Re: [vchkpw] Simscan clamav error

2010-03-06 Thread Andrew Simon
Found the problem. It was apparmor. If apparmor is enabled on Ubuntu 
clamd has issues. Once I disabled apparmor everything worked. Thanks for 
all of your help.


Andrew

Remo Mattei wrote:
Here is mine 
drwxr-x--- 4 clamav root 4096 Mar  2 08:27 /var/qmail/simscan


Ciao


On 3/2/10 07:06 , Bob Hutchinson hutchli...@midwales.com wrote:

  

/var/qmail/simscan






  




!DSPAM:4b92abe432712120659372!


Re: [vchkpw] Simscan clamav error

2010-03-02 Thread Bob Hutchinson
On Sunday 28 February 2010, Andrew Simon wrote:
 Hi all,

 I've just built out a new mail system using vpopmail and simscan on the
 latest version of Ubuntu. Everything is working well with one exception.
 When I check the clamav.log I see the following error  WARNING: lstat()
 failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as
 the owner and the group. And clamav is a member of the simscan group.
 And the permission seem correct. Any suggestions ?

 Andrew


 

I have /var/qmail/simscan owned by clamav:root and no user/group simscan at 
all. Using shupp toaster.

-- 
-
Bob Hutchinson
Midwales dot com
-

!DSPAM:4b8d1b8732711671929756!



Re: [vchkpw] Simscan clamav error

2010-03-02 Thread Remo Mattei
Here is mine 
drwxr-x--- 4 clamav root 4096 Mar  2 08:27 /var/qmail/simscan

Ciao


On 3/2/10 07:06 , Bob Hutchinson hutchli...@midwales.com wrote:

 /var/qmail/simscan


!DSPAM:4b8d2e8832716884914849!



Re: [vchkpw] Simscan clamav error

2010-03-01 Thread Pavel V. Yanchenko
Title: Re: [vchkpw] Simscan clamav error


I think /var/qmail/simscan directory should be setgid.

Clamav creates files with 600 permissions, so group members can't access them.

This is from my server:
drwxr-s--- 71 simscan simscan 4096 Mar 1 11:34 simscan






Clamd is running as simscan.

Tren Blackburn wrote:


What user is clamd running as?

- Original Message -
From: Andrew Simonasi...@i3tcorp.com
To:vchkpw@inter7.comvchkpw@inter7.com
Sent: Sun Feb 28 12:53:58 2010
Subject: [vchkpw] Simscan clamav error

Hi all,

I've just built out a new mail system using vpopmail and simscan on the
latest version of Ubuntu. Everything is working well with one exception.
When I check the clamav.log I see the following error WARNING: lstat()
failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as
the owner and the group. And clamav is a member of the simscan group.
And the permission seem correct. Any suggestions ?

Andrew









--
Best regards,
Pavel  mailto:bal...@msmu.ru
!DSPAM:4b8b7ce632711591472733!







Re: [vchkpw] Simscan clamav error

2010-03-01 Thread Andrew Simon

The /var/qmail/simscan directory is set as follows:

drwxr-s---  2 simscan simscan 4.0K 2010-03-01 08:46 simscan

I've also noticed that everything is working in that mail is going in 
and out and getting scanned. I checked the log files and the issue began 
Friday 2/26/10 at around 3:00pm EST just after the database reloaded. 
Before that it was working properly. I'm really not sure what is going 
on. Is there an update or something I don't know about?


Andrew



Pavel V. Yanchenko wrote:

I think /var/qmail/simscan directory should be setgid.

Clamav creates files with 600 permissions, so group members can't 
access them.


This is from my server:
drwxr-s--- 71 simscan simscan 4096 Mar  1 11:34 simscan



Clamd is running as simscan.

Tren Blackburn wrote: 


What user is clamd running as?

- Original Message -
From: Andrew Simon asi...@i3tcorp.com mailto:asi...@i3tcorp.com
To: vchkpw@inter7.com mailto:vchkpw@inter7.com vchkpw@inter7.com 
mailto:vchkpw@inter7.com

Sent: Sun Feb 28 12:53:58 2010
Subject: [vchkpw] Simscan clamav error

Hi all,

I've just built out a new mail system using vpopmail and simscan on the
latest version of Ubuntu. Everything is working well with one exception.
When I check the clamav.log I see the following error  WARNING: lstat()
failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as
the owner and the group. And clamav is a member of the simscan group.
And the permission seem correct. Any suggestions ?

Andrew





 




/-- 
Best regards,
 Pavelmailto:bal...@msmu.ru 
 /




!DSPAM:4b8bc7d832713372117754!


[vchkpw] Simscan clamav error

2010-02-28 Thread Andrew Simon

Hi all,

I've just built out a new mail system using vpopmail and simscan on the 
latest version of Ubuntu. Everything is working well with one exception. 
When I check the clamav.log I see the following error  WARNING: lstat() 
failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as 
the owner and the group. And clamav is a member of the simscan group. 
And the permission seem correct. Any suggestions ?


Andrew


!DSPAM:4b8ad8cf32711687742174!



Re: [vchkpw] Simscan clamav error

2010-02-28 Thread Tren Blackburn
What user is clamd running as?

- Original Message -
From: Andrew Simon asi...@i3tcorp.com
To: vchkpw@inter7.com vchkpw@inter7.com
Sent: Sun Feb 28 12:53:58 2010
Subject: [vchkpw] Simscan clamav error

Hi all,

I've just built out a new mail system using vpopmail and simscan on the 
latest version of Ubuntu. Everything is working well with one exception. 
When I check the clamav.log I see the following error  WARNING: lstat() 
failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as 
the owner and the group. And clamav is a member of the simscan group. 
And the permission seem correct. Any suggestions ?

Andrew
 




!DSPAM:4b8ad96e32711871166817!


Re: [vchkpw] Simscan clamav error

2010-02-28 Thread Andrew Simon

Clamd is running as simscan.

Tren Blackburn wrote:


What user is clamd running as?

- Original Message -
From: Andrew Simon asi...@i3tcorp.com
To: vchkpw@inter7.com vchkpw@inter7.com
Sent: Sun Feb 28 12:53:58 2010
Subject: [vchkpw] Simscan clamav error

Hi all,

I've just built out a new mail system using vpopmail and simscan on the
latest version of Ubuntu. Everything is working well with one exception.
When I check the clamav.log I see the following error  WARNING: lstat()
failed on: /var/qmail/simscan/. /var/qmail/simcan has simscan:simscan as
the owner and the group. And clamav is a member of the simscan group.
And the permission seem correct. Any suggestions ?

Andrew




 




!DSPAM:4b8adbf532718809316924!


[vchkpw] Simscan and Clam 0.95.3

2010-01-27 Thread DAve
Good afternoon all,

I was just getting going upgrading our Clamav install and beginning to
use clamav on our outbound mail as well as SA.

I patched netqmail to use the reject-message.patch, no issues there.

I then patched simscan 1.40 using JS patch,
simscan-1.4.0-combined.2.patch and then tested in the simscan source
directory before installing.

(All one line at the prompt)
QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
NOP0FCHECK=1 /var/qmail/bin/qmail-inject  mail-1.txt

But it doesn't seem to work, clamdscan still crashes with error 71. Here
is the debug output.

[r...@smtp1:/usr/local/src/simscan-1.4.0]#
QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
NOP0FCHECK=1 /var/qmail/bin/qmail-inject  mail-1.txt
simscan: cdb looking up
simscan: cdb for  found clam=no,spam=yes,attach=.exe:.scr:.com:.pif:.bat
simscan: pelookup clam = no
simscan: pelookup spam = yes
simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
simscan: .exe is attachment number 0
simscan: .scr is attachment number 1
simscan: .com is attachment number 2
simscan: .pif is attachment number 3
simscan: .bat is attachment number 4
simscan: starting: work dir: /var/qmail/simscan/1264616927.742599.63398
simscan: pelookup: called with sysad...@smtp1.tls.net
simscan: pelookup: domain is smtp1.tls.net
simscan: cdb looking up smtp1.tls.net
simscan: pelookup: local part is sysadmin
simscan: cdb looking up sysad...@smtp1.tls.net
simscan: pelookup: called with dave.l...@pixelhammer.com
simscan: pelookup: domain is pixelhammer.com
simscan: cdb looking up pixelhammer.com
simscan: pelookup: local part is dave.list
simscan: cdb looking up dave.l...@pixelhammer.com
simscan: cdb for dave.l...@pixelhammer.com found
clam=yes,spam=yes,attach=.exe:.scr:.com:.pif:.bat
simscan: pelookup clam = yes
simscan: pelookup spam = yes
simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
simscan: .exe is attachment number 0
simscan: .scr is attachment number 1
simscan: .com is attachment number 2
simscan: .pif is attachment number 3
simscan: .bat is attachment number 4
simscan: cdb looking up version attach
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: fatal error executing clamdscan
simscan: exit error code: 71
qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
[r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
/usr/local/src/simscan-1.4.0/.: OK

--- SCAN SUMMARY ---
Infected files: 0
Time: 0.264 sec (0 m 0 s)
[r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan -V
ClamAV 0.95.3/10326/Fri Jan 22 13:18:42 2010

I have not seen anything new on this issue, am I in need of a clue bat?
Compiling Clam and simscan showed no errors.

Thanks,

DAve

-- 
Posterity, you will know how much it cost the present generation to
preserve your freedom.  I hope you will make good use of it.  If you
do not, I shall repent in heaven that ever I took half the pains to
preserve it. John Adams

http://appleseedinfo.org


!DSPAM:4b60879932711123417815!



Re: [vchkpw] Simscan and Clam 0.95.3

2010-01-27 Thread Remo Mattei
I just upgraded too but I am using the chkuser and did not have any problems
installing. I do not recall to have patch simscan though :)


On 1/27/10 11:35 , DAve dave.l...@pixelhammer.com wrote:

 Good afternoon all,
 
 I was just getting going upgrading our Clamav install and beginning to
 use clamav on our outbound mail as well as SA.
 
 I patched netqmail to use the reject-message.patch, no issues there.
 
 I then patched simscan 1.40 using JS patch,
 simscan-1.4.0-combined.2.patch and then tested in the simscan source
 directory before installing.
 
 (All one line at the prompt)
 QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
 NOP0FCHECK=1 /var/qmail/bin/qmail-inject  mail-1.txt
 
 But it doesn't seem to work, clamdscan still crashes with error 71. Here
 is the debug output.
 
 [r...@smtp1:/usr/local/src/simscan-1.4.0]#
 QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
 NOP0FCHECK=1 /var/qmail/bin/qmail-inject  mail-1.txt
 simscan: cdb looking up
 simscan: cdb for  found clam=no,spam=yes,attach=.exe:.scr:.com:.pif:.bat
 simscan: pelookup clam = no
 simscan: pelookup spam = yes
 simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
 simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
 simscan: .exe is attachment number 0
 simscan: .scr is attachment number 1
 simscan: .com is attachment number 2
 simscan: .pif is attachment number 3
 simscan: .bat is attachment number 4
 simscan: starting: work dir: /var/qmail/simscan/1264616927.742599.63398
 simscan: pelookup: called with sysad...@smtp1.tls.net
 simscan: pelookup: domain is smtp1.tls.net
 simscan: cdb looking up smtp1.tls.net
 simscan: pelookup: local part is sysadmin
 simscan: cdb looking up sysad...@smtp1.tls.net
 simscan: pelookup: called with dave.l...@pixelhammer.com
 simscan: pelookup: domain is pixelhammer.com
 simscan: cdb looking up pixelhammer.com
 simscan: pelookup: local part is dave.list
 simscan: cdb looking up dave.l...@pixelhammer.com
 simscan: cdb for dave.l...@pixelhammer.com found
 clam=yes,spam=yes,attach=.exe:.scr:.com:.pif:.bat
 simscan: pelookup clam = yes
 simscan: pelookup spam = yes
 simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
 simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
 simscan: .exe is attachment number 0
 simscan: .scr is attachment number 1
 simscan: .com is attachment number 2
 simscan: .pif is attachment number 3
 simscan: .bat is attachment number 4
 simscan: cdb looking up version attach
 simscan: calling clamdscan
 simscan: cdb looking up version clamav
 simscan: fatal error executing clamdscan
 simscan: exit error code: 71
 qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
 [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
 /usr/local/src/simscan-1.4.0/.: OK
 
 --- SCAN SUMMARY ---
 Infected files: 0
 Time: 0.264 sec (0 m 0 s)
 [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan -V
 ClamAV 0.95.3/10326/Fri Jan 22 13:18:42 2010
 
 I have not seen anything new on this issue, am I in need of a clue bat?
 Compiling Clam and simscan showed no errors.
 
 Thanks,
 
 DAve


!DSPAM:4b60894132711447313053!



Re: [vchkpw] Simscan and Clam 0.95.3

2010-01-27 Thread Rick Macdougall

On 27/01/2010 1:35 PM, DAve wrote:

Good afternoon all,

I was just getting going upgrading our Clamav install and beginning to
use clamav on our outbound mail as well as SA.
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: fatal error executing clamdscan
simscan: exit error code: 71
qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
[r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
/usr/local/src/simscan-1.4.0/.: OK



Could be a permissions problem.  I've seen that error message with 
permission problems before.


I've also sen it with selinux installed as well.

Regards,

Rick

!DSPAM:4b6092a132711732464874!



Re: [vchkpw] Simscan and Clam 0.95.3

2010-01-27 Thread Remo Mattei
I donot have selinux configured on my qmail since it will not work with that

Remo


On 1/27/10 12:23 , Rick Macdougall ri...@ummm-beer.com wrote:

 On 27/01/2010 1:35 PM, DAve wrote:
 Good afternoon all,
 
 I was just getting going upgrading our Clamav install and beginning to
 use clamav on our outbound mail as well as SA.
 simscan: calling clamdscan
 simscan: cdb looking up version clamav
 simscan: fatal error executing clamdscan
 simscan: exit error code: 71
 qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
 [r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
 /usr/local/src/simscan-1.4.0/.: OK
 
 
 Could be a permissions problem.  I've seen that error message with
 permission problems before.
 
 I've also sen it with selinux installed as well.
 
 Regards,
 
 Rick
 
 
 
 
 
 


!DSPAM:4b6097fc32711643916076!



[vchkpw] simscan and strange behaviour under spamassassing userpref database

2006-12-28 Thread Juan Antonio Navarro Martínez
Hi,


I have detected an strange behaviour when my simscam passes the user
to the spamassassins' client.

Sometimes, when it runs ok, I get this log line in the spamd log
with the email passed as user:

Dec 28 14:02:10 mail spamd[30462]: spamd: processing message
[EMAIL PROTECTED] for [EMAIL PROTECTED]:509 
Dec 28 14:02:24 mail spamd[31652]: config: retrieving prefs for
[EMAIL PROTECTED] from SQL server 

Dec 28 14:02:25 mail spamd[31724]: config: Conf::SQL: executing SQL:
SELECT preference, value FROM userpref WHERE username =
'[EMAIL PROTECTED]' OR username = '$GLOBAL' OR username =
CONCAT('%','.es') ORDER BY username ASC


But sometimes, I got the simscan user instead of the email:

Dec 28 14:02:10 mail spamd[30462]: spamd: spamd: processing message
[EMAIL PROTECTED] for simscan:509 
Dec 28 14:02:24 mail spamd[31652]: config: retrieving prefs for
simscan from SQL server 

Dec 28 14:02:24 mail spamd[31652]: config: Conf::SQL: executing SQL:
SELECT preference, value FROM userpref WHERE username = 'simscan' OR
username = '$GLOBAL' OR username = CONCAT('%',NULL) ORDER BY username ASC 

So when the spamd tries to recover the userprefs, it gets the global
params instead of the user params or domain params.


I have checked the configuration several times, and I think that
everything is ok, but I don't understand why happens this.

I have installed the simscan 1.2 version, should I try the 1.3.1?

SpamAssassin version is 3.1.7 and qmail is netqmail 1.05

Any suggestion?

Greetings and happy new year!!!



Juan Antonio Navarro
SAVIA Amadeus



[vchkpw] Simscan 'trap' addresses

2006-10-17 Thread Michael Krieger
Recently I've moved from adding some spammed addresses into badmailto, but am realizing that's a bit of a waste, as these same users usually turn around and Spam the recipients that are accepted.This got me thinking- doing a bit of this at the SMTP level and including the Spam scanner could be a neat idea.Picture this:1. mail comes in matching a CDB file of recipients (regex of course to allow for some patterns with asterisks in the middle or so on)2. Simscan identifies one of the one or many recipeints to be a Spamtrap e-mail address, and now knows this mail is likely Spam.3. Simscan calls sa-learn with a high probabiliy (of course as simscan, which saves any permissions issues)... so sa-learn --spam (either -L or non--- non-locally may be nice since it is a Spam trap)4. Simscan rejects the mail with a big 'piss off' style message... of course turned to something more standard- a 5xx response with a 'service
 unavailable' or something undescriptive.With the amount of mail I see going to [EMAIL PROTECTED], [EMAIL PROTECTED], etc that gets CCd to me, that'd be nice.Or maybe if folks worry about doing that, we could just store it in a maildir, but I'd say a trap hit is pretty good to mark as Spam, and not deliver to any of the other recipeints.Thoughts? Seems like an easy one to implement and a really good one to have.-M

[vchkpw] Simscan Crucial matching bug

2006-07-08 Thread Michael Krieger
So an interesting bug in simscan I noticed when at a clients' today. She said that she was getting tons of Spam- a good 20 times what she should rightfully get. All obvious Spam as well. Looking in the headers, it's not being scanned by spamc, despite the domain being in simcontrol.The answer? They were sending mail to [EMAIL PROTECTED] Sending mail to [EMAIL PROTECTED] works as expected, but not in all caps. I'm assuming this matching is case sensitive, and since qmail and as far as I know the RFCs for mail, don't distinguish case, shouldn't that mean that simscan doesn't either?At present, varying case of the domain can disable virus and spam scanning. In theory that could be used to infect PCs who believe that they are safe (though I'm not overly concerned about the security implications as much as the effective working of this).I haven't looked at detail at
 the code, but will gladly do so first thing next week, unless someone else knows the easy fix.I'm guessing we just need to convert the string to lowercase at the top of per_domain_email_lookup() [and possibly per_domain_lookup() if we don't lowercase the parameter]. Possibly even just set it in set_per_domain?Haven't looked at the bigger picture as I mentioned, but wanted to point that one out. Will investigate and post. Probably a very easy fix.-M

[vchkpw] simscan value

2005-11-04 Thread Remo Mattei



Hello all, I have a question about 
the simscan since I want to increase the value (5.0) to like 8.0 or higher for a 
specific domain etc..

here is the log:
simscan:[9047]:CLEAN 
(0.30/5.00):0.8216s:vediamo:68.142.228.50:[EMAIL PROTECTED]:[EMAIL PROTECTED]

here is the setting in the simscan 
control..

italy1.com:clam=yes,spam=yes,spam_hits=1.0,attach=.mp3:clam=yes,spam=yes,spam_hits=20.1

which I set it at 1.0 but again it 
shows still 5.0

Thanks...

BTW. I follow bill shupp 
installation. 



Re: [vchkpw] simscan value

2005-11-04 Thread Remo Mattei



Thanks I found it.

  - Original Message - 
  From: 
  Remo Mattei 
  To: vchkpw@inter7.com 
  Sent: Friday, November 04, 2005 9:32 
  PM
  Subject: [vchkpw] simscan value
  
  Hello all, I have a question about 
  the simscan since I want to increase the value (5.0) to like 8.0 or higher for 
  a specific domain etc..
  
  here is the log:
  simscan:[9047]:CLEAN 
  (0.30/5.00):0.8216s:vediamo:68.142.228.50:[EMAIL PROTECTED]:[EMAIL PROTECTED]
  
  here is the setting in the simscan 
  control..
  
  italy1.com:clam=yes,spam=yes,spam_hits=1.0,attach=.mp3:clam=yes,spam=yes,spam_hits=20.1
  
  which I set it at 1.0 but again it 
  shows still 5.0
  
  Thanks...
  
  BTW. I follow bill shupp 
  installation. 
  


Re: [vchkpw] simscan value

2005-11-04 Thread Remo Mattei



Thanks I found it.

  - Original Message - 
  From: 
  Remo Mattei 
  To: vchkpw@inter7.com 
  Sent: Friday, November 04, 2005 9:32 
  PM
  Subject: [vchkpw] simscan value
  
  Hello all, I have a question about 
  the simscan since I want to increase the value (5.0) to like 8.0 or higher for 
  a specific domain etc..
  
  here is the log:
  simscan:[9047]:CLEAN 
  (0.30/5.00):0.8216s:vediamo:68.142.228.50:[EMAIL PROTECTED]:[EMAIL PROTECTED]
  
  here is the setting in the simscan 
  control..
  
  italy1.com:clam=yes,spam=yes,spam_hits=1.0,attach=.mp3:clam=yes,spam=yes,spam_hits=20.1
  
  which I set it at 1.0 but again it 
  shows still 5.0
  
  Thanks...
  
  BTW. I follow bill shupp 
  installation. 
  


[vchkpw] simscan/vpopmail etc

2005-05-24 Thread Jimmy Stewpot
Hello,

I am currently running a fairly busy email server with around 30 domains
and several hundred high usage users sending and receiving email. I have
currently setup the system so that It is running without any virus
scanning. Its setup something like this

rblsmtpd -- qmail -- .qmail file (which then pipes to spamc) then
vpopmail delivers the email.

The whole system works fairly well however I would like to start using
virus scanning. I have been recommended simscan by people on the qmail
list. There are some questions that I have im hoping that people can answer.

Does simscan integrate perfectly with vpopmail. I cant see any reason
why it wouldnt but i would still like clarification on that.

Thanks

Jimmy.


Re: [vchkpw] simscan/vpopmail etc

2005-05-24 Thread Andrei Talmaciu
Jimmy Stewpot wrote:

Hello,

I am currently running a fairly busy email server with around 30 domains
and several hundred high usage users sending and receiving email. I have
currently setup the system so that It is running without any virus
scanning. Its setup something like this

rblsmtpd -- qmail -- .qmail file (which then pipes to spamc) then
vpopmail delivers the email.

The whole system works fairly well however I would like to start using
virus scanning. I have been recommended simscan by people on the qmail
list. There are some questions that I have im hoping that people can answer.

Does simscan integrate perfectly with vpopmail. I cant see any reason
why it wouldnt but i would still like clarification on that.

Thanks

Jimmy.
  

Actually simscan has nothing to do with vpopmail, because simscan
operates at the smtp level. If it detects a virus or spam with a higher
score than that set by you it will reject the message. I'm currently
using simscan with clamav and spamassassin and have no problems.


signature.asc
Description: OpenPGP digital signature


[vchkpw] simscan question

2005-05-14 Thread Prosite



Sorry, if I´m posting to the wrong list 
...

Only 2 quick questions:

1. on http://www.inter7.com/?page=simscan
it says: "during the 
SMTP conversation so the email never makes it into your 
computers"

So far I use qmail-scanner which is putting it on 
the hdd and than has
clamav running over it. Is simscan doing that tests 
without writing to disk?

And if so
2. Has anybodycompared 
qmailscanner and simscan
for performance. If so, what are the 
results?

Yes, call me lazy, if you want :). Just thought I 
could skip two days of work,
if someone allready has the answer.

Thanks for your kindness - 
Ulrich


[vchkpw] Simscan 1.1 release now available

2005-02-02 Thread Ken Jones
Simscan 1.1 version is now available from
http://www.inter7.com/simscan

This is primarily a bug fix release. Fixes include an address parsing bug.
A fix to the per domain pass through debugging. Changes to the spam
pass through code and spam passthrough log file code.

Simscan is a simple program that enables qmail-smtpd to reject viruses,
spam, and block attachments during the SMTP conversation so the email never
makes it into your computers. It is completely open source and uses other
open source components. Very efficient and written in C.

Ken Jones
inter7.com


[vchkpw] simscan not rejecting spams

2004-10-25 Thread Juliano Simões
Hi Guys,
I am trying to make simscan reject spam above a given SA score,
with the following setup:
- simscan-1.0.6rc3
- Mail-SpamAssassin-3.0.1
- Qmail 1.03 + qmail-queue_patch + many_other_patches
I built simscan with the following options:
./configure \
--enable-clamav=n \
--enable-per-domain=n \
--enable-ripmime=/usr/local/bin/ripmime \
--enable-spam=y \
--enable-spam-hits=25 \
--enable-spamc=/usr/bin/spamc \
--enable-qmail-queue=/var/qmail/bin/qmail-queue.bin
Everything works fine (mail gets scored by SA and delivered)
but spams above score 25 still pass through.
Any ideas?
If there's a better list to place this question, let me know.
Regards,
Atenciosamente,
Juliano Simes
Gerente de Tecnologia
Axios Tecnologia e Servios
http://www.axios.com.br
[EMAIL PROTECTED]
+55 41 324-1993


Re: [vchkpw] simscan not rejecting spams

2004-10-25 Thread Ken Jones
On Monday 25 October 2004 05:36 am, Juliano Simes wrote:
 Hi Guys,

 I am trying to make simscan reject spam above a given SA score,
 with the following setup:

 - simscan-1.0.6rc3
 - Mail-SpamAssassin-3.0.1
 - Qmail 1.03 + qmail-queue_patch + many_other_patches

 I built simscan with the following options:

 ./configure \
 --enable-clamav=n \
 --enable-per-domain=n \
 --enable-ripmime=/usr/local/bin/ripmime \
 --enable-spam=y \
 --enable-spam-hits=25 \
 --enable-spamc=/usr/bin/spamc \
 --enable-qmail-queue=/var/qmail/bin/qmail-queue.bin

 Everything works fine (mail gets scored by SA and delivered)
 but spams above score 25 still pass through.

 Any ideas?

 If there's a better list to place this question, let me know.

[EMAIL PROTECTED] is the mailing list for your question.

Check the spamc arguments. rc3 has a new --enable-spamc-args option.
I usually set it to --enable-spamc-args=-U /tmp/spamd.sock

--
Ken Jones


[vchkpw] simscan 1.0.5 released

2004-10-05 Thread Jeremy Kitchen
This is primarily a maintanence release.  As I was installing 1.0.4 for a 
customer today I had some troubles which I traced down to wrong clamdscan 
exit code handling and closing some file descriptors which were causing 
clamdscan to exit with a temporary error (and since the exit code handling 
was wrong, it was treating it as if it had been handed a virus, and notifying 
qmail-smtpd accordingly.  Not good!)  This should (hopefully) get rid of the 
annoying mail server temporarily rejected message messages some folks have 
been reporting.

I have not yet had a chance to go over the spamassassin code to make sure it 
doesn't also have this same problem, however, the system I discovered the 
issue on, as well as our development system, are now both functioning 
properly with clamav.  I plan to take some time and look over the 
spamassassin handling and do some testing with this.  If anyone finds any 
issues with spamassassin handling (or really, with anything!), please try to 
provide an strace/truss log and email myself directly (please don't post a 
huge strace log to the list :)

That being said, on with the testing!

You can get simscan 1.0.5 here: http://inter7.com/simscan/simscan-1.0.5.tar.gz

Thanks a lot :)

-Jeremy

ps: I am working on supporting other antivirus products, if you have another 
you wish to see support for, please contact me as soon as possible, thank 
you.

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
  [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
   GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc


pgpAOLGtlD4BN.pgp
Description: PGP signature


[vchkpw] simscan 1.0.4 released!

2004-10-04 Thread Jeremy Kitchen
I'm proud to announce the release of simscan version 1.0.4.

Changes in this version:
easier installation (and one that doesn't break itself!)
a few internal changes to make things more reliable and more efficient
feature: print the IP address to stderr when a virus is detected.

simscan is a Simple Scanner qmail-queue wrapper that is designed to work with 
clamav, spamassassin, and qmail (with the QMAILQUEUE patch).  It's written in 
C to be extremely fast and portable.

More information about simscan can be found at 
http://www.inter7.com/?page=simscan

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
  [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
   GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc


pgpTimvp5pwTB.pgp
Description: PGP signature


[vchkpw] SIMSCAN working directory privs

2004-09-28 Thread Fabrizio Frosali - Impulso Srl
I hope this belongs to this list.
I installed simscan 1.03 in a semi-production server with over 400 domains 
and 2000 maildirs,
and it works really fast.
I propose a simple simscan change that can resolve some problems in first 
tests (IMHO)

Simscan creates the working directory with a privilege of 700. in this way 
clamd
must run with the same owner of simscan to access the msg.

Changing the privilege to 755 clamd and spamd can access the working
directory regardless of clamd process user.
To apply the change -  search this
  /* create the directory */
  if ( mkdir(workdir, 0700) == -1 ) {
_exit(EXIT_400);
  }
and replace with this
  /* create the directory */
  if ( mkdir(workdir, 0755) == -1 ) {
_exit(EXIT_400);
  }
--
Fa


Re: [vchkpw] SIMSCAN

2004-09-28 Thread tonix (Antonio Nati)
At 27/09/2004 27/09/2004 -0300, you wrote:
i am running simscan with vpopmail user.
I feel you should run simscan as qmaild user, as vpopmail user cannot write 
in qmail spool archives.

but when i set the QMAILQUEUE to simscan i receive this message. (unable to
exec qq)
That should be the reason: no permission for vpopmail user.
Ciao,
Tonino

Itamar Reis Peixoto
Analista Consultor
TreyNet Consultoria - Uberlândia
Tel : + 55 34 3231 0598
Cel:  +55 38 9107 1250
http://www.treynet.com.br

[EMAIL PROTECTED]Interazioni di Antonio Nati
   http://www.interazioni.it  [EMAIL PROTECTED]



Re: [vchkpw] SIMSCAN working directory privs

2004-09-28 Thread tonix (Antonio Nati)
At 28/09/2004 28/09/2004 +0200, you wrote:
Simscan creates the working directory with a privilege of 700. in this way 
clamd
must run with the same owner of simscan to access the msg.
They work on the same files (and only on those files), so why should they 
have different users?

I feel this design to be very safe, because clamd should be dedicated to 
e-mail only.
There should be more safety having them only accessing the files with the 
same uid/permissions.

To complete the security of the system, clamd client should be activated by 
simscan user only.

Changing the privilege to 755 clamd and spamd can access the working
directory regardless of clamd process user.
mod 755 means every one in the system may access those files.
Ciao,
Tonino
To apply the change -  search this
  /* create the directory */
  if ( mkdir(workdir, 0700) == -1 ) {
_exit(EXIT_400);
  }
and replace with this
  /* create the directory */
  if ( mkdir(workdir, 0755) == -1 ) {
_exit(EXIT_400);
  }
--
Fa

[EMAIL PROTECTED]Interazioni di Antonio Nati
   http://www.interazioni.it  [EMAIL PROTECTED]



Re: [vchkpw] SIMSCAN working directory privs

2004-09-28 Thread Fabrizio Frosali - Impulso Srl
At 10.14 28/09/2004, you wrote:
At 28/09/2004 28/09/2004 +0200, you wrote:
Simscan creates the working directory with a privilege of 700. in this 
way clamd
must run with the same owner of simscan to access the msg.

To complete the security of the system, clamd client should be activated 
by simscan user only.
Ok, I admit, I've lost a cople of hours to figure out why simscan rejected 
all my mails with a 500:
my clamd user was wrong (qscand).

I suggest, then, a line in the INSTALL doc:
check that clamd runs under the same simscan user.

I feel this design to be very safe, because clamd should be dedicated to 
e-mail only.
There should be more safety having them only accessing the files with the 
same uid/permissions.
I agree with you, clamd should be called only by simscan, but now,that 
simscan is new, everybody tries
to test it on servers configured for other solutions (ie qmailscan).
if simscan is a little friendly with other solutions it can can be tested 
and adopted very fast.

mod 755 means every one in the system may access those files.
Yes, that's a fact. But the directory is created processed by clamd and 
then removed.


Ciao,
Tonino

Ciao
Fa


To apply the change -  search this
  /* create the directory */
  if ( mkdir(workdir, 0700) == -1 ) {
_exit(EXIT_400);
  }
and replace with this
  /* create the directory */
  if ( mkdir(workdir, 0755) == -1 ) {
_exit(EXIT_400);
  }
--
Fa

[EMAIL PROTECTED]Interazioni di Antonio Nati
   http://www.interazioni.it  [EMAIL PROTECTED]




[vchkpw] simscan still not working

2004-09-28 Thread Payal Rathod
Hi,
I am still not able to get simscan working. I even tried something
as easy as this,
# export QMAILQUEUE=/var/qmail/bin/simscan  /usr/local/bin/tcpserver -vHRl 0 0 25 
/var/qmail/bin/qmail-smtpd

But still I get an error like this when I send a message,
451 mail server temporarily rejected message (#4.3.0)

What is the reason for this?

With warm regards,
-Payal


Re: [vchkpw] simscan still not working

2004-09-28 Thread Rick Macdougall

Payal Rathod wrote:
Hi,
I am still not able to get simscan working. I even tried something
as easy as this,
# export QMAILQUEUE=/var/qmail/bin/simscan  /usr/local/bin/tcpserver -vHRl 0 0 25 
/var/qmail/bin/qmail-smtpd
But still I get an error like this when I send a message,
451 mail server temporarily rejected message (#4.3.0)
What is the reason for this?
Hi,
What user does qmail-smtpd run as ?
What user does clamd run as ?
Are the two users above the same ?
If not, make them the same.
Regards,
Rick


Re: [vchkpw] simscan still not working

2004-09-28 Thread Payal Rathod
On Tue, Sep 28, 2004 at 06:30:06AM -0400, Rick Macdougall wrote:
 What user does qmail-smtpd run as ?

root.

 What user does clamd run as ?

root.

Thanks,
-Payal


[vchkpw] simscan

2004-09-28 Thread Itamar Reis Peixoto
I am testing simscan .

when i send a mail with a .pif attachment  i receive this message.

An unknown error has occurred. Subject 'Enviando email: enderecos', Account:
'mail', Server: '200.XXX.XXX.XXX', Protocol: SMTP, Server Response: '554
mail server permanently rejected message (#5.3.0)', Port: 25, Secure(SSL):
No, Server Error: 554, Error Number: 0x800CCC6F

how to change this message for this new message

 This message has been rejected because it has
a potentially executable attachment  a .pif file
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.


Itamar Reis Peixoto
Analista Consultor
TreyNet Consultoria - Uberlândia
Tel : + 55 34 3231 0598
Cel:  +55 38 9107 1250
http://www.treynet.com.br



Re: [vchkpw] simscan

2004-09-28 Thread Jeremy Kitchen
On Tuesday 28 September 2004 09:04 am, Itamar Reis Peixoto wrote:
 I am testing simscan .

 when i send a mail with a .pif attachment  i receive this message.

 An unknown error has occurred. Subject 'Enviando email: enderecos',
 Account: 'mail', Server: '200.XXX.XXX.XXX', Protocol: SMTP, Server
 Response: '554 mail server permanently rejected message (#5.3.0)', Port:
 25, Secure(SSL): No, Server Error: 554, Error Number: 0x800CCC6F

 how to change this message for this new message
[snip]

qmail-smtpd's rejection message is based on the exit code of simscan.  
Therefore you can only have one, because simscan doesn't differentiate 
between different rejection types.  To change the message that is returned, 
you'll have to look at the qmail source code.

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
  [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
   GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc


pgpF7sFsqYrGC.pgp
Description: PGP signature


[vchkpw] simscan mailing list

2004-09-28 Thread Jeremy Kitchen
Due to popular demand, I have created a mailing list for simscan.  The address 
is [EMAIL PROTECTED] and you can subscribe by sending an email to 
[EMAIL PROTECTED]

On this list we can discuss development, issues with simscan, installation 
problems, etc :)

simscan is a qmail-queue wrapper package written by Ken Jones that is designed 
to work with clamav and spamassassin to do virus blocking and content 
filtering.  It is written in C so is a very fast and efficient scanning 
solution.  Also, its ease of installation gives users the ability to rapidly 
deploy virus blocking and content filtering on their qmail systems.

Please note that the software IS IN BETA, so you should make sure to 
thoroughly test it before putting it into a production environment.  We 
welcome any and all feedback, bug reports and feature suggestions, so please 
don't hesitate to send them our way.

Thanks and sorry for the big cross post :)

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
  [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
   GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc


pgpFzyU92WYzB.pgp
Description: PGP signature


[vchkpw] SIMSCAN

2004-09-27 Thread Itamar Reis Peixoto
i need a help.



i am running simscan with vpopmail user.

but when i set the QMAILQUEUE to simscan i receive this message. (unable to
exec qq)


An unknown error has occurred. Subject 'x', Account: 'mail', Server:
'200.XXX.XXX.XXX', Protocol: SMTP, Server Response: '451 unable to exec qq
(#4.3.0)', Port: 53, Secure(SSL): No, Server Error: 451, Error Number:
0x800CCC6A


Itamar Reis Peixoto
Analista Consultor
TreyNet Consultoria - Uberlândia
Tel : + 55 34 3231 0598
Cel:  +55 38 9107 1250
http://www.treynet.com.br



Re: [vchkpw] SIMSCAN

2004-09-27 Thread Jeremy Kitchen
On Monday 27 September 2004 01:27 pm, Itamar Reis Peixoto wrote:
 i need a help.



 i am running simscan with vpopmail user.

 but when i set the QMAILQUEUE to simscan i receive this message. (unable to
 exec qq)

make sure you're setting the environment variable properly.  unable to exec qq 
usually means you made a typo when typing in the QMAILQUEUE setting.

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
  [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
   GnuPG Key ID: 481BF7E2 ++ scriptkitchen.com/kitchen.asc


pgpu97IObj1rH.pgp
Description: PGP signature


[vchkpw] simscan quesiton: error

2004-09-24 Thread Payal Rathod
Hi,
Since there is no official list for simscan and this was the list where 
few simscan questions were asked and answered, I am taking the liberty of
asking it here.
I have simscan-1.0 which i installed by,
./configure
make
make install-strip

In my smtpd/run file I have,
export QMAILQUEUE=/var/qmail/bin/simscan

But when I try to send a message I get,
451 mail server temporarily rejected message (#4.3.0)

I tried to increase softlimit but still the same error.
Can someone tell what is wrong?

With warm regards,
-Payal


Re: [vchkpw] simscan quesiton: error

2004-09-24 Thread Ken Jones
On Friday 24 September 2004 01:16 am, Payal Rathod wrote:
 Hi,
 Since there is no official list for simscan and this was the list where
 few simscan questions were asked and answered, I am taking the liberty of
 asking it here.
 I have simscan-1.0 which i installed by,
 ./configure
 make
 make install-strip

 In my smtpd/run file I have,
 export QMAILQUEUE=/var/qmail/bin/simscan

 But when I try to send a message I get,
 451 mail server temporarily rejected message (#4.3.0)

 I tried to increase softlimit but still the same error.
 Can someone tell what is wrong?

If you are not running qmail-smtpd as root you may need to
change the ownership of simscan to match qmail-smtpd.

Ken Jones


Re: [vchkpw] simscan quesiton: error

2004-09-24 Thread Payal Rathod
On Fri, Sep 24, 2004 at 09:41:09AM -0500, Ken Jones wrote:
 If you are not running qmail-smtpd as root you may need to
 change the ownership of simscan to match qmail-smtpd.

I run qmail-smtpd as qmaild and now I have,
# ls -l simscan
-rwxr-xr-x  1 qmaild nofiles 6136 Sep 24 11:25 simscan

Still the same problem. I am running Mandrake 10.0

With warm regards,
-Payal


Re: [vchkpw] simscan quesiton: error

2004-09-24 Thread Bastiaan van der Put
Check the permissions on the working dir too.
Bas
At 17:25 9/24/2004, you wrote:
On Fri, Sep 24, 2004 at 09:41:09AM -0500, Ken Jones wrote:
 If you are not running qmail-smtpd as root you may need to
 change the ownership of simscan to match qmail-smtpd.
I run qmail-smtpd as qmaild and now I have,
# ls -l simscan
-rwxr-xr-x  1 qmaild nofiles 6136 Sep 24 11:25 simscan
Still the same problem. I am running Mandrake 10.0
With warm regards,
-Payal



Re: [vchkpw] simscan quesiton: error

2004-09-24 Thread Kiril Todorov
Bastiaan van der Put wrote:
# ls -l simscan
-rwxr-xr-x  1 qmaild nofiles 6136 Sep 24 11:25 simscan
chmod --reference /var/qmail/bin/qmail-queue \
/var/qmail/bin/simscan /var/qmail/simscan
chown --reference /var/qmail/bin/qmail-queue \
/var/qmail/bin/simscan /var/qmail/simscan

--
+---+
| Kiril Todorov  +  System::Network Administrator |
+---+
| /* waiting... dreaming... wishing... */   |
+---+


Re: [vchkpw] simscan quesiton: error

2004-09-24 Thread Payal Rathod
On Fri, Sep 24, 2004 at 07:01:20PM +0300, Kiril Todorov wrote:
 chmod --reference /var/qmail/bin/qmail-queue \
 /var/qmail/bin/simscan /var/qmail/simscan
 
 chown --reference /var/qmail/bin/qmail-queue \
 /var/qmail/bin/simscan /var/qmail/simscan

Why do I need to have permission of qmail-queue? 
# ls -l qmail-queue
-rws--x--x  1 qmailq qmail 15912 Sep 24 11:38 qmail-queue

I believe that simscan appear at smtp level i.e. before the mail hits
the queue.

-Payal


[vchkpw] simscan

2004-09-24 Thread Itamar Reis Peixoto
when i am set the qmailqueue to simscan

451 unable to exec qq (#4.3.0)




Itamar Reis Peixoto
Analista Consultor
TreyNet Consultoria - Uberlândia
Tel : + 55 34 3231 0598
Cel:  +55 38 9107 1250
http://www.treynet.com.br



Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-08-01 Thread Charles M. Gerungan
Hello Rick,

Rick romero wrote on Sat, 31 Jul 2004 19:52:43 -0500 UTC:

Rr I don't have a copy, and don't have time to test right now, but is the
Rr rejection based on the score, or the Yes/No?

Rr Currently, I'm sending anything over 15 to /dev/null via a maildrop
Rr script, but 5 is marked as spam..

That's how we do it also.

-- 
Regards, Charles.

pgpnuDALqYtJh.pgp
Description: PGP signature


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-08-01 Thread Ken Jones
It's based on the return code from spamc.
Exitcode is 1 if the message is spam, 0 if not spam.
The threshold is based on your local required_hits configuration.

I guess we could write in code to support how you are doing it.

Ken

On Saturday 31 July 2004 07:52 pm, Rick romero wrote:
 I don't have a copy, and don't have time to test right now, but is the
 rejection based on the score, or the Yes/No?

 Currently, I'm sending anything over 15 to /dev/null via a maildrop
 script, but 5 is marked as spam..

 Rick

 On Jul 31, 2004, at 6:40 PM, Ken Jones wrote:
  Sure, some other folks suggested the same option.
  Perhaps a configuration option to decide to reject or just process
 
  Ken
 
  On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote:
  Ken,
 
  Is it possible to scan for spam and use tagging only, not rejecting
  the
  msg?
 
  Greetings, Bas
 
  At 19:43 7/29/2004, you wrote:
  Here you go
 
  Ken
 
  The installation instructions are in the INSTALL file
 
  On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote:
  Please send me a copy Ken.
 
 
  cheers
 
  Shane
 
  -Original Message-
  From: Ken Jones [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, 28 July 2004 1:57 AM
  To: [EMAIL PROTECTED]
  Subject: [vchkpw] simscan test release: simplified scanner for
  clamav/spamassassin
 
 
  Anyone interested in trying simscan before I release it?
  It is a simplified replacement for qscanq.
  We have been running it on our server for over a week and it is
  solid.
  Like qscanq it can call clamdscan to check for viri.
  It is invoked via the QMAILQUEUE patch.
 
  Differences:
  - uses configure ; make ; make install-strip
  - automatically deletes working directories when done
  - uses one program instead of qscanq's two programs per email
  - optionally calls spamassassin to reject spam during smtp
  - optionally blocks list of attachments
  - does not require svscan
  - simplified C code (one simscan.c file)
 
  If you are interested, please email me directly and I'll send
  you a tar ball.
 
  --
  Ken Jones
  inter7.com


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-31 Thread Eric Ziegast
 Also I was wondering if there is a way to tell qmail-smtpd to exit
 with a 5xx error code rather than a 4xx error on spam or a virus?
 I am running qmail out of supervise, not that it should make any
 difference that I can see.

Look at the end of qmail.c in the qmail distribution.
The exit code of the child program (qmail-queue or $QMAILQUEUE)
determines what error message is spit out in SMTP.

The short answer is:
  Exit code 0 means successful delivery.
  Exit codes between 11 and 40 are permanent (5xx) errors.
  All other exit codes are temportary (4xx) errors.

A longer answer is:
  Have your program exit with a specific exit code and then add a custom
  message in qmail.c to handle that code.  For example:

   case 32: return Dmail server thinks this message is spam(#5.3.0);
   case 33: return Dvirus rejected(#5.3.0);
   case 34: return Dyou send us nothing but crap(#5.3.0);
   case 35: return Dyou are listed in the our blackhole list(#5.3.0);
   case 36: return Dleave us alone, jackass(#5.3.0);
   case 41: return Zif you are not a spammer, try again in 5 minutes(#4.3.0);
 
--
Eric Ziegast


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-31 Thread Bastiaan van der Put
Ken,
Is it possible to scan for spam and use tagging only, not rejecting the msg?
Greetings, Bas
At 19:43 7/29/2004, you wrote:
Here you go
Ken
The installation instructions are in the INSTALL file
On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote:
 Please send me a copy Ken.


 cheers

 Shane

 -Original Message-
 From: Ken Jones [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, 28 July 2004 1:57 AM
 To: [EMAIL PROTECTED]
 Subject: [vchkpw] simscan test release: simplified scanner for
 clamav/spamassassin
 
 
 Anyone interested in trying simscan before I release it?
 It is a simplified replacement for qscanq.
 We have been running it on our server for over a week and it is solid.
 Like qscanq it can call clamdscan to check for viri.
 It is invoked via the QMAILQUEUE patch.
 
 Differences:
 - uses configure ; make ; make install-strip
 - automatically deletes working directories when done
 - uses one program instead of qscanq's two programs per email
 - optionally calls spamassassin to reject spam during smtp
 - optionally blocks list of attachments
 - does not require svscan
 - simplified C code (one simscan.c file)
 
 If you are interested, please email me directly and I'll send
 you a tar ball.
 
 --
 Ken Jones
 inter7.com



Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-31 Thread Ken Jones
Sure, some other folks suggested the same option.
Perhaps a configuration option to decide to reject or just process

Ken

On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote:
 Ken,

 Is it possible to scan for spam and use tagging only, not rejecting the
 msg?

 Greetings, Bas

 At 19:43 7/29/2004, you wrote:
 Here you go
 
 Ken
 
 The installation instructions are in the INSTALL file
 
 On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote:
   Please send me a copy Ken.
  
  
   cheers
  
   Shane
  
   -Original Message-
   From: Ken Jones [mailto:[EMAIL PROTECTED]
   Sent: Wednesday, 28 July 2004 1:57 AM
   To: [EMAIL PROTECTED]
   Subject: [vchkpw] simscan test release: simplified scanner for
   clamav/spamassassin
   
   
   Anyone interested in trying simscan before I release it?
   It is a simplified replacement for qscanq.
   We have been running it on our server for over a week and it is solid.
   Like qscanq it can call clamdscan to check for viri.
   It is invoked via the QMAILQUEUE patch.
   
   Differences:
   - uses configure ; make ; make install-strip
   - automatically deletes working directories when done
   - uses one program instead of qscanq's two programs per email
   - optionally calls spamassassin to reject spam during smtp
   - optionally blocks list of attachments
   - does not require svscan
   - simplified C code (one simscan.c file)
   
   If you are interested, please email me directly and I'll send
   you a tar ball.
   
   --
   Ken Jones
   inter7.com


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-31 Thread Rick romero
I don't have a copy, and don't have time to test right now, but is the 
rejection based on the score, or the Yes/No?

Currently, I'm sending anything over 15 to /dev/null via a maildrop 
script, but 5 is marked as spam..

Rick
On Jul 31, 2004, at 6:40 PM, Ken Jones wrote:
Sure, some other folks suggested the same option.
Perhaps a configuration option to decide to reject or just process
Ken
On Saturday 31 July 2004 03:03 pm, Bastiaan van der Put wrote:
Ken,
Is it possible to scan for spam and use tagging only, not rejecting 
the
msg?

Greetings, Bas
At 19:43 7/29/2004, you wrote:
Here you go
Ken
The installation instructions are in the INSTALL file
On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote:
Please send me a copy Ken.
cheers
Shane
-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]
Sent: Wednesday, 28 July 2004 1:57 AM
To: [EMAIL PROTECTED]
Subject: [vchkpw] simscan test release: simplified scanner for
clamav/spamassassin
Anyone interested in trying simscan before I release it?
It is a simplified replacement for qscanq.
We have been running it on our server for over a week and it is 
solid.
Like qscanq it can call clamdscan to check for viri.
It is invoked via the QMAILQUEUE patch.

Differences:
- uses configure ; make ; make install-strip
- automatically deletes working directories when done
- uses one program instead of qscanq's two programs per email
- optionally calls spamassassin to reject spam during smtp
- optionally blocks list of attachments
- does not require svscan
- simplified C code (one simscan.c file)
If you are interested, please email me directly and I'll send
you a tar ball.
--
Ken Jones
inter7.com



RE: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-30 Thread Shane Chrisp
Hi Ken,

 A small configure option that I had when compiling was that the
--enable-attach=y
always gave a attachement scan = OFF at the end of configure. I overcame
this by
setting ENABLE_ATTACH=1 in the configure file. Also I was wondering if there
is a 
way to tell qmail-smtpd to exit with a 5xx error code rather than a 4xx
error on 
spam or a virus? I am running qmail out of supervise, not that it should
make any
difference that I can see.

Also well done on a great little piece of software.

Regards

Shane Chrisp


-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED] 
Sent: Friday, 30 July 2004 1:44 AM
To: [EMAIL PROTECTED]
Subject: Re: [vchkpw] simscan test release: simplified scanner 
for clamav/spamassassin

Here you go

Ken

The installation instructions are in the INSTALL file


On Thursday 29 July 2004 12:18 pm, Shane Chrisp wrote:
 Please send me a copy Ken.


 cheers

 Shane

 -Original Message-
 From: Ken Jones [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, 28 July 2004 1:57 AM
 To: [EMAIL PROTECTED]
 Subject: [vchkpw] simscan test release: simplified scanner for
 clamav/spamassassin
 
 
 Anyone interested in trying simscan before I release it?
 It is a simplified replacement for qscanq.
 We have been running it on our server for over a week and 
it is solid.
 Like qscanq it can call clamdscan to check for viri.
 It is invoked via the QMAILQUEUE patch.
 
 Differences:
 - uses configure ; make ; make install-strip
 - automatically deletes working directories when done
 - uses one program instead of qscanq's two programs per email
 - optionally calls spamassassin to reject spam during smtp
 - optionally blocks list of attachments
 - does not require svscan
 - simplified C code (one simscan.c file)
 
 If you are interested, please email me directly and I'll send
 you a tar ball.
 
 --
 Ken Jones
 inter7.com




Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-29 Thread Werner Amon
Ken Jones schrieb:
Anyone interested in trying simscan before I release it?
It is a simplified replacement for qscanq. 
We have been running it on our server for over a week and it is solid. 
Like qscanq it can call clamdscan to check for viri. 
It is invoked via the QMAILQUEUE patch.

Differences:
- uses configure ; make ; make install-strip
- automatically deletes working directories when done
- uses one program instead of qscanq's two programs per email
- optionally calls spamassassin to reject spam during smtp
- optionally blocks list of attachments
- does not require svscan
- simplified C code (one simscan.c file)
If you are interested, please email me directly and I'll send you a tar ball.
 

Hi,
I am very interested, please send it to me
Werner


RE: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-29 Thread Shane Chrisp
Please send me a copy Ken. 


cheers

Shane
 

-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 28 July 2004 1:57 AM
To: [EMAIL PROTECTED]
Subject: [vchkpw] simscan test release: simplified scanner for 
clamav/spamassassin


Anyone interested in trying simscan before I release it?
It is a simplified replacement for qscanq. 
We have been running it on our server for over a week and it is solid. 
Like qscanq it can call clamdscan to check for viri. 
It is invoked via the QMAILQUEUE patch.

Differences:
- uses configure ; make ; make install-strip
- automatically deletes working directories when done
- uses one program instead of qscanq's two programs per email
- optionally calls spamassassin to reject spam during smtp
- optionally blocks list of attachments
- does not require svscan
- simplified C code (one simscan.c file)

If you are interested, please email me directly and I'll send 
you a tar ball.

-- 
Ken Jones
inter7.com




[vchkpw] simscan test release

2004-07-29 Thread Itamar Reis Peixoto



It´s a good ideia to put simscan on a web-page or 
an FTP server.

when i have a FREE-TIME I am Write an how to 
INSTALLsimscan in portuguese 
Language.

Itamar Reis PeixotoAnalista 
ConsultorTreyNet Consultoria - UberlândiaTel : + 55 34 3231 
0598Cel: +55 38 9107 1250http://www.treynet.com.br


Re: [vchkpw] simscan test release

2004-07-29 Thread Ken Jones
On Thursday 29 July 2004 12:31 pm, Itamar Reis Peixoto wrote:
 Its a good ideia to put simscan on a web-page or an FTP server.

I will, there is a bit of extra coordination on our web site since we 
changed to a new php template.

 when i have a FREE-TIME I am Write an how to INSTALL simscan  in portuguese
 Language.

That would be great.

Ken


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-28 Thread Ispas Paul
Pe data de Tuesday 27 July 2004 20:57, Ken Jones a scris:
 Anyone interested in trying simscan before I release it?
 It is a simplified replacement for qscanq.
 We have been running it on our server for over a week and it is solid.
 Like qscanq it can call clamdscan to check for viri.
 It is invoked via the QMAILQUEUE patch.

 Differences:
 - uses configure ; make ; make install-strip
 - automatically deletes working directories when done
 - uses one program instead of qscanq's two programs per email
 - optionally calls spamassassin to reject spam during smtp
 - optionally blocks list of attachments
 - does not require svscan
 - simplified C code (one simscan.c file)

 If you are interested, please email me directly and I'll send you a tar
 ball.

Can you send it to me please ?
Or put it on ftp. 
Thanks.




[vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-27 Thread Ken Jones

Anyone interested in trying simscan before I release it?
It is a simplified replacement for qscanq. 
We have been running it on our server for over a week and it is solid. 
Like qscanq it can call clamdscan to check for viri. 
It is invoked via the QMAILQUEUE patch.

Differences:
- uses configure ; make ; make install-strip
- automatically deletes working directories when done
- uses one program instead of qscanq's two programs per email
- optionally calls spamassassin to reject spam during smtp
- optionally blocks list of attachments
- does not require svscan
- simplified C code (one simscan.c file)

If you are interested, please email me directly and I'll send you a tar ball.

-- 
Ken Jones
inter7.com


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-27 Thread Chris A. Kalin
Ken Jones wrote:
Anyone interested in trying simscan before I release it?
If you are interested, please email me directly and I'll send you a tar ball.
Absolutely.  I'd love to test it on our test mail machine.  :)
Thanks in advance!
Chris Kalin


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-27 Thread Kiril Todorov
Ken Jones wrote:
Anyone interested in trying simscan before I release it?
 

Yes, definitely interested!


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-27 Thread Itamar Reis Peixoto
pelase send for me.
- Original Message - 
From: Ken Jones [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 27, 2004 2:57 PM
Subject: [vchkpw] simscan test release: simplified scanner for 
clamav/spamassassin


Anyone interested in trying simscan before I release it?
It is a simplified replacement for qscanq.
We have been running it on our server for over a week and it is solid.
Like qscanq it can call clamdscan to check for viri.
It is invoked via the QMAILQUEUE patch.
Differences:
- uses configure ; make ; make install-strip
- automatically deletes working directories when done
- uses one program instead of qscanq's two programs per email
- optionally calls spamassassin to reject spam during smtp
- optionally blocks list of attachments
- does not require svscan
- simplified C code (one simscan.c file)
If you are interested, please email me directly and I'll send you a tar 
ball.

--
Ken Jones
inter7.com



Re: [vchkpw] simscan ideas

2004-07-27 Thread Kiril Todorov
Okay, looking at the INSTALL file and the simscan.c file here are some 
ideas:

* move bk_attachments array to /var/qmail/simscan/blockattachments (or 
similiar external config file)

* make spam blocking at smtp level optional, add an option to inject in 
the queue the output of spamc instead of the original mail. (so we have 
the X-Spam headers added to it)

* import the QMAILRCPTS functionality from qmail-qfilter and add an 
option for spamc_args to run spamc -u $QMAILRCPTS

* add -m 20 or simliar limiting option to the spamd options in rc.spamd
someone might get surprised with all his memory and swap eaten :)
that's all for now :) I hope it makes sense.


Re: [vchkpw] simscan test release: simplified scanner for clamav/spamassassin

2004-07-27 Thread manvendra bhangui
On Tue, 27 Jul 2004 12:57:20 -0500, Ken Jones [EMAIL PROTECTED] wrote:
 
 Anyone interested in trying simscan before I release it?

Can you send it to me ? I will love to try it.

-- 
Regards Manny

Unix is simple, but it takes a genius to understand the simplicity.
 - Dennis Ritchie