RE: [Mimedefang] removing mimedefang

2004-11-26 Thread Andrew Jayes
Hi,
I tried to put 

# Disable ClamAV
$Features{'Virus:CLAMAV'} = 0;

Into filter begin, but when I ran -features clamav was still listed as
'Yes'.

Should I have put it somewhere else or wrapped it up in brackets?

Cheers,

---
Andrew Jayes

 
 
 
 
-Original Message-
From: Alexander Dalloz [mailto:[EMAIL PROTECTED] 
Sent: 25 November 2004 17:21
To: [EMAIL PROTECTED]
Subject: Re: [Mimedefang] removing mimedefang

Am Do, den 25.11.2004 schrieb Andrew Jayes um 16:09:

   Unfortunately the virus scanners that I am using hang on every
mail that comes through the system. Can you
  tell me how I go about removing the scanners and mimedefang so I can
start again? I'm just going for the anti
 spam facility the virus scanners will have to wait.

 Andrew Jayes

Set in your mimedefang-filter entries like:

# Disable ClamAV
$Features{'Virus:CLAMAV'} = 0;
$Features{'Virus:CLAMD'} = 0;

Do so for the anti-virus scanners you want to exclude. Use
mimedefang.pl -features to see the names and your success.

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.9-1.6_FC2smp 
Serendipity 18:17:59 up 5 days, 13:05, load average: 0.35, 0.34, 0.34 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang



___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] removing mimedefang

2004-11-25 Thread Andrew Jayes
Hey,
Unfortunately the virus scanners that I am using hang on every mail 
that comes through the system. Can you tell me how I go about removing the 
scanners and mimedefang so I can start again? I'm just going for the anti spam 
facility the virus scanners will have to wait.

Many thanks,

---
Andrew Jayes
 
 
 
 
 



___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] mimedefang not scanning

2004-08-26 Thread Andrew Jayes
Ok, so as I mentioned in a previous mail the server now seams to be using the 
mimedefang filter, well that is the say that under 'ps axf' I can see the 
mimedefang.pl spawning a uvscan when I send a mail in.

The problem is that uvscan is just hanging, as suggested I have updated uvscan to the 
latest engine and dats but it has made no difference. 

Any other ideas how I can stop it crashing? If not is there a way to remove uvscan 
from the config and let mimedefang just call clamd instead?

The virus scan is just a bonus on this server, mainly I just need the spam filtering. 
It all passes on to an exchange which has its own virus protection. But yes it would 
be nice to have both scanners working.

cheers

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Alexander Dalloz [mailto:[EMAIL PROTECTED] 
Sent: 23 August 2004 18:03
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] mimedefang not scanning

Am Mo, den 23.08.2004 schrieb Andrew Jayes um 18:24:

 Ok, check one done I do have the milter compiled. 
 
   Also ensure that your filter logs all messages, and then check thatin 
 your mail log you do indeed get a message from the filter.
 
 How do I ensure that the filter logs the messages? And where is the maillog for 
 sendmail located, and just in case, is the message from the filter an obvious yea 
 this went through the filter

/var/log/maillog

Yes, processing is obvious from the log.

 Andrew Jayes

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 19:01:54 up 3 days, 14:44, load average: 1.45, 1.69, 1.60 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] mimedefang not scanning

2004-08-26 Thread Andrew Jayes
Hi,
Some additional info for you. I have just had a look through the mail log and 
have found lots of:

Tempfail=1
/var/spool/MIMEDfang/clamd.sock missing
problem running virus scanner code 0.03515625
busy timeout

any comments would be great

cheers

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Andrew Jayes 
Sent: 26 August 2004 11:41
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] mimedefang not scanning

Ok, so as I mentioned in a previous mail the server now seams to be using the 
mimedefang filter, well that is the say that under 'ps axf' I can see the 
mimedefang.pl spawning a uvscan when I send a mail in.

The problem is that uvscan is just hanging, as suggested I have updated uvscan to the 
latest engine and dats but it has made no difference. 

Any other ideas how I can stop it crashing? If not is there a way to remove uvscan 
from the config and let mimedefang just call clamd instead?

The virus scan is just a bonus on this server, mainly I just need the spam filtering. 
It all passes on to an exchange which has its own virus protection. But yes it would 
be nice to have both scanners working.

cheers

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Alexander Dalloz [mailto:[EMAIL PROTECTED] 
Sent: 23 August 2004 18:03
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] mimedefang not scanning

Am Mo, den 23.08.2004 schrieb Andrew Jayes um 18:24:

 Ok, check one done I do have the milter compiled. 
 
   Also ensure that your filter logs all messages, and then check thatin 
 your mail log you do indeed get a message from the filter.
 
 How do I ensure that the filter logs the messages? And where is the maillog for 
 sendmail located, and just in case, is the message from the filter an obvious yea 
 this went through the filter

/var/log/maillog

Yes, processing is obvious from the log.

 Andrew Jayes

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 19:01:54 up 3 days, 14:44, load average: 1.45, 1.69, 1.60 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] mimedefang not scanning

2004-08-24 Thread Andrew Jayes
Hi, a few answers.

You did include the milter applications in the sendmail.mc? Set

define(`confMILTER_LOG_LEVEL', `14')dnl

yes, that's set

 in /etc/sysconfig/mimedefang set

I do not have this file in this location, any thoughts?

# Set to the syslog facility.  Also set $SyslogFacility in your filter
SYSLOG_FACILITY=mail

I don't seam to have this in the filter, but I am not a perl coder, any advice on what 
to put and where to put it?

I have attached the result of mimedefang.pl -features

-

Here is one of the entry's from the maillog, I can not see any filter interaction.

Aug 23 16:22:20 mailgate1 sendmail[20101]: i7NFMJbK020099: to=[EMAIL PROTECTED], 
delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=42921, relay=edmund.hetb.co.uk. 
[10.107.3.10], dsn=2.0.0, stat=Sent ( [EMAIL PROTECTED] Queued mail for delivery)

Also, as an aside, I do see a lot of these entry's can you tell me what they are?

Aug 23 16:02:21 mailgate1 sm-msp-queue[20034]: i7NAF006019141: to=postmaster, 
delay=04:47:06, xdelay=00:00:00, mailer=relay, pri=492915, relay=[127.0.0.1], 
dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]

Cheers,

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Alexander Dalloz [mailto:[EMAIL PROTECTED] 
Sent: 23 August 2004 17:04
To: [EMAIL PROTECTED]
Subject: Re: [Mimedefang] mimedefang not scanning

Am Mo, den 23.08.2004 schrieb Andrew Jayes um 17:16:

   For some reason mimedefang is not scanning any mail that is passing through 
 sendmail.
 
 Fedora core
 Sendmail
 mimedefang
 Spam assassin
 Clamd
 NAI
 
 In the mimedefang config I have code setup so that anything that is scanned has a 
 header added to say x-spam
 scanned and x-virus scanned. At the moment all mail that comes through does not have 
 this header.

 Andrew Jayes

You did include the milter applications in the sendmail.mc? Set

define(`confMILTER_LOG_LEVEL', `14')dnl

in the sendmail.mc and in /etc/sysconfig/mimedefang set

# Set to the syslog facility.  Also set $SyslogFacility in your filter
SYSLOG_FACILITY=mail

and observe the maillog when mails are processed. I assume
mimedefang.pl -features does list SA and ClamAV and uvscan.

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 17:58:01 up 3 days, 13:40, load average: 1.68, 1.41, 1.38 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
MIMEDefang Version 2.42

Archive::Zip: yes
HTML::Parser: yes
HTML::TokeParser: yes
Path:CONFDIR: yes (/etc/mail)
Path:QUARANTINEDIR  : yes (/var/spool/MD-Quarantine)
Path:SENDMAIL   : yes (/usr/sbin/sendmail)
Path:SPOOLDIR   : yes (/var/spool/MIMEDefang)
SpamAssassin: yes
Virus:CLAMAV: yes (/usr/local/bin/clamscan)
Virus:CLAMD : yes (/usr/local/sbin/clamd)
Virus:NAI   : yes (/usr/local/bin/uvscan)
File::Scan  : no
HTMLCleaner : no
Unix::Syslog: no
Virus:AVP   : no
Virus:AVP5  : no
Virus:BDC   : no
Virus:FPROT : no
Virus:FPROTD: no
Virus:FSAV  : no
Virus:FileScan  : no
Virus:HBEDV : no
Virus:NVCC  : no
Virus:OpenAV: no
Virus:SOPHIE: no
Virus:SOPHOS: no
Virus:SymantecCSS   : no
Virus:TREND : no
Virus:TROPHIE   : no
Virus:VEXIRA: no

Anomy::HTMLCleaner  : missing
Archive::Zip: Version 1.10
Digest::SHA1: Version 2.10
File::Scan  : missing
HTML::Parser: Version 3.36
HTML::TokeParser: Version 2.28
IO::Socket  : Version 1.28
IO::Stringy : Version 2.109
MIME::Base64: Version 3.01
MIME::Tools : Version 5.411
MIME::Words : Version 5.404
Mail::Mailer: Version 1.62
Mail::SpamAssassin  : Version 2.60
Unix::Syslog: missing
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo

RE: [Mimedefang] mimedefang not scanning

2004-08-24 Thread Andrew Jayes
Ok, so it seams to have started scanning, no idea why. But the ps axf is showing mail 
coming into the queue and 'mimdefang.pl - sever' spawning uvscan. 

The problem now is that uvscan seams to be crashing

2030 ?  R 11:57 /usr/local/bin/uvscan --noboot --secure --allole. /Work

and then after a few minutes all of the uvscan entry's were moved to the bottom of the 
ps axf away from the mimedefang.pl - server lines, which are now asleep.

Is there something I need to change to allow uvscan to run properly? Or keep the 
mimedefang.pl - server running for longer?

Cheers,


---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Alexander Dalloz [mailto:[EMAIL PROTECTED] 
Sent: 23 August 2004 18:03
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] mimedefang not scanning

Am Mo, den 23.08.2004 schrieb Andrew Jayes um 18:24:

 Ok, check one done I do have the milter compiled. 
 
   Also ensure that your filter logs all messages, and then check thatin 
 your mail log you do indeed get a message from the filter.
 
 How do I ensure that the filter logs the messages? And where is the maillog for 
 sendmail located, and just in case, is the message from the filter an obvious yea 
 this went through the filter

/var/log/maillog

Yes, processing is obvious from the log.

 Andrew Jayes

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 19:01:54 up 3 days, 14:44, load average: 1.45, 1.69, 1.60 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] mimedefang not scanning

2004-08-23 Thread Andrew Jayes
Hi,
For some reason mimedefang is not scanning any mail that is passing through 
sendmail.

Fedora core
Sendmail
mimedefang
Spam assassin
Clamd
NAI

In the mimedefang config I have code setup so that anything that is scanned has a 
header added to say x-spam scanned and x-virus scanned. At the moment all mail that 
comes through does not have this header.

In 'ps axf' I can see entries for sendmail, mimedefang and clamd so it all seams to be 
running.

I have added my domain to the access file under /etc/mail to allow sendmail to relay 
any mail on to my exchange server.

Can anyone think why this is not working or give me some suggestions of what I can 
check on.

Cheers,

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:    01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] mimedefang not scanning

2004-08-23 Thread Andrew Jayes
Ok, check one done I do have the milter compiled. 

Also ensure that your filter logs all messages, and then check thatin 
your mail log you do indeed get a message from the filter.

How do I ensure that the filter logs the messages? And where is the maillog for 
sendmail located, and just in case, is the message from the filter an obvious yea 
this went through the filter

As for the code, I have seen it work on a different machine I setup some months back 
and I am positive it's the same.

Cheers,

---
Andrew Jayes
e-Business Officer
Heart of England Tourism
 
Tel: 01905 76 11 20
Fax:01905 76 34 50
e-Mail: [EMAIL PROTECTED]
 
 
 
 
 
 

-Original Message-
From: Paul Murphy [mailto:[EMAIL PROTECTED] 
Sent: 23 August 2004 16:37
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] mimedefang not scanning

Andrew,

Ensure that Sendmail is compiled with Milter support using:

sendmail -d0.1 -bt  /dev/null

At the top of the output, you should see something like the following:

Version 8.12.11
 Compiled with: DNSMAP LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8
MIME8TO7 NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS NISPLUS
PIPELINING SASLv2 SCANF STARTTLS TCPWRAPPERS USERDB
USE_LDAP_INIT XDEBUG

If the MILTER entry is missing, sort out Sendmail so that it includes milter
support - search the Mimedefang mailing list archives for details.

Also ensure that your filter logs all messages, and then check that in your mail
log you do indeed get a message from the filter.  If the messages are being
logged by the filter, check that your header addition code is actually being
called.

Best Wishes,

Paul.
__
Paul Murphy
Head of Informatics
Ionix Pharmaceuticals Ltd
418 Science Park, Cambridge, CB4 0PA

Tel. 01223 433741
Fax. 01223 433788


 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Andrew Jayes
 Sent: 23 August 2004 16:16
 To: [EMAIL PROTECTED]
 Subject: [Mimedefang] mimedefang not scanning
 
 
 Hi,
   For some reason mimedefang is not scanning any mail 
 that is passing through sendmail.
 
 Fedora core
 Sendmail
 mimedefang
 Spam assassin
 Clamd
 NAI
 
 In the mimedefang config I have code setup so that anything 
 that is scanned has a header added to say x-spam scanned and 
 x-virus scanned. At the moment all mail that comes through 
 does not have this header.
 
 In 'ps axf' I can see entries for sendmail, mimedefang and 
 clamd so it all seams to be running.
 
 I have added my domain to the access file under /etc/mail to 
 allow sendmail to relay any mail on to my exchange server.
 
 Can anyone think why this is not working or give me some 
 suggestions of what I can check on.
 
 Cheers,
 
 ---
 Andrew Jayes
 e-Business Officer
 Heart of England Tourism
  
 Tel: 01905 76 11 20
 Fax:    01905 76 34 50
 e-Mail: [EMAIL PROTECTED]
  
  
  
  
  
  
 
 
 ___
 Visit http://www.mimedefang.org and http://www.canit.ca
 MIMEDefang mailing list
 [EMAIL PROTECTED]
 http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
 

___
DISCLAIMER:
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to which they
are addressed.  If you have received this email in error please contact
the sender or the Ionix IT Helpdesk on +44 (0) 1223 433741
___ 


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] OT: problem with helo

2004-05-18 Thread Andrew Jayes
Hi,
Thank you for the reply's, for now then I'll just take it that the telnet 
client is having issues and that this will not affect mail transfer when it is sent 
through email client/server's.

Thanks for the help

andrew

-Original Message-
From: Andrew Jayes 
Sent: 17 May 2004 15:55
To: [EMAIL PROTECTED]
Subject: [Mimedefang] OT: problem with helo

Hi,
Sorry it's off topic, but I thought someone may know the answer.

When I telnet to my mimedefang box on port 25. I get the standard greeting just fine. 
But if I type 'helo' it returns 'needs a domain' so I then put 'helo domain.com' and I 
am allowed to continue with the mail.

What I have just found on a fresh telnet is, after the greeting if I put 'helo 
domain.com' I get 'command unrecognised' so I then have to put 'helo' and get the 
error and then 'helo domain.com'.

Basically is this just how it is, or is something wrong?

Many thanks

Andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] OT: problem with helo

2004-05-17 Thread Andrew Jayes
Hi,
Sorry it's off topic, but I thought someone may know the answer.

When I telnet to my mimedefang box on port 25. I get the standard greeting just fine. 
But if I type 'helo' it returns 'needs a domain' so I then put 'helo domain.com' and I 
am allowed to continue with the mail.

What I have just found on a fresh telnet is, after the greeting if I put 'helo 
domain.com' I get 'command unrecognised' so I then have to put 'helo' and get the 
error and then 'helo domain.com'.

Basically is this just how it is, or is something wrong?

Many thanks

Andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] FW: final fillter setup

2004-05-11 Thread Andrew Jayes

Hi, 
I nearly have my server ready now, just some last minute adjustments to make 
to the filter.

Is there a way that I can quarantine everything marked as spam or virus? Or do I need 
to 'action_Quarintine' at the end of every sub routine?

What I would like to see is spam being quarantined with no bounce, And viruses being 
quarantined with a bounce. That way anyone who may have sent a virus can check there 
system just in case. And spammers do not receive a reply to indicate my presence at 
the address.

Any tips?

Cheers

andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] FW: final fillter setup

2004-05-11 Thread Andrew Jayes
Thanks for the advice, 
I do take your point and agree with you. But I am also aware 
that a most of our mail comes from the general public and small companies that do not 
have much in the way of anti-virus know how. In these instances it would be nice to 
inform them to check their systems. Also if I can inform the sender that the message 
has not reached us, it saves me some earache a week later when they phone to complain 
that I haven't replied.

And believe me these people think that everything is life or death!

Cheers

andrew

-Original Message-
From: Kayne Kruse [mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 14:38
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] FW: final fillter setup 

 What I would like to see is spam being quarantined with no 
 bounce, And viruses being quarantined with a bounce. That way 
 anyone who may have sent a virus can check there system just 
 in case. And spammers do not receive a reply to indicate my 
 presence at the address.

Most here would argue that virus notifications are bad simply because most of
the time they go to some forged email addresses or admins do not read them.
It costs also the extra bandwidth sending those trivial notices. 

-Kayne

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] FW: final fillter setup

2004-05-11 Thread Andrew Jayes
Hey,

 It would be useful to tell the owner of the infected PC, but there is
no way to determine who it is.

Unless the mail is 'not forged' and was actually sent by that sender address. My point 
being that I would like to tell my clients if they have accidentally sent in an email 
containing a virus. 

Andrew


-Original Message-
From: Joseph Brennan [mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 16:38
To: [EMAIL PROTECTED]
Subject: RE: [Mimedefang] FW: final fillter setup 



--On Tuesday, May 11, 2004 4:28 PM +0100 Andrew Jayes 
[EMAIL PROTECTED] wrote:

 Thanks for the advice,
   I do take your point and agree with you. But I am also aware 
 that a
 most of our mail comes from the general public and small companies that
 do not have much in the way of anti-virus know how. In these instances it
 would be nice to inform them to check their systems. Also if I can inform
 the sender that the message has not reached us, it saves me some earache
 a week later when they phone to complain that I haven't replied.



It would be useful to tell the owner of the infected PC, but there is
no way to determine who it is.

Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York




___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] mimedefang on debian

2004-05-05 Thread Andrew Jayes
Hi All,
I have previously put mimdefang together on a fedora core 1 box. However now 
that I have a server to run it on fedora just dies on the driver install. Luckly it 
does not seam to have the same issue with the debian drivers. My question, will it be 
much harder to install mimedefang on to the debian OS? And if not which release should 
I use. I have never used or installed debian before.

Thanks for any advice

andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] OT: adaptec scsi card help with fedora

2004-04-29 Thread Andrew Jayes

Hi All,
Sorry its way off topic, but I am trying to get a new mimedefang server up and 
running. Problem is it's the Intel nightshade board. I've disabled the symbios scsi 
chip and got a pci Adaptec aha 2940uw card to replace it. Trouble is where fedora used 
to hang on the smybios driver install it now hangs on the Adaptec driver install aic 
7xxx. I have tried the Linux dd install with a driver disk and the Linux noprobe, 
neither of which will recognize the disks when it gets to partition time. 

Can anyone give me some advice on solving this issue?

Andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] Block subject

2004-03-08 Thread Andrew Jayes
Hey,
In filter_begin I have:

if (($msgSubject =~ /RE: [A-Z] {2,},(?: [A-Z]+!?)+/) ||
($msgSubject =~ /\bparis hilton\b/ )) {
 

#Bounce the mail!
action_bounce(Forbiden subject matter - Rejected);
}

this works well for me, although I haven't figured out how to reject
specified words yet, just whole sentencies.

Andrew jayes

Fedora core 1
Mimedefang 3.29
Sendmail 8.10.12



-Original Message-
From: Hernan Dario Arredondo [mailto:[EMAIL PROTECTED] 
Sent: 05 March 2004 21:11
To: [EMAIL PROTECTED]
Subject: [Mimedefang] Block subject 

Hi everyone

I new on this
What can I do to block a message with a determinated subject with 
mimedefang ???


Regards

Hernan Dario Arredondo
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] order of scanning

2004-03-01 Thread Andrew Jayes
Hi All,

 can anyone tell be a little bit about the order of scanning mail. Such
as sendmail's local configuration, mimedefang, smapassassin and virus
scans

will sendmail apply any rules it has set first? And then mimedefang will
use its rules and virus scan? then spamassassin will be called before
mimedefang adds to the headers and sends on the mail?

Is that about right on a very simple level.

andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] relaying mail

2004-02-26 Thread Andrew Jayes

Hi All,
A little off topic but Can anyone give me some pointers. I have
my mimedefang gateway ready to go but I wanted some advice before I put
it live.

The setup is as follows: mail coming in is forwarded from the firewall
to the mimedefang gateway which will then relay the mail on to an
exchange server for local delivery. On the way out the exchange is using
a smart host to pass the mail to the mimedefang gateway and then out to
the world at large.

I just want to check, 

Will the mimedefang gateway perform all of the scanning on the mail that
is to be relayed?

Both incoming and outgoing?

Also I am not a sendmail expert, is there anything that you can point
out to me as 'obvious mistakes' not to make when relaying through
sendmail. I don't want to inadvertently become a spammer myself.

Many thanks,

Andrew Jayes

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] filter check

2004-02-16 Thread Andrew Jayes
Hi All,
If anyone has a few minutes can you have a look at my filter
(attached) as I'm not to sure if its setup correctly. 

The first question is over the antivirus section at the start of the
filter, basically will it work? Do I need to add any further commands in
to use the antivirus capabilities?

Secondly is the subject filter in 'filter_begin' the code I have put in
seams to do nothing as I can still send mail through with the Paris
Hilton subject line.

The main aim of my mimedefang system/ filter is to be able to control:
 The subject lines allowed,
 The attachment ext allowed,
 Use two virus scanners,
 Quarantine all viruses and spam, indicated from above,
 Add headers to indicate if the mail was checked x-spam x-virus,
 Or indicate what was found x-virus, virus name. or spam score.
 Add disclaimers,
 And then pass the checked mail to an exchange server to be
distributed(Inbound only)

 I am not a perl coder and I am finding it very hard to adjust the code
I have.

Many thanks for looking.

andrew
# -*- Perl -*-
#***
#
# mimedefang-filter
#
# Suggested minimum-protection filter for Microsoft Windows clients, plus
# SpamAssassin checks if SpamAssassin is installed.
#
# Copyright (C) 2002 Roaring Penguin Software Inc.
#
# This program may be distributed under the terms of the GNU General
# Public License, Version 2, or (at your option) any later version.
#
# $Id: suggested-minimum-filter-for-windows-clients,v 1.72 2003/11/14 21:33:20 dfs Exp 
$
#***

#***
# Set administrator's e-mail address here.  The administrator receives
# quarantine messages and is listed as the contact for site-wide
# MIMEDefang policy.  A good example would be '[EMAIL PROTECTED]'
#***
$AdminAddress = '[EMAIL PROTECTED]';
$AdminName = admin;

#***
# Set the e-mail address from which MIMEDefang quarantine warnings and
# user notifications appear to come.  A good example would be
# '[EMAIL PROTECTED]'.  Make sure to have an alias for this
# address if you want replies to it to work.
#***
$DaemonAddress = '[EMAIL PROTECTED]';

#***
# If you set $AddWarningsInline to 1, then MIMEDefang tries *very* hard
# to add warnings directly in the message body (text or html) rather
# than adding a separate WARNING.TXT MIME part.  If the message
# has no text or html part, then a separate MIME part is still used.
#***
$AddWarningsInline = 1;

#***
# To enable syslogging of virus and spam activity, add the following
# to the filter:
# md_graphdefang_log_enable();
# You may optionally provide a syslogging facility by passing an
# argument such as:  md_graphdefang_log_enable('local4');  If you do this, be
# sure to setup the new syslog facility (probably in /etc/syslog.conf).
# An optional second argument causes a line of output to be produced
# for each recipient (if it is 1), or only a single summary line
# for all recipients (if it is 0.)  The default is 1.
# Comment this line out to disable logging.
#***
md_graphdefang_log_enable('mail', 1);

#***
# Uncomment this to block messages with more than 50 parts.  This will
# *NOT* work unless you're using Roaring Penguin's patched version
# of MIME tools, version MIME-tools-5.411a-RP-Patched-02 or later.
#
# WARNING: DO NOT SET THIS VARIABLE unless you're using at least
# MIME-tools-5.411a-RP-Patched-02; otherwise, your filter will fail.
#***
# $MaxMIMEParts = 50;

#***
# Set various stupid things your mail client does below.
#***

# Set the next one if your mail client cannot handle nested multipart
# messages.  DO NOT set this lightly; it will cause action_add_part to
# work rather strangely.  Leave it at zero, even for MS Outlook, unless
# you have serious problems.
$Stupidity{flatten} = 0;

# Set the next one if your mail client cannot handle multiple inline
# parts.
$Stupidity{NoMultipleInlines} = 0;

# The next lines force SpamAssassin modules to be loaded and rules
# to be compiled immediately.  This may improve performance on busy
# mail servers.  Comment the lines out if you don't like them.
if ($Features{SpamAssassin}) {

RE: [Mimedefang] x-virus checked-more

2004-02-12 Thread Andrew Jayes
Yes, I have to agree I can see where it should go but the code I am
using must be wrong:

#virus checked header
if ($FoundVirus) {
action_add_header(X-virus_checked, $FoundVirus);
}

I think what I want it to do is tell me that the virus scanner looked at
the mail and returned a result of 'nothing found'

So I would need:

#virus checked header
if ($FoundVirus) = 0 {
action_add_header(X-virus_checked, $FoundVirus);
}

but I know that is not correct as when I put it in mimedefang-filter I
cannot get mail in to the server.

What I am looking for is

x-virus-check, [EMAIL PROTECTED],  when there is a virus (which is done by
another part of the script

x-virus-checked , when no virus was found, but the mail was checked.


Appended to the header.

Any code advice would be cool, as I'm not a perl coder.

Cheers,

andrew


-Original Message-
From: Lucas Albers [mailto:[EMAIL PROTECTED] 
Sent: 11 February 2004 20:14
To: [EMAIL PROTECTED]
Subject: Re: [Mimedefang] x-virus checked


Andrew Jayes said:
 Hi,
   Is it posable to append the header with a virus checked field?
 The same as the x-spam-score field.

 Just to back track a little, maybe mimedefang does this already and my
 scanners are just not working.

put it in mimedefang-filter.
right where it does append_header for x-spam-score.
Look, you'll see it's obvious where it goes.
If it hits filter-end (then it has been virus scanned.)

-- 
Luke Computer Science System Administrator

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] code advice

2004-02-11 Thread Andrew Jayes
Hi,
I have the following pieces of code in my defang filter, but
they do not seam to anything.

In filter_end

Sub filter_end ($) {

if ($message_is_spam) {
# Add a header with original recipients, just for info
action_add_header(X-Orig-Rcpts, join(, , @Recipients));
# Remove original recipients
foreach $recip (@Recipients) {
delete_recipient($recip);
} 
   
# Send to spam address
add_recipient('[EMAIL PROTECTED]');
}





and in filter_begin
***
sub filter_begin () {

  #subject check
  my($msgSubject);
  my($hfile) = HEADERS;
  while(HEADERS){
chomp;
$line = $_;
$idx = index($line, Subject: );
if ($idx == 0){
$msgSubject = substr($line, 9);
}
 }

if ((msgSubject =~ /\bparis Hilton\b/ )) {

#bounce the mail
action_bounce(forbidden subject matter);
}

I am not a perl coder and I'm not to sure how the syntax etc of perl
works. Can anyone tell me what is wrong with the code, typos, syntax,
un-declared variables, anything that will help me get the filter working
properly.

Many thanks

andrew

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] filters for subject content

2004-02-10 Thread Andrew Jayes
Hi,
Thanks for all of the suggestions; I think I have enough to get
me started on the filters.

Thanks for your help,

Andrew


Thread closed.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] uv scan is hanging

2004-02-06 Thread Andrew Jayes
Hi,
Well if my other post turns up, I can say that I have now found
my .sock and got everything sorted. The next problem I have is that when
I try to send a mail (using telnet session) in to the server it seam's
uvscan is hanging, this means that in the session I can't terminate the
mail with '.' eventually I just get 'try again later'. On the mail box
using ps axf I can see that uvscan is has been running for 10 minutes.

I'm running fedora core 1

Anyone got any suggestions?

Andrew 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang