[xmail] Both xmailservers crashed this morning

2004-02-05 Thread Sönke Ruempler
hi,

this morning at 7:11am the main and at 7:59am the fallback server crashed.
no log entry, nothing ... XMail 1.17 at Linux. Any
idea?!


--

Soenke

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] AW: Both xmailservers crashed this morning

2004-02-05 Thread Harald Schneider
Do you use Kernel > 2.4.1?
If yes, put=20
export LD_ASSUME_KERNEL=3D2.4.1
into your xmail startup scripts.

--Harald

> -Urspr=FCngliche Nachricht-
> Von: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Im Auftrag von S=F6nke Ruempler
> Gesendet: Donnerstag, 5. Februar 2004 09:48
> An: [EMAIL PROTECTED]
> Betreff: [xmail] Both xmailservers crashed this morning
>=20
>=20
> hi,
>=20
> this morning at 7:11am the main and at 7:59am the fallback=20
> server crashed. no log entry, nothing ... XMail 1.17 at=20
> Linux. Any idea?!
>=20
>=20
> --
>=20
> Soenke
>=20
> -
> To unsubscribe from this list: send the line "unsubscribe=20
> xmail" in the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a=20
> message to [EMAIL PROTECTED]
>=20

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] RDNS problem

2004-02-05 Thread Sergio Casagrande
I add some other information:
- w2k sp 4
- xmail 1.17

I searched into dnscache directory and I founded a domain.it file within =
the correct list with priority of domain mail servers (the same of hand =
nslookup).
Another strange thing is:
I seted spammers.tab in this way (from documentation):
"address""netmask"
It doesn't work. I changed it to:
addressnetmask
and now it works.

May be a my server problem with text files?

Thank you again.
Ciao.
Sergio C.

-Messaggio originale-
Da: Sergio Casagrande=20
Inviato: mercoled=EC 4 febbraio 2004 12.08
A: Xmailserver (E-mail)
Oggetto: RDNS problem


Hi all,
I have a problem with RDNS check.
For spam problems (do you know about it? ;) I seted SMTP-RDNSCheck =
parameter to 1.
Now, there is a domain that has more MX record with priority not equal.
If the e-mail comes from server with higher priority all goes well, but =
if the e-mail comes from a server with lower priority I have this error =
in xmail log:
SNDRIP=3DERDNS

Is it possible?
Why this one happen?
Thank you.
Bye.
Sergio C
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP HEADER/BODY MODIFIFICATIONS?

2004-02-05 Thread Hagen Mayer
Yes, a filter would be the right way.

Examples can be found here:
http://www.hmdc.de/technical/xmail-filters.html
Especially the perl function splitfile() is of interest.

Modifying headers and optionally body text is one of the next filters
I already planned to do (Subject rewriting because of some
RE:RE:RE:RE: stuff, eg.)

Attention: I am moving my domain to another provider this week. hmdc.de is a
temporary domain mirroring my "official" site for perhaps a limited time.
My "official" pages reside at
http://www.hagen-mayer.de/technical/xmail-filters.html. At the moment,
 they are still working. After migration was completed, they will be
fully back again.

Cheers,
Hagen

=== Original Message ===
From: "Rob Arends" <[EMAIL PROTECTED]>
Sent: Thursday, February 5, 2004 12:27:35 AM
To: <[EMAIL PROTECTED]>
CC: 
Attachments: 
Subject: [xmail] Re: SMTP HEADER/BODY MODIFIFICATIONS?

This would be a filter, would it not?

Rob :-) 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of D. Duccini
> Sent: Thursday, February 05, 2004 10:18 AM
> To: [EMAIL PROTECTED]
> Subject: [xmail] SMTP HEADER/BODY MODIFIFICATIONS?
> 
> 
> Is it possible to add a process in on SMTP transactions?
> 
> From automatic builds of 'white-lists', to the ability to tack on an
> additional header or the ability to tack on an inline webbug, 
> i'd like to
> have the option of doing a little processing on the message 
> prior to its
> delivery
> 
> 
> --
> ---
> [EMAIL PROTECTED]BackPack Software, Inc.
> www.backpack.com
> +1 651.645.7550 voice   "Life is an Adventure.
> +1 651.645.9798 faxDon't forget your BackPack!"   
> --
> ---
> 
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
> 
> 

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: fighting against spam...

2004-02-05 Thread Sasa Stupar
Michael Schwarz pravi:

>Hello all
>
>Something for discussion:
>
>In my opinion would fighting against spam be so easy
>if we have this consens in the whole internet-'family':
>
>- each smtp-server accepts mails only:
>
>  from servers with fixed IPs and DNS is set correct 
> (not in the range of dailups-IPs)
>
>  and for his hosted domains
>
>- a user can sent mail only: 
>
>   over his ISP or freemailservice
>
>  his own server with fixed IP (see above)
>
>  The mailammount should be limited, 100/hour or so. 
>  Each ISP MUST provide mailservice for his customers!
>
>If each of these points are accepted, a server from which comes
>spam is easy to blacklist(for all).
>
>What do you think above this?
>
>Just my 2c
>
>Michael
>
>  
>
When you say not to accept mail from server with static IP in the range 
of dialup-IPs, I don't agree. I am myself on that kind of network and I 
have a static IP and yet there are some servers which denies my mail. 
Wrong thinking. Internet is free and so it should stay free. About spam, 
people should be more carefull where they enter their email adresses and 
also list administrators could make list more secure (at least to 
prevent listing the list to see who is subscribed). This and only this 
is the problem of spam.
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Windows AV with sophos and XAV

2004-02-05 Thread Alex Young
Hi guys,
I have been trying to get Sophos Anti virus running with Xmail on a
windows 2003 server. I have the DOLIST.NET XAV Antivirus filter but I simply
can not get it to work. I was hoping someone out there may have had some
experience with sophos, XAV or both.


Here are my setting for XAV:

[XMail AntiVirus Filter]
; ## Debug mode to write out parameters while trouble occurs.
XAVDebug=1
XAVMessage=Your message was rejected by DOLIST.NET XAV Antivirus Filter.
Check your computer.

[Multipart Decoder]
; -- Mimeqp
;DecoderPath=D:\XMail\xmail\MailRoot\filters\xav\mpack\mimeqp.exe
; -- Munpack
DecoderPath=D:\XMail\xmail\MailRoot\filters\xav\mpack\munpack.exe
DecoderCommand=
DecoderReturn=1

[AVG AntiVirus]
; ## AntivirusReturn is the code returned by the AV Software when a virus is
detected.
AntivirusPath=C:\Progra~1\Sophos~1\SAV32CLI.EXE
AntivirusCommand= -ss -archive
AntivirusReturn=3


This is what is in the XAV log file:

[2004-02-05 14:51:18] XAVMessage=[Your message was rejected by DOLIST.NET
XAV Antivirus Filter. Check your computer.]
[2004-02-05 14:51:18] AntivirusPath=[C:\Progra~1\Sophos~1\SAV32CLI.EXE]
[2004-02-05 14:51:18] AntivirusCommand=[-ss -archive]
[2004-02-05 14:51:18] AntivirusReturn=[3]
[2004-02-05 14:51:18]
DecoderPath=[D:\XMail\xmail\MailRoot\filters\xav\mpack\munpack.exe]
[2004-02-05 14:51:18] DecoderCommand=[]
[2004-02-05 14:51:18] DecoderReturn=[1]
[2004-02-05 14:51:18] Creating temp folder
D:\XMail\xmail\MailRoot\filters\xav\tmp-1075992667937-3288-zen


The Sophos return codes:

0  If no errors are encountered and no viruses are found
1  If the user interrupts the execution by pressing ESC
2  If some error preventing further execution is discovered, or if
   compressed files have been found when using the -WC command line 
   qualifier
3  If viruses or virus fragments are discovered

If I set the return code to 1 in the XAV.ini file then all email is blocked.
Somehow there is a problem with xav using sophos. I know sophos does work
with the switches I have added as I have tested it through the command line.

Does anyone have any idea where I have gone wrong? Is it possible for me to
turn more logging on through XAV so it catches all the comunications between
itself and Sophos?

Thanks for any help,
Alex

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Liron Newman
What I did to debug these issues was to use an intermediate batchfile 
that looked something like this:

echo  %date% %time% >>c:\xav\av.log
shift
echo Params: %0 %1 %2 %3 %4 %5 %6 %7 %8 %9>>c:\xav\av.log
dir %0>>c:\xav\av.log
"c:\Program Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9
echo FPCMD returned %errorlevel%>>c:\xav\av.log
exit %errorlevel%


And I just called it instead of the AV executable itself.

Alex Young wrote:

>Does anyone have any idea where I have gone wrong? Is it possible for me to
>turn more logging on through XAV so it catches all the comunications between
>itself and Sophos?
>
>  
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: fighting against spam...

2004-02-05 Thread Shiloh Jennings
> [snip]About spam,
> people should be more carefull where they enter their email adresses and
> also list administrators could make list more secure (at least to
> prevent listing the list to see who is subscribed). This and only this
> is the problem of spam.


I strongly disagree here.  Spammers are actively scanning every domain for
valid email addresses.  Even if you have an email address that nobody knows
about, it will eventually get bombed with spam.  Just watch the logs closely
on any busy email server, and you will see one dictionary attack after the
next.  Blaming spam on the end user receiving it is simply wrong.  I agree
some people unwisely bring extra spam on themselves by posting all over the
place using their email address, but spammers will find their email address
even if they do not do that.

There is technology already available to us to filter much of the spam.  To
filter the majority fo all spam, you need to use a mixture of methods.  One
very good idea is to block every known open relay, since spammers still rely
heavily on those open relays.  The ORDB RBL is a list of all known open
relays, and it definitely blocks a lot of spam.  SpamAssassin also helps
noticably.  With SpamAssassin, you really need to train the engine on ham
and spam periodically to make sure it catches a high amount.  Spammers will
constantly change their patterns to trick SpamAssassin, so manually teaching
it the spam it misses is a critical function.  And of course, you should
require all of your own users to use SMTP AUTH to relay email.  This way all
email relayed through your box will contain an X-Auth header, so you can
quickly track down the user if one of your users is sending spam.

To decrease a large amount of incoming spam, we need a solution to stop from
address forging.  The proposals like RMX would definitely help reduce a
significant amount of spam.  Any solution that noticably cuts down on
address forging will also noticably cut down on spam, since most spam is
sent with forged addresses.

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Dale Qualls
Ahhh, I didn't have the EXPORT part in mine, but I'm not even sure it's in =
the right place.

One of my RH8 boxes locks up every couple of days, I'm only assuming that =
it's this kernel error (the other one's been running flawlessly for a =
while now).

Can I put it right above the XMAIL_ROOT=3Dblahblahblah or should it be in =
the start_mail header?  Specifics would be a huge help.


I checked the forum and found this:  It asks where someone has the LD =
statement, but doesn't confirm where it should be

<<<
What is the output of
uname -a

Replace your=20
export LD_ASSUME_KERNEL=3D2.4.1
by=20
export LD_ASSUME_KERNEL=3D"2.4.1"

Where is your export statement located? In your XMail startup script ?
Sure that THIS script is executed?
<<<

Thanks in advance gang!


>>> [EMAIL PROTECTED] 02/05/04 02:54AM >>>
Do you use Kernel > 2.4.1?
If yes, put=3D20
export LD_ASSUME_KERNEL=3D3D2.4.1
into your xmail startup scripts.

--Harald

> -Urspr=3DFCngliche Nachricht-
> Von: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Im Auftrag von S=3DF6nke Ruempler
> Gesendet: Donnerstag, 5. Februar 2004 09:48
> An: [EMAIL PROTECTED]
> Betreff: [xmail] Both xmailservers crashed this morning
>=3D20
>=3D20
> hi,
>=3D20
> this morning at 7:11am the main and at 7:59am the fallback=3D20
> server crashed. no log entry, nothing ... XMail 1.17 at=3D20
> Linux. Any idea?!
>=3D20
>=3D20
> --
>=3D20
> Soenke
>=3D20
> -
> To unsubscribe from this list: send the line "unsubscribe=3D20
> xmail" in the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a=3D20
> message to [EMAIL PROTECTED]
>=3D20

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Alex Young
Hi,
I guess I need to use this like batchfile.bat mesagage.file at the
command prompt?

D:\XMail\xmail\MailRoot\filters\xav>echo  05/02/2004 15:20:16.98 
shift
echo Params: av.bat v.msg dir av.bat
"C:\Progra~1\Sophos~1\SAV32CLI.EXE"
 av.bat v.msg echo SAV32CLI returned  exit 0 1>>D:\xav.txt
0>>D:\xav.txt
The process cannot access the file because it is being used by another
process.

I changed the batch file to look like this:
echo  %date% %time% >>D:\xav.txt shift echo Params: %0 %1 %2 %3 %4
%5 %6 %7 %8 %9>>D:\xav.txt dir %0>>D:\xav.txt
"C:\Progra~1\Sophos~1\SAV32CLI.EXE" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo
SAV32CLI returned %errorlevel%>>D:\xav.txt exit %errorlevel%

It looks like it creates the xav.txt file but can not write into it because
there is now a file called xav.txt under the root of D:\.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Liron Newman
Sent: 05 February 2004 15:08
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Windows AV with sophos and XAV

What I did to debug these issues was to use an intermediate batchfile that
looked something like this:


echo  %date% %time% >>c:\xav\av.log shift echo Params: %0 %1 %2 %3
%4 %5 %6 %7 %8 %9>>c:\xav\av.log dir %0>>c:\xav\av.log "c:\Program
Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo FPCMD
returned %errorlevel%>>c:\xav\av.log exit %errorlevel%



And I just called it instead of the AV executable itself.

Alex Young wrote:

>Does anyone have any idea where I have gone wrong? Is it possible for 
>me to turn more logging on through XAV so it catches all the 
>comunications between itself and Sophos?
>
>  
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body
of a message to [EMAIL PROTECTED] For general help: send the line
"help" in the body of a message to [EMAIL PROTECTED]



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Liron Newman
No, what I did was make XAV call this file instead of the AV program 
(SAV32CLI.EXE in your case) and then sent myself a virus..
Like this, in xav.ini:
AntivirusPath=c:\xav\avlog.bat
Alex Young wrote:

>Hi,
>   I guess I need to use this like batchfile.bat mesagage.file at the
>command prompt?
>
>D:\XMail\xmail\MailRoot\filters\xav>echo  05/02/2004 15:20:16.98 
>shift
>echo Params: av.bat v.msg dir av.bat
>"C:\Progra~1\Sophos~1\SAV32CLI.EXE"
> av.bat v.msg echo SAV32CLI returned  exit 0 1>>D:\xav.txt
>0>>D:\xav.txt
>The process cannot access the file because it is being used by another
>process.
>
>I changed the batch file to look like this:
>echo  %date% %time% >>D:\xav.txt shift echo Params: %0 %1 %2 %3 %4
>%5 %6 %7 %8 %9>>D:\xav.txt dir %0>>D:\xav.txt
>"C:\Progra~1\Sophos~1\SAV32CLI.EXE" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo
>SAV32CLI returned %errorlevel%>>D:\xav.txt exit %errorlevel%
>
>It looks like it creates the xav.txt file but can not write into it because
>there is now a file called xav.txt under the root of D:\.
>
>
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
>Behalf Of Liron Newman
>Sent: 05 February 2004 15:08
>To: [EMAIL PROTECTED]
>Subject: [xmail] Re: Windows AV with sophos and XAV
>
>What I did to debug these issues was to use an intermediate batchfile that
>looked something like this:
>
>
>echo  %date% %time% >>c:\xav\av.log shift echo Params: %0 %1 %2 %3
>%4 %5 %6 %7 %8 %9>>c:\xav\av.log dir %0>>c:\xav\av.log "c:\Program
>Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo FPCMD
>returned %errorlevel%>>c:\xav\av.log exit %errorlevel%
>
>
>
>And I just called it instead of the AV executable itself.
>
>Alex Young wrote:
>
>  
>
>>Does anyone have any idea where I have gone wrong? Is it possible for 
>>me to turn more logging on through XAV so it catches all the 
>>comunications between itself and Sophos?
>>
>> 
>>
>>
>>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the body
>of a message to [EMAIL PROTECTED] For general help: send the line
>"help" in the body of a message to [EMAIL PROTECTED]
>
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
>  
>


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Alex Young
Thanks,
its almost working now. For some reason is creates the xav.txt file
but doesn't write anything into it. Any ideas?

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Liron Newman
Sent: 05 February 2004 15:40
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Windows AV with sophos and XAV

No, what I did was make XAV call this file instead of the AV program
(SAV32CLI.EXE in your case) and then sent myself a virus..
Like this, in xav.ini:
AntivirusPath=c:\xav\avlog.bat
Alex Young wrote:

>Hi,
>   I guess I need to use this like batchfile.bat mesagage.file at the 
>command prompt?
>
>D:\XMail\xmail\MailRoot\filters\xav>echo  05/02/2004 15:20:16.98 
> shift
>echo Params: av.bat v.msg dir av.bat
>"C:\Progra~1\Sophos~1\SAV32CLI.EXE"
> av.bat v.msg echo SAV32CLI returned  exit 0 1>>D:\xav.txt
>0>>D:\xav.txt
>The process cannot access the file because it is being used by another 
>process.
>
>I changed the batch file to look like this:
>echo  %date% %time% >>D:\xav.txt shift echo Params: %0 %1 %2 %3 
>%4
>%5 %6 %7 %8 %9>>D:\xav.txt dir %0>>D:\xav.txt 
>"C:\Progra~1\Sophos~1\SAV32CLI.EXE" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo 
>SAV32CLI returned %errorlevel%>>D:\xav.txt exit %errorlevel%
>
>It looks like it creates the xav.txt file but can not write into it 
>because there is now a file called xav.txt under the root of D:\.
>
>
>
>-Original Message-
>From: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] On Behalf Of Liron Newman
>Sent: 05 February 2004 15:08
>To: [EMAIL PROTECTED]
>Subject: [xmail] Re: Windows AV with sophos and XAV
>
>What I did to debug these issues was to use an intermediate batchfile 
>that looked something like this:
>---
>-
>
>echo  %date% %time% >>c:\xav\av.log shift echo Params: %0 %1 %2 
>%3
>%4 %5 %6 %7 %8 %9>>c:\xav\av.log dir %0>>c:\xav\av.log "c:\Program 
>Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo FPCMD 
>returned %errorlevel%>>c:\xav\av.log exit %errorlevel%
>---
>-
>
>
>And I just called it instead of the AV executable itself.
>
>Alex Young wrote:
>
>  
>
>>Does anyone have any idea where I have gone wrong? Is it possible for 
>>me to turn more logging on through XAV so it catches all the 
>>comunications between itself and Sophos?
>>
>> 
>>
>>
>>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>body of a message to [EMAIL PROTECTED] For general help: send the 
>line "help" in the body of a message to [EMAIL PROTECTED]
>
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>body of a message to [EMAIL PROTECTED] For general help: send the 
>line "help" in the body of a message to [EMAIL PROTECTED]
>
>
>  
>


-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body
of a message to [EMAIL PROTECTED] For general help: send the line
"help" in the body of a message to [EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Liron Newman
Are you sure xav.txt isn't open with notepad or in Windows Explorer or 
anything like that?
Alex Young wrote:

>Thanks,
>   its almost working now. For some reason is creates the xav.txt file
>but doesn't write anything into it. Any ideas?
>
> 
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
>Behalf Of Liron Newman
>Sent: 05 February 2004 15:40
>To: [EMAIL PROTECTED]
>Subject: [xmail] Re: Windows AV with sophos and XAV
>
>No, what I did was make XAV call this file instead of the AV program
>(SAV32CLI.EXE in your case) and then sent myself a virus..
>Like this, in xav.ini:
>AntivirusPath=c:\xav\avlog.bat
>Alex Young wrote:
>
>  
>
>>Hi,
>>  I guess I need to use this like batchfile.bat mesagage.file at the 
>>command prompt?
>>
>>D:\XMail\xmail\MailRoot\filters\xav>echo  05/02/2004 15:20:16.98 
>> shift
>>echo Params: av.bat v.msg dir av.bat
>>"C:\Progra~1\Sophos~1\SAV32CLI.EXE"
>>av.bat v.msg echo SAV32CLI returned  exit 0 1>>D:\xav.txt
>>0>>D:\xav.txt
>>The process cannot access the file because it is being used by another 
>>process.
>>
>>I changed the batch file to look like this:
>>echo  %date% %time% >>D:\xav.txt shift echo Params: %0 %1 %2 %3 
>>%4
>>%5 %6 %7 %8 %9>>D:\xav.txt dir %0>>D:\xav.txt 
>>"C:\Progra~1\Sophos~1\SAV32CLI.EXE" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo 
>>SAV32CLI returned %errorlevel%>>D:\xav.txt exit %errorlevel%
>>
>>It looks like it creates the xav.txt file but can not write into it 
>>because there is now a file called xav.txt under the root of D:\.
>>
>>
>>
>>-Original Message-
>>From: [EMAIL PROTECTED] 
>>[mailto:[EMAIL PROTECTED] On Behalf Of Liron Newman
>>Sent: 05 February 2004 15:08
>>To: [EMAIL PROTECTED]
>>Subject: [xmail] Re: Windows AV with sophos and XAV
>>
>>What I did to debug these issues was to use an intermediate batchfile 
>>that looked something like this:
>>---
>>-
>>
>>echo  %date% %time% >>c:\xav\av.log shift echo Params: %0 %1 %2 
>>%3
>>%4 %5 %6 %7 %8 %9>>c:\xav\av.log dir %0>>c:\xav\av.log "c:\Program 
>>Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo FPCMD 
>>returned %errorlevel%>>c:\xav\av.log exit %errorlevel%
>>---
>>-
>>
>>
>>And I just called it instead of the AV executable itself.
>>
>>Alex Young wrote:
>>
>> 
>>
>>
>>
>>>Does anyone have any idea where I have gone wrong? Is it possible for 
>>>me to turn more logging on through XAV so it catches all the 
>>>comunications between itself and Sophos?
>>>
>>>
>>>
>>>   
>>>
>>>  
>>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>>body of a message to [EMAIL PROTECTED] For general help: send the 
>>line "help" in the body of a message to [EMAIL PROTECTED]
>>
>>
>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>>body of a message to [EMAIL PROTECTED] For general help: send the 
>>line "help" in the body of a message to [EMAIL PROTECTED]
>>
>>
>> 
>>
>>
>>
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the body
>of a message to [EMAIL PROTECTED] For general help: send the line
>"help" in the body of a message to [EMAIL PROTECTED]
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
>  
>


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Windows AV with sophos and XAV

2004-02-05 Thread Alex Young
Yup. I even deleted the file to see what happens. It creates the file but
doesn't write anything to it.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Liron Newman
Sent: 05 February 2004 15:53
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Windows AV with sophos and XAV

Are you sure xav.txt isn't open with notepad or in Windows Explorer or
anything like that?
Alex Young wrote:

>Thanks,
>   its almost working now. For some reason is creates the xav.txt file 
>but doesn't write anything into it. Any ideas?
>
> 
>
>-Original Message-
>From: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] On Behalf Of Liron Newman
>Sent: 05 February 2004 15:40
>To: [EMAIL PROTECTED]
>Subject: [xmail] Re: Windows AV with sophos and XAV
>
>No, what I did was make XAV call this file instead of the AV program 
>(SAV32CLI.EXE in your case) and then sent myself a virus..
>Like this, in xav.ini:
>AntivirusPath=c:\xav\avlog.bat
>Alex Young wrote:
>
>  
>
>>Hi,
>>  I guess I need to use this like batchfile.bat mesagage.file at the 
>>command prompt?
>>
>>D:\XMail\xmail\MailRoot\filters\xav>echo  05/02/2004 15:20:16.98
>> shift
>>echo Params: av.bat v.msg dir av.bat
>>"C:\Progra~1\Sophos~1\SAV32CLI.EXE"
>>av.bat v.msg echo SAV32CLI returned  exit 0 1>>D:\xav.txt
>>0>>D:\xav.txt
>>The process cannot access the file because it is being used by another 
>>process.
>>
>>I changed the batch file to look like this:
>>echo  %date% %time% >>D:\xav.txt shift echo Params: %0 %1 %2 
>>%3
>>%4
>>%5 %6 %7 %8 %9>>D:\xav.txt dir %0>>D:\xav.txt 
>>"C:\Progra~1\Sophos~1\SAV32CLI.EXE" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo 
>>SAV32CLI returned %errorlevel%>>D:\xav.txt exit %errorlevel%
>>
>>It looks like it creates the xav.txt file but can not write into it 
>>because there is now a file called xav.txt under the root of D:\.
>>
>>
>>
>>-Original Message-
>>From: [EMAIL PROTECTED]
>>[mailto:[EMAIL PROTECTED] On Behalf Of Liron Newman
>>Sent: 05 February 2004 15:08
>>To: [EMAIL PROTECTED]
>>Subject: [xmail] Re: Windows AV with sophos and XAV
>>
>>What I did to debug these issues was to use an intermediate batchfile 
>>that looked something like this:
>>--
>>-
>>-
>>
>>echo  %date% %time% >>c:\xav\av.log shift echo Params: %0 %1 
>>%2
>>%3
>>%4 %5 %6 %7 %8 %9>>c:\xav\av.log dir %0>>c:\xav\av.log "c:\Program 
>>Files\FSI\F-Prot\fpcmd.exe" %0 %1 %2 %3 %4 %5 %6 %7 %8 %9 echo FPCMD 
>>returned %errorlevel%>>c:\xav\av.log exit %errorlevel%
>>--
>>-
>>-
>>
>>
>>And I just called it instead of the AV executable itself.
>>
>>Alex Young wrote:
>>
>> 
>>
>>
>>
>>>Does anyone have any idea where I have gone wrong? Is it possible for 
>>>me to turn more logging on through XAV so it catches all the 
>>>comunications between itself and Sophos?
>>>
>>>
>>>
>>>   
>>>
>>>  
>>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in 
>>the body of a message to [EMAIL PROTECTED] For general help: 
>>send the line "help" in the body of a message to 
>>[EMAIL PROTECTED]
>>
>>
>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in 
>>the body of a message to [EMAIL PROTECTED] For general help: 
>>send the line "help" in the body of a message to 
>>[EMAIL PROTECTED]
>>
>>
>> 
>>
>>
>>
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>body of a message to [EMAIL PROTECTED] For general help: send the 
>line "help" in the body of a message to [EMAIL PROTECTED]
>
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in the 
>body of a message to [EMAIL PROTECTED] For general help: send the 
>line "help" in the body of a message to [EMAIL PROTECTED]
>
>
>  
>


-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body
of a message to [EMAIL PROTECTED] For general help: send the line
"help" in the body of a message to [EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: fighting against spam...

2004-02-05 Thread Gustavo Galvan
El Jue 05 Feb 2004 10:47, Sasa Stupar escribi=F3:
> Michael Schwarz pravi:
> >Hello all
> >
> >Something for discussion:
> >
> >In my opinion would fighting against spam be so easy
> >if we have this consens in the whole internet-'family':
> >
> >- each smtp-server accepts mails only:
> >
> >  from servers with fixed IPs and DNS is set correct
> > (not in the range of dailups-IPs)
> >
> >  and for his hosted domains
> >
> >- a user can sent mail only:
> >
> >=09over his ISP or freemailservice
> >
> >  his own server with fixed IP (see above)
> >
> >  The mailammount should be limited, 100/hour or so.
> >  Each ISP MUST provide mailservice for his customers!
> >
> >If each of these points are accepted, a server from which comes
> >spam is easy to blacklist(for all).
> >
> >What do you think above this?
> >
> >Just my 2c
> >
> >Michael
>
> When you say not to accept mail from server with static IP in the range
> of dialup-IPs, I don't agree. I am myself on that kind of network and I
> have a static IP and yet there are some servers which denies my mail.
> Wrong thinking. Internet is free and so it should stay free. About spam=
,
> people should be more carefull where they enter their email adresses an=
d
> also list administrators could make list more secure (at least to
> prevent listing the list to see who is subscribed). This and only this
> is the problem of spam.

I agree with you with accepting mail from any static IP address (dialup, =
dsl, etc.), but with 2 modifications:
1) you must use a valid domain in your server
2) your server=B4s IP address must be listed in DNS of your valid domain
if you are not a "bad boy" this is ok...and still free

I don=B4t agree with you where you say:
- "About spam, people should be more carefull where they enter their emai=
l adresses and
- also list administrators could make list more secure (at least to
- prevent listing the list to see who is subscribed). This and only this
- is the problem of spam. "

Spamers exists, spammers are the problem.

Gustavo

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Filters Not Triggering

2004-02-05 Thread Toby Reiter
Hey all,
I have Xmail 1.16 on Linux with SpamAssassin and ClamAntivirus 
running with the standard filters for these programs (i.e. Lindeman's 
AV filter and Don Drake's SA filter).

In general, these filters work great, but recently we've been 
noticing a few email messages that have been not filtered, I'll give 
examples:

a) Messages that are sent within our local network or that are being 
SMTP Relayed through a server on our local network are being missed 
by the AV filter or by both filters. Sometimes these messages will be 
SA filtered without being AV filtered, but they are never just AV 
filtered.

b) Messages with encoding errors (usually b/c they have poorly 
attached virus attachments) and which are being SA filtered but not 
AV filtered

c) In a few limited cases, a well-encoded message from outside the 
network is SA filtered but not AV filtered.

Does anyone have any ideas about this? Since the filters do work 75 - 
85% percent of the time (or more) I don't really feel like going into 
debug mode is necessarily going to help: I think this is more of a 
"Why isn't this working in theory?" question than a syntax error in 
one of my filter files.

Any feedback would be greatly appreciated.

Thanks,
Toby

-- 
Toby Reiter  mailto:[EMAIL PROTECTED]
Breezing Internet Communications http://www.breezing.com
1106 West Main Stphone:434.295.2050
Charlottesville, VA 22903fax:603.843.6931
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Filters Not Triggering

2004-02-05 Thread Jeffrey Laramie
Toby Reiter wrote:

>Hey all,
>I have Xmail 1.16 on Linux with SpamAssassin and ClamAntivirus 
>running with the standard filters for these programs (i.e. Lindeman's 
>AV filter and Don Drake's SA filter).
>
>In general, these filters work great, but recently we've been 
>noticing a few email messages that have been not filtered, I'll give 
>examples:
>
>a) Messages that are sent within our local network or that are being 
>SMTP Relayed through a server on our local network are being missed 
>by the AV filter or by both filters. Sometimes these messages will be 
>SA filtered without being AV filtered, but they are never just AV 
>filtered.
>
>b) Messages with encoding errors (usually b/c they have poorly 
>attached virus attachments) and which are being SA filtered but not 
>AV filtered
>
>c) In a few limited cases, a well-encoded message from outside the 
>network is SA filtered but not AV filtered.
>
>Does anyone have any ideas about this? Since the filters do work 75 - 
>85% percent of the time (or more) I don't really feel like going into 
>debug mode is necessarily going to help: I think this is more of a 
>"Why isn't this working in theory?" question than a syntax error in 
>one of my filter files.
>
>Any feedback would be greatly appreciated.
>
>  
>

Which filter runs first? Which versions of the filters are you running?

Jeff

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: fighting against spam...

2004-02-05 Thread Don Drake
- Original Message 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Subject: [xmail] Re: fighting against spam...
Date: 02/05/04 09:10

>
> > [snip]About spam,
> > people should be more carefull where they enter their email adresses
and
> > also list administrators could make list more secure (at least to
> > prevent listing the list to see who is subscribed). This and only
this
> > is the problem of spam.
>
>
> I strongly disagree here.  Spammers are actively scanning every domain for
> valid email addresses.  Even if you have an email address that nobody
knows
> about, it will eventually get bombed with spam.  Just watch the logs
closely
> on any busy email server, and you will see one dictionary attack after the
> next.  Blaming spam on the end user receiving it is simply wrong.  I agree
> some people unwisely bring extra spam on themselves by posting all over
the
> place using their email address, but spammers will find their email
address
> even if they do not do that.
>
> There is technology already available to us to filter much of the spam. 
To
> filter the majority fo all spam, you need to use a mixture of methods. 
One
> very good idea is to block every known open relay, since spammers still
rely
> heavily on those open relays.  The ORDB RBL is a list of all known open
> relays, and it definitely blocks a lot of spam.  SpamAssassin also helps
> noticably.  With SpamAssassin, you really need to train the engine on ham
> and spam periodically to make sure it catches a high amount.  Spammers
will
> constantly change their patterns to trick SpamAssassin, so manually
teaching
> it the spam it misses is a critical function.  And of course, you should
> require all of your own users to use SMTP AUTH to relay email.  This way
all
> email relayed through your box will contain an X-Auth header, so you can
> quickly track down the user if one of your users is sending spam.
>
> To decrease a large amount of incoming spam, we need a solution to stop
from
> address forging.  The proposals like RMX would definitely help reduce a
> significant amount of spam.  Any solution that noticably cuts down on
> address forging will also noticably cut down on spam, since most spam is
> sent with forged addresses.
>

I agree with Shiloh's assessment.  Please don't blame me for the crap I
receive in my inbox.

Also, I'd like to re-emphasize that a mixture of methods is needed to filter
the junk.  Using one method isn't enough in my experience.  SpamAssassin
offers many methods and uses a scoring mechanism of the different methods to
 determine spam.  There are probably other similar methods, but this is the
best I've seen.

To address the original issue - fighting against spam, filtering doesn't
fight spam, it removes the symptoms instead of fixing the disease.  Which
for some people is ok -- if I don't see the spam in my inbox (because of
filtering) then that's just as good as never receiving it.

-Don

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Filters Not Triggering

2004-02-05 Thread Don Drake
> Does anyone have any ideas about this? Since the filters do work 75 -
> 85% percent of the time (or more) I don't really feel like going into
> debug mode is necessarily going to help: I think this is more of a
> "Why isn't this working in theory?" question than a syntax error
in
> one of my filter files.
>
> Any feedback would be greatly appreciated.
>

How are you determining that the filters were not triggered?

-Don

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Filters Not Triggering

2004-02-05 Thread Toby Reiter
>Toby Reiter wrote:
>
>>Hey all,
>>I have Xmail 1.16 on Linux with SpamAssassin and ClamAntivirus
>>running with the standard filters for these programs (i.e. Lindeman's
>>AV filter and Don Drake's SA filter).
>>
>>In general, these filters work great, but recently we've been
>>noticing a few email messages that have been not filtered, I'll give
>>examples:
>>
>>a) Messages that are sent within our local network or that are being
>>SMTP Relayed through a server on our local network are being missed
>>by the AV filter or by both filters. Sometimes these messages will be
>>SA filtered without being AV filtered, but they are never just AV
>>filtered.
>>
>>b) Messages with encoding errors (usually b/c they have poorly
>>attached virus attachments) and which are being SA filtered but not
>>AV filtered
>>
>>c) In a few limited cases, a well-encoded message from outside the
>>network is SA filtered but not AV filtered.
>>
>>Does anyone have any ideas about this? Since the filters do work 75 -
>>85% percent of the time (or more) I don't really feel like going into
>>debug mode is necessarily going to help: I think this is more of a
>>"Why isn't this working in theory?" question than a syntax error in
>>one of my filter files.
>>
>>Any feedback would be greatly appreciated.
>>
>>
>>
>
>Which filter runs first? Which versions of the filters are you running?

Hyou know what? I run SpamAssassin first, but I really should 
switch it around (no reason to sa filter a message if it has a 
virus).  I'll try that for a while and see what it does. Thanks for 
the question.

I am using the latest versions of both scripts (as far as I know, anyway).

Toby
-- 
Toby Reiter  mailto:[EMAIL PROTECTED]
Breezing Internet Communications http://www.breezing.com
1106 West Main Stphone:434.295.2050
Charlottesville, VA 22903fax:603.843.6931
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] SMTP Used incorretly

2004-02-05 Thread Edinilson J. Santos
Davide, take a look at this header:

Received: from administracao (200.158.170.68:1028)
 by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server]
 id  for <[EMAIL PROTECTED]> from
<[EMAIL PROTECTED]>;
 Thu, 5 Feb 2004 14:52:43 -0200
Message-ID: <[EMAIL PROTECTED]>
From: "consultoria" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>

atinet.com.br is my main domain
multiguias.com.br is hosted here

BUT
account [EMAIL PROTECTED] doesn't exist
user doesn't autenticate to use SMTP

smtp.ipmap.tab
"0.0.0.0" "0.0.0.0" "ALLOW" 1

smtprelay.tab
"127.0.0.1" "255.255.0.0"
"200.231.29.0" "255.255.255.192"

smtp.log

"" "mailserver" "200.158.170.68" "2004-02-05 10:36:33" "administracao"
"atinet.com.br" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]"
"S30CFA8A" "RCPT=OK" "" "0" ""


Some idea why Xmail is allowing this user to use smtp?

Thank you

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Comments in tab files

2004-02-05 Thread Davide Libenzi
On Tue, 3 Feb 2004, Ladislav Sedivy wrote:

> Can you use comments in .tab files?

Yes:

# Blah blah ...




- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Options

2004-02-05 Thread Davide Libenzi
On Tue, 3 Feb 2004, Nick Marino wrote:

> This was taken from the xmail documentations.
> 
> XMail --debug [options]
> 
> What are the options?

-Md plus the ones that you usually pass to XMail to start it up.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, take a look at this header:
> 
> Received: from administracao (200.158.170.68:1028)
>  by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server]
>  id  for <[EMAIL PROTECTED]> from
> <[EMAIL PROTECTED]>;
>  Thu, 5 Feb 2004 14:52:43 -0200
> Message-ID: <[EMAIL PROTECTED]>
> From: "consultoria" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> 
> atinet.com.br is my main domain
> multiguias.com.br is hosted here
> 
> BUT
> account [EMAIL PROTECTED] doesn't exist
> user doesn't autenticate to use SMTP
> 
> smtp.ipmap.tab
> "0.0.0.0" "0.0.0.0" "ALLOW" 1
> 
> smtprelay.tab
> "127.0.0.1" "255.255.0.0"
> "200.231.29.0" "255.255.255.192"
> 
> smtp.log
> 
> "" "mailserver" "200.158.170.68" "2004-02-05 10:36:33" "administracao"
> "atinet.com.br" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]"
> "S30CFA8A" "RCPT=OK" "" "0" ""
> 
> 
> Some idea why Xmail is allowing this user to use smtp?

Because [EMAIL PROTECTED] is a local account in your server.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XAVStats

2004-02-05 Thread Davide Libenzi
On Wed, 4 Feb 2004, Liron Newman wrote:

> Liron Newman wrote:
> 
> >I've made a very small VBScript to generate statistics for XAV. Get it here:
> >http://www.eesh.net/XAVStats.zip
> >
> >  
> >
> Updated the script a bit so it can be run interactively rather than just 
> through the commandline (The simplest way to use it now is to drag & 
> drop the logfile on the script file in the Windows Explorer). Same URL.
> 
> Davide, if you want to link to it (Although it isn't directly an XMail 
> util) you're more than welcome, of course.

I don't like to link to archive files. It is better an HTML page with a 
little description and a download link.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: RDNS problem

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Sergio Casagrande wrote:

> I add some other information:
> - w2k sp 4
> - xmail 1.17
> 
> I searched into dnscache directory and I founded a domain.it file within =
> the correct list with priority of domain mail servers (the same of hand =
> nslookup).
> Another strange thing is:
> I seted spammers.tab in this way (from documentation):
> "address""netmask"
> It doesn't work. I changed it to:
> addressnetmask
> and now it works.
> 
> May be a my server problem with text files?
> 
> Thank you again.
> Ciao.
> Sergio C.
> 
> -Messaggio originale-
> Da: Sergio Casagrande=20
> Inviato: mercoled=EC 4 febbraio 2004 12.08
> A: Xmailserver (E-mail)
> Oggetto: RDNS problem
> 
> 
> Hi all,
> I have a problem with RDNS check.
> For spam problems (do you know about it? ;) I seted SMTP-RDNSCheck =
> parameter to 1.
> Now, there is a domain that has more MX record with priority not equal.
> If the e-mail comes from server with higher priority all goes well, but =
> if the e-mail comes from a server with lower priority I have this error =
> in xmail log:
> SNDRIP=3DERDNS
> 
> Is it possible?
> Why this one happen?

The RDNS check does a gethostbyaddr(), that translate to a PTR record 
lookup. It basically means that the "other" does not have a PTR record.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Dale Qualls wrote:

> Ahhh, I didn't have the EXPORT part in mine, but I'm not even sure it's in =
> the right place.
> 
> One of my RH8 boxes locks up every couple of days, I'm only assuming that =
> it's this kernel error (the other one's been running flawlessly for a =
> while now).

RH8 does not come with NPTL installed, so you do not need to do that. The 
xmailserver.org is running on RH8 w/out any problem by ages.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Harald Schneider wrote:

> Do you use Kernel > 2.4.1?
> If yes, put=20
> export LD_ASSUME_KERNEL=3D2.4.1
> into your xmail startup scripts.

In general, do not use NPTL aware glibc in servers. It is still not really 
stable, like you can see if you google for LD_ASSUME_KERNEL.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Edinilson J. Santos
This ins't the point: [EMAIL PROTECTED] is sending messages,
using my SMTP, without autorization and autentication.
How?

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


- Original Message - 
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 3:50 PM
Subject: [xmail] Re: SMTP Used incorretly


On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, take a look at this header:
>
> Received: from administracao (200.158.170.68:1028)
>  by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server]
>  id  for <[EMAIL PROTECTED]> from
> <[EMAIL PROTECTED]>;
>  Thu, 5 Feb 2004 14:52:43 -0200
> Message-ID: <[EMAIL PROTECTED]>
> From: "consultoria" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
>
> atinet.com.br is my main domain
> multiguias.com.br is hosted here
>
> BUT
> account [EMAIL PROTECTED] doesn't exist
> user doesn't autenticate to use SMTP
>
> smtp.ipmap.tab
> "0.0.0.0" "0.0.0.0" "ALLOW" 1
>
> smtprelay.tab
> "127.0.0.1" "255.255.0.0"
> "200.231.29.0" "255.255.255.192"
>
> smtp.log
>
> "" "mailserver" "200.158.170.68" "2004-02-05 10:36:33" "administracao"
> "atinet.com.br" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]"
> "S30CFA8A" "RCPT=OK" "" "0" ""
>
>
> Some idea why Xmail is allowing this user to use smtp?

Because [EMAIL PROTECTED] is a local account in your server.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]





---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> This ins't the point: [EMAIL PROTECTED] is sending messages,
> using my SMTP, without autorization and autentication.
> How?

This is *exactly* the point. The recipient is [EMAIL PROTECTED], that 
is a regular local account in your server. So XMail accepts it like every 
MTA would do. You can use mail-auth, but then noone will be able to send 
messages to your server w/out authentication.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Dale Qualls
I was basing that on this message:
So 8 IS okay?

Hmmm, wonder what's trashin' my box

Thanks Davide!



Please note: This also happens on RedHat 8 machines, which updated the
kernel to a version > 2.4.1. You'll need to apply the LD_ASSUME_KERNEL =
fix here too.

--Harald


> -Urspr=FCngliche Nachricht-
> Von: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] Im Auftrag von Pascal de R.
> Gesendet: Montag, 19. Januar 2004 10:28
> An: Veeresh Khanorkar
> Betreff: [xmail] Re: AW: Re: AW: Re: XMail growing memory image ...
>=20
>=20
> Dear Veeresh,
>=20
>=20
>=20
>=20
> lundi 19 janvier 2004 at 07:43:49, you said :
>=20
> Veeresh> Any link, pointer where I can understand what's=20
> happening with=20
> Veeresh> XMail if its on Red Hat 9?
>=20
>=20
> Vendredi 26 d=E9cembre 2003 at 10:11:51, Pascal said :
>=20
> Pascal> First, Merry Christmas everybody :-)
>=20
> Pascal> I have xmail 1.17 installed on RH9 managing around=20
> 500 domains.=20
> Pascal> around 200 e-mail / hour
>=20
> Pascal> When I start running xmail process, he needs 281MB, 24h after=20
> Pascal> 360 and 3/4 days after 690 MB!. I hope it is a setup=20
> problem and=20
> Pascal> I have to correct it because on this computer i'm running=20
> Pascal> Apache, MySql and Bind, and 1GB memory seems to be short if i=20
> Pascal> don't restart xmail every 2 days.
>=20
> Pascal>   Best regards,
> Pascal>   Pascal, [EMAIL PROTECTED] 
>=20
> Pascal> -
> Pascal> To unsubscribe from this list: send the line=20
> "unsubscribe xmail"=20
> Pascal> in the body of a message to [EMAIL PROTECTED] 
> For general=20
> Pascal> help: send the line "help" in the body of a message to=20
> Pascal> [EMAIL PROTECTED] 
>=20
>=20
> After many test I confirme LD_ASSUME_KERNEL=3D2.4.1 in the=20
> starting script solves the problem.
>=20
>=20
>=20
>=20
>=20
> Veeresh> Regards,
> Veeresh> Veeresh
> Veeresh> P.S: BTW I had subscribed on this a long time ago, however=20
> Veeresh> couple of days back when I tried to send mail,=20
> ecartis 'backed=20
> Veeresh> off' me. Any proble with ecartis?
>=20
> Veeresh> -=3D-=3D-
> Veeresh>  I am the "ILOVEGNU" signature virus. Just copy=20
> me to your=20
> Veeresh> signature. This email was infected under the terms=20
> of the GNU=20
> Veeresh> General Public License.
> Veeresh> -=3D--=3D-
>=20
> Veeresh> Davide Libenzi wrote:
>=20
> >>On Sat, 17 Jan 2004, Veeresh Khanorkar wrote:
> >>
> >> =20
> >>
> >>>Hi Davide,
> >>>
> >>>I am definitely using it on Red Hat 9 though. Any=20
> problems, updates=20
> >>>with that?
> >>>   =20
> >>>
> >>
> >>Yes. Put:
> >>
> >>LD_ASSUME_KERNEL=3D2.4.1
> >>
> >>inside your /etc/rc.d/init.d/xmail
> >>
> >>
> >>
> >>- Davide
> >>
> >>
> >>-
> >>To unsubscribe from this list: send the line "unsubscribe xmail" in=20
> >>the body of a message to [EMAIL PROTECTED] For general help:=20
> >>send the line "help" in the body of a message to=20
> >>[EMAIL PROTECTED] 
> >>
> >>
> >>
> >> =20
> >>
>=20
>=20
>=20
>=20
> Veeresh> -
> Veeresh> To unsubscribe from this list: send the line "unsubscribe=20
> Veeresh> xmail" in the body of a message to=20
> [EMAIL PROTECTED] For=20
> Veeresh> general help: send the line "help" in the body of a=20
> message to=20
> Veeresh> [EMAIL PROTECTED] 
>=20
>=20
>=20
>=20
>=20
>   Best regards,
>   Pascal, [EMAIL PROTECTED] 
>=20
> -
> To unsubscribe from this list: send the line "unsubscribe=20
> xmail" in the body of a message to [EMAIL PROTECTED] 
> For general help: send the line "help" in the body of a=20
> message to [EMAIL PROTECTED] 
>=20

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED] 
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED] 


-- Attached file included as plaintext by Ecartis --

Received: from x35.xmailserver.org
by mail.pattishall.com; Mon, 19 Jan 2004 08:19:20 -0600
Received: from x35.xmailserver.org (127.0.0.1:34093)
by localhost.localdomain with [XMail 1.18 (Linux/Ix86) ESMTP Server]
id  for <[EMAIL PROTECTED]> from <[EMAIL PROTECTED]>;
Mon, 19 Jan 2004 06:13:07 -0800
Received: with ECARTIS (v1.0.0; list xmail); Mon, 19 Jan 2004 06:13:01 -0800 (PST)
Received: from moutng.kundenserver.de (212.227.126.186:54344)
by xmailserver.org with [XMail 1.18 (Linux/Ix86) ESMTP Server]
id  for <[EMAIL PROTECTED]> from <[EMAIL PROTECTED]>;
Mon, 19 Jan 2004 06:13:01 -0800
Received: from [212.227.126.179] (helo=mrelayng.kundenserver.de)
by moutng.kundenserver.de with esmtp (Exim 3.35 #1)
id 1Aia9B-0004Ne-00
for [EMAIL PROTECTED]; Mon, 19 Jan 2004 15:12:57 +0100
Received: from [217.229.210.22] (helo=TBIRD)
by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1)
id 1Aia9A-ZQ-00
for [EMAIL PROTECTED]; Mon, 19 Jan 2004 15:12:56 +0100
From: "Harald Schneider" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: [xmail] AW: Re: AW: Re: AW: Re: XMail growing memory ima

[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Dale Qualls wrote:

> I was basing that on this message:
> So 8 IS okay?
> 
> Hmmm, wonder what's trashin' my box
> 
> Thanks Davide!
> 
> 
> 
> Please note: This also happens on RedHat 8 machines, which updated the
> kernel to a version > 2.4.1. You'll need to apply the LD_ASSUME_KERNEL =
> fix here too.

Look that the problem is not the kernel. It is glibc-NPTL.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: AW: Both xmailservers crashed this morning

2004-02-05 Thread Dale Qualls
Not sure that I understand what you mean (I'm a linux idiot :)

Looks like I have glibc 2.2.93, does that tell me anything regarding NPTL?

If too far off topic, just flame me and I'll look elsewhere :)

>>> [EMAIL PROTECTED] 02/05/04 12:14PM >>>
On Thu, 5 Feb 2004, Dale Qualls wrote:

> I was basing that on this message:
> So 8 IS okay?
>=20
> Hmmm, wonder what's trashin' my box
>=20
> Thanks Davide!
>=20
>=20
>=20
> Please note: This also happens on RedHat 8 machines, which updated the
> kernel to a version > 2.4.1. You'll need to apply the LD_ASSUME_KERNEL =
=3D
> fix here too.

Look that the problem is not the kernel. It is glibc-NPTL.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Edinilson J. Santos
Davide, IP 200.158.170.68 isn't mine and is outside my network.
That IP isn't in my smtprelay.tab too (or elsewhere)
User was not autenticated.

How this guy is using our smtp server to send the message?

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


- Original Message - 
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 4:05 PM
Subject: [xmail] Re: SMTP Used incorretly


On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> This ins't the point: [EMAIL PROTECTED] is sending messages,
> using my SMTP, without autorization and autentication.
> How?

This is *exactly* the point. The recipient is [EMAIL PROTECTED], that 
is a regular local account in your server. So XMail accepts it like every 
MTA would do. You can use mail-auth, but then noone will be able to send 
messages to your server w/out authentication.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]





---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, IP 200.158.170.68 isn't mine and is outside my network.
> That IP isn't in my smtprelay.tab too (or elsewhere)
> User was not autenticated.
> 
> How this guy is using our smtp server to send the message?

Why can you send me a message to [EMAIL PROTECTED]
How dare my server @xmailserver.org to let you send a message to 
[EMAIL PROTECTED] Your IP is not in my smtprelay.tab either. An you 
did not authenticate. Think about this.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Edinilson J. Santos
Davide, he is sending email THROUGH my SMTP server not TO my server.

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


- Original Message - 
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 5:01 PM
Subject: [xmail] Re: SMTP Used incorretly


On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, IP 200.158.170.68 isn't mine and is outside my network.
> That IP isn't in my smtprelay.tab too (or elsewhere)
> User was not autenticated.
> 
> How this guy is using our smtp server to send the message?

Why can you send me a message to [EMAIL PROTECTED]
How dare my server @xmailserver.org to let you send a message to 
[EMAIL PROTECTED] Your IP is not in my smtprelay.tab either. An you 
did not authenticate. Think about this.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]





---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Davide Libenzi
On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, he is sending email THROUGH my SMTP server not TO my server.

The message you posted had a recipient of [EMAIL PROTECTED]:

Received: from administracao (200.158.170.68:1028)
 by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server]
 id  for <[EMAIL PROTECTED]> from 
 <[EMAIL PROTECTED]>;
 Thu, 5 Feb 2004 14:52:43 -0200


And last time I checked, you are the handler of @atinet.com.br




- Davide



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP Used incorretly

2004-02-05 Thread Edinilson J. Santos
I think that my example wasn't so good because in that test he send to me
([EMAIL PROTECTED]) a message BUT he can send message to any
email/domain -([EMAIL PROTECTED]) for example.

What's wrong?

Thank you

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


- Original Message - 
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 5:52 PM
Subject: [xmail] Re: SMTP Used incorretly


On Thu, 5 Feb 2004, Edinilson J. Santos wrote:

> Davide, he is sending email THROUGH my SMTP server not TO my server.

The message you posted had a recipient of [EMAIL PROTECTED]:

Received: from administracao (200.158.170.68:1028)
 by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server]
 id  for <[EMAIL PROTECTED]> from
 <[EMAIL PROTECTED]>;
 Thu, 5 Feb 2004 14:52:43 -0200


And last time I checked, you are the handler of @atinet.com.br




- Davide



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] kio8

2004-02-05 Thread Shiloh Jennings
Anybody else having problems supporting customers using KIO8-R with XMail
and SpamAssassin?  I have a customer complaining that all of his emails with
the KIO8-R characterset are coming through blank?  I don't know if the
problem is XMail or SpamAssassin, and I cannot seem to find anything on the
topic anywhere.

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Options

2004-02-05 Thread Rob Arends
Davide, I've always wondered why you need to specify -debug *and* -Md.

What does one do that the other doesn't?

Rob :-) 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Davide Libenzi
> Sent: Friday, February 06, 2004 4:49 AM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: Options
> 
> On Tue, 3 Feb 2004, Nick Marino wrote:
> 
> > This was taken from the xmail documentations.
> > 
> > XMail --debug [options]
> > 
> > What are the options?
> 
> -Md plus the ones that you usually pass to XMail to start it up.
> 
> 
> 
> - Davide
> 
> 
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
> 
> 

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Spammer's Domain

2004-02-05 Thread Verner A.
Once again

Sample smtp.log:

"" "asf.ru" "81.53.204.90" "2004-02-05 00:15:00"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru"
"[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "S642A5" "RCPT=OK" "" "0"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
"" "asf.ru" "81.53.204.90" "2004-02-05 00:15:10"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru"
"[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "S642A5" "RECV=OK" "" "3272"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
"" "asf.ru" "81.53.204.90" "2004-02-05 00:15:23"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru" "[EMAIL PROTECTED]"
"[EMAIL PROTECTED]" "S642A6" "RCPT=OK" "" "0"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
"" "asf.ru" "81.53.204.90" "2004-02-05 00:15:31"
"AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru" "[EMAIL PROTECTED]"
"[EMAIL PROTECTED]" "S642A6" "RECV=OK" "" "3189" "AMarseille-206-1-28-90.w81-
.

I am not disable *.takuyakimura.com and *.aol.com(not FROM: domain)
I am want disable *.abo.wanadoo.fr(domain name for IP 81.53.204.90)
IP address may be much and easier forbid the domain.

Verner A.

>Ok, so use the link Mircea gave you, then look just a little lower on the
>page, and tada, you have what you're looking for.

>F#$% blind

>Rob :-)

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Verner A.
> Sent: Thursday, February 05, 2004 3:49 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: Spammer's Domain
>
> Not IP address,
> I have disable domain as is *.abo.wanadoo.fr
>
>
> - Original Message -
> From: "Mircea Ciocan" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, February 04, 2004 4:15 PM
> Subject: [xmail] Re: Spammer's Domain
>
>
> > Verner A. wrote:
> >
> > >How to forbid reception spamm messages from the certain domains.
> > >
> > >Example:
> > >Log statistic
> > >  62 ALagny-110-1-7-248.w81-248.abo.wanadoo.fr | 1
> > >  63 ALille-208-1-10-236.w80-15.abo.wanadoo.fr | 1
> > >  64 ALyon-209-1-33-41.w81-249.abo.wanadoo.fr | 2
> > >  65 AMarseille-102-1-4-208.w80-14.abo.wanadoo.fr | 1
> > >  66 ANancy-107-1-23-39.w81-49.abo.wanadoo.fr | 1
> > >  67 ANice-202-1-3-112.w80-13.abo.wanadoo.fr  | 1
> > >  68 APoitiers-103-1-4-123.w81-48.abo.wanadoo.fr | 1
> > >  69 AStrasbourg-207-1-1-126.w80-15.abo.wanadoo.fr | 1
> > >  70 AToulon-103-1-4-140.w80-15.abo.wanadoo.fr | 1
> > >  71 ATuileries-117-1-18-194.w81-248.abo.wanadoo.fr | 1
> > >
> > >How to deny *.abo.wanadoo.fr
> > >
> > >Verner A
> > >
> > >
> >
> > http://xmailserver.org/Readme.html#spamaddress.tab
> >
> > All you need and more ;)
> >
> > Mircea
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
> >
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

--

XMail::Scopee::nntpfwd v1.40  |  2004-02-05 06:33:38Z

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Spammer's Domain

2004-02-05 Thread Jim Frank
Sure seems like the documentation fixes 85% of all problems here :)  -Jim


- Original Message - 
From: "Verner A." <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 8:43 PM
Subject: [xmail] Re: Spammer's Domain


> Once again
>
> Sample smtp.log:
>
> "" "asf.ru" "81.53.204.90" "2004-02-05 00:15:00"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru"
> "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "S642A5" "RCPT=OK" "" "0"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
> "" "asf.ru" "81.53.204.90" "2004-02-05 00:15:10"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru"
> "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "S642A5" "RECV=OK" "" "3272"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
> "" "asf.ru" "81.53.204.90" "2004-02-05 00:15:23"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru" "[EMAIL PROTECTED]"
> "[EMAIL PROTECTED]" "S642A6" "RCPT=OK" "" "0"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr"
> "" "asf.ru" "81.53.204.90" "2004-02-05 00:15:31"
> "AMarseille-206-1-28-90.w81-53.abo.wanadoo.fr" "asf.ru" "[EMAIL PROTECTED]"
> "[EMAIL PROTECTED]" "S642A6" "RECV=OK" "" "3189" "AMarseille-206-1-28-90.w81-
> .
>
> I am not disable *.takuyakimura.com and *.aol.com(not FROM: domain)
> I am want disable *.abo.wanadoo.fr(domain name for IP 81.53.204.90)
> IP address may be much and easier forbid the domain.
>
> Verner A.
>
> >Ok, so use the link Mircea gave you, then look just a little lower on the
> >page, and tada, you have what you're looking for.
>
> >F#$% blind
>
> >Rob :-)
>
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Verner A.
> > Sent: Thursday, February 05, 2004 3:49 PM
> > To: [EMAIL PROTECTED]
> > Subject: [xmail] Re: Spammer's Domain
> >
> > Not IP address,
> > I have disable domain as is *.abo.wanadoo.fr
> >
> >
> > - Original Message -
> > From: "Mircea Ciocan" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, February 04, 2004 4:15 PM
> > Subject: [xmail] Re: Spammer's Domain
> >
> >
> > > Verner A. wrote:
> > >
> > > >How to forbid reception spamm messages from the certain domains.
> > > >
> > > >Example:
> > > >Log statistic
> > > >  62 ALagny-110-1-7-248.w81-248.abo.wanadoo.fr | 1
> > > >  63 ALille-208-1-10-236.w80-15.abo.wanadoo.fr | 1
> > > >  64 ALyon-209-1-33-41.w81-249.abo.wanadoo.fr | 2
> > > >  65 AMarseille-102-1-4-208.w80-14.abo.wanadoo.fr | 1
> > > >  66 ANancy-107-1-23-39.w81-49.abo.wanadoo.fr | 1
> > > >  67 ANice-202-1-3-112.w80-13.abo.wanadoo.fr  | 1
> > > >  68 APoitiers-103-1-4-123.w81-48.abo.wanadoo.fr | 1
> > > >  69 AStrasbourg-207-1-1-126.w80-15.abo.wanadoo.fr | 1
> > > >  70 AToulon-103-1-4-140.w80-15.abo.wanadoo.fr | 1
> > > >  71 ATuileries-117-1-18-194.w81-248.abo.wanadoo.fr | 1
> > > >
> > > >How to deny *.abo.wanadoo.fr
> > > >
> > > >Verner A
> > > >
> > > >
> > >
> > > http://xmailserver.org/Readme.html#spamaddress.tab
> > >
> > > All you need and more ;)
> > >
> > > Mircea
> > > -
> > > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > > the body of a message to [EMAIL PROTECTED]
> > > For general help: send the line "help" in the body of a message to
> > > [EMAIL PROTECTED]
> > >
> > >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
> >
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
> --
> --
--
> XMail::Scopee::nntpfwd v1.40  |  2004-02-05 06:33:38Z
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]