Re: [Mimedefang] New to MIMEDEFANG
Quoting "R.Linga Reddy" <[EMAIL PROTECTED]>: Hi All, I am new to MIMEDEFANG, I am planing to install on FEDORA CORE 3 or CORE 4, will it support, and is there any problem, There shouldn't be any problem. This is a perl program and as long as you got perl on all the modules sugguested then you're ok. Meni Reagrds, Linga Reddy ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Kama Sutra worm set to bite next week
Is everybody ready for the next wave of viruses?? Kama Sutra worm set to bite next week... http://news.zdnet.com/2100-1009_22-6031881.html Meni ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.55 is released
To be honest, I don't think filter_helo is useful. It has the same effect as filtering on HELO during MAIL (because of the way Sendmail works), so I really think it's a waste of time. I am not a perl guru and am only a user of the mimedefang and not a contributer, BUT, i have to agree with (GURU) David... The regular filter sender is hadling the 'helo' quite well and it only a command away from the 'helo' command...?!? so what is the cost benefit? 10x David and other for a great tool! Meni However, for consistency, I suppose we should add MX_HELO_CHECK support to the Red Hat init files. Regards, David. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Mimedefang errors: What might be the cause?
Quoting Gary Funck <[EMAIL PROTECTED]>: From cf/README: confQUEUE_LAQueueLA [varies] Load average at which queue-only function kicks in. Default values is (8 * numproc) where numproc is the number of processors online (if that can be determined). confREFUSE_LA RefuseLA[varies] Load average at which incoming SMTP connections are refused. Default values is (12 * numproc) where numproc is the number of processors online (if that can be determined). For dedicated mail servers, the value of RefuseLA should be **greater** than the value of QueueLA. [snip] Hence RefuseLA should be **lower** than QueueLA, the number of daemon children should probably be lower than the number of queue runnners (MaxChildren vs. MaxQueueChildren). On a dedicated mail server, you want to set QueueLA *higher* than RefuseLA - the other way around will cause your queue to explode when the load is high [snip] The default of QueueLA lower than RefuseLA only makes sense for a server that does other things besides mail [snip] So which is it?? RefuseLA > QueueLA ?? or QueueLA > RefuseLA ?? should it be greater/higher or lower ?? Meni ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIMEDefang 2.55-BETA-2 is available
Quoting Tomasz Ostrowski <[EMAIL PROTECTED]>:
On Wed, 11 Jan 2006, David F. Skoll wrote:
*** NOTE INCOMPATIBILITY *** filter_begin NOW TAKES ONE ARGUMENT,
NOT ZERO. IF YOUR FILTER HAS A
PROTOTYPE FOR filter_begin, YOU SHOULD
FIX OR REMOVE THE PROTOTYPE
There'd be nice to have an example here. Not knowing perl very much I
would not understand "Fix or remove the prototype" without an example
from your previous post on this.
That means that in mimedefang-filter you have a sub function called
filter begin
that looks like this:
sub filter_begin () {
then you should change that to sub filter_begin ($) {
or
sub filter_begin {
AM i right, David ??
Regards
Tometzky
--
...although Eating Honey was a very good thing to do, there was a
moment just before you began to eat it which was better than when you
were...
Winnie the Pooh
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Mimedefang + SA go crazy !
hi, Now that i upgraded to SA 3.1 I have new problems. Today (sunday) SA started consuming all cpu resorces!! It opens threads/proccesses and use up to 98% cpu WTF??? Sometimes only one instance of SA will use 98% cpu?!?!? SA is called from mimedefang-filter (i don't run spamd). I don't have to say that this is cuasing big problems for me and the company... I also noticed (using top) that the spamassassin proccess are invoked by 'regular' users of the mailserver , eh?? (the local delivery mailbox users...non of them has shell access...) also...when cpu is not used by 'user' or 'sys' then the 'wait' state has the ~90% instead of 'idle' why is that so? pls advise, Meni Here some details (although i'm sure you're familiar with them since my last post last week.. ;-)) OS: debian 3.1 MTA: sendmail 8.13.4 Mimedefang: 2.54 SA: 3.1 ClamAV:0.87 more info by request... ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] poor performence from SA
Thanks Alan for you reply. Let me shed some light on the configuration, i was getting desperate and was mambling on how poor i am... :-) I have sendmail 8.13.4 running on debian 3.1. I install clamAV 0.87.1 and MimeDefang 2.54 I upgraded SA to 3.1 via: perl -MCPAN -e 'install MAIL::SPAMASSASIN'. I made some custom made rules in mimedefang-filter. SO as i see it it goes like this: Mail arrive at the MTA (sendmail) -> mimedefang steps in and send it to clam -> clam returns 'ok' -> mimedefang submit it to SA -> if not spam return to ->mimedefang -> check custom rules -> local delivery. I was wondering...should spamd be running??? I know mimedefang uses spamassassin even without it running...what is the proper way?? Should I see the headers of X-spam-status X-spam-version X-spam-level before or after X-scaned by: mimedefang Did you install spamass-milter during your 3.1 install? Don't think so?? how would i check that?? I stop about 1000 spam mail per day and get about 3000 legit mail per day (some of it SPAM!!) are you saying that you block about 1000 spam per day and receive 3000 per day, some of which is spam? by definition legit mail != SPAM. What i ment was that spam gets through so the number 3000 does include spam (i've taken to numbers from graphdefang). [snip] [quote] X-Spam-Status: No, score=3.1 required=5.0 tests=DATE_IN_FUTURE_96_XX, MSGID_FROM_MTA_ID autolearn=no version=3.0.3 [end quote] this was from the spamdrop mailbox!! why is it there is the spam-status is NO ??? for one thing, this still shows it was scanned with version 3.0.3. are you sure that you properly upgraded to 3.1? make sure that any pre-existing 3.0.3 installation has been successfully removed. Sorry i cut the wrong header from a privious mail, here is a more current one: X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on x.x.x.x X-Spam-Level: *** X-Spam-Status: No, score=3.6 required=5.0 tests=FROM_ILLEGAL_CHARS, HTML_IMAGE_ONLY_08,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,SUBJ_ILLEGAL_CHARS, USER_IN_WHITELIST_TO autolearn=no version=3.1.0 What i don't get is why is this mail in spamdrop??? it says clearly "Spam-Status: No..." what are you using to move the mail to your spamdrop? are you quarantining the mail in mimedefang? are you pre-sorting to a different folder using something like procmail? are you just discarding the mail? No procmail...mail is delivered to spamdrop by mimedefang sub filter_end. we're a little short of useful information here. Hope that helps understanding... Waiting you're insights... Meni ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] poor performence from SA
Quoting Kenneth Porter <[EMAIL PROTECTED]>: On Wednesday, January 11, 2006 4:51 PM +0200 [EMAIL PROTECTED] wrote: Sendmail 8.13.4 + mimedefang 2.54 + SA 3.0.3 + clamav A spam filter, like an anti virus, must be constantly updated to match the spam that comes in. It's not something you install and forget about. I'd recommend updating SA to 3.1.0 to get better I have upgraded to SA 3.1 but i get strange actions... I think that the SA is now checked before mimedefang filters and skips other filters...(but i'm not 100% sure about that? how can check?) I stop about 1000 spam mail per day and get about 3000 legit mail per day (some of it SPAM!!) I noticed another very anoing problem that I posted before but could NOT resolved it here...which is GOOD email with spam score less then 5 end-up in spamdrop instead of delivered to user mailbox! and checking the headers it says: [quote] X-Spam-Status: No, score=3.1 required=5.0 tests=DATE_IN_FUTURE_96_XX, MSGID_FROM_MTA_ID autolearn=no version=3.0.3 [end quote] this was from the spamdrop mailbox!! why is it there is the spam-status is NO ??? HELP!!! (David you're my idol...help me before i'm fired... :-)) Meni results. Are you subscribed to the SA users mailing list? There's a lot of people writing custom rule sets to deal with the latest trends. BTW, Clam just released a new version, I think to address a possible security exploit. Check the clam-announce list. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent from Interspace Ltd Web Hosting. www.interspace.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] poor performence from SA
Hi list, I'm fed up with SA ! Spam gets through no matter what i do :-( and ham is blocked (well not all ham, but even one is sometimes too much) My boss got MAD because he was expacting a mail from some client...so i checked the logs...mail.log ofcourse, i saw the usual from=...Milter add: header: X-Scanned-By: MIMEDefang 2.54 on x.x.x.x , to= stat=Sent BUT the mail was gone!! nowhere to be found!! not in the mailbox (/var/spool/mail/Xbox) not in spamdrop nowhere!! i going crazy! so i whitelisted the origin domain and it worked...i started getting the emails... What am i doing wrong???!!!??? Details (i know you want them...): OS: debian serge 3.1a Sendmail 8.13.4 + mimedefang 2.54 + SA 3.0.3 + clamav What else? did i forget anything? summery: good mail -> sometimes blocked bad mail -> sometimes go in (too often) SA learn -> useless Help! Meni This message was sent from Interspace Ltd Web Hosting. www.interspace.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Sober
Quoting Joseph Brennan <[EMAIL PROTECTED]>: Sober virus was supposed to change at midnight start of today UTC. The only thing I have noticed is that Sober.Y stopped dead just before 21:00 -0500 (EST) last night. We have had no messages with subject "You visit illegal websites" or "Your IP was logged" since that time. Last one was at 20:52. It's been 16 hours now. same here but for the last 48 hours now..(sunday 8th) Meni Maybe it's waiting for the weekend to start something new. Joseph Brennan Columbia University Information Technology ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent from Interspace Ltd Web Hosting. www.interspace.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] md_graphdefang_log called outside of message context
Quoting Paul Murphy <[EMAIL PROTECTED]>:
[snip]
md_syslog("warning", "SPOOFING : IP: $ip, Sender: $sender");
md_graphdefang_log('SPOOFING', $sender, $RelayAddr);
return ('REJECT', 'Sorry, but address spoofing is blocked.');
}
return ('CONTINUE', "ok");
}
[end-quote]
The problem is that only the mail.log is updated and not the
mimedefang.log!
and the next line in mail.log is:
md_graphdefang_log called outside of message context
md_graphdefang_log requires the Subject to be available, so cannot be used in
filter_sender, filter_recipient, etc, as these are called before the message
exists - only the envelope is available at this time.
Thanks for the explaination! that clarifies the problem i had.
But how do i enable this type of loggong for the md_graphdefang ??
I want to see these spoofing in the graphs made by graphdefng??
Thanks for your comments.
Meni
Instead, do the same thing manually using md_syslog:
md_syslog('info', "MDLOG,$MsgID,SPOOFING,0,$hostip,$sender,?,?");
Paul.
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.8/215 - Release Date: 27/12/2005
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
This message was sent using IMP, the Internet Messaging Program.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] md_graphdefang_log called outside of message context
Hi plp,
Sorry to bother you again...
I tried to look the answer in the archives but couldn't find it...(maybe i
wasn't looking hard enough)...
and i'm quite sure it was discussed before.
details:
debian sarge 3.1 + mimedefang 2.54 + sendmail 8.13
My problem is:
I added a filter_sender (and RESTARTED mimedefang with -s (!!) option)
the filter is a basic anti-spoofing rule that works good.
i keep a seperate log for the mimedefang called mimedefang.log
here is the code:
[quote]
sub filter_sender {
my ($sender, $ip, $hostname, $helo) = @_;
if ($sender)
[snip]
md_syslog("warning", "SPOOFING : IP: $ip, Sender: $sender");
md_graphdefang_log('SPOOFING', $sender, $RelayAddr);
return ('REJECT', 'Sorry, but address spoofing is blocked.');
}
return ('CONTINUE', "ok");
}
[end-quote]
The problem is that only the mail.log is updated and not the mimedefang.log!
and the next line in mail.log is:
md_graphdefang_log called outside of message context
Where did i go wrong
Thanks,
Meni
This message was sent using IMP, the Internet Messaging Program.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Error message:Problem running virus scanner: code=2
[EMAIL PROTECTED] wrote: Mathew, Sorry for not answering your exact question...BUT What should should sertainly do is upgrade mimedefang to latest 2.54 and SA 3.0.3 and clamAV 0.87 Actually, SA 3.0.3 is still susceptable to a remote exploitable DoS attack, if anything upgrade to 3.0.4 (or the recent 3.0.5 release if you want to stick with the 3.0.x series or you can go to version 3.1.x) bla ...this is what i ment... Meni likewise, ClamAV 0.87 is also vulnerable to a remote exploit and 0.87.1 is recommended. alan This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Error message:Problem running virus scanner: code=2
Mathew, Sorry for not answering your exact question...BUT What should should sertainly do is upgrade mimedefang to latest 2.54 and SA 3.0.3 and clamAV 0.87 Meni Quoting Mathew Thomas <[EMAIL PROTECTED]>: Dear All, We have got four mail gateways runninng Solaris 9 with Sendmail 8-13.1 Mimedefang 2.44 SpamAssassin 2.64 +Razor 2.61 + DCC 1.2.50 Clamav 0.75.1 Uvscan 4.3.20 There were thousands of following error message yesterday. The above version/set have been running for the last 2 years without any problem. It happened for an hour and looks like it is ok now and there is no error message now. Dec 7 06:00:03 its-mu-mail3.its.rmit.edu.au mimedefang.pl[27407]: [ID 702911 mail.warning] Problem running virus scanner: code=2, category=swerr, action=tempfail Dec 7 06:00:03 its-mu-mail3.its.rmit.edu.au sendmail[14048]: [ID 801593 mail.info] jB6J01ZS014048: from=<[EMAIL PROTECTED]>, size=3525, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=[59.17.124.244] Dec 7 06:00:03 its-mu-mail3.its.rmit.edu.au mimedefang.pl[27407]: [ID 702911 mail.debug] filter: jB6J01ZS014048: tempfail=1 Dec 7 06:00:03 its-mu-mail3.its.rmit.edu.au mimedefang[292]: [ID 210624 mail.debug] jB6J01ZS014048: Tempfailing because filter instructed us to Dec 7 06:00:03 its-mu-mail3.its.rmit.edu.au sendmail[14048]: [ID 801593 mail.info] jB6J01ZS014048: to=<[EMAIL PROTECTED]>, delay=00:00:01, pri=33525, stat=Problem running virus-scanner What would be the problem ? What should I do to fix it. Thanks Mathew ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] block list based on file containing words
Hi there, This list is just Great!! Yesterday i learn that you can "install" graphdefang to SEE the real action of mimedefang!! Thanks everyone who contribute to this wonderfull tool... I was wondering if you can help me (and i'm sure you can ;-) ) I want to make a list of forbiden words, one word per line, and have mimedefang test according to the list against the 'subject'. If a word exist...reject the email with error 550:: Spam not allowed! other wise continue checking... Please help me with the code... Thanks a zillion,billion,trillion (that's a big thanks!) Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] upgrade mimedefang to 2.54 failed with error
Dear List, I tried to upgrade mimedefang to 2.54. while running ./configure i got the following error message: configure: WARNING: Oops.. I couldn't find libmilter/mfapi.h. Please install Sendmail 8.12 It's odd because i got sendmail 8.13.4 complied with milter support?? can anyone suggest a fix? Conf: Debian Serge 3.1a + sendmail 8.13.4 + clamd 0.87 + SA 3.0.3 + mimedefang 2.51 (is there a simple way to upgrade?? or should i got through the whole proccess of configure,make, make install...etc.??) Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Discard by $Subject
Hello List, I have this iritating email keep getting through no matter how many times i put it through the sa-learn!!! My config is: Debian Sarge 3.1a with Sendmail 8.13 + mimedefang 2.51 (i know i should upgrade..but still) + sa 3.0.3 + clamd 0.87 So know i want to build a mimedefang rule to block this SPAM by its Subject, which never changes. Can any one offer a code?? (my perlish is a bit lame...;-) ) B.T.W. : you may have seen/recieved that spam...subject is: The Ultimate Online Pharmaceutical Thanks a 1 Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] AD/Commercial: Question
Quoting "David F. Skoll" <[EMAIL PROTECTED]>: -ray wrote: $4800/year would be too much for us (mid-sized university)i'd have trouble explaining to my boss what it even was, haha. $1500-$2000/year would be more in line with what we'd pay. What about $50/download? We update the data 2-3 times a week, but if you That sounds good...and reasonable... good luck with your project. Meni find that it doesn't get stale quickly, you could just download it once a month, or even only every three months. Just trying to figure out if it's worth doing... Regards, David. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] AD/Commercial: Question
400$ would be too much for private servers/small bussiness server, i think. It is probably attractive to medium to large companies Meni Quoting "David F. Skoll" <[EMAIL PROTECTED]>: Hi, My apologies for a somewhat commercial posting on the MIMEDefang list... As you may know, our CanIt product includes a mechanism for collecting Bayes data from customers who choose to participate, aggregating it, and redistributing it. It's called the Roaring Penguin Training Network, or RPTN. Our current Bayes database consists of around two million words and word-pairs culled from around 100K spams and 80K hams. We find it is very effective at detecting spam. (For some amusing extracts, see http://www.roaringpenguin.com/zeitgeist/) For MIMEDefang users who don't want to (or can't) use CanIt-PRO, we're considering making the RPTN data available on a subscription basis. Basically, we'll distribute a Perl module that lets you incorporate the RPTN Bayesian analysis into your MIMEDefang filter, and you'll be able to download the RPTN data whenever it's updated (currently, about 2-3 times/week.) Would anyone on the list be interested in this? How much would you pay? If I said $400/month, would you be appalled, or would you say "Wow, that's cheap! Sign me up!" ? Regards, David. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] SA working but spam still goes through
hi list, I started a thread before, got a lot of help, BUT spam still goes through even dough i use spam & ham mailboxes and run spam through sa-learn atleast once a week... :-( I have spam coming over and over again, even though i pass them in sa-learn... the command I use is: $sa-learn --showdots --mbox --spam /dir/to/spam spam in that file is filtered manualy by myself so it is safe to say it contains spam only! the same goes to ham file. here is a header from spam that got through: X-Spam-Status: No, score=0.2 required=5.0 tests=NO_REAL_NAME autolearn=no version=3.0.3 i don't get why it says autolearn=no ?? when whould it say 'yes'? how would i check if a spam email I passed through sa-learn is in its 'db'?? i would provide full headers if needed... Can anyone suggest a solution??? some data: OS: debian serge 3.1a Kernel:2.6.8-2-386 sendmail: 8.13.4 mimedefang:2.51 SA:3.0.3 Thanks, Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] training spamassassin
Quoting Saisab Pradhan <[EMAIL PROTECTED]>: Hi, I have successfully installed mimedefang 2.52 / spamassassin 3.0.4 / sendmail in solaris 8.0 to filter spam mails with the following rules 1. hits >= 10 , mails are discarded silently and are quarantined. 2. hits >= 6 , mails are forwarded to a separate mail box which is read regularly and if false positive, are redirected to the original recipients. 3. hits >=5, spamassassin report is attached to the email and is sent to the recipient. Now, some of spam mails (in fact, the numbers are quite high) are still getting past the spamassassin filter. I have created a mailbox where the users can redirect such false negative emails. when I do sa-learn --spam mailbox, it returns " Learned from 0 message(s) (1 message(s) examined)" where as the mailbox has around 100 redirected spam mails. Is that Your mailbox is in fact one big file so you need to add --mbox to your command: $sa-learn --mbox --spam Meni Shapiro, the right way to do it or is there anything else I can do to train spamassassin manually? Please help.. Thanks for your help, Saisab Pradhan System Administrator ICIMOD ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] MIME-tools version 5.418 is released
Hi, What's the best way to upgrade from a privious version?? Can I do something like that: $make uninstall ?? Meni Quoting "David F. Skoll" <[EMAIL PROTECTED]>: Hi, I've released MIME-tools 5.418 on the MIMEDefang download page (http://www.mimedefang.org/node.php?id=1); it should be appearing on CPAN very shortly. Here's the changelog. Regards, David. 2005-09-29 David F. Skoll <[EMAIL PROTECTED]> * MIME/Decoder/QuotedPrint.pm: Localize "$_" in a couple of places. * MIME/WordDecoder.pm: Turn off useless debugging output to STDERR * MIME/Entity.pm: Make the stringify method use IO::ScalarArray instead of IO::Scalar. For small messages, performance may be worse; for large messages, it is definitely much better. * MANIFEST: Remove some useless internal files from the manifest. They were never meant to be part of the actual distribution. This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] (no subject)
Quoting alan premselaar <[EMAIL PROTECTED]>: [EMAIL PROTECTED] wrote: I'm confused... I got a mailbox call spamdrop, where all spam detected by Mimedefang->SA is quarantined. Some of the emails subject is altered to contain:'*SPAM*', some '[SPAM]', and some are not changed???!!!??? I still have the problem of honest spam endup in spamdrop mailbox and NOT marked as spam by mimedefang headers?!?! Meni ...snip... Meni, are you also calling Spamassassin/spamc via procmail by any chance? Nop, don't use procmail.. alan ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
I'm confused...
I got a mailbox call spamdrop, where all spam detected by Mimedefang->SA is
quarantined.
Some of the emails subject is altered to contain:'*SPAM*', some
'[SPAM]', and some are not changed???!!!???
I still have the problem of honest spam endup in spamdrop mailbox and
NOT marked
as spam by mimedefang headers?!?!
Meni
If you take mimedefang out of the sendmail config temporarily, does
it still happen (let's try a process of elimination)
just comment these lines in sendmail.cf and restart sendmail
#O InputMailFilters=mimedefang
# Milter options
#O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
#O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits},
{cert_subject}, {cert_issuer}
#O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf},
{auth_author}, {mail_mailer}, {mail_host}, {
mail_addr}
#O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}
#O Milter.macros.eom={msg_id}
like that for now and then try some spam (remember your av will be
offline during this test
This message was sent using IMP, the Internet Messaging Program.
___
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list
MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Mack,
Quoting Mack <[EMAIL PROTECTED]>:
If you take mimedefang out of the sendmail config temporarily, does
it still happen (let's try a process of elimination)
just comment these lines in sendmail.cf and restart sendmail
#O InputMailFilters=mimedefang
OK got that...
# Milter options
#O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
#O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits},
{cert_subject}, {cert_issuer}
#O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf},
{auth_author}, {mail_mailer}, {mail_host}, {
mail_addr}
#O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}
#O Milter.macros.eom={msg_id}
Couldn't find any of the above!!
like that for now and then try some spam (remember your av will be
offline during this test
Waiting your response...
Meni
This message was sent using IMP, the Internet Messaging Program.
___
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list
MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] [OT] clamd doesn't recognize virus
Quoting Paul Murphy <[EMAIL PROTECTED]>: Marco, I'm using clam 0.87 with mimedefang 2.51. This morning a virus has been slipped through MD. This is the output from clamdscan: /tmp/photo.zip: OK --- SCAN SUMMARY --- Infected files: 0 Time: 0.143 sec (0 m 0 s) and this is the output from clamscan: photo.zip: Trojan.W32.PWS.Prostor.A FOUND Two possibles: 1. Your freshclam updates are failing to notify clamd that there are newer files available - kill clamd and restart it, then use clamdscan again to verify that it finds the virus. You should edit your freshclam.conf file to NotifyClamd upon virus update... [quote] # Send the RELOAD command to clamd. # Default: disabled #NotifyClamd # By default it uses the hardcoded configuration file but you can force an # another one. NotifyClamd /config/file/path ^ [end quote] Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Quoting Mack <[EMAIL PROTECTED]>: Lol, wasn't really the answer i was hoping for, Do all your messages have the X-SPAM headers in them, or only the Yepall mail ones that get into your 'spamdrop' maybe check your submit.cf for the same thing. here is the result: #O InputMailFilters This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Mimedefang & clamd
Quoting Mack <[EMAIL PROTECTED]>:
try adding this line to the top of the mimedefang-filter
$Features{"Virus:CLAMAV"} = '/usr/local/bin/clamdscan';
and then doing a
md-mx-ctrl reread
I want to thank you Mack and all the rest of you guys for you wonderfull help.
It worked and now it does scan for viruses!
On more thing though if you plp don't mind...
Mimedefang logs this discard in mail.log and discard the entire
message, what i
want though is a quarentine of the virus and notification to the original
recipient...since my perl skills are poor, could you show my an example for
quarentine instead of discard???
Thanks a million guys!
Meni
This message was sent using IMP, the Internet Messaging Program.
___
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list
MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Quoting Mack <[EMAIL PROTECTED]>: try doing a quick grep InputMailFilters sendmail.cf and post back the output O InputMailFilters=mimedefang #O InputMailFilters Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Quoting Mack <[EMAIL PROTECTED]>: Just a thought on this, Mimedefang example filter only adds the headers X-Scanned-By: X-Spam-Score: the other 3 headers you have (X-Spam-Checker-Version:,X-Spam-Level:,X-Spam-Status:) make me think that spamassissin is running directly within sendmail ? ps -e | grep spam -> shows nothing... and not just being called from within mimedefang - issue a spamassissin stop statement and see if that breaks the sendmail $/etc/init.d/spamassassin stop Stopping SpamAssassin Mail Filter Daemon: No spamd found running; none killed. spamd. you can check for spamassassin by ps -ef |grep spam to see if it's running I think it's the spamass-milter you've got somewhere what's that?? Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] (no subject)
Quoting [EMAIL PROTECTED]: X-Scanned-By: MIMEDefang 2.51 on x.x.x.x X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on my.domain X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=HELO_DYNAMIC_IPADDR2 autolearn=no version=3.0.3 ?!? how come emails with spam status=no endup in spam mailbox?!? Are you using any RBLs or other test that would indicate spam without scoring 5 points in SA? none to my knowladge...(how do i check that??) This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Mimedefang & clamd
Quoting Mack <[EMAIL PROTECTED]>: it would seem that it thinks Virus:ClamAV is there (at the topish of the list) but also not there Virus:ClamAV : yes (/usr/local/bin/clamdscan) Virus:CLAMAV : no Yep, i noticed that BUT couldn't figure it out... I've not seen the top one, are you assigning this in your code (perhaps a case issue?) What do you mean?? 'I've not seen the top one' ?? what top one ?? I did not change anything manualy...just followed the intallation proccess as it apears in mimedefang.org... should i reconfigure mimedefang?? How do i make an upgrade?? Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Quoting Mack <[EMAIL PROTECTED]>: I guess without knowing how your filter is setup it's gonna be difficult to trace the problem. default mimedefang-filter aka mimedefang-filter.example My thoughts are that somehow you are quarentineing stuff by mistake (maybe a filter coding error?) nop Is the mailserver actually delivering to mailboxes, since mimedefang yes...some of it... it's self doesn't 'deliver' it just sits in the process of the smtp transaction, it's sendmail that will deliver in the end without something like this in your milter action_quarantine_entire_message(); return action_discard(); don't have it... then mimedefang won't quarantine at all Thanks for your comments... Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Mimedefang & clamd
Quoting Mack <[EMAIL PROTECTED]>: run mimedefang.pl -features and email the results to the list Thanks for your help, Mack. here it is: MIMEDefang version 2.51 File::Scan: yes HTML::Parser : yes HTML::TokeParser : yes Path:CONFDIR : yes (/etc) Path:QUARANTINEDIR: yes (/var/spool/MIMEDefang) Path:SENDMAIL : yes (/usr/sbin/sendmail) Path:SPOOLDIR : yes (/var/spool/MIMEDefang) SpamAssassin : yes Unix::Syslog : yes Virus:ClamAV : yes (/usr/local/bin/clamdscan) Virus:FileScan: yes Archive::Zip : no HTMLCleaner : no Net::DNS : no Virus:AVP : no Virus:AVP5: no Virus:BDC : no Virus:CLAMAV : no Virus:CLAMD : no Virus:CSAV: no Virus:FPROT : no Virus:FPROTD : no Virus:FSAV: no Virus:HBEDV : no Virus:NAI : no Virus:NVCC: no Virus:OpenAV : no Virus:SOPHIE : no Virus:SOPHOS : no Virus:SymantecCSS : no Virus:TREND : no Virus:TROPHIE : no Virus:VEXIRA : no Anomy::HTMLCleaner: missing Archive::Zip : missing Digest::SHA1 : Version 2.10 File::Scan: Version 1.43 HTML::Parser : Version 3.45 HTML::TokeParser : Version 2.30 IO::Socket: Version 1.28 IO::Stringy : Version 2.110 MIME::Base64 : Version 3.04 MIME::Tools : Version 5.417 MIME::Words : Version 5.417 Mail::Mailer : Version 1.62 Mail::SpamAssassin: Version 3.03 Net::DNS : missing Unix::Syslog : Version 0.100 Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] (no subject)
Quoting Mack <[EMAIL PROTECTED]>: Are you using a spam rule within outlook ? No, I mean mimedefang puts this mail in a special mailbox i create to "quarentine" spam, since i noticed 'legal' mail is missing... i extracted the header using mutt. Do you mean that your mail client is detecting spam that is not being tagged ? no Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Mimedefang & clamd
hello plp, I desided to post on deferent post since one problem is not related to the other thous separating the answers...(hope you understand...) I got sendmail 8.13 on debian 3.1 with mimedefang + clamd + sa. The mimedefang works ok with sa , and i can see the resolts of preventing spam and the changes to the headers. (though mimedefang deliver non spam mail to spamdrop mailbox?!?) But this post is about clamd! so...although clamd was install before mimedefang using the 'defang' user to run. and mimedefang is aware of clamd (i checked it in config.log) and clamd.sock is available in /var/spool/MIMEDefang/clamd.sock, still viruses come through (i used eicar checks) and i NO X-headers about virus scan nor log entry in /var/log/mail.log or /var/log/clamd.log my guess is that mimedefang is not using the clamd and not scanning for viruses!! why is that? how can i fix that?? 10x for your thoughts... Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] (no subject)
Hello plp, Thanks for help in prior post. I got some problems yet, here's one: mail tagged as NOT spam, end up in spam mailbox?!? eg: X-Orig-Rcpts: [EMAIL PROTECTED] X-Scanned-By: MIMEDefang 2.51 on x.x.x.x X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on my.domain X-Spam-Level: * X-Spam-Status: No, score=1.6 required=5.0 tests=RCVD_BY_IP,RCVD_NUMERIC_HELO autolearn=no version=3.0.3 or: X-Scanned-By: MIMEDefang 2.51 on x.x.x.x X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on my.domain X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=HELO_DYNAMIC_IPADDR2 autolearn=no version=3.0.3 ?!? how come emails with spam status=no endup in spam mailbox?!? Thanks, Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mail server performence declain
Quoting Rob MacGregor <[EMAIL PROTECTED]>: On 19/09/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi, I got a new debian serge 3.1 installed on a server with intel xeon 2.40GHz & 1Gb mem. I got sendmail 8.13.4 + mimedefang 2.51 + sa 3.0.3 + perl 5.8.4. ever since i install mimedefang the delivery of mail got very slow! if i use an asp form to send mail it take too long. How long? What was it like before, what is it like now? (And, any reason you went with an old version of EVERYTHING? Sendmail 8.13.5 is out, as is MD 2.53, SpamAssassin 3.1.0 and Perl 5.8.7) Well i use a debian stable OS and stable apt-source list so this is what i got from the ports system... i also notice it filter both incoming and outgoing mail, when my intension were to scan only incoming mail. Unless you've configured it differently (and you don't say how you've configured it) it scans all mail. How do i test latancy?? Check your mail log. Look for the line containing "delay=". eg: delay=00:00:58 or: delay=00:01:06 and that within my network! how can i minimize scan time? Disable network tests. how? and avoid scanning outbound mail?? Details (and to disabling network tests) can be found in the list archive. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] mail server performence declain
Sorry i forgot another thing mail with low spam score (required_score 5.0) end up in spamdrop mailbox ??? 10x Meni uoting [EMAIL PROTECTED]: Hi, I got a new debian serge 3.1 installed on a server with intel xeon 2.40GHz & 1Gb mem. I got sendmail 8.13.4 + mimedefang 2.51 + sa 3.0.3 + perl 5.8.4. ever since i install mimedefang the delivery of mail got very slow! if i use an asp form to send mail it take too long. i also notice it filter both incoming and outgoing mail, when my intension were to scan only incoming mail. How do i test latancy?? how can i minimize scan time? and avoid scanning outbound mail?? Thanks alot, Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] mail server performence declain
Hi, I got a new debian serge 3.1 installed on a server with intel xeon 2.40GHz & 1Gb mem. I got sendmail 8.13.4 + mimedefang 2.51 + sa 3.0.3 + perl 5.8.4. ever since i install mimedefang the delivery of mail got very slow! if i use an asp form to send mail it take too long. i also notice it filter both incoming and outgoing mail, when my intension were to scan only incoming mail. How do i test latancy?? how can i minimize scan time? and avoid scanning outbound mail?? Thanks alot, Meni This message was sent using IMP, the Internet Messaging Program. ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
