Re: [AMaViS-user] Reject email for non-existent users
Matthew D. Sill [EMAIL PROTECTED] ha scritto: Simone Marx wrote: Simone, It's easy, after each entry in the virtualusertable, add the following: @domain error:5.7.1:550 USER-UNKNOWN This will reject email during the smtp handshake, resulting in no bounces. Make sure that the @domain.com, which will match any user not already defined, is the last entry for that domain. Thank you Matt, but unfortunately the problem still remain... I've verified that, even if I specify virtusertable, use_cw_file C. , sendmail-rx doesn't check for any entry in virtusertable or aliases or real users. If I remove the MAIL_HUB define in the .mc file, sendmail-rx will begin to check if users exist, but doesn't send any mail to amavis... Do you know how to check recipients before sending mails to MAIL_HUB or SMART_HOST ? Thanks, Simone. -- Cordiali Saluti. +--[ Simone Marx ]-+ | Edinet - P.M.I. Solutions| | via P.Ferreri, 26 - Alassio (SV) | | Telefono: 0182 - 47.15.19| | N. Verde: 800 - 90.46.14| +--+ Messaggio Inviato tramite il Servizio WebMail di Edinet http://www.edinet.info --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Many TROUBLE (Operation not supported by device)
Hi,
FYI, this patch still needed by amavisd-new-2.3.3,1 on FreeBSD.
bye,
artifex
On 8/17/05, Mark Martinec [EMAIL PROTECTED] wrote:
--- amavisd~Wed Jun 29 12:26:11 2005
+++ amavisd Wed Aug 17 00:21:19 2005
@@ -12959,5 +12959,5 @@
@EXPORT_OK = qw(init decompose_part determine_file_types);
}
-use Errno qw(ENOENT EACCES EAGAIN);
+use Errno qw(ENOENT EACCES EAGAIN ENODEV);
use IO::File qw(O_CREAT O_EXCL O_WRONLY);
use File::Basename qw(basename);
@@ -13099,5 +13099,5 @@
}
}
-defined $ln || $!==0 || $!==EAGAIN
+defined $ln || $!==0 || $!==EAGAIN || $!==ENODEV
or die Error reading from file(1) utility: $!;
if ($index @part_list) {
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42 plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Many TROUBLE (Operation not supported by device)
FYI, this patch still needed by amavisd-new-2.3.3,1 on FreeBSD. -use Errno qw(ENOENT EACCES EAGAIN); +use Errno qw(ENOENT EACCES EAGAIN ENODEV); -defined $ln || $!==0 || $!==EAGAIN +defined $ln || $!==0 || $!==EAGAIN || $!==ENODEV Must be specific to your version of FreeBSD or Perl. The platform where amavisd-new is being developend is running FreeBSD 5.4 and Perl 5.8.x (5.8.7 currently), so I would be the first to notice such problems. Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] spamreport.pl stopped working
Hi, After upgrading to amavisd-new 2.3.3 my spamreport script http://flakshack.com/anti-spam/wiki/index.php?page=Spam+Report+ala+Kris ceased to work with several errors. In the release notes I read: COMPATIBILITY - replaced 'hits=' with 'score=' in inserted X-Spam-Status header field (and in some internal log entries) for compatibility with a changed default in SpamAssassin 3.1; which looks like a possible cause? I would be very grateful if someone could point me to a fix to the script or setting that made it work again. Thanks, Per olof --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] SPUR-m [Sperm pills]
Christopher wrote: Hi, We too are suffering with this. Here's the Spam-Status header: X-Spam-Status: No, hits=3.26 tagged_above=-99 required=4.4 tests=[FORGED_RCVD_HELO=0.05, HTML_MESSAGE=0.001, PYZOR_CHECK=2.041, URIBL_SBL=0.629, URIBL_WS_SURBL=0.539] Any help would be greatly appreciated. Chris I've always tweaked my: score URIBL_WS_SURBL 2.000 Just a thought. As far as I know, this is a reliable source, with the URIs reviewed by real humans. Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] SA stop a few spam mail
Hi, I use on Fedora Core 3 the postfix-2.1.5 spamassassin-3.0.4 amavisd-new-2.3.1 but the spam mails blocked are really not much !. In amavisd.conf: $sa_tag_level_deflt = 2.0; $sa_tag2_level_deflt = 4.0; $sa_kill_level_deflt = 4.0; $sa_dsn_cutoff_level = 9; $sa_quarantine_cutoff_level = 20; $sa_mail_body_size_limit = 200*1024; $sa_local_tests_only = 0; $sa_auto_whitelist = 1; In local.cf: use_auto_whitelist 1 bayes_path /var/amavis/.spamassassin/bayes auto_whitelist_path /var/amavis/.spamassassin/auto-whitelist ...and then: [EMAIL PROTECTED] scarico]# sa-learn --dump |more 0.000 0 3 0 non-token data: bayes db version 0.000 0501 0 non-token data: nspam 0.000 0108 0 non-token data: nham 0.000 0 33354 0 non-token data: ntokens 0.000 0 1125492113 0 non-token data: oldest atime 0.000 0 1126697384 0 non-token data: newest atime 0.000 0 0 0 non-token data: last journal sync atime 0.000 0 0 0 non-token data: last expiry atime 0.000 0 0 0 non-token data: last expire atime delta 0.000 0 0 0 non-token data: last expire reduction count . [cut] . [EMAIL PROTECTED] qpopper4.0.8]# ls -l /var/amavis/.spamassassin/ totale 1020 -rw--- 1 amavis amavis 12288 11 lug 20:59 auto-whitelist -rw--- 1 amavis amavis 86016 14 set 13:29 bayes_seen -rw--- 1 amavis amavis 1273856 14 set 13:29 bayes_toks I have same dubious: - the parameter 'required_hits' in local.cf is needful or no ?? I haven't use this parameter in local.cf - for to use MX reverse lookup control, I must configure amavisd.conf or local.cf ? - for MX reverse I can to use: skip_rbl_checks 0 rbl_timeout 10 check_mx_attempts 2 check_mx_delay 5 dns_available yes ..it's just ?? thanks. Salvatore. --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
Henrik wrote: Hi, I have postfix-amavisd-new-postfix setup. I'm trying to disable spam checks on dsn/bounce messages ( sender) generated by the first postfix. I already have checks disabled from mynetworks to local_domains, but amavisd doesn't seem to think that message generated by the first postfix is local (ip doesn't show in log.. no xforward?). Also postfix doesn't seem to have anything like bounce_transport. Any ideas? Cheers, Henrik This is admittedly a shot in the dark for me, but might be worth a try. Locally generated mail will use the pickup service to send mail. If bounce notices also apply to this case (not sure if they do), you can disable the content_filter for any locally generated mail by setting: pickupfifo n - - 60 1 pickup -o content_filter= If you have mail users on this server, this will bypass amavisd-new from scanning outbound mail for those users. I don't know if that would be undesirable or not. Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Cannot open bayes databases
Hi All, This morning our amavisd installation seems to have gone to [EMAIL PROTECTED] The log is full of the following messages: It seems to have started after amavisd died from mysterious causes earlier today. Cannot open bayes databases /var/amavisd/.spamassassin/bayes_* R/O: tie failed: Permission denied Anyone know how I can clear this up? David --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Cannot open bayes databases
Martin Svensson wrote: Is the directory still owned (or at least writable) for the Amavis user? Has the /var-filesystem gone bad and remounted itself as read-only? Start amavisd with the debug-sa and debug option to see get more info. My €.2 cent. //Martin David Filion wrote: Hi All, This morning our amavisd installation seems to have gone to [EMAIL PROTECTED] The log is full of the following messages: It seems to have started after amavisd died from mysterious causes earlier today. Cannot open bayes databases /var/amavisd/.spamassassin/bayes_* R/O: tie failed: Permission denied Anyone know how I can clear this up? David The problem was two of the db files ownership have mysteriously changed to root! I posted a follow up saying I'd found the problem, but I think the message is still in the queue. :-) David --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 08:18:55AM -0600, Gary V wrote: Henrik wrote: Hi, I have postfix-amavisd-new-postfix setup. I'm trying to disable spam checks on dsn/bounce messages ( sender) generated by the first postfix. I already have checks disabled from mynetworks to local_domains, but amavisd doesn't seem to think that message generated by the first postfix is local (ip doesn't show in log.. no xforward?). Also postfix doesn't seem to have anything like bounce_transport. Any ideas? Cheers, Henrik This is admittedly a shot in the dark for me, but might be worth a try. Locally generated mail will use the pickup service to send mail. If bounce notices also apply to this case (not sure if they do), I am fairly sure that bounces do *not* go through pickup, they are processed entirely internally to postfix. I've never noticed this problem, but I suspect it depends on exactly where you have the content_filter setting. The easiest way around it is simple - take the content_filter setting out of the postfix main.cf and put it into the master.cf setting for the postfix smtp listener. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] Tiki Technologies Lead Programmer/Software Architect My own personal theory is that this is the very dawn of the world. We're hardly more than an eyeblink away from the fall of Troy, and scarcely an interglaciation removed from the Altamira cave painters. We live in extremely interesting ancient times. I like this idea. It encourages us to be earnest and ingenious and brave, as befits ancestral peoples; but keeps us from deciding that because we don't know all the answers, they must be unknowable and thus unprofitable to pursue. -- Teresa Nielsen Hayden, 1995 --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 06:41:18AM -1000, Clifton Royston wrote: On Wed, Sep 14, 2005 at 08:18:55AM -0600, Gary V wrote: Henrik wrote: Hi, I have postfix-amavisd-new-postfix setup. I'm trying to disable spam checks on dsn/bounce messages ( sender) generated by the first postfix. I already have checks disabled from mynetworks to local_domains, but amavisd doesn't seem to think that message generated by the first postfix is local (ip doesn't show in log.. no xforward?). Also postfix doesn't seem to have anything like bounce_transport. Any ideas? Cheers, Henrik This is admittedly a shot in the dark for me, but might be worth a try. Locally generated mail will use the pickup service to send mail. If bounce notices also apply to this case (not sure if they do), I am fairly sure that bounces do *not* go through pickup, they are processed entirely internally to postfix. I've never noticed this problem, but I suspect it depends on exactly where you have the content_filter setting. The easiest way around it is simple - take the content_filter setting out of the postfix main.cf and put it into the master.cf setting for the postfix smtp listener. This could work.. except we are redirecting different domains to different amavisd ports with transport table. No content_filter settings anywhere. I think I'll look into the sources why amavisd doesn't consider mail from localhost postfix being local. Cheers, Henrik --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] spamreport.pl stopped working
Per olof Ljungmark schrieb: - replaced 'hits=' with 'score=' in inserted X-Spam-Status header field (and in some internal log entries) for compatibility with a changed default in SpamAssassin 3.1; which looks like a possible cause? I would be very grateful if someone could point me to a fix to the script or setting that made it work again. Why don't you replace every occurence of hits with score? -thh --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] spamreport.pl stopped working
Thomas Hochstein wrote: Per olof Ljungmark schrieb: - replaced 'hits=' with 'score=' in inserted X-Spam-Status header field (and in some internal log entries) for compatibility with a changed default in SpamAssassin 3.1; which looks like a possible cause? I would be very grateful if someone could point me to a fix to the script or setting that made it work again. Why don't you replace every occurence of hits with score? yes indeed. I thought I had already tried it but had apparently issued the wrong replace command. Thanks a lot! --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
Henrik wrote: I already have checks disabled from mynetworks to local_domains, Additional details on how you accomplish this would help. This could work.. except we are redirecting different domains to different amavisd ports with transport table. No content_filter settings anywhere. So you have policy banks set up for these ports? It would help if we could see the flow of a message that does work as expected, and an example of logs showing a message that fails to work as expected. And a sample of the policy bank. Just want to understand your setup a little better, if you care to spend the time. Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] dynamic code to handle SMTP or LMTP not loaded
hi all, today i've set up postfix and amavis with clamav. now the amavis doesn't work right. if i send a test email i receive this error message: TROUBLE in process_request: incomming TCP connection, but dynamic code to handle SMTP or LMTP not loaded at /usr/sbin/amavisd-new line 5212. and if i try to connect to the port where amavisd-new should listen, it closes immediatly: telnet localhost 10024 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. i've googled for hours but i can't find any solution.. anyone know's what this could be? thx for any reply greetz mix --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Reject email for non-existent users
Zitat von Simone Marx [EMAIL PROTECTED]: Hi, I've installed amavisd-new with dual-sendmail configuration ( configured with the support of the documentation found on the amavisd-new site. ) Now, my problem is: how can I configure sendmail-rx to reject mails with unknown recipients ? This is more of a sendmail question and not amavisd-new. You should really ask at the sendmail mailing list for this. Regards Andreas --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 11:55:01AM -0600, Gary V wrote: Henrik wrote: I already have checks disabled from mynetworks to local_domains, Additional details on how you accomplish this would help. This could work.. except we are redirecting different domains to different amavisd ports with transport table. No content_filter settings anywhere. So you have policy banks set up for these ports? It would help if we could see the flow of a message that does work as expected, and an example of logs showing a message that fails to work as expected. And a sample of the policy bank. Just want to understand your setup a little better, if you care to spend the time. Well.. I spent some debugging and came to the conclusion that when sending a dsn, the first postfix doesn't send XFORWARD and that is the only thing amavisd checks from mynetworks. I probably need to hack amavisd to think that if there is no XFORWARD, then the sender addr is 127.0.0.1. I think there isn't any other case that XFORWARD isn't sent, so it should be safe? Cheers, Henrik --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] dynamic code to handle SMTP or LMTP not loaded
mix wrote: hi all, today i've set up postfix and amavis with clamav. now the amavis doesn't work right. if i send a test email i receive this error message: TROUBLE in process_request: incomming TCP connection, but dynamic code to handle SMTP or LMTP not loaded at /usr/sbin/amavisd-new line 5212. and if i try to connect to the port where amavisd-new should listen, it closes immediatly: telnet localhost 10024 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. i've googled for hours but i can't find any solution.. anyone know's what this could be? thx for any reply greetz mix Looks like you are using Debian 20030616-p10 Look at this section of amavisd.conf and make sure it looks like what came out of the factory: # SMTP SERVER (INPUT) PROTOCOL SETTINGS (e.g. with Postfix, Exim v4, ...) # (used when MTA is configured to pass mail to amavisd via SMTP or LMTP) $inet_socket_port = 10024;# accept SMTP on this local TCP port # (default is undef, i.e. disabled) # multiple ports may be provided: $inet_socket_port = [10024, 10026, 10028]; # SMTP SERVER (INPUT) access control # - do not allow free access to the amavisd SMTP port !!! # # when MTA is at the same host, use the following (one or the other or both): $inet_socket_bind = '127.0.0.1'; # limit socket bind to loopback interface # (default is '127.0.0.1') @inet_acl = qw( 127.0.0.1 ); # allow SMTP access only from localhost IP # (default is qw( 127.0.0.1 ) ) Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 09:57:48PM +0300, Henrik Krohns wrote:
Well.. I spent some debugging and came to the conclusion that when sending a
dsn, the first postfix doesn't send XFORWARD and that is the only thing
amavisd checks from mynetworks.
I probably need to hack amavisd to think that if there is no XFORWARD, then
the sender addr is 127.0.0.1. I think there isn't any other case that
XFORWARD isn't sent, so it should be safe?
So the hack is done. Now it works logically, message is seen coming from
mynetworks and MYNETS policy is loaded.
--- amavisd-2.3.3.origMon Aug 22 02:46:15 2005
+++ amavisd Thu Sep 15 00:02:17 2005
@@ -11804,6 +11804,14 @@
$initial_am_id = 0;
Amavis::check_mail_begin_task();
$self-prepare_tempdir;
+
+# if no XFORWARD is set, then local postfix submitted it directly
+if ($xforward_args{'ADDR'} eq '') {
+ $xforward_args{'ADDR'} = 127.0.0.1;
+ $xforward_args{'NAME'} = localhost;
+ $xforward_args{'PROTO'} = ESMTP;
+ $xforward_args{'HELO'} = localpfix;
+}
my($cl_ip) = $xforward_args{'ADDR'};
if ($cl_ip ne '' defined $policy_bank{'MYNETS'}
lookup_ip_acl($cl_ip,@{ca('mynetworks_maps')}) ) {
Cheers,
Henrik
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42 plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 09:57:48PM +0300, Henrik Krohns wrote: On Wed, Sep 14, 2005 at 11:55:01AM -0600, Gary V wrote: Henrik wrote: I already have checks disabled from mynetworks to local_domains, Additional details on how you accomplish this would help. This could work.. except we are redirecting different domains to different amavisd ports with transport table. No content_filter settings anywhere. So you have policy banks set up for these ports? It would help if we could see the flow of a message that does work as expected, and an example of logs showing a message that fails to work as expected. And a sample of the policy bank. Just want to understand your setup a little better, if you care to spend the time. Well.. I spent some debugging and came to the conclusion that when sending a dsn, the first postfix doesn't send XFORWARD and that is the only thing amavisd checks from mynetworks. I guess my point was more along the lines of: why is it routed through amavisd in the first place? Why send a self-generated DSN through anyway? -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] Tiki Technologies Lead Programmer/Software Architect My own personal theory is that this is the very dawn of the world. We're hardly more than an eyeblink away from the fall of Troy, and scarcely an interglaciation removed from the Altamira cave painters. We live in extremely interesting ancient times. I like this idea. It encourages us to be earnest and ingenious and brave, as befits ancestral peoples; but keeps us from deciding that because we don't know all the answers, they must be unknowable and thus unprofitable to pursue. -- Teresa Nielsen Hayden, 1995 --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
Clifton Royston a écrit : I guess my point was more along the lines of: why is it routed through amavisd in the first place? Why send a self-generated DSN through anyway? because he is using transport to pass mail to different amavisd's depending on the recipient domain. The problem is that transport is global (not restricted to smtpd). so bounces will go to amavisd too. Another issue is that he can't use reject_unverified_mumble since the verification probe would go to amavisd, which will say ok, defeating the purpose of address verification. --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Thu, Sep 15, 2005 at 12:01:44AM +0200, mouss wrote: Clifton Royston a écrit : I guess my point was more along the lines of: why is it routed through amavisd in the first place? Why send a self-generated DSN through anyway? because he is using transport to pass mail to different amavisd's depending on the recipient domain. The problem is that transport is global (not restricted to smtpd). so bounces will go to amavisd too. Ah, I see. If you replace transports with a Postfix access map that does: example.com FILTER smtp:localhost:10026 example.net FILTER smtp:localhost:10025 or similar, then you can still route domains (or even specific users) to a specific amavisd port/instance, or even route them around amavisd and into the outbound Postfix instance, but you do not get the problems associated with using the transport mechanism to do it. This is the strategy our Scora system uses. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] Tiki Technologies Lead Programmer/Software Architect My own personal theory is that this is the very dawn of the world. We're hardly more than an eyeblink away from the fall of Troy, and scarcely an interglaciation removed from the Altamira cave painters. We live in extremely interesting ancient times. I like this idea. It encourages us to be earnest and ingenious and brave, as befits ancestral peoples; but keeps us from deciding that because we don't know all the answers, they must be unknowable and thus unprofitable to pursue. -- Teresa Nielsen Hayden, 1995 --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Amavisd-new permitting spamassassin to only use local tests
Hello, This morning after having upgraded all installed ports on a FreeBSD mail gateway machine running postfix, amavisd-new, clamav and spamassassin, it appears that spamassassin is no longer working the way it had been. Specifically it seems that only local tests are being run, despite having $sa_auto_whitelist = 1; in the config file. During the upgrade amavisd-new was upgraded from 2.2.1 to 2.3.3, and perl was upgraded from 5.8.6 to 5.8.7. SpamAssassin was current and was not upgraded. I haven't any idea why this should be failing now, nor what to do to fix it. If any one has any guidance to offer I would very much appreciate it, and whetever more information is needed do please let me know and I'ld be happy to provide it. Cheers, Sean --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
Clifton Royston a écrit : Ah, I see. If you replace transports with a Postfix access map that does: example.com FILTER smtp:localhost:10026 example.net FILTER smtp:localhost:10025 or similar, then you can still route domains (or even specific users) to a specific amavisd port/instance, or even route them around amavisd and into the outbound Postfix instance, but you do not get the problems associated with using the transport mechanism to do it. This is the strategy our Scora system uses. unfortunately, only one FILTER action is taken, so in the case of multi recipient mail, things may go wrong. with tranpsort, such email will be split, and copies are sent to multiple amavisd. Thus achieving the OP's goal (with more overhead though, since clam and SA are run multiple times). I still prefer to let all mail go to one amavisd and only make the disposition (quarantine, pass, ...) configurable per recipient. but this is just a personal preference. --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bypass spam checks on local dsn/bounce
On Wed, Sep 14, 2005 at 12:04:45PM -1000, Clifton Royston wrote: On Thu, Sep 15, 2005 at 12:01:44AM +0200, mouss wrote: Clifton Royston a écrit : I guess my point was more along the lines of: why is it routed through amavisd in the first place? Why send a self-generated DSN through anyway? because he is using transport to pass mail to different amavisd's depending on the recipient domain. The problem is that transport is global (not restricted to smtpd). so bounces will go to amavisd too. Ah, I see. If you replace transports with a Postfix access map that does: example.com FILTER smtp:localhost:10026 example.net FILTER smtp:localhost:10025 or similar, then you can still route domains (or even specific users) to a specific amavisd port/instance, or even route them around amavisd and into the outbound Postfix instance, but you do not get the problems associated with using the transport mechanism to do it. This is the strategy our Scora system uses. -- Clifton Yes, this would be fine too. But being paranoid, I want everything scanned for viruses. That's including the messages coming from the server itself, DSN, bounces. Using sendmail binary probably doesn't go through access map? Virus scanning doesn't take much resources, but spamassassin does. That's why internal to internal mail isn't checked for spam. Amavisd didn't realize that it was coming from mynetworks, but now it does, and isn't checked. Cheers, Henrik --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavisd-new permitting spamassassin to only use local tests
Gary wrote: Sean wrote: This morning after having upgraded all installed ports on a FreeBSD mail gateway machine running postfix, amavisd-new, clamav and spamassassin, it appears that spamassassin is no longer working the way it had been. Specifically it seems that only local tests are being run, despite having $sa_auto_whitelist = 1; in the config file. $sa_auto_whitelist = 1; has no effect when used with SpamAssassin versions greater than 2.64. You would set use_auto_whitelist in local.cf in newer versions. Forgot to mention that $sa_auto_whitelist has nothing to do with whether network tests are performed or not, it does what it says, turns auto-whitelist on and off. I think the setting you were after is $sa_local_tests_only = 0; which does affect whether network tests are performed, not that this is necessarily the entire problem. I have not upgraded to 2.3.3 on my FreeBSD test machine, but I would be curious if this setting was changed by the port (I am guessing that would be unlikely, but I'm not sure). During the upgrade amavisd-new was upgraded from 2.2.1 to 2.3.3, and perl was upgraded from 5.8.6 to 5.8.7. SpamAssassin was current and was not upgraded. Some people have had issues when upgrading Perl on FreeBSD. I followed the suggestion listed here, and had no problems: http://marc.theaimsgroup.com/?l=amavis-userm=112107056428905w=2 Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Bypass spam checks on local dsn/bounce
I have the same problem, and I hope this helps. My situation is a little different, and have secondary MX server with different settings. Some spam gets through it (Bayesian database isn't the same), hits our main server, it bounces the email THROUGH the amavisd-new server, and I get the bounce quarantined, and get the 'spam form local' warning. --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Mails stuck in Amavis queue directory
Hello everybody, our license of antivir ran out. After that all outgoing mails were stored in its spool directories like /var/spool/amavis/amavis-XXqqYCuM on SuSE 9.0. In these, there are now no email.txt files. Only parts/part-1 ... Why? Then after happily getting a new license everything works fine, but only for the new mails since the update (as reported by users). The others are not again given to antivir to be scanned and until now I couldn't find a manual method to trigger this again. How can this be done? Here is an excerpt of the log file: Sep 14 04:23:36 mondo amavis[31172]: (XXsWFl45) Virus scanner failure: /usr/bin/antivir (exit status: 212) Sep 14 04:23:36 mondo amavis[31172]: (XXsWFl45) WARN: all primary virus scanners failed, considering backups Sep 14 04:23:36 mondo amavis[31172]: (XXsWFl45) TROUBLE in check_mail: virus_scan FAILED: ALL VIRUS SCANNERS FAILED: Sep 14 04:23:36 mondo amavis[31172]: (XXsWFl45) tempdir is to be PRESERVED: /var/spool/amavis/amavis-XXsWFl45 Sep 14 04:23:36 mondo amavis[31172]: (XXsWFl45) TIMING [total 193 ms] - got data: 5 (3%), body hash: 1 (0%), mkdir parts: 1 (0%), mime_decode: 36 (18%), get-file-type: 15 (8%), decompose_part: 3 (1%), parts: 0 (0%), AV-scan-1: 131 (68%), rundown: 1 (1%) Thanks in advance for any help or hint. Martin __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
