[xmail] Re: XMail servers outage ...
On Fri, 21 Oct 2005, Davide Libenzi wrote: > Thre will be an outage from 03:00 PST to 12:00 PST: Since w/out the specifying the day it's pretty useless, it'll be Saturday 22 Oct. - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] XMail servers outage ...
Thre will be an outage from 03:00 PST to 12:00 PST: -ENOPOWER - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: [OT] France help ...
Hi Chad, Chad Fleenor a écrit : > I think this is what you are wanting. Ce n'est pas une bonne traduction. Trop de fautes et de traduction mot à mot au lieu de l'usage naturel. J'ai déjà donné une traduction plus correct. My first language *is* french :-) - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: [OT] France help ...
I think this is what you are wanting. #define MSTR_VIRUS_FOUND "Le virus a trouvé... \nEnlèvement '%s'\n" #define MSTR_ASK_REBOOT "\nRéinitialisation de dispositif requise pour accomplir le nettoyage. Appuyez sur n'importe quelle touché..." #define MSTR_SCAN_COMPLETE "\nBalayage de dispositif complet\n\n" #define MSTR_NO_VIRUS_FOUND "Aucun virus identifié\n\n" Chad -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Davide Libenzi Sent: Thursday, October 20, 2005 4:43 PM To: XMail mailing list Subject: [xmail] [OT] France help ... Is there any France speaker that can correctly translate those string for me? #define MSTR_VIRUS_FOUND "Virus found ...\nRemoving '%s'\n" #define MSTR_ASK_REBOOT "\nDevice reboot required to complete cleanup.\nPress any key ..." #define MSTR_SCAN_COMPLETE "\nDevice scan complete\n\n" #define MSTR_NO_VIRUS_FOUND "No virus identified\n\n" - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
Sorry, forgot to add: you also need to detect and repair a bad End Of Header (ie: no double "crlf" between the start of the body, and end of the headers). John Kielkopf wrote: >I'm not sure if this is what he's refering to, but most (all?) of the >ClamAV filters I've seen posted for Xmail will not catch all test virus >samples from places like http://www.webmail.us/testvirus > >In order to catch all of them, the filters need to strip Xmail's special >header information (strip everything up to and including <>), >and add a "Return-Path" header to the top before scanning. > > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
I'm not sure if this is what he's refering to, but most (all?) of the
ClamAV filters I've seen posted for Xmail will not catch all test virus
samples from places like http://www.webmail.us/testvirus
In order to catch all of them, the filters need to strip Xmail's special
header information (strip everything up to and including <>),
and add a "Return-Path" header to the top before scanning.
Chris L. Franklin wrote:
>Jeffrey Laramie wrote:
>
>
>
>>On Friday 21 October 2005 06:01, jonn ah wrote:
>>
>>
>>
>>
>>>hi all,
>>>
>>>Can anybody tell me which av filters (clamav) works on
>>>xmail? I followed chris franklin's directions on his
>>>av filter with xmail but it doesnt detect eicar's test
>>>virus when i send it thru xmail...
>>>
>>>
>>>
>>>
>>This page has a list of XMail filters at the bottom. Check out the links to
>>see which AV programs they support:
>>
>>http://www.ubaight.com/xmail/index.html
>>
>>If you're using Lindeman's Antivirus Filter there are instructions for Linux
>>here:
>>
>>http://www.ubaight.com/xmail/xmailhandbook.html#Lindeman
>>
>>Jeff
>>-
>>To unsubscribe from this list: send the line "unsubscribe xmail" in
>>the body of a message to [EMAIL PROTECTED]
>>For general help: send the line "help" in the body of a message to
>>[EMAIL PROTECTED]
>>
>>
>>
>>
>>
>
>I don't mean to be rude or anything. But if the script isn't catching
>virus' right then you probably don't have have
>
>A) ClamD running and configured right
>B) You don't have the script installed right
>
>Heres the log from the test virus' I just sent
>
>Fri Oct 21 08:50:21 2005 -> /tmp/msrva5bfdbb0.16f90.tmp:
>Eicar-Test-Signature FOUND
>Fri Oct 21 08:51:05 2005 -> /tmp/msrva5bfdbb0.1701d.tmp:
>Eicar-Test-Signature FOUND
>Fri Oct 21 08:51:25 2005 -> /tmp/msrva5bfdbb0.1705b.tmp:
>Eicar-Test-Signature FOUND
>Fri Oct 21 08:52:25 2005 -> /tmp/msrva5bfdbb0.17111.tmp:
>Eicar-Test-Signature FOUND
>Fri Oct 21 08:56:11 2005 -> /tmp/msrva5bfdbb0.173bb.tmp:
>Eicar-Test-Signature FOUND
>
>The Script is to simple to really cuase any problem
>
>[Code]
>#!/bin/bash
>### Config
>File=$1
>RejFile=$File".rej"
>RemoteAddress=$2
>Authuser=$3
>timestamp=`date +%s`
>date=`date +%Y%m%d000`
>nowtime=`date +%r`
>
>### Doing Stuff
>ClamAV='clamdscan --no-summary --stdout '
>run=`$ClamAV $File`
>Found=`echo "$run" | awk '{print $3}'`
>Virus=`echo "$run" | awk '{print $2}'`
>
>### Log
>echo "$nowtime $RemoteAddress $Authuser $Virus" >>
>/var/MailRoot/logs/anti-virus-$date
>
>### Exiting
>if [ $Found ]; then
> echo "550 Virus : $Virus Found in Email " > $RejFile
> exit 3
>fi
>[/Code]
>
>And the Filter code is just as easy.
>
>/var/MailRoot/filters.post-data.tab
>
>[Code]
>"/var/MailRoot/filters/anti-virus.sh" "@@FILE""@@REMOTEADDR"
>"@@USERAUTH"
>[/Code]
>
>
>
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
Also, check out clamsmtp if you aren't running Windows - I'm not certain if it is faster than the available XMail filters (which I have had mixed luck with over the years), but it is easy to setup and works well for me... it is very lightweight and written in C. Jeff jonn ah wrote: > >hi all, > >Can anybody tell me which av filters (clamav) works on >xmail? I followed chris franklin's directions on his >av filter with xmail but it doesnt detect eicar's test >virus when i send it thru xmail... > > >thanks! > > > > >__ >Yahoo! Mail - PC Magazine Editors' Choice 2005 >http://mail.yahoo.com >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > > > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
Jeffrey Laramie wrote:
>On Friday 21 October 2005 06:01, jonn ah wrote:
>
>
>>hi all,
>>
>>Can anybody tell me which av filters (clamav) works on
>>xmail? I followed chris franklin's directions on his
>>av filter with xmail but it doesnt detect eicar's test
>>virus when i send it thru xmail...
>>
>>
>
>This page has a list of XMail filters at the bottom. Check out the links to
>see which AV programs they support:
>
>http://www.ubaight.com/xmail/index.html
>
>If you're using Lindeman's Antivirus Filter there are instructions for Linux
>here:
>
>http://www.ubaight.com/xmail/xmailhandbook.html#Lindeman
>
>Jeff
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
>
I don't mean to be rude or anything. But if the script isn't catching
virus' right then you probably don't have have
A) ClamD running and configured right
B) You don't have the script installed right
Heres the log from the test virus' I just sent
Fri Oct 21 08:50:21 2005 -> /tmp/msrva5bfdbb0.16f90.tmp:
Eicar-Test-Signature FOUND
Fri Oct 21 08:51:05 2005 -> /tmp/msrva5bfdbb0.1701d.tmp:
Eicar-Test-Signature FOUND
Fri Oct 21 08:51:25 2005 -> /tmp/msrva5bfdbb0.1705b.tmp:
Eicar-Test-Signature FOUND
Fri Oct 21 08:52:25 2005 -> /tmp/msrva5bfdbb0.17111.tmp:
Eicar-Test-Signature FOUND
Fri Oct 21 08:56:11 2005 -> /tmp/msrva5bfdbb0.173bb.tmp:
Eicar-Test-Signature FOUND
The Script is to simple to really cuase any problem
[Code]
#!/bin/bash
### Config
File=$1
RejFile=$File".rej"
RemoteAddress=$2
Authuser=$3
timestamp=`date +%s`
date=`date +%Y%m%d000`
nowtime=`date +%r`
### Doing Stuff
ClamAV='clamdscan --no-summary --stdout '
run=`$ClamAV $File`
Found=`echo "$run" | awk '{print $3}'`
Virus=`echo "$run" | awk '{print $2}'`
### Log
echo "$nowtime $RemoteAddress $Authuser $Virus" >>
/var/MailRoot/logs/anti-virus-$date
### Exiting
if [ $Found ]; then
echo "550 Virus : $Virus Found in Email " > $RejFile
exit 3
fi
[/Code]
And the Filter code is just as easy.
/var/MailRoot/filters.post-data.tab
[Code]
"/var/MailRoot/filters/anti-virus.sh" "@@FILE""@@REMOTEADDR"
"@@USERAUTH"
[/Code]
--
-- Chris L. Franklin --
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
On Friday 21 October 2005 06:01, jonn ah wrote: > hi all, > > Can anybody tell me which av filters (clamav) works on > xmail? I followed chris franklin's directions on his > av filter with xmail but it doesnt detect eicar's test > virus when i send it thru xmail... This page has a list of XMail filters at the bottom. Check out the links to see which AV programs they support: http://www.ubaight.com/xmail/index.html If you're using Lindeman's Antivirus Filter there are instructions for Linux here: http://www.ubaight.com/xmail/xmailhandbook.html#Lindeman Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: still on clamav and xmail...
Hi, [EMAIL PROTECTED] schrieb am Friday, October 21, 2005 12:01 PM: > Can anybody tell me which av filters (clamav) works on > xmail? I followed chris franklin's directions on his > av filter with xmail but it doesnt detect eicar's test > virus when i send it thru xmail... http://web35.hawk.city-map.de/index.php/ClamAV Didn't I post this URL already? And how shall we help you, if u don't post what u have done and what exactly filters.log shows u. Before u write anything else here, read: http://www.catb.org/~esr/faqs/smart-questions.html -- Regards, Alexander Hagenah - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] still on clamav and xmail...
hi all, Can anybody tell me which av filters (clamav) works on xmail? I followed chris franklin's directions on his av filter with xmail but it doesnt detect eicar's test virus when i send it thru xmail... thanks! __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
