Re: [Mimedefang] blocking | and bad syntax in from address
On Fri, 18 Jun 2004, Joe Arnstein wrote: I've been noticing a lot of spam coming in with characters in the from address that don't work or are likely to be forged. These cause a backup in our outbound queue (lots of NDRs) so I'd rather they be rejected right off the bat. from=[EMAIL PROTECTED] from=Puri|[EMAIL PROTECTED] from=Rauly|[EMAIL PROTECTED] from=[EMAIL PROTECTED] from=80/[EMAIL PROTECTED] from=A/[EMAIL PROTECTED] Do any of the rfc's say this is improper syntax or forbiden characters? Should I block this? Can I block it? And if so can someone recommend a good way to do it? Anthony Howe's milter-spamc rejects such things with 553 5.1.[37] errors. I've never looked at his code, but it seems to work decently on my home mail server (which doesn't need mimedefang's flexibility). --Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] OT: adaptec scsi card help with fedora
On Thu, 29 Apr 2004, Andrew Jayes wrote: Sorry its way off topic, but I am trying to get a new mimedefang server up and running. Problem is it's the Intel nightshade board. I've disabled the symbios scsi chip and got a pci Adaptec aha 2940uw card to replace it. Trouble is where fedora used to hang on the smybios driver install it now hangs on the Adaptec driver install aic 7xxx. I have tried the Linux dd install with a driver disk and the Linux noprobe, neither of which will recognize the disks when it gets to partition time. Ah, it's a known issue, but the workarounds aren't guaranteed: https://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=107880 --Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Digest::SHA1 failing
On Fri, 19 Mar 2004, Jobst Schmalenbach wrote: Mar 19 18:26:02 piquet mimedefang-multiplexor: Slave 0 stderr: Can't locate Digest/SHA1.pm in @INC [] yet when I do on the commandline perl -e use Digest::SHA1; ; it works Are the perl in your $PATH and the perl being used by MIMEDefang one and the same? I.e., is there a /usr/local/bin/perl that different from /usr/bin/perl? -- Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Check this X-header out
On Mon, 15 Mar 2004, Ben Kamen wrote: I'll edit my rules... This works for me: score HABEAS_SWE 0.0 --Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] About to give up on mimedefang under RedhatLinux 9
On Fri, 12 Mar 2004, Steve Pfister wrote: I seem to have UTF-8... here's my /etc/sysconfig/i18n: LANG=en_US.UTF-8 SUPPORTED=en_US.UTF-8:en_US:en SYSFONT=latarcyrheb-sun16 What should I change it to? LANG=C will work. -- Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Greylisting problem with the default confTO_COMMAND
On Fri, 27 Feb 2004 [EMAIL PROTECTED] wrote: Which RFC(s) do these timeouts violate? RFC 1123, section 5.3.2. -- Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Greylisting problem with the default confTO_COMMAND
On Fri, 27 Feb 2004 [EMAIL PROTECTED] wrote: Which RFC(s) do these timeouts violate? RFC 1123, section 5.3.2. -- Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Replacing SpamAssassin with DSPAM
On Tue, 24 Feb 2004, Andrew S. Johnson wrote: The greylisting milter I found needs MySQL, which I don't have the resources for on my current server (K6-300 w/128MB RAM). MySQL is not a resource hog. If you don't want to go through the hassle of installing it, that's cool -- but once MySQL is installed, it won't be a significant drain on your system resources. --Paul Heinlein [EMAIL PROTECTED] ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Incredible spam obfuscation
On Thu, 19 Feb 2004, Joseph Brennan wrote:
# note iframe, script, object
if (/(iframe|script|object) /i) {
$badtag = $1;
$_ =~ s/(iframe|script|object) /no-$1 /ig;
}
$bla .= $_;
Would it be helpful to tweak the regex just a bit?
if ( /(iframe|script|object)\b/i ) {
$badtag = $1;
s/(iframe|script|object)\b/no-$1/ig;
}
That'd help catch something other than an ordinary space after the tag
name, since any form of whitespace (tabs, newlines) can be used.
--Paul Heinlein [EMAIL PROTECTED]
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
