Re: [qmailtoaster] simscan updates

[Philip Nix Guru]

Hello

Yes , I had that problem when rebooting, suddenly permission denied :) 
just got hot a second


good all was logged and error was identified

in my case my clamscan has an id of 994


Yes , for those upgrading , check the id BEFORE the next reboot


-Philip




On 8/3/20 5:51 PM, Remo Mattei wrote:
Hello if you are using the new claim script to convert the RPM, you 
will need to update the ID on the SIMSCAN RAMDISK now it says

mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=46,gid=0,mode=0750

in  my case I had to change it to 990
so
mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=990,gid=0,mode=0750

Remo

Re: [qmailtoaster] simscan updates

[Eric Broch]

Thanks, Remo. I'll make the change.

On 8/3/2020 9:51 AM, Remo Mattei wrote:
Hello if you are using the new claim script to convert the RPM, you 
will need to update the ID on the SIMSCAN RAMDISK now it says

mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=46,gid=0,mode=0750

in  my case I had to change it to 990
so
mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=990,gid=0,mode=0750

Remo

[qmailtoaster] simscan updates

[Remo Mattei]

Hello if you are using the new claim script to convert the RPM, you will need 
to update the ID on the SIMSCAN RAMDISK now it says
mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=46,gid=0,mode=0750

in  my case I had to change it to 990
so 
mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=990,gid=0,mode=0750

Remo

RE: [qmailtoaster] simscan - bad attachment: d

[Dan McAllister - QMT DNS]

Eric - I've been away - looks like an appropriate patch to me.

 

Dan

 

From: Eric Broch  
Sent: Friday, September 21, 2018 2:24 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] simscan - bad attachment: d

 

I'll ask again, is the qmailtoaster community in agreement that the
following patch
<http://simscan.inter7.narkive.com/e6pHPXdB/problem-with-attach>  (and here
<http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.
html> ) should be applied to simscan for qmailtoaster:



--- simscan-1.4.0/simscan.c 2011-02-08 16:00:43.579074836 -0200
+++ simscan-1.4.0-fixed/simscan.c 2011-02-08 16:04:24.931075207 -0200
@@ -1735,10 +1735,14 @@
for(i=0;i 2 ) fprintf(stderr, "simscan: checking
attachment %s against %s\n", mydirent->d_name, bk_attachments[i] );
lowerit(mydirent->d_name);
- if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
- strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
- closedir(mydir);
- return(1);
+ if ( strlen(mydirent->d_name) >= strlen(bk_attachments[i]) ) {
+ if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
+ strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
+ closedir(mydir);
+ return(1);
+ }
+ } else {
+ if ( DebugFlag > 2 ) fprintf(stderr, "simscan: attachment
name '%s' (%d) is shorter than '%s' (%d). IGNORED\n",
mydirent->d_name, strlen( mydirent->d_name ), bk_attachments[i],
strlen( bk_attachments[i] ) );
}
}
}



Eric

 

On 9/13/2018 10:02 AM, Michele Federici wrote:

Hi,
I have done various tests and can confirm the presence of the bug.

If the doc attachment created with word 2007 (or other?) is sent through
outlook 2003/2007 (or others?), sometimes ripmime wrong to extract the
various parts of the email by generating a file "d". 

# ripmime --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32 mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
-rw-r--r-- 1 root root121 13 sep 13.32 textfile1
-rw-r--r-- 1 root root167 13 sep 13.32 textfile2

The interesting thing is that: this does not happen with all the doc files
but only with some. 

Simscan 1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks the
e-mail with the error "bad attachment: d"

I could not replicate the problem with thunderbird: all the emails sent
arrived without problems. 

Probably the correct solution is to compile simscan with the patch indicated
in the post by Gustavo Castro.

Thank you
Michele

Il 11/09/2018 12:44, Michele Federici ha scritto:

Hi,

I've found this error "Your email was rejected because it contains a bad
attachment: d" in the smtp log.

I read these old post

http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-re
jected-because-it-contains-a-bad-attachment-d

http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.h
tml

but I did not understand if current simscan 1.4.0 (1.qt.el7) is compiled
with the patch.

Can you help me?

Thank you
Michele
- To
unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
<mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com>  For additional
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
<mailto:qmailtoaster-list-h...@qmailtoaster.com>  


- To
unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
<mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com>  For additional
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
<mailto:qmailtoaster-list-h...@qmailtoaster.com>  





-- 
Eric Broch
White Horse Technical Consulting (WHTC)


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Re: [qmailtoaster] simscan - bad attachment: d

[Michele Federici]

  
  
I'm not an expert developer.
Can someone else check the fix code?
  I can do some tests with the recompiled
package.

Thank you 
Michele
  


Il 21/09/2018 20:24, Eric Broch ha
  scritto:


  
  I'll ask again, is the qmailtoaster community in agreement that
the following patch
(and here)
should be applied to simscan for qmailtoaster:
  
  --- simscan-1.4.0/simscan.c 2011-02-08 16:00:43.579074836 -0200
+++ simscan-1.4.0-fixed/simscan.c 2011-02-08 16:04:24.931075207
-0200
@@ -1735,10 +1735,14 @@
for(i=0;i
if ( DebugFlag > 2 ) fprintf(stderr, "simscan: checking
attachment %s against %s\n", mydirent->d_name,
bk_attachments[i] );
lowerit(mydirent->d_name);
- if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
- strncpy(AttachName, mydirent->d_name,
sizeof(AttachName)-1);
- closedir(mydir);
- return(1);
+ if ( strlen(mydirent->d_name) >=
strlen(bk_attachments[i]) ) {
+ if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
+ strncpy(AttachName, mydirent->d_name,
sizeof(AttachName)-1);
+ closedir(mydir);
+ return(1);
+ }
+ } else {
+ if ( DebugFlag > 2 ) fprintf(stderr, "simscan: attachment
name '%s' (%d) is shorter than '%s' (%d). IGNORED\n",
mydirent->d_name, strlen( mydirent->d_name ),
bk_attachments[i],
strlen( bk_attachments[i] ) );
}
}
}
  
  Eric
  
  
  On 9/13/2018 10:02 AM, Michele
Federici wrote:
  
  

Hi,
  I have done various tests and can confirm the presence of
  the bug.
  
  If the doc attachment created with word 2007 (or other?)
  is sent through outlook 2003/2007 (or others?), sometimes
  ripmime wrong to extract the various parts of the email by
  generating a file "d". 
  
# ripmime
  --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32
  mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32
  textfile0
-rw-r--r-- 1 root root    121 13 sep 13.32
  textfile1
-rw-r--r-- 1 root root    167 13 sep 13.32
  textfile2
  
  The interesting thing is that: this does not happen with
  all the doc files but only with some. 
  
  Simscan  1.4.0 (1.qt.el7) analyzes these files and
  due to a bug blocks the e-mail with the error "bad
  attachment: d"
  
  I could not replicate the problem with thunderbird: all
  the emails sent arrived without problems. 
  
  Probably the correct solution is to compile simscan with
  the patch indicated in the post by Gustavo Castro.
  
  Thank you
  Michele

Il 11/09/2018 12:44, Michele
  Federici ha scritto:


  
  Hi,
  
  I've found this error "Your email was rejected because it
  contains a bad attachment: d" in the smtp log.
  
  I read these old post
  
  http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d
  
  http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html
  
  but I did not understand if current simscan 1.4.0 (1.qt.el7)
  is compiled with the patch.
  
  Can you help me?
  
  Thank you
  Michele

  -
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


- To
unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
  
  
  -- 
Eric Broch
White Horse Technical Consulting (WHTC)



  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan - bad attachment: d

[Eric Broch]

I'll ask again, is the qmailtoaster community in agreement that the 
following patch 
<http://simscan.inter7.narkive.com/e6pHPXdB/problem-with-attach> (and 
here 
<http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html>) 
should be applied to simscan for qmailtoaster:




--- simscan-1.4.0/simscan.c 2011-02-08 16:00:43.579074836 -0200
+++ simscan-1.4.0-fixed/simscan.c 2011-02-08 16:04:24.931075207 -0200
@@ -1735,10 +1735,14 @@
for(i=0;i 2 ) fprintf(stderr, "simscan: checking
attachment %s against %s\n", mydirent->d_name, bk_attachments[i] );
lowerit(mydirent->d_name);
- if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
- strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
- closedir(mydir);
- return(1);
+ if ( strlen(mydirent->d_name) >= strlen(bk_attachments[i]) ) {
+ if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
+ strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
+ closedir(mydir);
+ return(1);
+ }
+ } else {
+ if ( DebugFlag > 2 ) fprintf(stderr, "simscan: attachment
name '%s' (%d) is shorter than '%s' (%d). IGNORED\n",
mydirent->d_name, strlen( mydirent->d_name ), bk_attachments[i],
strlen( bk_attachments[i] ) );
}
}
}



Eric


On 9/13/2018 10:02 AM, Michele Federici wrote:


Hi,
I have done various tests and can confirm the presence of the bug.

If the doc attachment created with word 2007 (or other?) is sent 
through outlook 2003/2007 (or others?), sometimes ripmime wrong to 
extract the various parts of the email by generating a file "d".


# ripmime --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32 mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
-rw-r--r-- 1 root root    121 13 sep 13.32 textfile1
-rw-r--r-- 1 root root    167 13 sep 13.32 textfile2

The interesting thing is that: this does not happen with all the doc 
files but only with some.


Simscan 1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks 
the e-mail with the error "bad attachment: d"


I could not replicate the problem with thunderbird: all the emails 
sent arrived without problems.


Probably the correct solution is to compile simscan with the patch 
indicated in the post by Gustavo Castro.


Thank you
Michele

Il 11/09/2018 12:44, Michele Federici ha scritto:

Hi,

I've found this error "Your email was rejected because it contains a 
bad attachment: d" in the smtp log.


I read these old post

http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d

http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html

but I did not understand if current simscan 1.4.0 (1.qt.el7) is 
compiled with the patch.


Can you help me?

Thank you
Michele- 
To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com For additional 
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


- 
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] simscan - bad attachment: d

[remo]

I have seen that sometimes when sending to the list. 

> Il giorno 14 set 2018, alle ore 05:37, Eric Broch  
> ha scritto:
> 
> Is this the correct patch:
> 
> diff -ruN simscan-1.4.0/simscan.c simscan-1.4.0-tested/simscan.c
> --- simscan-1.4.0/simscan.c 2011-02-08 20:26:06.095067924 -0200
> +++ simscan-1.4.0-tested/simscan.c 2011-02-08 18:16:11.003064430 -0200
> @@ -1735,10 +1735,14 @@
> for(i=0;i if ( DebugFlag > 2 ) fprintf(stderr, "simscan: checking attachment 
> %s against %s\n", mydirent->d_name, bk_attachments[i] );
> lowerit(mydirent->d_name);
> - if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
> - strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
> - closedir(mydir);
> - return(1);
> + if ( strlen(mydirent->d_name) >= strlen(bk_attachments[i]) ) {
> + if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
> + strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
> + closedir(mydir);
> + return(1);
> + }
> + } else {
> + if ( DebugFlag > 2 ) fprintf(stderr, "simscan: attachment name '%s' (%d) is 
> shorter than '%s' (%d). IGNORED\n", mydirent->d_name, strlen( 
> mydirent->d_name ), bk_attachments[i], strlen( bk_attachments[i] ) );
> }
> }
> 
> 
>> On 9/13/2018 10:02 AM, Michele Federici wrote:
>> Hi,
>> I have done various tests and can confirm the presence of the bug.
>> 
>> If the doc attachment created with word 2007 (or other?) is sent through 
>> outlook 2003/2007 (or others?), sometimes ripmime wrong to extract the 
>> various parts of the email by generating a file "d". 
>> 
>> # ripmime --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
>> # ls -l ./out_dir_res/
>> -rw-r--r-- 1 root root  0 13 sep 13.32 d
>> -rw--- 1 root root 442368 13 sep 13.32 mydocument.doc
>> -rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
>> -rw-r--r-- 1 root root121 13 sep 13.32 textfile1
>> -rw-r--r-- 1 root root167 13 sep 13.32 textfile2
>> 
>> The interesting thing is that: this does not happen with all the doc files 
>> but only with some. 
>> 
>> Simscan 1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks the 
>> e-mail with the error "bad attachment: d"
>> 
>> I could not replicate the problem with thunderbird: all the emails sent 
>> arrived without problems. 
>> 
>> Probably the correct solution is to compile simscan with the patch indicated 
>> in the post by Gustavo Castro.
>> 
>> Thank you
>> Michele
>> 
>> Il 11/09/2018 12:44, Michele Federici ha scritto:
>>> Hi,
>>> 
>>> I've found this error "Your email was rejected because it contains a bad 
>>> attachment: d" in the smtp log.
>>> 
>>> I read these old post
>>> 
>>> http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d
>>> 
>>> http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html
>>> 
>>> but I did not understand if current simscan 1.4.0 (1.qt.el7) is compiled 
>>> with the patch.
>>> 
>>> Can you help me?
>>> 
>>> Thank you
>>> Michele
>>> - To 
>>> unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For 
>>> additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> - To 
>> unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For 
>> additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> -- 
> Eric Broch
> White Horse Technical Consulting (WHTC)

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan - bad attachment: d

[Eric Broch]

Is this the correct patch:

diff -ruN simscan-1.4.0/simscan.c simscan-1.4.0-tested/simscan.c
--- simscan-1.4.0/simscan.c 2011-02-08 20:26:06.095067924 -0200
+++ simscan-1.4.0-tested/simscan.c 2011-02-08 18:16:11.003064430 -0200
@@ -1735,10 +1735,14 @@
for(i=0;i if ( DebugFlag > 2 ) fprintf(stderr, "simscan: checking 
attachment %s against %s\n", mydirent->d_name, bk_attachments[i] );

lowerit(mydirent->d_name);
- if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
- strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
- closedir(mydir);
- return(1);
+ if ( strlen(mydirent->d_name) >= strlen(bk_attachments[i]) ) {
+ if ( str_rstr(mydirent->d_name,bk_attachments[i]) == 0 ) {
+ strncpy(AttachName, mydirent->d_name, sizeof(AttachName)-1);
+ closedir(mydir);
+ return(1);
+ }
+ } else {
+ if ( DebugFlag > 2 ) fprintf(stderr, "simscan: attachment name '%s' 
(%d) is shorter than '%s' (%d). IGNORED\n", mydirent->d_name, strlen( 
mydirent->d_name ), bk_attachments[i], strlen( bk_attachments[i] ) );

}
}


On 9/13/2018 10:02 AM, Michele Federici wrote:


Hi,
I have done various tests and can confirm the presence of the bug.

If the doc attachment created with word 2007 (or other?) is sent 
through outlook 2003/2007 (or others?), sometimes ripmime wrong to 
extract the various parts of the email by generating a file "d".


# ripmime --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32 mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
-rw-r--r-- 1 root root    121 13 sep 13.32 textfile1
-rw-r--r-- 1 root root    167 13 sep 13.32 textfile2

The interesting thing is that: this does not happen with all the doc 
files but only with some.


Simscan 1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks 
the e-mail with the error "bad attachment: d"


I could not replicate the problem with thunderbird: all the emails 
sent arrived without problems.


Probably the correct solution is to compile simscan with the patch 
indicated in the post by Gustavo Castro.


Thank you
Michele

Il 11/09/2018 12:44, Michele Federici ha scritto:

Hi,

I've found this error "Your email was rejected because it contains a 
bad attachment: d" in the smtp log.


I read these old post

http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d

http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html

but I did not understand if current simscan 1.4.0 (1.qt.el7) is 
compiled with the patch.


Can you help me?

Thank you
Michele- 
To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com For additional 
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


- 
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] simscan - bad attachment: d

[Philip]

Hello

I had the same issues but with some "bad attachment: t"

Regards



On 09/13/2018 06:02 PM, Michele Federici wrote:


Hi,
I have done various tests and can confirm the presence of the bug.

If the doc attachment created with word 2007 (or other?) is sent 
through outlook 2003/2007 (or others?), sometimes ripmime wrong to 
extract the various parts of the email by generating a file "d".


# ripmime --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32 mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
-rw-r--r-- 1 root root    121 13 sep 13.32 textfile1
-rw-r--r-- 1 root root    167 13 sep 13.32 textfile2

The interesting thing is that: this does not happen with all the doc 
files but only with some.


Simscan 1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks 
the e-mail with the error "bad attachment: d"


I could not replicate the problem with thunderbird: all the emails 
sent arrived without problems.


Probably the correct solution is to compile simscan with the patch 
indicated in the post by Gustavo Castro.


Thank you
Michele

Il 11/09/2018 12:44, Michele Federici ha scritto:

Hi,

I've found this error "Your email was rejected because it contains a 
bad attachment: d" in the smtp log.


I read these old post

http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d

http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html

but I did not understand if current simscan 1.4.0 (1.qt.el7) is 
compiled with the patch.


Can you help me?

Thank you
Michele- 
To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com For additional 
commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


- 
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 

Re: [qmailtoaster] simscan - bad attachment: d

[Michele Federici]

  
  
Hi,
  I have done various tests and can confirm the presence of the
  bug.
  
  If the doc attachment created with word 2007 (or other?) is
  sent through outlook 2003/2007 (or others?), sometimes ripmime
  wrong to extract the various parts of the email by generating
  a file "d". 
  
# ripmime
  --disable-qmail-bounce -i test_outlook.eml -d out_dir_res
# ls -l ./out_dir_res/
-rw-r--r-- 1 root root  0 13 sep 13.32 d
-rw--- 1 root root 442368 13 sep 13.32
  mydocument.doc
-rw-r--r-- 1 root root 48 13 sep 13.32 textfile0
-rw-r--r-- 1 root root    121 13 sep 13.32 textfile1
-rw-r--r-- 1 root root    167 13 sep 13.32 textfile2
  
  The interesting thing is that: this does not happen with all
  the doc files but only with some. 
  
  Simscan 
  1.4.0 (1.qt.el7) analyzes these files and due to a bug blocks
  the e-mail with the error "bad attachment: d"
  
  I could not replicate the problem with thunderbird: all the
  emails sent arrived without problems. 
  
  Probably the correct solution is to compile simscan with the
  patch indicated in the post by Gustavo Castro.
  
  Thank you
  Michele

Il 11/09/2018 12:44, Michele Federici
  ha scritto:


  
  Hi,
  
  I've found this error "Your email was rejected because it contains
  a bad attachment: d" in the smtp log.
  
  I read these old post
  
  http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d
  
  http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html
  
  but I did not understand if current simscan 1.4.0 (1.qt.el7) is
  compiled with the patch.
  
  Can you help me?
  
  Thank you
  Michele

  -
  To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com


  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] simscan - bad attachment: d

[Michele Federici]

  
  
Hi,

I've found this error "Your email was rejected because it contains a
bad attachment: d" in the smtp log.

I read these old post

http://qmailtoaster-list.qmailtoaster.narkive.com/u9RF8MRE/your-email-was-rejected-because-it-contains-a-bad-attachment-d

http://gcastrop.blogspot.com/2011/02/problemas-con-adjuntos-en-simscan-con.html

but I did not understand if current simscan 1.4.0 (1.qt.el7) is
compiled with the patch.

Can you help me?

Thank you
Michele

  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Simscan

[Eric Broch]

Thanks, Rajesh!!!


On 1/26/2018 8:34 AM, Rajesh M wrote:

hi

the temporary resolution is as such

cd /var/lib/clamav

service clamd stop

mv daily.cld daily.cld.BAK
mv main.cld main.cld.BAK
mv bytecode.cld bytecode.cld.BAK

also rename any
main.cvd
daily.cvd
bytecode.cvd


keep foxhole_all and badmacro.ndb unoffical which handles all kinds of bad 
attachments (even if they are zipped / archived) / macros.

also have spam-assassin with oledb macro plugin.

service clamd start

with this config you can have simscan working

clam will work and stop a major amount of viruses which comes in the form of 
attachments and macros.

rajesh



- Original Message -
From: Tommi Järvilehto [mailto:tommi.jarvile...@datavahti.fi]
To: qmailtoaster-list@qmailtoaster.com
Sent: Fri, 26 Jan 2018 17:19:48 +0200
Subject:

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7
servers currently ok.
I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
create temporary file
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp:
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
create temporary file
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp:
Too many open files


Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:

Hi Eric - we're having massive problems this morning with soft
rejects. How do we bypass simscan?  I can't find the email in which
you explained

Jeff





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Simscan

[Eric Broch]

Thanks, Havrla!!!


On 1/26/2018 7:24 AM, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff





--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Simscan

[Rajesh M]

hi

the temporary resolution is as such

cd /var/lib/clamav

service clamd stop

mv daily.cld daily.cld.BAK
mv main.cld main.cld.BAK
mv bytecode.cld bytecode.cld.BAK

also rename any
main.cvd
daily.cvd
bytecode.cvd


keep foxhole_all and badmacro.ndb unoffical which handles all kinds of bad 
attachments (even if they are zipped / archived) / macros.

also have spam-assassin with oledb macro plugin.

service clamd start

with this config you can have simscan working

clam will work and stop a major amount of viruses which comes in the form of 
attachments and macros.

rajesh



- Original Message -
From: Tommi Järvilehto [mailto:tommi.jarvile...@datavahti.fi]
To: qmailtoaster-list@qmailtoaster.com
Sent: Fri, 26 Jan 2018 17:19:48 +0200
Subject:

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7
servers currently ok.
I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:
> Hi, Eric
>
> problem = clamav  after update (antivir base)
>
> simscan no problem
>
>
> LOG:
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
> create temporary file
> /tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp:
> Too many open files
> Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname
> == NULL
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown
> not saved: report to http://bugs.clamav.net
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
> create temporary file
> /tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp:
> Too many open files
>
>
> Havrla
>
> Dne 26.1.2018 v 15:11 Eric Broch napsal(a):
>> On 1/26/2018 7:04 AM, Jeff Koch wrote:
>>> Hi Eric - we're having massive problems this morning with soft
>>> rejects. How do we bypass simscan?  I can't find the email in which
>>> you explained
>>>
>>> Jeff
>
>

--
Tommi Järvilehto
DataVahti Oy
040 732 8032


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Simscan

[Tommi Järvilehto]

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7 
servers currently ok.

I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff





--
Tommi Järvilehto
DataVahti Oy
040 732 8032

Re: [qmailtoaster] Simscan

[Havrla]

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff

Re: [qmailtoaster] Simscan

[Eric Broch]

# qmailctl stop

# qmailctl stat (make sure it's stopped)

In /etc/tcprules.d/tcp.smtp

change

QMAILQUEUE="/var/qmail/bin/simscan"

to

QMAILQUEUE="/var/qmail/bin/qmail-queue.orig"

qmailctl cdb

qmailctl start


On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff


On 1/26/2018 8:58 AM, Eric Broch wrote:


Hi List,

It seems we have more simscan issues with qq soft rejects of late 
though this has been plaguing qmail for a very long time. I'm sick of 
this issue and decided to build a version of simscan with more 
extensive debugging using thelibexplain 
 libraries.


Simscan and [lib]explain[-devel] packages have been built with mock 
so they were built in a clean environment with the latest package 
requirements.


In order to use at this time simply download these packages (CentOS 6 
or 7 x86_64):


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/explain-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/simscan-1.4.0-2.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/explain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-devel-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/simscan-1.4.0-2.qt.el6.x86_64.rpm

Install as follows:

# qmailctl stop

# yum localinstall explain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-devel-1.4-4.el6.x86_64.rpm

# yum localupdate/localinstall simscan-1.4.0-1.qt.el6.x86_64.rpm

add SIMSCAN_DEBUG="3" to /etc/tcprules.d/tcp.smtp

AND keep QMAILQUEUE="/var/qmail/bin/simscan"

# qmailctl cdb

# qmailctl start

The debugging will be in /var/qmail/control/smtp/current

# tail -f /var/log/qmail/smtp/current | tai64nlocal

Debugging info will be as follows:

The debugging info will be of the form below:

error no.: ('3') error msg.: ('This is an error')

Let me know how it goes

Eric
--
Eric Broch
White Horse Technical Consulting (WHTC)




--
Eric Broch
White Horse Technical Consulting (WHTC)

[qmailtoaster] Simscan

[Eric Broch]

Hi List,

It seems we have more simscan issues with qq soft rejects of late though 
this has been plaguing qmail for a very long time. I'm sick of this 
issue and decided to build a version of simscan with more extensive 
debugging using thelibexplain  
libraries.


Simscan and [lib]explain[-devel] packages have been built with mock so 
they were built in a clean environment with the latest package requirements.


In order to use at this time simply download these packages (CentOS 6 or 
7 x86_64):


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/explain-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/simscan-1.4.0-2.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/explain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-devel-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/simscan-1.4.0-2.qt.el6.x86_64.rpm

Install as follows:

# qmailctl stop

# yum localinstall explain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-devel-1.4-4.el6.x86_64.rpm

# yum localupdate/localinstall simscan-1.4.0-1.qt.el6.x86_64.rpm

add SIMSCAN_DEBUG="3" to /etc/tcprules.d/tcp.smtp

AND keep QMAILQUEUE="/var/qmail/bin/simscan"

# qmailctl cdb

# qmailctl start

The debugging will be in /var/qmail/control/smtp/current

# tail -f /var/log/qmail/smtp/current | tai64nlocal

Debugging info will be as follows:

The debugging info will be of the form below:

error no.: ('3') error msg.: ('This is an error')

Let me know how it goes

Eric

--
Eric Broch
White Horse Technical Consulting (WHTC)

[qmailtoaster] simscan in ramdisk

[Rajesh M]

hi eric

i am creating simscan on ramdisk

however there is always 3-4 emails in the folder /var/qmail/simscan

how do i transfer these email to the memory based simscan.

thanks
'rajesh



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan always result CLEAN

[nelson]

Hi Guys,
I finally figure this out.
First I check if simscan reads the hits and score correctly
QMAILQUEUE=/var/qmail/bin/simscan SIMSCAN_DEBUG=2 NOP0FCHECK=1 
/var/qmail/bin/qmail-inject x...@yyy.com  test.txt
simscan: cdb looking up
simscan: cdb for  found clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif
simscan: pelookup clam = yes
simscan: pelookup spam = yes
simscan: pelookup spam_hits = 6
simscan: Per Domain Hits set to : 6.00
simscan: pelookup attach = .mp3:.src:.bat:.pif
simscan: attachment flag attach = .mp3:.src:.bat:.pif
simscan: .mp3 is attachment number 0
simscan: .src is attachment number 1
simscan: .bat is attachment number 2
simscan: .pif is attachment number 3
simscan: starting: work dir: /var/qmail/simscan/1432176943.952853.29806
simscan: pelookup: called with r...@mail.yyy.com
simscan: pelookup: domain is mail.yyy.com
simscan: cdb looking up mail.yyy.com
simscan: pelookup: local part is root
simscan: cdb looking up r...@mail.yyy.com
simscan: pelookup: called with xxx@yyy.comsimscan: pelookup: domain is yyy.com
simscan: cdb looking up yyy.com
simscan: pelookup: local part is xxx
simscan: cdb looking up xxx@yyy.comsimscan: cdb looking up version attach
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: normal clamdscan return code: 0
simscan: calling spamc
simscan: calling /usr/bin/spamc  spamc
simscan: neither hits= or score= in X-Spam-Status header
simscan: cdb looking up version spam
simscan:[29805]:CLEAN (0.00/6.00):1.6770s::(null):r...@mail.yyy.com:x...@yyy.com
simscan: done, execing qmail-queue
simscan: qmail-queue exited 0

we see that simscan cannot read the numbers
simscan: neither hits= or score= in X-Spam-Status header
so, I edit the /etc/mail/spamassassin/local.cf , remove all add_header config
and add only
add_header all Report _REPORT_
then restart qmail
then I try again
[root@mail tmp]# QMAILQUEUE=/var/qmail/bin/simscan SIMSCAN_DEBUG=2 
NOP0FCHECK=1 /var/qmail/bin/qmail-inject x...@yyy.com  test.txt
simscan: cdb looking up
simscan: cdb for  found clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif
simscan: pelookup clam = yes
simscan: pelookup spam = yes
simscan: pelookup spam_hits = 6
simscan: Per Domain Hits set to : 6.00
simscan: pelookup attach = .mp3:.src:.bat:.pif
simscan: attachment flag attach = .mp3:.src:.bat:.pif
simscan: .mp3 is attachment number 0
simscan: .src is attachment number 1
simscan: .bat is attachment number 2
simscan: .pif is attachment number 3
simscan: starting: work dir: /var/qmail/simscan/1432177207.419532.30782
simscan: pelookup: called with r...@mail.yyy.com
simscan: pelookup: domain is mail.yyy.com
simscan: cdb looking up mail.yyy.com
simscan: pelookup: local part is root
simscan: cdb looking up r...@mail.yyy.com
simscan: pelookup: called with x...@yyy.com
simscan: pelookup: domain is yyy.com
simscan: cdb looking up yyy.com
simscan: pelookup: local part is xxx
simscan: cdb looking up x...@yyy.com
simscan: cdb looking up version attach
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: normal clamdscan return code: 0
simscan: calling spamc
simscan: calling /usr/bin/spamc  spamc
simscan: cdb looking up version spam
simscan:[30781]:CLEAN (3.60/6.00):1.6591s::(null):r...@mail.yyy.com:x...@yyy.com
simscan: done, execing qmail-queue
simscan: qmail-queue exited 0

now simscan can read the numbers again ^^;
It seems that I messed up with the add_header in 
/etc/mail/spamassassin/local.cf that cause this to happen.
Thanks Guys.



 On Thursday, 16 April 2015, 20:57, Eric Broch ebr...@whitehorsetc.com 
wrote:
   

  Not off the top of my head. The only thing I can come up with is that Simscan 
is not scoring spam, but something else entirely with that 'CLEAN' message.
 
 On 4/16/2015 7:41 AM, nelson wrote:
  
  Thanks for the info Eric, it helps me understand more about simscan. 
  Any hints about the Spam Score and Simscan odd behaviour ? 
  Regards, Nelson  
 
 
   On Thursday, 16 April 2015, 20:15, Eric Broch ebr...@whitehorsetc.com 
wrote:
   
 
 On 4/16/2015 6:44 AM, nelson wrote:
  Eric,
  CMIIW, is it not spamd check the mail, decided the spam score and then add 
  prefix ***SPAM*** to the subject before passing it to simscan for execution ?
  What i am confused about is that spamd already flag the email as spam with 
  spam score 18.3, and simscan said otherwise with result  CLEAN (0.00/6.00)
  I am sure that simscan and spamd were checking the same email because of the 
  same timestamp (email header using GMT and simscan using GMT+07), same 
  sender, even the X-Spam-Report saying the right thing about the email content
 Notice in your header:
 
 Received: by simscan 1.4.0 ppid: 25086, pid: 25089, t: 2.0388s
         scanners: attach: 1.4.0 clamav: 0.98.4
 /m:55/d:20330 spam: 3.3.2
 
 Simscan calls clamav and spamassassin. You can control which is called.
 Look into 'simcontrol' here:
 http://qmailwiki.org/Simscan/Guide 
 
 
 
 

Re: [qmailtoaster] simscan always result CLEAN

[Johannes Weberhofer]

Am 16.04.2015 um 11:08 schrieb nelson:

Hi guys,

I've noticed today that simscan is weird because it always display result 
CLEAN and the score always (0.00/6.00) even when spamassassin clearly mark 
***SPAM***

Also, if i check the email header of the message, clearly the score is not 0.00 
as simscan result.

04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**
04-16 15:46:58 simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**



IMHO the ***SPAM*** prefix has been added by the sending SMTP server not by 
yours, as the log-lines indicate the original mail's subject. I believe everything is OK.

Best regards,
Johannes



Below is my /var/qmail/control/simcontrol

:clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif

Below is my /etc/mail/spamassassin/local.cf

ok_locales all
skip_rbl_checks 0

required_score 6
report_safe 0
rewrite_header Subject ***SPAM***

use_pyzor 1
use_auto_whitelist 0

use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1

use_dcc 1
dcc_home /var/dcc
dcc_path /usr/local/bin/dccproc

add_header all Score _SCORE_
add_header all Tests _TESTS_
add_header all Autolearn _AUTOLEARN_
add_header all Level _STARS(*)_
add_header all Status _YESNO_
add_header all DCC _DCCB_: _DCCR_
add_header all Report _REPORT_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on 
_HOSTNAME_

I've tried to search for hints regarding this situation but could not find any.

Anyone have a hint where i should look ?

Thanks.






--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] simscan always result CLEAN

[nelson]

Hi guys,
I've noticed today that simscan is weird because it always display result 
CLEAN and the score always (0.00/6.00) even when spamassassin clearly mark 
***SPAM***
Also, if i check the email header of the message, clearly the score is not 0.00 
as simscan result.
04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**04-16 15:46:58 
simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**
Below is my /var/qmail/control/simcontrol
:clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif

Below is my /etc/mail/spamassassin/local.cf
ok_locales allskip_rbl_checks 0
required_score 6report_safe 0rewrite_header Subject ***SPAM***
use_pyzor 1use_auto_whitelist 0
use_bayes 1use_bayes_rules 1bayes_auto_learn 1
use_dcc 1dcc_home /var/dccdcc_path /usr/local/bin/dccproc
add_header all Score _SCORE_add_header all Tests _TESTS_add_header all 
Autolearn _AUTOLEARN_add_header all Level _STARS(*)_add_header all Status 
_YESNO_add_header all DCC _DCCB_: _DCCR_add_header all Report 
_REPORT_add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on 
_HOSTNAME_
I've tried to search for hints regarding this situation but could not find any.
Anyone have a hint where i should look ?
Thanks.

Re: [qmailtoaster] simscan always result CLEAN

[Eric Broch]

What's the score in the header of the email?


On 4/16/2015 3:08 AM, nelson wrote:
 Hi guys,

 I've noticed today that simscan is weird because it always display
 result CLEAN and the score always (0.00/6.00) even when spamassassin
 clearly mark ***SPAM***

 Also, if i check the email header of the message, clearly the score is
 not 0.00 as simscan result.

 04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In
 My WILL:122.52.144.108:evelyncohenco...@aol.de:**@**
 04-16 15:46:58 simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In
 My WILL:122.52.144.108:evelyncohenco...@aol.de:**@**

 Below is my /var/qmail/control/simcontrol

 :clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif

 Below is my /etc/mail/spamassassin/local.cf

 ok_locales all
 skip_rbl_checks 0

 required_score 6
 report_safe 0
 rewrite_header Subject ***SPAM***

 use_pyzor 1
 use_auto_whitelist 0

 use_bayes 1
 use_bayes_rules 1
 bayes_auto_learn 1

 use_dcc 1
 dcc_home /var/dcc
 dcc_path /usr/local/bin/dccproc

 add_header all Score _SCORE_
 add_header all Tests _TESTS_
 add_header all Autolearn _AUTOLEARN_
 add_header all Level _STARS(*)_
 add_header all Status _YESNO_
 add_header all DCC _DCCB_: _DCCR_
 add_header all Report _REPORT_
 add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_)
 on _HOSTNAME_

 I've tried to search for hints regarding this situation but could not
 find any.

 Anyone have a hint where i should look ?

 Thanks.

Re: [qmailtoaster] simscan always result CLEAN

[Johannes Weberhofer]

Am 16.04.2015 um 13:35 schrieb Eric Broch:

What's the score in the header of the email?


Nelson, can you send the spam-related header-section from a mail?

Johannes


On 4/16/2015 3:08 AM, nelson wrote:

Hi guys,

I've noticed today that simscan is weird because it always display result 
CLEAN and the score always (0.00/6.00) even when spamassassin clearly mark 
***SPAM***

Also, if i check the email header of the message, clearly the score is not 0.00 
as simscan result.

04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**
04-16 15:46:58 simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In My 
WILL:122.52.144.108:evelyncohenco...@aol.de:**@**

Below is my /var/qmail/control/simcontrol

:clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif

Below is my /etc/mail/spamassassin/local.cf

ok_locales all
skip_rbl_checks 0

required_score 6
report_safe 0
rewrite_header Subject ***SPAM***

use_pyzor 1
use_auto_whitelist 0

use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1

use_dcc 1
dcc_home /var/dcc
dcc_path /usr/local/bin/dccproc

add_header all Score _SCORE_
add_header all Tests _TESTS_
add_header all Autolearn _AUTOLEARN_
add_header all Level _STARS(*)_
add_header all Status _YESNO_
add_header all DCC _DCCB_: _DCCR_
add_header all Report _REPORT_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on 
_HOSTNAME_

I've tried to search for hints regarding this situation but could not find any.

Anyone have a hint where i should look ?

Thanks.








--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan always result CLEAN

[nelson]

Thanks for your response Johannes.
But i also noticed the same situation even when the subject has no ***SPAM*** 
prefix, please see below :
04-16 16:10:14 simscan:[14340]:CLEAN (0.00/6.00):4.9623s:$50 off $200 + TRIPLE 
Points 
Event!:63.236.76.196:bo-b914y6ja508xtyaumawd2dy9hft...@b.neimanmarcusemail.com:**@**
04-16 16:11:04 simscan:[14434]:CLEAN 
(0.00/6.00):2.3609s:=?UTF-8?B?4piFIEthbXUgY29jb2sgZGVuZ2FuIFJhIGRpIFR3b28=?=:77.73.183.15:nore...@twoomail.com:
**@**
04-16 16:16:13 simscan:[15021]:CLEAN (0.00/6.00):2.8733s:RE_ Online 
Banking:216.82.254.103:doris.c...@sc.com:**@**
Infact, all simscan result is always  CLEAN (0.00/6.00) 
Then i compare simscan result with spamd log as below :
spamd log :
04-16 17:41:00 Apr 16 17:41:00.417 [10421] info: spamd: identified spam 
(21.3/6.0) for clamav:89 in 1.7 seconds, 3034 bytes.
04-16 17:41:00 Apr 16 17:41:00.417 [10421] info: spamd: result: Y 21 - 
ADVANCE_FEE_4_NEW_MONEY,BAYES_99,BAYES_999,DEAR_FRIEND,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,FREEMAIL_REPLYTO,IN_BCUDA_RBL,LOTS_OF_MONEY,MILLION_USD,MONEY_FRAUD_5,MONEY_FROM_41,RCVD_IN_BCUDA_RELAY,RDNS_NONE,URG_BIZ
 
scantime=1.7,size=3034,user=clamav,uid=89,required_score=6.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57617,mid=220534.34570...@web100501.mail.kks.yahoo.co.jp,bayes=1.00,autolearn=spam

simscan said :
@4000552f91c618f361ec simscan:[23083]:CLEAN (0.00/6.00):1.7990s:***SPAM*** 
Dear Friend:183.79.28.131:ol_ale...@yahoo.co.jp:**@**

Spamd scored 21.3/6.00 , spamassassin add prefix ***SPAM*** to subject but 
simscan still display (0.00/6.00) and let the spam go through

Regards,
Nelson

  


 On Thursday, 16 April 2015, 16:44, Johannes Weberhofer 
jweberho...@weberhofer.at wrote:
   

 
Am 16.04.2015 um 11:08 schrieb nelson:
 Hi guys,

 I've noticed today that simscan is weird because it always display result 
 CLEAN and the score always (0.00/6.00) even when spamassassin clearly mark 
 ***SPAM***

 Also, if i check the email header of the message, clearly the score is not 
 0.00 as simscan result.

 04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In My 
 WILL:122.52.144.108:evelyncohenco...@aol.de:**@**
 04-16 15:46:58 simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In My 
 WILL:122.52.144.108:evelyncohenco...@aol.de:**@**


IMHO the ***SPAM*** prefix has been added by the sending SMTP server not by 
yours, as the log-lines indicate the original mail's subject. I believe 
everything is OK.

Best regards,
Johannes


 Below is my /var/qmail/control/simcontrol

 :clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif

 Below is my /etc/mail/spamassassin/local.cf

 ok_locales all
 skip_rbl_checks 0

 required_score 6
 report_safe 0
 rewrite_header Subject ***SPAM***

 use_pyzor 1
 use_auto_whitelist 0

 use_bayes 1
 use_bayes_rules 1
 bayes_auto_learn 1

 use_dcc 1
 dcc_home /var/dcc
 dcc_path /usr/local/bin/dccproc

 add_header all Score _SCORE_
 add_header all Tests _TESTS_
 add_header all Autolearn _AUTOLEARN_
 add_header all Level _STARS(*)_
 add_header all Status _YESNO_
 add_header all DCC _DCCB_: _DCCR_
 add_header all Report _REPORT_
 add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on 
 _HOSTNAME_

 I've tried to search for hints regarding this situation but could not find 
 any.

 Anyone have a hint where i should look ?

 Thanks.





-- 
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



   

Re: [qmailtoaster] simscan always result CLEAN

[nelson]

Thanks for the info Eric, it helps me understand more about simscan.
Any hints about the Spam Score and Simscan odd behaviour ?
Regards,Nelson 


 On Thursday, 16 April 2015, 20:15, Eric Broch ebr...@whitehorsetc.com 
wrote:
   

 On 4/16/2015 6:44 AM, nelson wrote:
 Eric,
 CMIIW, is it not spamd check the mail, decided the spam score and then add 
 prefix ***SPAM*** to the subject before passing it to simscan for execution ?
 What i am confused about is that spamd already flag the email as spam with 
 spam score 18.3, and simscan said otherwise with result  CLEAN (0.00/6.00)
 I am sure that simscan and spamd were checking the same email because of the 
 same timestamp (email header using GMT and simscan using GMT+07), same 
 sender, even the X-Spam-Report saying the right thing about the email content
Notice in your header:

Received: by simscan 1.4.0 ppid: 25086, pid: 25089, t: 2.0388s
        scanners: attach: 1.4.0 clamav: 0.98.4
/m:55/d:20330 spam: 3.3.2

Simscan calls clamav and spamassassin. You can control which is called.
Look into 'simcontrol' here:
http://qmailwiki.org/Simscan/Guide




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


  

Re: [qmailtoaster] simscan always result CLEAN

[Eric Broch]

Not off the top of my head. The only thing I can come up with is that
Simscan is not scoring spam, but something else entirely with that
'CLEAN' message.

On 4/16/2015 7:41 AM, nelson wrote:
 Thanks for the info Eric, it helps me understand more about simscan.

 Any hints about the Spam Score and Simscan odd behaviour ?

 Regards,
 Nelson



 On Thursday, 16 April 2015, 20:15, Eric Broch
 ebr...@whitehorsetc.com wrote:


 On 4/16/2015 6:44 AM, nelson wrote:
  Eric,
  CMIIW, is it not spamd check the mail, decided the spam score and
 then add prefix ***SPAM*** to the subject before passing it to simscan
 for execution ?
  What i am confused about is that spamd already flag the email as
 spam with spam score 18.3, and simscan said otherwise with result 
 CLEAN (0.00/6.00)
  I am sure that simscan and spamd were checking the same email
 because of the same timestamp (email header using GMT and simscan
 using GMT+07), same sender, even the X-Spam-Report saying the right
 thing about the email content
 Notice in your header:

 Received: by simscan 1.4.0 ppid: 25086, pid: 25089, t: 2.0388s
 scanners: attach: 1.4.0 clamav: 0.98.4
 /m:55/d:20330 spam: 3.3.2

 Simscan calls clamav and spamassassin. You can control which is called.
 Look into 'simcontrol' here:
 http://qmailwiki.org/Simscan/Guide





 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com
 mailto:qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan always result CLEAN

[Eric Broch]

On 4/16/2015 6:44 AM, nelson wrote:
 Eric,
 CMIIW, is it not spamd check the mail, decided the spam score and then add 
 prefix ***SPAM*** to the subject before passing it to simscan for execution ?
 What i am confused about is that spamd already flag the email as spam with 
 spam score 18.3, and simscan said otherwise with result  CLEAN (0.00/6.00)
 I am sure that simscan and spamd were checking the same email because of the 
 same timestamp (email header using GMT and simscan using GMT+07), same 
 sender, even the X-Spam-Report saying the right thing about the email content
Notice in your header:

Received: by simscan 1.4.0 ppid: 25086, pid: 25089, t: 2.0388s
 scanners: attach: 1.4.0 clamav: 0.98.4
/m:55/d:20330 spam: 3.3.2

Simscan calls clamav and spamassassin. You can control which is called.
Look into 'simcontrol' here:
http://qmailwiki.org/Simscan/Guide




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Simscan question

[Nikolay Mitev]

 Hi guys,

I want to ask you something about simscan scanner
(simscan-toaster-1.4.0-1.4.0/Qmail-1.03/CentOS5.6/clamav-toaster-0.98.1),
and
when I get emails from Exim from hosting company, I see error in smtp log

---
simscan: no envelope information, deferred exit
simscan: exit error code: 54
tcpserver: end 30338 status 256
---
and emails not received.

I included tcp server in Debug level 2.

Could this be user error in the client settings, because simscan error is
(#define EXIT_454  54  /* unable to read message or envelope */)?


Best regards,
Nikolay

[qmailtoaster] Simscan disappeared

[Tom Keyser]

What would cause simscan to disappear?

Tom

[qmailtoaster] Simscan disappeared

[Tom Keyser]

What would cause simscan to disappear?

Thanks
Tom

[qmailtoaster] simscan help

[Muhammad Wajid]

Hi,
   I have installed qmail from your site's procedure but
*1)* i did not get this

*Make dns entry: *

*BIND - in the your-domain.com zone file (see public.txt for the
private._domainkey.your-domain.com entry):*

*
*

*   _domainkey.your-domain.com. IN TXT t=y; o=-*

*Note: This is putting it into test mode. If you are done testing, and want
to take it out of testing mode, change the above to reflect below.*

*   _domainkey.your-domain.com. IN TXT o=-*

*Then also add this to your zone file:*

*private._domainkey.your-domain.com. IN TXT k=rsa; p=MEwwDQY . .
. to end of key
  (NOTE QUOTATION MARKS MUST BE THERE)*

*Note: I have not tested DJBDNS as I do not run it - DK*

*DJBDNS - in /var/djbdns/tinydns/root/data (make from public.txt):
  '_domainkey.your-domain.com:o=-; r=postmas...@your-domain.com
  'private._domainkey.your-domain.com:k=rsa; p=MEwwDQY . . . to
end of key* 


i have install djbdns so pls tell me about this

*2)* I want to block exe file attachment

i add .exe in /var/qmail/control/simcontrol

and reload cdb files but it did not work.


*3)* i think simscan is not working  how i get this

 i attached a virus infected exe file but clamd did not detect it and
send mail to reciepient .



Regards,

M.Wajid

RE: [qmailtoaster] simscan/simcontrol spam options

[Joel Eddy]

You can exclude them from scanning with simcontrol. Just remember to reload
configs with qmailctl cdb when you are done.

-Original Message-
From: Helmut Fritz [mailto:hel...@fritz.us.com] 
Sent: Tuesday, January 10, 2012 12:20 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] simscan/simcontrol spam options

By default, will the toaster compiled simscan support the pass through
option?  By domain filtering?  What options is it compiled with?

Or what number should I set my spam_hits to (i.e. recommendation) so that
most email is accepted and passed through to users?  Those that score over
my threshold in /etc/mail/spamassassin/local.cf should then be marked spam
with the rewrite_header SUBJECT ***SPAM*** entry, correct?

I have some execs that insist they get all their mail, even if it is spam.

Thx!

Helmut



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.1901 / Virus Database: 2109/4734 - Release Date: 01/10/12


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] simscan/simcontrol spam options

[Helmut Fritz]

Thx Joel.  Understood, but all of this leads me to the more detailed
questions regarding simcontrol options in the follow on email.

-Original Message-
From: Joel Eddy [mailto:rje...@iowaconnect.com] 
Sent: Tuesday, January 10, 2012 10:43 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] simscan/simcontrol spam options

You can exclude them from scanning with simcontrol. Just remember to reload
configs with qmailctl cdb when you are done.

-Original Message-
From: Helmut Fritz [mailto:hel...@fritz.us.com]
Sent: Tuesday, January 10, 2012 12:20 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] simscan/simcontrol spam options

By default, will the toaster compiled simscan support the pass through
option?  By domain filtering?  What options is it compiled with?

Or what number should I set my spam_hits to (i.e. recommendation) so that
most email is accepted and passed through to users?  Those that score over
my threshold in /etc/mail/spamassassin/local.cf should then be marked spam
with the rewrite_header SUBJECT ***SPAM*** entry, correct?

I have some execs that insist they get all their mail, even if it is spam.

Thx!

Helmut



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.1901 / Virus Database: 2109/4734 - Release Date: 01/10/12



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] simscan/simcontrol spam options

[Helmut Fritz]

By default, will the toaster compiled simscan support the pass through
option?  By domain filtering?  What options is it compiled with?

Or what number should I set my spam_hits to (i.e. recommendation) so that
most email is accepted and passed through to users?  Those that score over
my threshold in /etc/mail/spamassassin/local.cf should then be marked spam
with the rewrite_header SUBJECT ***SPAM*** entry, correct?

I have some execs that insist they get all their mail, even if it is spam.

Thx!

Helmut


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] SIMSCAN / Spamassassin

[Scott Hughes]

I have noticed on some emails that when SIMSCAN refers the email to
Spamassassin, the domain name gets changed, like so (from the Spamassassin
log):

 

 2011-04-20 13:55:32.757156500 Apr 20 13:55:32.751 [17877] info: spamd:

 result: . 3 -

 HTML_MESSAGE,MIME_QP_LONG_LINE,RCVD_NUMERIC_HELO,RDNS_NONE,SARE_GIF_AT

 TACH,T _FILL_THIS_FORM_SHORT

 scantime=6.0,size=11089,user=clamav,uid=89,required_score=3.7,rhost=lo

 
calhost.localdomain,raddr=127.0.0.1,rport=34733,mid=006301cbff8c$49186170$d
b492450$@com,autolearn=no

 

The domain name (in red) was supposed to be 'ncm20.com'.  I have not yet
seen any other changed, but I'll keep looking. Where this causes a problem
is if you have a whitelist_from entry set up in your local.cf. Since it
doesn't match that whitelist entry, it doesn't get whitelisted.

 

Scott

 

[qmailtoaster] simscan not scanning

[Dieter Febel]

Hi all,

I have a problem with simscan not scanning, there are no entries
in /var/log/qmail/smtp/current for simscan. 

My qmailctl stat shows:
authlib: up (pid 4067) 1294 seconds
clamd: up (pid 4050) 1294 seconds
imap4: up (pid 4058) 1294 seconds
imap4-ssl: up (pid 4092) 1294 seconds
pop3: up (pid 4074) 1294 seconds
pop3-ssl: up (pid 4055) 1294 seconds
send: up (pid 4052) 1294 seconds
smtp: up (pid 4070) 1294 seconds
spamd: up (pid 4051) 1294 seconds
submission: up (pid 4069) 1294 seconds
authlib/log: up (pid 4068) 1294 seconds
clamd/log: up (pid 4077) 1294 seconds
imap4/log: up (pid 4054) 1294 seconds
imap4-ssl/log: up (pid 4071) 1294 seconds
pop3/log: up (pid 4072) 1294 seconds
pop3-ssl/log: up (pid 4076) 1294 seconds
send/log: up (pid 4056) 1294 seconds
smtp/log: up (pid 4073) 1294 seconds
spamd/log: up (pid 4053) 1294 seconds
submission/log: up (pid 4075) 1294 seconds

My  /etc/tcprules.d/tcp.smtp
27.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private,RBLSMTPD=,NOP0FCHECK=1
:allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONGRCPTLIMIT=10,QMAILQUEUE=/var/qmail/bin/simscan,DKSIGN=/var/qmail/control/domainkeys/%/private,NOP0FCHECK=1

Could someone please help. 


-- 
Kind regards,

Dieter Febel

[qmailtoaster] simscan compile options

[Randy Katz]

Hi, is there a way to view/change the compile options for simscan? Is a 
complete reinstall required? Is there a way to

make it so an automatic upgrade will keep the compile settings desired?

Thank you in advance,
Randy

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan compile options

[Eric Broch]

 1) extract the spec file from the source rpm modify it and rebuild the 
source.
2) I don't think a complete reinstall is necessary as simscan is, or 
used to be, the last module installed per the install script. Someone 
else might want to confirm this.

3) I'm not sure that there is a way to automate it to your liking or not.

On 1/6/2011 6:39 AM, Randy Katz wrote:
Hi, is there a way to view/change the compile options for simscan? Is 
a complete reinstall required? Is there a way to

make it so an automatic upgrade will keep the compile settings desired?

Thank you in advance,
Randy

- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan compile options

[Randy Katz]

Yeah, I just did that, and added it to a list so when I do qtp-newmodel 
for an upgrade I will remember to recompile simscan

afterward with the desired settings.

On 1/6/2011 6:08 AM, Eric Broch wrote:
 1) extract the spec file from the source rpm modify it and rebuild 
the source.
2) I don't think a complete reinstall is necessary as simscan is, or 
used to be, the last module installed per the install script. Someone 
else might want to confirm this.

3) I'm not sure that there is a way to automate it to your liking or not.

On 1/6/2011 6:39 AM, Randy Katz wrote:
Hi, is there a way to view/change the compile options for simscan? Is 
a complete reinstall required? Is there a way to

make it so an automatic upgrade will keep the compile settings desired?

Thank you in advance,
Randy

- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Simscan and Clamav

[Mike Tirpak]

I'm looking for a way to reject viruses, but instead of sending a rely to the 
sender, I would like to send a message to the receiver with the senders info.  
Is this possible?

Thanks

[qmailtoaster] simscan / spamassassin - Redirect

[Javid Freeman]

I have just finished my new install / migration from qmailrocks.org to 
QmailToaster. I have a couple of questions that I could not find answers 
for in the Archive.


Does anyone know of a resource that outlines best practices for 
qmail-toaster SPAM / HAM handing?
- I would like to find out the easiest way to redirect spam =5 
score to an email (example s...@domain.com) that Bayes can scan.
- I don't want to forward email risking the header being re-written 
by email programs.


The reason I am asking is that I have installed roundcube webamail 
instead of squirrelmail. Roundcube has a spam / ham feature that will 
forward marked spam to an email address specified in the config. If I 
can configure simscan / spamassassin to redirect messages then I would 
only have to create a single Bayes sa-learn script to run on 
spam/Maildir/cur.


If anyone also has an alternative that is easier then what I am looking 
for please let me know.


Thanks,

Javid

[qmailtoaster] simscan

[Igor Smitran]

If simscan is not stated in tcp.smtp rule then message will not be scanned 
for viruses and spam?


Thank you, 



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] SimScan Question

[Bill Holt]

Jake Vickers wrote:
Bill
Holt wrote:
  
  After running qtp-newmodel, simscan does not
appear in email headers anymore.


[r...@mail ~]# rpm -ivh
/usr/src/redhat/RPMS/i386/simscan-toaster-1.4.0-1.3.8.i386.rpm

Preparing... ###
[100%]

 package simscan-toaster-1.4.0-1.3.8.i386 is already installed


3194 ? S 0:00 svscan

3207 ? S 0:00 \_ supervise clamd

3228 ? Sl 0:02 | \_ /usr/sbin/clamd

3208 ? S 0:00 \_ supervise log

  
  
simscan will not show in ps. It's called as part of qmail-smtp.
  
You need to look at your smtp logs to see if it's showing there, and
show us some email headers where you think it's not running. Showing us
the smtp logs will also help. And lastly, make sure it's defined
correctly in your tcp.smtp file. Show us that file if you have any
questions as well.
  
  
  
  
-
  
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
  
 Vickers Consulting Group offers Qmailtoaster support and
installations.
  
 If you need professional help with your setup, contact them today!
  
-
  
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
  
  To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
  
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
  
  
  

Fixed tcp-smpt and got it to work.
Thanks,
-- 


bholt-netaxs.html
 Bill Holt
Net-Axs Consulting
bh...@net-axs.com
"Remember, the government
cannot give anything to anyone -- 
that they have not first taken from someone else."




-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] SimScan Question

[Bill Holt]

After running qtp-newmodel, simscan does not appear in email headers 
anymore.


[r...@mail ~]# rpm -ivh 
/usr/src/redhat/RPMS/i386/simscan-toaster-1.4.0-1.3.8.i386.rpm
Preparing...### 
[100%]

   package simscan-toaster-1.4.0-1.3.8.i386 is already installed

3194 ?S  0:00 svscan
3207 ?S  0:00  \_ supervise clamd
3228 ?Sl 0:02  |   \_ /usr/sbin/clamd
3208 ?S  0:00  \_ supervise log
3229 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3209 ?S  0:00  \_ supervise spamd
3231 ?S  0:01  |   \_ /usr/bin/perl -T -w /usr/bin/spamd -x 
-u vpop

3537 ?S  0:00  |   \_ spamd child
3538 ?S  0:00  |   \_ spamd child
3210 ?S  0:00  \_ supervise log
3230 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3211 ?S  0:00  \_ supervise pop3-ssl
3233 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -H -l 
mail.udsmail.n

3212 ?S  0:00  \_ supervise log
3232 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3213 ?S  0:00  \_ supervise imap4
3234 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -H -l 
mail.udsmail.n

3681 ?S  0:00  |   \_ /usr/bin/imapd Maildir
3214 ?S  0:00  \_ supervise log
3236 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3215 ?S  0:00  \_ supervise authlib
3239 ?S  0:00  |   \_ /usr/libexec/courier-authlib/authdaemond
3341 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3342 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3343 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3344 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3345 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3346 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3347 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3348 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3349 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3350 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3351 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3352 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3353 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3354 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond
3355 ?S  0:00  |   \_ 
/usr/libexec/courier-authlib/authdaemond

3216 ?S  0:00  \_ supervise log
3250 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3217 ?S  0:00  \_ supervise submission
3240 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -H -l mail 
-x /etc/t

3218 ?S  0:00  \_ supervise log
3241 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3219 ?S  0:00  \_ supervise pop3
3235 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -c 200 0 110 
/var/qm

3220 ?S  0:00  \_ supervise log
3237 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3222 ?S  0:00  \_ supervise imap4-ssl
3238 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -H -l 
mail.udsmail.n

3223 ?S  0:00  \_ supervise log
3243 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3224 ?S  0:00  \_ supervise send
3242 ?S  0:00  |   \_ qmail-send
3289 ?S  0:00  |   \_ qmail-lspawn ./Maildir/
3290 ?S  0:00  |   \_ qmail-rspawn
3291 ?S  0:00  |   \_ qmail-clean
3225 ?S  0:00  \_ supervise log
3246 ?S  0:00  |   \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3226 ?S  0:00  \_ supervise smtp
3244 ?S  0:00  |   \_ /usr/bin/tcpserver -v -R -H -l mail 
-x /etc/t

3227 ?S  0:00  \_ supervise log
3245 ?S  0:00  \_ /usr/bin/multilog t s100 n100 
/var/log/qm

3297 ?Ss 0:00 /usr/sbin/sshd
3683 ?Ss 0:00  \_ sshd: r...@pts/0
3685 pts/0Ss 0:00  \_ -bash
3715 pts/0R+ 0:00  \_ ps axf
3314 ?Ss 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
3329 ?SLs0:00 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g
3356 ?Ss 0:00 /usr/bin/freshclam -d -p 
/var/run/clamav/freshclam.pi
3392 ?S  0:00 /bin/sh /usr/bin/mysqld_safe 
--datadir=/var/lib/mysql
3442 ?Sl 0:00  \_ /usr/libexec/mysqld --basedir=/usr 
--datadir=/var

3481 ?Ss 0:00 gpm -m /dev/input/mice -t exps2
3494 ?   


How can I make 

[qmailtoaster] SimScan Question

[Bill Holt]

After running qtp-newmodel, simscan does not
appear in email headers anymore.

[r...@mail ~]# rpm -ivh
/usr/src/redhat/RPMS/i386/simscan-toaster-1.4.0-1.3.8.i386.rpm
Preparing... ###
[100%]
 package simscan-toaster-1.4.0-1.3.8.i386 is already installed

3194 ? S 0:00 svscan
3207 ? S 0:00 \_ supervise clamd
3228 ? Sl 0:02 | \_ /usr/sbin/clamd
3208 ? S 0:00 \_ supervise log
3229 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3209 ? S 0:00 \_ supervise spamd
3231 ? S 0:01 | \_ /usr/bin/perl -T -w /usr/bin/spamd
-x -u vpop
3537 ? S 0:00 | \_ spamd child
3538 ? S 0:00 | \_ spamd child
3210 ? S 0:00 \_ supervise log
3230 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3211 ? S 0:00 \_ supervise pop3-ssl
3233 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -H -l
mail.udsmail.n
3212 ? S 0:00 \_ supervise log
3232 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3213 ? S 0:00 \_ supervise imap4
3234 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -H -l
mail.udsmail.n
3681 ? S 0:00 | \_ /usr/bin/imapd Maildir
3214 ? S 0:00 \_ supervise log
3236 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3215 ? S 0:00 \_ supervise authlib
3239 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3341 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3342 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3343 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3344 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3345 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3346 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3347 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3348 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3349 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3350 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3351 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3352 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3353 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3354 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3355 ? S 0:00 | \_
/usr/libexec/courier-authlib/authdaemond
3216 ? S 0:00 \_ supervise log
3250 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3217 ? S 0:00 \_ supervise submission
3240 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -H -l mail
-x /etc/t
3218 ? S 0:00 \_ supervise log
3241 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3219 ? S 0:00 \_ supervise pop3
3235 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -c 200 0
110 /var/qm
3220 ? S 0:00 \_ supervise log
3237 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3222 ? S 0:00 \_ supervise imap4-ssl
3238 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -H -l
mail.udsmail.n
3223 ? S 0:00 \_ supervise log
3243 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3224 ? S 0:00 \_ supervise send
3242 ? S 0:00 | \_ qmail-send
3289 ? S 0:00 | \_ qmail-lspawn ./Maildir/
3290 ? S 0:00 | \_ qmail-rspawn
3291 ? S 0:00 | \_ qmail-clean
3225 ? S 0:00 \_ supervise log
3246 ? S 0:00 | \_ /usr/bin/multilog t s100 n100
/var/log/qm
3226 ? S 0:00 \_ supervise smtp
3244 ? S 0:00 | \_ /usr/bin/tcpserver -v -R -H -l mail
-x /etc/t
3227 ? S 0:00 \_ supervise log
3245 ? S 0:00 \_ /usr/bin/multilog t s100 n100
/var/log/qm
3297 ? Ss 0:00 /usr/sbin/sshd
3683 ? Ss 0:00 \_ sshd: r...@pts/0
3685 pts/0 Ss 0:00 \_ -bash
3715 pts/0 R+ 0:00 \_ ps axf
3314 ? Ss 0:00 xinetd -stayalive -pidfile
/var/run/xinetd.pid
3329 ? SLs 0:00 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g
3356 ? Ss 0:00 /usr/bin/freshclam -d -p
/var/run/clamav/freshclam.pi
3392 ? S 0:00 /bin/sh /usr/bin/mysqld_safe
--datadir=/var/lib/mysql
3442 ? Sl 0:00 \_ /usr/libexec/mysqld --basedir=/usr
--datadir=/var
3481 ? Ss 0:00 gpm -m /dev/input/mice -t exps2
3494 ? 

How can I make sure it runs.? [ps axf does not show simscan running]
I did reboot the server after the upgrade.




"Remember,
the government cannot give anything to anyone -- 
that they have not first taken from someone else."




-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] SimScan Question

[Jake Vickers]

Bill Holt wrote:
After running qtp-newmodel, simscan does not appear in email headers 
anymore.


[r...@mail ~]# rpm -ivh 
/usr/src/redhat/RPMS/i386/simscan-toaster-1.4.0-1.3.8.i386.rpm
Preparing...
### [100%]

   package simscan-toaster-1.4.0-1.3.8.i386 is already installed

3194 ?S  0:00 svscan
3207 ?S  0:00  \_ supervise clamd
3228 ?Sl 0:02  |   \_ /usr/sbin/clamd
3208 ?S  0:00  \_ supervise log


simscan will not show in ps. It's called as part of qmail-smtp.
You need to look at your smtp logs to see if it's showing there, and 
show us some email headers where you think it's not running. Showing us 
the smtp logs will also help. And lastly, make sure it's defined 
correctly in your tcp.smtp file. Show us that file if you have any 
questions as well.




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] simscan version incremented

[Jake Vickers]

I have incremented the simscan minor version number to better align with 
the current version schema.
Basically, it moved from version 1.4.0-1.3.1 to version 1.4.0-1.3.8 (I 
know, finally!). This will allow scripts such as qtp-newmodel to 
correctly understand that this is a new version. No other changes were 
made from the 1.3.1 version to the 1.3.8 version.


The last version change included an increase in the hard ceiling for 
spam deletion from 20 to 40, and I modified the spec file so that 
simscan should no longer overwrite your current tcp.smtp file and wipe 
out any customizations you may have created. There will be a new 
tcp.smtp file in your /etc/tcprules.d directory that you should inspect 
and merge with your current tcp.smtp file in the event there are any 
changes.

Enjoy!


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan problem

[Jake Vickers]

Steve Huff wrote:



this sounds a lot like the problem i saw a while back around the 
release of clamav-toaster-0.93.  are you running freshclam to get 
clamav database updates?  if so, you may need a patched version of 
simscan that knows how to read the updates in the new format.


Hmm. I haven't run into this problem myself. Looking at the patch in the 
current version of simscan-toaster (1.3.1) the date is 1-11-2007 so I 
think it may be a good idea to freshen up the patch to something a 
little more current. I'll attempt to patch the current version this week 
and see if it builds correctly. I'll need a couple volunteers to test 
the package out though.
Steve, I'll look at your simscan RPM once the new version of QMT is out 
(or at least in testing). At this point in time I am continuing Erik's 
policy on freezing development on the 1.3 branch of QMT. I do not want 
to add new versions/features to something that currently works as this 
has the potential to slow the progress on the 2.0 branch of QMT if an 
issue arises.

Thanks.


-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] simscan problem

[Jake Vickers]

Dan Page wrote:

My toaster was working fine but as of lately it seems simscan is not
running clamav or spamassassin on incoming mail.  running 
/var/qmail/bin/simscanmk -g  
produces:

LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
simscan versions cdb file built. /var/qmail/control/simversions.cdb
  


What files do you have in the /usr/share/clamav directory? .cld files?

-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] simscan problem

[Dan Page]

daily.cld  mirrors.dat   MSRBL-Images.hdb-bak  MSRBL-SPAM.ndb-bak
main.cld   MSRBL-Images.hdb  MSRBL-SPAM.ndbphish.ndb.gz


On Wed, 2009-03-25 at 09:16 -0400, Jake Vickers wrote:
 Dan Page wrote:
  My toaster was working fine but as of lately it seems simscan is not
  running clamav or spamassassin on incoming mail.  running 
  /var/qmail/bin/simscanmk -g  
  produces:
  LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
  LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
  simscan versions cdb file built. /var/qmail/control/simversions.cdb

 
 What files do you have in the /usr/share/clamav directory? .cld files?
 
 -
  Managed Qmailtoaster servers are now available
Visit http://qmailtoaster.com/QMTManaged.html to order yours today!
 
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
 
  Please visit qmailtoaster.com for the latest news, updates, and packages.
 
 
   To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: testing-h...@qmailtoaster.com
 
 


-
 Managed Qmailtoaster servers are now available
   Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

 Please visit qmailtoaster.com for the latest news, updates, and packages.


  To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] simscan problem

[Steve Huff]

On Mar 23, 2009, at 1:28 PM, Dan Page wrote:


My toaster was working fine but as of lately it seems simscan is not
running clamav or spamassassin on incoming mail.  running
/var/qmail/bin/simscanmk -g
produces:
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/ 
main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/ 
daily.cvd

simscan versions cdb file built. /var/qmail/control/simversions.cdb



this sounds a lot like the problem i saw a while back around the  
release of clamav-toaster-0.93.  are you running freshclam to get  
clamav database updates?  if so, you may need a patched version of  
simscan that knows how to read the updates in the new format.  i have  
packaged such a patch here:


http://www.vecna.org/software/simscan-toaster/

please make sure that you have handy an already-built version of the  
stock simscan-toaster *before* you install a patched RPM, so that you  
can easily roll back if something goes wrong.


-steve

p.s. i have already submitted this update to Jake; no doubt it'll make  
its way into the distribution at some point, one way or another, and  
then i'll be able to take down this page.  for the time being, have at  
it. :)


--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v






smime.p7s
Description: S/MIME cryptographic signature

Re: [qmailtoaster] simscan-toaster problem

[Richard Vinke]

I solved this by:

   * remove the rpmbuild directory.
   * Start the rpmbuild and press ctrl+s. The process stops for now
   * Edit the file =BUILD/simscan-1.3.1/simscanmk.c=, line 133 en 379:
 add the 0x0644 as in: =open(CdbTmpFile?, O_CREAT | O_TRUNC |
 O_WRONLY, 0x0644)=
   * Continue the rpmbuild with ctrl+q

At the end I had the following error:

   [r...@server6 qtms-install]# rpm -Uvh
   /root/rpmbuild/RPMS/i386/simscan-toaster-1.3.1-1.3.6.i386.rpm
   Preparing...   
   ### [100%]
  1:simscan-toaster   
   ### [100%]

   connect(): No such file or directory
   LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
   Reloaded /etc/tcprules.d/tcp.smtp
   Reloaded /var/qmail/control/badmimetypes.cdb
   Reloaded /var/qmail/control/badloadertypes.cdb
   Reloaded /var/qmail/control/simversions.cdb
   Reloaded /var/qmail/control/simcontrol.cdb
   [r...@server6 qtms-install]#

How is yours doing now?

Kind regards, Richard Vinke.



Fernando Azevedo wrote:

Hello Everyone,
 
In Fedora 10, when doing: rpmbuild --rebuild --with fedora_10 
simscan-toaster-1.3.1-1.3.6.src.rpm the output ends with:
 
gcc  -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
-fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 
-mtune=generic -fasynchronous-unwind-tables -Wall   -o simscan  
simscan.o cdb/cdb.a cdb/buffer.a cdb/unix.a cdb/byte.a cdb/alloc.a 
gcc -DHAVE_CONFIG_H -I. -I. -I. -O2 -g -pipe -Wall 
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector 
--param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic 
-fasynchronous-unwind-tables -Wall -c `test -f 'simscanmk.c' || echo 
'./'`simscanmk.c

In function 'open',
inlined from 'make_cdb' at simscanmk.c:379:
/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' 
declared with attribute error: open with O_CREAT in second argument 
needs 3 arguments

In function 'open',
inlined from 'make_version_cdb' at simscanmk.c:133:
/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' 
declared with attribute error: open with O_CREAT in second argument 
needs 3 arguments

make[2]: *** [simscanmk.o] Error 1
make[2]: Leaving directory `/root/rpmbuild/BUILD/simscan-1.3.1'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/root/rpmbuild/BUILD/simscan-1.3.1'
make: *** [all] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.2EPVLa (%build)

RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.2EPVLa (%build)
 
 
I've googled for help but without any success. Any hints on overcoming 
this problem?
 
 
Thanks in advance,

Fernando
 
 
- 
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
begin:vcard
fn:Richard Vinke
n:Vinke;Richard
email;internet:rich...@vogelnestje.nl
x-mozilla-html:TRUE
version:2.1
end:vcard

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan-toaster problem

[Jake Vickers]

Richard Vinke wrote:

I solved this by:

* remove the rpmbuild directory.
* Start the rpmbuild and press ctrl+s. The process stops for now
* Edit the file =BUILD/simscan-1.3.1/simscanmk.c=, line 133 en
  379: add the 0x0644 as in: =open(CdbTmpFile?, O_CREAT | O_TRUNC
  | O_WRONLY, 0x0644)=
* Continue the rpmbuild with ctrl+q



Or he could download the version that works with his distro that adjusts 
the compilation flags to not be as strict.

[qmailtoaster] simscan-toaster problem

[Fernando Azevedo]

Hello Everyone,

In Fedora 10, when doing: "rpmbuild --rebuild --with fedora_10 simscan-toaster-1.3.1-1.3.6.src.rpm" the output ends with:

gcc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -Wall -o simscan simscan.o cdb/cdb.a cdb/buffer.a cdb/unix.a cdb/byte.a cdb/alloc.a gcc -DHAVE_CONFIG_H -I. -I. -I. -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -Wall -c `test -f 'simscanmk.c' || echo './'`simscanmk.cIn function 'open', inlined from 'make_cdb' at simscanmk.c:379:/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT in second argument needs 3 argumentsIn function 'open', inlined from 'make_version_cdb' at simscanmk.c:133:/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT in second argument needs 3 argumentsmake[2]: *** [simscanmk.o] Error 1make[2]: Leaving directory `/root/rpmbuild/BUILD/simscan-1.3.1'make[1]: *** [all-recursive] Error 1make[1]: Leaving directory `/root/rpmbuild/BUILD/simscan-1.3.1'make: *** [all] Error 2error: Bad exit status from /var/tmp/rpm-tmp.2EPVLa (%build)
RPM build errors: Bad exit status from /var/tmp/rpm-tmp.2EPVLa (%build)


I've googled for help but without any success. Any hints on overcoming this problem?


Thanks in advance,
Fernando



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] simscan-toaster problem

[Jake Vickers]

Fernando Azevedo wrote:

Hello Everyone,
 
In Fedora 10, when doing: rpmbuild --rebuild --with fedora_10 
simscan-toaster-1.3.1-1.3.6.src.rpm the output ends with:
 


There is no Fedora 10 (or Fedora 9) support in 
simscan-toaster-1.3.1-1.3.6, only in version 1.3.1-1.3.7. That's the 
problem you had with ezmlm as well. You are trying to use a version that 
does not support Fedora 10.

Re: [qmailtoaster] simscan not working

[nightduke]

Hi i found the problem, if i send an email by horde to a user locally,
simscan dosen't scan that file so i can send virus between users.

If i send an email from external connection or program simscan works.

Nightduke


2008/9/8 Eric Shubert [EMAIL PROTECTED]:
 It appears that your qmail installation is not a qmail-toaster. This list is
 not intended for non-toaster implementations. Using the toaster
 implementation avoids problems such as the one you appear to be having.

 nightduke wrote:
 cent os 5.0
 qmail-1.03-1.5.15
 cat /var/qmail/control/simcontrol
 :clam=yes,attach=.mp3:.src:.bat:.pif:.scr
  qmailctl cdb
 Usage: Qmail 
 {start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}


 2008/9/7 Eric Shubert [EMAIL PROTECTED]:
 nightduke wrote:
 Hi i have simscan installed but dosen't scan virus.

 Anyone can tell me how can i fix it?

 Thanks

 Nightduke

 Not without providing some information about your system.
 What's your distro/version?
 What toaster package versions are you running?
 What does your /var/qmail/control/simcontrol contain?
 Did you change simcontrol and forget to run qmailctl cdb afterward?

 --
 -Eric 'shubes'

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



 --
 -Eric 'shubes'

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan not working

[Eric Shubert]

It appears that your qmail installation is not a qmail-toaster. This list is
not intended for non-toaster implementations. Using the toaster
implementation avoids problems such as the one you appear to be having.

nightduke wrote:
 cent os 5.0
 qmail-1.03-1.5.15
 cat /var/qmail/control/simcontrol
 :clam=yes,attach=.mp3:.src:.bat:.pif:.scr
  qmailctl cdb
 Usage: Qmail 
 {start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}
 
 
 2008/9/7 Eric Shubert [EMAIL PROTECTED]:
 nightduke wrote:
 Hi i have simscan installed but dosen't scan virus.

 Anyone can tell me how can i fix it?

 Thanks

 Nightduke

 Not without providing some information about your system.
 What's your distro/version?
 What toaster package versions are you running?
 What does your /var/qmail/control/simcontrol contain?
 Did you change simcontrol and forget to run qmailctl cdb afterward?

 --
 -Eric 'shubes'

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan not working

[nightduke]

Hi i have simscan installed but dosen't scan virus.

Anyone can tell me how can i fix it?

Thanks

Nightduke

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan not working

[Eric Shubert]

nightduke wrote:
 Hi i have simscan installed but dosen't scan virus.
 
 Anyone can tell me how can i fix it?
 
 Thanks
 
 Nightduke
 

Not without providing some information about your system.
What's your distro/version?
What toaster package versions are you running?
What does your /var/qmail/control/simcontrol contain?
Did you change simcontrol and forget to run qmailctl cdb afterward?

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan not working

[nightduke]

cent os 5.0
qmail-1.03-1.5.15
cat /var/qmail/control/simcontrol
:clam=yes,attach=.mp3:.src:.bat:.pif:.scr
 qmailctl cdb
Usage: Qmail 
{start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}


2008/9/7 Eric Shubert [EMAIL PROTECTED]:
 nightduke wrote:
 Hi i have simscan installed but dosen't scan virus.

 Anyone can tell me how can i fix it?

 Thanks

 Nightduke


 Not without providing some information about your system.
 What's your distro/version?
 What toaster package versions are you running?
 What does your /var/qmail/control/simcontrol contain?
 Did you change simcontrol and forget to run qmailctl cdb afterward?

 --
 -Eric 'shubes'

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan not working

[Anil Aliyan]

try running command
service qmail cdb

Regards

Anil Aliyan

- Original Message - 
From: nightduke [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Sunday, September 07, 2008 10:16 PM
Subject: Re: [qmailtoaster] simscan not working



cent os 5.0
qmail-1.03-1.5.15
cat /var/qmail/control/simcontrol
:clam=yes,attach=.mp3:.src:.bat:.pif:.scr
qmailctl cdb
Usage: Qmail 
{start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}



2008/9/7 Eric Shubert [EMAIL PROTECTED]:

nightduke wrote:

Hi i have simscan installed but dosen't scan virus.

Anyone can tell me how can i fix it?

Thanks

Nightduke



Not without providing some information about your system.
What's your distro/version?
What toaster package versions are you running?
What does your /var/qmail/control/simcontrol contain?
Did you change simcontrol and forget to run qmailctl cdb afterward?

--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Simscan under Opensuse 11 (glibc issue)

[Justice London]

It appears that the version of glibc being used under opensuse 11 is
causing issues with compiling simscan properly. Has anyone worked with
this at all or determined a patch for this? It appears to simply be
making a call to a function that either no longer exists or was
replaced.

Justice London
[EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan

[Simon Crute]

Hi, 
I'm trying to buld simscan on opensuse11 (32bit) 
During compile I get this error 


gcc -DHAVE_CONFIG_H -I. -I. -I. -O2 -g -m32 -march=i586 -mtune=i686 
-fmessage-length=0 -D_FORTIFY_SOURCE=2 -Wall -c `test -f 'simscanmk.c' || 
echo './'`simscanmk.c
In function ‘open’,
inlined from ‘make_cdb’ at simscanmk.c:379:
/usr/include/bits/fcntl2.h:51: error: call to ‘__open_missing_mode’ declared 
with attribute error: open with O_CREAT in second argument needs 3 arguments
In function ‘open’,
inlined from ‘make_version_cdb’ at simscanmk.c:133:
/usr/include/bits/fcntl2.h:51: error: call to ‘__open_missing_mode’ declared 
with attribute error: open with O_CREAT in second argument needs 3 arguments
make[2]: *** [simscanmk.o] Error 1
make[2]: Leaving directory `/usr/src/packages/BUILD/simscan-1.3.1'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/packages/BUILD/simscan-1.3.1'
make: *** [all] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.41283 (%build)



The build options screen that comes up is 




 RPM RELEASE: simscan-toaster-1.3.1-1.3.6
 OS TYPE IS : SuSE 11.0 Linux i586
 BUILD DATE : Sat Apr 14 2007
 CCFLAGS: -O2 -g -m32 -march=i586 -mtune=i686 -fmessage-length=0 
-D_FORTIFY_SOURCE=2
 LDFLAGS: -O2 -g -m32 -march=i586 -mtune=i686 -fmessage-length=0 
-D_FORTIFY_SOURCE=2




(note, I'm building on opensuse11.0, for this RPM the %define section for 
sus110 is the same as sus101)


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] SIMSCAN

[Gilbert T. Gutierrez, Jr.]

I sm seeing a descrepancy in my headers.  My question is, how do I correct 
the header to read the correct information or not provide some of those 
details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 3.2.4.  Is 
there a configuration file that holds this information?  I know that 
spamassassin is 3.2.4 because the next line is as follows in the header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: 
sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: neo)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] SIMSCAN

[Philip Nix Guru]

Hello Gilbert
you can simply run this command :
/var/qmail/bin/simscanmk -g

or you can simply have all the cdb files rebuilt issuing :
/etc/init.d/qmail cdb command  or  of course /usr/bin/qmailctl cdb

-P


Gilbert T. Gutierrez, Jr. wrote:
I sm seeing a descrepancy in my headers.  My question is, how do I 
correct the header to read the correct information or not provide some 
of those details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 
3.2.4.  Is there a configuration file that holds this information?  I 
know that spamassassin is 3.2.4 because the next line is as follows in 
the header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, 
builder: sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: neo)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] SIMSCAN

[Gilbert T. Gutierrez, Jr.]

/var/qmail/bin/simscanmk -g
worked somewhat (I got the following error)...
[EMAIL PROTECTED] ~]# /var/qmail/bin/simscanmk -g
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
simscan versions cdb file built. /var/qmail/control/simversions.cdb

At this point, the mail server stoped working when I restarted the service. 
I guess 0.93 gets rid of main.cvd and daily.cvd.  I ended up copying the 
.cld files to .cvd files.  I ran the command again and restarted the server. 
Everything is now working.


That was a real surprise until I read the following link... 
http://www.mail-archive.com/[EMAIL PROTECTED]/msg05168.html


Thank you,
Gilbert
- Original Message - 
From: Philip Nix Guru [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:15 PM
Subject: Re: [qmailtoaster] SIMSCAN



Hello Gilbert
you can simply run this command :
/var/qmail/bin/simscanmk -g

or you can simply have all the cdb files rebuilt issuing :
/etc/init.d/qmail cdb command  or  of course /usr/bin/qmailctl cdb

-P


Gilbert T. Gutierrez, Jr. wrote:
I sm seeing a descrepancy in my headers.  My question is, how do I 
correct the header to read the correct information or not provide some of 
those details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 3.2.4. 
Is there a configuration file that holds this information?  I know that 
spamassassin is 3.2.4 because the next line is as follows in the 
header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: 
sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: neo)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] SIMSCAN

[Gilbert T. Gutierrez, Jr.]

/var/qmail/bin/simscanmk -g
worked somewhat (I got the following error)...
[EMAIL PROTECTED] ~]# /var/qmail/bin/simscanmk -g
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
simscan versions cdb file built. /var/qmail/control/simversions.cdb

At this point, the mail server stoped working when I restarted the service. 
I guess 0.93 gets rid of main.cvd and daily.cvd.  I ended up copying the 
.cld files to .cvd files.  I ran the command again and restarted the server. 
Everything is now working.


That was a real surprise until I read the following link... 
http://www.mail-archive.com/[EMAIL PROTECTED]/msg05168.html


Thank you,
Gilbert
- Original Message - 
From: Philip Nix Guru [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:15 PM
Subject: Re: [qmailtoaster] SIMSCAN



Hello Gilbert
you can simply run this command :
/var/qmail/bin/simscanmk -g

or you can simply have all the cdb files rebuilt issuing :
/etc/init.d/qmail cdb command  or  of course /usr/bin/qmailctl cdb

-P


Gilbert T. Gutierrez, Jr. wrote:
I sm seeing a descrepancy in my headers.  My question is, how do I 
correct the header to read the correct information or not provide some of 
those details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 3.2.4. 
Is there a configuration file that holds this information?  I know that 
spamassassin is 3.2.4 because the next line is as follows in the 
header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: 
sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: neo)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] SIMSCAN

[Gilbert T. Gutierrez, Jr.]

Actually I am having problems...  I have had to disable the clam scaning.

The clamav process is showing the following...
clamav8397 43.0  0.0  0 0 pts/0Z17:26   0:00 [clamd] 
defunct


No mail was coming through.  I am trying to figure out what I need to do. 
Does anyone have any ideas now that I have somehow messed up the cdb file 
for simscan to the point that clamd no longer works?


Gilbert
- Original Message - 
From: Gilbert T. Gutierrez, Jr. [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:42 PM
Subject: Re: [qmailtoaster] SIMSCAN



/var/qmail/bin/simscanmk -g
worked somewhat (I got the following error)...
[EMAIL PROTECTED] ~]# /var/qmail/bin/simscanmk -g
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
simscan versions cdb file built. /var/qmail/control/simversions.cdb

At this point, the mail server stoped working when I restarted the 
service. I guess 0.93 gets rid of main.cvd and daily.cvd.  I ended up 
copying the .cld files to .cvd files.  I ran the command again and 
restarted the server. Everything is now working.


That was a real surprise until I read the following link... 
http://www.mail-archive.com/[EMAIL PROTECTED]/msg05168.html


Thank you,
Gilbert
- Original Message - 
From: Philip Nix Guru [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:15 PM
Subject: Re: [qmailtoaster] SIMSCAN



Hello Gilbert
you can simply run this command :
/var/qmail/bin/simscanmk -g

or you can simply have all the cdb files rebuilt issuing :
/etc/init.d/qmail cdb command  or  of course /usr/bin/qmailctl cdb

-P


Gilbert T. Gutierrez, Jr. wrote:
I sm seeing a descrepancy in my headers.  My question is, how do I 
correct the header to read the correct information or not provide some 
of those details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 3.2.4. 
Is there a configuration file that holds this information?  I know that 
spamassassin is 3.2.4 because the next line is as follows in the 
header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: 
sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: 
neo)

WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] SIMSCAN

[Gilbert T. Gutierrez, Jr.]

I stoped the server, removed both simscan and clam.  Deleted 
/usr/share/clamav.  Reinstalled clam and simscan.  Now everything is 
working.  I really do not understand what happened.  I need to stop touching 
things that are not broken.


Gilbert

- Original Message - 
From: Gilbert T. Gutierrez, Jr. [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 5:31 PM
Subject: Re: [qmailtoaster] SIMSCAN



Actually I am having problems...  I have had to disable the clam scaning.

The clamav process is showing the following...
clamav8397 43.0  0.0  0 0 pts/0Z17:26   0:00 [clamd] 
defunct


No mail was coming through.  I am trying to figure out what I need to do. 
Does anyone have any ideas now that I have somehow messed up the cdb file 
for simscan to the point that clamd no longer works?


Gilbert
- Original Message - 
From: Gilbert T. Gutierrez, Jr. [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:42 PM
Subject: Re: [qmailtoaster] SIMSCAN



/var/qmail/bin/simscanmk -g
worked somewhat (I got the following error)...
[EMAIL PROTECTED] ~]# /var/qmail/bin/simscanmk -g
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/main.cvd
LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/daily.cvd
simscan versions cdb file built. /var/qmail/control/simversions.cdb

At this point, the mail server stoped working when I restarted the 
service. I guess 0.93 gets rid of main.cvd and daily.cvd.  I ended up 
copying the .cld files to .cvd files.  I ran the command again and 
restarted the server. Everything is now working.


That was a real surprise until I read the following link... 
http://www.mail-archive.com/[EMAIL PROTECTED]/msg05168.html


Thank you,
Gilbert
- Original Message - 
From: Philip Nix Guru [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, July 08, 2008 4:15 PM
Subject: Re: [qmailtoaster] SIMSCAN



Hello Gilbert
you can simply run this command :
/var/qmail/bin/simscanmk -g

or you can simply have all the cdb files rebuilt issuing :
/etc/init.d/qmail cdb command  or  of course /usr/bin/qmailctl cdb

-P


Gilbert T. Gutierrez, Jr. wrote:
I sm seeing a descrepancy in my headers.  My question is, how do I 
correct the header to read the correct information or not provide some 
of those details?  Below is what I am seeing.


Headers in Email Received have the following line...

Received: by simscan 1.3.1 ppid: 8009, pid: 8021, t: 0.7548s
scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:46 spam: 3.1.8

The problem is that I am running clamav 0.93.1 and spamassassin 3.2.4. 
Is there a configuration file that holds this information?  I know that 
spamassassin is 3.2.4 because the next line is as follows in the 
header...


X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
mailsvr.phxinternet.net

Following is my clamav log...
[EMAIL PROTECTED] clamav]# tail freshclam.log
WARNING: Local version: 0.93 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, 
builder: sven)

Downloading daily-7668.cdiff [100%]
daily.cld updated (version: 7668, sigs: 35026, f-level: 33, builder: 
neo)

WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 29, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (347330 signatures) from db.us.clamav.net (IP: 
64.142.100.50)

--


Thank you,
Gilbert


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: 
[EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL

[qmailtoaster] simscan upgrade

[Newbie Qmail]

hi
I would like to upgrade the simscan from 1.2 to 1.4 along with few enable 
option,s what is the best way i need to follow up here
kavitha


  

[qmailtoaster] simscan 1.3.1 on Fedora Core 9

[lee]

Hi People,

Could someone please advise on the best way to overcome this issue.

I have installed all the QmailToaster packages except for
simscan-toaster-1.3.1-1.3.6.src.rpm which fails with the following error.

In function 'open',
inlined from 'make_cdb' at simscanmk.c:379:
/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode'
declared with attribute error: open with O_CREAT in second argument needs
3 arguments
In function 'open',
inlined from 'make_version_cdb' at simscanmk.c:133:
/usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode'
declared with attribute error: open with O_CREAT in second argument needs
3 arguments
make[2]: *** [simscanmk.o] Error 1
make[2]: Leaving directory `/usr/src/redhat/BUILD/simscan-1.3.1'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/redhat/BUILD/simscan-1.3.1'
make: *** [all] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.82414 (%build)

I think the compilation error is due to the function declaration and the
number of arguments that are passed to it and a compatibility issue in the
latest version of gcc.

If there isn't a easy fix or work around I was thinking of compiling
simscan 1.4.0 and was interested in what parameters I should use with
configure ?

I see in the failed install the following :-

./configure --build=i686-pc-linux-gnu --host=i686-pc-linux-gnu
--target=i386-redhat-linux-gnu --program-prefix= --prefix=/usr
--exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc
--datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib
--libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/usr/com
--mandir=/usr/share/man --infodir=/usr/share/info --enable-user=clamav
--enable-attach --enable-ripmime=/usr/bin/ripmime --enable-per-domain
--enable-spam --enable-spam-hits=20 --enable-received
--enable-clamavdb-path=/usr/share/clamav --enable-custom-smtp-reject

Is this all I would need to use, and then do a make  make install ?

Cheers.

Lee.


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan connect error 2

[Michael Handiboe]

where's the best place to ask about these errors in

/var/log/qmail/smtp/current ?

--mh

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan connect error 2

[Eric Shubert]

Michael Handiboe wrote:
 where's the best place to ask about these errors in
 
 /var/log/qmail/smtp/current ?
 
 --mh
 

I'd start here. Same errors?

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan connect error 2

[Michael Handiboe]

Eric Shubert wrote:

Michael Handiboe wrote:

where's the best place to ask about these errors in

/var/log/qmail/smtp/current ?


I'd start here.  Same errors?


Thanks Eric,

Here's what happens:

With Thunderbird, I click 'send' and it sits and spins and I never get a 
positive acknowledgement that the message sent.  This happens a lot, but 
not all the time.  The message in fact, sends.  But I don't know that 
for a while.


I *think* the simscan error is related.  Next time I experience the 
problem, I'll capture a few lines from the log and post them here.


Michael

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan connect error 2

[Eric Shubert]

Michael Handiboe wrote:
 Eric Shubert wrote:
 Michael Handiboe wrote:
 where's the best place to ask about these errors in

 /var/log/qmail/smtp/current ?

 I'd start here.  Same errors?
 
 Thanks Eric,
 
 Here's what happens:
 
 With Thunderbird, I click 'send' and it sits and spins and I never get a
 positive acknowledgement that the message sent.  This happens a lot, but
 not all the time.  The message in fact, sends.  But I don't know that
 for a while.
 
 I *think* the simscan error is related.  Next time I experience the
 problem, I'll capture a few lines from the log and post them here.
 
 Michael
 

I had similar symptoms pre-clamav-0.92. If your clamav-toaster package isn't
current, I'd recommend upgrading.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] simscan connect error 2

[Helmut Fritz]

That was the main reason for me wanting to upgrade.  Occasionally my clamav
would eat up 100% cpu (of one cpu) and messages would be sent and received
via smtp, but the sending application never knew it completed, seemed to
time out and would keep resending.  The end result was often I would get 2-8
of the same message.  This was whether it was a client application sending
via smtp or another server...  I was able to correlate these instances with
clamav running off with the cpu.  It was at version 090...and I just
upgraded last night (everything to latest) so we shall see if clamav behaves
now.

-Original Message-
From: Eric Shubert [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 03, 2008 9:12 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] simscan connect error 2

Michael Handiboe wrote:
 Eric Shubert wrote:
 Michael Handiboe wrote:
 where's the best place to ask about these errors in

 /var/log/qmail/smtp/current ?

 I'd start here.  Same errors?
 
 Thanks Eric,
 
 Here's what happens:
 
 With Thunderbird, I click 'send' and it sits and spins and I never get 
 a positive acknowledgement that the message sent.  This happens a lot, 
 but not all the time.  The message in fact, sends.  But I don't know 
 that for a while.
 
 I *think* the simscan error is related.  Next time I experience the 
 problem, I'll capture a few lines from the log and post them here.
 
 Michael
 

I had similar symptoms pre-clamav-0.92. If your clamav-toaster package isn't
current, I'd recommend upgrading.

--
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan connect error 2

[Michael Handiboe]

Helmut Fritz wrote:


clamav running off with the cpu.  It was at version 090...and I just
upgraded last night (everything to latest) so we shall see if clamav behaves
now.


wow, thanks for the info guys.  I can probably handle this one!  :)

--mh


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Simscan e spamassassin

[PakOgah]

Tracktest wrote:


Hello,

 

with simscan as the qmail default queue, the arriving mail recognized 
as Spam, are tagged in the subject and deliver to the users or deleted 
or forwarded to a particular spam mailbox?


Thank you, cheers!

Francesco

 

 

if spam score = 5 (defined in /etc/mail/spamassassin/local.cf -- 
required_score) subject will be tagged and email rcvd by users

--and if you enabled spambox the message will be delivered to SPAM folder
--later on you can run the script so those SPAM can be learned as spam by SA
http://wiki.qmailtoaster.com/index.php/Maintain_Trash_and_Spam_folder

if spam score = 12 (defined in /var/qmail/control/simcontrol -- 
spam_hits) email will be deleted




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Simscan e spamassassin

[Tracktest]

Hello,

 

with simscan as the qmail default queue, the arriving mail recognized as
Spam, are tagged in the subject and deliver to the users or deleted or
forwarded to a particular spam mailbox?

Thank you, cheers!

Francesco

 

 

[qmailtoaster] Simscan Patch

[aledr]

Goo day Srs.!

I was reading the spec and patch files for simscan and found a option
that replaces the actual pach for simscan (I guess...)... Wouldn't It
be nice If we use the option
--enable-clamavdb-path=/usr/share/clamav in the simscan.spec besides
the patch file for that?

Thanks.
-- 
[ ]'s
Aledr - Alexandre
OpenSource Solutions for SmallBusiness Problems

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Simscan Segmentation fault

[Ernesto Vargas]

Does any one have experience with Simscan Segmentation fault?

I have recompiled and still the same issue. 

I am running it on Fedora 7.

 
Ernesto Vargas-Azofeifa
Senior Web Developer  IT Manager
Macromedia Certified Cold Fusion  Web Developer
Linux-Apache-MySql-PHP advocate.







  

Get easy, one-click access to your favorites. 
Make Yahoo! your homepage.
http://www.yahoo.com/r/hs 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Simscan Segmentation fault

[Jake Vickers]

Ernesto Vargas wrote:

Does any one have experience with Simscan Segmentation fault?

I have recompiled and still the same issue. 


I am running it on Fedora 7.

  


Search the old messages - I seem to remember Shubes having (or helping) 
someone troubleshoot a simscan segfault using recordio.




smime.p7s
Description: S/MIME Cryptographic Signature

Re: [qmailtoaster] Simscan Segmentation fault

[Ernesto Vargas]

Could found the thread. Any idea how was it call?
 
Ernesto Vargas-Azofeifa
Senior Web Developer  IT Manager
Macromedia Certified Cold Fusion  Web Developer
Linux-Apache-MySql-PHP advocate. 
Visit: Photos.aero | 


- Original Message 
From: Jake Vickers [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, November 16, 2007 1:41:04 PM
Subject: Re: [qmailtoaster] Simscan Segmentation fault


Ernesto Vargas wrote:
 Does any one have experience with Simscan Segmentation fault?

 I have recompiled and still the same issue. 

 I am running it on Fedora 7.

   

Search the old messages - I seem to remember Shubes having (or helping)
 
someone troubleshoot a simscan segfault using recordio.







  

Be a better pen pal. 
Text or chat with friends inside Yahoo! Mail. See how.  
http://overview.mail.yahoo.com/

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Simscan doesn't seem to be working

[John Carlson]

Hello I still haven't had a reply to this yet... but I'm not sure how to 
reinstall the spamassassin, the only thing I have running pertaining to 
spam is supervise spamd and I'm not sure how that is.. also I don't have 
the /var/qmail/supervise/spamd/  directories and that is where the run 
script is supposed to be.. so how do I get them back.. ?


thanks in advance.. :)


Thanks for the reply,

I am running the newest version of qmailtoaster on a Fedora Core 6 box,
and I didn't see any kind of errors when I did the install. I used the
information from the qmailtoaster website to complete the installation.
the only thing I didn't do in the installation is I didn't setup the
djbdns and I didn't add any domain keys. and when I do a qmailctl stat
it doesn't show spamd in there. so I am assuming I need to re set that up.

Jake Vickers wrote:

John Carlson wrote:
I have noticed that the spamd service is not running, also I don't 
see anything in the maillog about simscan scanning the mail. also I 
don't see anything in the mail headers that shows that it was scanned 
is there something wrong.. also I don't see the spamd folder in the 
supervise directory doesn't it need to be there.
Yes it does. I'm assuming this was a new installation. We'll need some 
more info, like OS, version, what steps you followed for installation, 
etc. Usually what happens there is you failed some dependencies for 
spamassassin so it was not installed.





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Simscan doesn't seem to be working

[John Carlson]

And for the final.. I have fixed it.. I had to remove the spamassassin 
and clamav rpms and then re-install them.. and now they work fine..


thanks



Hello I still haven't had a reply to this yet... but I'm not sure how to
reinstall the spamassassin, the only thing I have running pertaining to
spam is supervise spamd and I'm not sure how that is.. also I don't have
the /var/qmail/supervise/spamd/  directories and that is where the run
script is supposed to be.. so how do I get them back.. ?

thanks in advance.. :)


Thanks for the reply,

I am running the newest version of qmailtoaster on a Fedora Core 6 box,
and I didn't see any kind of errors when I did the install. I used the
information from the qmailtoaster website to complete the installation.
the only thing I didn't do in the installation is I didn't setup the
djbdns and I didn't add any domain keys. and when I do a qmailctl stat
it doesn't show spamd in there. so I am assuming I need to re set that up.

Jake Vickers wrote:

John Carlson wrote:
I have noticed that the spamd service is not running, also I don't 
see anything in the maillog about simscan scanning the mail. also I 
don't see anything in the mail headers that shows that it was scanned 
is there something wrong.. also I don't see the spamd folder in the 
supervise directory doesn't it need to be there.
Yes it does. I'm assuming this was a new installation. We'll need some 
more info, like OS, version, what steps you followed for installation, 
etc. Usually what happens there is you failed some dependencies for 
spamassassin so it was not installed.






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Simscan doesn't seem to be working

[John Carlson]

I have noticed that the spamd service is not running, also I don't see 
anything in the maillog about simscan scanning the mail. also I don't 
see anything in the mail headers that shows that it was scanned is there 
something wrong.. also I don't see the spamd folder in the supervise 
directory doesn't it need to be there.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Simscan doesn't seem to be working

[Jake Vickers]

John Carlson wrote:
I have noticed that the spamd service is not running, also I don't see 
anything in the maillog about simscan scanning the mail. also I don't 
see anything in the mail headers that shows that it was scanned is 
there something wrong.. also I don't see the spamd folder in the 
supervise directory doesn't it need to be there.
Yes it does. I'm assuming this was a new installation. We'll need some 
more info, like OS, version, what steps you followed for installation, 
etc. Usually what happens there is you failed some dependencies for 
spamassassin so it was not installed.




smime.p7s
Description: S/MIME Cryptographic Signature

Re: [qmailtoaster] Simscan doesn't seem to be working

[John Carlson]

Thanks for the reply,

I am running the newest version of qmailtoaster on a Fedora Core 6 box, 
and I didn't see any kind of errors when I did the install. I used the 
information from the qmailtoaster website to complete the installation. 
the only thing I didn't do in the installation is I didn't setup the 
djbdns and I didn't add any domain keys. and when I do a qmailctl stat 
it doesn't show spamd in there. so I am assuming I need to re set that up.


Jake Vickers wrote:

John Carlson wrote:
I have noticed that the spamd service is not running, also I don't 
see anything in the maillog about simscan scanning the mail. also I 
don't see anything in the mail headers that shows that it was scanned 
is there something wrong.. also I don't see the spamd folder in the 
supervise directory doesn't it need to be there.
Yes it does. I'm assuming this was a new installation. We'll need some 
more info, like OS, version, what steps you followed for installation, 
etc. Usually what happens there is you failed some dependencies for 
spamassassin so it was not installed.




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan and lost emails

[Philip]

I ve been checking with the simscan mailing list and debugging a few things

simscan is definatly the problem

I did a few tests :

simscan 1.3.1 latest toatse version

export QMAILQUEUE=/var/qmail/bin/simscan; export SIMSCAN_DEBUG=2; export 
NOPOFCHECK=1; /var/qmail/bin/qmail-inject [EMAIL PROTECTED]  test2.txt
qmail-inject: fatal: qq crashed (#4.3.0)

Nice? :) ... could any1 confirm he has the same problem ? test2.txt is 
just a stupid text file



simscan 1.2 compiled with same options as qt (+ patch for clamav db path)

export QMAILQUEUE=/home/rainbow/simscan-1.2/simscan; export SIMSCAN_DEBUG=2; 
export NOPOFCHECK=1; /var/qmail/bin/qmail-inject [EMAIL PROTECTED]  test2.txt

pasting what is important ..
simscan: cdb looking up
simscan: cdb for  found 
clam=yes,spam=yes,spam_hits=6.5,attach=.mp3:.src:.bat:.pif
simscan: pelookup clam = yes
simscan: pelookup spam = yes
simscan: pelookup spam_hits = 6.5
simscan: Per Domain Hits set to : 6.50
simscan: pelookup attach = .mp3:.src:.bat:.pif
simscan: attachment flag attach = .mp3:.src:.bat:.pif
simscan: .mp3 is attachment number 0
simscan: .src is attachment number 1
simscan: .bat is attachment number 2
simscan: .pif is attachment number 3
simscan: starting: work dir: /var/qmail/simscan/1174399705.933190.21786
...
simscan: cdb looking up version attach
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: fatal error executing clamdscan
simscan: exit error code: 71
qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)



That doenst make much sense *71*: Can't allocate memory (malloc)

the softlimit -m 1200 is enough


Any clues? :)





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan connect error 2

[Manny]

I received a lot of buch of simscan connect error 2 in my smtp logs after i 
upgrade my toaster to the latest version any Ideas regarding the cause ? will  
it have a bad effect to my mail server ?

Regards,
Manny

[qmailtoaster] simscan: connect error 2

[manny mailing list]

I received a lot of buch of simscan connect error 2 in my smtp logs after i 
upgrade my toaster to the latest version any Ideas regarding the cause ? will  
it have a bad effect to my mail server ?

Regards,
Manny

[qmailtoaster] simscan: connect error 2

[Fernando Azevedo]

Hi list,
 
I keep getting a simscan: connect error 2 in my log files... aparently the 
e-mail still gets processed and delivered (if not filtered) but I do not 
understand what this means.
 
I've googled for info but without any success.
 
Can anyone explain or point the direction I should follow?
 
 
Thank you all in advance,
Fernando
 
 

Re: [qmailtoaster] simscan: connect error 2

[Eric \Shubes\]

Fernando Azevedo wrote:
 Hi list,
  
 I keep getting a simscan: connect error 2 in my log files... aparently
 the e-mail still gets processed and delivered (if not filtered) but I do
 not understand what this means.
  
 I've googled for info but without any success.
  
 Can anyone explain or point the direction I should follow?
  
  
 Thank you all in advance,
 Fernando
  
  
http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg10518.html

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Warren (mailing lists)]

Sorry, I have been out of the office for a few days.

There is not much to post.

/var/log/qmail/smtp/current gets this:
@400045acd89036e2684c simscan: connect error 2

Running it gives this:
[EMAIL PROTECTED] simscan]# /var/qmail/bin/simscan
Segmentation fault

Are there any other logs that I am missing?

W

Erik Espinoza wrote:

Could you paste the log output. I've not noticed any problems.

Erik

On 1/12/07, Warren (mailing lists) [EMAIL PROTECTED] wrote:

I noticed that simscan was not able to be called in the logs.  When I
try to run it directly (./simscan in the bin directory) it gives a 
segfault.


Any ideas?

W

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Eric \Shubes\]

The connect error 2 message is simply a warning regarding the new P0F
checking in simscan. The toaster does not (yet) implement a P0F daemon, so
this feature is turned off. Add ,NOP0FCHECK=1 to your
/etc/tcprules.d/tcp.smtp file (not needed on the 127. line) and the message
will go away. (Don't forget to qmailctl cdb after making your change)

Warren (mailing lists) wrote:
 Sorry, I have been out of the office for a few days.
 
 There is not much to post.
 
 /var/log/qmail/smtp/current gets this:
 @400045acd89036e2684c simscan: connect error 2
 
 Running it gives this:
 [EMAIL PROTECTED] simscan]# /var/qmail/bin/simscan
 Segmentation fault
 
 Are there any other logs that I am missing?
 
 W
 
 Erik Espinoza wrote:
 Could you paste the log output. I've not noticed any problems.

 Erik

 On 1/12/07, Warren (mailing lists) [EMAIL PROTECTED] wrote:
 I noticed that simscan was not able to be called in the logs.  When I
 try to run it directly (./simscan in the bin directory) it gives a
 segfault.

 Any ideas?

 W



-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Warren (mailing lists)]

I noticed that simscan was not able to be called in the logs.  When I 
try to run it directly (./simscan in the bin directory) it gives a segfault.


Any ideas?

W

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Philip Nix Guru]

Hello Waren
I noticed the same thing the other day with simscan v1.3.1
try simscan -v ... it wont segfault .. it doesnt for me :)

Warren (mailing lists) wrote:
I noticed that simscan was not able to be called in the logs.  When I 
try to run it directly (./simscan in the bin directory) it gives a 
segfault.


Any ideas?

W

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Erik Espinoza]

Could you paste the log output. I've not noticed any problems.

Erik

On 1/12/07, Warren (mailing lists) [EMAIL PROTECTED] wrote:

I noticed that simscan was not able to be called in the logs.  When I
try to run it directly (./simscan in the bin directory) it gives a segfault.

Any ideas?

W

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] simscan (simscan-toaster-1.3.1-1.3.3) segfaults

[Eric \Shubes\]

 I noticed that simscan was not able to be called in the logs.  When I try to 
 run it directly (./simscan in the bin directory) it gives a segfault.
 
 Any ideas?
 
 W 

Warren,

Log sample?

P.S. When posting to the list, please do *not* reply to a previous message
and change the subject. This is known as hijacking a thread, and messes up
the thread view for those who use that feature. Please start a new message,
and add qmailtoaster-list@qmailtoaster.com to your address book for your
addressing convenience. Thank you for your cooperation. ;)
-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]