Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Fri, 18 Dec 2009 08:36:40 +0100 > Von: "list.ama...@antworte.me" > An: Steve > CC: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] dspam integration in amavis > > Agr! Okay. Add/change this in your dspam.conf to get rid of the > > above messages: > > AllowOverride enableBNR > > AllowOverride enableWhitelist > > AllowOverride fallbackDomain > > AllowOverride ignoreGroups > > AllowOverride ignoreRBLLookups > > AllowOverride localStore > > AllowOverride makeCorpus > > AllowOverride optIn > > AllowOverride optOut > > AllowOverride optOutClamAV > > AllowOverride processorBias > > AllowOverride RBLInoculate > > AllowOverride showFactors > > AllowOverride signatureLocation > > AllowOverride spamAction > > AllowOverride spamSubject > > AllowOverride statisticalSedation > > AllowOverride storeFragments > > AllowOverride tagNonspam > > AllowOverride tagSpam > > AllowOverride trainPristine > > AllowOverride trainingMode > > AllowOverride whitelistThreshold > > AllowOverride dailyQuarantineSummary > > > > > > yep. Working now: > :) >7 X-DSPAM-Result: Innocent >8 X-DSPAM-Confidence: 1. >9 X-DSPAM-Probability: 0.0023 > 10 X-DSPAM-Signature: 1,4b2b2c73106864691273912 > > >> And the message source shows following, but no DSPAM-ID. > >> > >> X-DSPAM-Result: amavis; result="Innocent"; class="Innocent"; > >> probability=0.0023; confidence=1.00; signature=N/A > >> X-Quarantine-ID: <893QyNAFz92E> > >> X-Virus-Scanned: amavisd-new at www.tiri.eu > >> X-Spam-Flag: YES > >> X-Spam-Score: 1010.536 > >> X-Spam-Level: > >> > >> X-Spam-Status: Yes, score=1010.536 required=6.31 tests=[AWL=-0.118, > >> DATE_IN_PAST_96_XX=2.32, DIGEST_MULTIPLE=0.001, GTUBE=1000, > >> NO_RELAYS=-0.001, PYZOR_CHECK=2.834, > RAZOR2_CF_RANGE_51_100=0.5, > >> RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5] > > > Keep in mind that if you switch to --process you SHOULD NOT enable > > DSPAM quarantine else DSPAM will catch spam messages AND NOT deliver > > them to you but put them in the quarantine. The preferences I have > > send you before have turned off the quarantine. Never set > > "spamAction" to "quarantine"! Always set it either to "tag" or to > > "deliver". > > If I'd enable quarantine, would the messages be releaseable with > the dspam webfrontend? > Yes. > And the other question: Does the dspam learn even if I have no > signature > DSPAM does not need the DSPAM signature to learn. You can pass the whole message again back to DSPAM and instruct it to learn. If you use the signature then you can just pass the info what signature to reclassify and DSPAM will read the data from the signature table and relearn/reclassify the tokens. If you don't have a signature then you MUST pass the whole message to DSPAM again and tell it to relearn/reclassify the message. Using signatures has the advantage that even users with low bandwidth can quickly reclassify/relearn messages without the need to send again the whole (and maybe big) message back to DSPAM. With the signature your statistics will show FP (False Positive)/FN (False Negative). Without the signature DSPAM will not know anything about FP/FN and handle each reclassification/relearn as a corpusfed (either SC (Spam Corpusfed) or NC (Nonspam Corpusfed)). > by passing mails to my postfix/dspam transport s...@mydomain? > That depends how you implement that in Postfix. There are many roads to Rome and I don't know what you have behind that s...@mydomain. Could you post what you have enabled/setup behind that email address? > Then I could use the former amavis settings. > You could. It's up to you. > Then I'd follow the article on > http://www.kirya.net/articles/setting-up-dspam-as-a-filter-for-postfix-on-debian-etch/ > You can (should) not blindly follow that how-to. The how-to there is written in such a way that Amavisd-New is used but not DSPAM inside Amavisd-New. DSPAM is used in that example externally (from the viewpoint of Amavisd-New). Allow me to ask a bunch of questions: 1) How many users are you planing to manage on that system? 2) How do you manage mail users on that system? (are you using something like Postfix.Admin to manage users? If so, what are you using?) 3) Do you want to allow each user to have his own Anti-Spam tokens or do you
Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Thu, 17 Dec 2009 23:36:32 +0100 > Von: "list.ama...@antworte.me" > An: Steve > CC: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] dspam integration in amavis Hallo Thomas, > Thank you steve, it is working this way! > :) > Amavis Log shows following: > > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'dailyQuarantineSummary' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'fallbackDomain' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'ignoreGroups' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'ignoreRBLLookups' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'makeCorpus' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'optOutClamAV' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'processorBias' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'storeFragments' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'tagNonspam' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'tagSpam' > Dec 17 23:30:26 mail0 dspam[15971]: Ignoring disallowed preference > 'trainPristine' > Agr! Okay. Add/change this in your dspam.conf to get rid of the above messages: AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride fallbackDomain AllowOverride ignoreGroups AllowOverride ignoreRBLLookups AllowOverride localStore AllowOverride makeCorpus AllowOverride optIn AllowOverride optOut AllowOverride optOutClamAV AllowOverride processorBias AllowOverride RBLInoculate AllowOverride showFactors AllowOverride signatureLocation AllowOverride spamAction AllowOverride spamSubject AllowOverride statisticalSedation AllowOverride storeFragments AllowOverride tagNonspam AllowOverride tagSpam AllowOverride trainPristine AllowOverride trainingMode AllowOverride whitelistThreshold AllowOverride dailyQuarantineSummary > And the message source shows following, but no DSPAM-ID. > > X-DSPAM-Result: amavis; result="Innocent"; class="Innocent"; > probability=0.0023; confidence=1.00; signature=N/A > X-Quarantine-ID: <893QyNAFz92E> > X-Virus-Scanned: amavisd-new at www.tiri.eu > X-Spam-Flag: YES > X-Spam-Score: 1010.536 > X-Spam-Level: > > X-Spam-Status: Yes, score=1010.536 required=6.31 tests=[AWL=-0.118, > DATE_IN_PAST_96_XX=2.32, DIGEST_MULTIPLE=0.001, GTUBE=1000, > NO_RELAYS=-0.001, PYZOR_CHECK=2.834, RAZOR2_CF_RANGE_51_100=0.5, > RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5] > > My Setup is a rather small one, but if you could give me the > hint how to get the DSPAM-ID as well integrated it will be good. > Okay. I did not know you need/want that DSPAM signature. To get the DSPAM signature you need again to change amavisd.new and look at @spam_scanners and replace the switch "--classify" with "--process". So it should look +/- like this here: @spam_scanners = ( ['DSPAM', 'Amavis::SpamControl::ExtProg', $dspam, [ qw(--stdout --process --deliver=innocent,spam --user), $daemon_user ], score_factor => 1, ], ); Keep in mind that if you switch to --process you SHOULD NOT enable DSPAM quarantine else DSPAM will catch spam messages AND NOT deliver them to you but put them in the quarantine. The preferences I have send you before have turned off the quarantine. Never set "spamAction" to "quarantine"! Always set it either to "tag" or to "deliver". > Thomas. > Steve > > Zitat von Steve : > > > > > Original-Nachricht > >> Datum: Thu, 17 Dec 2009 16:08:53 +0100 > >> Von: "list.ama...@antworte.me" > >> An: Alexander Wirt > >> CC: Steve , amavis-user@lists.sourceforge.net > >> Betreff: Re: [AMaViS-user] dspam integration in amavis > > > >> OK. I now installed the current dspam packages from > >>http://packages.kirya.net/packages.php?dist=lenny > >> > >> and when I run dspam --version I get: > >> > >> dspam --version (see below). > >> > >> What next? Currently my dspam mysql-tables exist but they are > >> empty, and when running in debug mode i got the former error. > >> > > 1) What tables do you have in MySQL for DSPAM? > > 2) Could you post your dspam.conf file? > > > > > > Let's first
Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Thu, 17 Dec 2009 16:08:53 +0100 > Von: "list.ama...@antworte.me" > An: Alexander Wirt > CC: Steve , amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] dspam integration in amavis > OK. I now installed the current dspam packages from >http://packages.kirya.net/packages.php?dist=lenny > > and when I run dspam --version I get: > > dspam --version (see below). > > What next? Currently my dspam mysql-tables exist but they are > empty, and when running in debug mode i got the former error. > 1) What tables do you have in MySQL for DSPAM? 2) Could you post your dspam.conf file? Let's first create the default preferences that are valid for ALL users: dspam_admin change preference default "dailyQuarantineSummary" "off" dspam_admin change preference default "enableBNR" "on" dspam_admin change preference default "enableWhitelist" "on" dspam_admin change preference default "fallbackDomain" "off" dspam_admin change preference default "ignoreGroups" "off" dspam_admin change preference default "ignoreRBLLookups" "off" dspam_admin change preference default "makeCorpus" "on" dspam_admin change preference default "optIn" "off" dspam_admin change preference default "optOut" "on" dspam_admin change preference default "optOutClamAV" "on" dspam_admin change preference default "processorBias" "on" dspam_admin change preference default "showFactors" "off" dspam_admin change preference default "signatureLocation" "headers" dspam_admin change preference default "spamAction" "tag" dspam_admin change preference default "spamSubject" "[SPAM]" dspam_admin change preference default "statisticalSedation" "6" dspam_admin change preference default "storeFragments" "off" dspam_admin change preference default "tagNonspam" "off" dspam_admin change preference default "tagSpam" "off" dspam_admin change preference default "trainingMode" "TOE" dspam_admin change preference default "trainPristine" "off" dspam_admin change preference default "whitelistThreshold" "10" Now go on and create a new user in DSPAM for the Amavisd-New daemon. For that you should add a new user in the dspam_virtual_uids DSPAM table. INSERT INTO `dspam_virtual_uids` (`uid`, `username`) VALUES (1, 'amavis'); After that you should optIn that user (since in the default setup we have advised DSPAM to run in optIn mode (every one needs to OPTIN in order to have DSPAM filtering)): dspam_admin change preference default "optIn" "on" dspam_admin change preference default "optOut" "off" Now allow amavisd-new to use DSPAM. Add/change in dspam.conf: Trust amavis While you are already in dspam.conf please change/add the following: TrainingMode toe Feature noise Feature whitelist Feature tb=5 Algorithm graham burton Tokenizer osb PValue bcr ImprobabilityDrive on Opt in Broken case Broken lineStripping MaxMessageSize 4194304 ProcessorURLContext on ProcessorBias on StripRcptDomain off I could list you a gazillion of other switches that you could change but for the beginning this should be enough. If you are interested in more options or another configuration of DSPAM then let me know. Then go on and edit amavisd.conf and change/add inside @spam_scanners the following:@spam_scanners = ( ['DSPAM', 'Amavis::SpamControl::ExtProg', $dspam, [ qw(--stdout --classify --deliver=innocent,spam --user), $daemon_user ], score_factor => 1, ], ); That should be enough. Now restart amavisd-new and try sending a mail. The above setup is not very optimal since it will start every time a full blown up DSPAM instance. If you are processing a lot of mails then using DSPAM in daemon mode would be way better. But I don't know your use scenario so I just took the most simple option. I as well have not enabled quarantine and other such stuff for DSPAM. I use DSPAM since ages but never have I integrated it inside Amavisd-New. I use it outside from Amavis. The reason for that is that I try to keep Amavisd-New as lean as possible. In the past my experience with Perl applications have been that they tend to use a lot of memory and just using DSPAM on it's own is for me faster and less resource intensive then wrapping it up in something like Amavisd-New. On my setup I use Amavisd-New as the first content filter and then after that I use DSPAM (in client/server mode with LMTP) as another content filter and then I deliv
Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Thu, 17 Dec 2009 12:10:09 +0100 > Von: "list.ama...@antworte.me" > An: Steve > CC: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] dspam integration in amavis Hallo Thomas, > Thanks for your reply, Steve, > > do you have debian lenny packages which I could use? > I'll give it a try! > Julien Valroff has made some packages for Debian -> http://packages.kirya.net/ He has not made packages for RC2 but that is probably a question of hours till he has them up and running. > Thomas. > Steve > Zitat von Steve : > > > > > Original-Nachricht > >> Datum: Thu, 17 Dec 2009 09:09:00 +0100 > >> Von: "list.ama...@antworte.me" > >> An: amavis-user@lists.sourceforge.net > >> Betreff: [AMaViS-user] dspam integration in amavis > > > >> > >> Hi, > >> > > Hallo Thomas, > > > > > >> I use debian lenny with postfix, amavis, spamassassin and try to > integrate > >> dspam. > >> But in my messages are no dspam headers :-( > >> > >> dspam is defined > >> > >> ... > >> Dec 17 08:47:19 mail0 amavis[32508]: Found $fileat > >> /usr/bin/file > >> Dec 17 08:47:19 mail0 amavis[32508]: Found $dspam at > >> /usr/bin/dspam > >> Dec 17 08:47:19 mail0 amavis[32508]: Found $altermime at > >> /usr/bin/altermime > >> ... > >> > >> and can be run as user amavis from commandline (sudo -u amavis dpam > --help > >> works). > >> > >> When I change the 01-debian config to > >> > >> $dspam='dspam --debug'; > >> > >> then following error raises when processing an email: (Datei nicht > >> gefunden means File or Directory not found). > >> > >> Dec 17 08:27:23 mail0 amavis[31418]: (31398-01) (!)run_command: child > >> process [31418]: run_command: failed to exec /usr/bin/dspam --debug > >> --stdout --deliver=spam,innocent --mode=tum --tokenizer=chained,noise > >> --enable-signature-headers --user amavis: Datei oder Verzeichnis nicht > >> gefunden at /usr/sbin/amavisd-new line 2919, line 40. > >> > > That "Datei oder Verzeichnis nicht gefunden" is probably because > > DSPAM can not find the file it should check. How is the mail passed > > to DSPAM? Over a pipe? Or somehow differently? > > > > btw: I am the lead developer behind DSPAM and while I know that > > Debian is using ancient versions (3.6.8 patched with some Debian > > stuff) I can tell you right now that there is no run time option > > "--tokenizer" nor is there any "--enable-signature-headers". Is that > > something that the Debian guys have added to DSPAM? > > > > btw2: Since this morning we have RC2 of DSPAM 3.9.0 out. You should > > try it. It's much more stable then any older DSPAM version. > > > > If I read my Amavisd-New then I see this comment here mentioning DSPAM: > > # ['DSPAM', 'Amavis::SpamControl::ExtProg', $dspam, > > # [ qw(--stdout --classify --deliver=innocent,spam > > #--mode=tum --tokenizer=chained,noise > > #--user), $daemon_user ], > > # # use option --feature instead of --tokenizer with dspam < 3.8.0 > > # mail_body_size_limit => 65000, score_factor => 0.1, > > # ], > > > > This is just wrong. There was never a option called "--tokenizer". > > Not in 3.6.8, nor in 3.8.0 nor in 3.9.0. > > > > > > > >> Dec 17 08:27:23 mail0 amavis[31398]: (31398-01) (!)WARN: DSPAM problem, > >> exit 8, result= > >> Dec 17 08:27:26 mail0 postfix/smtpd[31420]: connect from > >> localhost[127.0.0.1] > >> Dec 17 08:27:26 mail0 postfix/smtpd[31420]: DE6BE21E0E: > >> client=localhost[127.0.0.1] > >> Dec 17 08:27:26 mail0 postfix/cleanup[31411]: DE6BE21E0E: > >> message-id= > >> Dec 17 08:27:27 mail0 postfix/qmgr[1101]: DE6BE21E0E: > >> from=, size=1748, nrcpt=1 (queue active) > >> Dec 17 08:27:27 mail0 amavis[31398]: (31398-01) Passed SPAM, > > >> -> , quarantine: q/spam-qKtn+z2l5UhU.gz, Message-ID: > >> , mail_id: qKtn+z2l5UhU, Hits: 1010.3, > size: > >> 934, queued_as: DE6BE21E0E, 5675 ms > >> > >> Can you give me a hint how to debug or how to solve this problem? > >> > >> Thanks for your reply in advance. > >> > >> Thomas. > >> >
Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Thu, 17 Dec 2009 11:50:40 +0100 > Von: Alexander Wirt > An: Steve > CC: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] dspam integration in amavis > Steve schrieb am Donnerstag, den 17. Dezember 2009: > > Hi, > Hallo Alexander, > *snip* > > > > When I change the 01-debian config to > > > > > > $dspam='dspam --debug'; > > > > > > then following error raises when processing an email: (Datei nicht > > > gefunden means File or Directory not found). > > > > > > Dec 17 08:27:23 mail0 amavis[31418]: (31398-01) (!)run_command: child > > > process [31418]: run_command: failed to exec /usr/bin/dspam --debug > > > --stdout --deliver=spam,innocent --mode=tum --tokenizer=chained,noise > > > --enable-signature-headers --user amavis: Datei oder Verzeichnis nicht > > > gefunden at /usr/sbin/amavisd-new line 2919, line 40. > > > > > That "Datei oder Verzeichnis nicht gefunden" is probably because DSPAM > can not find the file it should check. How is the mail passed to DSPAM? Over > a pipe? Or somehow differently? > > > > btw: I am the lead developer behind DSPAM and while I know that Debian > is using ancient versions (3.6.8 patched with some Debian stuff) I can tell > you right now that there is no run time option "--tokenizer" nor is there > any "--enable-signature-headers". Is that something that the Debian guys > have added to DSPAM? > And I'm the amavis debian maintainer :). > Okay. At least it's not in Amavis-New. That "--enable-signature-headers" is something you where able to turn on/off at compile time but it's nothing that you can switch on at runtime. > I don't added such a thing to amavisd-new, but having a look into the > official amavisd-new release notes they read like that: > > ['DSPAM', 'Amavis::SpamControl::ExtProg', $dspam, > [ qw(--stdout --classify --deliver=innocent,spam >--mode=tum --tokenizer=chained,noise >--user), $daemon_user ], > # use option --feature instead of --tokenizer with dspam < 3.8.0 > mail_body_size_limit => 64000, score_factor => 1, > ], > ); > > I guess thats wrong then. > Yes. That is wrong. --tokenizer never existed. --feature does exist but not --tokenizer. > Alex > Grüsse aus der Schweiz Steve > -- > Alexander Wirt, formo...@formorer.de > CC99 2DDD D39E 75B0 B0AA B25C D35B BC99 BC7D 020A -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser -- This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] dspam integration in amavis
Original-Nachricht > Datum: Thu, 17 Dec 2009 09:09:00 +0100 > Von: "list.ama...@antworte.me" > An: amavis-user@lists.sourceforge.net > Betreff: [AMaViS-user] dspam integration in amavis > > Hi, > Hallo Thomas, > I use debian lenny with postfix, amavis, spamassassin and try to integrate > dspam. > But in my messages are no dspam headers :-( > > dspam is defined > > ... > Dec 17 08:47:19 mail0 amavis[32508]: Found $fileat > /usr/bin/file > Dec 17 08:47:19 mail0 amavis[32508]: Found $dspam at > /usr/bin/dspam > Dec 17 08:47:19 mail0 amavis[32508]: Found $altermime at > /usr/bin/altermime > ... > > and can be run as user amavis from commandline (sudo -u amavis dpam --help > works). > > When I change the 01-debian config to > > $dspam='dspam --debug'; > > then following error raises when processing an email: (Datei nicht > gefunden means File or Directory not found). > > Dec 17 08:27:23 mail0 amavis[31418]: (31398-01) (!)run_command: child > process [31418]: run_command: failed to exec /usr/bin/dspam --debug > --stdout --deliver=spam,innocent --mode=tum --tokenizer=chained,noise > --enable-signature-headers --user amavis: Datei oder Verzeichnis nicht > gefunden at /usr/sbin/amavisd-new line 2919, line 40. > That "Datei oder Verzeichnis nicht gefunden" is probably because DSPAM can not find the file it should check. How is the mail passed to DSPAM? Over a pipe? Or somehow differently? btw: I am the lead developer behind DSPAM and while I know that Debian is using ancient versions (3.6.8 patched with some Debian stuff) I can tell you right now that there is no run time option "--tokenizer" nor is there any "--enable-signature-headers". Is that something that the Debian guys have added to DSPAM? btw2: Since this morning we have RC2 of DSPAM 3.9.0 out. You should try it. It's much more stable then any older DSPAM version. If I read my Amavisd-New then I see this comment here mentioning DSPAM: # ['DSPAM', 'Amavis::SpamControl::ExtProg', $dspam, # [ qw(--stdout --classify --deliver=innocent,spam #--mode=tum --tokenizer=chained,noise #--user), $daemon_user ], # # use option --feature instead of --tokenizer with dspam < 3.8.0 # mail_body_size_limit => 65000, score_factor => 0.1, # ], This is just wrong. There was never a option called "--tokenizer". Not in 3.6.8, nor in 3.8.0 nor in 3.9.0. > Dec 17 08:27:23 mail0 amavis[31398]: (31398-01) (!)WARN: DSPAM problem, > exit 8, result= > Dec 17 08:27:26 mail0 postfix/smtpd[31420]: connect from > localhost[127.0.0.1] > Dec 17 08:27:26 mail0 postfix/smtpd[31420]: DE6BE21E0E: > client=localhost[127.0.0.1] > Dec 17 08:27:26 mail0 postfix/cleanup[31411]: DE6BE21E0E: > message-id= > Dec 17 08:27:27 mail0 postfix/qmgr[1101]: DE6BE21E0E: > from=, size=1748, nrcpt=1 (queue active) > Dec 17 08:27:27 mail0 amavis[31398]: (31398-01) Passed SPAM, > -> , quarantine: q/spam-qKtn+z2l5UhU.gz, Message-ID: > , mail_id: qKtn+z2l5UhU, Hits: 1010.3, size: > 934, queued_as: DE6BE21E0E, 5675 ms > > Can you give me a hint how to debug or how to solve this problem? > > Thanks for your reply in advance. > > Thomas. > Steve > -- > This SF.Net email is sponsored by the Verizon Developer Community > Take advantage of Verizon's best-in-class app development support > A streamlined, 14 day to market process makes app distribution fast and > easy > Join now and get one step closer to millions of Verizon customers > http://p.sf.net/sfu/verizon-dev2dev > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser -- This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis-new and dual master replication with MySQL
Hallo Thomas, > Yes, using MySQL 5.1 - it helped me to decrease time needed for garbage > collection from 4 days to 4 seconds. > Can you point me to some good documentation how to implement that? I am running 5.1.36 over here. > Regards, > Thomas Gelf > // Steve -- Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02 -- Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/blackberry ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis-new and dual master replication with MySQL
Hallo Michael,
> You did added the modulus 100 to make sure that mysql replication didn't
> end
> up with an email address on server 1 with a id of 101 and the same email
> address on server 2 with a id of 201? (or whatever)
>
Yes but I removed the modulus 100 because I got duplicate entry errors. But I
still have issues with Amavisd-New and MySQL. I get those kind of errors:
Error 'Duplicate entry 'newsm...@werbewoche.ch' for key 'email'' on query.
Default database: 'sysdb_amavis'. Query: 'INSERT INTO maddr (partition_tag,
email, domain) VALUES ('28','newsm...@werbewoche.ch','ch.werbewoche')'
> If you created these with REAL partitions, then you could alter table drop
> partition (which is even faster)
>
What do you mean with REAL partitions? Partitions in MySQL?
> --
> Michael Scheidell, CTO
>
Steve
--
Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate
für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
--
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis-new and dual master replication with MySQL
Hallo Michael,
> We have systems with multi master (dual master and more). We had to
> remove
> the foreign key constraints long ago. (for that and other reasons).
>
So you advise me to just drop them?
ALTER TABLE `quarantine` DROP FOREIGN KEY `quarantine_ibfk_1`;
ALTER TABLE `msgs` DROP FOREIGN KEY `msgs_ibfk_1`;
ALTER TABLE `msgrcpt` DROP FOREIGN KEY `msgrcpt_ibfk_1`;
ALTER TABLE `msgrcpt` DROP FOREIGN KEY `msgrcpt_ibfk_2`;
> Mostly
> the daily quarantine cleanup performance. (its faster, believe it or not,
> on mysql to not use foreign key when so much data is in flux.
> We also use the tabbed dump and load rather then mysqldump, and foreign
> keys
> would not always exist in the order that the dump is re-imported.
>
>
> Its faster to run some of the cleanup routines at the end of
> README.sql-mysql.
>
> DELETE FROM quarantine
> WHERE NOT EXISTS (SELECT 1 FROM msgs WHERE mail_id=quarantine.mail_id);
> DELETE FROM msgrcpt
> WHERE NOT EXISTS (SELECT 1 FROM msgs WHERE mail_id=msgrcpt.mail_id);
>
> If you are using partitions, you can drop the partition instead.
>
I am using the current week as the number for the partition tag. Since I have
just two systems where Amavisd-New is running I added on system 1 additionally
100 to the week number and on system 2 I have added 200 to the week number. Aka:
System 1:
$sql_partition_tag = sub { my($msginfo)=...@_; (100 +
iso8601_week($msginfo->rx_time)) };
System 2:
$sql_partition_tag = sub { my($msginfo)=...@_; (200 +
iso8601_week($msginfo->rx_time)) };
Deleting everything older then the current week is then easy done by executing:
DELETE FROM msgs WHERE MOD(partition_tag,100) < WEEK(NOW(),3);
DELETE FROM msgrcpt WHERE MOD(partition_tag,100) < WEEK(NOW(),3);
DELETE FROM quarantine WHERE MOD(partition_tag,100) < WEEK(NOW(),3);
DELETE FROM maddr WHERE MOD(partition_tag,100) < WEEK(NOW(),3);
> --
> Michael Scheidell, CTO
>
Steve
--
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
--
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Amavis-new and dual master replication with MySQL
Hello list I am running here Amavisd-new 2.6.4 with MySQL in dual master replication and I often get into problems that Amavisd-new data in MySQL can't be replicated because of foreign key constraint. Is there any documentation how to setup Amavisd-new in a MySQL environment with dual master replication? I can't find any documentation targeting that topic. Thanks Steve -- Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02 -- ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] setup amavisd-new 2.6.3 - MySql
> thank for you answer , but I have a other messages > > xserver postfix/cleanup[10944]: A9F181AE065: > message-id=<4a36c3f1.8010...@wcgx.net.ni> > Jun 15 15:57:57 xserver postfix/qmgr[10928]: A9F181AE065: > from=, size=888, nrcpt=1 (queue active) > Jun 15 15:57:57 xserver postfix/smtpd[10932]: disconnect from > unknown[192.168.10.2] > Jun 15 15:58:05 xserver amavis[10910]: (10910-01) (!!)TROUBLE in > check_mail: quar+notif FAILED: SQL quarantine code not enabled at > /usr/sbin/amavisd line 6540, line 68. > Jun 15 15:58:05 xserver amavis[10910]: (10910-01) (!)PRESERVING > EVIDENCE in /var/spool/amavis/tmp/amavis-20090615T155757-10910 > Jun 15 15:58:06 xserver postfix/lmtp[10946]: A9F181AE065: > to=, relay=127.0.0.1[127.0.0.1]:10024, > delay=8.3, delays=0.09/0.01/0.01/8.2, dsn=4.5.0, status=deferred (host > 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=10910-01, > quar+notif FAILED: SQL quarantine code not enabled at > /usr/sbin/amavisd line 6540, line 68. (in reply to end of DATA > command)) > Add below the line with "@lookup_sql_dsn" the following line: @storage_sql_dsn = @lookup_sql_dsn; > -- > rickygm > Steve -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] bdscan does not work in amavisd-new-2.6.3
Hallo list
>From my viewpoint the entry for bdscan/BitDefender Antivirus Scanner for
>Unices does not work.
That's the one I got in 2.6.3:
### http://www.bitdefender.com/
['BitDefender', 'bdscan', # new version
'--action=ignore --no-list {}', qr/^Infected files *:0+(?!\d)/m,
qr/^(?:Infected files|Identified viruses|Suspect files) *:0*[1-9]/m,
qr/(?:suspected|infected): (.*)(?:\033|$)/m ],
But amavisd-new is complaining:
Jun 3 17:34:03 nyx amavis[22187]: (22187-02) (!!)run_av (BitDefender) FAILED -
unexpected exit 0, output="BitDefender Antivirus Scanner for Unices v7.90123
Linux-i586\nCopyright (C) 1996-2009 BitDefender. All rights reserved.\nThis
program is licensed for home or personal use only.\nUsage in an office or
production environment represents\na violation of the license terms\n\nInfected
file action: ignore\nSuspected file action: ignore\n\n\nResults:\nFolders:
0\nFiles: 1\nPacked: 0\nArchives: 0\nInfected files: 0\nSuspect files:
0\nWarnings: 0\nI/O errors: 0\n"
Jun 3 17:34:03 nyx amavis[22187]: (22187-02) (!!)BitDefender av-scanner
FAILED: /usr/bin/bdscan unexpected exit 0, output="BitDefender Antivirus
Scanner for Unices v7.90123 Linux-i586\nCopyright (C) 1996-2009 BitDefender.
All rights reserved.\nThis program is licensed for home or personal use
only.\nUsage in an office or production environment represents\na violation of
the license terms\n\nInfected file action: ignore\nSuspected file action:
ignore\n\n\nResults:\nFolders: 0\nFiles: 1\nPacked: 0\nArchives: 0\nInfected
files: 0\nSuspect files: 0\nWarnings: 0\nI/O errors: 0\n" at (eval 70) line 547.
To fix the issue I changed the expression to be:
### http://www.bitdefender.com/
['BitDefender', 'bdscan', # new version
'--action=ignore --no-list {}', qr/^Infected files[\t ]*:[\t ]*0+(?!\d)/m,
qr/^(?:Infected files|Identified viruses|Suspect files)[\t ]*:[\t
]*0*[1-9]/m,
qr/(?:suspected|infected)[\t ]*:[\t ]*(.*)(?:\033|$)/m ],
// Steve
--
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
--
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Problem running 2.6.3
> Steve,
>
Hallo Mark
> > I can not start 2.6.3. The error I get is:
> > Can't locate object method "new" via package "Amavis::SpamControl" at
> > /usr/sbin/amavisd line 13878.
> >
> > I want Amavis to just do anti-virus checking and no spam checking. For
> that
> > I have set the following option in amavisd.conf:
> @bypass_spam_checks_maps
> > = (1);
> >
> > But somehow Amavis does not honor that. What do I need to do, in order
> to
> > get Amavis running without spam checking?
>
>
> > @bypass_spam_checks_maps = (1);
>
> The syntax is correct. You've found a bug, thanks!
>
:)
> As a workaround, please use:
>
> @spam_scanners = (undef);
>
Ahh! I saw yesterday that option mentioned in the change log for 2.6.3 and used
it but the 'undef' and leaving @bypass_spam_check_maps untouched is the
solution. Thanks!
> and leave @bypass_spam_checks_maps at its default.
> It would still load the small anti-spam baseline code,
> but not SpamAssassin or its interface code.
>
Right. Now it is working :) Finally! Thanks.
> Here is a patch:
>
> --- amavisd.orig 2009-04-22 02:24:12.0 +0200
> +++ amavisd 2009-05-22 14:50:37.0 +0200
> @@ -13650,5 +13650,7 @@
> my($bpscm) = ca('bypass_spam_checks_maps');
> if (!...@{ca('spam_scanners')}) {
> + undef $extra_code_antispam;
> } elsif (@$bpscm && !ref($bpscm->[0]) && $bpscm->[0]) { # simple-minded
> + undef $extra_code_antispam;
> } else {
>eval $extra_code_antispam or die "Problem in antispam code: $@";
>
>
> Mark
>
Steve
--
Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss
für nur 17,95 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
--
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Problem running 2.6.3
Hallo Herbert That did not help. Any other hint? // Steve Original-Nachricht > Datum: Fri, 22 May 2009 13:43:53 +0200 > Von: "Herbert J. Skuhra" > An: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Problem running 2.6.3 > 2009/5/22 Herbert J. Skuhra : > > 2009/5/22 Steve : > >> I can not start 2.6.3. The error I get is: > >> Can't locate object method "new" via package "Amavis::SpamControl" at > /usr/sbin/amavisd line 13878. > >> > >> I want Amavis to just do anti-virus checking and no spam checking. For > that I have set the following option in amavisd.conf: > >> @bypass_spam_checks_maps = (1); > > > > @bypass_spam_checks_maps = [1]; > > Sorry, this fixes only the start error. Try: > > @bypass_spam_checks_acl = qw( . ); > > - Herbert > > -- > Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT > is a gathering of tech-side developers & brand creativity professionals. > Meet > the minds behind Google Creative Lab, Visual Complexity, Processing, & > iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian > Group, R/GA, & Big Spaceship. http://www.creativitycat.com > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss für nur 17,95 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02 -- Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Problem running 2.6.3
Hallo Herbert Thanks for the hint. But now I get: Problem in antispam SA code: Can't locate Mail/SpamAssassin.pm in @INC (@INC contains: /etc/perl /usr/lib/perl5/vendor_perl/5.8.8/i686-linux /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl /usr/lib/perl5/site_perl/5.8.8/i686-linux /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl /usr/lib/perl5/5.8.8/i686-linux /usr/lib/perl5/5.8.8 /usr/local/lib/site_perl) at (eval 72) line 64. BEGIN failed--compilation aborted at (eval 72) line 64. I don't want SpamAssassin functionality. How to get that error now away? cheers // Steve Original-Nachricht > Datum: Fri, 22 May 2009 13:15:29 +0200 > Von: "Herbert J. Skuhra" > An: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Problem running 2.6.3 > 2009/5/22 Steve : > > I can not start 2.6.3. The error I get is: > > Can't locate object method "new" via package "Amavis::SpamControl" at > /usr/sbin/amavisd line 13878. > > > > I want Amavis to just do anti-virus checking and no spam checking. For > that I have set the following option in amavisd.conf: > > @bypass_spam_checks_maps = (1); > > @bypass_spam_checks_maps = [1]; > > - Herbert > > -- > Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT > is a gathering of tech-side developers & brand creativity professionals. > Meet > the minds behind Google Creative Lab, Visual Complexity, Processing, & > iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian > Group, R/GA, & Big Spaceship. http://www.creativitycat.com > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss für nur 17,95 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02 -- Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Problem running 2.6.3
I can not start 2.6.3. The error I get is: Can't locate object method "new" via package "Amavis::SpamControl" at /usr/sbin/amavisd line 13878. I want Amavis to just do anti-virus checking and no spam checking. For that I have set the following option in amavisd.conf: @bypass_spam_checks_maps = (1); But somehow Amavis does not honor that. What do I need to do, in order to get Amavis running without spam checking? // Steve -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss für nur 17,95 Euro/mtl.!* http://dslspecial.gmx.de/freedsl-aktionspreis/?ac=OM.AD.PD003K11308T4569a -- Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Can LDAP override a policy block?
Hi,
In my configuration, I have a MYNETS policy block that disables SPAM
tagging for outbound mail (that is, mail originating from my internal
network as defined in @mynetworks). However, I'd like to have mail
destined to one specific user always tagged as SPAM, regardless of the
client IP connecting to my mail server. Since we utilize LDAP for user
management, I've added the following LDAP attributes to the user in
question:
amavisBypassSpamChecks: FALSE
amavisBypassVirusChecks: FALSE
amavisBypassBannedChecks: FALSE
amavisBypassHeaderChecks: FALSE
amavisSpamLover: TRUE
I'd expect this to overwrite the associated configuration parameters in
the MYNETS policy bank, but it doesn't appear to be: in the logs, I see
"Passed CLEAN, MYNETS LOCAL". Am I missing something obvious here or does
MYNETS always overrule LDAP in this case? For completeness sake, the
relevant parts of my MYNETS policy bank:
$policy_bank{'MYNETS'} = { # mail originating from @mynetworks
bypass_spam_checks_maps => [ 1 ], # Turn off spam checking
for locally originated emails
bypass_banned_checks_maps => [ 1 ], # Turn off banned
checking for locally originated emails
spam_lovers_maps=> [ 1 ],
banned_files_lovers_maps=> [ 1 ],
bypass_header_checks_maps => [ 1 ],
warnbannedsender=> undef,
os_fingerprint_method => undef,
};
I am using amavisd-new 2.4.3 20060930.
Thanks for your assistance,
Steve
--
Steve Bernacki, Jr
To date, the Pan-Massachusetts Challenge has raised 171 million
dollars for cancer research. Get involved! http://www.pmc.org/
--
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis in pre-queue mode
Original-Nachricht > Datum: Mon, 29 Dec 2008 23:46:31 +0100 > Von: Alexander Wirt > An: Steve > CC: AMaViS-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Amavis in pre-queue mode > Steve schrieb am Montag, den 29. Dezember 2008: > > *snip > > It's ultra okay with me. I have no issue. I would deliver anything. If > the user want's it, why not? If the law is requesting/enforcing it, why not? > I don't see such a big issue. The only issue I see are the various > virus/trojans/etc. I bet that no matter how hard you try to tag or change the > mail > (subject change, header change, etc) and warn the user: HE/SHE WILL INFECT > HIS/HER SYSTEM. > > Most user are to stupid to read AND understand. > Ha, fortuntly that don't count for virusses/trojanѕ and other harmful > content. According the Law you don't have to deliver harmful content > Please, please! Send me a definition of "harmful content". PLEASE! For my data center and infrastructure the amount of spam is harmful. So. Does that count as harmful? Or does it only count as harmful if the user says it is harmful to him. If so, then how to know what a user "thinks" is harmful and how to know that he thinks it is not harmful? How to know that the just sent executable named "My_Super_Dupper_Ultra_Cool_KeyGen.exe" which is identified by Trend Micro Virus Scan as an harmful executable (because the exe has some memory patching part in it) is really not wanted by the user or is really wanted by the user? How? > (this > is > worded like "self-protection for your infrastructure"). The post also > don't > has to deliver letter bombs :). > Still! As a Swiss I really ask my self sometimes about the German obsession in regulating things. It's insane. Filling my tax papers in Switzerland is easy as 1-2-3. But in Germany? Boy! So much rules and and and... HORROR! And now the stuff with mail and the "Hacker Paragraph"? I know. For you this all is normal since you grow up with that. But for me this is insane. I accept your point of view. It's okay with me. But if I can choose for me, then I would prefer to not have the situation. > Alex > Steve > -- > Alexander Wirt, formo...@formorer.de > CC99 2DDD D39E 75B0 B0AA B25C D35B BC99 BC7D 020A -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger -- ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis in pre-queue mode
Original-Nachricht > Datum: Mon, 29 Dec 2008 19:18:58 +0100 > Von: mouss > An: Steve > CC: AMaViS-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Amavis in pre-queue mode > Steve a écrit : > > Original-Nachricht > >> Datum: Mon, 29 Dec 2008 12:15:22 -0500 > >> Von: Michael Scheidell > >> [snip] > >> Just curious: > >> > >> What is english translation of german law, something like > >> "You must use amabisd-new in pre-queue mode under penalty of law"? > >> > > Sie müssen Amavisd-New im "pre-queue" Modus benützen wegen der > deutschen Gesetzgebung. > > > > ;-p > > > > >> > > The point is that German law is saying that IF you take the mail, then > you HAVE to deliver it. You can theoretically take the mail into queue and > not deliver it but you need to get permission from the mail owner to do so. > And if it comes hard on hard, then the original recipient still has the > possibility to say that you deleted the mail and then you are lost. That kind > of risk no one wants to take. I know, I know. It is stupid but Germany is > full of regulations all over the place. Lucky me I am from Switzerland :) > > I understand this in the case of an ISP/MSP/..., but does this law apply > to corporate mail and the like? > YES! The thing that Germany did is that they put electronic mail on the same level as normal snail mail. And each mail addressed to some one is belonging to that person. No matter if the person sits at home on a private mail or if the person sits in a office behind a corporate mail. The mail addressed to him belongs to him. As a juristic entity (the company) you can request to look and read that mail but you need to request it from the official owner (the user). You could do it without asking the user but the line between legal and illegal is very thin in that matter. I don't 100% understand everything my self. I am just an observer from another German speaking country. -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger -- ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis in pre-queue mode
Original-Nachricht > Datum: Mon, 29 Dec 2008 18:51:26 +0100 > Von: Alexander Wirt > An: Steve > CC: AMaViS-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Amavis in pre-queue mode > Steve schrieb am Montag, den 29. Dezember 2008: > > Hi, > > *snip* > > > The point is that German law is saying that IF you take the mail, then > you HAVE to deliver it. You can theoretically take the mail into queue and > not deliver it but you need to get permission from the mail owner to do so. > And if it comes hard on hard, then the original recipient still has the > possibility to say that you deleted the mail and then you are lost. That kind > of risk no one wants to take. I know, I know. It is stupid but Germany is > full of regulations all over the place. Lucky me I am from Switzerland :) > Of course there are some options to get out of this problem. Having a > on-site > policy signed by every recipient is one option (in my eyes the best) or > just > not discard mails. Tag them and let the recipient decide (let them use > sieve, > sql baseѕ policies with a webfrontend, client side filtering and so on). > > This is what most administrators in Germeny do. > It's ultra okay with me. I have no issue. I would deliver anything. If the user want's it, why not? If the law is requesting/enforcing it, why not? I don't see such a big issue. The only issue I see are the various virus/trojans/etc. I bet that no matter how hard you try to tag or change the mail (subject change, header change, etc) and warn the user: HE/SHE WILL INFECT HIS/HER SYSTEM. Most user are to stupid to read AND understand. > Alex > -- > Alexander Wirt, formo...@formorer.de > CC99 2DDD D39E 75B0 B0AA B25C D35B BC99 BC7D 020A -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger -- ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Amavis in pre-queue mode
Original-Nachricht > Datum: Mon, 29 Dec 2008 12:15:22 -0500 > Von: Michael Scheidell > An: Ralf Heidenreich , AMaViS-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] Amavis in pre-queue mode > > Hello, > > > > before i was using amavis in post-queue mode. > > But due to german law, i must use amavis in pre-queue mode. > > How can i accelerate amavis, to use it in pre-queue mode? > > \ > > Just curious: > > What is english translation of german law, something like > "You must use amabisd-new in pre-queue mode under penalty of law"? > Sie müssen Amavisd-New im "pre-queue" Modus benützen wegen der deutschen Gesetzgebung. > Since amavisd-new in pre-queue mode is SLOW SLOW ... SLOW, as you > have > been warned, and since their are lots of site in Germany using amavisd-new > in post-queue mode, maybe you need to look to see what the german law > really > says and see if their might be a better supported way to do this? > > Has it something to do with backscatter? Then just disable bounces. > > Has it something to do with the RFC's REQUIRING DSN if the email fails? > > > You are NOT going to get amavisd-new to run fast in pre-queue mode, so, > get > your blue pin stripped suite ready since you and every system > administrator > in Germany is about to put into jail. > The point is that German law is saying that IF you take the mail, then you HAVE to deliver it. You can theoretically take the mail into queue and not deliver it but you need to get permission from the mail owner to do so. And if it comes hard on hard, then the original recipient still has the possibility to say that you deleted the mail and then you are lost. That kind of risk no one wants to take. I know, I know. It is stupid but Germany is full of regulations all over the place. Lucky me I am from Switzerland :) > > -- > Michael Scheidell, CTO > >|SECNAP Network Security > Winner 2008 Network Products Guide Hot Companies > FreeBSD SpamAssassin Ports maintainer > > > _ > This email has been scanned and certified safe by SpammerTrap(r). > For Information please see http://www.secnap.com/products/spammertrap/ > _ > > -- > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger -- ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode]
Original-Nachricht > Datum: Wed, 17 Dec 2008 23:12:31 +0100 > Von: Patrick Ben Koetter > An: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode] > * Steve : > > > I'm no expert on German law, but I do know that there are other > > > German system administrators who are not running amavisd in pre-queue > > > mode, so I wonder if perhaps someone has given you an overzealous > > > interpretation of the law. > > > > > I think that the original sender knows about the law. I am not a German > but > > I think that the German law says that you ARE ALLOWED to drop any > message as > > long as you don't have accepted the message. So having amavisd running > in > > For the books: Currently lawyers in Germany disagree on WHEN a message has > been accepted - when you accept the connection or at the end of DATA when > the > server says "OK". > Hey! I am Swiss and looking what is happening over in Germany in some area just makes me shake my head. But who am I? I don't get it and probably will never get some of those "strange" laws. > > pre-queue allows you to DROP the message and just send a normal SMTP > error > > code. That is allowed by law. > > This is what most of the German laywers seem to agree on, yes. > > > > But you are NOT ALLOWED to accept the mail and then later doing some > > processing where you ERASE/DROP/WHATEVER the mail. This is not allowed > by > > law. So you accept the mail -> you have to deliver the mail. > > Unless the message proves to be harmful... > Do the German layers and the German law agree on the definition of "harmful"? I would be surprised if so. > > That's probably the reason he wants to run amavisd in pre-queue because > this > > would allow him to fight spam/malware and block spam/malware and drop > > spam/malware without having to accept the mail. > > Usually one would want to drop unwanted messages as early as possible so > they > don't waste ressources by later inspections. > Yes. But if this means that running in such a way that this early dropping of unwanted messages results in more resources used compared to running in the "early mode", then I really don't see the point in this "early dropping". I don't agree with you that dropping early is equal in less resources used then dropping later. > > > amavisd can run in pre-queue mode but it is not a recommended > > > configuration for performance reasons. > > "it is not a recommended configuration" unless you know your average load > and > how your mail system can handle it. > > p...@rick > Steve > -- > All technical answers asked privately will be automatically answered on > the list and archived for public access unless privacy is explicitely > required and justified. > > saslfinger (debugging SMTP AUTH): > <http://postfix.state-of-mind.de/patrick.koetter/saslfinger/> > > -- > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, > Nevada. > The future of the web can't happen without you. Join us at MIX09 to help > pave the way to the Next Web now. Learn more and register at > http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode]
Original-Nachricht > Datum: Wed, 17 Dec 2008 06:56:14 -1000 > Von: Clifton Royston > An: Ralf Heidenreich > CC: AMaViS-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] [Fwd: Re: Amavis in pre-queue mode] > On Wed, Dec 17, 2008 at 09:39:20AM +0100, Ralf Heidenreich wrote: > > > > > > Original-Nachricht > > Betreff: Re: [AMaViS-user] Amavis in pre-queue mode > > Datum: Wed, 17 Dec 2008 09:26:09 +0100 > > Von: Ralf Heidenreich > > An: Luis Daniel Lucio Quiroz > > Referenzen: <4947b648.8040...@lx-work.de> > > <200812161258.54671.luis.daniel.lu...@gmail.com> > > > > Hello, > > > > the law says: > > if a mail is in the queue, you must deliver it. > > Never mind if it is spam or not. > > I'm no expert on German law, but I do know that there are other > German system administrators who are not running amavisd in pre-queue > mode, so I wonder if perhaps someone has given you an overzealous > interpretation of the law. > I think that the original sender knows about the law. I am not a German but I think that the German law says that you ARE ALLOWED to drop any message as long as you don't have accepted the message. So having amavisd running in pre-queue allows you to DROP the message and just send a normal SMTP error code. That is allowed by law. But you are NOT ALLOWED to accept the mail and then later doing some processing where you ERASE/DROP/WHATEVER the mail. This is not allowed by law. So you accept the mail -> you have to deliver the mail. That's probably the reason he wants to run amavisd in pre-queue because this would allow him to fight spam/malware and block spam/malware and drop spam/malware without having to accept the mail. > amavisd can run in pre-queue mode but it is not a recommended > configuration for performance reasons. > > -- Clifton > // Steve > -- > Clifton Royston -- clift...@iandicomputing.com / clift...@lava.net >President - I and I Computing * http://www.iandicomputing.com/ > Custom programming, network design, systems and network consulting > services > > -- > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, > Nevada. > The future of the web can't happen without you. Join us at MIX09 to help > pave the way to the Next Web now. Learn more and register at > http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Sensationsangebot verlängert: GMX FreeDSL - Telefonanschluss + DSL für nur 16,37 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K1308T4569a -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] amavisd 2.6.0 mysql table msgs problems
> I've noticed that MailZu now takes very very long to execute it's > queries. I believe this to be because the maddr table no longer has > an index on the email column. Would adding that index in there as a > non-unique really fubar anything? > I don't think so. What engine are you using in MySQL for the table maddr? InnoDB or MYISAM? > Adding in "WHERE parition_tag = 0" to the queries within MailZu would > probably solve the issue; however, that'll break as soon as partition_tag > != 0. > > I have a similar issue on a home written script to get count of > quarantined messages for user: > SELECT count(*) AS count FROM amavisd_stats.maddr, > amavisd_stats.msgrcpt, amavisd_stats.msgs > where msgs.quar_type = 'Q' > and msgrcpt.rs != 'R' > and msgrcpt.rs != 'D' > and msgs.mail_id = msgrcpt.mail_id > and msgrcpt.rid = maddr.id > and maddr.email = '$email' > > My query is very slow now after changing the unique key on > maddr. I've added "where partition_tag = 0" and that speeds it up to > where it used to be; however, as soon as i tell amavisd-new to write > a partition_tag other than 0, things are no doubt going to blow up. > > - Nate > // SteveB -- GMX startet ShortView.de. Hier findest Du Leute mit Deinen Interessen! Jetzt dabei sein: http://www.shortview.de/[EMAIL PROTECTED] - Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] bypass_spam_checks
Original-Nachricht > Datum: Fri, 4 Apr 2008 09:15:14 +0200 > Von: Gert Ahrens <[EMAIL PROTECTED]> > An: AMaViS-user@lists.sourceforge.net > Betreff: [AMaViS-user] bypass_spam_checks > Hello, > Hello > more and more spammers use mailadresses from our own domain as serder > adresses of spam. In the past I had bypass all mails from our own > domain, but now that is impossible. > Last week I tryed to use MYNETS to distinguish between intern generated > mail and mail who are delivered from an extern mailserver. Now my problem > begins. I collect any extern mail with fetchmail and fetchmail delivers to > localhost:25, the local smtpd. > You could run another SMTP instance on another port where you deliver with fetchmail your mail and allow your own domain as sender while disallowing your own domain as sender on the standard 25 port (if the sender is not authenticated). > Exactly the same way take all intern > generated mail with eGroupware(FeLaMiMail) or mail from my Squirrelmail > webinterfaces on our mailserver. I see no way to discern intern generated > from extern mail. > Do the above setup for inbound and on the normal port 25 require that the user is authenticated. Look at "smtpd_sender_login_maps" and "smtpd_sender_restrictions = reject_sender_login_mismatch" > our mailsystem: > version of amavis amavisd_new-2.3.3 > version of MTA postfix 2.2.9 > spamassassin 3.2.4 > > Do you have any ideas? > > Thank for your support. > > Best regards > Gert > // Steve > > > > > - > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser - Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] irc channel?
On 1/30/08 11:50 AM, Mark Martinec wrote: >> Is there an IRC channel associated with the project? > Not to my knowledge. >> Not that it should replace the mailing lists but it could be of more >> immediate help to others. >> I happen to be sitting on freenode in an empty #amavisd-new channel. >> I'll help anyone that I can and hope others will join with the same >> mindset. > Thanks for offering help. 11:55:27 -ChanServ([EMAIL PROTECTED])- Channel: #amavisd-new 11:55:27 -ChanServ([EMAIL PROTECTED])- Contact: Keanne, last seen: 21 weeks 6 days (13h 28m 6s) ago 11:55:27 -ChanServ([EMAIL PROTECTED])- Registered: 23 weeks 6 days (14h 15m 38s) ago 11:55:27 -ChanServ([EMAIL PROTECTED])-Mode Lock: -s+ntc 11:56:52 -NickServ([EMAIL PROTECTED])-Nickname: Keanne 11:56:52 -NickServ([EMAIL PROTECTED])- Registered: 5 years 6 weeks 2 days (11h 2m 29s) ago 11:56:52 -NickServ([EMAIL PROTECTED])- Last Seen: 1 week 4 days (8h 18m 37s) ago 11:56:52 -NickServ([EMAIL PROTECTED])- Last Seen Address: [EMAIL PROTECTED] Sounds like someone registered it already, but then hasn't been there in a while. -- Steve Huston - W2SRH - Unix Sysadmin, Dept. of Astrophysical Sciences Princeton University |ICBM Address: 40.346525 -74.651285 126 Peyton Hall |"On my ship, the Rocinante, wheeling through Princeton, NJ 08544 | the galaxies; headed for the heart of Cygnus, (609) 258-7375 | headlong into mystery." -Rush, 'Cygnus X-1' - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] how many people really use the quarantine?
Original-Nachricht > Datum: Tue, 29 Jan 2008 23:13:33 +0100 > Von: Stefan Palme <[EMAIL PROTECTED]> > An: Amavis Users > Betreff: Re: [AMaViS-user] how many people really use the quarantine? > > I'm curious, how many people really use amavisd to quarantine messages? > > > > And why is this better than tagging the messages and sorting them > > into the Junk folder of the recipient? > > > > I'm honestly curious, because there is a metric ton of code involved > > in the quarantine process, and I'm really not sure why server-side > > quarantine is better in any useful way. > > > > Please educate me. > > No education from me - just my contribution to statistics: I am using > quarantine only for VIRUS INFECTED mails (because some users still > want to open an attachment even if the mail is wrapped by an "THIS IS > A VIRUS MAIL" message). > I do the same. > Spam is not quarantined but delivered to the users - with a special > mail header set that enables the users to filter the spam mails out > into a spam folder, delete them, forward them to their "friends" :-) > ... - its their own decision. > I leave it to the user to set if he/she wants to quarantine or not. But I don't use AMaViS for spam filtering (SA is a memory eating monster in my eyes and slow as hell (compared to other solutions)). I relay on DSPAM (and for some special accounts I relay on a mix of DSPAM and/or CRM114 and/or OSBF-Lua). > Regards > -stefan- > Steve > > > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] F-Prot v6.x
Original-Nachricht
> Datum: Mon, 24 Dec 2007 09:49:05 -0500
> Von: Michael Katz <[EMAIL PROTECTED]>
> An:
> CC: amavis-user@lists.sourceforge.net
> Betreff: Re: [AMaViS-user] F-Prot v6.x
> F-PROTD is also very different now as well.
>
Have you digged into this? Do you have any snipplet to add into amavisd.conf
for recognizing the new daemon?
> Mike
>
Steve
>
> Steve wrote:
> > Hello list
> >
> > I don't know if any one of you has tried the new F-Prot version 6.x with
> Amavis? I downloaded yesterday the new version and Amavis did not work
> with it. I think the code in amavisd.conf is not made to recognize it. I added
> the block below to amavisd.conf in order to recognize the v6.x version:
> > ### http://www.f-prot.com/ - backs up F-Prot Daemon
> > ['FRISK F-Prot Antivirus', ['fpscan'],
> > '-s 4 -u 3 -z 10 --adware --applications --report {}', [0,8], [3,6],
> # or: [0], [3,6,8],
> > qr/^\[(Found\s+(possible\s+)?(false positive|clean program
> file|trojan|virus|worm|joke|backdoor|spyware|exploit|security
> risk|dialer|virus
> tool|application|downloader|password stealer|adware|garbage|network
> worm|trojan
> proxy|archive bomb|P2P worm Based on a remote template))|Contains
> macros|Misdisinfected virus|Possibly contains macros\]\s+/ ],
> >
> > I have no clue if the syntax is right? I just doubled the original
> F-Prot code block and changed the regexp to match the returning text of the
> new
> version and changed the scan parameters. Is that the proper way?
> >
> > // Steve
>
>
> -
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
> ___
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
--
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] F-Prot v6.x
Hello list
I don't know if any one of you has tried the new F-Prot version 6.x with
Amavis? I downloaded yesterday the new version and Amavis did not work with it.
I think the code in amavisd.conf is not made to recognize it. I added the block
below to amavisd.conf in order to recognize the v6.x version:
### http://www.f-prot.com/ - backs up F-Prot Daemon
['FRISK F-Prot Antivirus', ['fpscan'],
'-s 4 -u 3 -z 10 --adware --applications --report {}', [0,8], [3,6], #
or: [0], [3,6,8],
qr/^\[(Found\s+(possible\s+)?(false positive|clean program
file|trojan|virus|worm|joke|backdoor|spyware|exploit|security risk|dialer|virus
tool|application|downloader|password stealer|adware|garbage|network worm|trojan
proxy|archive bomb|P2P worm Based on a remote template))|Contains
macros|Misdisinfected virus|Possibly contains macros\]\s+/ ],
I have no clue if the syntax is right? I just doubled the original F-Prot code
block and changed the regexp to match the returning text of the new version and
changed the scan parameters. Is that the proper way?
// Steve
--
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] amavis on lotus?
Original-Nachricht > Datum: Tue, 23 Oct 2007 15:48:45 -0400 > Von: Javier <[EMAIL PROTECTED]> > An: AMaViS-user@lists.sourceforge.net > Betreff: [AMaViS-user] amavis on lotus? > Hello, > Hallo > this is my first post so please be gentle, my boss bough a nice lotus > solution, but then he realized that he hadn't bought any anti virus > for the smtp, so my questions is... > > is it possible and safe to get together amavis with lotus 7.0.2? > Do you want to run amavis-new on the same system as you run Domino? Do you want to run amavis-new for inbound and outbound mail? > the smtp and the lotus are different servers (both on sles sp3) > > -- > Ciao, Javier > linux counter #393724 > GPG Key Fingerprint = 46B76CFEDB0161089D9ECB22FEFDE7EBA8C2007E > > - > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Send spam tag message to user's junk folder...
I too have a postfix/amavisd-new/spamassassin/clamav gateway for my exchange 2000 mail server. 1. You may need to setup a junk/spam folder in each outlook client I guess you could use public folders also. 2. Then setup a rule to find any Subject: line that has the 'spam detected' flag in it, to be moved to the junk/spam folder. 3. Then set in the /etc/amavis/amavisd.conf file: $sa_tag_level_deflt = undef; # add spam info headers if at, or above that level $sa_tag2_level_deflt = 2.5; # add 'spam detected' headers at that level $sa_kill_level_deflt = 999.0; # triggers spam evasive actions This will let all emails with a score of 2.5 and above to be passed to the end user with a 'spam detected' header. This may flood the end users junk/spam folder. You may be able to set $sa_kill_level_deflt = 50.0; to cut out high level junk/spam. I've used this tutorial with much luck. http://www200.pair.com/mecham/spam/spamfilter20060630.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gopinath U. Sent: Friday, December 29, 2006 7:22 AM To: amavis-user@lists.sourceforge.net Subject: [AMaViS-user] Send spam tag message to user's junk folder... Dear all, I have installed my antispam-gateway using postfix+amavisd-new+spamassassin. I am getting spam tagged when sending test mails. Now I want to send these spam tag mails to users mailbox in a Junk/Spam subfolder. I did some googling and found out that it can be achieved using plus addressing. But we are using Microsoft exchange server which deliver mail to the end users inbox. So how can I achieve this. Thanks in advance. Regards, Gopinath.U - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDE V ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] bayesian works manually but not with amavis
On 19/12/06 7:33 AM, "Mikel Bauer" <[EMAIL PROTECTED]> wrote: > System is running amavisd-new 2.4.3 with spamassassin 3.1.7 (CentOS 4.4). > > Running spamassassin manually as either root or the amavis user both > result in a BAYES score being applied. But not a single message that > has run through amavis contains a BAYES score, neither messages passed > as clean, or passed as spammy. > > The bayesian system is obviously working as mail going through amavis to > spamassassin is doing auto-learning. Other spamassassin related scores > are being applied (razor, pyzor, uribl, etc). > > The only spamassassin options that I seem to have in my amavisd.conf > file are: > > $sa_tag_level_deflt = 2.0; > $sa_tag2_level_deflt = 6.31; > $sa_kill_level_deflt = 15; > $sa_dsn_cutoff_level = 15; > $sa_mail_body_size_limit = 400*1024; > $sa_local_tests_only = 0; > $sa_spam_report_header = 1; > > Is there perhaps some option that has changed in recent versions of > amavis that I am missing? > > For the sake of argument, I noticed that my bayesian database was up to > the millions of records. I decided to back this up, and start fresh > (move the files and run a sa-learn --sync). Let it run for a few days > and am up to the following, which is plenty for scoring to work: > > sa-learn --dump magic > 0.000 0 3 0 non-token data: bayes db version > 0.000 0 8003 0 non-token data: nspam > 0.000 0 27668 0 non-token data: nham > 0.000 0 963157 0 non-token data: ntokens > 0.000 0 1076446395 0 non-token data: oldest atime > 0.000 0 1166473052 0 non-token data: newest atime > 0.000 0 1166469308 0 non-token data: last journal > sync atime > 0.000 0 1166454780 0 non-token data: last expiry atime > 0.000 0 43200 0 non-token data: last expire > atime delta > 0.000 0 982859 0 non-token data: last expire > reduction count > > Any thoughts? This is quite frustrating as it seems like everything > should be working. What output do get with sudo spamassassin -D --lint Or as user amavis Steve - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Timing issues
On Tue, 14 Feb 2006, Mark Martinec wrote: Feb 14 13:27:41 mercury amavis[25023]: (25023-08) TIMING [total 300433 ms] - SMTP EHLO: 3 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 461 (0%)0, unlink-0-files: 299967 (100%)100, rundown: 0 (0%)100 Feb 14 13:27:41 mercury amavis[25023]: (25023-08) ESMTP: NOTICE: ABORTING the session: timed out Now, Postfix is saying "timeout after DATA", but it looks to me like amavisd-new's problem was in unlinking zero files? Or is that message incorrect and the problem was elsewhere? Most likely the problem is elsewhere, the unlink-0-files is probably just an innocent bystander that accumulated all the timing in absence of a better reason. Well, here's one that did make it through, and I'm not sure where the slowdown is - I can see the section of code between pre-MAIL and pre-DATA-flush, but am not enough of a Perl guru to figure out what's going on there that might slow things down: Feb 14 17:00:34 mercury amavis[14519]: (14519-03) TIMING [total 30100 ms] - SMTP EHLO: 3 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 20431 (68%)68, SMTP DATA: 9123 (30%)98, body_digest: 1 (0%)98, gen_mail_id: 0 (0%)98, mime_decode: 32 (0%)98, get-file-type3: 17 (0%)98, decompose_part: 1 (0%)98, parts_decode: 0 (0%)98, AV-scan-1: 183 (1%)99, spam-wb-list: 9 (0%)99, SA msg read: 2 (0%)99, SA parse: 4 (0%)99, SA check: 266 (1%)100, update_cache: 2 (0%)100, save-to-local-mailbox: 7 (0%)100, post-do_spam: 1 (0%)100, main_log_entry: 13 (0%)100, update_snmp: 1 (0%)100, unlink-3-files: 2 (0%)100, rundown: 0 (0%)100 I also on occasion see similar timings where the holdup is in the SMTP DATA section, like this one: Feb 14 17:04:53 mercury amavis[14755]: (14755-03) TIMING [total 114165 ms] - SMTP EHLO: 3 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 1962 (2%)2, SMTP DATA: 111780 (98%)100, body_digest: 1 (0%)100, gen_mail_id: 0 (0%)100, mime_decode: 9 (0%)100, get-file-type1: 13 (0%)100, decompose_part: 1 (0%)100, parts_decode: 0 (0%)100, AV-scan-1: 181 (0%)100, spam-wb-list: 3 (0%)100, SA msg read: 0 (0%)100, SA parse: 2 (0%)100, SA check: 116 (0%)100, update_cache: 1 (0%)100, fwd-connect: 8 (0%)100, fwd-xforward: 1 (0%)100, fwd-mail-from: 1 (0%)100, fwd-rcpt-to: 1 (0%)100, write-header: 1 (0%)100, fwd-data: 1 (0%)100, fwd-data-end: 60 (0%)100, fwd-rundown: 3 (0%)100, main_log_entry: 14 (0%)100, update_snmp: 1 (0%)100, unlink-1-files: 1 (0%)100, rundown: 0 (0%)100 During this time, the load on the machine is below 1 (.3 to .5), memory is fully used (I'll guess 3/4 used+shared, a little bit of buffers and the rest cached) and there's not a lot of other mails going through. There's 20 amavisd-new processes set to run with an equal limit for Postfix's smtpd. I'm stumped on this one.. most of the time, these messages it times out on are junkmail, so I don't mind too much if it forces a spammer to try again - but now and then I'm getting user reports of anywhere from 15 seconds to 4 minutes to send an email. Please try to capture such event with $log_level set to 5 (or 'amavisd debug'). Will do soon - I have a feeling that if I figure out the timing issue above, it will reduce or remove the other problems. -- Steve Huston - W2SRH - Unix Sysadmin, Dept. of Astrophysical Sciences Princeton University |ICBM Address: 40.346525 -74.651285 126 Peyton Hall |"On my ship, the Rocinante, wheeling through Princeton, NJ 08544 | the galaxies; headed for the heart of Cygnus, (609) 258-7375 | headlong into mystery." -Rush, 'Cygnus X-1' --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Timing issues
We've recently upgraded our mail system (Postfix 2.2.8, amavisd-new 2.3.3) and I'm seeing some timeout issues. Now and then Postfix will mail me with "queue file write error" which from what I found can also be a problem with the pre-queue filter (this is how we're configured). I turned up the debugging in amavisd-new and saw this series of lines today: Feb 14 13:22:40 mercury postfix/smtpd[27454]: connect from unknown[59.92.33.126] Feb 14 13:22:41 mercury postfix/smtpd[27454]: NOQUEUE: client=unknown[59.92.33.126] Feb 14 13:22:41 mercury amavis[25023]: (25023-08) ESMTP::10024 /var/amavis/amavis-20060214T122505-25023: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Received: from mail.astro.princeton.edu ([127.0.0.1]) by localhost (mercury.astro.Princeton.EDU [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25023-08 for <[EMAIL PROTECTED]>; Tue, 14 Feb 2006 13:22:41 -0500 (EST) ... Feb 14 13:27:41 mercury amavis[25023]: (25023-08) ESMTP ABORTING: timed out Feb 14 13:27:41 mercury amavis[25023]: (25023-08) TIMING [total 300433 ms] - SMTP EHLO: 3 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 461 (0%)0, unlink-0-files: 299967 (100%)100, rundown: 0 (0%)100 Feb 14 13:27:41 mercury amavis[25023]: (25023-08) ESMTP: NOTICE: ABORTING the session: timed out Feb 14 13:27:48 mercury postfix/smtpd[27454]: timeout after DATA from unknown[59.92.33.126] Feb 14 13:27:48 mercury postfix/smtpd[27454]: disconnect from unknown[59.92.33.126] Now, Postfix is saying "timeout after DATA", but it looks to me like amavisd-new's problem was in unlinking zero files? Or is that message incorrect and the problem was elsewhere? I'm stumped on this one.. most of the time, these messages it times out on are junkmail, so I don't mind too much if it forces a spammer to try again - but now and then I'm getting user reports of anywhere from 15 seconds to 4 minutes to send an email. If you need other information, feel free to ask. -- Steve Huston - W2SRH - Unix Sysadmin, Dept. of Astrophysical Sciences Princeton University |ICBM Address: 40.346525 -74.651285 126 Peyton Hall |"On my ship, the Rocinante, wheeling through Princeton, NJ 08544 | the galaxies; headed for the heart of Cygnus, (609) 258-7375 | headlong into mystery." -Rush, 'Cygnus X-1' --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Two-level quarantine in gateway config?
That was it - thanks Clifton! I now have: - mail scoring 3-8 (via tag2) going to a often-checked email address/folder - mail scoring 8+ (kill_level) quarantined on my gateway in a "spam" email account All very nice - with the small exception that I don't get a log of the tag2 items to $spam_admin - any ideas on how to tackle that issue gratefully received :-) - steve -Original Message- From: Clifton Royston [mailto:[EMAIL PROTECTED] Sent: Thursday, 1 December 2005 3:29 p.m. To: Steve Brorens Cc: amavis-user@lists.sourceforge.net Subject: Re: [AMaViS-user] Two-level quarantine in gateway config? On Thu, Dec 01, 2005 at 02:26:10PM +1300, Steve Brorens wrote: > Thanks for that Mark, but I'm having some difficulty in getting it to > work. > > I have: > > ---/etc/postfix/virtual > > /^(.*)\+spam@([.*])\.commarc\.co\nz$/ [EMAIL PROTECTED] > [EMAIL PROTECTED] [EMAIL PROTECTED] > [EMAIL PROTECTED] [EMAIL PROTECTED] > > ---eof--- > > ...and email to the second two gets redirected as it should. Top line > should be catching and re-directing email sent to addresses like > [EMAIL PROTECTED] - but isn't. Looks to me like you are using a regex- or pcre- style map entry with a normal (non-regex) access map. The regex- or pcre- maps must be specified as such when referenced in the Postfix config file, e.g. regex:rewrite-map, or pcre:rewrite-map Don't try to mix them with your ordinary access maps. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services = This e-mail has been scanned for Viruses and Content and cleared by CommArc Cube Server --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Two-level quarantine in gateway config?
Thanks for that Mark, but I'm having some difficulty in getting it to
work.
I have:
---/etc/postfix/virtual
/^(.*)\+spam@([.*])\.commarc\.co\nz$/ [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
---eof---
...and email to the second two gets redirected as it should. Top line
should be catching and re-directing email sent to addresses like
[EMAIL PROTECTED] - but isn't.
I suspect some problem with the regex in that first line, but it's based
closely on your example, and my attempts at "improving" it haven't
helped, so I'm somewhat at a loss...
(I have been doing a "postmap /etc/virtual && /etc/init.dpostfix
restart" after editing)
Can you spot my mistake, or should I take this to a Postfix list?
- steve
-Original Message-
From: Mark Martinec [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 15 November 2005 1:16 p.m.
To: amavis-user@lists.sourceforge.net
Subject: Re: [AMaViS-user] Two-level quarantine in gateway config?
Steve,
> About to upgrade Amavisd-new and SpamAssassin in a number of gateways
> which I administer, and I was expecting to be able to configure to
> send "ordinary" spam (say 5.0 to 15) to one quarantine (an email
> address on the main mail server), and Really Bad spam (15+) to a local
> address on my gateway/spamfiltering box. I had thought that there were
> features in v2.3.3 which would allow me to do this, but now that I
> come to do it I can't see how to. Of course,
> "sa_quarantine_cutoff_level" *will* allow me to completely discard
> high-scoring spam, but I'm reluctant to go that far. Any easy way to
> achieve what I'm after?
1. set kill level at 15, which will quarantine mail with core above 15
to the 'really bad spam' quarantine, configurable with
$spam_quarantine_to (can be a mail address).
2. set tag2_level at 5, which will tag spam with score above 5. Rewrite
recipient address for mail above (possibly per-recipient) tag2_level by
appending address extension, e.g. '+spam':
$recipient_delimiter = '+';
@addr_extension_spam_maps = ('spam');
3. use Postfix virtual maps (e.g. pcre-based) to rewrite addresses of
the form
[EMAIL PROTECTED] to any address you like, e.g.:
/^(.*)\+spam@([EMAIL PROTECTED])\.example\.com$/ [EMAIL PROTECTED]
See:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#addrext
Mark
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam for All
Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
=
This e-mail has been scanned for Viruses and Content and cleared by
CommArc Cube Server
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems? Stop! Download the new AJAX search engine that
makes searching your log files as easy as surfing the web. DOWNLOAD
SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=ick
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
=
This e-mail has been scanned for Viruses and Content and cleared by CommArc
Cube Server
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Two-level quarantine in gateway config?
Thanks for that Mark, but I'm having some difficulty in getting it to
work.
I have:
---/etc/postfix/virtual
/^(.*)\+spam@([.*])\.commarc\.co\nz$/ [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
---eof---
...and email to the second two gets redirected as it should. Top line
should be catching and re-directing email sent to addresses like
[EMAIL PROTECTED] - but isn't.
I suspect some problem with the regex in that first line, but it's based
closely on your example, and my attempts at "improving" it haven't
helped, so I'm somewhat at a loss...
(I have been doing a "postmap /etc/virtual && /etc/init.dpostfix
restart" after editing)
Can you spot my mistake, or should I take this to a Postfix list?
- steve
-Original Message-
From: Mark Martinec [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 15 November 2005 1:16 p.m.
To: amavis-user@lists.sourceforge.net
Subject: Re: [AMaViS-user] Two-level quarantine in gateway config?
Steve,
> About to upgrade Amavisd-new and SpamAssassin in a number of gateways
> which I administer, and I was expecting to be able to configure to
> send "ordinary" spam (say 5.0 to 15) to one quarantine (an email
> address on the main mail server), and Really Bad spam (15+) to a local
> address on my gateway/spamfiltering box. I had thought that there were
> features in v2.3.3 which would allow me to do this, but now that I
> come to do it I can't see how to. Of course,
> "sa_quarantine_cutoff_level" *will* allow me to completely discard
> high-scoring spam, but I'm reluctant to go that far. Any easy way to
> achieve what I'm after?
1. set kill level at 15, which will quarantine mail with core above 15
to the 'really bad spam' quarantine, configurable with
$spam_quarantine_to (can be a mail address).
2. set tag2_level at 5, which will tag spam with score above 5. Rewrite
recipient address for mail above (possibly per-recipient) tag2_level by
appending address extension, e.g. '+spam':
$recipient_delimiter = '+';
@addr_extension_spam_maps = ('spam');
3. use Postfix virtual maps (e.g. pcre-based) to rewrite addresses of
the form
[EMAIL PROTECTED] to any address you like, e.g.:
/^(.*)\+spam@([EMAIL PROTECTED])\.example\.com$/ [EMAIL PROTECTED]
See:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#addrext
Mark
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam for All
Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
=
This e-mail has been scanned for Viruses and Content and cleared by CommArc
Cube Server
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Two-level quarantine in gateway config?
About to upgrade Amavisd-new and SpamAssassin in a number of gateways which I administer, and I was expecting to be able to configure to send "ordinary" spam (say 5.0 to 15) to one quarantine (an email address on the main mail server), and Really Bad spam (15+) to a local address on my gateway/spamfiltering box. I had thought that there were features in v2.3.3 which would allow me to do this, but now that I come to do it I can't see how to. Of course, "sa_quarantine_cutoff_level" *will* allow me to completely discard high-scoring spam, but I'm reluctant to go that far. Any easy way to achieve what I'm after? _ Steve Brorens Senior Consultant CommArc Consulting Ltd [EMAIL PROTECTED] Ph: 021 332289 = This e-mail has been scanned for Viruses and Content and cleared by CommArc Cube Server --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Two-level quarantine in gateway config?
About to upgrade Amavisd-new and SpamAssassin in a number of gateways which I administer, and I was expecting to be able to configure to send "ordinary" spam (say 5.0 to 15) to one quarantine (an email address on the main mail server), and Really Bad spam (15+) to a local address on my gateway/spamfiltering box. I had thought that there were features in v2.3.3 which would allow me to do this, but now that I come to do it I can't see how to. Of course, "sa_quarantine_cutoff_level" *will* allow me to completely discard high-scoring spam, but I'm reluctant to go that far. Any easy way to achieve what I'm after? _ Steve Brorens Senior Consultant CommArc Consulting Ltd [EMAIL PROTECTED] Ph: 021 332289 = This e-mail has been scanned for Viruses and Content and cleared by CommArc Cube Server --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Spam not tagged for some domains...
Thanks Mark - a quick grep shows I'm not using @local_domains_maps at
all - so that might explain it :-)
- steve
-Original Message-
From: Mark Martinec [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 9 August 2005 1:27 a.m.
To: amavis-user@lists.sourceforge.net
Subject: Re: [AMaViS-user] Spam not tagged for some domains...
Steve,
> I've got a couple of sites where there are several domain names - and
> quite a bit of spam gets through to users of the 'other' domains - yet
> performance is fine for the master domain. They're setup with all the
> main entries pointing to the 'master' domain (e.g. acme.co.nz), and
> the others just appearing in
> /etc/postfix/main.cf:
> relay_domains = acmecomputers.co.nz, acme.co.nz
> Any ideas as to how or why this might happen?
If I understand this right, the content filtering is done at the host
pointed to by MX records of all these domains, i.e. at the front mailer,
which is the correct way of setting up things. Then mail may be relayed
to some domains, and delivered locally for others. If this is so, then
there should be no difference in spam scoring between these domains. One
possible difference may come from SA configuration setting (in
local.cf): trusted_networks and internal_networks.
> - postfix/amavisd/spamassassin setup
> - /var/log/maillog shows an amavis "spam_scan" line but no following
> "SPAM-TAG" line - which normally follws right behind
The X-Spam-* headers are only inserted for recipients that match
@local_domains_maps, so you should list all your domains there. From
amavisd.conf-sample:
# Lookup list of local domains (see README.lookups for syntax details) #
# @local_domains_maps list of lookup tables are used in deciding whether
a # recipient is local or not, or in other words, if the message is
outgoing # or not. This affects inserting spam-related headers for local
recipients, # limiting recipient virus notifications (if enabled) to
local recipients, # in deciding if address extension may be appended,
and in SQL lookups # for non-fqdn addresses. Set it up correctly if you
need features # that rely on this setting (or just leave empty
otherwise). # # With Postfix (2.0) a quick hint on what local domains
normally are: # a union of domains specified in: mydestination,
virtual_alias_domains, # virtual_mailbox_domains, and relay_domains.
@local_domains_maps = (
[qw( .example.com .foo.example.net some.other.domain )]
);
or read it from a file, one domain per line (possibly prefixed by a dot
to imply its subdomains, as described in README.lookups under HASH
LOOKUPS):
@local_domains_maps = ( read_hash("$MYHOME/local_domains") );
Note however that @local_domains_maps has no effect on spam scanning.
Mail will be spam scanned regardless of recipient being in
@local_domains_maps. It only controls insertion of X-Spam-* header
fields.
Mark
---
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle
Practices Agile & Plan-Driven Development * Managing Projects & Teams *
Testing & QA Security * Process Improvement & Measurement *
http://www.sqe.com/bsce5sf
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
=
This e-mail has been scanned for Viruses and Content and cleared by CommArc
Cube Server
---
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Spam not tagged for some domains...
I've got a couple of sites where there are several domain names - and quite a bit of spam gets through to users of the 'other' domains - yet performance is fine for the master domain. They're setup with all the main entries pointing to the 'master' domain (e.g. acme.co.nz), and the others just appearing in /etc/postfix/main.cf: relay_domains = acmecomputers.co.nz, acme.co.nz Any ideas as to how or why this might happen? - steve PS: - postfix/amavisd/spamassassin setup - /var/log/maillog shows an amavis "spam_scan" line but no following "SPAM-TAG" line - which normally follws right behind = This e-mail has been scanned for Viruses and Content and cleared by CommArc Cube Server --- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] (no subject)
confirm 847457 --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
