Re: [AMaViS-user] Filtering before banned attachments

2008-01-25 Thread mouss
Robert Fitzpatrick wrote:
 I see a message get sent through and labeled 'WARNING: contains banned
 part' like it should according to our banned policies as it scores zero
 in SA. I am assuming zero means that SA didn't even scan the content? If
 I take the source of the message without the attachment, it scores
 plenty high enough to kill.
   

if the attachment is large, it will be skipped. The size is 
configurable, but spending cycles on huge messages is generally not 
worth the trouble. Up so far, spam rarely comes in large messages.
 My question, is there a way for amavis to filter with SA and only send
 through according to banned policies if CLEAN?

   


-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] ETA for amavisd-new 2.6.0? F-Prot 6 configuration

2008-01-25 Thread Juan Miscaro
I understand the configuration (amavisd.conf) to welcome the latest
from F-Prot is not solidified in the current stable release of
amavisd-new.  I am currently setting up a server for use with F-Prot. 
Any news on when the next version of amavisd-new (2.6.0?) will be out? 
If not, is there a known-good config for this virus scanner?  Thank
you.

/juan


  Connect with friends from any web browser - no download required. Try the 
new Yahoo! Canada Messenger for the Web BETA at 
http://ca.messenger.yahoo.com/webmessengerpromo.php

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Blocking Encrypted / Password Protected PDF / DOC Files

2008-01-25 Thread Michael W Cocke
On Wed, 23 Jan 2008 06:09:24 +0530, you wrote:

How can I block the encrypted or password protected PDF and DOC
(Microsoft) files using amavisd-new while allowing the unencrypted
ones or those without password to pass ?

Thanks,

Manish


I can't help with the details, but I can give you the general idea -
you need to raise a return code if the disassembly of the attachment
fails, or you need to add an additional extraction tool in (pretend
it's a virus tester) and raise a return code if the open of the
attachment fails.  The code to test a PDF should be available
somewhere, damned if know where to find one for DOC files.

Mike-

--
If you're not confused, you're not trying hard enough.
--
Please note - Due to the intense volume of spam, we have installed 
site-wide spam filters at catherders.com.  If email from you bounces,
try non-HTML, non-encoded, non-attachments,

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] Filtering before banned attachments

2008-01-25 Thread Robert Fitzpatrick
I see a message get sent through and labeled 'WARNING: contains banned
part' like it should according to our banned policies as it scores zero
in SA. I am assuming zero means that SA didn't even scan the content? If
I take the source of the message without the attachment, it scores
plenty high enough to kill.

My question, is there a way for amavis to filter with SA and only send
through according to banned policies if CLEAN?

-- 
Robert


-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis cuts the domainname in emails to virtuall domain

2008-01-25 Thread rupert
On Jan 25, 2008 4:44 AM, mouss [EMAIL PROTECTED] wrote:

 rupert wrote:
  Hi,
  i have a cyrus murder cluster with postfix and started integrating
 amavis
  for content filtering.
  When I send an email to a user of a virtuall domain that isnt the local
  domain the postfix host is in everthing is fine.
  When i send an email to a user that is in the same domain than the
 server
  the @test.local gets lost.
  As mydomain in postfix I have test.local:
 
  Jan 24 03:07:53 frontend postfix/qmgr[6449]: 0FA1E1200BC: from=
  [EMAIL PROTECTED], size=987, nrcpt=1 (queue active)
  Jan 24 03:07:53 frontend postfix/local[6655]: 0FA1E1200BC: to=
  [EMAIL PROTECTED], relay=local, delay=438, delays=438/0.04/0/0.02, dsn=
 4.1.1,
  status=SOFTBOUNCE (unknown user: jones)
 

 relay=local indicates that this has nothing to do with amavisd-new, but
 with local delivery. does jones exist in /etc/passwd? if you want
 virtual delivery, you'll need to use virtual delivery. seethe VIRTUAL
 README (in postfix docs).

i had the domain listet in the option mydestination in main.cf,
removed it from there and now it gets deliverd.

thank you



  where can i set this?
  In the master,cf i had to set ${recipient} instead of ${user} for cyrus,
 do
  I have to do the same for amavis? and where, if?
 
 
  thx
 
  rupert
 
 -
  This SF.net email is sponsored by: Microsoft
  Defy all challenges. Microsoft(R) Visual Studio 2008.
  http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
  ___
  AMaViS-user mailing list
  AMaViS-user@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/amavis-user
  AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
  AMaViS-HowTos:http://www.amavis.org/howto/
 


 -
 This SF.net email is sponsored by: Microsoft
 Defy all challenges. Microsoft(R) Visual Studio 2008.
 http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
 ___
 AMaViS-user mailing list
 AMaViS-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/amavis-user
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
 AMaViS-HowTos:http://www.amavis.org/howto/

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/