Re: [AMaViS-user] Help: Production system affected

2009-09-28 Thread Richard Bishop
Jason, > I moved from 2.5 to 2.6 and encountered some errors. Regretfully, I > wiped my database and started fresh. This morning, I found mail queued > up for several hours. It was due to this error: > > Sep 28 00:00:01 mail amavis[30234]: (30234-03) (!!)TROUBLE in > check_mail: sql-enter

Re: [AMaViS-user] Is Clamav heavy on resources

2009-09-22 Thread Richard Bishop
Kevin, >> Kevin Bailey wrote: >> >>> On a server which deals with a few thousand emails per day and only has >>> 500MB of RAM I'm getting errors related to >>> >>> >>> >> is clamav running as CLAMDSCAN? >> (if you did 'top' did you see clamscan running, or CLAMDSCAN) >> >> > > Yes. Is this th

Re: [AMaViS-user] amavisd-learning

2009-02-10 Thread Richard Bishop
Hi, On Tue, 10 Feb 2009 11:44:42 +0200, bharathan kailath wrote: > X-Spam-Score: 1.914 > X-Spam-Level: * > X-Spam-Status: No, score=1.914 required=5 tests=[ADVANCE_FEE_2=1.234, > ADVANCE_FEE_3=1.432, ADVANCE_FEE_4=0.639, AWL=-0.320, BAYES_00=-2.599, > MILLION_USD=1.528] > > the

Re: [AMaViS-user] Processing External programs

2008-12-24 Thread Richard Bishop
Hi David, > I have developped some externals tools that made other content filtering > when parsing mails messages. > I would like to include these tools In Amavisd and would like to know > how i can add them in the main configuration file. > > amavisd=>Program1 => result 0/1 > =>P

Re: [AMaViS-user] Amavis / clamav missing detection on an attachment

2008-12-12 Thread Richard Bishop
Mark, >> My current thinking is that it's something weird with amavis unpacking > the >> zip file into its constituent parts? I know that amavisd-new will > unpack >> archives into a temp folder and scan the files individually, though does > it >> scan the archive as a whole (meaning that my md

[AMaViS-user] Amavis / clamav missing detection on an attachment

2008-12-12 Thread Richard Bishop
Hi all, This problem has been bugging me for a few hours now so I'm looking for help. I have created a custom signature of a zip file using the clamav sigtool utility. I then add this into a file called custom.hdb in /var/lib/clamav. Running clamscan test.zip tells me that the file is infecte

Re: [AMaViS-user] Storing Virus Names

2008-07-26 Thread Richard Bishop
Hi Ralf, > i've the requirement to store the virus name in the logs in case of an > virus and to store the banned filename in case of a banned file Logging > is currently on an mysql server. Ok. I've got this running on our servers so that I can send nice reports every week to our users tellin

Re: [AMaViS-user] MySQL client_addr using dual Exim MTA

2008-01-21 Thread Richard Bishop
Mark, On Thu, 17 Jan 2008 21:22:46 +0100, Mark Martinec <[EMAIL PROTECTED]> wrote: > Does the message when it reaches amavisd already contain a Received > header field inserted by your Exim? If so, it can be used in place > of your X-My-ClientAddr, and provides a standards-based solution. Yes

Re: [AMaViS-user] MySQL client_addr using dual Exim MTA

2008-01-12 Thread Richard Bishop
of IP addresses sending the same spam emails to multiple domains - it just shows why Razor and Pyzor are so effective. Perhaps the next thing to look into is Messagelabs-esq traffic shaping on known spammers IPs - has anybody done this? Admittedly the intended XFORWARD method is much cleaner t

Re: [AMaViS-user] Serious Problems With Amavis (Forking, Dying, Process Shutdown)

2007-09-06 Thread Richard Bishop
Hi Mark, Firstly thanks for your very prompt reply. > Three symptoms of the same problem: fork fails, apparently because > system is low on memory. To find a cause you'll need to find > what is consuming memory - use system tools (ps, vmstat, ...). > Btw, how many amavisd child pro

[AMaViS-user] Serious Amavis Problems (Forking, Memory, Process Shutdown)

2007-09-06 Thread Richard Bishop
Hi guys, We're having serious problems with Amavis at the moment. I have 3 machines on round-robin DNS handling mail for a number of domains. This afternoon one of the machines stopped processing email and I noticed that the amavisd processes weren't running. I restarted them and everything

[AMaViS-user] Serious Problems With Amavis (Forking, Dying, Process Shutdown)

2007-09-06 Thread Richard Bishop
Hi guys, We're having serious problems with Amavis at the moment. I have 3 machines on round-robin DNS handling mail for a number of domains. This afternoon one of the machines stopped processing email and I noticed that the amavisd processes weren't running. I restarted them and everything was

[AMaViS-user] MySQL client_addr using dual Exim MTA

2007-08-20 Thread Richard Bishop
Hello all, I noticed today that there is a client_addr field in the r/w database that stores the source server's IP address. On my setup (Exim4 -> Amavisd-new -> Exim4) this is always populated with NULL. Having checked the mailing list I see that this is reliant upon the XFORWARD feature of

[AMaViS-user] New Size Spam

2006-12-11 Thread Richard Bishop
Hi all, I guess everybody else is seeing examples of the new 'size increase' spam? - "I don't care why your ... is so small but x% of women do" Since seeing a couple towards the middle of last week I'm now getting one every five minutes or so which is starting to get a little annoying. They ar

Re: [AMaViS-user] Recipent gets a Virus notification in spite of being in viruses_that_fake_sender_maps

2006-04-05 Thread Richard Bishop
Hi, Quoting Stefan Jakobs <[EMAIL PROTECTED]>: > I use amavisd-new 2.3.3 with postfix on a linux server > But if the virus is in viruses_that_fake_sender_maps then the recipient will > get an email. But this shouldn't be so. In this case nobody should get a > notification by amavisd. >Can som

Re: [AMaViS-user] mail_id & Multiple Amavisd-new instances storing data in one mysql

2006-03-20 Thread Richard Bishop
Hi all, Quoting Milton Cyrus <[EMAIL PROTECTED]>: > Has anyone tried multiple Amavisd-new instances storing data in one > mysql database.. I am working on a setup like this and just wanted to > know if it would fly.. I've got exactly this running happily at the moment. Two amavis/exim/SA ser

[AMaViS-user] Per-user subject blacklisting

2006-03-01 Thread Richard Bishop
Hi, I'm not sure whether this is an amavis or SA question, but here goes. The setup we have uses exim, amavisd-new, SA, razor, which is extremely reliable and catches most of the spam we recieve, though still misses the occassional few. Much of the spam we recieve concerns certain perscription

Re: [AMaViS-user] "to" address whitelisting

2006-03-01 Thread Richard Bishop
Aaron, all, Quoting "Aaron P. Martinez" <[EMAIL PROTECTED]>: > Essentially all i want to happen is for amavisd-new or SA to add the > person our users are sending mail to the whitelist automatically. I > don't think we really care if it's using the "to" header or the "rcpt to". I think there