Re: [Mimedefang] Outgoing Messages are blocked

2004-06-07 Thread Vivek Kumar
Thanks a lot.. I have to look into how to use filter_relay() ?? As I
didn't setup the mimedefang so I have to read about it. If it is few
simple steps then see if can guide me also for whitelist_from_recv I
have to give to email-id or domain name of the address which I don't
want to be blocked. Right ??

Thanks

VK

On Mon, 2004-06-07 at 10:45, Fernando Gleiser wrote:
> On Mon, 7 Jun 2004, Vivek Kumar wrote:
> 
> > Hi all,
> >
> > It seems that Spamassassin/Mimedefang is checking and blocking outgoing
> > messages also. We found few mails in spamdrop account which were
> > outbound messages.
> 
> Use filter_relay() to prevent mimedefang from filtering mail from your
> users. Or add whitelist_from_recv rules.
> 
> > Also Our HRD department gets lots of  Resume from
> > Monster so all the resumes from monster are getting blocked. I was
> > looking into the rules to see if "Monster resume 134443." is blocked
> > but i didn't see it.
> 
> It's a common problem with many online forms/reports. They look and smell
> like spam, even if they aren't. Do as above and add rules to whitelist
> them.
> 
> 
> 
>   Fer
> ___
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> [EMAIL PROTECTED]
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: Unsafe embedded Perl (was RE: [Mimedefang] [PATCH] Memleak bug in mimedefang found and fixed)

2004-06-07 Thread Kelson Vibber
At 10:35 AM 6/7/2004, David F. Skoll wrote:
On Mon, 7 Jun 2004, Kelson Vibber wrote:
> Does this mean the embedded perl should not be used *at all* on these
> platforms, or just that the normal reread method will not work?
Just that the normal reread method will not work, as far as I know.
OK.  Thanks!
Kelson Vibber
SpeedGate Communications   

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: Unsafe embedded Perl (was RE: [Mimedefang] [PATCH] Memleak bug in mimedefang found and fixed)

2004-06-07 Thread David F. Skoll
On Mon, 7 Jun 2004, Kelson Vibber wrote:

> Does this mean the embedded perl should not be used *at all* on these
> platforms, or just that the normal reread method will not work?

Just that the normal reread method will not work, as far as I know.

Regards,

David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: Unsafe embedded Perl (was RE: [Mimedefang] [PATCH] Memleak bug in mimedefang found and fixed)

2004-06-07 Thread Kelson Vibber
At 09:50 AM 6/7/2004, Kevin A. McGrail wrote:
First, beyond re-read, I have had no issues.
Second, DFS will likely clarify but he has indicated that he will be
changing the md-mx-ctrl to notify you of a re-read problem.  Therefore, if
embedded perl didn't work, why he would he modify md-mx-ctrl?
Regards,
KAM
> >I will be changing the multiplexor so that when you run:
> >
> > md-mx-ctrl reread
>
> Does this mean the embedded perl should not be used *at all* on these
> platforms, or just that the normal reread method will not work?
I haven't had any issues either - in fact so far it's been working much 
better than before.  (The timing is fortunate also; this morning someone 
started a massive spam run forging our webmaster address as the envelope 
sender, and the bounces have actually doubled our SMTP load.  If this had 
happened last week, the server would probably have ground to a halt, but 
it's humming along fine.)

My concern, given the way the message was worded, was that there might be 
other issues that aren't immediately apparent, and that the warning could 
be to say "stop using embedded mode because you'll lose data/crash 
randomly/whatever," or it could just be "don't use reread, use restart."

Kelson Vibber
SpeedGate Communications, Technical Staff
[EMAIL PROTECTED]  Phone: (949) 341-0800
http://www.speed.net/ FAX:   (949) 341-0900 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: Unsafe embedded Perl (was RE: [Mimedefang] [PATCH] Memleak bug in mimedefang found and fixed)

2004-06-07 Thread Kevin A. McGrail
First, beyond re-read, I have had no issues.

Second, DFS will likely clarify but he has indicated that he will be
changing the md-mx-ctrl to notify you of a re-read problem.  Therefore, if
embedded perl didn't work, why he would he modify md-mx-ctrl?

Regards,
KAM

> >I will be changing the multiplexor so that when you run:
> >
> > md-mx-ctrl reread
>
> Does this mean the embedded perl should not be used *at all* on these
> platforms, or just that the normal reread method will not work?

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] Slave 0 stderr

2004-06-07 Thread Will McCorkle
I just started getting the below errors in my log. Any idea why the started showing up 
all of a sudden and why I am getting them?

Slave 0 stderr: Subroutine X_LIBRARY_head_test redefined at 
/usr/local/share/spamassassin/20_head_tests.cf, rule X_LIBRARY, line 6
Slave 0 stderr: Subroutine __IDENT_NOBODY_LOCALHOST_head_test redefined at 
/usr/local/share/spamassassin/20_meta_tests.cf, rule __IDENT_NOBODY_LOCALHOST, line 6
mimedefang-multiplexor: Slave 0 stderr: Subroutine X_VMP_TEXT_head_test redefined at 
/usr/local/share/spamassassin/20_head_tests.cf, rule X_VMP_TEXT, line 6. Subroutine 
RATWARE_OE_PI_head_test redefined at /usr/local/share/spamassassin/20_ratware.cf, rule 
RATWARE_OE_PI, line 6. Subroutine __OPT_HEADER_SUBJ_head_test redefined at 
/usr/local/share/spamassassin/20_head_tests.cf, rule __OPT_HEADER_SUBJ, line 6. 
Subroutine __CT_head_test redefined at /usr/local/share/spamassassin/20_head_tests.cf, 
rule __CT, line 6. Subroutine RCVD_BY_QVES_COM_head_t

Thank You
Will McCorkle
Systems Admin.
DG Systems (Dallas)
972-581-2119


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Bayesian analysis not working

2004-06-07 Thread Rich West
As far as your problems with the file locations go, the bayes_path and 
the auto_whitelist_path define the full path, including the file name, 
to the bayes and whitelist databases.

In other words, you want to define the full path and file name for each 
of those settings:
bayes_path/var/spool/MIMEDefang/bayes/bayesdb
auto_whitelist_path/var/spool/MIMEDefang/auto_whitelist/auto_whitelist

Where "bayesdb" is the filename for the bayes database, and 
auto_whitelist is the filename for the auto_whitelist.

-Rich
Daniel Kasak wrote:
I'm trying to activate bayesian analysis.
My /etc/mail/spamassassin/sa-mimedefang.cf:
required_hits   7
ok_locales  en
rewrite_subject 0
report_header 1
skip_rbl_checks 0
use_bayes   1
auto_learn  1
bayes_path  /var/spool/MIMEDefang/bayes
bayes_file_mode 0666
auto_whitelist_path /var/spool/MIMEDefang/auto_whitelist
auto_whitelist_file_mode0666
bayes_min_ham_num   20
bayes_min_spam_num  20
Spamassassin is working, minus bayesian analysis. I get the following 
2 lines in all email:

X-Spam-Score: 0.675 () HOME_EMPLOYMENT,WORK_AT_HOME
X-Scanned-By: MIMEDefang 2.38
But nothing about bayesian analysis.
With the above settings, I have the following in /var/spool/MIMEDefang:
proto MIMEDefang # ls -l
total 1245
drwxr-xr-x  2 defang users  48 May 20 23:47 auto_whitelist
-rw---  2 defang users   12288 May 20 23:49 auto_whitelist.dir
-rw---  2 defang users   12288 May 20 23:49 auto_whitelist.pag
drwxr-xr-x  2 defang users  48 May 22 10:38 bayes
-rw-rw-rw-  1 defang users  626688 May 22 10:28 bayes_seen
-rw-rw-rw-  1 defang users 1236992 May 22 10:28 bayes_toks
srwxrwxrwx  1 defang users   0 Apr 13 19:25 clamd.sock
-rw---  1 defang users   6 May 22 10:37 
mimedefang-multiplexor.pid
srw---  1 defang users   0 May 22 10:37 
mimedefang-multiplexor.sock
-rw---  1 defang users   6 May 22 10:37 mimedefang.pid
srwx--  1 defang users   0 May 22 10:37 mimedefang.sock
proto MIMEDefang #
I created the 2 directories 'auto_whitelist' and 'bayes', but instead 
of using them, things seem to get dumped in the top-level directory.
Also when I run 'sa-learn' the bayes files above get created by root, 
so I chown then to defang. I assume there is a better way of doing this?
Maybe running sa-learn as the defang user?

Anyway, I have run 'sa-learn' and learned about 50 spam messages, and 
a couple of hundred ham messages.

What else should I be looking for? 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: Unsafe embedded Perl (was RE: [Mimedefang] [PATCH] Memleak bug in mimedefang found and fixed)

2004-06-07 Thread Kelson Vibber
At 07:06 PM 6/4/2004, David F. Skoll wrote:
I will be changing the multiplexor so that when you run:
md-mx-ctrl reread
you get a warning message if you're using the embedded Perl interpreter
on an unsafe platform.  That should help bring the problem to light
more quickly.
Does this mean the embedded perl should not be used *at all* on these 
platforms, or just that the normal reread method will not work?

Kelson Vibber
SpeedGate Communications  

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Embedded images

2004-06-07 Thread Brent Bates
I commented out Anomy and my problem of removing external links to image
files went away.  Thanks for the help

  Brent


> A) See http://mailtools.anomy.net/
> B) Don't use Anomy.
>

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Outgoing Messages are blocked

2004-06-07 Thread Fernando Gleiser
On Mon, 7 Jun 2004, Vivek Kumar wrote:

> Hi all,
>
> It seems that Spamassassin/Mimedefang is checking and blocking outgoing
> messages also. We found few mails in spamdrop account which were
> outbound messages.

Use filter_relay() to prevent mimedefang from filtering mail from your
users. Or add whitelist_from_recv rules.

> Also Our HRD department gets lots of  Resume from
> Monster so all the resumes from monster are getting blocked. I was
> looking into the rules to see if "Monster resume 134443." is blocked
> but i didn't see it.

It's a common problem with many online forms/reports. They look and smell
like spam, even if they aren't. Do as above and add rules to whitelist
them.



Fer
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] Outgoing Messages are blocked

2004-06-07 Thread Vivek Kumar
Hi all,

It seems that Spamassassin/Mimedefang is checking and blocking outgoing
messages also. We found few mails in spamdrop account which were
outbound messages. Also Our HRD department gets lots of  Resume from
Monster so all the resumes from monster are getting blocked. I was
looking into the rules to see if "Monster resume 134443." is blocked
but i didn't see it.
Any suggestions ?? You help is highly appreciated..

Thanks

Vivek


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang