...@belfin.ch, Message-ID: 201102102126.35184.x...@xx.xx,
mail_id: gbm51t1dgDsf, Hits: -, size: 3947, queued_as: BA49818E002, 187 ms
My gateways are no open relays. What are circumstances that amavisd-new
will log RelayedOpenRelay?
Thanks,
John
for. I mostly agree with Giampaolo.
The idea is to make statistics what OS'es connect to my servers and
display this information graphically.
There is no intend to use this information to fight spam.
John
--
Special Offer
Hi
checking the p0f website last developments date back to 2006. No visible
activity ever since.
Does it make sense today to use p0f to find out about the clients that
connect to port 25? Or are p0f signatures completely outdated?
thanks,
John
to correctly discriminate the incoming
message. But I'm absolutely not trusting this.
I don't want to fight spam with p0f. My primary concern is to find out
what sort of clients connect to my MX'es and use this information for
statistical reasons. Is the detection good enough for that?
John
. Which is why I prefer to not rely on them.
I think that are not really the results I'm looking for.
Thanks
John
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management
Installing amavisd-new on a FreeBSD 8.1 box. I've installed drweb from
ports but I can't seem to get the configuration to work correctly in
amavisd.conf. I'm not exactly sure which lines I need to uncomment and
if there are any changes need to make. Does anybody have a
configuration that works?
I
On Thu, 06 May 2010 00:26:36 -0500, Noel Jones njo...@megan.vbhcs.org
wrote:
On 5/5/2010 10:00 PM, John Robinson wrote:
Hello all,
As this is my first post to this list, please bear with me if my
description or supplied info is not all that is required.
I have 2 mail gateways running
, being my first post, if there is any other info I can
provide that would be useful please let me know and I will post up.
Any help you can provide to assist me resolve this problem is greatly
appreciated.
Thanks in advance.
Regards John
is another no-no.
--
Sincerely,
John Thomas
--
Download Intel#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See
Just wondering if anybody has updated their configuration to support
the latest release of NOD32? Would you be willing to share your
changes or will the 3.0 config work fine?
--
Let Crystal Reports handle the reporting -
troxlinux xserverli...@gmail.com schreef in bericht
news:a2c6daca0903271121m6c44ca12g8e2fefb37630f...@mail.gmail.com...
2009/3/25 John jknappers-argen...@hotmail.com:
Hi, Troxlinux,
The problem is that you mix packages from different repositories or
origin.
You use clamav-0.94.2-1.el5.rf
the specfile I use to build Amavisd-new
4 There are of course more solutions...
Success.
John
--
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross
.*?: ([^\r\n]+)/m ],
Let me know if it helps.
Thanks that did the job, and it's successfully spotted an Eicar message,
excellent!
John.
--
John Beranek To generalise is to be an idiot.
http://redux.org.uk/ -- William Blake
-10
220 Ready
SCAN /tmp/xorg.conf.16465
200 OK
QUIT
221 Connection closed
Thanks in advance,
John.
--
John Beranek To generalise is to be an idiot.
http://redux.org.uk/ -- William Blake
Jo Rhett wrote:
The following spam status report claims to be whitelisted. However
this simply isn't true. I have no global whitelist entries, and only
a single personal whitelist entry -- and it's certainly not me. I
also sent a test message to myself and confirmed that it doesn't
On Sat, Oct 25, 2008 at 8:01 AM, Wojtek Bogusz [EMAIL PROTECTED] wrote:
i am not sure what can i do to help it.
Add memory. A properly configured server will never fill swap.
The processor is a little lightweight admittedly, but if you don't run
X on it it should do ok. How long did it
Rocco Scappatura wrote:
Hello.
I have scheduled a cronjob to update rulesets of spamassassin:
sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel
updates.spamassassin.org /usr/sbin/rcamavisd reload
I do this same thing, except instead of doing a reload I do:
Tomáš Macek wrote:
What do I want:
I want to check all the emails including the ones being send between
computers inside @mynetwork. Only when mail goes outside of
@mynetwork, it shouldn't be checked.
Unless your network sends tons of spam, the outbound mail is the
smallest segment of
On Sun, Oct 12, 2008 at 2:12 AM, mouss [EMAIL PROTECTED] wrote:
John Andersen a écrit :
We scan mail inbound and outbound via Amavisd-New. (2.4.3 via Opensuse).
Occasionally someone will send something outbound that might get flagged
as spammy. Amavis then attaches our recipient delimiter
On Sun, Oct 12, 2008 at 12:56 PM, Sahil Tandon [EMAIL PROTECTED] wrote:
John Andersen [EMAIL PROTECTED] wrote:
I can see it in the logs.
I use 2.6.1; just sent a SPAMMY test email to [EMAIL PROTECTED]
as well as [EMAIL PROTECTED] The former was sent
without an address extension while +spam
, because I set the threshold at 5.
I've not seen a lot of this so I'm not too worried, but then I don't
scan my spam folder for false positives very often, so maybe I'm missing
more email...
John.
--
John Beranek To generalise is to be an idiot.
http://redux.org.uk
|earnmoney|foryou)@'i =
5.0],
Now I know the existence of these soft-blacklist items, I think I'll
turn them _all_ off!
John.
--
John Beranek To generalise is to be an idiot.
http://redux.org.uk/ -- William Blake
We scan mail inbound and outbound via Amavisd-New. (2.4.3 via Opensuse).
Occasionally someone will send something outbound that might get flagged
as spammy. Amavis then attaches our recipient delimiter +spam on the
outbound mail, all of which bounce.
Is there anyway to prevent Plus addressing
their email-based services, but they seem to be a heavy
cause of the recent rash of complaints that I've seen on many other
mailing lists that I monitor.
--
John Evans
Administrator of kilnar.com
-
This SF.net email is sponsored
171.
I'd use cpan as root and do this once in cpan:
install Compress::Zlib
If it asks for prerequesites to Compress::Zlib, allow cpan to install
it.
--
John Evans
Administrator of kilnar.com
-
This SF.net email is sponsored
-c count
to amavisd-nanny and amavisd-agent to limit the repeat count
of a display, so '-c 1' will avoid a need for the 'limit' trick.
Thanks for pointing out a usage deficiency.
Mark,
Great addition to the program! Thanks for adding this.
--
John Evans
Administrator of kilnar.com
postfix: 2.4.7-1
amavisd-new: 2.4.2-6.2
clamav: 0.91.2-3
spamassassin: 3.2.4-0
Thanks!
--
John Evans
Administrator of kilnar.com
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008
:
http://spamlinks.net/prevent-secure-backscatter.htm
--
Sincerely,
John Thomas
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt
postfix: 2.4.7-1
amavisd-new: 2.4.2-6.2
clamav: 0.91.2-3
spamassassin: 3.2.4-0
Thanks!
--
John Evans
Administrator of kilnar.com
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008
Hi there!
I'm running Qmail, and on the same system I run
postfix as a smart host or spam firewall.
Qmail listens on x.x.x.42 and postfix listens on
x.x.x.43
From what I read, this setup might be causing the
error in question. My question is: would anyone know
specifically why this is
On Mon, 10 Dec 2007, Sahil Tandon wrote:
* John Evans [EMAIL PROTECTED] [2007-12-10 14:48:03 -0700]:
Am I missing something here? Is there a web page that documents how to
do this? I've searched the web and mailing list archives, and this is
the config that I came up with, but it's
the second scanning comes into play. Since most (about 93%) of
my mail is spam, I figured I could reduce my load quite a bit by not
scanning emails that originate from localhost (thus, preventing the
scanning of items forwarded to [EMAIL PROTECTED])
--
John Evans
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
i compared your trace against my working system.
At the end of your trace i see lines like
select(0, NULL, NULL, NULL, {10, 0}) = 0 (Timeout)
this is where amavisd waits for input on the configured tcp
John [EMAIL PROTECTED] schreef in bericht news:...
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
the interesting thing is normally at the end: where amavisd hangs. So
just send the last 100 lines.
Also have a look at the file. Maybe you see
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
the interesting thing is normally at the end: where amavisd hangs. So
just send the last 100 lines.
Also have a look at the file. Maybe you see failing systemcalls or
interesting error messages
John [EMAIL PROTECTED] schreef in bericht news:...
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
the interesting thing is normally at the end: where amavisd hangs. So
just send the last 100 lines.
Also have a look at the file. Maybe you see
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
the interesting thing is normally at the end: where amavisd hangs. So
just send the last 100 lines.
Also have a look at the file. Maybe you see failing systemcalls or
interesting error messages
David Filion [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
John wrote:
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
the interesting thing is normally at the end: where amavisd hangs. So
just send the last 100 lines.
Also have
this problem?
Regards
John
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
just some wild guesses:
Have you disabled selinux? If not, do so in /etc/sysconfig/selinux.
Yes, selinux is disabled
If this doesn't help, maybe running the blocking command under strace
gives you
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
also remove the following line form /etc/sudoers:
Defaultsrequiretty
sa-compile seems to use sudo. This does not work in scripts, when the
requiretty entry is in /etc/sudoers. But this entry
Hello,
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
just some wild guesses:
Have you disabled selinux? If not, do so in /etc/sysconfig/selinux.
If this doesn't help, maybe running the blocking command under strace
gives you some hints.
strace -o
Matthias Weigel [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
Hello John,
i think you just traced the su command, not amavisd.
try adding -f option to strace or better do it step by step:
first
su - amavis
then
strace -f -o /tmp/amavisstrace /usr/sbin/amavisd debug
=0, TVD_SPACE_RATIO=2.219]
I am using amavisd-new with clamav 91.1. Where can I adjust this scoring?
john beaver
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now
Mark Martinec wrote:
John,
I'm still getting a few ZIPs, PDF, etc. getting though. I just noticed
this scoring in one of the headers. Note the score for the
sanesecurity=0.1:
Res, score=5.819 tagged_above=2 required=4
tests=[AV:Email.Stk.Gen592.Sanesecurity.07071801.pdf=0.1,BAYES_99
of controversy about added a disclaimer, but if Company management
wants this policy, IT has to implement it.
So I'm not trying to invoke a discussion or flame about to add or not to add
a disclaimer
Regards,
John
Hello,
Could you please tell me how to change the calling of clamd from
/var/run/clamav/clamd.sock to 127.0.0.1:3310 in amavisd.conf.
Many thanks.
John Fox
-
This SF.net email is sponsored by DB2 Express
Thank you you help is gratefully appreciated.
John Fox
- Original Message -
From: Mark Martinec [EMAIL PROTECTED]
To: amavis-user@lists.sourceforge.net
Sent: Thursday, June 28, 2007 10:07 AM
Subject: Re: [AMaViS-user] Amavisd and clamd
John,
Could you please tell me how to change
are no longer unnecessarily UTF-8 encoded. My thanks also
to Jim Knuth for pointing this out aswell.
Man, this mailing list really rocks! :-)
[Reawakening an old thread, because I just solved the problem myself...]
It should be noted that libnet-1.21 is now out, which also fixes the
problem.
John
on a user level? I don't see any attribute in the
schema that would allow the deletion of spam. I see
final_destination_spam in the config file that I can
use, but I would like to override it in a user level
so that one user can delete spam, the other user can
mark and send spam. Thank you.
Hi. These two attributes are used in the amavisd ldap
schema. Are they for spam or ban? We would like to
create a basic mailing list that bans all mail not
coming from any member of the mailing. We thought we
can add the members to the whitelist and block
everything else with the blacklist. Can
When we enable LDAP in the amavisd conf file, we get
this error message. But if we don't enable ldap,
everything works fine.
(host 127.0.0.1[127.0.0.1] said: 421 4.3.2 Service
shutting down, closing channel (in reply to RCPT TO
command))
LDAP amavis settings.
$enable_ldap = 1;
$default_ldap =
Oh. We are using .94 version of Net::Server if that
helps or hurts?
Cheap talk?
Check out Yahoo! Messenger's low PC-to-Phone call rates.
http://voice.yahoo.com
After running debug, I found it. Just some change in
LDAP from the development to the test system that was
changed by one of the other engineers. Thanks.
Do you Yahoo!?
Everyone is raving about the all-new
way to use/configure sa-learn with my setup?
I hope I've given enough details, any help will be gratefully received.
Kind regards,
John
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel
Amavisd-new / SA use the with sa-update
retrieved new rules with the different versions of Amavisd-new / SA?
Thanx in advance.
John
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done
Peter Huetmannsberger [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
On Mon, 23 Oct 2006, John wrote:
Hello list,
I'm confused on how Amavisd-new and Spamassassin sa-update interact.
There
are several previous posts that didn't clear things by me.
Versions:
SA 3.1.7
Mark Martinec [EMAIL PROTECTED] schreef in bericht
news:[EMAIL PROTECTED]
John,
Mark,
Thanx for the quick response
I'm confused on how Amavisd-new and Spamassassin sa-update interact.
There are several previous posts that didn't clear things by me.
Versions: SA 3.1.7, Amavisd-new 2.3.3
milter setup)? Or do I need to upgrade to version 0.94?
I also red that there are some Perl bug issues with older Perl versions.
Does anybody has experience on
Perl 5.8.1 (SuSE 9.0)
Perl 5.8.3 (SuSE 9.1 / SLES 9)
Perl 5.8.5 (SuSE 9.2)
Thanx in advance
John
,
John
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief surveys -- and earn cash
http
That works. Thank you. It uses local though, which is set to the quarantine
directory. Is there anyway to specify the full path to a different
directory?
_
On the road to retirement? Check out MSN Life Events for advice on how to
Greetings. We would like to keep a copy of all messages that are filtered
for backup purposes. We tried postfix always_bcc, but it does not write to
directories. It only writes to email addresses. All we want is to backup all
the mail sent/received to a directory. Thanks for any help.
$which_section = aux_quarantine doesn't appear in the amavisd.conf file.
Does it require recompiling Amavisd with special options to get this option
in the conf file?
_
Express yourself instantly with MSN Messenger! Download today
I have not been able to find any help on how to connect amavisd-new +
openldap? Where is that in the documentation? Such as (for postfix)
server_host =
query_filter =
result_attribute =
result_format =
scope =
version =
But what is amavisd-new's format? And what variable %, @, ? do you use to
Sorry. I found it in the downloads. I emerged from gentoo and it's not there
in the emerged packages. But if you manually download the zip, the
documentation is there.
_
Dont just search. Find. Check out the new MSN Search!
= $forward_method;
This worked for me. I just had to experiment until I found this
section. Thanks
john
---
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media
it's listening on both ports.
What do I need to do to get the return path set correctly for each
instance? The ports specified in master.cf is 10025 and 10027 in each
respective master.cf.
john
---
This SF.Net email is sponsored by xPML
?
$notify_spam_sender_templ =
read_text('/home/amavis/template-spam-sender.txt');
-Original Message-
Subject: Re: [AMaViS-user] Amavisd - BlackList acts like Spam rejection
John,
Depending on a setup and choice of MTA. With Postfix and a post-queue filter
setup (which is the most
Hi Mark,
Thank you for the reply.
I'll work on obtaining a log sample for you later on tonight.
Here are the settings that I have at the moment:
$final_virus_destiny = D_DISCARD; # (defaults to D_BOUNCE)
$final_banned_destiny = D_DISCARD; # (defaults to D_BOUNCE)
using version:
$myversion_id = '2.3.2'; $myversion_date = '20050629';
Thank you,
John
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
Hello all,
I currently have my SPAM rejects to Bounce. The BlackList option, when an
email is blacklisted, also uses the Bounce method. I would like to change
this method to Reject if at all possible.Any ideas on how to do this?
Thank you,
John
$myversion_id = '2.3.2'; $myversion_date
Mark Martinec wrote:
John,
I'm not sure I understand your setup - are these mailers processing mail
one after another? There is only one 'Received' header field in your sample.
amavisd-new removes all previous X-Spam-* headers from a message
if it is doing spam checking by itself
Gary V wrote:
John wrote:
This is an example of the symptom. Starting amavis on filtering server1
with the following log definitions:
$DO_SYSLOG = 0;
$LOGFILE = /var/log/amavis.log;
$log_level = 4
I get this in the log for a given message.
Dec 16 15:43:22 server1.franklinamerican.com
seen one.
--
John Beamon
Systems Administrator
Franklin American Mortgage Co.
em: [EMAIL PROTECTED]
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine
common smtpd -o
content_filter=smtp-amavis:[127.0.0.1]:10024 that returns via :10025.
There is no header-rewriting configured into Postfix. I welcome any
suggestions as to what would cause this and any specific requests for
relevant info to help the cause. Thanks.
--
John Beamon
Systems
understand why it was needed. Your explanation makes that clear. I
didn't want to open an extra port without understanding why.
Thanks for the help.
john
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems
Replying to my own post.
I still do not have the inet method working. It still gives the errors
below.
I got amavisd-release to work by switching to the unixsocket method.
Still interested in the inet method.
john
john wrote:
I'm running amavisd-new 2.3.3 on FreeBSD 5.4
I'm trying
I'm trying to configure a new amavis installation (amavis-new 2.3.1).
I plan on using this with amavisd-milter. I have some questions:
1) in the included amavisd.conf that gets copied into /etc, I see a ton
of virus definitions. Do I need to comment out or delete the ones I
wont be
.
Is there a way to exempt certain files, extensions, etc from being banned?
--
John Beamon
Systems Administrator
Franklin American Mortgage Co.
em: [EMAIL PROTECTED]
---
This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput
79 matches
Mail list logo