Re: [AMaViS-user] Deliver quarantined message

2007-03-21 Thread Rocco Scappatura
Check amavisd.conf and see if you have a $unix_socketname configured. Make a note of the current setting if it exists. If it does not, then configure it. There is a program called amavisd-release. It comes with the source code. You may have to edit the $socketname in amavisd-release to

Re: [AMaViS-user] Deliver quarantined message

2007-03-21 Thread Leon Kolchinsky
Hello, I have a relay SMTP server system Amavisd-new+Postfix+MySQL-based. I have configured spamassassin to quarantine spam message. Now I would like to know a simple way to release a quarantined message after, for example, I have verified that the message is a false positive..

[AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Robert Brooks
Hi, from the release notes... - phishing fraud as returned by ClamAV is now treated as spam, no longer as a virus; great, this was my biggest annoyance with clam's phishing detection, does the email make it to bayes though? Regards, Rob

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Robert Brooks
great, this was my biggest annoyance with clam's phishing detection, does the email make it to bayes though? Yes it does. SA checks are invoked normally, and virus flag is turned off. ah, does SA get any indication that clamav thinks the email is a phish? Otherwise I guess turning off

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Mark Martinec
Bob, ah, does SA get any indication that clamav thinks the email is a phish? No, currectly not. An artificial header field could be inserted I guess, but for the moment I don't think it is really needed, these phishing scams collect enough spam points by themselves. Otherwise I guess turning

[AMaViS-user] Servers started using clamscan, not clamd

2007-03-21 Thread Jason Byrns
I have two email servers, both recently started scanning email with clamscan instead of clamd. This obviously puts an unreasonable load on the servers. They worked fine for a long time, but package updates in the last few months seem to have caused a problem. (I have disabled virus scanning

Re: [AMaViS-user] Servers started using clamscan, not clamd

2007-03-21 Thread Dan Horne
Clam's package was updated several times in February and March, and Amavis was updated in early February. Newer versions of Clam changed the format of the conf files. All options now require values. For example, you used to be able to put in a config option 'FixStaleSocket' whose very

Re: [AMaViS-user] Servers started using clamscan, not clamd

2007-03-21 Thread Jason Byrns
Who owns /var/run/clamav ? Let's assume it is owned by clamav Correct. If so, you would want: LocalSocket /var/run/clamav/clamd User clamav Already set that way. AllowSupplementaryGroups yes This is not turned on, but the same default configuration works just fine on my test server.

Re: [AMaViS-user] the favor of your opinion appreciated ...

2007-03-21 Thread Mark Martinec
Larry, I note with interest the two excerpts from the recommended debug below the sig. About your second item: 2. /usr/local/sbin/amavisd[1813]: INFO: no optional modules: DBD::mysql Sys::Hostname::Long Mail::SPF::Query Razor2::Client::Agent Net::CIDR::Lite

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Bill Landry
Mark Martinec wrote the following on 3/21/2007 6:51 AM -0800: Bob, ah, does SA get any indication that clamav thinks the email is a phish? No, currectly not. An artificial header field could be inserted I guess, but for the moment I don't think it is really needed, these phishing

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Mark Martinec
Bill, I like the artificial header idea. If you could at least make it an optional flag that would be great. Would be nice to be able to add a few SA points if ClamAV detects phish, image, scam, etc., messages, otherwise it doesn't make much sense to use the additional ClamAV signature

Re: [AMaViS-user] phishing fraud spam in 2.5.0-pre3

2007-03-21 Thread Bill Landry
Mark Martinec wrote the following on 3/21/2007 12:51 PM -0800: Bill, I like the artificial header idea. If you could at least make it an optional flag that would be great. Would be nice to be able to add a few SA points if ClamAV detects phish, image, scam, etc., messages, otherwise it