[qmailtoaster] Need Help

2013-11-04 Thread rajeshrudramani
Hi I am having a mail server in datacenter with a static IP which hosts a domain. I also have a local mail server for the same domain which fetches the mail from the main server. I have two type of users. 1. Who uses mail inside the office. 2. Who uses mails outside the office. My

[qmailtoaster] Need help

2013-11-04 Thread rajeshrudramani
Hi I am having a mail server in datacenter with a static IP which hosts a domain. I also have a local mail server for the same domain which fetches the mail from the main server. I have two type of users. 1. Who uses mail inside the office. 2. Who uses mails outside the office. My

Re: [qmailtoaster] Re: SpamAssassin Working?

2013-11-04 Thread Dan McAllister
On 11/1/2013 6:17 PM, Eric Shubert wrote: On 11/01/2013 08:45 AM, Tim Whitaker wrote: Hi everybody... I've been running qmail toaster on a fresh CentOS 5.9 install for about a month now and all has been well except for one thing... spam. I have googled as much as I could to try and figure out

[qmailtoaster] Message Tracking - sharing my favorite tools

2013-11-04 Thread Dan McAllister
OK, I included this information in a follow-up a few minutes ago and almost immediately got a request/suggestion to re-post so it's not lost in the other message history. The issue being brought up was one of 3rd party tools that help in managing a QMT installation. Erick brought up one,

Re: [qmailtoaster] Re: SpamAssassin Working?

2013-11-04 Thread Brent Gardner
On 11/02/2013 12:10 PM, Tim Whitaker wrote: Thanks for all the responses and feedback, here's where I'm at. I definitely do not have Spamdyke installed, I'm about to try that. Check in logs in /var/log/qmail/smtp for simscan entries, like this: I just grepped the entire directory and there

[qmailtoaster] plague caused by virus

2013-11-04 Thread Nicholas Chua
Hi, I am receiving an average of 13 new virus each day. Due to these virus, email accounts passwords are stolen and caused massive spams from the server. Valuable time is wasted to delist our IP and to maintain a private list of a virus database which till date 100+ virus are still not

[qmailtoaster] wasn't able to deliver

2013-11-04 Thread Jim Shupert
Friends, I wonder if anyone can shed light on a non delivery that appears like the below snippit. also I am told that it goes through if my client sends from another email account/server. ( she has a diff account through the phn company fuse.net -- smtp.fuse.net) header snip Hi.

Re: [qmailtoaster] plague caused by virus

2013-11-04 Thread Dan McAllister
On 11/4/2013 3:27 PM, Nicholas Chua wrote: Hi, I am receiving an average of 13 new virus each day. Due to these virus, email accounts passwords are stolen and caused massive spams from the server. Valuable time is wasted to delist our IP and to maintain a private list of a virus database

RE: [qmailtoaster] plague caused by virus

2013-11-04 Thread Nicholas Chua
snip I hope this points you in the right direction... Actually i am more interested in blocking out the virus, the root of the problem regards nic

Re: [qmailtoaster] plague caused by virus

2013-11-04 Thread Brent Gardner
On 11/04/2013 04:37 PM, Nicholas Chua wrote: snip I hope this points you in the right direction... Actually i am more interested in blocking out the virus, the root of the problem regards nic We block lots of virus-prone

RE: [qmailtoaster] plague caused by virus

2013-11-04 Thread Nicholas Chua
snip We block lots of virus-prone attachments using entries in /var/qmail/control/simcontrol: - executables (.exe, .js, .bat, etc.) - office docs (.doc, .docx, .pdf, etc.) - archive files (.zip, .rar, .7z, etc.) If you're seeing emails come in with links that download viruses, you can

Re: [qmailtoaster] plague caused by virus

2013-11-04 Thread LHTek
Dan, I'm curious in this script you run every 15 minutes... Is that something you can share? Thanks, Denny From: Dan McAllister q...@it4soho.com To: qmailtoaster-list@qmailtoaster.com Sent: Monday, November 4, 2013 5:27 PM Subject: Re: [qmailtoaster]

Re: [qmailtoaster] plague caused by virus

2013-11-04 Thread Brent Gardner
On 11/04/2013 04:58 PM, Nicholas Chua wrote: snip We block lots of virus-prone attachments using entries in /var/qmail/control/simcontrol: - executables (.exe, .js, .bat, etc.) - office docs (.doc, .docx, .pdf, etc.) - archive files (.zip, .rar, .7z, etc.) If you're seeing emails come in

[qmailtoaster] Re: plague caused by virus

2013-11-04 Thread Eric Shubert
On 11/04/2013 01:27 PM, Nicholas Chua wrote: Hi, I am receiving an average of 13 new virus each day. Due to these virus, email accounts passwords are stolen and caused massive spams from the server. Valuable time is wasted to delist our IP and to maintain a private list of a virus

RE: [qmailtoaster] Re: plague caused by virus

2013-11-04 Thread Nicholas Chua
Hi Eric snip I am very surprised that you have a list of 100+ viruses that clamav has failed to detect. If indeed your QMT host is passing along that number of viruses, I would expect that clamav scanning isn't happening as it should, and/or your freshclam updates aren't functioning

[qmailtoaster] Re: plague caused by virus

2013-11-04 Thread Eric Shubert
On 11/04/2013 07:35 PM, Nicholas Chua wrote: Hi Eric snip I am very surprised that you have a list of 100+ viruses that clamav has failed to detect. If indeed your QMT host is passing along that number of viruses, I would expect that clamav scanning isn't happening as it should,

[qmailtoaster] Re: Need Help

2013-11-04 Thread Eric Shubert
On 11/04/2013 03:16 AM, rajeshrudramani wrote: Hi I am having a mail server in datacenter with a static IP which hosts a domain. I also have a local mail server for the same domain which fetches the mail from the main server. I have two type of users. 1. Who uses mail inside the

[qmailtoaster] Re: Need help

2013-11-04 Thread Eric Shubert
On 11/04/2013 03:19 AM, rajeshrudramani wrote: Hi I am having a mail server in datacenter with a static IP which hosts a domain. I also have a local mail server for the same domain which fetches the mail from the main server. I have two type of users. 1. Who uses mail inside the

RE: [qmailtoaster] Re: plague caused by virus

2013-11-04 Thread Nicholas Chua
snip I am very surprised that you have a list of 100+ viruses that clamav has failed to detect. If indeed your QMT host is passing along that number of viruses, I would expect that clamav scanning isn't happening as it should, and/or your freshclam updates aren't functioning

RE: [qmailtoaster] plague caused by virus

2013-11-04 Thread Nicholas Chua
snip We block lots of virus-prone attachments using entries in /var/qmail/control/simcontrol: - executables (.exe, .js, .bat, etc.) - office docs (.doc, .docx, .pdf, etc.) - archive files (.zip, .rar, .7z, etc.) If you're seeing emails come in with links that download viruses,