Re: [vchkpw] qmail-scanner replacement

2004-02-05 Thread Jeremy Kitchen
On Wed, 2004-02-04 at 23:48, Ted Deppner wrote:
 On Wed, Feb 04, 2004 at 10:29:58AM -0700, Tom Collins wrote:
  message).  I am curious about qmail-qfilter though...
 
 It doesn't appear to allow filtering on envelope information.  Didn't
 dig too far, but didn't see any examples of it, and the examples shown
 didn't appear to have any hooks.

envelope information?  see badmailfrom, and also there are several
patches which allow you to filter on recipient information.

try sending a message to [EMAIL PROTECTED], or from [EMAIL PROTECTED]
(just to name a few), you'll see :)

-Jeremy

-- 
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kitchen @ #qmail on EFNet - Join the party!
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE



Re: [vchkpw] qmail-scanner replacement

2004-02-05 Thread Ted Deppner
On Thu, Feb 05, 2004 at 02:54:09AM -0600, Jeremy Kitchen wrote:
 On Wed, 2004-02-04 at 23:48, Ted Deppner wrote:
  On Wed, Feb 04, 2004 at 10:29:58AM -0700, Tom Collins wrote:
   message).  I am curious about qmail-qfilter though...
  
  It doesn't appear to allow filtering on envelope information.  Didn't
  dig too far, but didn't see any examples of it, and the examples shown
  didn't appear to have any hooks.
 
 envelope information?  see badmailfrom, and also there are several
 patches which allow you to filter on recipient information.

badmailfrom doesn't allow for regex matches (I know there are patches,
but stock it doesn't allow it).

KLEZ was easily identified because of a null appended to the mail from:
line... it's that sort of operation on envelope information handling
that doesn't appear to be present in qmail-qfilter.  

-- 
Ted Deppner
http://www.deppner.us/


Re: [vchkpw] qmail-scanner replacement

2004-02-05 Thread Jeremy Kitchen
On Thu, 2004-02-05 at 11:44, Ted Deppner wrote:
  envelope information?  see badmailfrom, and also there are several
  patches which allow you to filter on recipient information.
 
 badmailfrom doesn't allow for regex matches (I know there are patches,
 but stock it doesn't allow it).

true, but if you're about to employ the qmailqueue patch along with
qmail-qfilter just to do regex based envelope filtering.. you should
take a look at the qregex patch:

http://www.arda.homeunix.net/store/qmail/

it allows for regex filtering on the envelope information, including
badmailto.  without the need for extensive third party programs, just a
quick patch.

-Jeremy
-- 
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kitchen @ #qmail on EFNet - Join the party!
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE



Re: [vchkpw] qmail-scanner replacement

2004-02-04 Thread Rick Macdougall
Eduardo M. Bragatto wrote:

Hi,

I would like to know if there's some program to replace 
qmail-scanner (I don't even need the anti-spam feature, I wanna just 
scan my messages with ClamAV). I have lots of mail servers and some of 
them are too large to run things written in perl. I'm looking for 
something made with real programming language, like C or C++.
Hi,

http://sourceforge.net/projects/clamdmail/

Haven't tried it myself but there you go.

Regards,

Rick



Re: [vchkpw] qmail-scanner replacement

2004-02-04 Thread Tom Collins
On Feb 4, 2004, at 9:08 AM, Rick Macdougall wrote:
Hi,

http://sourceforge.net/projects/clamdmail/

Haven't tried it myself but there you go.

Regards,

Rick
I don't recommend it.  It isn't stable, and has high memory 
requirements (it would sometimes lose large emails if I didn't crank up 
my softlimit).

I recommend qscanq (URL posted by Peter Palmreuther in another 
message).  I am curious about qmail-qfilter though...

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter handheld Network Tester: http://sniffter.com/


RE: [vchkpw] qmail-scanner replacement

2004-02-04 Thread Tom Walsh
   I would like to know if there's some program to replace 
 qmail-scanner 
 (I don't even need the anti-spam feature, I wanna just scan 
 my messages 
 with ClamAV). I have lots of mail servers and some of them 
 are too large 
 to run things written in perl. I'm looking for something made 
 with real 
 programming language, like C or C++.
 
   
   Eduardo M. Bragatto.

As another alternative... Check out:

http://projects.gasperino.org/scrubber/

Threaded, daemonized, modular, scanning. (Linux only we think.)

We are looking this over right now... Very fast... But seems to be very
beta...

Tom Walsh
Network Administrator
http://www.ala.net/




Re: [vchkpw] qmail-scanner replacement

2004-02-04 Thread Ted Deppner
On Wed, Feb 04, 2004 at 10:29:58AM -0700, Tom Collins wrote:
 message).  I am curious about qmail-qfilter though...

It doesn't appear to allow filtering on envelope information.  Didn't
dig too far, but didn't see any examples of it, and the examples shown
didn't appear to have any hooks.

KLEZ was easily handled by simple envelope checks.

-- 
Ted Deppner
http://www.deppner.us/