Re: [Clamav-users] Clamv-milter

2004-05-25 Thread Cristian Del Carlo
On May 24, 2004 06:22 PM, Nigel Horne <[EMAIL PROTECTED]> wrote:

> On Monday 24 May 2004 14:38, Cristian Del Carlo wrote:
> 
> >   I have a problem when my users send e-mails greater than 400-500K becouse i have 
> > from the server the follwing error : 
> >    
> >   May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data, reject=451 4.7.1 
> > Please try again later 
> >    
> >   This error is not present if my users send little mails . 
> >   I use ClamAV version 0.70-rc and clamav-milter version 0.70. 
> 
> Update to 0.71, there has been some work in this area recently, and 0.71 addresses 
> most of them.
> 
> >   Thanks , 
> >   Cristian Del Carlo 
> 
> 
> -- 
> Nigel Horne. Arranger, Composer, Typesetter.
> NJH Music, Barnsley, UK.  ICQ#20252325
> [EMAIL PROTECTED] http://www.bandsman.co.uk
> 
> 
> ---
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the market... Oracle 10g.
> Take an Oracle 10g class now, and we'll give you the exam FREE.
> http://ads.osdn.com/?ad_id149&alloc_id66&op=click
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
> 

With clamav 0.71 it works .
Thanks,



Cristian Del Carlo




---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Stephen Gran
On Mon, May 24, 2004 at 12:35:29PM -0400, Joe Maimon said:
> Stephen Gran wrote:
> >Although the F=, should be passing the messages through
> >unscanned if there is a milter problem.  Not sure why sendmail is doing
> >that.
> > 
> Thats not what the F= is for.If the milter <->sendmail comm. fails, 
> than F= either tempfail or reject.

Actually, that's exactly what the F= is for:
http://www.sendmail.org/~gshapiro/8.10.Training/milterconfig.html
Flags (F=) 
If no flags specified and filter not available, run as if filter wasn't
configured 

Flag   Description
R  Reject connection if filter unavailable 
T  Temporary fail connection if filter unavailable

HTH,
-- 
 --
|  Stephen Gran  | blithwapping:  Using anything BUT a |
|  [EMAIL PROTECTED] | hammer to hammer a nail into the  wall, |
|  http://www.lobefin.net/~steve | such as shoes, lamp bases, doorstops,   |
|| etc.   -- "Sniglets", Rich Hall &   |
|| Friends |
 --


pgpJQmJ8ddtkd.pgp
Description: PGP signature


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Per-Olov Sjöholm
Joe Maimon said:
>
>
> Stephen Gran wrote:
>
>>On Mon, May 24, 2004 at 03:38:09PM +0200, Cristian Del Carlo said:
>>
>>
>>>Hi,
>>>
>>>  i use sendmail in my smtp server.
>>>
>>>  I have configured sendmail.mc with the follwing options:
>>>
>>>  INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,
>>> T=S:4m;R:4m')
>>>  define(`confINPUT_MAIL_FILTERS',`clmilter')
>>>
>>>  I have a problem when my users send e-mails greater than 400-500K
>>> becouse i have from the server the follwing error :
>>>
>>>  May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data,
>>> reject=451 4.7.1 Please try again later
>>>
>>>  This error is not present if my users send little mails .
>>>  I use ClamAV version 0.70-rc and clamav-milter version 0.70.
>>>  Where is the mistake ?
>>>  Thanks ,
>>>  Cristian Del Carlo
>>>
>>>
>>
>>You'll want to look at the StreamMaxLength setting in clamav.conf, I
>>believe.  Although the F=, should be passing the messages through
>>unscanned if there is a milter problem.  Not sure why sendmail is doing
>>that.
>>
>>
> Thats not what the F= is for.If the milter <->sendmail comm. fails,
> than F= either tempfail or reject.
>
> Upgrade your clamav installation. Significant fixes went into the suite,
> some of them specificaly addressing these issues.
>
>
>
> ---
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the market... Oracle 10g.
> Take an Oracle 10g class now, and we'll give you the exam FREE.
> http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>


NOT correct !



http://www.milter.org/milter_api/installation.html

>From the above link:

--snip--
The current flags (F=) are:

FlagMeaning
R   Reject connection if filter unavailable
T   Temporary fail connection if filter unavailable
If a filter is unavailable or unresponsive and no flags have been
specified, the MTA will continue normal handling of the current
connection. The MTA will try to contact the filter again on each new
connection.

There are three fields inside of the T= equate: S, R, and E. Note the
separator between each is a ";" (semicolon), as "," (comma) already
separates equates. The value of each field is a decimal number followed by
a single letter designating the units ("s" for seconds, "m" for minutes).
The fields have the following meanings:
--snip--



You have three options here: "F=", "F=R", "F=T"

So "F=" will definetly NOT reject or tempfail the email. I have used it
many times for filters (not virus scanners).
In a virus scanner solution the only relevant flag is "F=T". Because we do
want them to try again if OUR side is temporary bad with the milter API
virus scan engine.


/Per-Olov


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Per-Olov Sjöholm
Cristian Del Carlo said:
>
> Hi,
>
>   i use sendmail in my smtp server.
>
>   I have configured sendmail.mc with the follwing options:
>
>   INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,
> T=S:4m;R:4m')
>   define(`confINPUT_MAIL_FILTERS',`clmilter')
>
>   I have a problem when my users send e-mails greater than 400-500K
> becouse i have from the server the follwing error :
>
>   May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data,
> reject=451 4.7.1 Please try again later
>
>   This error is not present if my users send little mails .
>   I use ClamAV version 0.70-rc and clamav-milter version 0.70.
>   Where is the mistake ?
>   Thanks ,
>   Cristian Del Carlo
>
>
>
>
>
>
> ---
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the market... Oracle 10g.
> Take an Oracle 10g class now, and we'll give you the exam FREE.
> http://ads.osdn.com/?ad_id149&alloc_id66&opÌk
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>
>


Could be a timeout problem where the clamav-milter connector aborts

Go through the timeouts in the INPUT_MAIL_FILTER row in sendmail.mc. My
looks like this:
INPUT_MAIL_FILTER(`clamav', `S=inet:[EMAIL PROTECTED], F=T,
T=S:4m;R:4m;E:5m')dnl
(but you use a unix socket instead...)

But also... go through the clamav-milter timouts.

A huge mail need larger timeouts. If it is a timeout problem an upgrade to
0.71 is probably not enough. Then your timeout settings need to be
increased.

A "F=" solution in the INPUT_MAIL_FILTER row in sendmail.mc which will let
the mail through i you have a faulty milter filter is NOT recomended when
using a virus scanner

/Per-Olov


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Joe Maimon

Stephen Gran wrote:
On Mon, May 24, 2004 at 03:38:09PM +0200, Cristian Del Carlo said:
 

Hi, 
  
 i use sendmail in my smtp server. 
  
 I have configured sendmail.mc with the follwing options: 
  
 INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m') 
 define(`confINPUT_MAIL_FILTERS',`clmilter') 
  
 I have a problem when my users send e-mails greater than 400-500K becouse i have from the server the follwing error : 
  
 May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data, reject=451 4.7.1 Please try again later 
  
 This error is not present if my users send little mails . 
 I use ClamAV version 0.70-rc and clamav-milter version 0.70. 
 Where is the mistake ? 
 Thanks , 
 Cristian Del Carlo 
   

You'll want to look at the StreamMaxLength setting in clamav.conf, I
believe.  Although the F=, should be passing the messages through
unscanned if there is a milter problem.  Not sure why sendmail is doing
that.
 

Thats not what the F= is for.If the milter <->sendmail comm. fails, 
than F= either tempfail or reject.

Upgrade your clamav installation. Significant fixes went into the suite, 
some of them specificaly addressing these issues.


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Nigel Horne
On Monday 24 May 2004 14:38, Cristian Del Carlo wrote:

>   I have a problem when my users send e-mails greater than 400-500K becouse i have 
> from the server the follwing error : 
>    
>   May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data, reject=451 4.7.1 
> Please try again later 
>    
>   This error is not present if my users send little mails . 
>   I use ClamAV version 0.70-rc and clamav-milter version 0.70. 

Update to 0.71, there has been some work in this area recently, and 0.71 addresses 
most of them.

>   Thanks , 
>   Cristian Del Carlo 


-- 
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK.  ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamv-milter

2004-05-24 Thread Stephen Gran
On Mon, May 24, 2004 at 03:38:09PM +0200, Cristian Del Carlo said:
> 
> Hi, 
>    
>   i use sendmail in my smtp server. 
>    
>   I have configured sendmail.mc with the follwing options: 
>    
>   INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m') 
>   define(`confINPUT_MAIL_FILTERS',`clmilter') 
>    
>   I have a problem when my users send e-mails greater than 400-500K becouse i have 
> from the server the follwing error : 
>    
>   May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data, reject=451 4.7.1 
> Please try again later 
>    
>   This error is not present if my users send little mails . 
>   I use ClamAV version 0.70-rc and clamav-milter version 0.70. 
>   Where is the mistake ? 
>   Thanks , 
>   Cristian Del Carlo 

You'll want to look at the StreamMaxLength setting in clamav.conf, I
believe.  Although the F=, should be passing the messages through
unscanned if there is a milter problem.  Not sure why sendmail is doing
that.
-- 
 --
|  Stephen Gran  | Hitchcock's Staple Principle:  The  |
|  [EMAIL PROTECTED] | stapler runs out of staples only while  |
|  http://www.lobefin.net/~steve | you are trying to  staple something.|
 --


pgpqI8Fg3sZBE.pgp
Description: PGP signature


[Clamav-users] Clamv-milter

2004-05-24 Thread Cristian Del Carlo

Hi, 
   
  i use sendmail in my smtp server. 
   
  I have configured sendmail.mc with the follwing options: 
   
  INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m') 
  define(`confINPUT_MAIL_FILTERS',`clmilter') 
   
  I have a problem when my users send e-mails greater than 400-500K becouse i have 
from the server the follwing error : 
   
  May 24 12:53:50 X sm-mta[17458]: i4OAqHsX017458: Milter: data, reject=451 4.7.1 
Please try again later 
   
  This error is not present if my users send little mails . 
  I use ClamAV version 0.70-rc and clamav-milter version 0.70. 
  Where is the mistake ? 
  Thanks , 
  Cristian Del Carlo 
   





---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users