Scanning POP3-traffic for viruses

2001-06-10 Thread Jari Huovila

Hi again!

Is there a way to scan POP3-traffic for viruses with a Linux box? I'm thinking 
something like Norton's POP-proxy which ships with Norton Anti-Virus. It works like a 
proxy server for POP3-protocol, and scans all e-mail attachments for viruses. I would 
like to do the same on my Linux firewall.

Thanks! =)

- Jari

P.S. If you answer to this message, please send a CC to [EMAIL PROTECTED]

_ _ _
Sähköposti, kalenteri ja osoitekirja kännykkääsi. Rekisteröidy osoitteessa www.iobox.fi



RE: Scanning POP3-traffic for viruses

2001-06-10 Thread Chris Bolt

http://qmail-scanner.sourceforge.net/

> Hi again!
> 
> Is there a way to scan POP3-traffic for viruses with a Linux box? 
> I'm thinking something like Norton's POP-proxy which ships with 
> Norton Anti-Virus. It works like a proxy server for 
> POP3-protocol, and scans all e-mail attachments for viruses. I 
> would like to do the same on my Linux firewall.



Re: Scanning POP3-traffic for viruses

2001-06-10 Thread Frank Tegtmeyer

Jari Huovila <[EMAIL PROTECTED]> writes:

> Is there a way to scan POP3-traffic for viruses with a Linux box?

Not that I am aware of one. You could easily insert a program into the
chain that calls qmail-pop3d but you would have to write it yourself
(or pay someone to do it).

For scanning mails there several solutions on www.qmail.org, but they
don't act during POP access. Instead they intercept mails during queue
injection or delivery.

Regards, Frank



Re: unsubscribe thomas.flueeli@swissonline.ch

2001-06-10 Thread Harald Hanche-Olsen

+ Thomas Flüeli <[EMAIL PROTECTED]>:

| please unsubscribe me!!

Did you notice the header line in all mail from this list saying

Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm

?  *Please* send a message to the indicated address, then follow
instructions.

- Harald



virtual subdomains and non-remapping

2001-06-10 Thread R Signes

Greetings.

I'd like to set up a virtual subdomain on my systems.  Something like 
"spamgoeshere.manxome.org",
and have mail for [EMAIL PROTECTED] delivered to uname-spam-ext on 
the mail
exchanger.

I don't want all unames to be equivocal, though, so I don't think virtualhost fits the 
bill.  
I guess I could use procmail for this, but it would be /way/ more complicated.

Help?

-- 
rjbs

 PGP signature


sending mail from scripts fails

2001-06-10 Thread Vincent



Hi.
I'm using qmail-1.03
I'm having problems sending mail from withing perl 
scripts. The scirpt I used worked perfectly on a linux server using sendmail. 
Now I'n using it on our news server with qmail. The scirpt functions okay, but 
there is no mail sent.
 
I've made the proper links to 
/var/qmail/bin/sendmail.
When I start sendmail -t (the same way the script 
does) I can create mail messages, but the script doesn't
 
Anyone has an idea what's causing the 
problems?
Thanks,
 
Vincent


Re: sending mail from scripts fails

2001-06-10 Thread Bruno Wolff III

On Sun, Jun 10, 2001 at 05:21:58PM +0200,
  Vincent <[EMAIL PROTECTED]> wrote:
> Hi.
> I'm using qmail-1.03
> I'm having problems sending mail from withing perl scripts. The scirpt I used worked 
>perfectly on a linux server using sendmail. Now I'n using it on our news server with 
>qmail. The scirpt functions okay, but there is no mail sent.
> 
> I've made the proper links to /var/qmail/bin/sendmail.
> When I start sendmail -t (the same way the script does) I can create mail messages, 
>but the script doesn't
> 
> Anyone has an idea what's causing the problems?
> Thanks,

You haven't given us any information that would allow us to figure out what
is going wrong.

The obvious debugging technique is to record a copy of what you are piping
to sendmail to see if that is a problem. It also isn't clear that you
properly tested that you were running the same program your script is.
You want to make sure you try using the full path used by the script.



troube!

2001-06-10 Thread budsz

Hi...

i finished installing qmail in FreeBSD 4.2 , i  success send to another 
user in localy, but if i send remote to my ISP failure, please help me

TIA

budsz



Re: troube!

2001-06-10 Thread Frank Tegtmeyer

budsz <[EMAIL PROTECTED]> writes:

> user in localy, but if i send remote to my ISP failure, please help me

You could include the bounce message. Then we could diagnose the
problem. Your question is like "My car doesn't work, what's the
problem?"

Regards, Frank



On Behalf Of . . .

2001-06-10 Thread Guus

Some mail clients (MS Outlook) interpret the mail headers
and decide that my mail is sent 'on behalf of' My Name.
Possibly this is because they see a header 'Sender: ' that
does not match the 'From: ' header.

How can I make 'Sender: ' match 'From: ' ?

As the courtesy to users of all persuasions, how can I
avoid the 'on behalf of' message?

Example header is listed below. You can see my box claims to
be in the zinias.nl domain, when it really sits in the a200.nl.
The zinias.nl domain exists, but is hosted somewhere else.
Of course it's probably easier to look at the headers of this
mail yourself.

I run a linux box.

Tia,
Guus.


=
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: debian@kaliyuga
Received: (qmail 28961 invoked from network); 8 Jun 2001 16:29:04 -
Received: from localhost.a2000.nl (HELO localhost) (127.0.0.1)
  by localhost.a2000.nl with SMTP; 8 Jun 2001 16:29:04 -
Received: from pop.zinias.nl
by localhost with POP3 (fetchmail-5.3.3)
for debian@kaliyuga (single-drop); Fri, 08 Jun 2001 18:29:04 +0200 (CEST)
Received: from pinsmail.nl ([127.0.0.1]) by mx1.pins-web.net ; Fri, 08 Jun 2001 
18:30:37 +0200
Received: from muncher.math.uic.edu ([131.193.178.181]) by pinsmail.nl ; Fri, 08 Jun 
2001 18:30:35 +0200
Received: (qmail 28817 invoked by uid 1002); 8 Jun 2001 15:22:38 -
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
Delivered-To: mailing list [EMAIL PROTECTED]
Received: (qmail 26567 invoked from network); 8 Jun 2001 15:22:38 -
Received: from node14438.a2000.nl (HELO kaliyuga.zinias.nl) (24.132.68.56)
  by muncher.math.uic.edu with SMTP; 8 Jun 2001 15:22:38 -
Received: (qmail 5211 invoked from network); 8 Jun 2001 15:22:09 -
Received: from localhost.a2000.nl (HELO debian.nl) (127.0.0.1)
  by localhost.a2000.nl with SMTP; 8 Jun 2001 15:22:09 -
Sender: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Date: Fri, 08 Jun 2001 17:22:07 +0200
From: Guus <[EMAIL PROTECTED]>
Organization: -
X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.19 i586)
X-Accept-Language: en
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: No mailbox for root
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Rcpt-To: <[EMAIL PROTECTED]>
X-DPOP: Version number supressed
X-UIDL: 992017949.394



Re: On Behalf Of . . .

2001-06-10 Thread Joost van Baal

On Sun, Jun 10, 2001 at 09:10:55PM +0200, Guus wrote:
> 
> How can I make 'Sender: ' match 'From: ' ?
> 
> =
> Sender: [EMAIL PROTECTED]
> X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.19 i586)

It's your mua which adds the Sender: header.  You could try
configuring your client to add a more sane Sender: header,
or use a mua which doesn't add such a header.

Bye,

Joost

-- 
Joost van Baal.
 .  hearthttp://debian.org/
.   work  http://logreport.org/
   .homehttp://mdcc.cx/



Re: virtual subdomains and non-remapping

2001-06-10 Thread Charles Cazabon

R Signes <[EMAIL PROTECTED]> wrote:
> 
> I'd like to set up a virtual subdomain on my systems.  Something like
> "spamgoeshere.manxome.org", and have mail for
> [EMAIL PROTECTED] delivered to uname-spam-ext on the mail
> exchanger.
> 
> I don't want all unames to be equivocal, though, so I don't think
> virtualhost fits the bill.  

It could.  You would do the spamgoeshere.manxome.org:spamuser trick in
virtualdomains, then have ~alias/.qmail-spamuser-default file which does
something like:

|/path/to/forward "$DEFAULT"-spam@domain

I'm not sure what the -ext part of your question above refers to.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---



Re: virtual subdomains and non-remapping

2001-06-10 Thread R Signes

In a message dated Sun, Jun 10, 2001 at 02:22:05PM -0600, Charles Cazabon wrote:
> R Signes <[EMAIL PROTECTED]> wrote:
> > I'd like to set up a virtual subdomain on my systems.  Something like
> > "spamgoeshere.manxome.org", and have mail for
> > [EMAIL PROTECTED] delivered to uname-spam-ext on the mail
> > exchanger.
> I'm not sure what the -ext part of your question above refers to.

Hypothetical:  I go and buy a bicycle from Bikestore Inc.  They ask for my
email.  I say, "[EMAIL PROTECTED]"

Then, that mail gets delivered to bob-spam-bikestore (processed by my 
.qmail-spam-bikestore).

-- 
rjbs

 PGP signature


Re: On Behalf Of . . .

2001-06-10 Thread Guus

I use netscape.
Can qmail rewrite headers?

Thanks,
Guus.

> 
> It's your mua which adds the Sender: header.  You could try
> configuring your client to add a more sane Sender: header,
> or use a mua which doesn't add such a header.
> 
> Bye,
> 
> Joost
>



Rewrite (.*)@foo.com to \\1@bar.net

2001-06-10 Thread Troy Settle


All,

What is the procedure under qmail to rewrite addresses under virtual
domains?  For example, I have a customer with several domains, and they
would like (.*)@foo.com to be rewritten to \\[EMAIL PROTECTED]  How can I do this?

TIA,

--
  Troy Settle
  Pulaski Networks
  540.994.4254




Re: Rewrite (.*)@foo.com to \\1@bar.net

2001-06-10 Thread peter green

* Troy Settle <[EMAIL PROTECTED]> [010610 20:37]:
> What is the procedure under qmail to rewrite addresses under virtual
> domains?  For example, I have a customer with several domains, and they
> would like (.*)@foo.com to be rewritten to \\[EMAIL PROTECTED]  How can I do this?

Does [http://cr.yp.to/qmail/faq/incominguser.html#luser-relay] do it for
you? (Assume all @foo.com addresses are unrecognized and need to be
forwarded to @bar.net.)

/pg
-- 
Peter Green : Architekton Internet Services, LLC : [EMAIL PROTECTED]
---
Anytime I see something screech across a room and latch onto someone's neck, 
and the guy screams and tries to get it off, I have to laugh, because what is 
that thing.
 (Jack Handey)




Re: QMAILQUEUE patch for qmail-1.03

2001-06-10 Thread Bruce Guenter

On Mon, Jan 25, 1999 at 03:37:21PM -0600, Bruce Guenter wrote:
> Appended is a patch to qmail-1.03 that causes any program that would run
> qmail-queue to look for an environment variable QMAILQUEUE.  If it is
> present, it is used in place of the string "bin/qmail-queue" when
> running qmail-queue.

I've been contemplating rewriting the patch to do an exec of
{ "/bin/sh", "-c", $QMAILQUEUE } instead of exec'ing $QMAILQUEUE as-is.
This would allow for putting the contents of the script named by
$QMAILQUEUE (which is frequently a one-line shell script anyways) into
the variable itself.  Are there any downsides to this approach other
than the obvious overhead of adding /bin/sh to the execution path?  Is
this overhead significant enough to make such a modification a bad idea?
-- 
Bruce Guenter <[EMAIL PROTECTED]> http://em.ca/~bruceg/ http://untroubled.org/
OpenPGP key: 699980E8 / D0B7 C8DD 365D A395 29DA  2E2A E96F B2DC 6999 80E8

 PGP signature


Re: how to use qmail-queue

2001-06-10 Thread Bruce Guenter

On Sat, Jun 09, 2001 at 11:18:54AM -0600, Charles Cazabon wrote:
>   However, QMTP, as a protocol, is harder to speak than SMTP

Arguable, at best.  For sending a single message, the only difficult
part of QMTP is calculating the total sizes before sending the package.
After that point, you just send all the data and wait for the response.
The server is forbidden from sending a response until the last byte of
the package is received.  Much simpler than the back-and-forth of SMTP.

However, this does nothing to answer his original problem, which is
likely solveable without dealing with any external protocols.
-- 
Bruce Guenter <[EMAIL PROTECTED]> http://em.ca/~bruceg/ http://untroubled.org/
OpenPGP key: 699980E8 / D0B7 C8DD 365D A395 29DA  2E2A E96F B2DC 6999 80E8

 PGP signature


Re: qmail-qfilter logging?

2001-06-10 Thread Bruce Guenter

On Fri, Jun 01, 2001 at 02:11:50PM -0700, Jon Rust wrote:
> I've just installed a small filter using Bruce Guenter's qmail-qfilter
> package. I have a print statement or 2 when i reject a message:
> 
># from header filter(s) (sexyfun easy to spot here)
>} elsif (/^From:/) {
>   if (/haha\@sexyfun/io) {
>  print "mail refused, suspected Hybris (aka, Snow White) virus:";
>  print " http://vil.nai.com/vil/virusSummary.asp?virus_k=98873\n";;
>  exit(31);
>   }
>}
> 
> However, the line above doesn't show in the qmail logs anywhere, nor
> does it get echoed to the sending server. Did I miss something? Any way
> to log it short of using syslog calls?

Filters executed by qmail-qfilter have their standard output (where
print goes by default) connected up to either the next filter or to
qmail-queue to go into the mail spool.  If you want to print an error,
print to STDERR.

BTW, the deny-filetypes catches virtually all current and future
incidences of Snow White and similar viruses.
-- 
Bruce Guenter <[EMAIL PROTECTED]> http://em.ca/~bruceg/ http://untroubled.org/
OpenPGP key: 699980E8 / D0B7 C8DD 365D A395 29DA  2E2A E96F B2DC 6999 80E8

 PGP signature


Re: qmail troubleshooting

2001-06-10 Thread Bruce Guenter

On Tue, Jun 05, 2001 at 12:05:57PM -0500, Virginia Chism wrote:
>   When I tried this one,
> 
>  `find /var/qmail/queue/remote -type f` ?
> the returned message was:
> 
> /var/qmail/queue/remote/0/277955: Permission denied.

You need to remove the backquotes (`).  In most UNIX shells, the
backquotes work by executing the command within the backquotes, and then
substituting the output from the command into the command-line
arguments.  So, running "find" listed /var/qmail/queue/remote/0/277955
as the first file found, which the shell promptly tried to execute.  It
is of course not executable, so permission denied.
-- 
Bruce Guenter <[EMAIL PROTECTED]> http://em.ca/~bruceg/ http://untroubled.org/
OpenPGP key: 699980E8 / D0B7 C8DD 365D A395 29DA  2E2A E96F B2DC 6999 80E8

 PGP signature


Re: QMAILQUEUE patch for qmail-1.03

2001-06-10 Thread Frank Tegtmeyer

Bruce Guenter <[EMAIL PROTECTED]> writes:

> than the obvious overhead of adding /bin/sh to the execution path?  Is
> this overhead significant enough to make such a modification a bad idea?

Are there quoting problems to expect? If yes, I would leave the patch
the way it is now.

Regards, Frank