Re: [vchkpw] Announcement: simscan devel version 1.0.3 available
On Wednesday 15 September 2004 04:13 pm, shadowplay.net wrote: > also are you compiling the uid of the simscan > user into the code like they do with other > vpopmail aps? Not this time. Instead the Makefile uses chown and chmod to set ownership and setuid permissions. > > kind of makes it not portable as a compiled app > from a dev to a prod box unless the uid/gid of sinscan > matches across the boxes > > ken > > > -Original Message- > > From: Ken Jones [mailto:[EMAIL PROTECTED] > > Sent: September 15, 2004 15:50 > > To: [EMAIL PROTECTED] > > Subject: Re: [vchkpw] Announcement: simscan devel version > > 1.0.3 available > > > > > > Maybe there should be an option to pick which user to run > > simscan as. The default would be simscan, which seems to work > > if the smtp server runs as root. But if it runs as a > > different user it might not be able to > > kick off a setuid simscan process. I'll look into it. > > > > Ken > > > > On Wednesday 15 September 2004 01:49 pm, Bastiaan van der Put wrote: > > > Probably the user running qmail, and user rights to exec simscan. > > > > > > Had the same. > > > > > > Bas > > > > > > At 20:20 9/15/2004, you wrote: > > > >tested on our dev box... > > > >redhat 9 > > > >netqmail 1.04 > > > >spamassassin > > > >clamav > > > > > > > >make runs well > > > >install is easy > > > > > > > >just a small problem > > > > > > > >I get a > > > > > > > >451 unable to exec qq (#4.3.0) > > > > > > > >error when attempting to deliver mail > > > >I don't think I have set the env correctly... > > > > > > > >what is wrong with this qmail-smtp run file ??? > > > >(fyi tring it without the vpopmail components for now) that it > > > >cant run the qmailq > > > > __ NOD32 1.870 (20040915) Information __ > > > > This message was checked by NOD32 antivirus system. > > http://www.nod32.com
RE: [vchkpw] Announcement: simscan devel version 1.0.3 available
also are you compiling the uid of the simscan user into the code like they do with other vpopmail aps? kind of makes it not portable as a compiled app from a dev to a prod box unless the uid/gid of sinscan matches across the boxes ken > -Original Message- > From: Ken Jones [mailto:[EMAIL PROTECTED] > Sent: September 15, 2004 15:50 > To: [EMAIL PROTECTED] > Subject: Re: [vchkpw] Announcement: simscan devel version > 1.0.3 available > > > Maybe there should be an option to pick which user to run > simscan as. The default would be simscan, which seems to work > if the smtp server runs as root. But if it runs as a > different user it might not be able to > kick off a setuid simscan process. I'll look into it. > > Ken > > On Wednesday 15 September 2004 01:49 pm, Bastiaan van der Put wrote: > > Probably the user running qmail, and user rights to exec simscan. > > > > Had the same. > > > > Bas > > > > At 20:20 9/15/2004, you wrote: > > >tested on our dev box... > > >redhat 9 > > >netqmail 1.04 > > >spamassassin > > >clamav > > > > > >make runs well > > >install is easy > > > > > >just a small problem > > > > > >I get a > > > > > >451 unable to exec qq (#4.3.0) > > > > > >error when attempting to deliver mail > > >I don't think I have set the env correctly... > > > > > >what is wrong with this qmail-smtp run file ??? > > >(fyi tring it without the vpopmail components for now) that it > > >cant run the qmailq > > > __ NOD32 1.870 (20040915) Information __ > > This message was checked by NOD32 antivirus system. > http://www.nod32.com > >
Re: [vchkpw] Announcement: simscan devel version 1.0.3 available
Maybe there should be an option to pick which user to run simscan as. The default would be simscan, which seems to work if the smtp server runs as root. But if it runs as a different user it might not be able to kick off a setuid simscan process. I'll look into it. Ken On Wednesday 15 September 2004 01:49 pm, Bastiaan van der Put wrote: > Probably the user running qmail, and user rights to exec simscan. > > Had the same. > > Bas > > At 20:20 9/15/2004, you wrote: > >tested on our dev box... > >redhat 9 > >netqmail 1.04 > >spamassassin > >clamav > > > >make runs well > >install is easy > > > >just a small problem > > > >I get a > > > >451 unable to exec qq (#4.3.0) > > > >error when attempting to deliver mail > >I don't think I have set the env correctly... > > > >what is wrong with this qmail-smtp run file ??? > >(fyi tring it without the vpopmail components for now) > >that it cant run the qmailq
RE: [vchkpw] Announcement: simscan devel version 1.0.3 available
Probably the user running qmail, and user rights to exec simscan. Had the same. Bas At 20:20 9/15/2004, you wrote: tested on our dev box... redhat 9 netqmail 1.04 spamassassin clamav make runs well install is easy just a small problem I get a 451 unable to exec qq (#4.3.0) error when attempting to deliver mail I don't think I have set the env correctly... what is wrong with this qmail-smtp run file ??? (fyi tring it without the vpopmail components for now) that it cant run the qmailq env - PATH="/var/qmail/bin:/usr/local/bin:$PATH" \ QMAILQUEUE="/var/qmail/bin/simscan" \ /usr/local/bin/softlimit -m 2000 \ /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb \ -c "$MAXSMTPD" -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp\ /usr/local/bin/rblsmtpd -b -r relays.ordb.org -r blackholes.mail-abuse.org \ -r list.dsbl.org -r bl.spamcop.net -r sbl.spamhaus.org \ /var/qmail/bin/qmail-smtpd 2>&1 > -Original Message- > From: Ken Jones [mailto:[EMAIL PROTECTED] > Sent: September 13, 2004 13:33 > To: [EMAIL PROTECTED] > Subject: [vchkpw] Announcement: simscan devel version 1.0.3 available > > > Simscan devel version 1.0.3 is available. > > See: > http://www.inter7.com/?page=simscan > > It would be great if anyone could test it or review the code. > It works on our RedHat 9 machine. > > Changes > 1. spamassassin scanning now passes along all the > spamassassin modified email. > > 2. spamassassin rejection uses the X-Spam-Flag: Yes header to > determine if an email should be rejected instead of using > spamc with the -c option. > > 3. New --enable-spam-hits=hit_number option allows you to > reject based on the calculated hits value instead of the > X-Spam-Flag: Yes header. > > 4. New --enable-per-domain option allows you to enable clamav > scanning or spamassassin scanning on a per domain basis. > Includes new simscanmk program to create the contant database > files (.cdb) used to determine which domains to enable spam > or virus checking for. > > 5. simscan now runs setuid as the simscan user for security. > > 6. Updated documentation. > > -- > Thanks, > Ken Jones > inter7.com > > > __ NOD32 1.855 (20040901) Information __ > > This message was checked by NOD32 Antivirus System. > http://www.nod32.com > >
RE: [vchkpw] Announcement: simscan devel version 1.0.3 available
tested on our dev box... redhat 9 netqmail 1.04 spamassassin clamav make runs well install is easy just a small problem I get a 451 unable to exec qq (#4.3.0) error when attempting to deliver mail I don't think I have set the env correctly... what is wrong with this qmail-smtp run file ??? (fyi tring it without the vpopmail components for now) that it cant run the qmailq env - PATH="/var/qmail/bin:/usr/local/bin:$PATH" \ QMAILQUEUE="/var/qmail/bin/simscan" \ /usr/local/bin/softlimit -m 2000 \ /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb \ -c "$MAXSMTPD" -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp\ /usr/local/bin/rblsmtpd -b -r relays.ordb.org -r blackholes.mail-abuse.org \ -r list.dsbl.org -r bl.spamcop.net -r sbl.spamhaus.org \ /var/qmail/bin/qmail-smtpd 2>&1 > -Original Message- > From: Ken Jones [mailto:[EMAIL PROTECTED] > Sent: September 13, 2004 13:33 > To: [EMAIL PROTECTED] > Subject: [vchkpw] Announcement: simscan devel version 1.0.3 available > > > Simscan devel version 1.0.3 is available. > > See: > http://www.inter7.com/?page=simscan > > It would be great if anyone could test it or review the code. > It works on our RedHat 9 machine. > > Changes > 1. spamassassin scanning now passes along all the > spamassassin modified email. > > 2. spamassassin rejection uses the X-Spam-Flag: Yes header to > determine if an email should be rejected instead of using > spamc with the -c option. > > 3. New --enable-spam-hits=hit_number option allows you to > reject based on the calculated hits value instead of the > X-Spam-Flag: Yes header. > > 4. New --enable-per-domain option allows you to enable clamav > scanning or spamassassin scanning on a per domain basis. > Includes new simscanmk program to create the contant database > files (.cdb) used to determine which domains to enable spam > or virus checking for. > > 5. simscan now runs setuid as the simscan user for security. > > 6. Updated documentation. > > -- > Thanks, > Ken Jones > inter7.com > > > __ NOD32 1.855 (20040901) Information __ > > This message was checked by NOD32 Antivirus System. > http://www.nod32.com > >
Re: [vchkpw] Announcement: simscan devel version 1.0.3 available
Hi, I am trying to comiple on WBEL 3.0(RH EL 3.0) ./configure --enable-spam=y --enable-workdir=/var/simcsan --enable-spam-hits=15 make gives ake[2]: Leaving directory `/temp/simscan-1.0.3/cdb' make[2]: Entering directory `/temp/simscan-1.0.3' gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -Wall -c `test -f 'simscan.c' || echo './'`simscan.c simscan.c: In function `check_spam': simscan.c:442: `debug_fs' undeclared (first use in this function) simscan.c:442: (Each undeclared identifier is reported only once simscan.c:442: for each function it appears in.) simscan.c:443: warning: double format, different type arg (arg 4) make[2]: *** [simscan.o] Error 1 make[2]: Leaving directory `/temp/simscan-1.0.3' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/temp/simscan-1.0.3' make: *** [all] Error 2 Regards, Bas At 20:33 9/13/2004, you wrote: Simscan devel version 1.0.3 is available. See: http://www.inter7.com/?page=simscan It would be great if anyone could test it or review the code. It works on our RedHat 9 machine. Changes 1. spamassassin scanning now passes along all the spamassassin modified email. 2. spamassassin rejection uses the X-Spam-Flag: Yes header to determine if an email should be rejected instead of using spamc with the -c option. 3. New --enable-spam-hits=hit_number option allows you to reject based on the calculated hits value instead of the X-Spam-Flag: Yes header. 4. New --enable-per-domain option allows you to enable clamav scanning or spamassassin scanning on a per domain basis. Includes new simscanmk program to create the contant database files (.cdb) used to determine which domains to enable spam or virus checking for. 5. simscan now runs setuid as the simscan user for security. 6. Updated documentation. -- Thanks, Ken Jones inter7.com