Re: [AMaViS-user] Increase in missing header reports.

2010-02-16 Thread Alan Munday
Mark Martinec wrote the following on 12/02/10 19:45: I've seen a marked increase in bad header reports which I paid little attention to initially but I've just taken some time to look into some of these as some of the senders are routers, webcams, etc where previously these were not a problem.

[AMaViS-user] Increase in missing header reports.

2010-02-12 Thread Alan Munday
Hi I've seen a marked increase in bad header reports which I paid little attention to initially but I've just taken some time to look into some of these as some of the senders are routers, webcams, etc where previously these were not a problem. For the routers I'm seeing missing headers

Re: [AMaViS-user] Selective signing with altermime.

2009-12-09 Thread Alan Munday
Mark Martinec wrote the following on 09/12/09 16:19: If it suffices to base the decision on these mail header fields, you can supply a small custom hook which loads a policy bank, which can do whatever you want, like disabling adding disclaimers when loaded. amavisd.conf:

[AMaViS-user] Selective signing with altermime.

2009-11-27 Thread Alan Munday
I've set-up a site to use altermime to sign all outbound mail and all's been working well for some months now. Some of the Outlook users have now complained that they don't like the signing at the bottom of the mail when they reply to an email. While this is clearly due to MS encouraging people

[AMaViS-user] Adding an image in an html Altermime disclaimer

2009-07-07 Thread Alan Munday
I have both text and html disclaimers working and have been asked to include a company logo to the html disclaimer. html is not an area of expertise, but I've been trying to use the following to include the image: img src=/etc/amavisd/logo.png width=160 height=139 alt=Company Logo This arrives

[AMaViS-user] DKIM docs.

2009-03-10 Thread Alan Munday
Looking at http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim should *...@googlemail.com be defined for both the whitelist_from_dkim and def_whitelist_from_dkim ? Alan --

Re: [AMaViS-user] First go at DKIM signing filtering.

2009-03-09 Thread Alan Munday
Mark Martinec wrote the following on 09/03/09 20:24: Alan, Right, adding a dedicated alias IP or a dedicated port number for mail arriving from your MX relays would be the cleanest solution. A smtpd service bound to that IP or port can have on -o option (e.g. -o

[AMaViS-user] First go at DKIM signing filtering.

2009-03-08 Thread Alan Munday
I've just used Lukasz Trabinski rpm's to put amavisd-new 2.6.1 onto a couple of Fedora 10 box's. I'm doing this so I can configure DKIM signing and virus scanning for outbound mail. Inbound mail to these nodes has already been filtered by my box's outside the local network. Firstly, having

Re: [AMaViS-user] Details of defang action

2008-05-20 Thread Alan Munday
Mark Martinec wrote: Is it possible to turn on more detailed reporting in the headers of what the defang action was, e.g. attachment x was removed from the message? X-Amavis-Modified: Mail body modified (defanged) by mx1.example.com I'd like to be able to get more detail into the logs and

Re: [AMaViS-user] Details of defang action

2008-05-07 Thread Alan Munday
Jo Rhett wrote: Wrong mailing list? amavis doesn't defang ... O.K. I'm looking to get more details in the amavis header entries: X-Amavis-Modified: Mail body modified (defanged) by mx1.example.com Which I presume come from config file entries such as: $defang_virus = 1; # MIME-wrap

[AMaViS-user] Details of defang action

2008-05-06 Thread Alan Munday
I've recently seen an increase of mails that are being defanged. Is it possible to turn on more detailed reporting in the headers of what the defang action was, e.g. attachment x was removed from the message? I'm currently running at log level 2. At what log level does defang detail get added

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitable security vulnerability in file(1) utility

2007-03-29 Thread Alan Munday
Alexander Bergolth wrote the following on 29/03/2007 10:37: But using the following attached patch for the SPEC-file, it will even build on FC1. Alexander I tried patching the spec file and building on FC5 tonight... but it still fails to build and at the same point that it failed without

Re: [AMaViS-user] AMaViS Security Announcement ASA-2007-1: exploitable security vulnerability in file(1) utility

2007-03-28 Thread Alan Munday
Mark Martinec wrote the following on 23/03/2007 16:22: === AMaViS Security Announcement Solution: update to file 4.20 or later -

Re: [AMaViS-user] p0f sql

2007-03-15 Thread Alan Munday
Mark Martinec wrote the following on 16/12/2006 01:35: Alan, In 2.4.4 I've uncommented the # , p0f=? in the sql statement. As this is not logging into the p0f field in msgs I presumed some additional changes are still required? The -execute part of the patch is needed too. Here is the

Re: [AMaViS-user] First public pre-release (-pre2) of amavisd-new-2.4.5

2007-01-25 Thread Alan Munday
Mark Martinec wrote the following on 24/01/2007 23:13: http://www.ijs.si/software/p0f-analyzer.pl Mark Thank you. Alan - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and

Re: [AMaViS-user] First public pre-release (-pre2) of amavisd-new-2.4.5

2007-01-24 Thread Alan Munday
Mark Martinec wrote the following on 23/01/2007 16:55: If using p0f-analyzer, please switch soon to a version of p0f-analyzer.pl as supplied with 2.4.5-pre2 (or later). Mark Could you post a download link for p0f-analyzer? Then those who use it independently of amavisd-new (as if there would

Re: [AMaViS-user] maRBL dies quietly, no error

2007-01-19 Thread Alan Munday
Gary Buckmaster wrote the following on 19/01/2007 15:57: I had looked at that as a stop-gap measure until I figured out what was going wrong with maRBL. Unfortunately, maRBL would come back up and then die almost immediately again. I spoke, briefly, with Ian (the author of maRBL) and Mark

Re: [AMaViS-user] p0f sql

2006-12-15 Thread Alan Munday
Mark Martinec wrote the following on 17/10/2006 13:51: You mean how to store p0f fingerprint to SQL logging database? Try the following: - add a field 'p0f' to table msgs: ALTER TABLE msgs ADD p0f varchar(255) DEFAULT ''; - and apply the following change to amavisd: ---

[AMaViS-user] p0f sql

2006-10-17 Thread Alan Munday
Has anyone posted information on how to update the (my)sql tables to support p0f? thanks Alan - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated

Re: [AMaViS-user] p0f sql

2006-10-17 Thread Alan Munday
Mark Martinec wrote the following on 17/10/2006 13:51: Alan, Has anyone posted information on how to update the (my)sql tables to support p0f? You mean how to store p0f fingerprint to SQL logging database? Try the following: - add a field 'p0f' to table msgs: ALTER TABLE msgs

Re: [AMaViS-user] p0f sql

2006-10-17 Thread Alan Munday
Mark Martinec wrote the following on 17/10/2006 14:55: Alan, I was checking if a field needs to be added to the policy table so that sql_select_policy would handle os_fingerprint_method as required. No new fields are needed in SQL tables in order for p0f to work. See RELEASE_NOTES,

Re: [AMaViS-user] p0f sql

2006-10-17 Thread Alan Munday
Mark Martinec wrote the following on 17/10/2006 15:47: Alan, I was trying to make sure I understood how you implemented $policy_bank{'MYNETS'}{os_fingerprint_method} = undef; when the policies are in SQL tables. Don't mix policy banks with SQL lookup policy table. There is an

[AMaViS-user] Upgrade from Fedora Core 4 to 5

2006-05-05 Thread Alan Munday
Further to my earlier post, and re-checking the SMTP connectivity (as suggested by someone off-list). Connecting to Amavis is OK telnet 127.0.0.1 10024 Trying 127.0.0.1... Connected to mx1.domain.com (127.0.0.1). Escape character is '^]'. If it arrives there is an extended delay in getting

Re: [AMaViS-user] Upgrade from Fedora Core 4 to 5

2006-05-05 Thread Alan Munday
Mark telnet 127.0.0.1 10024 Trying 127.0.0.1... Connected to mx1.domain.com (127.0.0.1). Escape character is '^]'. If it arrives there is an extended delay in getting the 220 from amavis 220 [127.0.0.1] ESMTP amavisd-new service ready However, most of the time there is no 220 coming from

Re: [AMaViS-user] Upgrade from Fedora Core 4 to 5

2006-05-05 Thread Alan Munday
Alan Munday wrote the following on 05/05/2006 17:36: Alan Munday wrote the following on 05/05/2006 15:20: Mark telnet 127.0.0.1 10024 Trying 127.0.0.1... Connected to mx1.domain.com (127.0.0.1). Escape character is '^]'. If it arrives there is an extended delay in getting the 220 from amavis

[AMaViS-user] Upgrade from Fedora Core 4 to 5

2006-05-04 Thread Alan Munday
I've upgraded a box to fedora 5 today. There were no application upgrades as the core 4 was running Postfix 2.2.10, Amavisd-new 2.4, Spamassassin 3.1.1. Things look like they are OK, but the Postfix queue is backing up. Turning up the log level I can see the following time-out problem: May

Re: [AMaViS-user] RPM's

2005-09-26 Thread Alan Munday
Mike Cisar wrote the following on 26/09/2005 16:19: From what I understand (2nd or 3rdhand now) apparently DAG is concentrating on FC3 and previous versions, but FC4 versions of all his packages are available through the RPMForge project at rpmforge.net Supposedly all the same packages

Re: [AMaViS-user] sql based whitelisting

2005-08-26 Thread Alan Munday
Paul My reading of your logs is that the RID matches but you don't get a SID match when tested against the query keys. Hence no WBlist adjustment. Can you add an explicit record in your wblist table for this explicit sender and retest, or check for typo's in your existing data? HTH Alan

Re: [AMaViS-user] amavisd-new mysql lookups

2005-07-04 Thread Alan Munday
Peter van den Berg wrote the following on 03/07/2005 15:45: I'm trying to get amavisd-new to work with my virtual mysql postfix setup. But I can't find a good tutorial on how to do this. And from the include documentation i'm not getting anywhere. can someone post an example db config +

[AMaViS-user] VERP addressing and maddr in SQL

2005-06-09 Thread Alan Munday
I've been running with SQl enabled for a few weeks now. Looking at the maddr table it has thousands of VERP addressed mail records. I've searched for information on maintaining this table but have yet to find it. Is it intended that Admins delete these records manually or should some other