Re: [AMaViS-user] Using RelayCountry with amavis?
mouss wrote:
Per olof Ljungmark wrote:
[snip]
Also, the docs say Also for 3.1.0, you can apply a patch [WWW]
http://bugzilla.spamassassin.org/show_bug.cgi?id=3815 which will allow
you to add a separate MIME header that shows all the message's relay
countries, independent of the rules.
add_header all Relay-Country _RELAYCOUNTRY_
this again I don't see, is there amavisd-tweaking involved here?
there's an example in amavisd-custom.conf.
for example, you could add this at the end of your amavisd.conf:
###
package Amavis::Custom;
BEGIN {
import Amavis::Conf qw(:platform :confvars c cr ca $myhostname);
import Amavis::Util qw(do_log untaint safe_encode safe_decode);
import Amavis::rfc2821_2822_Tools;
import Amavis::Notify qw(build_mime_entity);
}
sub new {
my($class,$conn,$msginfo) = @_;
my($self) = bless {}, $class;
$self; # returning an object activates further callbacks,
# returning undef disables them
}
sub before_send {
my($self,$conn,$msginfo) = @_;
my($all_local) = !grep { !$_-recip_is_local }
@{$msginfo-per_recip_data};
if ($all_local) {
my($hdr_edits) = $msginfo-header_edits;
my ($rly_country) =
$msginfo-supplementary_info('RELAYCOUNTRY');
$hdr_edits-add_header('X-Relay-Countries', $rly_country)
if defined $rly_country $rly_country ne '';
my($languages) = $msginfo-supplementary_info('LANGUAGES');
$hdr_edits-add_header('X-Spam-Languages', $languages)
if defined $languages $languages ne '';
}
}
#
1; # insure a defined return
OK, thanks. I've gotten so far now that amavisd reports the header but
it is not inserted into the actual message headers.
amavis[1968]: (01968-01) header: X-Relay-Countries: VN\n
--per
-
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100url=/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Using RelayCountry with amavis?
Per olof Ljungmark wrote: OK, thanks. I've gotten so far now that amavisd reports the header but it is not inserted into the actual message headers. I tested the snippet I sent you and it worked. amavis[1968]: (01968-01) header: X-Relay-Countries: VN\n --per - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] please remove CR moron:From: [EMAIL PROTECTED]
Michael Scheidell wrote: we really don't need amavisd-new mailing list cluttered up by idiots and their backscanner/chalange response crap. how stupid can you get? subscribe to a mailing list and point to a CR system? how about a postfix header_checks: /^X-Delivery-Agent: TMDA/ REJECT blah blah or an equivalent SA rule? PLEASE DELETE THIS MORON AND PREVENT HIM FROM EVER SUBSCRIBING AGAIN. From: [EMAIL PROTECTED] Received: from QMTA07.westchester.pa.mail.comcast.net (qmta07.westchester.pa.mail.comcast.net [76.96.62.64]) by fl.us.spammertrap.net (Postfix) with ESMTP id 7223DE6070 for [EMAIL PROTECTED]; Thu, 25 Sep 2008 21:46:43 -0400 (EDT) Received: from OMTA14.westchester.pa.mail.comcast.net ([76.96.62.60]) by QMTA07.westchester.pa.mail.comcast.net with comcast id K7q71a0021HzFnQ57Dmiwu; Fri, 26 Sep 2008 01:46:42 + Received: from puterserver.putercom.org ([67.189.3.131]) by OMTA14.westchester.pa.mail.comcast.net with comcast id KDmg1a00R2pcCKF3aDmhRj; Fri, 26 Sep 2008 01:46:41 + X-Authority-Analysis: v=1.0 c=1 a=KwajhhJn:8 a=g92yCCW4JmFRaj9ZiawA:9 a=Y-lODBbp9gv5xD1WbLEA:7 a=v4sliRxrWPmwfQefiJHpWLQKnzMA:4 a=wxohBDkX_gYA:10 a=cvPg7u-AHrgA:10 a=3zT0AC3GIWgA:10 a=gIkGxxPDoV4A:10 a=xybUbHyFDlMA:10 a=SkBy5zu-_KIA:10 a=kduAqn1zG1QA:10 a=Tx_18QxaQF0A:10 a=XF7b4UCPwd8A:10 a=Zc8-U7J0VmV6SIdK6kcA:9 a=M4lp-4l9tFlMddA0JcsA:7 a=_VwYS6j-mSfmCz_9mWkCq8cyGNMA:4 a=eZLSmJVMEtUA:10 Received: (qmail 12213 invoked by uid 514); 26 Sep 2008 01:46:40 - Content-Type: multipart/mixed; boundary0297848222== MIME-Version: 1.0 Content-Disposition: inline From: [EMAIL PROTECTED] Subject: Please confirm your message Reply-To: [EMAIL PROTECTED] Date: Thu, 25 Sep 2008 18:46:40 -0700 (PDT) Message-ID: [EMAIL PROTECTED] References: [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Precedence: bulk Auto-Submitted: auto-replied X-Delivery-Agent: TMDA/0.91 (Lucky Debonair) Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 26 Sep 2008 01:46:46.0132 (UTC) FILETIME=[BBEFAB40:01C91F79] --===0297848222== MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Description: Confirmation Request Content-Disposition: inline This message was created automatically by mail delivery software (TMDA). Your message attached below is being held because the address [EMAIL PROTECTED] has not been verified. To release your message for delivery, please send an empty message to the following address, or use your mailer's Reply feature. [EMAIL PROTECTED] This confirmation verifies that your message is legitimate and not junk-mail. --- Enclosed is a copy of your message. Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 12196 invoked by uid 0); 26 Sep 2008 01:46:30 - Received: from [EMAIL PROTECTED] by PuterServer by uid 514 with qmail-scanner-1.22 (spamassassin: 3.2.0. Clear:RC:0(204.89.241.173):SA:0(?/?):. Processed in 9.397527 secs); 26 Sep 2008 01:46:30 - X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on PuterServer.putercom.org X-Spam-Level: X-Spam-Status: No, score=-6.5 required=4.0 tests=BAYES_00,RCVD_IN_DNSWL_MED, RDNS_NONE,SPF_HELO_PASS autolearn=ham version=3.2.5 Received: from unknown (HELO fl.us.spammertrap.net) (204.89.241.173) by 0 with AES256-SHA encrypted SMTP; 26 Sep 2008 01:46:20 - Received: from localhost (localhost [127.0.0.1]) by fl.us.spammertrap.net (Postfix) with ESMTP id B0EA0E606F for [EMAIL PROTECTED]; Thu, 25 Sep 2008 21:46:19 -0400 (EDT) X-Quarantine-ID: 09Qn3VFCD7vl X-Virus-Scanned: SpammerTrap(r) SME-150 1.84 at secnap.com X-Amavis-Modified: Mail body modified (using disclaimer) by fl.us.spammertrap.net Received: from secnap3.secnap.com (secnap3.secnap.com [204.89.241.130]) by fl.us.spammertrap.net (Postfix) with ESMTP id 5D89EE606C for [EMAIL PROTECTED]; Thu, 25 Sep 2008 21:46:19 -0400 (EDT) User-Agent: Microsoft-Entourage/12.12.0.080729 Date: Thu, 25 Sep 2008 21:46:24 -0400 Subject: Re: [AMaViS-user] amavis-new custom warning messages From: Michael Scheidell [EMAIL PROTECTED] To: Wayne Catterton [EMAIL PROTECTED], Amavis Users amavis-user@lists.sourceforge.net Message-ID: [EMAIL PROTECTED] Thread-Topic: [AMaViS-user] amavis-new custom warning messages Thread-Index: Ackfea6+jQI+3rgonEereLoZOtlfhQ== In-Reply-To: [EMAIL PROTECTED] Mime-version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7bit Hi, I have amavis-new setup with postfix. When I try to set a custom message for the warnings, IE: $notify_virus_recips_tmpl = var/amavis/messages/virus-recipient.txt I end up getting a blank email for the notification. I imagine it's not able to open the file, but I'm not sure as to why, I checked all permissions on the files and
Re: [AMaViS-user] amavisd 2.6.1/pgsql 8.3: Invalid byte sequence for utf8 encoding
Am 29.09.2008 um 16:51 schrieb Stefan Förster:
Hello world,
using DBD:Pg 1.49-2, pgsql 8.3.3 and amavisd-2.6.1, I get the
following error:
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) DO_QUARANTINE, sender:
[EMAIL PROTECTED]
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) SEND via SQL
(DBI:Pg:database=mailsystem;host=127.0.0.1;port=5432):
[EMAIL PROTECTED] - [EMAIL PROTECTED], mail_id
KeeB0+GVNAU6
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql begin transaction
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) write_header: 0,
Amavis::IO::SQL=HASH(0x5058c10)
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql print: key:
(KeeB0+GVNAU6, 1), size=16384
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql: preparing and
executing: INSERT INTO quarantine (mail_id, chunk_ind, mail_text)
VALUES (encode(?,'escape'),?,encode(?,'escape'))
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql flush: key:
(KeeB0+GVNAU6, 1), rx_time=1222698579, size=16384
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql: executing clause:
INSERT INTO quarantine (mail_id, chunk_ind, mail_text) VALUES
(encode(?,'escape'),?,encode(?,'escape'))
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) writing mail text to
SQL failed: Error closing, flush: sql inserting text failed, sql exec:
err=7, 25P02, DBD::Pg::st execute failed: ERROR: current transaction
is aborted, comma
nds ignored until end of transaction block at (eval 44) line 177,
GEN25 line 500. at (eval 44) line 68, GEN25 line 500.
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) sql rollback
Sep 29 16:29:40 nemea amavis[8255]: (08255-01) mail_via_sql: rollback
done
Having a look at the pgsql log, I see that in fact the error causing
said transaction to fail is:
2008-09-29 15:11:14 CEST ERROR: invalid byte sequence for encoding
UTF8: 0xe46c74
2008-09-29 15:11:14 CEST HINT: This error can also happen if the byte
sequence does not match the encoding expected by the server, which is
controlled by client_encoding.
2008-09-29 15:11:14 CEST STATEMENT: INSERT INTO quarantine (mail_id,
chunk_ind, mail_text) VALUES ($1,$2,$3)
I have tested both ways, defining quarantine.mail_test as bytea and as
text (latter version with added encode statements in
$sql_clause{'ins_quar'}.
Any ideas on how to debug this further - or fix it?
I am _SO_ embarassed. Actually, this was an amavisd 2.4.2.
Sorry for the noise
Stefan
--
Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9
Wenn es sich um Geld handelt, gehört jeder der gleichen Religion an.
-- Voltaire
-
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100url=/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Quarantining spam to a mailbox
Thanks Mark. I had worked out that it was looping and have (at least for now) changed to quarantining to files. Thanks also for the doco link. That has told me about the quarantine to mbox which is probably the way I shall go. FWIW, I have also modified amaavisd to use bogofilter instead of SpamAssassin. Cheers, Stephen On Tuesday 30 September 2008 04:26:13 [EMAIL PROTECTED] wrote: Message: 3 Date: Mon, 29 Sep 2008 18:37:14 +0200 From: Mark Martinec [EMAIL PROTECTED] Subject: Re: [AMaViS-user] Quarantining spam to a mailbox To: amavis-user@lists.sourceforge.net Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii Stephen, I am using amavisd-new 2.5.4 (20080312), amavisd-milter 1.3.1 and sendmail 8.14.2. I have configured amavisd to D_DISCARD spam and to quarantine spam using spam_quarantine_method smtp:[127.0.0.1]:25. This superficially seems to be working but it looks as if it may cause a loop whereby one spam generates several entries in the target mailbox. If you are sending quarantine mail back you your MTA on a port which is configured the same as for a regular incoming mail (i.e. it is invoking a milter), then you are creating a loop - mail to be quarantined is being fed again to amavisd by MTA via its milter. You either need to tell MTA not to apply milter to a mail received from amavisd, or tell amavisd to send quarantine mail to some other place, like a backend MTA if you have it. With Postfix this is quite easy, add another smtpd listening port and configure it without a milter. Don't know what would be the best approach with sendmail. Probably the least work is to let amavisd quarantine directly to a local directory or a mbox file without MTA intervention - or switch to Postfix :) Another possibility is not to quarantine, but let amavisd append address extension (e.g. '-spam' or '+spam') for spam messages, then configure MTA to reroute such recipient addresses to a dedicated mailbox. Where is that doco? When I try the spambox@ syntax, I get a sendmail error hostname required. (Yes. I am trying to send spams to a 'special' mailbox for later review.) http://www.ijs.si/software/amavisd/amavisd-new-docs.html#quarantine Mark -- Stephen Davies Consulting P/L Voice: 08-8177 1595 Adelaide, South Australia.Fax : 08-8177 0133 Computing Network solutions.Mobile:040 304 0583 - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] amavisd-release and apache suexec
Mark, Thank you for your patience and time with this. I still haven't got it working. Mark Martinec wrote: amavisd-release need not run as any specific user, all it needs is an access to an inet or unix socket offered by amavisd. If run as root, it works fine. Run from the web script mailaction.php it does not. I guess it is not a suexec issue as amavisd-release does start, but then fails and logs Can't connect to UNIX socket /var/spool/amavisd/amavisd.sock: Permission denied at /usr/bin/amavisd-release line 206. I finally tried from a shell, su webadmin and then run the release command, that also fails with the socket permission error. srwxr-x--- 1 amavis amavis 0 Sep 17 17:19 /var/spool/amavisd/amavisd.sock -rwxr-xr-x 1 root root 9194 Sep 29 14:08 /usr/bin/amavisd-release What am I still doing wrong here?? Michael - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Another secondary virus scanner
rocsca, due to high load of my Postfix+Amavisd-new+MySQL boxes, I have had to disable the primary virus scanner (UVSCAN). I found that UVSCAN is very CPU expensive so I had no other choice other then disable it. So Amavisd-new at the moment is using only CLAMAV. If it crash or stops working for some reason, my mail gateway doesn't deliver email at all. Since I find CLAMAV an effective virus scanner, I would like a similar tool (demonized, open source, active project) that I can use as secondary virus scanner for my Postfix+Amavisd-new+MySQL platform. Use your uvscan as a backup scanner. It won't be called unless clamd fails, which is just what you need. Mark - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Another secondary virus scanner
Rocco Scappatura wrote: Hello, due to high load of my Postfix+Amavisd-new+MySQL boxes, I have had to disable the primary virus scanner (UVSCAN). I found that UVSCAN is very I have found that ClamAV detects as much or more than uvscan. Can you place uvscan as a backup scanner? CPU expensive so I had no other choice other then disable it. So Do you have the v5.30 engine? It is significantly faster than the v5.20 or v5.10 engines. See related thread: http://groups.google.com/group/mailing.unix.amavis-user/browse_thread/thread/290df7dc7b1fcb39/1cf69cf9691e083f?lnk=gstq=uvscan+MrC#1cf69cf9691e083f Amavisd-new at the moment is using only CLAMAV. If it crash or stops working for some reason, my mail gateway doesn't deliver email at all. Since I find CLAMAV an effective virus scanner, I would like a similar tool (demonized, open source, active project) that I can use as secondary virus scanner for my Postfix+Amavisd-new+MySQL platform. rocsca - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Another secondary virus scanner
https://secure.nai.com/apps/downloads/free_evaluations/default.asp?regi on=ussegment=small I will try and I'll let you know.. The CPU has grown again.. I fear that I have to disable it! Or maybe is there a way to set 'uvscan' as secondary mail scanner and to scan email only if the primary mail scanner fails? rocsca - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Another secondary virus scanner
The CPU has grown again.. I fear that I have to disable it!
Just move it from @av_scanners to the @av_scanners_backup list
and keep clamd as a primary virus scanner.
I never have read the conf file completely... :-( Sorry..
Now I have:
@av_scanners = (
### http://www.clamav.net/ - backs up clamd or Mail::ClamAV
['ClamAV-clamscan', 'clamscan',
--stdout --no-summary -r --tempdir=$TEMPBASE {},
[0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);
@av_scanners_backup = (
### http://www.nai.com/
['NAI McAfee AntiVirus (uvscan)', 'uvscan',
'--secure -rv --mime --summary --noboot - {}', [0], [13],
qr/(?x) Found (?:
\ the\ (.+)\ (?:virus|trojan) |
\ (?:virus|trojan)\ or\ variant\ ([^ ]+) |
:\ (.+)\ NOT\ a\ virus)/,
# sub {$ENV{LD_PRELOAD}='/lib/libc.so.6'},
# sub {delete $ENV{LD_PRELOAD}},
],
);
But from docs it seems to me that in this manner every message is
scanned two time anyway.. Is this true? Could I set up Amavisd-new so
that I skip the secondary av scanner if the first detect that the
message is infected?
rocsca
-
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100url=/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Strange error after upgrade to 2.6.1
I got this figured out. Apparently CPAN was updating a Perl installation in /usr/lib/perl5/site_perl, whereas Amavisd-new was picking up packages in /usr/lib/perl5/vendor_perl. Because of that some modules that I thought I'd updated (namely, MIME::Tools) where still picking up the older versions that didn't have needed functionality. Mike [EMAIL PROTECTED] wrote on 10/03/2008 09:40:12 AM: [EMAIL PROTECTED] 10/03/2008 10:05 AM To amavis-user@lists.sourceforge.net cc Subject [AMaViS-user] Strange error after upgrade to 2.6.1 I switched my mail filter server yesterday from our older setup running amavisd-new 2.4.2, to an updated system running 2.6.1. Everything appeared to be going fine, but when I came in this morning I have about 15-20 messages stuck in my mail queue displaying the following message: forwarding FAILED: Can't locate object method is_encoded via package Amavis::MIME::Body::OnOpenFh at /usr/local/sbin/amavisd line 7038, GEN8 line 5440. (in reply to end of DATA command)) Google hasn't proved very helpful on this one. The only mention I can even find of Amavis::MIME::Body::OnOpenFH is in the Amavisd release notes. Thanks. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] low scoring mens health -- anyone else seeing these?
lartc wrote: hi all, i've been getting quite a few mens health spams from yahoo.com and aol.com and aol.co.uk -- there going to various addresses and my client's address is being bcc'd this appears to be abuse, as scores are coming in very low on these messages (less than 1.0) i've increased the following scores by 0.5 (from what's in the file) score DRUGS_ERECTILE 2.872 1.146 0.825 0.782 any other suggestions? If you're already using clamav, consider using the Sanesecurity add-on signatures. They catch a lot of these pill spams plus 419 scams and phishing. I find them very effective and reliable, and I highly recommend them. http://www.sanesecurity.com/clamav/usage.htm -- Noel Jones - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Using RelayCountry with amavis?
I think that amavis handles all header re-writing and ignores any such directives in the spamassassin config files. This info is in the amavis FAQ btw. So, if you ran your message through spamassassin by hand you would likely see the X-Spam-Relay-Countries header added to your message, but it would not be there if the email passed through amavis. This is normal behavior I believe. On 10/3/08 9:03 AM, Per olof Ljungmark [EMAIL PROTECTED] wrote: Brad White wrote: It doesn't show up in the amavis generated log entries on my system, but it is definitely working. I does show up when I run a spamassasin -D --lint: [14432] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from @INC I have the plugin enabled via the init.pre file in my spamassasin directory: # RelayCountry - add metadata for Bayes learning, marking the countries # a message was relayed through # # Note: This requires the IP::Country::Fast Perl module # loadplugin Mail::SpamAssassin::Plugin::RelayCountry You also need the extra configuration in your spamassassin local.cf file, something like: ifplugin Mail::SpamAssassin::Plugin::RelayCountry header RELAY_CN X-Relay-Countries =~ /\bCN\b/ describe RELAY_CN Relayed through China score RELAY_CN 1.0 header RELAY_KR X-Relay-Countries =~ /\bKR\b/ describe RELAY_KR Relayed through Korea score RELAY_KR 1.0 header RELAY_RU X-Relay-Countries =~ /\bRU\b/ describe RELAY_RU Relayed through Russia score RELAY_RU 1.0 header RELAY_US X-Relay-Countries =~ /\bUS\b/ describe RELAY_US Relayed through United States score RELAY_US 0.001 header RELAY_PL X-Relay-Countries =~ /\bPL\b/ describe RELAY_PL Relayed through Poland score RELAY_PL 0.001 endif # Mail::SpamAssassin::Plugin::RelayCountry This definitely works for me on my installation. Yes you're right, it does not show up until you turn on a higher debug level, thanks! Also, the docs say Also for 3.1.0, you can apply a patch [WWW] http://bugzilla.spamassassin.org/show_bug.cgi?id=3815 which will allow you to add a separate MIME header that shows all the message's relay countries, independent of the rules. add_header all Relay-Country _RELAYCOUNTRY_ this again I don't see, is there amavisd-tweaking involved here? On 10/3/08 5:08 AM, Per olof Ljungmark [EMAIL PROTECTED] wrote: Hi, I am fiddling with Mail::SpamAssassin::Plugin::RelayCountry in our Spamassassin config, and it seems to load ok from init.pre: spamassain -D --lint: [85215] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from @INC However, it does not show up when I start amavisd: amavis[85275]: extra modules loaded after daemonizing: Mail/DomainKeys/Header.pm, Mail/DomainKeys/Key.pm, Mail/DomainKeys/Key/Public.pm, Mail/DomainKeys/Message.pm, Mail/DomainKeys/Policy.pm, Mail/DomainKeys/Signature.pm, Mail/SpamAssassin/Plugin/DomainKeys.pm, Mail/SpamAssassin/Plugin/PDFInfo.pm Anyone on the list using this plugin that can give me a hint here? Using latest stable release. Thanks, --per - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Write and enable my rules for Spamassassin
Hello, I want to write my own rules - in this case my own rules for Uribl. If this pattern is in the mail, the score should be XX. I enabled my own rules in local.cf in /etc/mail/spamassassin with allow_user_rules 1 The spamassassin --lint -D shows me [16656] dbg: config: allowing user rules! My rules in local.cf are: uri LOCAL_URI_EXAMPLE /www\.uni-leipzig.de\.de\/2009\// score LOCAL_URI_EXAMPLE 5.1 But my user rules are not working - the message with www.uni-leipzig.de/2009 is not market with 5.1 points. In the postfix-mailinglist a user said if you use amavis with spamassassin, not all the things will happen like in the spamasassin help document. Tnx Sebastian - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Write my own rulesets for spamassassin
Hello, I want to write my own rules - in this case my own rules for Uribl. If this pattern is in the mail, the score should be XX. I enabled my own rules in local.cf in /etc/mail/spamassassin with allow_user_rules 1 The spamassassin --lint -D shows me [16656] dbg: config: allowing user rules! My rules in local.cf are: uri LOCAL_URI_EXAMPLE /www\.uni-leipzig.de\.de\/2009\// score LOCAL_URI_EXAMPLE 5.1 But my user rules are not working - the message with www.uni-leipzig.de/2009 is not market with 5.1 points. In the postfix-mailinglist a user said if you use amavis with spamassassin, not all the things will happen like in the spamasassin help document. Tnx Sebastian - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Write my own rulesets for spamassassin
Hello, I want to write my own rules - in this case my own rules for Uribl. If this pattern is in the mail, the score should be XX. I enabled my own rules in local.cf in /etc/mail/spamassassin with allow_user_rules 1 The spamassassin --lint -D shows me [16656] dbg: config: allowing user rules! My rules in local.cf are: uri LOCAL_URI_EXAMPLE /www\.uni-leipzig.de\.de\/2009\// score LOCAL_URI_EXAMPLE 5.1 But my user rules are not working - the message with www.uni-leipzig.de/2009 is not market with 5.1 points. In the postfix-mailinglist a user said if you use amavis with spamassassin, not all the things will happen like in the spamasassin help document. Tnx Sebastian - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Using RelayCountry with amavis?
mouss wrote: Per olof Ljungmark wrote: OK, thanks. I've gotten so far now that amavisd reports the header but it is not inserted into the actual message headers. I tested the snippet I sent you and it worked. amavis[1968]: (01968-01) header: X-Relay-Countries: VN\n Yup, I'm getting there now. I had the (wrong) impression that the actual country was looked up separately but reading the code again proved the opposite, it is dug out from the RELAYCOUNTRY variable in SA. Thanks a lot for your kind help. --per - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Another secondary virus scanner
On Sep 30, 2008, at 9:27 AM, Mark Martinec wrote: due to high load of my Postfix+Amavisd-new+MySQL boxes, I have had to disable the primary virus scanner (UVSCAN). I found that UVSCAN is very CPU expensive so I had no other choice other then disable it. So Amavisd-new at the moment is using only CLAMAV. If it crash or stops working for some reason, my mail gateway doesn't deliver email at all. Since I find CLAMAV an effective virus scanner, I would like a similar tool (demonized, open source, active project) that I can use as secondary virus scanner for my Postfix+Amavisd-new+MySQL platform. Use your uvscan as a backup scanner. It won't be called unless clamd fails, which is just what you need. Is this just a matter of moving the uvscan block from @av_scanners to @av_scanners_backup in amavisd.conf? -Dave -- Dave McGuire Port Charlotte, FL - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
