Re: [Mimedefang] A rose by any other name... Renaming MIMEDefang. What's your idea for a name?
On 12/11/2019 3:45 pm, Kenneth Porter wrote: --On Monday, November 11, 2019 9:55 PM -0500 "Kevin A. McGrail" wrote: MIMEDefang needs a new name. Got ideas? Shout em out! It's a filter that works with Perl. What filter-feeder makes pearls? How about Oyster? That would go well with ClamAV :-) -- Cheers Bill ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Quarantine directory name incorrect
Hi In recent times I have noticed that the quarantine directory name has been generated incorrectly using the minute value instead of the month value. The problem appears to be in mimedefang.pl subroutine hour_str where it returns $min+1 instead of $mon+1 Cheers Bill Maidment ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Permissions on /varspool/MIMEDefang
-Original message- > From:Richard Laager <rlaa...@wiktel.com> > Sent: Thursday 11th February 2016 18:22 > To: mimedefang@lists.roaringpenguin.com > Subject: Re: [Mimedefang] Permissions on /varspool/MIMEDefang > > On 02/10/2016 11:01 PM, Bill Maidment wrote: > > Hi > > After your most recent release I have had problems with the permissions on > > /var/spool/MIMEDefang being reset to 0750 after a reboot. > > I need the permission to be 0770 to allow for clamd scanner to use the > > directory. > > I eventually discovered this line in /usr/lib/tmpfiles.d/mimedefang.conf > > z /var/spool/MD-Quarantine 0750 defang defang - - > > `grep -r tmpfiles.d mimedefang-2.78` returns nothing for me. Are you > sure this isn't coming from your distro's package of MIMEDefang? > It may be coming from EPEL (the packager), but the file is mimedefang.conf not mimedefang-2.78 > Also, /var/spool/MIMEDefang and /var/spool/MD-Quarantine aren't the same > thing. > I meant /var/spool/MIMEDefang > And in any event, why would clamd need to write to /var/spool/MIMEDefang? > It's where clamd@scan wants to store the clamd.sock when communicating with mimedefang. > -- > Richard > ___ > NOTE: If there is a disclaimer or other legal boilerplate in the above > message, it is NULL AND VOID. You may ignore it. > > Visit http://www.mimedefang.org and http://www.roaringpenguin.com > MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com > http://lists.roaringpenguin.com/mailman/listinfo/mimedefang > > ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Permissions on /varspool/MIMEDefang
Hi After your most recent release I have had problems with the permissions on /var/spool/MIMEDefang being reset to 0750 after a reboot. I need the permission to be 0770 to allow for clamd scanner to use the directory. I eventually discovered this line in /usr/lib/tmpfiles.d/mimedefang.conf z /var/spool/MD-Quarantine 0750 defang defang - - This file hinders the users ability to adjust the system to his needs. Also the hard coding of the configurable directory parameter (/var/spool/MIMEDefang) throughout mimedefang is very restricting. I urge you to consider some changes in this area. Cheers Bill Maidment ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.72 is Released - md_syslog problem
-Original message- To: mimedefang@lists.roaringpenguin.com; From: David F. Skoll d...@roaringpenguin.com Sent: Thu 21-07-2011 06:03 Subject:[Mimedefang] MIMEDefang 2.72 is Released -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I'm pleased to announce the availability of MIMEDefang 2.72 from http://www.mimedefang.org/download Changes since 2.71 follow. 2.72 is strictly a bug-fix release. * Change md_syslog to log the Sendmail Queue-ID if it is available. The change to md_syslog has broken graphdefang-0.9. The Queue-ID appears twice. e.g. Jul 27 04:04:57 stiles mimedefang.pl[7527]: p6QI4kQR018574: MDLOG,p6QI4kQR018574,mail_in,194.109.142.194,,clamav-users-boun...@lists.clamav.net,b...@maidment.vu,Re: [clamav-users] Third Party web interface ^^^ Cheers Bill Maidment Consultant to Elgas Ltd ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.72 is Released - md_syslog problem
-Original message-
To: mimedefang@lists.roaringpenguin.com;
From: David F. Skoll d...@roaringpenguin.com
Sent: Thu 28-07-2011 00:57
Subject:Re: [Mimedefang] MIMEDefang 2.72 is Released - md_syslog problem
On Wed, 27 Jul 2011 22:26:44 +1000
Bill Maidment b...@maidment.vu wrote:
The change to md_syslog has broken graphdefang-0.9.
This patch (to graphdefang) should fix it. Please let me know.
Regards,
David.
diff --git a/contrib/graphdefang-0.9/event/mimedefang.pl/general
b/contrib/graphdefang-0.9/event/mimedefang.pl/general
index 1a82479..080211b 100644
--- a/contrib/graphdefang-0.9/event/mimedefang.pl/general
+++ b/contrib/graphdefang-0.9/event/mimedefang.pl/general
@@ -11,7 +11,7 @@
$event{'mimedefang.pl'}{'general'} =
sub {
- if ($text =~ m/^MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
+ if ($text =~
m/^[A-Za-z0-9]{14}:\s*MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
# get values from regular expression
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Thanks David. That works great.
Cheers
Bill Maidment
Consultant to Elgas Ltd
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] CentOS (was Re: MIME::Tools 5.501 has been released)
-Original message- To: mimedefang@lists.roaringpenguin.com; From: David F. Skoll d...@roaringpenguin.com Sent: Fri 25-02-2011 03:30 Subject:[Mimedefang] CentOS (was Re: MIME::Tools 5.501 has been released) On Tue, 22 Feb 2011 17:36:26 -0600 Ben Kamen bka...@benjammin.net wrote: I've been running CentOS over the last year and have been looking to replace my current RH-Fedora server with it. Anyone contemplating using CentOS would do well to read this article: http://lwn.net/SubscriberLink/429364/e6db76d4b96fa7b0/ And if you're a dedicated CentOS user, consider helping them out. Don't go there unless you're only interested in flame-wars. The Centos team/community is in a pitched battle. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] mimedefang-multiplexor keeps dying
Hi guys I've been getting mimedefang-multiplexor dying for some time now on my external mail server with mimedefang-2.68. I don't recall it happening on 2.67. The situation is always when filter_recipient detects an invalid username from the internal mail server. My filter rules (mimedefang-filter) have not changed for a long while, but spamassassin and clamav rules are obviously changing frequently. I am using Fedora 12 with sendmail-8.14.4, mimedefang-2.68, spamassassin-3.3.1-2, clamav-0.96 on the external mail server. The external mail server log shows: May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 stderr: panic: top_env May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 died prematurely -- check your filter rules May 2 15:01:47 stiles mimedefang[20718]: Error from multiplexor: ERR No response from slave May 2 15:01:47 stiles sendmail[5978]: o4251fPE005978: Milter: to=bil...@maidment.com.au, reject=451 4.3.2 Please try again later May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Reap: slave 3 (pid 5277) exited normally with status 1 (SLAVE DIED UNEXPECTEDLY) May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 resource usage: req=7, scans=0, user=0.021, sys=0.013, nswap=0, majflt=0, minflt=970, maxrss=29072, bi=0, bo=0 May 2 15:01:47 stiles sendmail[5978]: o4251fPE005978: from=bil...@maidment.com.au, size=12335, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=[117.193.171.140] The internal mail server log shows: May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: bil...@[192.168.2.16]... User unknown May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: lost input channel from stiles.maidment.vu [192.168.2.12] to MTA after rcpt May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: from=bil...@maidment.com.au, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=stiles.maidment.vu [192.168.2.12] Any ideas what is causing this? Any suggestions as to how to debug it? Cheers Bill Maidment Consultant to Elgas Ltd It's important to keep your rough edges - Neil Hannon ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-multiplexor keeps dying
-Original message- From: Bill Maidment b...@maidment.vu Sent: Sun 02-05-2010 16:38 To: mimedefang@lists.roaringpenguin.com; Subject: [Mimedefang] mimedefang-multiplexor keeps dying Hi guys I've been getting mimedefang-multiplexor dying for some time now on my external mail server with mimedefang-2.68. I don't recall it happening on 2.67. The situation is always when filter_recipient detects an invalid username from the internal mail server. My filter rules (mimedefang-filter) have not changed for a long while, but spamassassin and clamav rules are obviously changing frequently. I am using Fedora 12 with sendmail-8.14.4, mimedefang-2.68, spamassassin-3.3.1-2, clamav-0.96 on the external mail server. The external mail server log shows: May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 stderr: panic: top_env May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 died prematurely -- check your filter rules May 2 15:01:47 stiles mimedefang[20718]: Error from multiplexor: ERR No response from slave May 2 15:01:47 stiles sendmail[5978]: o4251fPE005978: Milter: to=bil...@maidment.com.au, reject=451 4.3.2 Please try again later May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Reap: slave 3 (pid 5277) exited normally with status 1 (SLAVE DIED UNEXPECTEDLY) May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 resource usage: req=7, scans=0, user=0.021, sys=0.013, nswap=0, majflt=0, minflt=970, maxrss=29072, bi=0, bo=0 May 2 15:01:47 stiles sendmail[5978]: o4251fPE005978: from=bil...@maidment.com.au, size=12335, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=[117.193.171.140] The internal mail server log shows: May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: bil...@[192.168.2.16]... User unknown May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: lost input channel from stiles.maidment.vu [192.168.2.12] to MTA after rcpt May 2 15:01:47 busby sendmail[18758]: o4251lkk018758: from=bil...@maidment.com.au, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=stiles.maidment.vu [192.168.2.12] Any ideas what is causing this? Any suggestions as to how to debug it? Cheers Bill Maidment Consultant to Elgas Ltd It's important to keep your rough edges - Neil Hannon ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang Just to add. All software is 64bit and reverting back to mimedefang-2.67 cures the problem. Cheers Bill Maidment Consultant to Elgas Ltd It's important to keep your rough edges - Neil Hannon ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-multiplexor keeps dying
-Original message- From: Bill Maidment b...@maidment.vu Sent: Sun 02-05-2010 18:58 To: mimedefang@lists.roaringpenguin.com; Subject: Re: [Mimedefang] mimedefang-multiplexor keeps dying -Original message- From: Bill Maidment b...@maidment.vu Sent: Sun 02-05-2010 16:38 To: mimedefang@lists.roaringpenguin.com; Subject: [Mimedefang] mimedefang-multiplexor keeps dying Hi guys I've been getting mimedefang-multiplexor dying for some time now on my external mail server with mimedefang-2.68. I don't recall it happening on 2.67. Another clue. The problem goes away when I switch off embedded perl Cheers Bill Maidment Consultant to Elgas Ltd It's important to keep your rough edges - Neil Hannon ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-multiplexor keeps dying
-Original message- From: David F. Skoll d...@roaringpenguin.com Sent: Sun 02-05-2010 23:46 To: mimedefang@lists.roaringpenguin.com; Subject: Re: [Mimedefang] mimedefang-multiplexor keeps dying Bill Maidment wrote: May 2 15:01:47 stiles mimedefang-multiplexor[20703]: Slave 3 stderr: panic: top_env panic: top_env is a serious internal Perl bug. Googling for it give lots of results, but very little useful information. :( Try turning off embedded Perl. As my last email said, switching off embedded perl made the problem go away. My perl version is perl-5.10.0-87.fc12.x86_64 Another system I manage has perl-5.10.0-68.fc9.i386 and doesn't have this issue with embedded perl on 2.68. Maybe it's a bug in 64bit perl-5.10? I wonder how Fedora 13 will behave? Cheers Bill Maidment Consultant to Elgas Ltd It's important to keep your rough edges - Neil Hannon ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] MIMEDefang 2.59-BETA-2 is Available
On Thu, 18 Jan 2007 15:13:37 -0500, Cormack, Ken wrote snip David, I've been playing with the new Beta, and you are right... This new tool is spiffy! snip I'll second your comments and raise you another request: Can we also have a port number option for each server? Something like servername:22 Thanks for this excellent tool. Bill -- Bill Maidment Maidment Enterprises Pty Ltd www.maidment.vu ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.59-BETA-2 is Available
On Thu, 18 Jan 2007 17:02:38 -0500, David F. Skoll wrote Bill Maidment wrote: Can we also have a port number option for each server? Something like servername:22 Nope, we can't have that. The reason is you can do that in your ..ssh/config file: Host machine-not-on-port-22-he-he-he HostName real-machine-name Port 23 Check out man ssh_config for other goodies. Thanks David. That works a treat. You learn something new every day. A couple of observations after using it for a few minutes: 1. The busy slaves graph sometimes flat-lines, even though the other two graphs show activity. It seems to happen in the relatively quiet traffic periods. 2. Entering the ssh passwords for multiple servers is a bit confusing. I work around it by starting only one server initially and then adding the others one by one. Cheers Bill -- Bill Maidment Maidment Enterprises Pty Ltd www.maidment.vu ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] ClamAV 0.88 Patch
Rob MacGregor wrote: On 21/01/06, Dirk the Daring [EMAIL PROTECTED] wrote: I've just stood up a Solaris 9 server with (all built from source) sendmail v8.13.5, SA 3.1.0, MD 2.54 and ClamAV 0.88 with David's patch. Its working fine. Similarly I've been running it on FreeBSD 5.4 (sendmail 8.13.5, SA 3.1.0, MD 2.54, ClamAV 0.88) with the patch and haven't had problems. Fedora Core 3 and 4 with everything else as above works fine here. Cheers Bill -- What's the difference between Linux and Windoze? Linux - Thousands of programmers are working *WITH*you. Windoze - Thousands of programmers are working *AGAINST* you. Web Site http://www.maidment.com.au ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.55-BETA-4 is available
David F. Skoll wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, MIMEDefang 2.55-BETA-4 is available at http://www.mimedefang.org/node.php?id=1 Is it me? Or are all the links inactive on the download page? Cheers Bill -- What's the difference between Linux and Windoze? Linux - Thousands of programmers are working *WITH*you. Windoze - Thousands of programmers are working *AGAINST* you. Web Site http://www.maidment.com.au ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.55-BETA-2 is available
Tomasz Ostrowski wrote: On Mon, 16 Jan 2006, [EMAIL PROTECTED] wrote: I already know what this means. But it is only because I did read previous David's message. I'm just saying that this INCOMPATIBILITY note should be more verbose and give an example for those, who do not know perl very well and will not understand this. I'm not very good in english so I'm sorry if I said something wrong and I was not understandable. Regards Tometzky I think you were quite clear in what you asked. It's just that some people don't know how to read :-) I wish I could communicate in other languages as well as you. Cheers Bill -- What's the difference between Linux and Windoze? Linux - Thousands of programmers are working *WITH*you. Windoze - Thousands of programmers are working *AGAINST* you. Web Site http://www.maidment.com.au ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] FW: Runaway Spamassassin
David F. Skoll wrote: Yes, my usual mantra: When a previously-working system starts misbehaving, and you (really, honestly!) haven't changed anything, suspect a network problem. Look for a DNSRBL host that's died, a datbase connection that's acting up, or something similar. Of course, if you *have* changed something on your setup... Don't forget that in a live system something is always changing -- the incoming mail! We've had this problem a few times (weeks apart), but only on multi-recipient mail. We're hoping the extra 512MB RAM and consequent increase in RAM allocated to /var/spool/MIMEDefang will put this issue to rest. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Runaway Slaves
Tom Skotnicki wrote: I have been running Mimedefang for a couple of years with great success. Recently, I started having issues with dozens of slave processes accumulating until the server stops responding. Reboot, all is well again for a while. Looked all over and cannot seem to come up with a clue. Environment: RH 7.3, Sendmail 8.12.9, SpamAssassin 2.55, uvscan. MX_MINIMUM=2, MX_MAXIMUM=10 Mail volume: 4-5 messages/minute, cpu seldom exceeds 60%, even when locked. Even with a MX_MAXIMUM of 10, I have seen 50-60 slaves show up in ps output. Thanks for any clues. We just had the same problem today, as well as a few weeks ago. FC3 Sendmail 8.13.3 SA 3.02 clamav-devel-20050319 MIN=2 MAX=10 256MB RAM (100MB allocated to ramdisk for /var/spool/MIMEDefang). Similar load. We will add another 512MB RAM tonight and increase the ramdisk size. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Multiplexor Error
Hi Running MD 2.48 MIME-tools 5.415 MIME-Base64 3.03 RedHat 7.2 (soon to be FC3). I got the following messages. Can anyone explain what they mean. It looks like the email was passed through OK with attachment. Nov 10 08:38:20 b090_lx0 mimedefang-multiplexor[18586]: Slave 0 stderr: UTF8 in: mh20041110.pdf Nov 10 08:38:20 b090_lx0 mimedefang-multiplexor[18586]: Slave 0 stderr: UTF8 out: mh20041110.pdf Nov 10 08:38:20 b090_lx0 mimedefang-multiplexor[18586]: Slave 0 stderr: UTF8 in: mh20041110.pdf Nov 10 08:38:20 b090_lx0 mimedefang-multiplexor[18586]: Slave 0 stderr: UTF8 out: mh20041110.pdf Cheers -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] SURBL lookups no longer happening after upgrade to 2.48
Sven Willenberger wrote:
On Tue, 2004-11-02 at 12:49 -0500, David F. Skoll wrote:
I have found the line in mimedefang.pl that was causing my problem:
6079 $SASpamTester = Mail::SpamAssassin-new({
6080 local_tests_only = $SALocalTestsOnly,
6081 dont_copy_prefs= 1,
= 6082 LOCAL_RULES_DIR= $LOCAL_RULES_DIR,
6083 userprefs_filename = $config});
Thanks
That has got my SURBLs working again.
--
_/_/_/_/ _/ _/
_/_/ _/ _/ _/
_/_/_/_/ _/
_/_/ _/ _/ _/
_/_/_/_/ _/ _/ _/
Bill Maidment
Maidment Enterprises Pty Ltd
Unless you are named Alfred E. Newman, you may read only the odd
numbered words (every other word beginning with the first) of the
message above. If you have violated that, then you hereby owe the sender
AU$10 for each even numbered word you have read.
Adapted from Stupid Email Disclaimers (see
http://www.goldmark.org/jeff/stupid-disclaimers/)
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Passing username to SpamAssassin for user preferences
David F. Skoll wrote: And while I'm happy to release MIMEDefang under the GPL, these sorts of changes are uncomfortably close to eating into CanIt and CanIt-PRO territory. Unfortunately, we have to make a living too. :-) David, we really appreciate the GPL version. So much so, that the company I work with has purchased a CanIt license, yet continues to use the GPL MIMEDefang version. Keep up the good work. To those who are financially benefiting from MIMEDefang -- why not buy a CanIt licence to demonstrate your appreciation. Cheers. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45 fails to configure
Bill Maidment wrote: I know. I am stupid. I installed razor-agents-sdk-2.03.tar.gz on my once working mail server and it totally upset mimedefang. I've re-installed the perl modules including MIME-Base64-3.05 (with INSTALLDSIRS=site) and MIME-tools-5.414, but mimedefang won't configure as below. Well, I don't feel quite so stupid now. I resolved the problem by deleting old versions of MIME/QuotedPrint.pm and Digest/SHA1.pm that were left lying around. Is there an issue with the installation of newer versions of these modules, that they don't remove older versions? Or have I missed some obvious method of updating? Cheers -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.45 compile errors ??
Brent J. Nordquist wrote: On Thu, Sep 23, 2004 at 08:15:52AM -0400, David F. Skoll wrote: Sorry if I missed any posts (I'm catching up on the MIMEDefang list now) but I got this also, with Fedora Core 2 x86_64 -- could the x86_64 be the common factor in people who are seeing this? Yes, you've hit the nail on the head. It seems old perl modules are left in the /usr/lib/ and new perl modules go in /usr/lib64/, maybe to allow for 32 bit and 64 bit versions at the same time. What I'm discovering about Perl under FC2 x86_64 is that things seem to be split between /usr/lib and /usr/lib64. I suspect what I have is that MIMEDefang's configure is finding /usr/lib for some of the paths it's searching for, but the module is installed under /usr/lib64 (or vice-versa). Using --disable-check-perl-modules at least fixed the warning, but I haven't gotten as far as seeing it all work yet. Also I had to use --with-milterlib=/usr/lib64 (since that's where libmilter.a is on FC2 x86_64). I tried the disable check and it builds, but it still crashes, because the wrong modules are accessed at run time. The only way is to go searching for the old modules and delete them. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] mimedefang-2.45 fails to configure
I know. I am stupid. I installed razor-agents-sdk-2.03.tar.gz on my once working mail server and it totally upset mimedefang. I've re-installed the perl modules including MIME-Base64-3.05 (with INSTALLDSIRS=site) and MIME-tools-5.414, but mimedefang won't configure as below. Can anyone suggest what I've missed, please? [EMAIL PROTECTED] mimedefang-2.45]# ./configure checking for gcc... gcc checking for C compiler default output... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ANSI C... none needed checking for ar... ar checking for a BSD-compatible install... /usr/bin/install -c checking for perl... /usr/bin/perl checking whether socklen_t is defined... yes checking for Perl installation variable prefix... /usr checking for Perl installation variable siteprefix... /usr checking for Perl installation variable vendorprefix... /usr checking for Perl installation variable installarchlib... /usr/lib64/perl5/5.8.4/x86_64-linux-thread-multi checking for Perl installation variable installprivlib... /usr/lib/perl5/5.8.4 checking for Perl installation variable installbin... /usr/bin checking for Perl installation variable installman1dir... /usr/share/man/man1 checking for Perl installation variable installman3dir... /usr/share/man/man3 checking for Perl installation variable installscript... /usr/bin checking for Perl installation variable installsitearch... /usr/lib64/perl5/site_perl/5.8.4/x86_64-linux-thread-multi checking for Perl installation variable installsitelib... /usr/lib/perl5/site_perl/5.8.4 checking for wait3 that fills in rusage... yes checking for nm... /usr/bin/nm checking for Perl module IO::Socket... ok checking for Perl module MIME::Tools 5.410 ()... ok checking for Perl module MIME::WordDecoder... configure: WARNING: *** Error trying to use Perl module MIME::WordDecoder configure: WARNING: *** Make sure the following Perl modules are installed: configure: WARNING: *** MIME::Tools version 5.410 or higher (5.411a recommended) configure: WARNING: *** MIME::WordDecoder configure: WARNING: *** Digest::SHA1 [EMAIL PROTECTED] mimedefang-2.45]# -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45 and dual opteron
Bill Maidment wrote: Finally. I've fixed it. I switched off embedded perl and it's back to normal. Now to test the bz2 file again. One last email on this topic. bz2/gz/zip attachments still caused the mail system to throw a fit, so I updated clamv to the latest development version (clamav-devel-20041010) and not only did the attachment get processed properly, but I was able to re-instate embedded perl !!! It looks like it was a clamv issue all along, but I'm still mystified as to what fixed it. Thanks for your time. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45 and dual opteron
alan premselaar wrote: Bill Maidment wrote: I've had mimedefang-2.45 spamassassin-3.0.0 clamav-0.80rc2 running for about a week OK on a dual opteron. Then yesterday a friendly bz2 file came in as an attachment and clamav threw a fit. I upgraded to clamav-0.80rc3 and still had the same problem, so I went back to clamav-0.75.1 which handled the bz2 file OK on i386 machine. That's when mimdefang stopped working. snip/ snip Bill, I've been installing a new machine with MD 2.45, SA 3.0 and clamav 0.75.1 and it was working fine until I added some greylisting code. then it did the same thing. snip/snip anyways, the point (i think) is... check the little things and make sure you don't have something really little and really obvious taunting you and causing you problems. snip/snip Finally. I've fixed it. I switched off embedded perl and it's back to normal. Now to test the bz2 file again. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45 and dual opteron
alan premselaar wrote: Bill, I've been installing a new machine with MD 2.45, SA 3.0 and clamav 0.75.1 and it was working fine until I added some greylisting code. then it did the same thing. it turns out that for some reason it was choking on my use strict; line. more specifically it was complaining (during debugging) about calls to non-existant subroutines main::sub_routine_name which actually did exist. I must have beat my head against the wall for 2 hours debugging this. I reverted to a previous version of the filter and it started working again as expected, so i stepped thru changes, etc and finally once I removed the use strict; line with all my code changes, everything started to work. (i still need to figure out why that was happening) anyways, the point (i think) is... check the little things and make sure you don't have something really little and really obvious taunting you and causing you problems. in my case, it was get as far as you show in your log and then the slave would timeout and die and tempfail. anyways, probably not much help, but thought i'd share. Thanks, very much, Alan I'll check that out. Another area I'm looking at is SELinux (I'm on FC3-test1) It seems that when you switch off SELinux after installing, then any changes can cause all sorts of problems. Anyway you've given me hope that it's something simple. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] patch for Command Anti-Virus
Bill Maidment wrote: Here is a patch to mimedefang-2.45 to support Command Anti-Virus (csav) Rats. One small typo in mimedefang-filter.5.in @@ -1749,6 +1754,9 @@ Bitdefender bdc - http://www.bitdefender.com/ .TP .B fsav +Command Anti-Virus - http://www.commandsoftware.com/ +.TP +.B fsav F-Secure Anti-Virus - http://www.f-secure.com/ .TP .B hbedv should be: @@ -1749,6 +1754,9 @@ Bitdefender bdc - http://www.bitdefender.com/ .TP +.B csav +Command Anti-Virus - http://www.commandsoftware.com/ +.TP .B fsav F-Secure Anti-Virus - http://www.f-secure.com/ .TP .B hbedv Ah well! Nobody's perfect. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] mimedefang-2.45 and dual opteron
I've had mimedefang-2.45 spamassassin-3.0.0 clamav-0.80rc2 running for about a week OK on a dual opteron. Then yesterday a friendly bz2 file came in as an attachment and clamav threw a fit. I upgraded to clamav-0.80rc3 and still had the same problem, so I went back to clamav-0.75.1 which handled the bz2 file OK on i386 machine. That's when mimdefang stopped working. I've gone through a myriad of software combinations and just cannot get mimedefang to work again. I can't even get the original problem to occur again. sendmail/mimedefang just stops on receiving an email as below. Sep 30 22:51:52 mail mimedefang-multiplexor[2396]: Starting slave 1 (pid 2479) (2 running): Bringing slaves up to minSlaves (2) Sep 30 22:53:44 mail sendmail[3205]: i8UCrgoP003205: from=[EMAIL PROTECTED], size=1244, class=0, nrcpts=1, msgid=[EMAIL PROTECTED], proto=ESMTP, daemon=MTA, relay=video.maidment.com.au [192.168.2.5] I know I have missed something simple, but I just can't work out what it is. /var/spool/MIMEDefang, /var/spool/MD-Quarantine and /var/spool/MD-bayes are 0700 defang.defang What else should I check? -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] patch for Command Anti-Virus
Here is a patch to mimedefang-2.45 to support Command Anti-Virus (csav) Regards -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) diff -u ../mimedefang-2.45/Changelog ../mimedefang-2.45-patched/Changelog --- ../mimedefang-2.45/ChangelogThu Sep 23 01:26:47 2004 +++ ../mimedefang-2.45-patched/ChangelogThu Sep 30 14:41:02 2004 @@ -2,6 +2,10 @@ *** NOTE INCOMPATIBILITY ** to see if anything has changed that will affect your filter. +2004-09-30 Bill Maidment [EMAIL PROTECTED] + + * Added support for Command csav anti-virus. + 2004-09-22 David F. Skoll [EMAIL PROTECTED] * Version 2.45 RELEASED diff -u ../mimedefang-2.45/README ../mimedefang-2.45-patched/README --- ../mimedefang-2.45/README Thu Sep 23 00:30:03 2004 +++ ../mimedefang-2.45-patched/README Thu Sep 30 14:41:38 2004 @@ -233,6 +233,7 @@ --disable-trend Do not include support for Trend Filescanner/Interscan --disable-AvpLinux Do not include support for AVP AvpLinux --disable-clamavDo not include support for clamav + --disable-csav Do not include support for Command Anti-Virus --disable-fsav Do not include support for F-Secure Anti-Virus --disable-fprot Do not include support for F-prot Anti-Virus --disable-sophieDo not include support for Sophie Common subdirectories: ../mimedefang-2.45/SpamAssassin and ../mimedefang-2.45-patched/SpamAssassin diff -u ../mimedefang-2.45/configure ../mimedefang-2.45-patched/configure --- ../mimedefang-2.45/configureThu Sep 23 00:51:46 2004 +++ ../mimedefang-2.45-patched/configureWed Sep 29 20:23:28 2004 @@ -308,7 +308,7 @@ # include unistd.h #endif -ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS CC CFLAGS LDFLAGS CPPFLAGS ac_ct_CC EXEEXT OBJEXT AR INSTALL_PROGRAM INSTALL_SCRIPT INSTALL_DATA PERL PERLPREFIX PERLSITEPREFIX PERLVENDORPREFIX PERLINSTALLARCHLIB PERLINSTALLPRIVLIB PERLINSTALLBIN PERLINSTALLMAN1DIR PERLINSTALLMAN3DIR PERLINSTALLSCRIPT PERLINSTALLSITEARCH PERLINSTALLSITELIB PERLINSTALLDATA PERLINSTALLSITEDATA PERLINSTALLVENDORDATA PERLINSTALLCONF PERLINSTALLSITECONF PERLINSTALLVENDORCONF NM DEFANGUSER IP_HEADER CONFSUBDIR CLEANUP_DEFS SETLOGSOCK_UNIX HAVE_SPAM_ASSASSIN CPP EGREP USE_UNIX_SYSLOG USE_SYS_SYSLOG EMBPERLCFLAGS EMBPERLLDFLAGS EMBPERLLIBS EMBPERLOBJS EMBPERLDEFS MINCLUDE SPOOLDIR QDIR HBEDV VEXIRA NAI BDC SOPHOS TREND CLAMSCAN AVP AVP_KAVSCANNER AVP_KAVDAEMON AVP5 FSAV FPROT SOPHIE NVCC CLAMD TROPHIE LIBMILTER LIBSM SENDMAILPROG RM ENABLE_DEBUGGING PTHREAD_FLAG VERSION LIBS_WITHOUT_PTHREAD CONFDIR_EVAL LIBOBJS LTLIBOBJS' +ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS CC CFLAGS LDFLAGS CPPFLAGS ac_ct_CC EXEEXT OBJEXT AR INSTALL_PROGRAM INSTALL_SCRIPT INSTALL_DATA PERL PERLPREFIX PERLSITEPREFIX PERLVENDORPREFIX PERLINSTALLARCHLIB PERLINSTALLPRIVLIB PERLINSTALLBIN PERLINSTALLMAN1DIR PERLINSTALLMAN3DIR PERLINSTALLSCRIPT PERLINSTALLSITEARCH PERLINSTALLSITELIB PERLINSTALLDATA PERLINSTALLSITEDATA PERLINSTALLVENDORDATA PERLINSTALLCONF PERLINSTALLSITECONF PERLINSTALLVENDORCONF NM DEFANGUSER IP_HEADER CONFSUBDIR CLEANUP_DEFS SETLOGSOCK_UNIX HAVE_SPAM_ASSASSIN CPP EGREP USE_UNIX_SYSLOG USE_SYS_SYSLOG EMBPERLCFLAGS EMBPERLLDFLAGS EMBPERLLIBS EMBPERLOBJS EMBPERLDEFS MINCLUDE SPOOLDIR QDIR HBEDV VEXIRA NAI BDC SOPHOS TREND CLAMSCAN AVP AVP_KAVSCANNER AVP_KAVDAEMON AVP5 CSAV FSAV FPROT SOPHIE NVCC CLAMD TROPHIE LIBMILTER LIBSM SENDMAILPROG RM ENABLE_DEBUGGING PTHREAD_FLAG VERSION LIBS_WITHOUT_PTHREAD CONFDIR_EVAL LIBOBJS LTLIBOBJS' ac_subst_files='' # Initialize some variables set by options. @@ -857,6 +857,7 @@ --disable-AvpLinux Do not include support for AVP AvpLinux --disable-aveclient Do not include support for AVP5 aveclient --disable-clamavDo not include support for clamav + --disable-csav Do not include support for CSAV Anti-Virus --disable-fsav Do
Re: [Mimedefang] Is this mimedefang or spamassassin? re-send
Paul Murphy wrote: Bill, See http://lists.roaringpenguin.com/pipermail/mimedefang/2004-September/024386.html - I looked into this a while back, and it seems to be due to a bug in the code. The solution is to use SA 3.0 and switch to the SQL backend for the Bayes and AWL databases, since the DBM code has always been a bit flaky in multi-user environments, which multi-slave MD is of course. Thanks for that. It does confirm some of my suspicions. However, I have got round the problem, rather than solve it, by adding lock_method flock to /etc/mail/spamassassin.local.cf as suggested in the UPGRADE notes. i.e. I avoid NFS where the error seems to come from. Cheers -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Is this mimedefang or spamassassin? re-send
Sorry to have to re-send this, but I'm still getting this problem with the bayes locking file. Can anyone help me. I've double- triple- checked my configs and I can't see the cause. /var/spool/MIMEDefang is 0700 defang.defang MX_USER=defang Every couple of hours I get these messages, but I cannot find why. I think the initial error comes from the UnixNFSSafe.pm module, but I'm not sure. Can anyone give me a clue? Unfortunately I can't send to the spamassassin list as they can't cope with my SPF/SRS setup :-( Sep 19 20:48:13 b090lx4 mimedefang-multiplexor[15864]: Slave 0 stderr: unlock: 15864 failed to create lock tmpfile /var/spool/MIMEDefang/bayes.lock.b090lx4.elgas.com.au.15864 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Locker/UnixNFSSafe.pm line 144. Sep 19 20:48:13 b090lx4 mimedefang.pl[15864]: MDLOG,i8JAm7fR016241,spam,44.489,203.50.4.186,[EMAIL PROTECTED],[EMAIL PROTECTED], Sep 19 20:48:13 b090lx4 mimedefang.pl[15864]: filter: i8JAm7fR016241: bounce=1 discard=1 Sep 19 20:48:13 b090lx4 mimedefang[16244]: i8JAm7fR016241: Bouncing because filter instructed us to Sep 19 20:48:13 b090lx4 sendmail[16241]: i8JAm7fR016241: Milter: data, reject=554 5.7.1 Spam email rejected. Sep 19 20:48:13 b090lx4 sendmail[16241]: i8JAm7fR016241: to=[EMAIL PROTECTED], delay=00:00:06, pri=31112, stat=Spam email rejected. Sep 19 20:48:15 b090lx4 sendmail[16240]: i8JAm2fR016240: lost input channel from linux.tfcis.org [210.70.137.19] to MTA after rcpt Sep 19 20:48:15 b090lx4 sendmail[16240]: i8JAm2fR016240: from=[EMAIL PROTECTED], size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=linux.tfcis.org [210.70.137.19] Sep 19 20:48:22 b090lx4 mimedefang-multiplexor[15864]: Slave 1 stderr: lock: 15864 unlink of temp lock /var/spool/MIMEDefang/bayes.lock.b090lx4.elgas.com.au.15864 failed: No such file or directory Sep 19 20:48:22 b090lx4 mimedefang-multiplexor[15864]: Slave 1 stderr: Cannot open bayes databases /var/spool/MIMEDefang/bayes_* R/W: lock failed: No such file or directory -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Is this mimedefang or spamassassin?
Every couple of hours I get these messages, but I cannot find why. I think the initial error comes from the UnixNFSSafe.pm module, but I'm not sure. Can anyone give me a clue? Unfortunately I can't send to the spamassassin list as they can't cope with my SPF/SRS setup :-( Sep 19 20:48:13 b090lx4 mimedefang-multiplexor[15864]: Slave 0 stderr: unlock: 15864 failed to create lock tmpfile /var/spool/MIMEDefang/bayes.lock.b090lx4.elgas.com.au.15864 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Locker/UnixNFSSafe.pm line 144. Sep 19 20:48:13 b090lx4 mimedefang.pl[15864]: MDLOG,i8JAm7fR016241,spam,44.489,203.50.4.186,[EMAIL PROTECTED],[EMAIL PROTECTED], Sep 19 20:48:13 b090lx4 mimedefang.pl[15864]: filter: i8JAm7fR016241: bounce=1 discard=1 Sep 19 20:48:13 b090lx4 mimedefang[16244]: i8JAm7fR016241: Bouncing because filter instructed us to Sep 19 20:48:13 b090lx4 sendmail[16241]: i8JAm7fR016241: Milter: data, reject=554 5.7.1 Spam email rejected. Sep 19 20:48:13 b090lx4 sendmail[16241]: i8JAm7fR016241: to=[EMAIL PROTECTED], delay=00:00:06, pri=31112, stat=Spam email rejected. Sep 19 20:48:15 b090lx4 sendmail[16240]: i8JAm2fR016240: lost input channel from linux.tfcis.org [210.70.137.19] to MTA after rcpt Sep 19 20:48:15 b090lx4 sendmail[16240]: i8JAm2fR016240: from=[EMAIL PROTECTED], size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=linux.tfcis.org [210.70.137.19] Sep 19 20:48:22 b090lx4 mimedefang-multiplexor[15864]: Slave 1 stderr: lock: 15864 unlink of temp lock /var/spool/MIMEDefang/bayes.lock.b090lx4.elgas.com.au.15864 failed: No such file or directory Sep 19 20:48:22 b090lx4 mimedefang-multiplexor[15864]: Slave 1 stderr: Cannot open bayes databases /var/spool/MIMEDefang/bayes_* R/W: lock failed: No such file or directory -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] mimedefang-2.45-BETA-4
Well I installed MIME-BASE64-3.03 and MIME-tools-5.413 and I get the following errors. What have I missed? Sep 17 19:50:45 bill mimedefang-multiplexor[11336]: Starting slave 0 (pid 11389) (1 running): Bringing slaves up to minSlaves (2) Sep 17 19:50:45 bill mimedefang-multiplexor[11336]: Slave 0 stderr: MIME::QuotedPrint version 3.03 required--this is only version 2.16 at /usr/lib/perl5/site_perl/5.8.3/MIME/Words.pm line 86. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.3/MIME/Words.pm line 86. Compilation failed in require at /usr/local/bin/mimedefang.pl line 67. BEGIN failed--compilation aborted at /usr/local/bin/mimedefang.pl line 67. Sep 17 19:50:45 bill mimedefang-multiplexor[11336]: Reap: Idle slave 0 (pid 11389) exited normally with status 255 (SLAVE DIED UNEXPECTEDLY) Sep 17 19:50:45 bill mimedefang-multiplexor[11336]: Slave 0 resource usage: req=0, scans=0, user=0.170, sys=0.020, nswap=0, majflt=465, minflt=556, maxrss=0, bi=0, bo=0 -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
David F. Skoll wrote: It's probably finding the *old* MIME-Base64 module on our @INC path. You need to ensure that /usr/lib/perl5/site_perl is on @INC before the usual include directory. I thought I took care of this; could you send me the output of: fgrep 'use lib' /usr/local/bin/mimedefang.pl Thanks, David. Here 'tis. BTW I'm running FC1 [EMAIL PROTECTED] bill]# fgrep 'use lib' /usr/local/bin/mimedefang.pl use lib '/usr/lib/perl5/site_perl/5.8.3'; [EMAIL PROTECTED] bill]# -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
David F. Skoll wrote: On Fri, 17 Sep 2004, Bill Maidment wrote: [EMAIL PROTECTED] bill]# fgrep 'use lib' /usr/local/bin/mimedefang.pl use lib '/usr/lib/perl5/site_perl/5.8.3'; OK. How about: find /usr/lib/perl5 -name 'QuotedPrint.pm' [EMAIL PROTECTED] bill]# find /usr/lib/perl5 -name 'QuotedPrint.pm' /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm /usr/lib/perl5/site_perl/5.8.3/MIME/Decoder/QuotedPrint.pm /usr/lib/perl5/5.8.3/PerlIO/via/QuotedPrint.pm /usr/lib/perl5/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm [EMAIL PROTECTED] bill]# -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
David F. Skoll wrote: On Fri, 17 Sep 2004, Bill Maidment wrote: [EMAIL PROTECTED] bill]# find /usr/lib/perl5 -name 'QuotedPrint.pm' /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm Weird. What's the output of this two-line test program: use lib '/usr/lib/perl5/site_perl/5.8.3'; print INC = @INC\n; [EMAIL PROTECTED] bill]# ./aa.pl INC = /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/5.8.3/i386-linux-thread-multi /usr/lib/perl5/5.8.3 /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl . [EMAIL PROTECTED] bill]# -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
David F. Skoll wrote: On Sat, 18 Sep 2004, Bill Maidment wrote: INC = /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi How about the permissions on the QuotedPrint.pm module under site_perl? [EMAIL PROTECTED] bill]# la /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm -r--r--r-- 1 root root 5870 Feb 20 2004 /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm [EMAIL PROTECTED] bill]# -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
Bill Maidment wrote: How about the permissions on the QuotedPrint.pm module under site_perl? [EMAIL PROTECTED] bill]# la /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm -r--r--r-- 1 root root 5870 Feb 20 2004 /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/MIME/QuotedPrint.pm [EMAIL PROTECTED] bill]# This looks like an old version 2.11 and I get the same result after doing make realclean and re-installing MIME-Base-3.03 Too much for me. My bed is calling. I've been coding for 12 hours straight. -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mimedefang-2.45-BETA-4
David F. Skoll wrote: On Sat, 18 Sep 2004, Bill Maidment wrote: This looks like an old version 2.11 and I get the same result after doing make realclean and re-installing MIME-Base-3.03 When you re-installed MIME-Base-3.03, did you remember to do: perl Makefile.PL INSTALLDIRS=site David Thank you so very much. That did the trick. I've never used the INSTALLDIRS before. Is this a special requirement for mimedefang, MIME-Base64 or FC1 ? Is this documented somewhere ? Or is it a standard approach? I'm always ready to learn from my mistakes :-) -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] md_check_against_smtp_server
Bill Maidment wrote: Hi I'm trying to use md_check_against_smtp_server to check the email recipient against valid users on another mail server. The problem I have is that invalid recipients cause the incoming email to continually bounce between my two mail servers. Valid recipients work fine! OK. I've finally found the last problem. I had, for some strange reason, set LUSER_RELAY in the sendmail.mc on the internal server, to point to the external server. Once that was removed, and I added the renaming host line as previously suggested, all was well. Thanks everyone for all the assistance. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Deadline for SPF records
Joseph Brennan wrote: So, all we do is change all the mail servers on the net. :-) Now you're getting the idea :-) Revolution begins at home. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] md_check_against_smtp_server
Hi
I'm trying to use md_check_against_smtp_server to check the email
recipient against valid users on another mail server.
The problem I have is that invalid recipients cause the incoming email
to continually bounce between my two mail servers. Valid recipients work
fine!
Any clues as to what I've missed/got wrong?
I have this in sendmail.mc on the other mail server. Could this be the
cause?
define(`SMART_HOST',`mail.maidment.com.au')
mimedefang-filter snippet and email sample follow:
#***
sub filter_recipient ($) {
my($recip, $sender, $ip, $host, $first, $helo,
$rcpt_mailer, $rcpt_host, $rcpt_addr) = @_;
return md_check_against_smtp_server($sender, $recip,
mail.maidment.com.au,
video.maidment.com.au);
}
Date: Mon, 2 Aug 2004 15:15:07 +1000
From: Mail Delivery Subsystem [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-Spam-Score: -0.074 ()
BAYES_01,IS_A_BOUNCE,L_hR_NOREPLY,MY_BOUNDARY3,MY_MTPARENS
X-Scanned-By: MIMEDefang 2.42
X-Scanned-By: MIMEDefang 2.45
The original message was received at Mon, 2 Aug 2004 15:13:33 +1000
from mail.maidment.com.au [192.168.2.2]
- The following addresses had permanent fatal errors -
[EMAIL PROTECTED]
(reason: 554 5.4.6 Too many hops)
(expanded from: [EMAIL PROTECTED])
- Transcript of session follows -
554 5.4.6 Too many hops 26 (25 max): from
[EMAIL PROTECTED] via localhost,
to [EMAIL PROTECTED]
Reporting-MTA: dns; video.maidment.com.au
Arrival-Date: Mon, 2 Aug 2004 15:13:33 +1000
Final-Recipient: RFC822; [EMAIL PROTECTED]
X-Actual-Recipient: RFC822; [EMAIL PROTECTED]
Action: failed
Status: 5.4.6
Diagnostic-Code: SMTP; 554 5.4.6 Too many hops
Last-Attempt-Date: Mon, 2 Aug 2004 15:15:07 +1000
Return-Path: [EMAIL PROTECTED]
Received: from mail.maidment.com.au (mail.maidment.com.au [192.168.2.2])
by video.maidment.com.au (8.13.0/8.13.0) with ESMTP id i725DXwF032594
for [EMAIL PROTECTED]; Mon, 2 Aug 2004 15:13:33 +1000
Received: from video.maidment.com.au (video.maidment.com.au
[192.168.2.5])
by mail.maidment.com.au (8.13.0/8.13.0) with ESMTP id i725DRBR013005
for [EMAIL PROTECTED]; Mon, 2 Aug 2004 15:13:27 +1000
Received: from mail.maidment.com.au (mail.maidment.com.au [192.168.2.2])
by video.maidment.com.au (8.13.0/8.13.0) with ESMTP id i725DV5U032585
for [EMAIL PROTECTED]; Mon, 2 Aug 2004 15:13:31 +1000
etc...
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] md_check_against_smtp_server
Jan Pieter Cornet wrote: On Mon, Aug 02, 2004 at 05:41:19PM +1000, Bill Maidment wrote: I'm trying to use md_check_against_smtp_server to check the email recipient against valid users on another mail server. Wild guess: have you enabled filter_recipient processing by running mimedefang with the -t option? (or by specifying MX_RECIPIENT_CHECK=yes in the appropriate startup script). MX_RECIPIENT_CHECK=yes is set You are testing here against the recipient given by the external relay. I noticed in the headers below that you are actually forwarding to [EMAIL PROTECTED] You might want to make the same translation before checking, by adding: $recip =~ s/\@(mail\.)?maidment\.com\.au/[EMAIL PROTECTED]/i; I didn't deliberately rename to [192.168.2.5], maybe something to do with SRS or something I did in sendmail that I've forgotten about. But that was part of the problem. Apparently you are rewriting to [EMAIL PROTECTED] If this works for known users, then maybe you added those users to something like virtusertable? If so, maybe you forgot to add the catch-all entry at the end of virtusertable, saying: @[192.168.2.5] error:5.1.1 No such user Yep. This was the biggy. I didn't move my /etc/mail/access rules from the external server to the internal server, so there was no catch-all. Many thanks for your help. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] md_check_against_smtp_server
Jan Pieter Cornet wrote: You are testing here against the recipient given by the external relay. I noticed in the headers below that you are actually forwarding to [EMAIL PROTECTED] You might want to make the same translation before checking, by adding: $recip =~ s/\@(mail\.)?maidment\.com\.au/[EMAIL PROTECTED]/i; ... or something similar. - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 554 5.4.6 Too many hops) (expanded from: [EMAIL PROTECTED]) This turned out to be bug in sendmail-8.13.0 (fixed in 8.13.1) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] md_check_against_smtp_server
Bill Maidment wrote: Jan Pieter Cornet wrote: You are testing here against the recipient given by the external relay. I noticed in the headers below that you are actually forwarding to [EMAIL PROTECTED] You might want to make the same translation before checking, by adding: $recip =~ s/\@(mail\.)?maidment\.com\.au/[EMAIL PROTECTED]/i; ... or something similar. - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 554 5.4.6 Too many hops) (expanded from: [EMAIL PROTECTED]) This turned out to be bug in sendmail-8.13.0 (fixed in 8.13.1) Replying to myself. No it wasn't!!! I was confusing mail logs with mail headers. The apparent forwarding is from the define(`MAIL_HUB', `[192.168.2.5]') statement in sendmail.mc ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.45-BETA-2 is available
David F. Skoll wrote: Hi, MIMEDefang 2.45-BETA-2 is at http://www.mimedefang.org/node.php?id=1 The main change is a greatly-improved watch-mimedefang script. This is a Tcl/Tk script for monitoring a MIMEDefang server. The new version features four graphs showing various aspects of the server: Number of busy slaves at a given instant, average number of busy slaves during a SCAN request, average latency of a SCAN, and average number of messages/second scanned. Some time ago there was mention of displaying the server name in watch-mimedefang. Is this now possible? Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.45-BETA-2 is available
David F. Skoll wrote: On Thu, 29 Jul 2004, Bill Maidment wrote: Some time ago there was mention of displaying the server name in watch-mimedefang. Is this now possible? No, but the ssh ... string in the Control Command box should make it pretty obvious which server you're watching. Not when you are already ssh into multiple boxen and each is running watch-mimedefang. It would be nice to have the server name in the heading bar. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.45-BETA-1 is available
David F. Skoll wrote: Did you install the Sendmail 8.13.0 libmilter.a? The error you see happens if you compile against the 8.13.0 headers, but try to link against an 8.12.x library. Yes, that was the error. Funny, though, because I did sh Build -c sh Build install in the senmail top directory and it appears to have failed to do the libmilter directory. I did the libmilter directory separately and all was well. This is what I see in the sendmail top directory Makefile SUBDIRS= libsm libsmutil libsmdb sendmail editmap mail.local \ mailstats makemap praliases rmail smrsh vacation # libmilter: requires pthread which explains why. Thanks for your help Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] SpamAssassin 3.0.0-pre2 is released! (fwd)
Doug Brott wrote: If you are using a MIMEdefang version 2.42 then you will have problems. Since you seemed to have run an earlier version of 3.0 then I am curious as to why you either (1) got the earlier version to work or (2) didn't get the pre2 to work. So, I guess the first thing to check is to see if you are running Mimedefang 2.42 or higher. I'm running mimedefang.2.44-beta1 I've been using SA-3.x for almost 3 months now with great success. The only real SA/Mimedefang issue that I had was a change in the SA Application Interface. I received failures in the sendmail log due to the fact that mimedefang quit unexpectedly due to this API change. Once David integrated the minor change into mimedefang, things worked great. I was also running sendmail-8.13.0. When I reverted to sendmail-8.12.11 the problems went away, well at least for known good emails. Perhaps there's something I had wrong in the sendmail setup. Curiously, I have my internal mail server running sendmail.8.13.0/SA-3/mimdefang-2.44-beta1 with no problems at all. Maybe the new sendmail doesn't like talking to older sendmails Thanks for your assistance. Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] SpamAssassin 3.0.0-pre2 is released! (fwd)
Kenneth Porter wrote: Subject: SpamAssassin 3.0.0-pre2 is released! I've just tried it out and I get the following messages when receiving email Jul 11 15:08:10 mail sendmail[17457]: i6B52dxM017457: syd4.elgas.com.au [203.222.154.44] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Is this caused by something I've done wrong/not done? I'm using the same configuration as an earlier 3.0-cvs (sorry can't remember the date) I changed back to a 2.63 release and then the same email came through OK Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Verifying mailbox...
Joseph Brennan wrote: I don't know of a single system in the world that does the sender rewrite needed for forwarding and relaying. I think you're seeing an example of the problem right there-- rejecting mail from your own relay host. Ooops. SRS wasn't installed on the relay. Thanks for the clue. BTW This is an experimental site for testing bleeding edge programs. It doesn't matter if I lose some email occassionally. I can live without most of it ;-) Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Verifying mailbox...
[EMAIL PROTECTED] wrote: Third way and one that I am work slowly on implementing: Use sendmail to call an LDAP directory to verify addresses. I'm still working on the LDAP directory, so don't ask me how to configure sendmail! Since we filter for over 20 domains not under our control, I want the information to be available in real time. We tried that, but found that LDAP was way too slow. Let me know if you get it going at a reasonable speed. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Verifying mailbox...
Jim McCullars wrote: The md_check_against_smtp_server function in mimedefang-filter will do what you want, assuming that the downstream spool will indeed return a unknown user message when it gets the RCPT To: command. This doesn't seem to play well with SPF/SRS. I get the following back. Any idea what is going on/how to correct my setup? Cheers Bill The original message was received at Wed, 7 Jul 2004 13:55:16 +1000 from mail.maidment.com.au [192.168.2.2] - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 550 5.7.1 [EMAIL PROTECTED]... [RCPT TO: [EMAIL PROTECTED]] Please see htt...pf.pobox.com/[EMAIL PROTECTED]ip=192.168.2.5receiver=mail.maidment.com.au) (expanded from: [EMAIL PROTECTED]) - Transcript of session follows - ... while talking to mail.maidment.com.au.: DATA 550 5.7.1 [EMAIL PROTECTED]... [RCPT TO: [EMAIL PROTECTED]] Please see http://spf.pobox.com/[EMAIL PROTECTED]ip=192.168.2.5receiver=mail.maidment.com.au 550 5.1.1 [EMAIL PROTECTED]... User unknown 503 5.0.0 Need RCPT (recipient) Reporting-MTA: dns; video.maidment.com.au Received-From-MTA: DNS; mail.maidment.com.au Arrival-Date: Wed, 7 Jul 2004 13:55:16 +1000 Final-Recipient: RFC822; [EMAIL PROTECTED] X-Actual-Recipient: RFC822; [EMAIL PROTECTED] Action: failed Status: 5.7.1 Remote-MTA: DNS; mail.maidment.com.au Diagnostic-Code: SMTP; 550 5.7.1 [EMAIL PROTECTED]... [RCPT TO: [EMAIL PROTECTED]] Please see http://spf.pobox.com/[EMAIL PROTECTED]ip=192.168.2.5receiver=mail.maidment.com.au Last-Attempt-Date: Wed, 7 Jul 2004 13:55:16 +1000 Subject: test99 From: Bill Maidment [EMAIL PROTECTED] Date: Wed, 07 Jul 2004 13:55:10 +1000 To: [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] Received: from mail.maidment.com.au (mail.maidment.com.au [192.168.2.2]) by video.maidment.com.au (8.13.0/8.13.0) with ESMTP id i673tG7A016243 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 13:55:16 +1000 Received: from b090lx4.elgas.com.au (syd4.elgas.com.au [203.222.154.44]) by mail.maidment.com.au (8.13.0/8.13.0) with ESMTP id i673tC1k025963 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 13:55:13 +1000 Received: from b090_lx0.elgas.com.au (b090_lx0.elgas.com.au [1.90.1.250]) by b090lx4.elgas.com.au (8.12.8/8.12.8) with ESMTP id i673tAdr016801 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 13:55:11 +1000 Received: from [1.90.1.22] (letters.elgas.com.au [1.90.1.22]) by b090_lx0.elgas.com.au (8.12.10/8.12.10) with ESMTP id i673tAnW027813; Wed, 7 Jul 2004 13:55:10 +1000 Message-ID: [EMAIL PROTECTED] User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040616 X-Accept-Language: en-us, en MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--=_1089172510-23941-82 X-Scanned-By: MIMEDefang 2.44 X-Scanned-By: MIMEDefang 2.42 X-Spam-Score: -4.9 () ALL_TRUSTED,BAYES_00,DNS_FROM_RFC_WHOIS_B Received-SPF: pass (mail.maidment.com.au: domain of [EMAIL PROTECTED] designates 203.222.154.44 as permitted sender) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Verifying mailbox...
Ashley M. Kirchner wrote: I have MX_RECICPIENT_CHECK set to yes in /etc/sysconfig/mimedefang. However, I just checked the running processes, and I don't see -t in the argument line (wrapped for legibility): # ps auxww | grep mimedefang Well I did (see below), but it still doesn't seem to work!!! 25450 ?S 0:00 /usr/local/bin/mimedefang -P /var/spool/MIMEDefang/mimedefang.pid -m /var/spool/MIMEDefang/mimedefang-multiplexor.sock -U defang -t -p /var/spool/MIMEDefang/mimedefang.sock ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] ClamAV not detecting all viruses
Stewart James wrote: OK here is the situation. I have clamav-daemon which is run before trend micro's vscan. The majority of viruses are found by clamav with no problems. One or two slip past and are picked up by trend. Which version of clamav. We had this issue before we installed 0.73. Still checking if it's OK in 0.73 Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] ClamAV not detecting all viruses
Stewart James wrote: OK. It's .72, I remeber reading somewhere it was an issue in 0.70 but had been fixed. (and osrry to all for not inluding version numbers. Hmmm.. it was supposed to have been fixed in 0.72, we couldn't use 0.72 because of a Proxy issue, so I can't confirm if it actually did get fixed there. Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Mail Bypassing Mimedefang
Stephen Smoogen wrote: My advice is to log your hours, time, and the emails and then let the company lawyers that you are worried that the company is setting itself up for a lawsuit for allowing harrassing and abusive email in. Send them some of the emails, the amount of time it is costing, and how effective uses are being not allowed to be implemented. At that point it is up to them to figure out if the company has deep enough pockets to handle the suits. That may well work in the US, but here in Oz we avoid lawyers and lawsuits whenever possible. There's generally an attitude of While we can get away with it, we'll keep going that way. My approach is to put a protective shell around whatever the b*st**ds try to do. Remember the enemy is within as well as outside!!! I just thought it would be real cool to somehow intercept and sanitise whatever comes through SOCKS. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Mail Bypassing Mimedefang
Hi Our site is well protected by mimedefang/spamassassin/clamav/file-scan etc, but unfortunately the powers-that-be insist on allowing people to access other external mail servers via socks. The result is that we get all sorts of undesireable email completely bypassing the mail server. Is there any way of linking the socks server with mimedefang? Or is there another product that will do the job? Thanks Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Mimedefang and Virus'
Use
md_graphdefang_log('virus', $VirusName,
$RelayAddr);
Bill
Bryce Rogers wrote:
if ($category eq virus) {
md_graphdefang('virus',$VirusName, $RelayAddr);
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Mimedefang and Virus'
Use md_graphdefang_log()
Bill
Bryce Rogers wrote:
I have justed installed Mimedefang 2.39 and Clamav on a RedHat 9 server.
My problem is the server is not logging when a virus has been detected.
Right now it will just delete the email and not logged it anywhere.
I have checked my mimedefang-filter in the /etc/mail directory and I
have logging enabled.
md_graphdefang_log_enable('mail', 1);
# Virus scan
if ($FoundVirus) {
my($code, $category, $action);
$VirusScannerMessages = ;
($code, $category, $action) = entity_contains_virus($entity);
# If you are more paranoid, change to: if ($action eq quarantine) {
if ($category eq virus) {
md_graphdefang('virus',$VirusName, $RelayAddr);
Everything is being logged except when I recieve a virus and I would like
to keep a log of when a virus is detected and removed for my records
incase any questions arise about someone waiting for an email.
Bryce
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] ClamAV Freshclam Bug
Hi I previously reported a bug in freshclam/manager.c at line 362. My fix was incorrect and the problem is also at line 460. Both lines 362 and 460 need to be changed from: char* buf = mmalloc(strlen(user)*2+4); to: char *buf = mmalloc((strlen(user) + strlen(pass)) * 2 + 3); This ensures that buf is large enough to contain the base64 expansion of user:pass, including the \0. This has been reported on the ClamAV list. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Trouble with ClamAV-0.66
Just letting you guys know that I have found a bug in clamav-0.66 when you are using the HTTPProxyUsername and HTTPProxyPassword parameters. The fix is: In freshclam/manager.c line 362 changed char* buf = mmalloc(strlen(user)*2+4); to char* buf = mmalloc(strlen(user)*2+5); to allow for the \0 to be added. Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Using more than one virus scanner is a good idea.
H We had in /usr/local/etc/clamav.conf # Files in archives larger than this limit won't be scanned. # Value of 0 disables the limit. # WARNING: Due to the unrarlib implementation, whole files (one by one) in RAR # archives are decompressed to the memory. That's why never disable # this limit (but you may increase it of course!) ArchiveMaxFileSize 10M So I assume that this refers to the size of the archive, rather than the size of the uncompressed file. It looks like I can reduce this to 100K or whatever. Thanks Bill John Mason Jr. wrote: On Tue, 2004-02-03 at 19:14, Bill Maidment wrote: Guys We came across a problem using virus scanners on .zip files with the --unzip etc on clamav. One of our users decided to send a 127MB attachment zipped to 5MB. To cut a long story short, the mail server timed out/ran out of disk space. Off the top of my head as I am not at work, you can adjust parameters in clamd.conf. I ran into a similar problem not to long ago. John ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Handling different viruses: discard message vs. drop attachment
Kelson Vibber wrote: OK, I think most people here would agree that just about all modern viruses generate their own messages rather than piggybacking on existing mail, so for anything like Klez, Sobig, and Mydoom, the obvious choice is to just discard the entire message (possibly placing it in quarantine). No bounce, no defanged message, no notification to the (fake) sender, just drop it in the memory hole. Wasn't the consensus last time to bounce all virus infected email with something like reject=554 5.7.1 Virus . ? Or am I opening up another can of worms (pun unintended)? Cheers Bill ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Using more than one virus scanner is a good idea.
We've had a couple like this and it turned out that the message.zip file didn't contain the virus Maybe there's a hoax virus going around or someone has sanitised it along the way. We've also had malformed .zip files get through until we changed the clamav call to specifically do --unzip as per an earlier post. Cheers Bill Elders Real Estate Ballina wrote: Glad to see I wasn't the only one. I tracked back through the logs to see why it got through clamd and MD... trying to work out why one slipped into my inbox which the backup AV caught not that I would of opened it anyway. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] New .zip virus?
I was thinking of the Archive Support parameters in clamav.conf We had 3 of these virii slip by the first server, but were caught by a second server with identical setup (i.e. MD 2.39/File-Scan 0.79/ClamAV 0.65) but they had slightly different freshclam update times. We're safe so far, but now we're getting all the virus warning messages from systems that insist on sending a message to the (spoofed) Sender. Roll on AOL insisting on SPF settings on the MX record. Cheers Bill [EMAIL PROTECTED] wrote: In article [EMAIL PROTECTED] you wrote: Make sure you have the settings on to scan through zip files, and you are running freshclam frequently. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Request for help: Virus-scanner invocation review [was Re: New .zip virus]
I'm trying this change now to see if it really makes a difference. But shouldn't clamav be unzipping by default? Bill [EMAIL PROTECTED] wrote: I think for clamav checks it's better to change command line options for archived files: in sub message_contains_virus_clamav () sub entity_contains_virus_clamav ($) ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] New .zip virus?
Hi ClamAV is picking it up as the Worm.SCO.A virus Cheers Bill Ashley M. Kirchner wrote: David F. Skoll wrote: I'm seeing bounces from messages I supposedly sent containing a .zip file. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] New .zip virus?
ClamAV now recognises Worm.SCO.A and Trojan.SCO.A I've not seen a new File-Scan yet So there are at least 2 variants... ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
