SV: [qmailtoaster] Howto prevent .HTA attachments

2005-12-08 Thread Ole Johansen
Hello, thanks for the reply.

But it still wont accept more than 15 rcpts even I did change 15 to 60 and
qmailctl cdb
Qmailctl restart

Any thoughts?

B/R
Ole Johansen

-Opprinnelig melding-
Fra: Jake Vickers [mailto:[EMAIL PROTECTED] 
Sendt: 7. desember 2005 17:21
Til: qmailtoaster-list@qmailtoaster.com
Emne: Re: [qmailtoaster] Howto prevent .HTA attachments

Ole Johansen wrote:

>Hello,
>
>Anyone knows howto prevent .hta attachments passing thru the qmailtoaster?
>I added the simcontrol file in /var/qmail/control, but it seems nothing
>reads it
>
>( in simcontrol file;
>clam=yes,spam=yes,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif:.c
o
>m:.gif:.exe:.com:.bat )
>
>Test your server from GFI www.gfi.com/emailsecuritytest
>
>  
>
I don't think that file is used by default.  Send yourself a .HTA 
attachment, and then look at the email source (CTRL-U in Thunderbird), 
and take the first few characters of the attachment (first 9 chars), and 
add them to /var/qmail/control/badmimetypes .  The  run 
/var/qmail/bin/qmail-badmimetypes to rebuild the signature DB.  It 
should block all the .HTA attachments that match that signature after that.

>*
>
>I have changed the tcp.smtp to allow 60 session but it does not send
anyway,
>can anyone give me some directions here?
>I have done:
>
>In /etc/tcprules.d/tcp.smtp, changed RCPTLIMIT from 15 to 60
>27.:allow,RELAYCLIENT=""
>:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="60",CHKUSER_WRON
G
>RCPTLIMIT="3",QMAILQUEUE="/var/qmail/bin/simscan"
>
>Then done:
>tcprules tcp.smtp.cdb tcp.smtp.temp < tcp.smtp
>
>  
>
Did that wrong.  Changing the tcp.smtp file was correct, but you then 
need to run 'qmailctl cdb' to rebuild that DB.  Then restart qmail.

>How do I add Qmailtoaster-list (at) Qmailtoaster.com to the whitelist of
the
>spamassassin?
>Since I have added some customrulset, the emails from Qmailtoaster-list
gets
>marked as spam ... blurb :p
>  
>
In your /etc/mail/spamassassin/local.cf file, add this line:
whitelist_from [EMAIL PROTECTED]

That should give any email coming from that address domain an automatic 
score of -100, so any points that are added to it should not add up to 
more than 100 (which would bring it back to a 0 score).
Hope that helps.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Howto prevent .HTA attachments

2005-12-07 Thread Jake Vickers

Ole Johansen wrote:


Hello,

Anyone knows howto prevent .hta attachments passing thru the qmailtoaster?
I added the simcontrol file in /var/qmail/control, but it seems nothing
reads it

( in simcontrol file;
clam=yes,spam=yes,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif:.co
m:.gif:.exe:.com:.bat )

Test your server from GFI www.gfi.com/emailsecuritytest

 

I don't think that file is used by default.  Send yourself a .HTA 
attachment, and then look at the email source (CTRL-U in Thunderbird), 
and take the first few characters of the attachment (first 9 chars), and 
add them to /var/qmail/control/badmimetypes .  The  run 
/var/qmail/bin/qmail-badmimetypes to rebuild the signature DB.  It 
should block all the .HTA attachments that match that signature after that.



*

I have changed the tcp.smtp to allow 60 session but it does not send anyway,
can anyone give me some directions here?
I have done:

In /etc/tcprules.d/tcp.smtp, changed RCPTLIMIT from 15 to 60
27.:allow,RELAYCLIENT=""
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="60",CHKUSER_WRONG
RCPTLIMIT="3",QMAILQUEUE="/var/qmail/bin/simscan"

Then done:
tcprules tcp.smtp.cdb tcp.smtp.temp < tcp.smtp

 

Did that wrong.  Changing the tcp.smtp file was correct, but you then 
need to run 'qmailctl cdb' to rebuild that DB.  Then restart qmail.



How do I add Qmailtoaster-list (at) Qmailtoaster.com to the whitelist of the
spamassassin?
Since I have added some customrulset, the emails from Qmailtoaster-list gets
marked as spam ... blurb :p
 


In your /etc/mail/spamassassin/local.cf file, add this line:
whitelist_from [EMAIL PROTECTED]

That should give any email coming from that address domain an automatic 
score of -100, so any points that are added to it should not add up to 
more than 100 (which would bring it back to a 0 score).

Hope that helps.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Howto prevent .HTA attachments

2005-12-07 Thread Ole Johansen
Hello,

Anyone knows howto prevent .hta attachments passing thru the qmailtoaster?
I added the simcontrol file in /var/qmail/control, but it seems nothing
reads it

( in simcontrol file;
clam=yes,spam=yes,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif:.co
m:.gif:.exe:.com:.bat )

Test your server from GFI www.gfi.com/emailsecuritytest

*

I have changed the tcp.smtp to allow 60 session but it does not send anyway,
can anyone give me some directions here?
I have done:

In /etc/tcprules.d/tcp.smtp, changed RCPTLIMIT from 15 to 60
27.:allow,RELAYCLIENT=""
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="60",CHKUSER_WRONG
RCPTLIMIT="3",QMAILQUEUE="/var/qmail/bin/simscan"

Then done:
tcprules tcp.smtp.cdb tcp.smtp.temp < tcp.smtp

qmailctl stop
qmailctl start

It still don't accept more than 15 rcpt's.

*

How do I add Qmailtoaster-list (at) Qmailtoaster.com to the whitelist of the
spamassassin?
Since I have added some customrulset, the emails from Qmailtoaster-list gets
marked as spam ... blurb :p

Thanks for advices

B/R
Ole Johansen

Centos 4.2
QT 1.2 build date 6/12-05





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]