[AMaViS-user] NOTICE: TRANSFERRING THE amavis-user MAILING LIST

2011-03-07 Thread Mark Martinec
ANNOUNCEMENT Members of the mailing list amavis-user @ SF, please read! The last week's one day outage of the amavis-user mailing list at the SourceForge reminded me that there were similar events in the past, but more importantly that I dislike the advertisement which SourceForge mailing list

Re: [AMaViS-user] amavisd-nanny question

2011-03-03 Thread Mark Martinec
Ralf, Is running amavisd-nanny -c 1 /dev/null from cron every hour (or so) sufficient to ensure that? I guess so, although I'm not doing this myself. It can't hurt to put its output to a log file to be able to investigate past events if need occurs. And if a need for killing a child process

Re: [AMaViS-user] DKIM signing

2011-03-03 Thread Mark Martinec
Matthias, The cleanest way to differentiate mail submitted from inside from inbound mail is to provide a dedicated mailer (MSA) for mail submission, which accepts only authenticated mail or mail from internal networks. All mail from such MSA can then be passed to amavisd on a dedicated

Re: [AMaViS-user] Custom Log Template Question

2011-03-03 Thread Mark Martinec
Clay, I have been struggling with handling some pesky encoded characters in mail logs as of late. My issue involves passing the message on to a remote rsyslog server which then processes the messages into a database. From time to time I see messages with something similar to the

Re: [AMaViS-user] Custom Log Template Question

2011-03-03 Thread Mark Martinec
Clay, But, given the example from my original email, am I thinking correctly that the subject with it's ascii representation of the registered sign not fall under RFC 2822 specifications for an unstructured header field using US-ASCII? Shouldn't this then have been MIME encoded to meet

Re: [AMaViS-user] Custom Log Template Question

2011-03-03 Thread Mark Martinec
Yes, it is an unstructured header field, header section must not include any characters with code above 256 s/256/127/ Mark -- Free Software Download: Index, Search Analyze Logs and other IT data in Real-Time with

Re: [AMaViS-user] X-Amavis-Alert:BAD HEADER SECTION, MIME error: error: unexpected end of header

2011-03-02 Thread Mark Martinec
Moses, I am still getting the Amavis alert messages Below are my outputs: root@mailgateway1:/usr/local/sbin# telnet localhost 10024 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 [127.0.0.1] ESMTP amavisd-new service ready ehlo mailgateway1.mak.ac.ug

Re: [AMaViS-user] Mutiple recipients postfix/amavis

2011-03-02 Thread Mark Martinec
Sébastien, The original mail is from stat@xxx to nbenhadid@xxx, mduriez@xxx and dgueraud@xxx. When postfix transmit it to amavis we have those lines postfix/smtp[4439]: C7A527414E: to=mduriez@xxx, relay=127.0.0.1[127.0.0.1]:10050, delay=8.8, delays=6.1/0/0/2.7, dsn=2.0.0, status=sent (250

Re: [AMaViS-user] What does SMTP DATA in TIMING refer to?

2011-03-02 Thread Mark Martinec
Patrick, I'm trying to locate a bottleneck in a mailsystem. The TIMING in amavis logging shows that amavis spends most time with SMTP DATA: Mar 2 08:37:20 mail amavis[12218]: (12218-03) TIMING [total 4034 ms] - SMTP greeting: 0 (0%)0, SMTP EHLO: 0 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP

Re: [AMaViS-user] DKIM signing

2011-03-02 Thread Mark Martinec
Matthias, I work for a university institute and administrate its servers incidently. Currently I am putting some work into our mail server configuration (sendmail 8.13.1 with amavisd-new-2.6.4). Recently I got amavis to verify DKIM signed mails. Now my plan was to sign outgoing Emails

Re: [AMaViS-user] Better default for $localhost_name?

2011-03-02 Thread Mark Martinec
Rob, Patrick, RFC 2006 http://tools.ietf.org/rfc/rfc2606.txt indicates you are right. I need to do some testing. Maybe I jumped to the wrong conclusion why specifying localhost only causes problems. reject_non_fqdn_helo_hostname will catch a bare 'localhost' since it has no '.', but

Re: [AMaViS-user] bad-header

2011-03-02 Thread Mark Martinec
P, We're using amavisd-new 2.6.4 on Debian Squeeze to call a mail filter. Although $final_bad_header_destiny is set to D_PASS mail with bad headers is still quarantined. In a previous version 2.4.2 we used the setting $bad_header_quarantine_method = undef; Is this still valid in 2.6.4? Or

Re: [AMaViS-user] How does amavis calculate %y time in log messages?

2011-02-28 Thread Mark Martinec
Patrick, I've run into a problem where amavis seems to take ages to scan messages - at least the time it logs make me think so. OTOH the system I run is mindblowing fast and I just can't believe it would take amavis long run accept, scan and resend a message. BUT I copy every message using

Re: [AMaViS-user] Amavisd logging question

2011-02-28 Thread Mark Martinec
Bill, I have been noticing for quite some time that amavisd-new logs test results messages to the maillog differently at time. For example: Feb 27 14:22:06 mail amavis[27931]: (27931-08) Passed CLEAN Feb 27 14:22:56 mail ch4-03611-04)[3611]: (03611-04) Passed CLEAN These are 2 different

Re: [AMaViS-user] X-Amavis-Alert:BAD HEADER SECTION, MIME error: error: unexpected end of header

2011-02-28 Thread Mark Martinec
I installed amavisd-new 2.6.4 with postfix 2.7.2 and when i test amavisd-new for functionality with telnet i get the error below: BAD HEADER SECTION, MIME error: error: unexpected end of header: Could anybody out there help me fix this? Return-Path: X-Original-To: r...@mak.ac.ug

Re: [AMaViS-user] blacklist_from and blacklist_to

2011-02-28 Thread Mark Martinec
Maurizio, this is a squeeze box fully updated i would use blacklist_from and blacklist_to to block mails in and out for some mail addresses. i have tried to insert them into /etc/spamassassin/local.cf It should work. adding them at the end like here [code] blacklist_from someone at

Re: [AMaViS-user] Per user prefs

2011-02-23 Thread Mark Martinec
Gabor, I've a question about user preferences. What if a mail has multiple addressees? Each recipient is treated individually, according to their preferences. If they use different settings is it possible that some of them receives a potential spam while others do not? Yes. How tagging

Re: [AMaViS-user] check_mail problem

2011-02-23 Thread Mark Martinec
Peter, I have recently changed from an old Maia based amavis system to amavisd-new 2.6.4 on Ubuntu 10.04 along with postfix. I se a lot of below in my mai.log. What is my problem ? Feb 23 06:00:51 mxgw2.sdu.dk amavis[458]: (00458-03) (!!)TROUBLE in check_mail: quar+notif FAILED:

Re: [AMaViS-user] Supporting admin preferences file for SA with amavisd

2011-02-23 Thread Mark Martinec
Patrick, Quanah, Looking at the code changes between pre5 and pre14, I'm guessing it actually is supposed to be sa_userconf_maps. Looks like the release notes need updating. ;) Great. We just improved amavis. :) Thank you both for pointing out the discrepancy. The $sa_user_config_file

Re: [AMaViS-user] Per user prefs

2011-02-23 Thread Mark Martinec
Quanah, mark.martinec+ama...@ijs.si wrote: Now in the 2.7.0, in addition to the above, it became possible to call SpamAssassin more than once per message. See description of settings @sa_userconf_maps and @sa_username_maps in the recent RELEASE_NOTES. Recipients of a message may

Re: [AMaViS-user] SPF / NetAddr::IP warnings

2011-02-21 Thread Mark Martinec
Quanah, I've filed a bug with CPAN/RT for this, since I didn't see one filed, and they just cut a new release that still has this issue present. https://rt.cpan.org/Ticket/Display.html?id=65888 This is now in the latest release. So this looks alright then, thanks! As noted earlier,

Re: [AMaViS-user] amavisd-new with perl problem

2011-02-21 Thread Mark Martinec
Moses, I am using 32bit slackware linux v13 and i am still getting the same problem. Whereas all modules look installed as shown below # /usr/local/sbin/amavisd debug ERROR: MISSING REQUIRED BASIC MODULES: IO::Stringy Unix::Syslog MIME::Words MIME::Head MIME::Body

Re: [AMaViS-user] TIMING-SA what does test_pri mean ?

2011-02-18 Thread Mark Martinec
Peter, I changed to use the recommended bayes module but this has'nt improved the TIMING-SA Check_bayes is still a performance killer. The size of the DB is around 4G and TABLE bays_seen has 25 million records. I do a daily sa-learn --force-expire . Is this DB simply to big . I have used

Re: [AMaViS-user] sa 3.4.0

2011-02-18 Thread Mark Martinec
Daniel, Should I assume that bugzilla is no longer a useful way to track releases? For 3.4.0, there are only 2 resolved bugs, and 6 in a review state. None have been updated in over a month. The 3.3.2 milestone isn't much better, although there are 19 resolved bugs and 88 more targeting

Re: [AMaViS-user] TIMING-SA what does test_pri mean ?

2011-02-17 Thread Mark Martinec
Peter, I have just implementetd a new mailsetup based on postfix 2.7.0 amavisd-new 2.6 and spamassassin 3.3.1 on ununtu 10.04 LTS Somehow scanning is just to slow. I have the following in the logfiles ( loglevel=2): Feb 17 20:20:13 mxgw1.sdu.dk amavis[12250]: (12250-08) TIMING-SA total

Re: [AMaViS-user] Spam report in UBE

2011-02-16 Thread Mark Martinec
Tom, It it possible to have the Spam Report appended to the UBE which is sent to the sender? If yes, how is it accomplished? Yes, but only if a message is considered spammy or spam (score above tag2_level): $defang_spam = 1; Recipient must be local (must match @local_domains_maps).

Re: [AMaViS-user] Duplicate entry with @storage_sql_dsn

2011-02-16 Thread Mark Martinec
Huangbin, I enabled '@storage_sql_dsn' in Amavisd-new-2.6.4, used to store incoming/outgoing mail info, and quarantine SPAM into MySQL database. But i got many Duplicate entry log like below, just wondering how to solve it. # Feb 9 12:10:16 mail amavis[31806]: (31806-06) (!)WARN

Re: [AMaViS-user] X-Language header

2011-02-15 Thread Mark Martinec
Mauricio, As far as I know spamassassin tries (textcat) to detect the language and add a X-language header, but I do not seem to find out how to make amavis print that header. Can anyone show me what I overlooked? local.cf: add_header all Languages _LANGUAGES_ (and the TextCat plugin must

Re: [AMaViS-user] local_domains_map and SQL lookups

2011-02-14 Thread Mark Martinec
Jyri, I read the documentation and searched the web but found on clear answer to my problem with amavis-new 2.6.4. The question is, will SQL lookup form table users take precedence over statically loaded maps? Yes it will, this is currently not configurable, but there are plans to make a

Re: [AMaViS-user] virus_admin

2011-02-11 Thread Mark Martinec
P, I'm installing amavisd-new on a Debian Lenny. I've changed in 20-debian_defaults $virus_admin = postmaster\@$mydomain; to addr...@company.com but only the to: address has changed. Where can I change the from: address? Feb 3 15:34:12 servr amavis[26290]: (26290-01) (!)SEND via SMTP:

Re: [AMaViS-user] Blacklisting and spam configuration

2011-02-11 Thread Mark Martinec
Peter, Hi, I was advised to ask the questions below here after posting on freespamfilter org Amavisd-new forum: I know nothing about email systems but I have a couple of question relating to the configuration of Amavisd-new which I would very much appreciate the views of the forum on. I

Re: [AMaViS-user] Not banning Blackberry configuration mails (ETP.DAT)

2011-02-11 Thread Mark Martinec
Robert, Running amavisd-new version 2.6.2 RIM routinely sends mails to Blackberry users containing a file named ETP.DAT. This file must not be banned, so I added an exception to $banned_filename_re: $banned_filename_re = new_RE( ### BLOCKED ANYWHERE # qr'^UNDECIPHERABLE$', # is or

Re: [AMaViS-user] Spam scoring skipped with BAD HEADER

2011-02-11 Thread Mark Martinec
Raman, Amavisd seems to skip spam scoring for some emails with BAD HEADER alerts: X-Amavis-Alert: BAD HEADER SECTION, Missing required header field: Date I'm not aware of spam tests being bypassed based on bad header, except when a message is already known to be blocked for some other reason

Re: [AMaViS-user] Insecure dependency in connect while running with -T

2011-02-10 Thread Mark Martinec
amavis claim Feb 1 14:37:25 rez14 amavis[29857]: (29857-04) (!)custom checks error: Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.10/IO/Socket.pm line 114 Do you have tips to debug the situation I paste then entire code if you found the mistakes. Looks

Re: [AMaViS-user] under which circumstances RelayedOpenRelay?

2011-02-10 Thread Mark Martinec
John, I've just switched from amavisd-new 2.5.4 to 2.7.0-pre14 and I've noticed {RelayedOpenRelay}. Feb 10 21:27:10 mail.notice host amavis[29895]: (29895-01) Passed CLEAN {RelayedOpenRelay}, [62.236.108.70]:57631 [83.103.80.66] dovecot-bounces+mailinglists=belfin...@dovecot.org -

Re: [AMaViS-user] under which circumstances RelayedOpenRelay?

2011-02-10 Thread Mark Martinec
If this is an incoming message, the most likely reason is that belfin.ch is not listed in the @local_domains_maps. P.S. something like: @local_domains_maps = ([qw( .localhost .example.com .example.org )]); or read from a file: @local_domains_maps = ( read_hash($MYHOME/etc/local_domains) );

Re: [AMaViS-user] Need to double-quarantine spam - should I use a before_send hook?

2011-02-10 Thread Mark Martinec
Tim, We are going to cut over from one quarantine method to another, so for a little while, I need to simultaneously quarantine spam in two different ways. Right now, I'm forwarding all spam to a single mailbox via smtp. I need to add sql quarantine as well. I've got the sql

Re: [AMaViS-user] Need to double-quarantine spam - should I use a before_send hook?

2011-02-10 Thread Mark Martinec
Sorry for the incompatibility (there was a compatibility measure in 2.7.0 up till pre7, but I dropped it in pre8 - I guess I should put it back). The following patch to 2.7.0-pre14 puts that compatibility measure back, so the first $conn parameter is optional (is discarded if it exists): ---

Re: [AMaViS-user] Insecure dependency in connect while running with -T

2011-02-09 Thread Mark Martinec
David, amavis claim Feb 1 14:37:25 rez14 amavis[29857]: (29857-04) (!)custom checks error: Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.10/IO/Socket.pm line 114 How can we fix it ? in this file we have this # cat -n /usr/lib/perl/5.10/IO/Socket.pm|grep

Re: [AMaViS-user] DKIM signing mailing lists

2011-02-07 Thread Mark Martinec
Florian, So, if someone from outside mails to one of my hosted mailing lists, and these lists change the subject or add a footer, it's fairly normal that the Authentication-Result shows softfail for DKIM, right? Yes, as received by the final recipient, member of a mailing list. Ok.

Re: [AMaViS-user] uncommon virusnames used by avira

2011-02-07 Thread Mark Martinec
Andreas, I use now this to get the virusname only: qr/ALERT: (?:.* )?(.+?)(?: ; |$)/m ... a partial copy from the savapi definition in amavisd.conf :-) Thanks! Will update my entry. I wonder whether the FUND alternativce is still needed. Probably a localized text. To stay on the safe

Re: [AMaViS-user] Insecure dependency in connect while running with -T

2011-02-02 Thread Mark Martinec
David, On ubuntu 10.10 we encounter now this error since some perl lib updates Which version or amavisd? Do you happen to know which perl modules were updated? amavis claim Feb 1 14:37:25 rez14 amavis[29857]: (29857-04) (!)custom checks error: Insecure dependency in connect while running

[AMaViS-user] amavisd-new-2.7.0-pre14

2011-02-02 Thread Mark Martinec
The amavisd-new-2.7.0-pre14 pre-release is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.7.0-pre14.tar.gz with updated release notes at: http://www.ijs.si/software/amavisd/release-notes.txt The -pre14 brings some new features over -pre13, and fixes a compatibility problem

Re: [AMaViS-user] On bypass_spam_checks_maps

2011-02-02 Thread Mark Martinec
Mauricio, When you do something like @bypass_spam_checks_maps = ( [ !.$mydomain, . ] ); in your 50-user, what is being checked? All headers? The recipient header? Something else? SMTP envelope recipient address. (header is irrelevant for this test) Mark

Re: [AMaViS-user] p0f: is it interesting to use?

2011-02-02 Thread Mark Martinec
John, checking the p0f website last developments date back to 2006. No visible activity ever since. Yes. That's a pitty. Does it make sense today to use p0f to find out about the clients that connect to port 25? Or are p0f signatures completely outdated? Depends what you use them for. I

Re: [AMaViS-user] SPF / NetAddr::IP warnings

2011-02-02 Thread Mark Martinec
Henrik, Works perfect as always. :-) Thanks for confirming. myself wrote: There is a bug in NetAddr-IP (actually two), which only shows when its modules are autoloaded. Here is a patch on NetAddr-IP-4.038: Digging into this a little further, I think the culprit is a file ipv6_n2d.al lying

Re: [AMaViS-user] DKIM signing mailing lists

2011-02-02 Thread Mark Martinec
Florian, [...] So, it seems as soon as the original sender domain is local, the respective key is used to sign, rather than the lists key. Is this correct, or wrong? anyone has an idea? Sorry for delay. Will come to your message 'really-soon-now' :), like tomorrow... Mark

Re: [AMaViS-user] tcp based av scanner

2011-02-01 Thread Mark Martinec
Michael, (myself wrote:) [...] with a new subroutine clamav_clamd_internal() implementing the zINSTREAM, combined with batched parallel processing of parts as offered by the clamd's zIDSESSION / zEND commands. The following AV entry will invoke it: ['ClamAV-clamd-stream',

Re: [AMaViS-user] SPF / NetAddr::IP warnings

2011-01-31 Thread Mark Martinec
Henrik, Using amavisd-new 2.7.0-pre13, amavisd-milter 1.5.0, SA 3.4 trunk, latest Mail::SPF / NetAddr::IP. I'm getting the following warning always: Jan 31 11:08:53 xxx amavis[1058]: (01058) _WARN: Use of uninitialized value in concatenation (.) or string at

Re: [AMaViS-user] SPF / NetAddr::IP warnings

2011-01-31 Thread Mark Martinec
Henrik, Jan 31 11:08:53 xxx amavis[1058]: (01058) _WARN: Use of uninitialized value in concatenation (.) or string at /usr/local/perl/lib/site_perl/5.12.1/Mail/SPF/Util.pm line 109, GEN25 line 22. Jan 31 11:08:53 xxx amavis[1058]: (01058) _WARN: spf: lookup failed: Bad arg length for

Re: [AMaViS-user] tcp based av scanner

2011-01-28 Thread Mark Martinec
Michael, Mark: saw the clamdscan entry for 2.7. thanks. i using in now, but using the --stream option (don't know if it matters) Probably doesn't matter. The ClamAV docs says it prefers to autodetect what considers the best transfer mode. would rather amavisd knew how to get there, like

Re: [AMaViS-user] uncommon virusnames used by avira

2011-01-27 Thread Mark Martinec
Andreas, It contains a paypal phishingmail Avira assigned an unsual log name to. Savapi-Mode handles it correct. But I have some older systems using the avscan interface. There the virusname is empty which breaks my backend scripting: I assum a virusname is at least one charakter an contains

Re: [AMaViS-user] uncommon virusnames used by avira

2011-01-27 Thread Mark Martinec
Ralf, Jan 26 11:06:04 idvamavis03 amavis[9249]: (09249) virus_scan: ( 310, PayPal_Limited_Form.html PHISH/Paypal.27959, PHISH/Paypal.27959 ), detected by 1 scanners: Avira SAVAPI I can confirm that! amavisd-agent also logs virus.byname.310 ... ... ... 100% since it's somehow logging

[AMaViS-user] Compatibility problem with MIME-Tools 5.500 - a patch

2011-01-27 Thread Mark Martinec
In January 2011 a version 5.500 of a perl module MIME-Tools was released. This module is used by amavisd for decoding a MIME structure of a mail message. The version 5.500 changed a type of a result returned by methods mime_attr() and recommended_filename() of a header object: previously

Re: [AMaViS-user] new: amavisd-new-2.7.0-pre13

2011-01-26 Thread Mark Martinec
Christian, I finally got it working. It MUST require Authen:SASL::XS here. I did not have this plugin installed and it was falling back to use Authen::SASL::Perl, which does not work. And it needs one little fix: --- ../src/amavisd-new-2.7.0-pre13/amavisd2011-01-25 20:19:09.0

Re: [AMaViS-user] new: amavisd-new-2.7.0-pre13

2011-01-26 Thread Mark Martinec
Will incorporate that fix. Something like this: --- amavisd~2011-01-25 19:18:05.0 +0100 +++ amavisd 2011-01-26 16:26:14.0 +0100 @@ -16674,8 +16674,9 @@ require Exporter; use vars qw(@ISA @EXPORT @EXPORT_OK %EXPORT_TAGS $VERSION - $have_sasl

Re: [AMaViS-user] new: amavisd-new-2.7.0-pre13

2011-01-26 Thread Mark Martinec
Christian, For some reason, amavisd does not return from ldap-bind(): Jan 25 23:40:47 roessner1 amavis[30126]: (30126-01) connect_to_ldap: TLS version Net::LDAP::Extension=HASH(0x7aaff38) enabled Jan 25 23:40:47 roessner1 amavis[30126]: (30126-01) connect_to_ldap: sasl object

Re: [AMaViS-user] new: amavisd-new-2.7.0-pre13

2011-01-26 Thread Mark Martinec
Christian, It is quite likely that your LDAP client code reinstall fixed the crash. Could you please try removing the Net::SASL::XS and see if the problem re-appears? Removed Authen::SASL::XS (and Authen::SASL::Cyrus) and it works. So it was in fact a broken Net::LDAP package. Ubuntu

[AMaViS-user] new: amavisd-new-2.7.0-pre13

2011-01-25 Thread Mark Martinec
The amavisd-new-2.7.0-pre13 pre-release is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.7.0-pre13.tar.gz with updated release notes at: http://www.ijs.si/software/amavisd/release-notes.txt The -pre13 brings some new features over -pre12, and fixes two bugs: - added

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-24 Thread Mark Martinec
Florian, - a mail is received, existing DKIM signatures are verified, and the Authentication-Results is added if a recipient address is local; I guess that is determined according to local_domains_acl? Yes. (or better: according to @local_domains_maps) if there were any pre-existing

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-21 Thread Mark Martinec
Florian, I'm not sure if there is any value in adding Authentication-Results for a signature that is just being added. It would help in validating the e-mail easier, but this of course can be achieved by different means. It was just not clear to me that this is the supposed behaviour.

Re: [AMaViS-user] Handling outgoing SPAM

2011-01-21 Thread Mark Martinec
Peter, I am trying to find a solution to a setup, where I want to make sure that infected machines on the inner side (MYNETWORKS) is'nt able to push out big amounts of SPAM. I have full control on SPAM coming from outside but want to have a mechanism that can detect this situation

Re: [AMaViS-user] amavisd-new-2.7.0-pre12 is available

2011-01-21 Thread Mark Martinec
Quanah, Will you be filing a bug against the perl module @ CPAN? Done. I sent a mail message to Rob Brown to his cpan address as indicated in the Makefile.PL. I hope he is still the current maintainer of Net::Server. According to CPAN, and his own website, the maintainer is Paul

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-19 Thread Mark Martinec
Florian, I just reply to this issue right now, because I think it might be crucial for diagnosing the rest. :-) I just tried sending, with the configuration as shown before, from the SMTP via port 587, from user1@domain to user2@domain. This results in the following headers: [...] So, the

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-19 Thread Mark Martinec
Florian, I see - you are expecting an Authentication-Results header field to be added even if a signature is just being added in the same mail transaction. So far it doesn't work this way, the Authentication-Results is added based on existing (if any) signatures in a message. On its way

Re: [AMaViS-user] Failover for $archive_quarantine_method?

2011-01-19 Thread Mark Martinec
Patrick, have you ever considered adding a failover or fallback mechanism for $archive_quarantine_method? I use amavis with Postfix smtpd_proxy_filter and my Postfix instance comes to an instant halt, if the smtp target defined in $archive_quarantine_method becomes unavailable. It may

Re: [AMaViS-user] Using pipe in spam_quarantine_method

2011-01-18 Thread Mark Martinec
Peter, Still struggling with the syntax of amavis conf variables. Pretty hard to get A complete view :-( Check slide 45 of: http://www.ijs.si/software/amavisd/amavis-berlin-20090703.pdf I want to quarantine all SPAM that my local users are trying to send so I put the Following into

Re: [AMaViS-user] only quarantine SPAM ferom local = extern

2011-01-18 Thread Mark Martinec
Peter, I want to quarantine all SPAM mail sent from local = extern to a local mailbox spambin And LABEL SPAM all mail sent from extern = local What should happen to internal-to-internal spam? To a local mailbox spambin ? Does this imply that you need it in a single file in mbox format? In

Re: [AMaViS-user] Spam

2011-01-18 Thread Mark Martinec
Lucas, My amavisd is blocking a message becouse he thinks that're spam. But don't How can I show him that messages isn't a spam? Jan 14 10:43:14 mail amavis[5899]: (05899-11) Blocked SPAM, MYNETS LOCAL [187.5.xxx.xx] [187.5.xxx.xx] protoc...@.rs.gov.br -

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-18 Thread Mark Martinec
Florian, Is there a dedicated DKIM documentation for amavis? I only found information at the bits and pieces page Yes, that's where most of the DKIM-related docs is. Besides, each newly introduced config settings is documented in release notes when it was introduced. but have a few other

Re: [AMaViS-user] amavis doesn't like smtpd_reject_footer at all :)

2011-01-18 Thread Mark Martinec
Ralf, Jan 18 14:01:35 mail amavis[23844]: (23844-03) Negative SMTP response to data-dot (eurap.germ...@charite.de): 550 5.7.1 ph27\n5.7.1 Contact postmas...@charite.de for assistance My recent main.cf change: smtpd_reject_footer = Contact postmas...@charite.de for assistance seems to be

Re: [AMaViS-user] amavis doesn't like smtpd_reject_footer at all :)

2011-01-18 Thread Mark Martinec
Ralf, Jan 18 14:01:35 mail amavis[23844]: (23844-03) Negative SMTP response to data-dot (eurap.germ...@charite.de): 550 5.7.1 ph27\n5.7.1 Contact postmas...@charite.de for assistance My recent main.cf change: smtpd_reject_footer = Contact postmas...@charite.de for assistance seems to be

Re: [AMaViS-user] Per-user frontend

2011-01-14 Thread Mark Martinec
Stefan, Maybe just take a look at http://myamavis.kapott.org Thanks for the information, I added a link to the amavisd web page. Mark -- Protect Your Site and Customers from Malware Attacks Learn about various

Re: [AMaViS-user] SNMP Statistics

2011-01-13 Thread Mark Martinec
Patrick, I need to split rejected messages by destination, but I don't know how. What I see is origins and destinations: AMAVIS-MIB::inMsgsInbound.0 = Counter32: 1 AMAVIS-MIB::inMsgsOutbound.0 = Counter32: 10 AMAVIS-MIB::inMsgsInternal.0 = Counter32: 0

Re: [AMaViS-user] SNMP Statistics

2011-01-13 Thread Mark Martinec
.19.2 InMsgsStatusAcceptedInbound .19.3 InMsgsStatusAcceptedOutbound .19.4 InMsgsStatusAcceptedInternal .19.5 InMsgsStatusAcceptedOutgoing .19.6 InMsgsStatusAcceptedOpenRelay oops, s/Outgoing/Originating/ Mark

Re: [AMaViS-user] DKIM signing mailing lists

2011-01-12 Thread Mark Martinec
Florian, I currently work on implementing DKIM signing in my amavisd-new with Postfix. All key tests result in passed, and sending signed e-mail out of lists results in correct verification. However, I have problems with signing my hosted mailing lists -- as footers are added and subjects

Re: [AMaViS-user] Question about @spam_subject_tag2_maps

2011-01-12 Thread Mark Martinec
Peter, I have followin defined and a policybank for MYNETS like : $sa_spam_subject_tag = TAGGED SPAM; $sa_spam_modifies_subj = 1; @spam_modifies_subj_maps =(\$sa_spam_modifies_subj); @spam_subject_tag2_maps[' some other text']; $policy_bank{'MYNETS'} = { Originating

Re: [AMaViS-user] Read @mynetworks from mysql table

2011-01-12 Thread Mark Martinec
Peter, Currently I have network IP addresses stored for postfix in a mysql table. Would it be possible to use that table directly from amavisd-new to fill @mynetworks You could use a small code section in your amavisd.conf file, which would open an SQL access, fetch a list of networks and

Re: [AMaViS-user] Read @mynetworks from mysql table

2011-01-12 Thread Mark Martinec
Michael, A downside is that this would not be a dynamic lookup, but a frozen state at the time of last amavisd restart. would that happen on each spawned child? or just the main, first start/reload and restart? Just the main process when it reads the configuration file, not in child

Re: [AMaViS-user] amavisd-new-2.7.0-pre12 is available

2011-01-04 Thread Mark Martinec
Looks like some modification to Net::Server will be needed to handle the situation sooner. The following patch against Net-Server-0.99 seems to handle it: --- Net/Server/PreFork.pm~ 2010-07-08 21:13:47.0 +0200 +++ PreFork.pm 2011-01-04 18:48:54.103050023 +0100 @@ -331,4 +331,13

Re: [AMaViS-user] amavisd-new-2.7.0-pre12 is available

2011-01-04 Thread Mark Martinec
Will you be filing a bug against the perl module @ CPAN? Done. I sent a mail message to Rob Brown to his cpan address as indicated in the Makefile.PL. I hope he is still the current maintainer of Net::Server. Mark

Re: [AMaViS-user] Macro Discrepancy

2010-12-30 Thread Mark Martinec
So it appears that your mailer is not sending the XFORWARD command in an smtp session to amavisd. Are you perhaps using a milter setup or some other mailer that Postfix? If using Postfix with an SMTP or LMTP feed to amavisd, check the smtp_send_xforward_command option in a postfix

Re: [AMaViS-user] amavisd-new-2.7.0-pre12 is available

2010-12-30 Thread Mark Martinec
Clay and Christian, With some of my preliminary testing of -pre12 upon issuing the amavisd reload command I see the old child processes lingering around in a defunct state. The amavisd-nanny process only shows the newly created children. From a debug console everything appears to be

Re: [AMaViS-user] SNMP Statistics

2010-12-30 Thread Mark Martinec
Patrick, I need to split rejected messages by destination, but I don't know how. What I see is origins and destinations: AMAVIS-MIB::inMsgsInbound.0 = Counter32: 1 AMAVIS-MIB::inMsgsOutbound.0 = Counter32: 10 AMAVIS-MIB::inMsgsInternal.0 = Counter32: 0 AMAVIS-MIB::inMsgsOriginating.0 =

Re: [AMaViS-user] Forward SPAM labeled

2010-12-29 Thread Mark Martinec
Peter, I'm setting up a new system based on ubuntu 10.04LTS VERSION in script shows 2.2.07 . What does this match ? 2.7.xx No idea. Doubtful. Try: $ grep 'myversion_id =' /usr/local/sbin/amavisd I'm trying to pass on spam to the final destination but labeled. I have added following to

Re: [AMaViS-user] Macro Discrepancy

2010-12-29 Thread Mark Martinec
Clay, I am preparing to upgrade some boxes off of 2.5.4, but have noticed a minor difference in the how the %a macro is being handled. With 2.6.4 I see the following log entry: Dec 29 08:49:21 mta-test amavis[30209]: (30209-15) Passed CLEAN, [192.168.76.134] [192.168.76.1]

Re: [AMaViS-user] amavisd-new-2.7.0-pre12 is available

2010-12-28 Thread Mark Martinec
Clay, Given the number of pre-releases, do you have any rough idea concerning the 2.7.0 stable release? I have a few boxes in need of an update to 2.6.4, but may hold until 2.7.0 depending on release timing. Any thoughts? The main reason that 2.7.0-pre12 is not named 2.7.0-rc1 is that I

[AMaViS-user] amavisd-new-2.7.0-pre12 is available

2010-12-24 Thread Mark Martinec
The amavisd-new-2.7.0-pre12 pre-release is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.7.0-pre12.tar.gz with updated release notes at: http://www.ijs.si/software/amavisd/release-notes.txt This is mainy a bug fix release over -pre11, so that one does not need to manually

Re: [AMaViS-user] Amavis does not remove existing X-Scanned-headers

2010-12-21 Thread Mark Martinec
Christian Roessner reported: Amavis does not remove existing X-Scanned-headers My header is twice there. amavisd.conf: $remove_existing_x_scanned_headers = 1; Indeed. Here is a fix: --- amavisd.orig2010-12-19 23:09:58.579956779 +0100 +++ amavisd 2010-12-21 17:20:08.575585307

Re: [AMaViS-user] solved - VBR-Info header

2010-12-21 Thread Mark Martinec
Sorry, I gave bad advise, the forward_method is somewhat special since the invention of multiple-backends failover mechanism. Just use the forward_method_maps, as you suggested: $policy_bank{'ORIGINATING'} = { ... forward_method_maps = [ 'smtp:[::1]:10125' ], ... };

Re: [AMaViS-user] warnings for unchecked mail

2010-12-21 Thread Mark Martinec
Christian, is that normal that the pre11 version starts sending warnings to my postmaster account for UNCHECKED mails? subject: UNCHECKED contents in mail FROM [some ip here] whate...@example.com content: No viruses were found. Content type: Unchecked Internal reference code for the

Re: [AMaViS-user] Which record in sql table 'msgs' is incoming or outgoing message

2010-12-21 Thread Mark Martinec
Huangbin, I have @storage_sql_dsn = ([DBI:mysql:xxx]); configured in amavisd, the question is, how can i know which record in sql table msgs is incoming or outgoing message? I'm glad you found a solution for your immediate problem. A general answer to your question involves some SQL magic,

Re: [AMaViS-user] warnings for unchecked mail

2010-12-21 Thread Mark Martinec
Michael, %admin_maps_by_ccat = ( CC_UNCHECKED, sub { ca('virus_admin_maps') }, what would trigger that? why would it be unchecked? what would make it unchecked? and don't I want to know if an email us unchecked? A content is considered unchecked when some part is either: -

Re: [AMaViS-user] solved - VBR-Info header

2010-12-20 Thread Mark Martinec
Can be done through a custom hook, e.g.: Not sure, if I can use it (because I don't understand perl :-) ) /etc/etc-custom.conf : package Amavis::Custom; use strict; sub new { my($class,$conn,$msginfo) = @_; bless {}, $class; } sub before_send { my($self,$conn,$msginfo) = @_; if

Re: [AMaViS-user] amavisd-new-2.7.0-pre11 is available

2010-12-19 Thread Mark Martinec
Christian, If running amavisd debug-sa, shouldn't I see spamassassin output (like -D -lint), when the mail is thrown through the SA code? I can't see that in pre11 (have no other version to test). I wanted to debug, if pyzor/razor/Pg-code is working and thought I would see this with

Re: [AMaViS-user] amavisd-new-2.7.0-pre11 is available

2010-12-18 Thread Mark Martinec
The amavisd-new-2.7.0-pre11 pre-release is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.7.0-pre11.tar.bz2 just a hint: The link at ijs is wrong. It points to tar.gz not tar.bz2 :-) Thanks, fixed the web page. Should have been a .bz2. The link in the announcement was

Re: [AMaViS-user] amavisd-new-2.7.0-pre11 is available

2010-12-18 Thread Mark Martinec
With 2.7.0-pre11 and SQL or LDAP policy lookups enabled and SQL logging enabled you may see the following warnings in the log under certain circumstances: (!)WARN save_info_final: sql exec: err=, , Insecure dependency in parameter 2 of DBI::st=HASH(0x4cd23510)-bind_param method call while

Re: [AMaViS-user] amavisd-new-2.7.0-pre11 is available

2010-12-18 Thread Mark Martinec
Tonio, i've a problem with amavisd 2.7.0-pre11 (but it does the same with previous pre 2.7.0 versions) I use spamassassin and dspam scanner with this setting into amavisd.conf: @spam_scanners = ( ['SpamAssassin', 'Amavis::SpamControl::SpamAssassin'], ['DSPAM',

[AMaViS-user] amavisd-new-2.7.0-pre11 is available

2010-12-17 Thread Mark Martinec
The amavisd-new-2.7.0-pre11 pre-release is available at: http://www.ijs.si/software/amavisd/amavisd-new-2.7.0-pre11.tar.bz2 with updated release notes at: http://www.ijs.si/software/amavisd/release-notes.txt (the 2.7.0-pre10 was not released to the public) Main changes between -pre9 and

Re: [AMaViS-user] Whitelisting/Blacklisting?

2010-12-15 Thread Mark Martinec
Glenn, Running: FreeBSD-8.0-RELEASE amavisd-new-2.6.4_8,1 squirrelmail-1.4.21 amavisnewsql-0.8 [...] who said that they had a user set in their blacklist for a while, and it never succeeds in flagging the email as spam. [...] it made me go and check my own. I sent myself an email from

  1   2   3   4   5   6   7   8   9   10   >