Re: [AMaViS-user] notify cut off

2009-05-26 Thread Rudy Gevaert
Thanks Mark! > Try this one, adds @spam_notifyadmin_cutoff_level_maps : > It works. Thank you very much. Would there be a chance to incorporate this upstream? I only needed to change the location of the last hunk. --- amavisd-new.orig2009-05-27 08:27:29.0 +0200 +++ amavisd-new 20

Re: [AMaViS-user] notify cut off

2009-05-26 Thread Rudy Gevaert
Thanks Mark! > Try this one, adds @spam_notifyadmin_cutoff_level_maps : > It works. Thank you very much. Would there be a chance to incorporate this upstream? I only needed to change the location of the last hunk. --- amavisd-new.orig2009-05-27 08:27:29.0 +0200 +++ amavisd-new 20

[AMaViS-user] SMTP rejection message

2009-05-26 Thread Ralf Hildebrandt
I'm using amavisd-new as smtpd_proxy_filter. How can I change the rejection message D_REJECT is producing? It should include something like "SPAM - contact postmas...@... in case of problems" instead of just "SPAM". -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Univ

Re: [AMaViS-user] un-defang?

2009-05-26 Thread Michael Monnerie
On Dienstag 26 Mai 2009 Noel Jones wrote: > The quarantine can be a directory, a unix-style mailbox, an > email address, an SQL database, or a pipe to a script. Great. Didn't know that. Thx! mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660 / 415 65 31

Re: [AMaViS-user] Problem with DKIM signing a particular mail

2009-05-26 Thread Mark Martinec
Matthias, > thanks, I'd be just in general interested how to apply patches. Find where your Mail/DKIM/ directory is, then cd to that directory and apply the patch: # cd /usr/local/lib/perl5/site_perl/5.8.9/ # patch http://p.sf.net/sfu/creativitycat-com __

Re: [AMaViS-user] Problem with DKIM signing a particular mail

2009-05-26 Thread Matthias Schmidt
Mark, thanks, I'd be just in general interested how to apply patches. Am/On Tue, 26 May 2009 15:06:36 +0200 schrieb/wrote Mark Martinec: > >> Am/On Fri, 22 May 2009 19:16:37 +0200 schrieb/wrote Mark Martinec: >> >Thanks! It turns out there is a runaway regexp in Mail::DKIM >> >(in several of the

Re: [AMaViS-user] sql policy spam_tag_level in 2.6.3 being ignored missing headers

2009-05-26 Thread Mark Martinec
Michael, > after upgrading to 2.6.3, I no longer get X-Spam-headers in the email if > they score between 0 and 2. sometimes.. sometimes not. Hmm. > doesn't matter what user, and the headers are always in the quarantine > records. Yes, this is normal, and is independent from passed mail. > as

Re: [AMaViS-user] Problem with DKIM signing a particular mail

2009-05-26 Thread Michael Scheidell
> Matthias, > >> Am/On Fri, 22 May 2009 19:16:37 +0200 schrieb/wrote Mark Martinec: >>> Thanks! It turns out there is a runaway regexp in Mail::DKIM >>> (in several of the more recent version), which your message manages >>> to trigger. When perl runs out of memory the process crashes. >>> I'll no

Re: [AMaViS-user] notify cut off

2009-05-26 Thread Mark Martinec
Rudy, > > If you have spam admin notifications enabled, these are sent > > for every CC_SPAM message (spam score above kill level), > > and there is no cutoff limit. The only cutoff limits are > > the DSN cutoff limit (applies to sender notifications) > > and a quarantine cutoff limit (applies to

Re: [AMaViS-user] un-defang?

2009-05-26 Thread Mark Martinec
Michael, > Being unable to automatically recover the original mail makes the > feature of defanging prevent keeping spam in a file/mbox/IMAP and later > resubmit to SpamAssassin for learning. Is nobody concerned of that? Or > is nobody using the defang feature at all? How do you use defang plus >

Re: [AMaViS-user] snmp initialization

2009-05-26 Thread Mark Martinec
Giuseppe, > Is the locked "state" detectable in some way? Because if > so, maybe there could be some special thing in the "init" script: it > will start amavis in a way to preserve or create the DB > (Amavis::DB::init(1)), and if after a certain timeout amavis is not yet > started or would result

[AMaViS-user] bypass spam check based on subject or header field

2009-05-26 Thread Patrick Hemmen
Hi, it's possible to bypass spam check based on subject or header field? I would like to bypass the spam filter for all emails with the header, e.g. "X-MyOwn Yes". Or it's only possible to search for email addresses, domains and IP-Addresses? Thanks in advance - Patrick -

Re: [AMaViS-user] bypass spam check based on subject or header field

2009-05-26 Thread Rudy Gevaert
Citeren Patrick Hemmen : > > Hi, > > it's possible to bypass spam check based on subject or header field? > I would like to bypass the spam filter for all emails with the > header, e.g. "X-MyOwn Yes". Or it's only possible to search for > email addresses, domains and IP-Addresses? If you ar

Re: [AMaViS-user] Problem with DKIM signing a particular mail

2009-05-26 Thread Mark Martinec
Michael, >| The Mail-DKIM-0.35 is already out and includes the patch > And for the anxious freebsd users out there, the patches for ports have > been submitted. > http://www.freebsd.org/cgi/query-pr.cgi?pr=134964 > > 0.35 will be a required minimum dependency for p5-Mail-SpamAssassin. > > Patch f

Re: [AMaViS-user] notify cut off

2009-05-26 Thread Rudy Gevaert
Thanks for your quick reply Mark, Citeren Mark Martinec : > Rudy, > >> I have setup Amavis to do notification of the admin quarantine. >> >> tag = 2 >> tag2 = tag3 = 6.31 >> kill = dsn_cutoff = 7 >> quarantine_cuttoff = 10 >> >> Now, when a spam message is sent > 10 I still get a notification >>

Re: [AMaViS-user] alway put razor pyzor and dcc result into header

2009-05-26 Thread Mark Martinec
Attila, > is there a way to force Amavis-new to alway put the result of Razor, > Pyzor and DCC check into the mail's header? If I'm right Spamassassin > can do it with: > add_header all Pyzor _PYZOR_ > add_header all DCC _DCCB_; _DCCR_ > > But is there a way to do this in Amavis? For some plugins

Re: [AMaViS-user] amavisd-new 2.6.2-2 failure: PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20090524T224325-13688

2009-05-26 Thread Justin Piszcz
On Tue, 26 May 2009, Mark Martinec wrote: Justin, Package: amavsid-new Version: 2.6.2-2 I am running amavsid-new on Debian Testing and spotted this in the logs the other day: May 25 10:32:37 p34 amavis[13688]: (13688-06) (!)SEND via SMTP: postmas...@my.internal.lan -> , envid=am..2009

Re: [AMaViS-user] notify cut off

2009-05-26 Thread Mark Martinec
Rudy, > I have setup Amavis to do notification of the admin quarantine. > > tag = 2 > tag2 = tag3 = 6.31 > kill = dsn_cutoff = 7 > quarantine_cuttoff = 10 > > Now, when a spam message is sent > 10 I still get a notification > message. Is it possible to switch it off? > > I couldn't find any way t

Re: [AMaViS-user] Amavis not passing to spamassassin or virus scanning

2009-05-26 Thread Mark Martinec
Jason, > I am running the latest amavisd-new. Emails are arriving and are placed > in the mailbox. I do not see any evidence of spamassassin firing or > clamav being invoked. This is logged upon an email being recieved > @bypass_virus_checks_maps = (0); > @bypass_spam_checks_maps  = (0); The s

Re: [AMaViS-user] amavisd-new 2.6.2-2 failure: PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20090524T224325-13688

2009-05-26 Thread Mark Martinec
Justin, > >> Package: amavsid-new > >> Version: 2.6.2-2 > >> I am running amavsid-new on Debian Testing and spotted this in the logs > >> the other day: > May 25 10:32:37 p34 amavis[13688]: (13688-06) (!)SEND via SMTP: > postmas...@my.internal.lan -> , > envid=am..20090525t1432...@my.internal

[AMaViS-user] notify cut off

2009-05-26 Thread Rudy Gevaert
Hello, I have setup Amavis to do notification of the admin quarantine. tag = 2 tag2 = tag3 = 6.31 kill = dsn_cutoff = 7 quarantine_cuttoff = 10 Now, when a spam message is sent > 10 I still get a notification message. Is it possible to switch it off? I couldn't find any way to configure this

Re: [AMaViS-user] un-defang?

2009-05-26 Thread Noel Jones
Michael Monnerie wrote: > But: Is there an option in amavisd to say: "if the message is spam, > defang and send to user PLUS feed original format to an e-mail account"? The quarantine and final_spam_destiny are separate settings. You can save a copy in quarantine while still passing the defange

Re: [AMaViS-user] Problem with DKIM signing a particular mail

2009-05-26 Thread Mark Martinec
Matthias, > Am/On Fri, 22 May 2009 19:16:37 +0200 schrieb/wrote Mark Martinec: > >Thanks! It turns out there is a runaway regexp in Mail::DKIM > >(in several of the more recent version), which your message manages > >to trigger. When perl runs out of memory the process crashes. > >I'll notify the

Re: [AMaViS-user] ripmime

2009-05-26 Thread Noel Jones
Michael Monnerie wrote: > On Montag 25 Mai 2009 Noel Jones wrote: >> use the "ripmime" command to extract the original message from a >> defanged mail, then feed it to sa-learn. > > Can you give a hint how you do that? I just use: cd /tmp/sandbox ripmime -i /path/to/file The original mail, inc

Re: [AMaViS-user] amavisd-new 2.6.2-2 failure: PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20090524T224325-13688

2009-05-26 Thread Justin Piszcz
On Tue, 26 May 2009, Alexander Wirt wrote: > Justin Piszcz schrieb am Tuesday, den 26. May 2009: > >> Package: amavsid-new >> Version: 2.6.2-2 >> >> I am running amavsid-new on Debian Testing and spotted this in the logs >> the other day: > The "mail from" you send is broken: > May 25 11:30:05

Re: [AMaViS-user] amavisd-new 2.6.2-2 failure: PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20090524T224325-13688

2009-05-26 Thread Alexander Wirt
; admin: 401 4.1.7 TempFailed, id=13688-06, from MTA([127.0.0.1]:10025): 401 > 4.1.7 Bad sender address syntax at /usr/sbin/amavisd-new line 12548. (in > reply to end of DATA command)) > May 25 10:32:50 p34 postfix/smtpd[997]: disconnect from > mail.zepter.ro[212.146.103.126] &g

[AMaViS-user] amavisd-new 2.6.2-2 failure: PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20090524T224325-13688

2009-05-26 Thread Justin Piszcz
pture all necessary information (hopefully) required: http://home.comcast.net/~jpiszcz/20090526/mail.log As well as the EVIDENCE directory (this contains the attachment from the e-mail, which is Worm.Gibe.F): http://home.comcast.net/~jpiszcz/20090526/amavis-20090525T235848-16067.tar.gz # file email.t