[Mimedefang] Validating sender domain opinion

[Steffen Kaiser]

Hello,
there has been talk on the list placing 127.** or some other private 
address as tarpit as MX record with least precedence.

What about a DNS configuration with an invalid private MX as first one?
I just test a sender validation by grabbing all MX's records and check if 
the first one is an external address; doing so I found this domain:

; <<>> DiG 9.2.4rc5 <<>> -t mx mox.de.
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29441
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 4
;; QUESTION SECTION:
;mox.de.IN  MX
;; ANSWER SECTION:
mox.de. 252 IN  MX  30 mail.portunity.de.
mox.de. 252 IN  MX  10 192.168.100.251.
mox.de. 252 IN  MX  20 mail.mox.de.
These are not spammers, BTW.
I would consider such setup invalid and my code had rejected the mail, if 
it were enable. -- I mean, why does they try to deliver mail to one of my 
hosts, private addresses are "my hosts", aren't they?
I ignore the fact here intentionally, that they do point to a numerical 
address rather than a symbolic host.

What do you think?
Bye,
--
Steffen Kaiser
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] More filter_recipient Qs...

[Ashley M. Kirchner]

David F. Skoll wrote:
Perhaps the message had several recipients, some of whom were valid?
Otherwise, the filter_recipient function is not working -- if all
recipients are invalid, the body-filtering functions should never be
called.
 

   I'd say it is, or at least occasionally, because I can see it 
bouncing messages for invalid recipients.  Those that get quarantined, I 
can see who the recipients are and none of them are valid, yet it gets 
quarantined because of a high spam score.

--
W | I haven't lost my mind; it's backed up on tape somewhere.
 +
 Ashley M. Kirchner    .   303.442.6410 x130
 IT Director / SysAdmin / WebSmith . 800.441.3873 x130
 Photo Craft Laboratories, Inc.. 3550 Arapahoe Ave. #6
 http://www.pcraft.com . .  ..   Boulder, CO 80303, U.S.A.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] More filter_recipient Qs...

[David F. Skoll]

On Thu, 8 Jul 2004, Ashley M. Kirchner wrote:

> Because I don't bounce all e-mails that have been tagged as spam - I
> send them to the quarantine folder.  And I'm seeing a lot of them in
> there that were destined for invalid recipients.

Perhaps the message had several recipients, some of whom were valid?
Otherwise, the filter_recipient function is not working -- if all
recipients are invalid, the body-filtering functions should never be
called.

Regards,

David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] More filter_recipient Qs...

[Ashley M. Kirchner]

David F. Skoll wrote:
What gives you that impression?  filter_recipient is called before any
of the body filtering functions.
 

   Because I don't bounce all e-mails that have been tagged as spam - I 
send them to the quarantine folder.  And I'm seeing a lot of them in 
there that were destined for invalid recipients.  This tells me it's 
checking for spam first before it checks for valid recipient.  
Otherwise, why would it quarantine a spam message if the recipient is 
invalid anyway?

   Mind you, I'm well aware that it could also be something in my 
filter that's causing this behavior, which is why I asked where I should 
start looking and possibly find this problem.

--
W | I haven't lost my mind; it's backed up on tape somewhere.
 +
 Ashley M. Kirchner    .   303.442.6410 x130
 IT Director / SysAdmin / WebSmith . 800.441.3873 x130
 Photo Craft Laboratories, Inc.. 3550 Arapahoe Ave. #6
 http://www.pcraft.com . .  ..   Boulder, CO 80303, U.S.A.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] More filter_recipient Qs...

[David F. Skoll]

On Thu, 8 Jul 2004, Ashley M. Kirchner wrote:

> I'm noticing that mimedefang will do spam check prior to doing a
> recipient check.

What gives you that impression?  filter_recipient is called before any
of the body filtering functions.

--
David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] Patch for Kaspersky 5 kavscanner support

[Herbert Straub]

Hallo,

we working with Kaspersky Antivirus version 5.0 and using
/opt/kav/bin/kavscanner. The kavscanner V5.0 using other return codes, then the
old kavscanner, therefore I am creating three subroutines
entity_contains_virus_kavscanner5, message_contains_virus_kavscanner5 and
interpret_kavscanner5_code and a modified initialize_virus_scanner_routines.

The kavscanner component return codes (from the manual):
During its work, the kavscanner component can return the following codes:
0  No viruses were detected.
5  All the infected objects were cleaned.
10 Password-protected archives were detected.
15 Corrupted files were detected.
20 Suspicious files were detected.
21 Files with code similar to that of known viruses were detected.
25 Infected files were detected.
30 System error during file scanning.
50 Unable to load the anti-virus database (the path specified in the
   configuration file was not found).
55 Anti-virus database corrupted.
60 The date of the anti-virus database is beyond the license key
   expiration period.
64 The license information is missing or no license key was found at
the
   path specified in the configuration file.
65 Unable to load the configuration file.
70 The kavscanner component is corrupted.


And the patch:


--- /root/mimedefang.pl.ORIG2004-07-08 23:28:21.282620168 +0200
+++ /usr/bin/mimedefang.pl  2004-07-08 23:41:46.045277648 +0200
@@ -91,6 +91,7 @@
 
 $Features{'Virus:AVP'}  = ('/bin/false' ne '/bin/false' ? '/bin/false' :
0);
 $Features{'Virus:AVP5'}  = ('/bin/false' ne '/bin/false' ? '/bin/false' :
0);
+$Features{'Virus:kavscanner5'}  = ('/bin/false' ne '/bin/false' ?
'/bin/false' : 0);
 $Features{'Virus:CLAMAV'}   = ('/bin/false' ne '/bin/false' ? '/bin/false' :
0);
 $Features{'Virus:CLAMD'}= ('/bin/false' ne '/bin/false' ? '/bin/false' :
0);
 $Features{'Virus:FPROT'}= ('/bin/false' ne '/bin/false' ? '/bin/false' :
0);
@@ -114,6 +115,14 @@
 $Features{'Path:SPOOLDIR'}  = '/var/spool/MIMEDefang';
 $Features{'Path:CONFDIR'}   = '/etc/mail';
 
+# Herbert Straub
+$Features{'Virus:kavscanner5'} = '/opt/kav/bin/kavscanner';
+# $Features{'Virus:CLAMD'} = '/usr/bin/clamdscan';
+$Features{"SpamAssassin"} = 0;
+$Features{"Unix::Syslog"} = 0;
+# Herbert Straub
+
+
 sub rfc2822_date();
 sub header_timezone($);
 
@@ -3461,6 +3470,103 @@
 }
 
 #***
+# %PROCEDURE: entity_contains_virus_kavscanner5
+# %ARGUMENTS:
+#  entity -- a MIME entity
+# %RETURNS:
+#  1 if entity contains a virus as reported by Kaspersky 5.x
+# %DESCRIPTION:
+#  Runs the Kaspersky 5.x kavscanner program on the entity.
+#***
+sub entity_contains_virus_kavscanner5 ($) {
+unless ($Features{'Virus:kavscanner5'}) {
+   md_syslog('err', "$MsgID: Kaspersky kavscanner5 not installed on this
system");
+   return (wantarray ? (1, 'not-installed', 'tempfail') : 1);
+}
+
+my($entity) = @_;
+my($body) = $entity->bodyhandle;
+
+if (!defined($body)) {
+   return (wantarray ? (0, 'ok', 'ok') : 0);
+}
+
+# Get filename
+my($path) = $body->path;
+if (!defined($path)) {
+   return (wantarray ? (999, 'swerr', 'tempfail') : 1);
+}
+
+# Run kavscanner5
+my($code, $category, $action) =
run_virus_scanner($Features{'Virus:kavscanner5'} . " -q -o  $CWD/DAEMON.RPT
$path 2>&1","INFECTED");
+
+if ($action ne 'proceed') {
+   return (wantarray ? ($code, $category, $action) : $code);
+}
+return (wantarray ? interpret_kavscanner5_code($code) : $code);
+}
+
+#***
+# %PROCEDURE: message_contains_virus_kavscanner5
+# %ARGUMENTS:
+#  Nothing
+# %RETURNS:
+#  1 if any file in the working directory contains a virus
+# %DESCRIPTION:
+#  Runs the Kaspersky 5.x kavscanner5 program on the working directory
+#***
+sub message_contains_virus_kavscanner5 () {
+unless ($Features{'Virus:kavscanner5'}) {
+   md_syslog('err', "$MsgID: Kaspersky kavscanner5 not installed on this
system");
+   return (wantarray ? (1, 'not-installed', 'tempfail') : 1);
+}
+
+# Run kavscanner5
+my($code, $category, $action) =
run_virus_scanner($Features{'Virus:kavscanner5'} . " -q -o $CWD/DAEMON.RPT
$CWD/Work/* 2>&1","INFECTED");
+
+if ($action ne 'proceed') {
+   return (wantarray ? ($code, $category, $action) : $code);
+}
+return (wantarray ? interpret_kavscanner5_code($code) : $code);
+}
+
+sub interpret_kavscanner5_code ($) {
+my($code) = @_;
+# From info obtained from:
+# man kavscanner (/opt/kav/man/kavscanner.8)
+
+# OK
+return ($code, 'ok', 'ok') if ($code == 0);
+
+# infected=25
+if ($code == 25) {
+

[Mimedefang] More filter_recipient Qs...

[Ashley M. Kirchner]

   I'm noticing that mimedefang will do spam check prior to doing a 
recipient check.  Where should I start looking to reverse this order?  
If the recipient doesn't exist, it shouldn't bother to do a spam scan, 
now should it?

--
W | I haven't lost my mind; it's backed up on tape somewhere.
 +
 Ashley M. Kirchner    .   303.442.6410 x130
 IT Director / SysAdmin / WebSmith . 800.441.3873 x130
 Photo Craft Laboratories, Inc.. 3550 Arapahoe Ave. #6
 http://www.pcraft.com . .  ..   Boulder, CO 80303, U.S.A.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] That didn't work right...

[Ashley M. Kirchner]

Jim McCullars wrote:
 Note that if Engineering or Sales changes their mail host name, you will
have to change your filter appropriately.
   The good thing about this, is that I'm the one responsible for all 
these servers, so they won't be changing servers without my 
knowledge...because I'd be the one doing it.  :)

   Thanks for the code!
--
W | I haven't lost my mind; it's backed up on tape somewhere.
 +
 Ashley M. Kirchner    .   303.442.6410 x130
 IT Director / SysAdmin / WebSmith . 800.441.3873 x130
 Photo Craft Laboratories, Inc.. 3550 Arapahoe Ave. #6
 http://www.pcraft.com . .  ..   Boulder, CO 80303, U.S.A.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] That didn't work right...

[Jim McCullars]

On Thu, 8 Jul 2004, Ashley M. Kirchner wrote:

> different domains.)  How can I have it do the recipient check on the
> correct mail spool?  Right now, in filter_recipient() it's checking
> against only one of the mail spools (that happens to host the most
> domains.)  However, incoming e-mail for any of the domains not hosted on
> that spool gets rejected because it's checking the wrong one.  Am I even

   There is, to my knowledge, no magic silver bullet to do this - you will
have to code your filter rules file to parse out the recipient domain and
query the appropriate downstream smtp server.  If there are only a few
static ones, just code a few "if" statements in filter_recipient() like
these:

if ($recipient =~ /[EMAIL PROTECTED]>?/i) {
return md_check_against_smtp_server($sender, $recipient,
"smtp-in.foo.com", "sales.foo.com")
  }
if ($recipient =~ /[EMAIL PROTECTED]>?/i) {
return md_check_against_smtp_server($sender, $recipient,
"smtp-in.foo.com", "engineering.foo.com")
  }


  Note that if Engineering or Sales changes their mail host name, you will
have to change your filter appropriately.  If you have a lot of MX's, you
will need a more flexible (translation: elaborate) checking scheme in
filter_recipient().

  HTH...

Jim McCullars
University of Alabama in Huntsville


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

RE: [Mimedefang] Globals

[Matthew . van . Eerde]

> +return @mailing_lists if @mailing_lists(); # if already 

should be 
return @mailing_lists if @mailing_lists;
no parantheses.

[EMAIL PROTECTED]  805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] That didn't work right...

[Ashley M. Kirchner]

   Okay, I figured out why my filter_recipient check wasn't working.  
All this time I was telling MD to reread it's files (md-mx-ctrl reread) 
when all along I was supposed to restart the service for the changes to 
take effect.  Duh me...didn't even think about it till now.

   Now for the next hurdle.  Like I mentioned in my previous e-mail, 
the main MX server receives e-mail for several domains, and it then 
forwards data to the appropriate mail spool (different machines for 
different domains.)  How can I have it do the recipient check on the 
correct mail spool?  Right now, in filter_recipient() it's checking 
against only one of the mail spools (that happens to host the most 
domains.)  However, incoming e-mail for any of the domains not hosted on 
that spool gets rejected because it's checking the wrong one.  Am I even 
making sense?  Oy...

--
W | I haven't lost my mind; it's backed up on tape somewhere.
 +
 Ashley M. Kirchner    .   303.442.6410 x130
 IT Director / SysAdmin / WebSmith . 800.441.3873 x130
 Photo Craft Laboratories, Inc.. 3550 Arapahoe Ave. #6
 http://www.pcraft.com . .  ..   Boulder, CO 80303, U.S.A.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

RE: [Mimedefang] Globals

[Matthew . van . Eerde]

> From: Rich West [mailto:[EMAIL PROTECTED]
+ my @mailing_lists = ();
> sub get_lists
> {
+return @mailing_lists if @mailing_lists(); # if already cached in this
slave, return
+# otherwise look it up
>open (LISTS, "/var/mailman/bin/list_lists -b|")
>  or die "Could not execute '/var/mailman/bin/list_lists -b'.\n";
>@lists = ;
>close(LISTS);
+@mailing_lists = @lists; # cache
>return (@lists);
> }

It's possible to get fancier - you could have a global $lastgotlistsat to
hold the date/time of the last pull, and re-pull if that was sufficiently
long ago.

[EMAIL PROTECTED]  805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Globals

[Michael Faurot]

In article <[EMAIL PROTECTED]> you wrote:

> The goal is to have it such that our hosted mailing lists do not get 
> passed through the spamassassin plugin since the lists are subscription 
> based only.
[...]
> Our mailing lists do not change frequently, but new ones do get added 
> and older ones do get removed/archived.  So, maintaining the dynamic 
> nature is relatively important. 

Why not create an external Perl program to run out of cron and then have it
execute the Mailman list_lists program?  In the external program have it
parse the output from lists_lists the way you want it and then store
that in a tied db file.  Within mimedefang-filter, have it tie into the same
db file to determine what's a valid list.  

If you're not familiar with using a tied db file, look through the
archives of the list for the various greylist implementations for code
samples.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] check_against_smtp caching?

[Michael Faurot]

> That's not hard to do with a tied db in mimedefang-filter.

This is a cool idea and wasn't very difficult to put together using a
tied db file.  I use the recipient address converted to all lowercase and
striped of angle brackets to act as the key.  For the value, I store a
positive timestamp if the recipient actually exists on the remote server
and a negative timestamp if it doesn't.  I'm then using an external Perl
program run out of cron to periodically expire things.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] Globals

[Rich West]

I've mucked around with the mimedefang-filter.pl pretty heavily in the 
past, but I just wanted to ask a quick question before I tried this one out.

The goal is to have it such that our hosted mailing lists do not get 
passed through the spamassassin plugin since the lists are subscription 
based only.  Now, rather inefficiently, I have the code below, but it 
litterally populates the array @lists with each and every call.  
Ideally, I would like to put the array and its contents in the global 
namespace to avoid the generation of the contents of the array (eg: 
get_lists) each time an email is processed.

Our mailing lists do not change frequently, but new ones do get added 
and older ones do get removed/archived.  So, maintaining the dynamic 
nature is relatively important.  We don't want to restart mimedefang 
just because a mailing list was added or removed, but we CAN live with 
the fact that it may take some time for mimedefang to 'learn' about the 
changes.  In other word, I realize that if the array is populated in the 
global namespace, it is there, unchanged, for the life of the slave, but 
we can live with that, since slaves come and go, and as new ones come, 
they will have the new list of lists. :)

-Rich
#***
# %PROCEDURE: get_list
# %ARGUMENTS:
#  None
# %RETURNS:
#  Array of lists on the system
# %DESCRIPTION:
#  This function fills an array with the names of all of the mailing
#  lists on the system.
#***
sub get_lists
{
  open (LISTS, "/var/mailman/bin/list_lists -b|")
or die "Could not execute '/var/mailman/bin/list_lists -b'.\n";
  @lists = ;
  close(LISTS);
  return (@lists);
}
#***
# %PROCEDURE: is_list
# %ARGUMENTS:
#  listname -- the name of the mailing list
# %RETURNS:
#  boolean - positive if the recipient matches a list name.
# %DESCRIPTION:
#  This function matches the incoming mailing address with a list name.
#  We do not scan the contents of mailing lists as spam.
#***
sub is_list
{
  my($listname) = shift;
  my(@lists) = @_;
  ##
  ## The email address, as it comes in, is surrounded by
  ## brackets.  We have to massage it a little in order to do
  ## proper matching.  eg: '<[EMAIL PROTECTED]>' needs to be 'test'.
  ##
  $listname = (split("\@", $listname))[0];
  $listname = (split("\<", $listname))[1];
   foreach $list (@lists)
  {
 chop($list);
 return 1 if ($list =~ /^$listname/i);
  }
  return 0;
}
sub filter_end ($) {
   my($entity) = @_;
   my(@lists);
   my($blacklist);
...
   if ($RelayAddr eq "127.0.0.1" or $RelayAddr eq 
"mailserver.dotted.ip.address")
   {
  md_graphdefang_log('mail_out',,$RelayAddr);
   }
   else
   {
  # Do not scan any messages going to any of the mailing lists.
  @lists = &get_lists();
  foreach $recipient (@Recipients)
  {
 if (&is_list($recipient,@lists))
 {
md_graphdefang_log('mail_in', , $RelayAddr);
md_graphdefang_log('mailing_list', $hits, $RelayAddr);
return;
 }
  }
   # Spam checks if SpamAssassin is installed
   if ($Features{"SpamAssassin"}) {
...
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] check_against_smtp caching?

[Jim Shewmaker]

> >  I don't suppose there is a way to have some sort of cache for the
> >  md_check_against_smtp_server function?
>
> That's not hard to do with a tied db in mimedefang-filter.
>

I'm just a little gun-shy of anything db, it has been flaking out on my
graphdefang stuff.  Granted I insist on FreeBSD, and have to replace the old
p5-DBD with one from the sleepycat dist., but it still wigs out on me
occasionally.

I'd be willing to try it, I guess, but don't have the time to work it out
right now.  If somebody comes up with an alternative, please do post it here
:)

Thanks, though, hopefully I'll have some time to whip up a function for
this, similar to your sender caching.

Jim Shewmaker

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] OT: SCO

[Kevin A. McGrail]

SCO has not, to my knowledge, openly released the basis for their claims
that Linux (specifically the 2.4 kernel and above) contains code that is
owned by the SCO Group.  The general information is that it involves some
SMP code that IBM allegedly leaked after they had access to the SCO Source
Code but again nothing has been put forth by SCO to A) verify the claim and
B) remove the offending source code from future kernels.

KAM

> You know its funny, I have tried to not get involved in anything relating
> to SCO and their lawsuits because the whole things just aggrevates me. But
> for fun, I listened to SCO's CEO do a radio interview (availble from
> SCO.com), and the first words out of his mouth were "many computers today
> run UNIX, which happens to be owned by the SCO Group". I think I almost
> threwup!!!
>
> He claims that some intellectual property has made its way into Linux.
> Does anybody know specifically what he is talking about? Or is it all just
> BS, and the real issue is that Linux "resembles" SysV UNIX, and therefore
> it is theft of intectual property. Thats like suing a band who sing songs
> that "sound" like Metallica songs!

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] grammar nit

[Kelson Vibber]

At 08:43 AM 7/8/2004, [EMAIL PROTECTED] wrote:
He claims that some intellectual property has made its way into Linux.
Does anybody know specifically what he is talking about? Or is it all just
BS, and the real issue is that Linux "resembles" SysV UNIX, and therefore
it is theft of intectual property. Thats like suing a band who sing songs
that "sound" like Metallica songs!
Well, in 1 1/2 years they've made a lot of noise, but given no 
specifics.  On the rare occasions they've provided examples, those examples 
been debunked quickly (basic functions with obvious solutions, code 
available from other sources under the BSD license, etc.).  At times 
they've claimed to have millions of lines of infringing code, but lately 
they've said they don't know exactly what code was involved, and they can't 
find it without access to IBM's source.  The IBM suit is currently focusing 
on code IBM wrote in-house for things like the JFS filesystem, added to 
AIX, and later added to Linux -- basically claiming that because the code 
touched Unix at some point, SCO owns it.  (And they call the *GPL* 
viral!)  Sort of like suing a band for singing a song that Metallica *covered*.

An excellent resource on this issue, if you're interested, is 
http://groklaw.net .  Also informative: 
http://twiki.iwethey.org/twiki/bin/view/Main/SCOvsIBM and 
http://www.opensource.org/sco-vs-ibm.html

Kelson Vibber
SpeedGate Communications  

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] grammar nit

[john]

You know its funny, I have tried to not get involved in anything relating 
to SCO and their lawsuits because the whole things just aggrevates me. But 
for fun, I listened to SCO's CEO do a radio interview (availble from 
SCO.com), and the first words out of his mouth were "many computers today 
run UNIX, which happens to be owned by the SCO Group". I think I almost 
threwup!!! 

He claims that some intellectual property has made its way into Linux. 
Does anybody know specifically what he is talking about? Or is it all just 
BS, and the real issue is that Linux "resembles" SysV UNIX, and therefore 
it is theft of intectual property. Thats like suing a band who sing songs 
that "sound" like Metallica songs! 

-john



>From : [EMAIL PROTECTED] (John Nemeth)
To : [EMAIL PROTECTED]
Subject : Re: [Mimedefang] grammar nit
Date : Thu, 8 Jul 2004 03:53:56 -0700
> On Nov 27, 10:27am, [EMAIL PROTECTED] wrote:
> } [EMAIL PROTECTED] wrote on 07/07/2004 
03:33:15 
> } PM:
> } 
> } >  Yes...  Now for the history lesson.  :-)  After the breakup of
> } 
> } Thanks for the refresher course in computer history.  I'm sure I read 
most 
> } of that in the trade rags as it was happening, I just could remember 
which 
> } piece went with what...
> } 
> } You summed it up nicely in one (long) paragraph.  thank you.
> 
>  No problem.  Apart from the stuff about DR-DOS, it was from memory
> anyways.
> 
>  I see that I left out a couple of important points.  Novell clains
> that they still own the copyrights and that they just sold licencing
> rights to SCO.  This is a point of contention in the law suits.  Also,
> Novell donated the UNIX trademark to an European standards group
> called, The OpenGroup.  This is a good thing since it means that The
> SCO Group doesn't get to decide who is or isn't allowed to call their
> OS UNIX.  But, rather an impartial third party does, which keeps
> politics out of the trademark usage rights.
> 
> }-- End of excerpt from [EMAIL PROTECTED]
> ___
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> [EMAIL PROTECTED]
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Verifying mailbox...

[Kayne Kruse]

On Thursday 08 July 2004 07:46 am, you wrote:
> [EMAIL PROTECTED] wrote on 07/07/2004 06:21:49

> I will probably still need to use LDAP to extract the addresses from a mix
> of backend mail systems including Lotus Domino, M$ Exchange, First Class,
> and potentially others.  I'm going to look into the code to massage that
> into an access file.

I'd like to pick your brain about FC sometime, I've been wanting to do 
something like you can in exchange with folders for "spam" drops that can be 
retrieved into the sa-learn process.   Email me directly if you are up to it.

Kayne
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] file descriptor scope and embedded perl

[David F. Skoll]

On Tue, 6 Jul 2004, Chris Masters wrote:

> > > I still have the problem of bad file descriptors:

It's a mystery to me.  I can't see any reason for this behavior.
Does it happen all the time, or only after you do something (eg after
you do an "md-mx-ctrl reread")?

Regards,

David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Verifying mailbox...

[WBrown]

[EMAIL PROTECTED] wrote on 07/07/2004 06:21:49 
PM:

> We tried that, but found that LDAP was way too slow. Let me know if you 
> get it going at a reasonable speed.

I've been reconsidering the idea.  I was thinking about using slurpd to 
replicate the data back to a central server, but that gets back to the 
non-realtime lookup.

I will probably still need to use LDAP to extract the addresses from a mix 
of backend mail systems including Lotus Domino, M$ Exchange, First Class, 
and potentially others.  I'm going to look into the code to massage that 
into an access file.


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] FWD: Archive::Zip new version (1.11 alpha version)

[Stephane Lentz]

HI, 

This post might interest people using MIMEDefang with Archive::Zip 
and facing some problems. 
The alpha is available at : http://tinyurl.com/378zr
Report any feedback to  Julian Field <[EMAIL PROTECTED]>
Some people reported it is stable but the more testers the better ...


<<
From: Julian Field <[EMAIL PROTECTED]>
Subject: Archive::Zip new version
To: [EMAIL PROTECTED]

For those people who aren't running mission-critical systems and would be
prepared to lend a hand, please could you download the 1.11 alpha version
of Archive::Zip from the link below. All you need to do is unpack the zip
file,
perl Makefile.PL
make
make test
make install
and then restart MailScanner.

This release contains an important fix to a bug which could have allowed a
remote denial of service attack against your MailScanner servers due to a
particular problem with some corrupted zip files.

Let's get this problem fixed before the bad guys find it too!

If it looks okay, I will include it next month's release. But I will not do
that unless several people have run it for a while and see no problems with
it.

>It is currently posted in the list at http://tinyurl.com/378zr.
>>


-- 
---
Stephane Lentz 
AES TSC
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] grammar nit

[John Nemeth]

On Nov 27, 10:27am, [EMAIL PROTECTED] wrote:
} [EMAIL PROTECTED] wrote on 07/07/2004 03:33:15 
} PM:
} 
} >  Yes...  Now for the history lesson.  :-)  After the breakup of
} 
} Thanks for the refresher course in computer history.  I'm sure I read most 
} of that in the trade rags as it was happening, I just could remember which 
} piece went with what...
} 
} You summed it up nicely in one (long) paragraph.  thank you.

 No problem.  Apart from the stuff about DR-DOS, it was from memory
anyways.

 I see that I left out a couple of important points.  Novell clains
that they still own the copyrights and that they just sold licencing
rights to SCO.  This is a point of contention in the law suits.  Also,
Novell donated the UNIX trademark to an European standards group
called, The OpenGroup.  This is a good thing since it means that The
SCO Group doesn't get to decide who is or isn't allowed to call their
OS UNIX.  But, rather an impartial third party does, which keeps
politics out of the trademark usage rights.

}-- End of excerpt from [EMAIL PROTECTED]
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] check_against_smtp caching?

[Jonas Eckerman]

On Tue, 6 Jul 2004 10:27:20 -0700, Jim Shewmaker wrote:

>  I don't suppose there is a way to have some sort of cache for the
>  md_check_against_smtp_server function?

That's not hard to do with a tied db in mimedefang-filter.

If you check my filter at "http://whatever.frukt.org"; you can see that 
I do cache results of md_check_against_smtp_server when doing sender 
validation. To do the same when checking recipients wouldn't be 
difficult (and I'm thinking of doing just that).

/Jonas

-- 
Jonas Eckerman, [EMAIL PROTECTED]
http://www.fsdb.org/



___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang