[AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Peter Huetmannsberger
Hi, just wondering, I have updated clamd on all my machines, mostly running RH9 to RHEL4 and CentOS4, and after the update clamd does not create the socket immediately. It seems to take up to three minutes, before it decides to create a socket, at whatever the location. After that it is

[AMaViS-user] How to set a spam sender whitelist/blacklist with LDAP

2007-06-05 Thread Javier Amor García
Hello, i am trying to set up a spam sender whitelist/blacklist, I need to be able to retrieve the lists from a LDAP server. I had included the amavis' LDAP schema and added the correct attributes but amavid-new don't triggers the LDAP lookup for whitelist. We can discard LDAP configuration

Re: [AMaViS-user] How to set a spam sender whitelist/blacklist with LDAP

2007-06-05 Thread Javier Amor García
I had forgotten to report the amavisd-new version I am using. In the changelog file is labeled as Patch: amavisd-new-20030616-p10 and the file is dated at June 29, 2004. It is the debian oldtable package Cheers, Javier El mar, 05-06-2007 a las 09:34 +0200, Javier Amor García escribió: Hello,

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Marius Sturm
Am Dienstag, den 05.06.2007, 09:34 +0200 schrieb Peter Huetmannsberger: yes, the same here on debian etch. Seems clamd now needs very long time to read the signature database. marius. I have updated clamd on all my machines, mostly running RH9 to RHEL4 and CentOS4, and after the update clamd

Re: [AMaViS-user] Can't connect to UNIX socket /va r/run/clamav/clamd:

2007-06-05 Thread Mark Martinec
Hans, Actually, I did it both ways: amavis added to group clamav and clamav added to group amavis. [...] This certainly solved the problem. I'm still wondering why it doesn't work the other way, but I'll have another look at that later. It seems this problem is affecting certain

Re: [AMaViS-user] Can't connect to UNIX socket /va r/run/clamav/clamd:

2007-06-05 Thread Mark Martinec
Just in case, please try to become user clamav, and try accessing (for reading) some amavis temporary files in its .../parts/ subdirectories. P.S. does clamd complain in its log about 'initgroups' failing or not being supported? Mark

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Michael Scheidell
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marius Sturm Sent: Tuesday, June 05, 2007 4:49 AM To: Amavis ML Subject: Re: [AMaViS-user] Clamd-90.3 acting strangely Am Dienstag, den 05.06.2007, 09:34 +0200 schrieb Peter Huetmannsberger:

Re: [AMaViS-user] altermime and tempdir

2007-06-05 Thread Michael Scheidell
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis A.Kanevsky Sent: Tuesday, June 05, 2007 1:11 AM To: Mark Martinec Cc: amavis-user@lists.sourceforge.net Subject: Re: [AMaViS-user] altermime and tempdir - Unexpected file

[AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread Martin Svensson
Hi all, I'm planning for an upgrade of our existing RHEL3, sendmail-milter+amavis setup handling roughly 130,000 messages/day. I know this might be more about SA than amavis, but it's such a good list! :) I hope it's ok.. The setup has worked very well since the initial install 2 years ago,

Re: [AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread Matthias Haegele
Martin Svensson schrieb: Hi all, I'm planning for an upgrade of our existing RHEL3, sendmail-milter+amavis setup handling roughly 130,000 messages/day. I know this might be more about SA than amavis, but it's such a good list! :) I hope it's ok.. The setup has worked very well since

Re: [AMaViS-user] Error in template?

2007-06-05 Thread Jim Knuth
vor 3 Tagen (02.06.2007/23:58 Uhr) schrieb Jim Knuth, I use [? %q |Not quarantined. | The message has been quarantined as: %q] in template notify_virus_recips.txt. And $final_virus_destiny = D_DISCARD; # (defaults to D_BOUNCE) $final_banned_destiny = D_DISCARD; # (defaults

Re: [AMaViS-user] Can't connect to UNIX socket /va

2007-06-05 Thread lists . amavis-user
Hallo Mark, Op dinsdag 05 juni 2007 schreef Mark Martinec aan amavis-user@lists.sourceforge.net: Actually, I did it both ways: amavis added to group clamav and clamav added to group amavis. [...] This certainly solved the problem. I'm still wondering why it doesn't work the other way,

Re: [AMaViS-user] Can't connect to UNIX socket /va

2007-06-05 Thread lists . amavis-user
Hallo Mark, Op dinsdag 05 juni 2007 schreef Mark Martinec aan amavis-user@lists.sourceforge.net: MM P.S. does clamd complain in its log about 'initgroups' MM failing or not being supported? No complaints at all. Groeten, Hans. jdh punt beekhuizen bij duinheks punt xs4all punt

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Gary V
Michael wrote: Am Dienstag, den 05.06.2007, 09:34 +0200 schrieb Peter Huetmannsberger: yes, the same here on debian etch. Seems clamd now needs very long time to read the signature database. Same on Freebsd, 5.5 Hmm. I also run etch on P4 2.0: Tue Jun 5 09:46:37 2007 - clamd

Re: [AMaViS-user] Can't connect to UNIX socket /va

2007-06-05 Thread Gary V
lists wrote: Hallo Mark, MM It seems this problem is affecting certain installations and is MM reported every now and then, but is not affecting most of the MM rest. It would be useful to locate the cause of it. It may be MM related to the version of clamd, to the OS, and to the version

Re: [AMaViS-user] Can't connect to UNIX socket /va

2007-06-05 Thread lists . amavis-user
Hallo Gary, Op dinsdag 05 juni 2007 schreef Gary V aan amavis-user@lists.sourceforge.net: GV Are you running AppArmor or SELinux? No. Groeten, Hans. jdh punt beekhuizen bij duinheks punt xs4all punt nl --- GoldED+/LNX 1.1.5/070407 * Origin: The Wizard is using MBSE/Linux

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Peter Huetmannsberger
Thanks you for all your comments, at least I know now, I haven't gone compeletly gaga. I don't know, in fact I don't think it has anything to do with reading the signature files. I had the log open, when it said Tue Jun 5 09:07:09 2007 - Reading databases from /var/clamav Tue Jun 5

Re: [AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread MrC
The setup has worked very well since the initial install 2 years ago, we're running standard SA with DCC+Bayes+AWL etc. Now that we're doing an overhaul I'm thinking about adding some additional plugins and would like to hear your opinions. Stability is our main concern, so I'm not very

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Gary V
Peter wrote: Thanks you for all your comments, at least I know now, I haven't gone compeletly gaga. I don't know, in fact I don't think it has anything to do with reading the signature files. I had the log open, when it said Tue Jun 5 09:07:09 2007 - Reading databases from /var/clamav

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Marius Sturm
Hello, on a P4, it takes about 2 Minutes to restart clamd while amavis is running and falling back to clamscan. Maybe the double access to the signature file waste alot of time. Marius. Tue Jun 5 19:46:04 2007 - +++ Started at Tue Jun 5 19:46:04 2007 Tue Jun 5 19:46:04 2007 - clamd daemon

Re: [AMaViS-user] Can't connect to UNIX socket /va

2007-06-05 Thread Bill Landry
[EMAIL PROTECTED] wrote the following on 6/5/2007 8:33 AM -0800: Hallo Mark, Op dinsdag 05 juni 2007 schreef Mark Martinec aan amavis-user@lists.sourceforge.net: Actually, I did it both ways: amavis added to group clamav and clamav added to group amavis. [...] This certainly solved

Re: [AMaViS-user] Clamd-90.3 acting strangely

2007-06-05 Thread Gary V
Marius wrote: Hello, on a P4, it takes about 2 Minutes to restart clamd while amavis is running and falling back to clamscan. Maybe the double access to the signature file waste alot of time. Marius. Tue Jun 5 19:46:04 2007 - +++ Started at Tue Jun 5 19:46:04 2007 Tue Jun 5 19:46:04

Re: [AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread Mark Martinec
Martin, - p0f. How well does it work? Is it very effective? It is helpful, but score most not be too aggressive, as there are some companies running their MTA on windows. Here are my current rules: header L_P0F_WXP X-Amavis-OS-Fingerprint =~ /^Windows XP(?![^(]*\b2000 SP)/ score L_P0F_WXP

Re: [AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread Tomasz Chmielewski
Mark Martinec schrieb: Use both. (but not pyzor) Hmm, why not? It's not updated anymore, right? -- Tomasz Chmielewski http://wpkg.org - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE

[AMaViS-user] AMaViS Security Announcement: file utility integer underflow / possible DoS

2007-06-05 Thread Mark Martinec
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 === AMaViS Security Announcement Date: 2007-06-05 affected version(s):amavis, amavisd, amavisd-new Vulnerability: file

Re: [AMaViS-user] Experiences.. (mostly SA)

2007-06-05 Thread Mark Martinec
(but not pyzor) Hmm, why not? It's not updated anymore, right? I haven't checked the valuability of its score points it brings recently, but compared to dcc and razor, the pyzor is the most CPU-intensive. Mark - This