Re: [AMaViS-user] how to get amavis to log remote MTA IP on spam-taglines

2006-12-15 Thread Len Conrad
thanks, we'll take a look at those possibilities >This modification is likely to trip up any log processing software. We don't have but one or two reports for amavis log lines, so it would be easy to modify the reports, if at all. If it's not obvious, we are trying to feed forward from the 2nd-

Re: [AMaViS-user] p0f & sql

2006-12-15 Thread Mark Martinec
Alan, > In 2.4.4 I've uncommented the "# , p0f=?" in the sql statement. As this is > not logging into the p0f field in msgs I presumed some additional changes > are still required? The ->execute part of the patch is needed too. Here is the same patch, but made against 2.4.4: --- amavisd~Mon

Re: [AMaViS-user] how to get amavis to log remote MTA IP on spam-taglines

2006-12-15 Thread MrC
> > We run a separate MX before the amavis box. > > We'd like to harvest on the amavis box the IPs of MTAs that > send msgs that get spam-tag-ged, in the same way "spammy" log > lines log [MX IP} and [IP that sent to the MX]. > > Is there some amavis/spamassassin param that does this? > At $

Re: [AMaViS-user] amavisWhitelistSender and amavisBlacklistSender help

2006-12-15 Thread MrC
> Hi. These two attributes are used in the amavisd ldap schema. > Are they for spam or ban? We would like to create a basic > mailing list that bans all mail not coming from any member of > the mailing. We thought we can add the members to the > whitelist and block everything else with the blac

[AMaViS-user] amavisWhitelistSender and amavisBlacklistSender help

2006-12-15 Thread Jim John
Hi. These two attributes are used in the amavisd ldap schema. Are they for spam or ban? We would like to create a basic mailing list that bans all mail not coming from any member of the mailing. We thought we can add the members to the whitelist and block everything else with the blacklist. Can thi

Re: [AMaViS-user] p0f & sql

2006-12-15 Thread Alan Munday
Mark Martinec wrote the following on 17/10/2006 13:51: > > You mean how to store p0f fingerprint to SQL logging database? > > Try the following: > > - add a field 'p0f' to table msgs: > ALTER TABLE msgs ADD p0f varchar(255) DEFAULT ''; > > - and apply the following change to amavisd: > >

[AMaViS-user] how to get amavis to log remote MTA IP on spam-tag lines

2006-12-15 Thread Len Conrad
We run a separate MX before the amavis box. We'd like to harvest on the amavis box the IPs of MTAs that send msgs that get spam-tag-ged, in the same way "spammy" log lines log [MX IP} and [IP that sent to the MX]. Is there some amavis/spamassassin param that does this? thanks Len --

Re: [AMaViS-user] SPAM scores for mails received from a particular domain are high

2006-12-15 Thread Clifton Royston
On Fri, Dec 15, 2006 at 02:17:53PM -0500, [EMAIL PROTECTED] wrote: > I have currently got installed "Mail-SpamAssassin-3.1.4" and would > like to upgrade to "Mail-SpamAssassin-3.1.7" from CPAN > > I also have amavisd-new-2.4.0 installed on the system. > > Will a normal upgrade to "Mail-SpamAss

Re: [AMaViS-user] disaster recovery backup fo bayesian DB?

2006-12-15 Thread Mark Martinec
Leon, > I thought of disaster recovery backup. > I've read the man pages but still not clear about backing up Bayesian > DB files (I don't use SQL DB for now). > > 1) Is the following command is legit? > sa-learn --sync --showdots --backup > backup.txt I guess so. It's been long time since I used

Re: [AMaViS-user] SPAM scores for mails received from a particular domain are high

2006-12-15 Thread Gary V
amavis wrote: > Hi, > I have currently got installed "Mail-SpamAssassin-3.1.4" and would > like to upgrade to "Mail-SpamAssassin-3.1.7" from CPAN > I also have amavisd-new-2.4.0 installed on the system. > Will a normal upgrade to "Mail-SpamAssassin-3.1.7" cause any > malfunctioning of amav

Re: [AMaViS-user] SPAM scores for mails received from a particular domain are high

2006-12-15 Thread Mark Martinec
> I have currently got installed "Mail-SpamAssassin-3.1.4" and would > like to upgrade to "Mail-SpamAssassin-3.1.7" from CPAN > > I also have amavisd-new-2.4.0 installed on the system. > > Will a normal upgrade to "Mail-SpamAssassin-3.1.7" cause any > malfunctioning of amavisd-new ? > > By normal

Re: [AMaViS-user] SPAM scores for mails received from a particular domain are high

2006-12-15 Thread amavis_user
Hi, I have currently got installed "Mail-SpamAssassin-3.1.4" and would like to upgrade to "Mail-SpamAssassin-3.1.7" from CPAN I also have amavisd-new-2.4.0 installed on the system. Will a normal upgrade to "Mail-SpamAssassin-3.1.7" cause any malfunctioning of amavisd-new ? By normal upgr

[AMaViS-user] dspam + amavis

2006-12-15 Thread thomas
does anyone using amavis + dspam ? I am wondering if it's possible to use individual spam filtering rather than goes into amavis default account ? Thanks - This mail sent by PowerNetIX Ltd. - AntiSpamX (http://www.antispamx

[AMaViS-user] disaster recovery backup fo bayesian DB?

2006-12-15 Thread Leon Kolchinsky
Hello All, I've asked this question on SA list but didn't get answers, so Ill try here. I thought of disaster recovery backup. I've read the man pages but still not clear about backing up Bayesian DB files (I don't use SQL DB for now). 1) Is the following command is legit? sa-learn --sync --sho

Re: [AMaViS-user] SA working, but amavis hangs when calling it.

2006-12-15 Thread Mark Martinec
Gregorics, > I have a little problem with my amavisd-new installation. I "inherited" > a linux system with postfix, amavis and spamassassin installed. However, > SA stopped working for some reason. Unfortunately, the server is a mess, > any meddling with it could cause it's entire collapse. I did

Re: [AMaViS-user] time gap between amavis and postfix/smtp in thelogs?

2006-12-15 Thread Mark Martinec
Leon, > my postfix is not chrooted. I doubt it. Check the 5-th column in master.cf. > cp -p /etc/localtime /var/spool/postfix/etc/ This fixes time zones in chroot jail. Mark - Take Surveys. Earn Cash. Influence the Futu

Re: [AMaViS-user] time gap between amavis and postfix/smtp in thelogs?

2006-12-15 Thread Leon Kolchinsky
> -Original Message- > From: [EMAIL PROTECTED] [mailto:amavis-user- > [EMAIL PROTECTED] On Behalf Of Mark Martinec > Sent: Thursday, December 14, 2006 5:45 PM > To: amavis-user@lists.sourceforge.net > Subject: Re: [AMaViS-user] time gap between amavis and postfix/smtp in > thelogs? > > L

Re: [AMaViS-user] noexec,nodev,noatime safe for $TEMPBASE?

2006-12-15 Thread Mark Martinec
Ralf, > Are the mountoptions "noexec,nodev,noatime" safe for $TEMPBASE? Yes, this is safe. noatime probably does not buy any measurable benefit. noexec,nodev seem like a good idea. Adding nosuid to the list may be useful. Mark

Re: [AMaViS-user] can't flush: / Unknown error (112)

2006-12-15 Thread Mark Martinec
Hans, I checked the Sophos error message (sav_if/savierr.h), and I believe the following entry corresponds to your status (112 = 0x70): #define SOPHOS_E_OUT_OF_DISK ((HRESULT)0x80030070L) so it seems the Sophos SAVI hit the same problem as your MIME::Parser, namely a disk partition running out

[AMaViS-user] noexec,nodev,noatime safe for $TEMPBASE?

2006-12-15 Thread Ralf Hildebrandt
Are the mountoptions "noexec,nodev,noatime" safe for $TEMPBASE? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-962 IT-Zentrum S

Re: [AMaViS-user] can't flush: / Unknown error ( 112) [auf Viren überprüft]

2006-12-15 Thread Hans Moser
Mark Martinec schrieb: > MIME::Parser uses temporary files wherever the system's tmpfile > creates them, which usually is /tmp or /var/tmp. Check that these > file systems have room. Looks like that. # df -k Dateisystem 1024-Blöcke Frei %BelegtIused %Iused Angehängt an /dev/hd4

Re: [AMaViS-user] can't flush: / Unknown error (112)

2006-12-15 Thread Mark Martinec
Hans, > I get the following errors. As you can see, there is more than 80 MB > free space in /opt/mail/ (where /opt/mail/var/amavis/tmp is) and the > mails are not big at all. > What does this errors cause? > ask_av (Sophos SAVI) FAILED - unexpected result: > ERROR p003: error scanning file > /op

[AMaViS-user] can't flush: / Unknown error (112)

2006-12-15 Thread Hans Moser
Hi! I get the following errors. As you can see, there is more than 80 MB free space in /opt/mail/ (where /opt/mail/var/amavis/tmp is) and the mails are not big at all. What does this errors cause? # tail mail_err.log Dec 15 07:50:01 rzhs098 mail:err|error amavis[561174]: (561174-09) (!!) ask_a

Re: [AMaViS-user] [Possible Spam] SA working, but amavis hangs when calling it.

2006-12-15 Thread Thomas Lau
did you try spamassassin -D --lint ? please post the result after run the command above. -- Thomas G. Lau Powernet, Technical Support Engineer Tel: 852-2189-7222 On Fri, 2006-12-15 at 09:24 +0100, Gregorics Tamás wrote: > Hi, > > I have a little problem with my amavisd-new installation. I "inhe

[AMaViS-user] SA working, but amavis hangs when calling it.

2006-12-15 Thread Gregorics Tamás
Hi, I have a little problem with my amavisd-new installation. I "inherited" a linux system with postfix, amavis and spamassassin installed. However, SA stopped working for some reason. Unfortunately, the server is a mess, any meddling with it could cause it's entire collapse. I did make an upg