[AMaViS-user] Write and enable my rules for Spamassassin
Hello, I want to write my own rules - in this case my own rules for Uribl. If this pattern is in the mail, the score should be XX. I enabled my own rules in local.cf in /etc/mail/spamassassin with allow_user_rules 1 The spamassassin --lint -D shows me [16656] dbg: config: allowing user rules! My rules in local.cf are: uri LOCAL_URI_EXAMPLE /www\.uni-leipzig.de\.de\/2009\// score LOCAL_URI_EXAMPLE 5.1 But my user rules are not working - the message with www.uni-leipzig.de/2009 is not market with 5.1 points. In the postfix-mailinglist a user said if you use amavis with spamassassin, not all the things will happen like in the spamasassin help document. Tnx Sebastian - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Write my own rulesets for spamassassin
Hello, I want to write my own rules - in this case my own rules for Uribl. If this pattern is in the mail, the score should be XX. I enabled my own rules in local.cf in /etc/mail/spamassassin with allow_user_rules 1 The spamassassin --lint -D shows me [16656] dbg: config: allowing user rules! My rules in local.cf are: uri LOCAL_URI_EXAMPLE /www\.uni-leipzig.de\.de\/2009\// score LOCAL_URI_EXAMPLE 5.1 But my user rules are not working - the message with www.uni-leipzig.de/2009 is not market with 5.1 points. In the postfix-mailinglist a user said if you use amavis with spamassassin, not all the things will happen like in the spamasassin help document. Tnx Sebastian - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] bypass bad_header by sender
From what I've read, I don't believe this is possible, but I wanted to confirm it. I'm running amavisd-new-2.4.3 (20060930). I have one sender outside my company that for some reason or another has 2 message IDs in their header. It gets flagged as a bad header by amavisd. I had put the people he emails in the bad_header lover list, but his list of recipients continues to grow. Is there any way I can simply have any emails from this person bypass the bad header checks? Thanks, Matthew - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] bypass bad_header by sender
Michael Scheidell wrote:
LOTS of email comes in with double headers (dosn't email from
amabvisd-users list have double Froms a lot?)
Double headers isn't such a big deal (not a spam sign, not
exploitable, so, in amavisd.conf, do this and restart amavisd
$allowed_header_tests{'multiple'} = 0;
I believe it is the duplicate message ID that is causing it. Here is the
entry it puts in the header.
X-Amavis-Alert: BAD HEADER Duplicate header field: Message-ID
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Keep going if AV Scanner fails?
Bill Landry wrote: Adam Gibson wrote: Gary V wrote: (have not tried it though). Make sure your update script is a recent one that tests the downloads before employing them and consider This is one of the most important steps IMHO. I would make sure the script tests the dat files before copying them into place. The scripts that I have used over the years tests the dat files with the eicar virus test pattern to make sure they work before copying them into place. Thanks. I will check for a newer script. Below is the one I'm using. I have no idea where I got it, as it was several years ago. Looks pretty simple and doesn't appear to do any testing. [EMAIL PROTECTED] scripts]# cat freshclam #!/bin/sh ### A simple update script for the clamav virus database. ### This could as well be replaced by a SysV script. ### fix log file if needed LOG_FILE=/var/log/clamav/freshclam.log if [ ! -f $LOG_FILE ]; then touch $LOG_FILE chmod 644 $LOG_FILE chown clamav.clamav $LOG_FILE fi /usr/bin/freshclam \ --quiet \ --datadir=/var/clamav \ --log=$LOG_FILE \ --log-verbose \ --daemon-notify=/etc/clamd.conf - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Keep going if AV Scanner fails?
Hello, I'm using postfix, amavisd, clamd, plus sane security www.sanesecurity.co.uk additional clam DB files. Something happened today with the sane security definitions. I have resolved the issue, but want to see how I could possibly have a more ideal 'reaction' (for my situation) in the future. My amavisd boxes are gateways for exchange that has AV protection, so while the AV scanning here does an OUTSTANDING job, it isn't the end of the world if it goes down. When my clam files went south today, amavisd queued all mail because the clamd socket was unavailable. I would prefer it continue to pass the mail and maybe blast massive warnings to specified email addresses. Does anyone know a good way to make this happen? Thanks, Matthew - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] simple setup
Matt Herzog wrote: 2. Deliver NO mail locally but relay ALL mail to a single destination or host (sadly, an Exchange machine.) Don't be sad. Exchange is a great groupware system, just a lousy smtp server. Put the right defenses in front of it, and you will be fine. -Matthew - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] How can I check up FuzzyOcr
Jim Knuth wrote: I do not know whether there are problems. I know only not whether it is active. No error messages in debug mode. If you put it in debug mode and send one of the samples through, you will get more info. If it doesn't catch it and log something in the log file, it isn't working. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] How can I check up FuzzyOcr
Peter Huetmannsberger wrote: Hello, I think the confusing thing here, is that the debug mode needs to be set in amavisd.conf, and it is called log_level So in amavisd.conf set: $log_level = 2; I was referring to the log level in fuzzyocr.cf. Below are the relevant entries in mine: focr_verbose 2 # # Logfile (make sure it is writable by the plugin) (Default value: /etc/mail/spamassassin/FuzzyOcr.log) focr_logfile /var/log/FuzzyOcr.log Then you will have all the applied rules in your logfile, and you can just grep for FUZZY_OCR in your maillog, after you have sent the examples through your mail system. Or just wait a little, right now there are tons of spams just waiting to be scanned with FUZZY_OCR. With the settings above, /var/log/FuzzyOcr.log contains a ton of details. what is it that triggers the use of FUZZY_OCR? It doesn't seem to be used with every mail. Or do I have something wrong in my setup? FuzzyOCR is triggered my emails with graphics, especially gifs. There are 4 included samples with the install that will trip it. -Matthew - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] How can I check up FuzzyOcr
Jim Knuth wrote: Hallo und Guten Morgen AMaViS-user, Unfortunately, I cannot see whether the FuzzyOcr works. How can I test it? I have seen - with amavisd-new debug-sa - that FuzzyOcr.pm was loaded. Put it in debug mode (log level 2), and send the samples through that are included with the install files. Most problems come from programs not being in the path Fuzzy assumes they are in. Check the paths of every helper program in the conf file. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] FuzzyOCR/Amavisd/SA
Does anyone have any tips on getting FuzzyOcr to work properly with Amavisd/SA? I'm runningamavisd-new-2.4.1 and the latest SA. I followed the instructions for installing FuzzyOcr, and it isn't reporting any errors that I see. Nothing is being written to the FuzzyOcr logfile. The only think I see is this in my mail log: Oct 12 11:08:04 smtp1 amavis[21695]: (21695-09) extra modules loaded: /etc/mail/spamassassin/FuzzyOcr.pm, String/Approx.pm I've sent the test messages through that should be caught by this, and it doesn't seem tobe catching them. Any ideas? Sorry if I haven't provided enough detail, but that is about all I can find. No errors anywhere. Thanks, Matthew - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] FuzzyOCR/Amavisd/SA
Peter Huetmannsberger wrote: What OS are you running, and which version, I just set it up on RH9, and I also had the problem, that the testfiles never worked for me. I left the config files in the spamassassin directory, and found that it does actually work up to some point for me. What I did have to install to make it work (except for the tests, which don't) was libungif-progs I got a note saying that post was held because of suspicious headers, and I never saw it come through. I did get it working fianlly. For some reaosn, I had to hard code some paths in the pm file even though I had them correctly in the conf file. -Matthew - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Spam with embedded gif...
Henrik Krohns wrote: Yesterday, from 14989 messages scanned, 134 were checked by FuzzyOCR. Each of those takes maybe 5-20 seconds, depending on how many ocr runs you like. I implemented it last week with similar results. I think it is an excellent product. Hopefully the gocr (OCR piece) component will improve over time. FYI, if you do install it, most people have better luck with gocr .40 with the patch available from the fuzzyocr site, as opposed to gocr .41. -Matthew - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
