Re: [Mimedefang] watch-mimedefang (SSH Security).

2010-02-16 Thread -
The superuser (unix) or administrator (windows) should NEVER be permitted login 
access via SSH.  If you need such access, log in as an unprivileged user and 
request an access upgrade (i.e. "su" in unix).

Didn't our mailing-list host administrator declare this thread closed (as off 
topic)...?

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] stripping Received headers based on authentication

2010-02-16 Thread Tom H

Hi All,

I've heard some suggestions not to do this, but I plan along with gmail
and some others to do it anyway... ;-)

I would like to strip off any headers for my connection to my own smtp
server, which are authenticated.

So I have enabled filter_sender - however filter sender will not allow
me to run action_delete_header there, though I can detect authenticated
user using
"if (  $SendmailMacros{auth_authen} ) {" which seems to detect
my authenticated users correctly...

I get the error message "action_delete_header called outside of message
context", and the header remains.

I left the "read_commands_file() in filter_sender, and tried again with
the same code in filter end, but I get a "Milter delete (noop): header:
Received" message in the logs, and the Received header remains.

Is it possible to remove "Received headers" in the mimdefang filter, or
are they added afterwards?

Thanks,
Tom




___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] watch-mimedefang

2010-02-16 Thread Jan-Pieter Cornet

Op 16 feb 2010, om 21:30 heeft David F. Skoll het volgende geschreven:

However, for cygwin, it keeps defaulting to
my windows user and not "root" and that's the problem.


Just use the right Control Command entry; see the watch-mimedefang  
man page.



Or, specify the right user in the ssh_config file, like this:

Host your-mimedefang-running-host.domain.tld
User root

On unix, the ssh config file is in $HOME/.ssh/config. I suppose  
there's something similar on cygwin.


--
Jan-Pieter Cornet 
"People are continuously reinventing the flat tyre".




___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] watch-mimedefang

2010-02-16 Thread David F. Skoll
Cliff Hayes wrote:

> However, for cygwin, it keeps defaulting to
> my windows user and not "root" and that's the problem.

Just use the right Control Command entry; see the watch-mimedefang man page.

-- David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] watch-mimedefang

2010-02-16 Thread Les Mikesell

On 2/16/2010 1:37 PM, Cliff Hayes wrote:

I can ssh from my windows instance of cygwin to the mimedefang server.  I
also established a trust relationship by exchanging ssh keys.  I do that all
the time to automate ssh tasks.  However, for cygwin, it keeps defaulting to
my windows user and not "root" and that's the problem.


Are you doing this from one of the xterms that started when you did a 
'startx'?  You shoud be the local windows user there.  And you probably 
have to have run the mkpasswd and mkgroup commands as shown when you 
installed cygwin so you'll have a home directory for the .xauthority  file.



I can override it if
I type out the ssh command at the command prompt (ssh root@) but when
watch-mimedefang runs, it uses the windows user.


That doesn't make any sense if your ssh command actually worked - you 
should be root on the remote side.  But either you have to permit 
password based logins or you have to have set up the keys for the 
windows user at your end and root at the other.  And you should add the 
-P option to the ssh command line to make sure the X tunneling works.



If I could figure out how
to run cygwin with root user I think it would work.


I just did it on my laptop and it worked as expected - with the cygwin 
side running as my windows user id but logged in as root on the server.


--
  Les Mikesell
   lesmikes...@gmail.com
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] watch-mimedefang

2010-02-16 Thread Cliff Hayes
I can ssh from my windows instance of cygwin to the mimedefang server.  I
also established a trust relationship by exchanging ssh keys.  I do that all
the time to automate ssh tasks.  However, for cygwin, it keeps defaulting to
my windows user and not "root" and that's the problem.  I can override it if
I type out the ssh command at the command prompt (ssh root@) but when
watch-mimedefang runs, it uses the windows user.  If I could figure out how
to run cygwin with root user I think it would work.

-Original Message-
From: mimedefang-boun...@lists.roaringpenguin.com
[mailto:mimedefang-boun...@lists.roaringpenguin.com]on Behalf Of Les
Mikesell
Sent: Monday, February 15, 2010 11:13 PM
To: mimedefang@lists.roaringpenguin.com
Subject: Re: [Mimedefang] watch-mimedefang


Cliff Hayes wrote:
> Les Mikesell wrote:
>> It is fairly difficult to imagine a box that is still running today that
> couldn't handle a GUI
>
> The 42 servers I manage range in age from old to new, Fedora 4 thru 12,
> ubuntu, and Windows.  None will ever see a "user" who would benefit from a
> GUI ... only me remoting in to tweak/repair.

The server themselves don't need a GUI - but having one on the machine where
you
have tools to manage them will make your work easier even if all you do is
run a
bunch of xterms with ssh to the others.

 > IMHO GUIs are great for users but
> unnecessary overhead on servers.  Three of the boxes are Windows so I have
> no choice there.  I must be in the minority since there appears to be no
> call for a web version of watch-mimedefang.

The nature of X is that you can run single applications in a remote window,
so
all you need on the servers are the basic X libs, and they are only loaded
when
you run a graphic application.  The real overhead is in the desktop
environment
which can be elsewhere.

> I'll have to give up on the
> cgywin as it took half a day (and 1G of hard drive space) to attempt to
set
> up the logistics for it and I still can't establish the ssh relationship
> necessary for it to work.

Most of the time goes into building and installing all the local fonts.  How
did
it fail for you?  Did 'startx' give you the X screen with some open xterms?
Could you 'ssh -Y' to your server from one of them?  If you got that far,
starting a remote program should have worked.  You should even be able to
use
putty on the windows side if you set up the X tunnel option - I've forgotten
if
you need to set up the DISPLAY environment.

--
   Les Mikesell
lesmikes...@gmail.com




___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] ADMINISTRIVIA: Please kill off thread... Re: OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread David F. Skoll
Hello,

Although I was guilty enough to start and contribute this thread, I'm
luckily also hypocritical enough to request that it end.

Thanks,

David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Ben Kamen

On 2/16/2010 10:51 AM, Les Mikesell wrote:


Vista is irrelevant. If you read any trade literature at all you would
never have touched it in the first place. Just like any X.0 version of a
linux distribution. But realistically, the problem in Vista was changing
the driver interface, something that Linux does with every re-compile
and enterprise distributions have to work around by backporting some of
the updates into old kernels without breaking them.


It's not totally irrelevant because the changes they made (and tried testing on 
the rest of us) to my guess, made it into Windows7.

Having more Hollywood control of my PC is not desired. That's all I was saying 
with Vista. I'm glad it's dead.

 -Ben

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Dave O'Neill

On Tue, Feb 16, 2010 at 10:51:21AM -0600, Les Mikesell wrote:

I take it you don't read the changelogs on linux distribution updates to  
see the historic bugs that are still being found and fixed.  You should.


Or, read the MIMEDefang changelog to see the ten-year-old bug fixed in 
-BETA4 :)


Cheers,
Dave
--
Dave O'Neill Roaring Penguin Software Inc.
+1 (613) 231-6599http://www.roaringpenguin.com/
For CanIt technical support, please mail: supp...@roaringpenguin.com
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] MIMEDefang 2.68-BETA-5 is available

2010-02-16 Thread David F. Skoll
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

Unfortunately, it seems we need just *one more* beta before 2.68-final
can be released.

Please try 2.68-BETA-5 available at http://www.mimedefang.org/download.
I promise that if this one's good, it will be 2.68-final. :-)

Changes since 2.67 follow.

Regards,

David.

==
2010-02-16  David F. Skoll  

* MIMEDefang 2.68-BETA-5

* Detect Sys::Syslog vs. Unix::Syslog at run-time rather than
when running ./configure.

* Fix a crash with embedded Perl on FreeBSD with Perl 5.10.0.
Problem noted by Martin Blapp.

==
2010-02-03  David F. Skoll  

* MIMEDefang 2.68-BETA-4.

* Bug fix: Don't change Content-Disposition to "inline" by default.
This was causing weird bugs with Outlook iCalendar attachments:

http://lists.roaringpenguin.com/pipermail/mimedefang/2006-December/031525.html
http://lists.roaringpenguin.com/pipermail/mimedefang/2004-November/025461.html

* Fix a really stupid segmentation fault when handling multiline
replies.  Bug found and fixed by Michiel Brandenburg.

* Make relay_is_blacklisted and relay_is_blacklisted_multi handle
IPv6 addresses.  Patch loosely based on submission by Michiel
Brandenburg.

* Guard the rewriting of IPv4-compatible IPv6 addresses to plain IPv4
with N6_IS_ADDR_V4MAPPED and IN6_IS_ADDR_V4COMPAT tests.

==
2009-12-30  David F. Skoll  

* MIMEDefang 2.68-BETA-3.

* Work around File::Spec::Unix's behaviour of caching
$ENV{TMPDIR}.  (I consider this a bug; see
https://rt.cpan.org/Ticket/Display.html?id=53236)

* Don't add a To: line for SpamAssassin's benefit; adding such
a line could mask a useful SpamAssassin rule.

==
2009-12-30  David F. Skoll  

* MIMEDefang 2.68-BETA-2.

* Try hard not to lose any STDERR messages before reaping a slave.

* Make the C code call smfi_setmlreply if (1) the milter library
supports it and (2) the Perl code returns a multi-line reply.

* Convert an IPv6-mapped IPv4 address to pure IPv4.  That is,
convert :::a.b.c.d simply to a.b.c.d.

* Make rm_r more robust.

* Set TMPDIR environment variable to $workdir/tmp before
scanning; this should make Perl temporary files use the ramdisk.

* Various code cleanups.

* When creating the Mail::SpamAssassin object, set user_dir
to /var/spool/MD-Quarantine.  Fixes problems with SpamAssassin
3.3.0.

==
2009-03-31  David F. Skoll  

* MIMEDefang 2.68-BETA-1.

* Make "Overlong line in RESULTS file" a permanent, rather than
temporary, failure.

* Eliminate a possible race condition in SIGTERM handling.  On
busy, underpowered servers, this could result in the multiplexor
spontaneously terminating all slaves and unlinking its socket.

* Check for both POLLIN and POLLHUP if we use poll()

* Fix bug in closing of file descriptors after forking; we'd
sometimes close our status descriptor by mistake.

* Remove some pointless fcntl() calls.

* Fix bug with Perl 5.10 and embedded perl, mentioned at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=516913
NOTE: This is a bug in Perl, not MIMEDefang, but we need to work
around it.

* Consume and log any STDERR output even if slave has terminated.

==
2009-01-06  David F. Skoll  

* VERSION 2.67 RELEASED



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFLes/IwYQuKhJvQuARAjMyAJ9U4aKPleKrUSeOkAKaJCZ0lbToUQCgo390
kGrIt8MxNqG6E1bojacjJHI=
=YWTP
-END PGP SIGNATURE-
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread David F. Skoll
Les Mikesell wrote:

[...]

> Vista is irrelevant. If you read any trade literature at all you would
> never have touched it in the first place.  Just like any X.0 version of
> a linux distribution.  But realistically, the problem in Vista was
> changing the driver interface, something that Linux does with every
> re-compile and enterprise distributions have to work around by
> backporting some of the updates into old kernels without breaking them.

Well.  Linux is not that bad.  Especially on Debian, it's very rare to
have breakage on upgrade.

Anyway... my original point is that Linux desktops have excellent
tools for remotely managing Linux servers.  Running watch-mimedefang
or watch-multiple-mimedefangs on a Linux desktop lets you easily
monitor one or dozens of MIMEDefang servers.  It seems to me that it's
far simpler to just install Linux to get all the convenient tools
(even if you do it in a virtual machine) than to fight with evil hacks
like Cygwin to manage the server.  Cygwin is an admirable piece of
work, but it's in the same category of admirability as toilet-training a
ten-month-old... yes, it can probably be done with much cursing and
sweat, but for the love of all things sane... WHY???

The impedance mismatch between a Windows desktop and a Linux server just
seems too high to accept.

Regards,

David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Les Mikesell

On 2/16/2010 10:33 AM, Ben Kamen wrote:

On 2/16/2010 10:02 AM, Les Mikesell wrote:


Windows 2000 is a decade old now - and was not even intended to be a
desktop OS. And you need to defrag after making big disk changes. If you
don't already see why this is a bad comparision, try installing a
10-year old Linux server distro and try to update it to a current
desktop piecemeal.


So what MS gives us now is a modern OS in which they STILL patch
regularly to fix things that should have been fixed a long time ago


As does every supplier of complex code.  It's a feature.


(and I'm not saying Linux is immune, but there's a level of pride for
producing solid code that comes with the personally driven contributers
of the OSS community than any company worried about the bottom line.)


I take it you don't read the changelogs on linux distribution updates to 
see the historic bugs that are still being found and fixed.  You should.



But even more offensive is the level of control that was attempted in
Vista that has lost its fanfare and is probably successfully implemented
into Win7. (and now with MS inserting the new version of WGA which
caused a lot of false positives last time in a fashion even more
deceitful than that with WGA.)

As an example: http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.html

Sigh.


Vista is irrelevant. If you read any trade literature at all you would 
never have touched it in the first place.  Just like any X.0 version of 
a linux distribution.  But realistically, the problem in Vista was 
changing the driver interface, something that Linux does with every 
re-compile and enterprise distributions have to work around by 
backporting some of the updates into old kernels without breaking them.


--
  Les Mikesell
lesmikes...@gmail.com
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Ben Kamen

On 2/16/2010 10:02 AM, Les Mikesell wrote:


Windows 2000 is a decade old now - and was not even intended to be a
desktop OS. And you need to defrag after making big disk changes. If you
don't already see why this is a bad comparision, try installing a
10-year old Linux server distro and try to update it to a current
desktop piecemeal.


So what MS gives us now is a modern OS in which they STILL patch regularly to 
fix things that should have been fixed a long time ago (and I'm not saying 
Linux is immune, but there's a level of pride for producing solid code that 
comes with the personally driven contributers of the OSS community than any 
company worried about the bottom line.)

But even more offensive is the level of control that was attempted in Vista 
that has lost its fanfare and is probably successfully implemented into Win7. 
(and now with MS inserting the new version of WGA which caused a lot of false 
positives last time in a fashion even more deceitful than that with WGA.)

As an example: http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.html

Sigh.

 -Ben
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Les Mikesell

On 2/16/2010 8:45 AM, wbr...@e1b.org wrote:



The frustration of having to run a Windows desktop would drive me insane.


Making the switch caused some grief, but I think it was worth it in the
long run.  If nothing else, patches don't eventual bog the system down like
they do in Windows.  If you don't believe me, take a fresh machine and
install Windows 2000 on it.  Time how long it takes to boot.  Then do
nothing but patch it.  Alot.  Reboot repeatedly.  Burn most of a day doing
so.  Time how long it takes to boot after all current patches are applied.
Last time I did this, it took about 3 times longer to boot.


Windows 2000 is a decade old now - and was not even intended to be a 
desktop OS. And you need to defrag after making big disk changes. If you 
don't already see why this is a bad comparision, try installing a 
10-year old Linux server distro and try to update it to a current 
desktop piecemeal.



Now when my laptop takes longer to boot, it's because I added something.


With windows XP, windows 7 or OSX on a laptop, you generally close the 
lid to sleep, open again to wake up nearly instantly with local 
networking established automatically and they've done that well for most 
of a decade - so you rarely need to reboot.  It's possible to make some 
of the current linux distros do this if you are lucky, but it's not a 
given.  Having said that, I prefer Linux on servers, but I'm perfectly 
happy to run the screens remotely with freenx/NX (easier than fighting 
with distros that don't included Nvidia drivers anyway) and to test 
experimental stuff under VMware where it is irrelevant what OS is 
hosting natively.


--
  Les Mikesell
   lesmikes...@gmail.com

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread Ben Kamen

On 2/16/2010 8:45 AM, wbr...@e1b.org wrote:

Making the switch caused some grief, but I think it was worth it in the
long run.  If nothing else, patches don't eventual bog the system down like
they do in Windows.  If you don't believe me, take a fresh machine and
install Windows 2000 on it.  Time how long it takes to boot.  Then do
nothing but patch it.  Alot.  Reboot repeatedly.  Burn most of a day doing
so.  Time how long it takes to boot after all current patches are applied.
Last time I did this, it took about 3 times longer to boot.


That's because Linux patches FIX things.

Windows patchs might fix things... O it might be installing covert 
windows software
that allow Microsoft, the NSA, SOME government with monetary stake in MS or, or 
even the execs in HOLLYWOOD to wreak control of your PC and it's content.

G...

 -Ben

--
Ben Kamen - O.D.T., S.P.
=
Email: bkamen AT benjammin DOT net  Web: http://www.benjammin.net
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] OT: Choice of desktop OS (was Re: watch-mimedefang)

2010-02-16 Thread WBrown
DFS wrote on 02/12/2010 06:54:27 PM:

> I must confess, I've never understood people who administer Linux
servers,
> yet don't run a Linux desktop.  Heck, run Linux in VMWare if you must,
> but at least use proper desktop tools to administer a Linux server.

When I first started using Linux for production servers (Roaring Penguin's
CanIt Pro), I wasn't as comfortable w/ Linux as I knew I should be.  I
switched my day to day laptop to Linux and for the Windows apps I have to
run, I use VMWare Workstation.  VMWare player was not available back then,
and I've kept to pay version for the extra features.

> The frustration of having to run a Windows desktop would drive me insane.

Making the switch caused some grief, but I think it was worth it in the
long run.  If nothing else, patches don't eventual bog the system down like
they do in Windows.  If you don't believe me, take a fresh machine and
install Windows 2000 on it.  Time how long it takes to boot.  Then do
nothing but patch it.  Alot.  Reboot repeatedly.  Burn most of a day doing
so.  Time how long it takes to boot after all current patches are applied.
Last time I did this, it took about 3 times longer to boot.

Now when my laptop takes longer to boot, it's because I added something.

Confidentiality Notice: This electronic message and any attachments may contain 
confidential or privileged information, and is intended only for the individual 
or entity identified above as the addressee. If you are not the addressee (or 
the employee or agent responsible to deliver it to the addressee), or if this 
message has been addressed to you in error, you are hereby notified that you 
may not copy, forward, disclose or use any part of this message or any 
attachments. Please notify the sender immediately by return e-mail or telephone 
and delete this message from your system.   
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] disable spamcheck for localhost and stream_by_domain problem

2010-02-16 Thread David F. Skoll
Marcus wrote:

> I'd like to disable spamassassin checks for all emails sent from the
> host mimedefang is running on (= localhost). But how can I distinguish
> between an email sent by localhost and an email which is resubmitted via
> localhost because of mimedefang's stream_by_domain function. Checking
> $RelayAddr for 127.0.0.1 doesn't help here.


  man mimedefang-filter

Search for PRESERVING RELAY INFORMATION

Although that man page talks about secondary MX hosts, the technique
can work for detecting locally-submitted vs. resent mail as well
if you consider 127.0.0.1 as a secondary MX.

Regards,

David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] watch-mimedefang

2010-02-16 Thread David F. Skoll
Cliff Hayes wrote:

> Les Mikesell wrote:
>> It is fairly difficult to imagine a box that is still running today that
> couldn't handle a GUI

That's not the point.  Any software installed on a machine is a potential
vulnerability.  I would never install X on a server.

> I also tried xming.  I ran the install.  Then whenever I run the launcher,
> it prompts me for a few things then promtply disappears.  If anyone has
> gotten xming and watch-mimedefang to work and is willing to share a bit more
> detail I'd love to give it another try.

Wouldn't it be easier just to run a Linux desktop?  Seriously?

-- David.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang