_warning and refuse to sender

Hi, in case of a virus I'd like to refuse with a "554 5.7.1" and send a warning email to the recipiet with "action_drop_with_warning". A mixture of "action_bounce" and "action_drop_with_warning". Is that possible? Cheers m ___ NOTE: If there is a

Re: [Mimedefang] score USER_IN_WHITELIST_TO

Am Dienstag, den 21.11.2017, 10:32 -0500 schrieb Bill Cole: > On 20 Nov 2017, at 16:41 (-0500), Kris Deugau wrote: > > > USER_IN_WHITELIST_TO applies to all mail for a given recipient; IMO > > it's a crude hack to work around cases where whatever is calling SA > > can't use the SA userprefs

[Mimedefang] score USER_IN_WHITELIST_TO

Hi, setting whitelist_to in sa-mimedefang.cf seems to hit score USER_IN_WHITELIST_TO -6.0 # they want some spam spamassassin score, so the score is reduced by a value of 6.0. How do I hit the -100 score score USER_IN_WHITELIST-100.0 using

Re: [Mimedefang] filter on header From:

Hi Dianne, Am Dienstag, den 09.05.2017, 09:46 -0400 schrieb Dianne Skoll: [...] > No, because the filter_recipient and filter_begin/filter_end functions > may not be called in the same process. > > You can define a function called filter_initialize() that will get called > once when a new

Re: [Mimedefang] filter on header From:

Am Dienstag, den 09.05.2017, 14:45 +0200 schrieb Marcus Schopen: > The hash file is created with > > makemap hash testhash.db < testhash.txt Just found out, that I can use the -e option using makemap to allow empty value on right hand side, so the format now is just one email

Re: [Mimedefang] filter on header From:

Hi Kris, Am Dienstag, den 09.05.2017, 10:51 +0200 schrieb Marcus Schopen: > Is there a way to load the key-value hash table file only at > start/reread/reload of mimedefang and not read it on each incoming email > in filter_end? Haha, we had a similar discussion three years a ago

Re: [Mimedefang] filter on header From:

Hi Kris, Am Montag, den 08.05.2017, 17:27 -0400 schrieb Kris Deugau: > You would have to fill it in first, by extracting it from the > MIME::Entity passed to the filter_end sub; something like (untested, > check MIME::Tools documentation): > > $fromaddr = $entity->head->get('From'); >

Re: [Mimedefang] filter on header From:

Hi Kris, Am Montag, den 08.05.2017, 11:13 -0400 schrieb Kris Deugau: > if ($hashfile{$fromaddr}) { >action_add_header("SpecialHeader", "$fromaddr found in list"); > } > Ah, good idea. Thanks! But if I just add this to filter_end action_add_header("X-SpecialHeader", "$fromAddr test");

[Mimedefang] filter on header From:

Hei, I have a text base list of email addresses (one email per line). Where would I best filter on header "From: " (not envelope from) in mimedefang-filter and add an additional mail header in case of a hit? At the moment I use spamassassin rules to tag such mails in filter_end, but spamassassin

Re: [Mimedefang] Empty Variables in filter_recipient

Hi Jente, see man page of mimedefang-filter "In filter_recipient, it is set to the single recipient currently under consideration." There is also a good "sub filter_recipient" example in that man page. Ciao! ___ NOTE: If there is a disclaimer or

[Mimedefang] action_drop_with_warning with recipient depending message

Hi, depending on the recipient I'd like to drop with different warning messages using action_drop_with_warning e.g. when a virus is found. As I understand action_drop_with_warning, it drops with the same message at one go for each recipient in case of multiple recipients, so calling

Re: [Mimedefang] resending mails from quarantine, modify Message-ID or use Resent-Headers?

Am Dienstag, den 03.01.2017, 19:58 +0100 schrieb Peter Bonivart: > On Tue, Jan 3, 2017 at 7:19 PM, Marcus Schopen <li...@localguru.de> wrote: > > Hi, > > > > I'm playing around with resending quarantined emails, if the user wants > > them to be delivered and ch

[Mimedefang] resending mails from quarantine, modify Message-ID or use Resent-Headers?

Hi, I'm playing around with resending quarantined emails, if the user wants them to be delivered and check locally. I set Resent-Headers in those resent messages, so that cyrus delivers and doesn't drop them as duplicates. Some users users pop their mailboxes with exchange or popcon. Any

Re: [Mimedefang] calling external shell script without waiting for its end

Hi Dianne, Thanks for your time. Am Montag, den 02.01.2017, 15:45 -0500 schrieb Dianne Skoll: > On Mon, 02 Jan 2017 19:26:44 +0100 > Marcus Schopen <li...@localguru.de> wrote: > > > When calling an external bash script in filter_end like > > > system("/usr/

[Mimedefang] calling external shell script without waiting for its end

Hi, happy new year to all! :) When calling an external bash script in filter_end like system("/usr/local/bin/skript.sh $QueueID > /dev/null &"); I get the following error from time to time (mostly on receiving many simultaneously mails): Jan 2 18:38:13 serv mimedefang-multiplexor[7447]:

Re: [Mimedefang] add_header all RelaysUntrusted _RELAYSUNTRUSTED_

Hi Dianne, thanks for your time. Am Mittwoch, den 14.12.2016, 09:42 -0500 schrieb Dianne Skoll: > On Wed, 14 Dec 2016 12:54:38 +0100 > Marcus Schopen <li...@localguru.de> wrote: > > > > I'd like to set a "add_header all RelaysUntrusted > > > _RELAYSUNT

Re: [Mimedefang] add_header all RelaysUntrusted _RELAYSUNTRUSTED_

Am Montag, den 12.12.2016, 23:30 +0100 schrieb Marcus Schopen: > Hi, > > I'd like to set a "add_header all RelaysUntrusted _RELAYSUNTRUSTED_" to > my headers, to see in case of IPs in trusted_networks on which IPs > dnsrbl and dnswl checks run on. But putting thi

Re: [Mimedefang] add_header all RelaysUntrusted _RELAYSUNTRUSTED_

Am Montag, den 12.12.2016, 17:46 -0500 schrieb Kevin A. McGrail: > On 12/12/2016 5:30 PM, Marcus Schopen wrote: > > I'd like to set a "add_header all RelaysUntrusted _RELAYSUNTRUSTED_" to > > my headers, to see in case of IPs in trusted_networks on which IPs > &

Re: [Mimedefang] Mimedefang-Problem

Hi Sauraj, Am Mittwoch, den 07.12.2016, 16:38 +0545 schrieb sauraj: > Dear all, > > I have been using mimedefang for long time with sendmail as the MTA but when > I try to change the MTA to postfix and use mimedefang it seems to be not > working. Could you please help me with this. Hmmm, hard

Re: [Mimedefang] Connecting Clamd via inet socket?

Hi Benoît, Am Freitag, den 02.12.2016, 16:57 +0100 schrieb Benoit Panizzon: > Hi all > > Does anyone know, if it's possible to use > > ClamdSock = "host:port"; > > in MIMEDefang? > > I found very old posts stating, that clamd can only scan local files, > thus has to be called on the machine

Re: [Mimedefang] Multiple MIMEDefang instances (was Re: strip down mimedefang-filter to sub filter_recipient for md_check_against_smtp_server checks)

Hi Dianne, Am Dienstag, den 11.10.2016, 13:10 -0400 schrieb Dianne Skoll: > On Tue, 11 Oct 2016 18:07:42 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > I run milter-greylist and I don't want to run messages into > > greylisting before I checked if rec

Re: [Mimedefang] Multiple MIMEDefang instances (was Re: strip down mimedefang-filter to sub filter_recipient for md_check_against_smtp_server checks)

Hi Dianne, Am Dienstag, den 11.10.2016, 10:50 -0400 schrieb Dianne Skoll: > Hi, > > While in principle, you can run multiple MIMEDefang instances, I really > don't see the point. MIMEDefang lets you write your policy in Perl, > so I cannot see a use case that requires more than one instance of

Re: [Mimedefang] strip down mimedefang-filter to sub filter_recipient for md_check_against_smtp_server checks

Hi, Am Freitag, den 07.10.2016, 14:49 +0200 schrieb Marcus Schopen: > Hi, > > I'd like to start a second mimedefang instance, which is called before > milter-greylist. This mimedefang should only check if recipients on > internal hosts exist, so incoming emails for non exis

[Mimedefang] strip down mimedefang-filter to sub filter_recipient for md_check_against_smtp_server checks

Hi, I'd like to start a second mimedefang instance, which is called before milter-greylist. This mimedefang should only check if recipients on internal hosts exist, so incoming emails for non existing recipients don't run into milter-greylist. I striped down the mimedefang-filter example to

Re: [Mimedefang] check header for X- entry

Am Mittwoch, den 05.10.2016, 20:22 +0200 schrieb Marcus Schopen: > Am Mittwoch, den 05.10.2016, 20:02 +0200 schrieb Marcus Schopen: > > Hi, > > > > I'd like to check the header for "X-Greylist" entry in filter_end and if > > it exists with an expect

Re: [Mimedefang] check header for X- entry

Am Mittwoch, den 05.10.2016, 20:02 +0200 schrieb Marcus Schopen: > Hi, > > I'd like to check the header for "X-Greylist" entry in filter_end and if > it exists with an expected contend write a message to maillog > (md_graphdefang_log). But I can't find a function for par

[Mimedefang] check header for X- entry

Hi, I'd like to check the header for "X-Greylist" entry in filter_end and if it exists with an expected contend write a message to maillog (md_graphdefang_log). But I can't find a function for parsing headers. Do I have to parse the entire message? Ciao Marcus

Re: [Mimedefang] SA autolearn, missing bayes_journal file

Ah, got it. bayes_journal is just a temp file before synchronized into the databases. The server where I see it, is very low volume, so it takes some time until bayes_journal_max_size is reached. I thought it's a mimedefang permission problem. ___

[Mimedefang] SA autolearn, missing bayes_journal file

Hi, I'm wondering about missing bayes_journal file using mimedefang 2.78 and Spamassassin 3.4.1. On another instance with (what I see) same configuration this file is created. Because upgrading from a SA version < 3.4.0 I wiped its database "sa-learn -dbpath /var/spool/MIMEDefang/.spamassassin

Re: [Mimedefang] MIMEDefang 2.79 is released

Hi Thomas, Am Montag, den 26.09.2016, 17:32 + schrieb Thomas Kristensen: > Hey > > Any ETA on the ubuntu apt release? Or isnt it you that are releasing to those > repos? I built an upstream release for Ubuntu. You can download binary and source package here:

Re: [Mimedefang] Domain canonifyin​g and RFCs

Am Donnerstag, den 13.10.2011, 10:57 +0200 schrieb Ernst du Plooy: > I posted the following on the sendmail (comp.mail.sendmail) newsgroup, > but I don't get any reaction. I realise this is not a mimedefang > problem, but I'm sure some of you have also run into this issue. > > RFC 821 section

Re: [Mimedefang] filter_bad_filename based on recipient

Am Montag, den 19.09.2016, 08:57 -0400 schrieb Dianne Skoll: > On Mon, 19 Sep 2016 14:48:16 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > is it possible to define $bad_exts in sub filter_bad_filename based on > > domain name? I'd like to filter ".doc

Re: [Mimedefang] clamav-unofficial-sigs and pyzor

Am Montag, den 19.09.2016, 08:36 -0400 schrieb Dianne Skoll: > On Mon, 19 Sep 2016 07:46:11 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > my be a little bit off topic, but are there any experience with the > > efficiency of pyzor and clamav-unofficial-sigs [1

Re: [Mimedefang] clamav-unofficial-sigs and pyzor

Hi Richard, Am Montag, den 19.09.2016, 01:23 -0500 schrieb Richard Laager: > On 09/19/2016 12:46 AM, Marcus Schopen wrote: > > my be a little bit off topic, but are there any experience with the > > efficiency of pyzor and clamav-unofficial-sigs > > We use clamav-unof

[Mimedefang] clamav-unofficial-sigs and pyzor

Hi, my be a little bit off topic, but are there any experience with the efficiency of pyzor and clamav-unofficial-sigs [1]. I used pyzor years ago and didn't follow it since then. And a lot of locky mails passed my filter, therefore I tought clamav-unofficial-sigs with turning on sanesecurity

Re: [Mimedefang] reread mimedefang after sa-update

Hi Richard, Am Donnerstag, den 15.09.2016, 00:48 -0500 schrieb Richard Laager: [...] > So configure.in has a check for this pthread flag, but does not use > $PTHREAD_FLAG as part of the $CFLAGS for the SAFE_EMBED_PERL test. Patch > attached, which results in SAFE_EMBED_PERL set and reread working

Re: [Mimedefang] reread mimedefang after sa-update

Hi Richard, Am Donnerstag, den 15.09.2016, 00:48 -0500 schrieb Richard Laager: [...] > > I'm digging into it right now. The problem seems to be that Perl outputs > > -lpthread as a required LDFLAG, but gcc needs -pthread (with no "l"), or > > else it fails linking to the symbol

Re: [Mimedefang] reread mimedefang after sa-update

Am Mittwoch, den 14.09.2016, 13:08 -0400 schrieb Dianne Skoll: > On Wed, 14 Sep 2016 18:12:39 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > Okay, but this might harm a mail which is in process. Any ideas how to > > fix above error? > > No... no idea

Re: [Mimedefang] reread mimedefang after sa-update

Am Mittwoch, den 14.09.2016, 11:51 -0400 schrieb Dianne Skoll: > On Wed, 14 Sep 2016 17:46:07 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > Sep 14 17:39:55 scansrv mimedefang-multiplexor[24029]: Cannot destroy > > and recreate a Perl interpreter safely on t

Re: [Mimedefang] reread mimedefang after sa-update

Am Mittwoch, den 14.09.2016, 09:35 -0400 schrieb Dianne Skoll: > On Wed, 14 Sep 2016 07:54:50 +0200 > Marcus Schopen <li...@localguru.de> wrote: > > > do I need to reread or reload mimedefang after sa-update e.g. > > /etc/cron.daily/spamassassin to get the ch

[Mimedefang] reread mimedefang after sa-update

Hi, do I need to reread or reload mimedefang after sa-update e.g. /etc/cron.daily/spamassassin to get the changes in spamassassin rules recognized by mimedefang? Ciao! Marcus ___ NOTE: If there is a disclaimer or other legal boilerplate in the above

[Mimedefang] SRS with mimedefang

Hi, is there a way to implement SRS using mimedefang? GMX set SPF to "-all" and forwarded mails to gmx accounts get blocked. Ciao Marcus ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may

Re: [Mimedefang] long dns timeouts when first dns in /etc/resolv.conf is down

Am Montag, den 14.03.2016, 16:08 + schrieb G.W. Haywood: > Hi there, > > On Mon, 14 Mar 2016, Marcus Schopen wrote: > > > ... It shouldn't make a difference to mimedefang if one of the dns > > server is down. Any ideas? > > Run a nameserver of your ow

[Mimedefang] long dns timeouts when first dns in /etc/resolv.conf is down

Hi, I had a strange behaviour this weekend: the first of two dns server of my hoster in /etc/resolv.conf was down. The second dns server was working. Mimedefang/Spamassassin didn't like that. I had very long dns time outs for remote checks. It took over a minute for an email to run through

[Mimedefang] quarantine bad_filename messages

Hi, I'd like to use action_quarantine_entire_message for messages containing attachments with bad_filename, but not sure where to place the quarantine command. Is sub filter_bad_filename the right place? Something like this? # This procedure returns true for entities with bad

Re: [Mimedefang] redirect spam for a single domain to another recipient

Hi Steffen, Am Donnerstag, den 03.04.2014, 08:10 +0200 schrieb Steffen Kaiser: On Wed, 2 Apr 2014, Marcus Schopen wrote: I use stream_by_domain and like to redirect/move spam for a single domain to a special recipient/mailbox and collect it there. Any better code possible? sub

[Mimedefang] redirect spam for a single domain to another recipient

Hi, I use stream_by_domain and like to redirect/move spam for a single domain to a special recipient/mailbox and collect it there. Any better code possible? sub filter_end { [...] if ($Domain eq 'mydomain.de' $hits = 5) { foreach $recip (@Recipients) {

[Mimedefang] read domain list from config file

Hi, for some of my domains I'd like to reject mails at a given spamscore of =5. For some other domains at a higher score. Is it a good idea to read those domain names from different external config file instead of coding them hard into mimedefang-milter? sub filter_end { [...] if (($Domain eq

[Mimedefang] reject a message if listed on more than one DNSBL

Hi, is it possible to reject a message if it's sending server is listed in more than one given DNS-blacklists before the message is running into further resource hungry spamassassin content filtering? I'd like to reject messages from a server if its IP is found in at least _two_ of four given

Re: [Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

Hi Kees, I put $Features{'Path:QUARANTINEDIR'} to mimedefang.pl.conf and in my case (Ubuntu 12.04 LTS) .spamassassin is automatically located under /var/spool/MD-Quarantine without changing home in passwd or changing HOME=/var/spool/MD-Quarantine in /etc/init.d/mimedefang. Kind of strange, but it

[Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

Hi, I'm planning to move SPOOLDIR (/var/spool/MIMEDefang) to tmps. My /etc/fstab tmpfs /var/spool/MIMEDefang tmpfs defaults,size=128m,mode=750,uid=ofdefanguser,gid=ofdefanggroup 0 0 This works fine, but mimedefang stores quarantinedir and spamassassin bayes files in

[Mimedefang] rate-limiting for outbound mails per sender

Hi, what would be a good way to implement rate-limiting for outbound mails per sender e.g. 50 recipients per smtp_auth sender per hour? Ciao Marcus ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND

[Mimedefang] changing message-ID to disable cyrus duplicatesuppression feature for a single domain

Hi, I'm using mimedefang in a sendmail/cyrus environment. Cyrus is configured globally to drop duplicate emails. For some circumstances a users needs for all his addresses a single multidrop mailbox which is pop'ed by fetchmail and on user side distributed by local filters to different local

Re: [Mimedefang] mimedefang-multiplexor crash

-06-15 09:46:29.0 +0200 4. copy workes.c.patch to sendmail-8.14.3/debian/patches/8.14/8.14.3 5. modify sendmail-8.14.3/debian/changelog, e.g.: sendmail (8.14.3-5+lenny1.localguru.0) stable-security; urgency=high * Fixed segfault in libmilter (Closes: #527862) -- Marcus

Re: [Mimedefang] error write(L) returned -1, expected 50: Broken pipe

Hi, I started a tcpdump which shows a lot of TCP Retransmission from the sending server, while my server is always answering with an ACK: --- 787 10404.02746283.19.xx.xx 211.xx.xx.xxTCP orbix-locator smtp [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=5

[Mimedefang] error write(L) returned -1, expected 50: Broken pipe

Hi, I found the following error many times but only from the same sending server in my sendmail log: --- Aug 19 12:22:17 server milter-greylist: p7JAME8U015316: addr 88.79.xx.xx from sen...@domain.de rcpt re...@mydomain.de: autowhitelisted for another 768:00:00 Aug 19

Re: [Mimedefang] Adding Recipients to X-Recipients Header

Hi Steffen, Am Mittwoch, den 22.06.2011, 09:14 +0200 schrieb Steffen Kaiser: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 Jun 2011, Marcus Schopen wrote: Correct. You can find out other recipients on YOUR mail server (or downstream), but not recipients which were handled

[Mimedefang] Adding Recipients to X-Recipients Header

Hi, if receiving multiple addresses in one and the same mail account (POP3 box) is in case of bcc received emails hard to see the real recipient and impossible to sort such mails by recipient one client side. Adding a X-Recipients: line to the header which contains all recipients just for

Re: [Mimedefang] Adding Recipients to X-Recipients Header

Am Dienstag, den 21.06.2011, 18:13 +0200 schrieb Marcus Schopen: Hi, if receiving multiple addresses in one and the same mail account (POP3 box) is in case of bcc received emails hard to see the real recipient and impossible to sort such mails by recipient one client side. Adding a X

Re: [Mimedefang] Adding Recipients to X-Recipients Header

Hi Joseph, Am Dienstag, den 21.06.2011, 13:15 -0400 schrieb Joseph Brennan: Marcus Schopen li...@localguru.de wrote: if receiving multiple addresses in one and the same mail account (POP3 box) is in case of bcc received emails hard to see the real recipient and impossible to sort

Re: [Mimedefang] Adding Recipients to X-Recipients Header

Am Dienstag, den 21.06.2011, 18:29 -0400 schrieb Joseph Brennan: Marcus Schopen li...@localguru.de wrote: but it goes against the sender's intention. I just wan't to add the header for incoming mails not for outgoing. Why is it against the sender's intention if the recipient knows

Re: [Mimedefang] Adding Recipients to X-Recipients Header

Am Dienstag, den 21.06.2011, 17:13 -0700 schrieb kd6...@yahoo.com: --- On Tue, 6/21/11, Marcus Schopen li...@localguru.de wrote: Maybe the recipient is not supposed to know who else got copies. This would only be the case if another BCc recipient is handled by my mailserver. Or am I