Re: [AMaViS-user] domainkeys vs dkim & how to get sender domain

2009-07-03 Thread Rob MacGregor
On Fri, Jul 3, 2009 at 14:45, AMP Admin wrote:
> 1.       Are domainkeys dead?  I can't find any new information on them.  I
> have dkim working great but should I have dkim and domainkeys both working?

Taking the risk of quoting the Wikipedia entry for DomainKeys:

Both DomainKeys and DKIM were published in May 2007: DomainKeys was
issued as a "historical" protocol and DKIM was issued as its
standards-track replacement.

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

--
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Re: [AMaViS-user] falsification of mail account

2009-02-27 Thread Rob MacGregor
On Fri, Feb 27, 2009 at 22:40, troxlinux  wrote:

>
> I have installed dkim-milter-2.5.5-2.1, with some basic options inside
> the one...
> you can explain to me a little but of this ..

Have you RTFMd (www.dkim.org)?  Have you published any policy (_ssp or
_adsp) that says what to do about unsigned email?  Are you verifying
or just signing?

> I have a spf record inside my zone main dns
>
> superdominio.org.ni.        IN      TXT     "v=spf1
> ip4:165.98.245.78/24 ptr:ns1.superdominio.org.ni ?all"

Right, can I strongly suggest you RTFM that one too (www.openspf.org).
 That isn't a record that'll do you any good:

ip4:165.98.245.78/24 - 165.98.245.x, or some 254 hosts (assuming it is
a /24 allocation), do you really need to authorise that many hosts?
ptr:ns1.superdominio.org - you want a:ns1.superdominio.org
?all - or "ignore this record", if you want to reject mail based upon
SPF failures you need -all (or ~all to mark but accept)

Mind you, your only SPF checks were within spamassassin.  I'd suggest
a separate milter would be a better choice.

-- 
     Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

--
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Re: [AMaViS-user] falsification of mail account

2009-02-27 Thread Rob MacGregor
On Fri, Feb 27, 2009 at 20:43, troxlinux  wrote:
> hello list has some days of not being able to block mail that send
> with my account to myself, I have my mail server with
> postfix+amavisd-new-2.5.1-27+sasl, are they using my mail account or
> of other users to send me mail to my own account and also with that of
> other users, will there be some form of being able to block this?

SPF and DKIM can help, if you both publish and check at your external
mail server(s).

Mail headers reversed to show chronological order:

> Received: from alcoa.com.au (unknown [189.106.168.97])
>by ns1.superdominio.org.ni (Postfix) with SMTP id A49D516100917
>for ; Fri, 27 Feb 2009 12:01:11 -0600 (CST)

Mail sent from 189.106.168.97 and received by ns1.superdominio.org.ni.

This is where it entered your mail server, this is the point at which
you should have rejected it.

> Received: from ns1.superdominio.org.ni ([127.0.0.1])
>by localhost (ns1.superdominio.org.ni [127.0.0.1]) (amavisd-new, port 
> 10024)
>with LMTP id 3K6WLKeakwYC for ;
>Fri, 27 Feb 2009 12:01:13 -0600 (CST)

Internal processing by ns1.superdominio.org.ni

> X-DKIM: Sendmail DKIM Filter v2.5.5 ns1.superdominio.org.ni B5BAD16100AEC
> DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=superdominio.org.ni;
>s=default; t=1235757685; bh=/JdwMpPAOar3veUORJ8SgAH6AZyJuFmozd/yQkt
>emFs=; h=To:Subject:From:MIME-Version:Content-Type:Message-Id:Date;
>b=tMT9nWHQE9pxJKjE3ifQ0jdIEwTAB8L+BHqHzmjwcD1TExyIe0qsc2augFZ6+BTDN
>DEEZS0iFY+BbJJ8WM2TjcIRhfCYHU9nmDC28d2K6sb5e1DYetZq4AsE/r/+lauhPKxU
>AWPfjytqLTXdMB6d948iSMyYRcDjYDUHjU/3iec=

DKIM signing the incoming email, apparently you're either not
publishing a policy, or not checking it ;)

> Received: from localhost (localhost [127.0.0.1])
>        by ns1.superdominio.org.ni (Postfix) with ESMTP id B5BAD16100AEC
>        for ; Fri, 27 Feb 2009 12:01:25 -0600 (CST)

More internal processing.

I'd recommend you:

a) Publish a sender signing policy for DKIM and check it

b) Publish and check an SPF record

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

--
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Re: [AMaViS-user] dkim: public key not available

2008-11-19 Thread Rob MacGregor
On Wed, Nov 19, 2008 at 08:00, Ihsan Dogan <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I was trying to setup dkim and I'm running into problem. I've generated
> the key with "amavisd genrsa /path/to/key.pem" and put this into the
> configuration file:
>
> $enable_dkim_signing = 1;
> dkim_key('dogan.ch',»··· 'abc',
> '/opt/csw/var/amavisn/db/dkim/dogan.ch.key.pem');
>
> When I run "amavisd testkeys" I'm getting this error:
> TESTING: abc._domainkey.dogan.ch   => invalid (public key: not
> available)
>
> Any idea what's going wrong here?

Have you published your public key in DNS yet?

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche
-
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Re: [AMaViS-user] Backscatter

2008-04-09 Thread Rob MacGregor
On Wed, Apr 9, 2008 at 6:44 PM,  <[EMAIL PROTECTED]> wrote:
> Ok, I'm not sure what has happened, but my own email address along with
>  many of my users is being used as a forged sender address for a lot of
>  spam, and I'm getting pummeled by backscatter (as in I just came back from
>  lunch after having cleared them out and had 27 more delivery failure
>  messages waiting on me - many users on my system are experiencing similar
>  volumes).

Have you looked into SPF, which should help make your domain less
attractive to spammers forging addresses.

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] upgrading from amavis-ancient

2008-04-05 Thread Rob MacGregor
On Fri, Apr 4, 2008 at 10:58 PM, jef moskot <[EMAIL PROTECTED]> wrote:
> Currently we're using a heavily-modified version of amavis-perl, plugged
>  into sendmail.
>
>  We're finally moving to a new system and I thought we might try to advance
>  in baby steps.  I like the easily-modified nature of the perl script and
>  we have cycles to burn, so I'm not concerned about using an inefficient
>  script instead of a nice daemon.
>
>  That said, the script has its own quirks.  It's been modified to scan some
>  kinds of messages and not others, use non-default unpacking software, scan
>  the entire message as a whole instead of just the individual parts, and
>  some other things.  Additionally, messages that would otherwise be delayed
>  start piling up in /var/spool/mqueue and need to be manually purged with a
>  cron job.
<---SNIP--->
>
>  amavis.org was painfully out-of-date when we set this whole thing up, and
>  it doesn't look like things have improved much.  It looks like
>  amavis-0.3.x is the way to go at this point, but I wanted some feedback on
>  that before I put much effort into it.
>
>  Any suggestions (other than to bite the bullet and use the daemon)?

One option might be to look at MIMEDefang (I use it on some hosts and
amavisd-new on others).  It would allow you a daemonised scanner, but
one that's designed to be hacked to suit your needs - mine is heavily
modified from the base to behave differently if the sender is
authenticated, differently again if the mail came from localhost, to
strip HTML from certain mails, but not others and so on.  What's nice
is that I can add a lot of that to my own custom function to make
upgrades easy.

YMMV, but it's worth a look IMO.

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] bypass_spam_checks

2008-04-04 Thread Rob MacGregor
On Fri, Apr 4, 2008 at 8:15 AM, Gert Ahrens <[EMAIL PROTECTED]> wrote:
> Hello,
>
>  more and more spammers use mailadresses from our own domain as serder
>  adresses of spam. In the past I had bypass all mails from our own
>  domain, but now that is impossible.
>  Last week I tryed to use MYNETS to distinguish between intern generated
>  mail and mail who are delivered from an extern mailserver. Now my problem
>  begins. I collect any extern mail with fetchmail and fetchmail delivers to
>  localhost:25, the local smtpd. Exactly the same way take all intern
>  generated mail with eGroupware(FeLaMiMail) or mail from my Squirrelmail
>  webinterfaces on our mailserver. I see no way to discern intern generated
>  from extern mail.
>
>  our mailsystem:
>  version of amavis amavisd_new-2.3.3
>  version of MTA postfix 2.2.9
>  spamassassin 3.2.4
>
>  Do you have any ideas?

I'd suggest that you look at SPF (and DKIM).  Both will reduce the
number of spammers that use your domain (over time, in my experience).

You could also configure fetchmail not to hand the mail over to
localhost, but to a different interface (maybe even a virtual one) and
configure amavis/postfix to treat those mails differently.

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Too big a message times out, multiplies on disk

2008-04-02 Thread Rob MacGregor
On Wed, Apr 2, 2008 at 6:55 PM, Jo Rhett <[EMAIL PROTECTED]> wrote:
> You need to adjust your timeouts so that your clamav timeout is
>  sooner than the amavis timeout, etc.

And, honestly, I'd suggest the OP looks into finding alternative ways
of transferring the file - email was never intended for transferring a
1.7 GB file!

>  I believe there is also a max-file-size option in clamav which would
>  help you.

In clamd.conf there is StreamMaxLength (defaults to 10MB).

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] So tired, clamd.ctl not created

2008-02-15 Thread Rob MacGregor
On Fri, Feb 15, 2008 at 9:21 PM, Rob Morin <[EMAIL PROTECTED]> wrote:
> According to Debian Etch its not out of date...  :)

That just means the package maintainer is horribly behind.  There have
been 7 releases (and almost a year) since 0.90.1 was released.  I take
it you don't pay any attention to the warnings from freshclam ;)

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] So tired, clamd.ctl not created

2008-02-15 Thread Rob MacGregor
Keep it on the list please.

On Fri, Feb 15, 2008 at 9:01 PM, Rob Morin <[EMAIL PROTECTED]> wrote:
>
>  Opps... sorry you might have a point there, as the original problem was
> that amavis could not connect to clamd.ctl, that why i figured i would send
> i there, sorry...
>
>  yes clamd starts it just not created that /var/run/clamav/clamd.ctl file
> :(
>
>  Version 0.90.1 on debian etch..

That's very out of date - update to 0.92.1.

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] So tired, clamd.ctl not created

2008-02-15 Thread Rob MacGregor
On Fri, Feb 15, 2008 at 8:48 PM, Rob Morin <[EMAIL PROTECTED]> wrote:
> All was fine for months and months, i rebooted and now clamd.ctl is not
>  created anymore i still cannot belive why its so complicated to get
>  something so simple to work

This is far more relevant to the clamav-users mailing list ;)

<---SNP--->
>  Anybody ?? i am pulling my hair out... AHAHAHAHH..
>  :)

Does clamd start?  What version of clamd are you running?

-- 
 Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
 doesn't become a monster. Friedrich Nietzsche

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Antivirus programs?

2007-10-10 Thread Rob MacGregor
On 10/10/07, Adam65535 <[EMAIL PROTECTED]> wrote:
>
> In my experiences clamav/clamd is much slower than other mail scanners (even
> when up against command line scanners like uvscan).  It is still a very
> useful virus scanner but not fast by any means.  For an example... the
> command line scanner uvscan takes .15 seconds while clamav takes 2.6 seconds
> for the same email.  This trend is throughout the logs.

I've never yet seen clamd take anything close to that on emails.  I
have to add SpamAssassin to the process to get anything close to that
kind of delay.

As a quick test, I ran clamdscan against sample-nonspam.txt (that came
with SpamAssassin some time back) and it took 0.015s.

Now, clamscan, that took 2.6s for the same scan (f-prot took 0.3s,
bitdefender a mind blowing 6.3).

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis with not 777 /tmp

2007-08-08 Thread Rob MacGregor
On 8/8/07, Alexander Straschil <[EMAIL PROTECTED]> wrote:
>
> There are PHP-Scripts which seem to bee really broken (joomla cms in
> version which a known to have holes).
>
> I can't delete this skripts (customers), and it will take a while till they
> are update.

Then, frankly, you have bigger problems than access to /tmp.  As Mark
said, run (at least) apache chrooted.

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis with not 777 /tmp

2007-08-08 Thread Rob MacGregor
On 8/8/07, Alexander Straschil <[EMAIL PROTECTED]> wrote:
> Hello Mark,
>
> The realy thing why I want to do that (and which I forgot to write in my
> first Posting) ist, that I don't want to give my user running the apache
> webserver access to the /tmp directory. So, maybe creating a new group
> called tmp having everybody but my webserver user and giving /tmp
> a group-ownership to the tmp group and permissions of 1775 would be a
> better Solution?

Unless you've *really* broken your apache setup then nobody accessing
the web server should be able to access files in /tmp.  Or are you
worried that somebody may be able to subvert apache?  If that's the
case then you've bigger worries than /tmp!

-- 
         Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis with not 777 /tmp

2007-08-08 Thread Rob MacGregor
On 8/8/07, Alexander Straschil <[EMAIL PROTECTED]> wrote:
> Hello!
>
> Im new here, using amavis, happy with it, but have now the following
> Problem.
>
> I don't want to have my /tmp Directory with permissions 777.

/tmp should be 1777 so that only the owner can delete a file.

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Amavisd License Clarification

2007-07-05 Thread Rob MacGregor
On 7/5/07, Michael Katz <[EMAIL PROTECTED]> wrote:
> I was looking at the recent amavisd-new  presentation by the author and
> slide four says that amavisd-new is GPL.  If it is GPL that would bring
> many many installations out of license compliance, especially in
> commercial products and email filtering services, that have heavily
> customized amavisd-new without submitting their changes to the
> community.  I thought that it had a BSD license which allows unlimited
> changes without change submissions, rather than GPL which requires that
> changes be submitted back to the community and forbids use in commercial
> products that don't supply all source code.

I don't have anything older than 2.2.1 to hand, but it certainly uses
the GPL as far back as that - as clearly detailed in the file titled
"LICENSE" :)

-- 
         Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Access denied errors in logs

2006-02-14 Thread Rob MacGregor
On 2/13/06, Emmanuel Lesouef <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I'm currently using postfix with amavis.
>
> It is working nicely but I get the following type of error in my mail.log :
>
> Feb 13 19:02:06 guillaume amavis[10036]: (10036-06) Clam Antivirus-clamd
> FAILED - unknown status:
> /var/lib/amavis/amavis-20060213T195357-10036/parts: Access denied. ERROR\n
> Feb 13 19:02:06 guillaume amavis[10036]: (10036-06) WARN: all primary
> virus scanners failed, considering backups

Have you enabled the use of groups for clamd - it's a config option.

--
         Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis fail at startup

2006-02-14 Thread Rob MacGregor
On 2/8/06, Bob Nelson <[EMAIL PROTECTED]> wrote:
> I did a yum update on my system to update all packages on my fedora c3 server
> and now amavis fails when I try to start it. I get a message that says
> Unpackers code: Convert::UUlib version 1.05 required--this is only version
> 1.04 at (eval 47) line 17. Version 1.05 is installed on the server so I am not
> sure why I get this error. If someone can point me in the right direction to
> solve it I would be very grateful.

Sounds like you've got 1.04 installed earlier in perl's search path.

--
 Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Re: Include original spam text in DSN?

2006-01-30 Thread Rob MacGregor
On 1/30/06, Rich Wales <[EMAIL PROTECTED]> wrote:
>
> I would still hope that someone could address my original question (how
> to add the full original spam message to the DSN sent to the local admin
> -- preferably as an attachment).

Not a great help, but I know this can be done (because that's whatI
do) using MIMEDefang instead of AMaViS.

--
 Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] BAYES_99 false positive

2005-09-27 Thread Rob MacGregor
On 27/09/05, Dave Augustus <[EMAIL PROTECTED]> wrote:
> Hello9 all,
>
> I am running amavisd-new-2.3.2 with SA 3.04, protecting an MSEXCHANGE
> server.
>
> I am now getting some false positives whenever email from a certain
> address is sent to an EXCHANGE account, it is blocked with the
> following:
> BAYES_99=3.5,
> HTML_MESSAGE=0.001,
> MISSING_SUBJECT=1.226,
> MSGID_FROM_MTA_ID=1.723
>
> After some reading, I have found some recommending that I submit the
> actual bounced email to sa-learn, classifying it as ham. Well, I can't
> do that because I don't have a copy.
>
> What choices do I have?

IMO blocking messages that get a spam hit of as low as that (6.45) is
asking for trouble - but it's your system.  Why not quarantine instead
of blocking, then you'll have a copy for running sa-learn on?

--
 Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche


---
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] FreeBSD 5.3 Amavisd-new port crashing on me

2005-09-17 Thread Rob MacGregor
On 17/09/05, Clifton Royston <[EMAIL PROTECTED]> wrote:
> 
>   BTW, ignore the comment that FBSD 5.3 is a beta release; it isn't, it's
> a fully supported Extended Life release.

My bad, somehow I'd thought that 5.4 was the first STABLE release.


On 17/09/05, Elijah Savage <[EMAIL PROTECTED]> wrote:
> I read the UPDATING file and I ran the perl-after-update which I thought
> would take care of this problem but it seemed to do nothing for me. I
> did not run a portupgrade on the port I cvs'd the new ports tree then I
> just did a make deinstall & make reinstall.

Output of "perl -v"?

-- 
 Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he 
doesn't become a monster.  Friedrich Nietzsche


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] FreeBSD 5.3 Amavisd-new port crashing on me

2005-09-17 Thread Rob MacGregor
On 17/09/05, Elijah Savage <[EMAIL PROTECTED]> wrote:
> 
> Any help to get his back up and functional would be greatly appreciated.
> I have never had a problem upgrading ports before so strange.

If you can, I'd recommend upgrading to FreeBSD 5.4 (5.3 still being a
beta release).

DB_File is also appears to be part of the perl 5.8.7 install I have. 
It could be that you already have it installed and the manual install
you've made is causing some of your problems.

-- 
 Please keep list traffic on the list.
Rob MacGregor
  Whoever fights monsters should see to it that in the process he 
doesn't become a monster.  Friedrich Nietzsche


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/