[AMaViS-user] Disable spam and virus scan for but internal-to-internal messages

2009-05-14 Thread Rocco Scappatura
Hello, I'm using Postfix+Amavisd-new+MySQL as my Mail Gateway platform. I would like to disable spam and virus scan for but internal-to-internal messages. At the moment, I have the following setup: $inet_socket_port = [10026]; $interface_policy{'10026'} = 'SENDERBYPASS'; $policy_bank{'SENDERB

[AMaViS-user] Policy server for outgoing messages

2009-02-19 Thread Rocco Scappatura
Hello, I have a number of networks from which it is possible to use my mail gateway system (Postfix+Amavisd-new+MySQL) to relay email messages (directly through a mail client or through another MTA that uses my mail gateway system as smart host). The mail gateway system moreover is used as MX reco

Re: [AMaViS-user] Policy for outgoing messages

2009-02-18 Thread Rocco Scappatura
> > Hello, > > Use your mta. Just post to postfix list. Thanks anyway, but if read my email carefully, I can notice that I have already post my question to the postfix list too.. :-) rocsca -- Open Source Business Co

[AMaViS-user] Policy for outgoing messages

2009-02-18 Thread Rocco Scappatura
Hello, I have a number of networks from which is possible to use my mail gateway system (Postfix+Amavisd-new+MySQL) to relay email messages (directly through a mail client or through another MTA that uses my mail gateway system as smart host). The mail gateway system moreover is used as MX record

Re: [AMaViS-user] long list of mynetworks

2009-02-17 Thread Rocco Scappatura
Infact, >> I'm currentry using @lookup_sql_dsn for storing quarantine in DB. >> >> So I have tried to include both DSN in @lookup_sql_dsn array: >> >> @lookup_sql_dsn = >> ( >> ['DBI:mysql:database=amavis;host=127.0.0.1;port=3306', >> 'user1', 'apss1'], >> ['DBI:mysql:database=postfix;ho

Re: [AMaViS-user] long list of mynetworks

2009-02-16 Thread Rocco Scappatura
Hello, > I need just one more clarification.. > > > > (Is it right to unset "bypass_virus_checks_maps"?) > > > > > > Then I have added the following config line: > > > > > > @lookup_sql_dsn = > > >( ['DBI:mysql:database=mail;host=127.0.0.1;port=3306', 'user', > > > 'password'],); > > > @stor

Re: [AMaViS-user] long list of mynetworks

2009-02-12 Thread Rocco Scappatura
Mark, I need just one more clarification.. > > (Is it right to unset "bypass_virus_checks_maps"?) > > > > Then I have added the following config line: > > > > @lookup_sql_dsn = > >( ['DBI:mysql:database=mail;host=127.0.0.1;port=3306', 'user', > > 'password'],); > > @storage_sql_dsn = @lookup_

Re: [AMaViS-user] long list of mynetworks [solved]

2009-02-09 Thread Rocco Scappatura
Mark, > > I have assumed that I have I have to take away the > > "bypass_virus_check_maps" setting from the policy below: > > > > $inet_socket_port = [10024,10026]; > > > > $interface_policy{'10026'} = 'SENDERBYPASS'; > > > > $policy_bank{'SENDERBYPASS'} = { > > originating => 1, > >

Re: [AMaViS-user] long list of mynetworks

2009-02-03 Thread Rocco Scappatura
Mark, First of all thank you for you great insight about the argument.. > > One thing that I can do after I have separated traffic originating > > inside my network, from the other traffic passing through my mail > > gateway, is to stop to analyse that traffic agaist viruses. > > > > Indeed, I th

[AMaViS-user] Not filter DSN toward a domain of mine

2009-01-28 Thread Rocco Scappatura
Hello. I would like to implement a policy that let to pass trough my mail gateway all DSN destined to the domain 'domain.tld' managed by me. I'm pretty sure on how to capture email destined to 'domain.tld' and bypass soam and virus cheching. Anyway is hard for me to infer how to catch DSN. I fee

Re: [AMaViS-user] long list of mynetworks

2009-01-27 Thread Rocco Scappatura
> To preserve compatibility, an implied initialization is: > $sql_clause{'sel_policy'} = \$sql_select_policy; > so either set the $sql_select_policy (which will be passed on to > $sql_clause{'sel_policy'} ), or assign to $sql_clause{'sel_policy'} > directly and ignore $sql_select_policy. > > The

Re: [AMaViS-user] long list of mynetworks

2009-01-26 Thread Rocco Scappatura
> A better approach would probably be to use SQL lookup instead of a > statical hash-based lookup. The policy.bypass_virus_checks SQL field > is equivanent to @bypass_virus_checks_maps (actually it's the other > way around, the SQL lookup table is implicitly prepended to a > lists of lookup tables

Re: [AMaViS-user] long list of mynetworks

2009-01-22 Thread Rocco Scappatura
> > >> originating recip. is local > > >> 0 0can't happen (open relay) > > >> 0 1inbound > > >> 1 0outbound > > >> 1 1internal-to-internal > > >>

Re: [AMaViS-user] long list of mynetworks

2009-01-22 Thread Rocco Scappatura
Mark, > >> originating recip. is local > >> 0 0can't happen (open relay) > >> 0 1inbound > >> 1 0outbound > >> 1 1internal-to-internal > >> > >>

Re: [AMaViS-user] long list of mynetworks

2009-01-17 Thread Rocco Scappatura
>> originating recip. is local >> 0 0can't happen (open relay) >> 0 1inbound >> 1 0outbound >> 1 1internal-to-internal >> >> # a global setting

Re: [AMaViS-user] long list of mynetworks

2009-01-16 Thread Rocco Scappatura
>> smtpd_client_restrictions = >> check_client_access >> proxy:mysql:/etc/postfix/mysql-check-client-filter-access.cf >> ->check_recipient_access >> proxy:mysql:/etc/postfix/mysql-relay-filter-domain.cf >> >> After I have modified the query part of 'check_client_access' >> restriction as

Re: [AMaViS-user] Sharing /etc/amavisd.conf among different MTA+Amavisd-new "twin" platforms

2009-01-16 Thread Rocco Scappatura
> < startup, so there are issues with sharing it that I could think of. > >> startup, so there are NO issues with sharing it that I could think of. > Thanks. Very clear and complete. At first sight, I prefer to include a 'not shared' config file. rocsca --

Re: [AMaViS-user] long list of mynetworks

2009-01-14 Thread Rocco Scappatura
> >> Paradoxically, a simpler solution in your case is to use a more > >> complex MTA+amavisd setup, letting MTA separate mail into > originating > >> (=locally submitted) and all the rest, and feeding each flow > >> on a separate amavisd port. > >> > >> When code sections in current versions of am

Re: [AMaViS-user] long list of mynetworks

2009-01-13 Thread Rocco Scappatura
>> Paradoxically, a simpler solution in your case is to use a more >> complex MTA+amavisd setup, letting MTA separate mail into originating >> (=locally submitted) and all the rest, and feeding each flow >> on a separate amavisd port. >> >> When code sections in current versions of amavisd need to

[AMaViS-user] Sharing /etc/amavisd.conf among different MTA+Amavisd-new "twin" platforms

2009-01-13 Thread Rocco Scappatura
Hello, I have different SMTP gateways each one configurred exactly at the same manner. The only difference is the hostname. I would like to know if I could define "/etc/amavisd.conf" as an NFS share somewhere and export it on each of my SMTP gateways. The aim is obviously to change only one confi

Re: [AMaViS-user] long list of mynetworks

2009-01-13 Thread Rocco Scappatura
> Paradoxically, a simpler solution in your case is to use a more > complex MTA+amavisd setup, letting MTA separate mail into originating > (=locally submitted) and all the rest, and feeding each flow > on a separate amavisd port. > > When code sections in current versions of amavisd need to know

Re: [AMaViS-user] Avoid spam scan for a particular recipient

2008-12-12 Thread Rocco Scappatura
> > What is the best (and simple) way to avoid spam scan for all email > > messages destined to a particular recipient? > > @bypass_spam_checks_maps = ({ > 'us...@example.com' => 1, > 'us...@example.com' => 1, > '.office.example.net' => 1, > }); > > @spam_lovers_maps = @bypass_spam_chec

[AMaViS-user] Avoid spam scan for a particular recipient

2008-12-12 Thread Rocco Scappatura
Hello. What is the best (and simple) way to avoid spam scan for all email messages destined to a particular recipient? Thanks, rocsca -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The f

Re: [AMaViS-user] long list of mynetworks

2008-12-12 Thread Rocco Scappatura
> in my amavisd-new configuration I have left the default setting for > mynetwork parameters. > > # @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 > # 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ); > > Well! I have a long list of network (and this changes often). I > ma

[AMaViS-user] long list of mynetworks

2008-12-11 Thread Rocco Scappatura
Hello, in my amavisd-new configuration I have left the default setting for mynetwork parameters. # @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 # 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ); Well! I have a long list of network (and this changes often). I maintain i

Re: [AMaViS-user] R: Amavisd-new reloading

2008-12-05 Thread Rocco Scappatura
> You have a few choices for this... > > > - insure that your ram drive is big enough that it's unlikely > to fill up, else don't use a ram drive. How much you intend "big enough"? I have: /dev/shm262144 12352249792 5% /var/amavis/scan > - do nothing. Postfix will s

Re: [AMaViS-user] R: Amavisd-new reloading

2008-12-04 Thread Rocco Scappatura
> > It was probably filling up gradually and you didn't notice. > > Or there was a repeated failure, and you weren't monitoring the log. > > > > > 2) Is there a safe way to reloading amavisd-new? > > > > One way to do it is to: > > amavisd stop > > rm -rf /var/amavis/scan > > mkdir /var/amavi

Re: [AMaViS-user] R: Amavisd-new reloading

2008-12-02 Thread Rocco Scappatura
> > I have scheduled a cronjob to update rulesets of spamassassin: > > sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org -- > channel > > updates.spamassassin.org && /usr/sbin/rcamavisd reload > > I get the bad surprise that - after Amavisd-new reloading - the mail > > gateway is stop

Re: [AMaViS-user] R: Amavisd-new reloading

2008-10-28 Thread Rocco Scappatura
> > I have scheduled a cronjob to update rulesets of spamassassin: > > sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org -- > channel > > updates.spamassassin.org && /usr/sbin/rcamavisd reload > > I get the bad surprise that - after Amavisd-new reloading - the mail > > gateway is stop

Re: [AMaViS-user] R: Amavisd-new reloading

2008-10-27 Thread Rocco Scappatura
> > I have scheduled a cronjob to update rulesets of spamassassin: > > sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org -- > channel > > updates.spamassassin.org && /usr/sbin/rcamavisd reload > > I get the bad surprise that - after Amavisd-new reloading - the mail > > gateway is stop

[AMaViS-user] R: Amavisd-new reloading

2008-10-23 Thread Rocco Scappatura
> > sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel > > updates.spamassassin.org && /usr/sbin/rcamavisd reload > > I do this same thing, except instead of doing a reload I do: > /usr/sbin/rcamavisd restart > I have not encountered the problems you mention. Substantially, m

[AMaViS-user] Amavisd-new reloading

2008-10-23 Thread Rocco Scappatura
Hello. I have scheduled a cronjob to update rulesets of spamassassin: sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel updates.spamassassin.org && /usr/sbin/rcamavisd reload I get the bad surprise that - after Amavisd-new reloading - the mail gateway is stopped. I have inve

Re: [AMaViS-user] Another secondary virus scanner

2008-10-08 Thread Rocco Scappatura
> > > Just move it from @av_scanners to the @av_scanners_backup list > > > and keep clamd as a primary virus scanner. > > > > I never have read the conf file completely... :-( Sorry.. > > Now I have: > > @av_scanners = ( ... > > @av_scanners_backup = ( ... > > > But from docs it seems to me that

Re: [AMaViS-user] Another secondary virus scanner

2008-10-04 Thread Rocco Scappatura
> > The CPU has grown again.. I fear that I have to disable it! > > Just move it from @av_scanners to the @av_scanners_backup list > and keep clamd as a primary virus scanner. > I never have read the conf file completely... :-( Sorry.. Now I have: @av_scanners = ( ### http://www.clamav.net/

Re: [AMaViS-user] Another secondary virus scanner

2008-10-04 Thread Rocco Scappatura
> https://secure.nai.com/apps/downloads/free_evaluations/default.asp?regi > > > on=us&segment=small > > > > I will try and I'll let you know.. > > > > The CPU has grown again.. I fear that I have to disable it! > Or maybe is there a way to set 'uvscan' as secondary mail scanner and to scan email

Re: [AMaViS-user] Another secondary virus scanner

2008-10-01 Thread Rocco Scappatura
> https://secure.nai.com/apps/downloads/free_evaluations/default.asp?regi > > on=us&segment=small > > I will try and I'll let you know.. > The CPU has grown again.. I fear that I have to disable it! rocsca - This SF.Net em

Re: [AMaViS-user] Another secondary virus scanner

2008-09-30 Thread Rocco Scappatura
> Frown indeed - that's ancient, and I believe EOL'd. See the trial > version of 5.30 McAfee VirusScan Command Line Scanner for Linux > > here: > > https://secure.nai.com/apps/downloads/free_evaluations/default.asp?regi > on=us&segment=small I will try and I'll let you know.. Many thanks, roc

Re: [AMaViS-user] Another secondary virus scanner

2008-09-30 Thread Rocco Scappatura
> > due to high load of my Postfix+Amavisd-new+MySQL boxes, I have had to > > disable the primary virus scanner (UVSCAN). I found that UVSCAN is > very > > I have found that ClamAV detects as much or more than uvscan. Can you > place uvscan as a backup scanner? > > > CPU expensive so I had no ot

[AMaViS-user] Another secondary virus scanner

2008-09-30 Thread Rocco Scappatura
Hello, due to high load of my Postfix+Amavisd-new+MySQL boxes, I have had to disable the primary virus scanner (UVSCAN). I found that UVSCAN is very CPU expensive so I had no other choice other then disable it. So Amavisd-new at the moment is using only CLAMAV. If it crash or stops working for som

Re: [AMaViS-user] Time out cause

2008-06-05 Thread Rocco Scappatura
> > status=deferred (delivery temporarily suspended: conversation with > > 127.0.0.1[127.0.0.1] timed out while receiving the initial server > > greeting) > > Is postfix trying to open more connections to amavisd than > there are amavisd child processes ($max_servers) running? > Is this a pre-qu

[AMaViS-user] Time out cause

2008-06-03 Thread Rocco Scappatura
Hello, I'm using Amavisd-new+MySQL+Postfix platform. I saw some message in maillog: status=deferred (delivery temporarily suspended: conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting) Moreovere I tried to lauch amavisd-nanny but I get: # /usr/local/s

Re: [AMaViS-user] SQL DB schema issue

2008-05-28 Thread Rocco Scappatura
Thanks Mark, > Rocsca, > > > I'm using SA with SQL support under Amavid-new. My DBMS is MySQL. > > I 'm preparing one another Antispam server and I ve installed the > > latest stable software available. > > I ve dumped bayes DB (schema + data) from an already > working machine > > and I ve res

[AMaViS-user] SQL DB schema issue

2008-05-28 Thread Rocco Scappatura
Hello, I'm using SA with SQL support under Amavid-new. My DBMS is MySQL. I 'm preparing one another Antispam server and I ve installed the latest stable software available. I ve dumped bayes DB (schema + data) from an already working machine and I ve restore them on the new machine. But when I

Re: [AMaViS-user] How to justify amavisd-new delay

2008-04-04 Thread Rocco Scappatura
> > > Since the bottleneck is SA and not Postfix you should rather use > > > load balancing for the internal forwarding to amavisd-new and > > > distribute the load of content scanning to different machines. > > > > It could be a reasonable remark.. > > > > > Set in master.cf of postfix for exa

Re: [AMaViS-user] How to justify amavisd-new delay

2008-04-03 Thread Rocco Scappatura
> Since the bottleneck is SA and not Postfix you should rather > use load balancing for the internal forwarding to amavisd-new > and distribute the load of content scanning to different machines. It could be a reasonable remark.. > Set in master.cf of postfix for example > -o content_filter=a

Re: [AMaViS-user] How to justify amavisd-new delay

2008-04-03 Thread Rocco Scappatura
> As you have found, it's very difficult to do anything other > than very crude load management via DNS. Obviously you can > make it a little bit better by keeping your DNS TTLs short, > but it's a very blunt tool. > > The only load-balancing method that provides a more > immediate and t

Re: [AMaViS-user] How to justify amavisd-new delay

2008-04-02 Thread Rocco Scappatura
> Thanks Gary, > > you're explanation is very brief and fully explanatory. > > I surely will execute some measurement of SA efficiency by > increasing log verbosity. > > In the mean time I find very embarassing some situations > where I have a congtestioned SMTP gateway server and I can't >

Re: [AMaViS-user] How to justify amavisd-new delay

2008-04-01 Thread Rocco Scappatura
> >From what I understand from these posts: > http://marc.info/?l=postfix-users&m=117199107216689 > http://marc.info/?l=postfix-users&m=118582818426445 > your active queue is overloaded. If this is the case, this > often is a result of messages coming in faster than they are > going out (quite of

[AMaViS-user] How to justify amavisd-new delay

2008-03-19 Thread Rocco Scappatura
Hello, I submit you this few maillog rows: Mar 19 12:25:38 av5 postfix/cleanup[16063]: C059E228463: message-id=<[EMAIL PROTECTED] main1spa.it> Mar 19 12:25:38 av5 postfix/qmgr[20646]: C059E228463: from=<[EMAIL PROTECTED]>, size=3494, nrcpt=1 (queue active) Mar 19 13:00:56 av5 postfix/smtp[28218]:

[AMaViS-user] Too false negative

2008-02-26 Thread Rocco Scappatura
Hello, Since some days the number of SMTP connections rejected by my server is increased (maybe doubled). It doesn't worry me. But there is a side effect because even the number of false negative is increased. For example, at the moment a spam message with this header is considered clean by Amav

[AMaViS-user] Bad file descriptor

2008-01-31 Thread Rocco Scappatura
On my mail gateway, amavisd-new has deferred some message with the following message: Service shutting down, Can't write to mail file: Bad file descriptor at (eval 62) line 626, chunk 69. (in reply to end of DATA command)) What it could be happened? BTW, then the message was accepted and forwar

Re: [AMaViS-user] 'AM.PDP' policy

2008-01-21 Thread Rocco Scappatura
> Rocsca, > >> - After I finished my test, I have tried to return the the original >> configuration. So I have dropped the '$inet_socket_bind = undef' >> configuration line, and then I have restarted amavisd-new. >> - Amavisd-new was correctly bound on local local port. But no connection >> from

Re: [AMaViS-user] 'AM.PDP' policy

2008-01-21 Thread Rocco Scappatura
>> > > $inet_socket_bind = undef; > >> Anyway, if I switch again to the amavisd-new conf without " >> $inet_socket_bind = undef", amavisd refuse connection from postfix: >> dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to >> 127.0.0.1[127.0.0.1]: Connection refused) >> >> w

Re: [AMaViS-user] 'AM.PDP' policy

2008-01-21 Thread Rocco Scappatura
> > > I have set: > > > $inet_socket_port = [10024,10027,9998]; > $interface_policy{'9998'} = > > > 'AM.PDP'; $policy_bank{'AM.PDP'} = { > > > protocol => 'AM.PDP', > > > inet_acl => [qw( 127.0.0.1 [::1] 10.166.231.245 > )], }; For > > > MailZU installation purpouse, i need to a

Re: [AMaViS-user] 'AM.PDP' policy

2008-01-21 Thread Rocco Scappatura
> > I have set: > > $inet_socket_port = [10024,10027,9998]; $interface_policy{'9998'} = > > 'AM.PDP'; $policy_bank{'AM.PDP'} = { > > protocol => 'AM.PDP', > > inet_acl => [qw( 127.0.0.1 [::1] 10.166.231.245 )], }; For > > MailZU installation purpouse, i need to access to > Amavis

[AMaViS-user] 'AM.PDP' policy

2008-01-21 Thread Rocco Scappatura
I have set: $inet_socket_port = [10024,10027,9998]; . . . $interface_policy{'9998'} = 'AM.PDP'; $policy_bank{'AM.PDP'} = { protocol => 'AM.PDP', inet_acl => [qw( 127.0.0.1 [::1] 10.166.231.245 )], }; For MailZU installation purpouse, i need to access to Amavisd-new server from

Re: [AMaViS-user] Shared quarantine

2008-01-21 Thread Rocco Scappatura
> > I have a frontend SMTP gateway that serves serveral domains. The > > frontend spans trhough several server. Every server has the same > > configuration/hardware. The platform of every server is > > Postfix+MySQL+Amavisd-new. > > > > I would like to enhanche my system implementing a shared qua

Re: [AMaViS-user] @lookup_sql_dsn

2008-01-21 Thread Rocco Scappatura
> > @lookup_sql_dsn > > It is worth to use it? What I have to put in amavis SQL database. > > If static lookups meet your needs, there is no advantage to > enable SQL-based lookups. > > The main advantage of SQL-based (or LDAP-based) lookups is > that changes in a database take effect immediate

[AMaViS-user] @lookup_sql_dsn

2008-01-18 Thread Rocco Scappatura
It is worth to use it? What I have to put in amavis SQL database. Thanks, rocsca - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse01207

Re: [AMaViS-user] README.sql

2008-01-18 Thread Rocco Scappatura
Configuration error found: $virus_quarantine_method = '@sql'; $spam_quarantine_method = '@sql'; $banned_quarantine_method = '@sql'; $bad_header_quarantine_method = '@sql'; instead of: $virus_quarantine_method = 'sql:'; $spam_quarantine_method = 'sql:'; $banned_quarantine_method = 'sql:'; $bad

Re: [AMaViS-user] README.sql

2008-01-17 Thread Rocco Scappatura
Mark, > Rocco, > >> av4:~ # tail -f /var/log/amavis | grep [EMAIL PROTECTED] > ... >> Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup >> (score_sender<[EMAIL PROTECTED]>) => undef, "[EMAIL PROTECTED]" does not >> match >> Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) SPAM-KILL, >> <[EMAIL

Re: [AMaViS-user] README.sql

2008-01-17 Thread Rocco Scappatura
> Other than what I mentioned about sending test messages from trusted > users (users in a policy bank that allows spam to pass for example), > nothing comes to mind. > > I would prepare a spam message (gtube for example): > http://spamassassin.apache.org/gtube/gtube.txt > > and send it from a hotm

Re: [AMaViS-user] README.sql

2008-01-16 Thread Rocco Scappatura
>> But, when I not use SQL for quarantine I have not set no one of the >> variable above as well I have not set the variables *_to explicitily. >> and filtering works. Why? >> > > Define what you mean by filtering. Do you mean malware is sent to > quarantine? Exactly. Maybe I have used the inco

Re: [AMaViS-user] README.sql

2008-01-16 Thread Rocco Scappatura
>> > > I have restarted. The messages are correctly stored in msgs >> > table (it >> > > has been written maddr,msgrcpt tables too). But no spam >> > messages was >> > > detected. Maybe do I have to fill the RO tables before to run >> > > amavisd-new+SQL? >> > >> > Should be: >> > >> > $virus_quara

Re: [AMaViS-user] README.sql

2008-01-16 Thread Rocco Scappatura
> > @storage_sql_dsn = ( > > ['DBI:mysql:database=***;host=10.166.231.245;port=3306', > '***', '***'] > > ); $timestamp_fmt_mysql = 1; # if using MySQL *and* > msgs.time_iso is > > TIMESTAMP; > > # defaults to 0, which is good for non-MySQL or if > msgs.time_iso is > > CHAR(16) > > $virus_

[AMaViS-user] README.sql

2008-01-16 Thread Rocco Scappatura
Hello. I'm starting to use SQL for storing quarantine. I have set: @storage_sql_dsn = ( ['DBI:mysql:database=***;host=10.166.231.245;port=3306', '***', '***'] ); $timestamp_fmt_mysql = 1; # if using MySQL *and* msgs.time_iso is TIMESTAMP; # defaults to 0, which is good for non-MySQL or if m

[AMaViS-user] Shared quarantine

2008-01-14 Thread Rocco Scappatura
Hello. I have a frontend SMTP gateway that serves serveral domains. The frontend spans trhough several server. Every server has the same configuration/hardware. The platform of every server is Postfix+MySQL+Amavisd-new. I would like to enhanche my system implementing a shared quarantine (hopefull

[AMaViS-user] Shared quarantine

2008-01-10 Thread Rocco Scappatura
Hello. I have a frontend SMTP gateway that serves serveral domains. The frontend spans trhough several server. Every server has the same configuration/hardware. The platform of every server is Postfix+MySQL+Amavisd-new. I would like to enhanche my system implementing a shared quarantine (hopefull

Re: [AMaViS-user] X-Spam-Level

2007-12-18 Thread Rocco Scappatura
> > > What is it that you are seing in X-Spam-Level? > > > It should contain as many $sa_spam_level_char characters > (or short > > > strings) as the score value indicates, rounded to an integer. > > > > the content of root home dir: > > > > X-Spam-Level: Mail autoinst.xml bin ip.awk ip.sh patch-

Re: [AMaViS-user] X-Spam-Level

2007-12-18 Thread Rocco Scappatura
> > Hello, for quarantined emails, I read that this header reports the > > listing of a directory of my file system :-(. > > Who decide the value for this header? > > What is it that you are seing in X-Spam-Level? > It should contain as many $sa_spam_level_char characters (or > short strings) as

[AMaViS-user] X-Spam-Level

2007-12-18 Thread Rocco Scappatura
Hello, for quarantined emails, I read that this header reports the listing of a directory of my file system :-(. Who decide the value for this header? rocsca - SF.Net email is sponsored by: Check out the new SourceForge.net

Re: [AMaViS-user] Local Spam

2007-12-17 Thread Rocco Scappatura
>> What is 'fail2ban'? > > Make Google your friend. > http://www.fail2ban.org/wiki/index.php/Main_Page Nice. But I need to inform a client of my network as soon as I block him. >> I would like to know if there is something of ready to use.. >> >> Otherwise, I'm thinking to use awk to get

Re: [AMaViS-user] Local Spam

2007-12-17 Thread Rocco Scappatura
> > from my amavid-new log I saw that a significant protion of spam is > > generated inside my network. Here the command: > > > > # cat /var/log/amavis | grep -i "Blocked SPAM, LOCAL" > > > > I have configured Postfix so that it lookups an IP for > client access > > to my SMTP gataway. If loo

[AMaViS-user] Local Spam

2007-12-17 Thread Rocco Scappatura
Hello, from my amavid-new log I saw that a significant protion of spam is generated inside my network. Here the command: # cat /var/log/amavis | grep -i "Blocked SPAM, LOCAL" I have configured Postfix so that it lookups an IP for client access to my SMTP gataway. If lookup is succesfull, that I

Re: [AMaViS-user] Passed UNCHECKED and Blocked UNCHECKED

2007-12-10 Thread Rocco Scappatura
> > I don't have understood why sometimes the zipped files with > password > > are blocked while other times the are passed. > > > > What is the logic? > > Check the log. At log level 1 search for 'p.path', which > gives the reason for a banning decision. I think zip has a > notion of password

Re: [AMaViS-user] Passed UNCHECKED and Blocked UNCHECKED

2007-12-10 Thread Rocco Scappatura
OK I will enable log level = 1 and then I see what happens. rocsca > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Mark Martinec > Sent: Monday, December 10, 2007 5:41 PM > To: amavis-user@lists.sourceforge.net > Subject: Re: [AMaViS-user] Pass

[AMaViS-user] Passed UNCHECKED and Blocked UNCHECKED

2007-12-06 Thread Rocco Scappatura
I don't have understood why sometimes the zipped files with password are blocked while other times the are passed. What is the logic? rocsca - SF.Net email is sponsored by: The Future of Linux Business White Paper from Novel

Re: [AMaViS-user] zip file with password question

2007-12-04 Thread Rocco Scappatura
> > I'm trying to figure out how can I do so that Amavisd-new avoid to > > check emails from a particular sender <[EMAIL PROTECTED]> to a > particular > > receiver <[EMAIL PROTECTED]>, with a password protected zipped file > > attached. > > > > Could someone give me an hint? > > > > rocsca > >

[AMaViS-user] zip file with password question

2007-11-13 Thread Rocco Scappatura
Hello, I'm trying to figure out how can I do so that Amavisd-new avoid to check emails from a particular sender <[EMAIL PROTECTED]> to a particular receiver <[EMAIL PROTECTED]>, with a password protected zipped file attached. Could someone give me an hint? rocsca --

Re: [AMaViS-user] Pass spam destined only for some domain

2007-06-21 Thread Rocco Scappatura
> >> OOPS, I blundered. You cannot bypass spam checks and still > get spam > >> tags. You should ONLY use spam_lover if you want mail spam tagged. > > > I tried to sent a spam to an address of the spam lover domain: > > > /usr/local/src/amavisd-new-2.4.4/test-messages # sendmail -i > > [EMAIL

Re: [AMaViS-user] Pass spam destined only for some domain

2007-06-20 Thread Rocco Scappatura
> If the domain is considered local and the message scores over > spam_tag2_level it should get this tag. Each user in > @example.com could still have a policy where where their > spam_tag2_level is set. > > > rocsca > > Gary V Still thanks, rocsca -

Re: [AMaViS-user] Pass spam destined only for some domain

2007-06-20 Thread Rocco Scappatura
> If you were not using SQL (or every user in the @example.com > domain had spam_lover = NULL and bypass_spam_checks = NULL) , > you could set: Sorry for the confusion.. > @bypass_spam_checks_maps = ( [qw( .example.com )] ); > @spam_lovers_maps = ( [qw( .example.com )] ); Codld I get spam fo

Re: [AMaViS-user] Pass spam destined only for some domain

2007-06-20 Thread Rocco Scappatura
> One possibility (depending on your setup). Create a policy > where every configuration setting is NULL with the exception > of spam_lover and bypass_spam_checks (you need to set both > when bypassing). Something like this: My setup is Amavisd-new+Postfix+MySQL > INSERT INTO policy (id, polic

[AMaViS-user] Pass spam destined only for some domain

2007-06-20 Thread Rocco Scappatura
Hello, I would like to not block the spam for some domain. I saw a parameter $bypass_spam_checks_maps it seems the right suitable for my case, but I would like to know how to use it storing domain name in a file or SQL database and other better methods (if there any) for my purpouse. thanks, r

Re: [AMaViS-user] Temporary dir

2007-05-22 Thread Rocco Scappatura
> > And.. Is it possible to use separate directory for > .spamassassin > > files? > > Possible. SpamAssassin creates its temporary files in a > directory pointed to by the environment variable TMPDIR if > defined, or in /tmp otherwise. You probably have a setting > like the following in a

Re: [AMaViS-user] Temporary dir

2007-05-22 Thread Rocco Scappatura
> Mark your very clear.. bu I get: > > # patch < 0.patch > patching file amavisd > Reversed (or previously applied) patch detected! Assume -R? > [n] Apply anyway? [n] Skipping patch. > 1 out of 1 hunk ignored -- saving rejects to file amavisd.rej > missing header for unified diff at line 16

Re: [AMaViS-user] Temporary dir

2007-05-22 Thread Rocco Scappatura
> Save a patch to some file, e.g. 0.patch, then cd to a > directory where amavisd is located, and apply the patch with > a 'patch' command, feeding 0.patch on stdin to it, e.g.: > > cd /usr/local/sbin > #have 0.patch ready in this directory > patch < 0.patch Mark your very clear.. bu I get:

Re: [AMaViS-user] Temporary dir

2007-05-22 Thread Rocco Scappatura
> > If we are referring to: > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5444 > > these files should eventually get deleted automatically. And.. Is it possible to use separate directory for .spamassassin files? rocsca ---

Re: [AMaViS-user] Temporary dir

2007-05-22 Thread Rocco Scappatura
> I never suggested using a tmpfs for temporary files. Under a > decent journalling or UFS file system I don't think any > (small) savings are worth the risk of having a file system > too small, or wasting unnecessary memory. http://www.arschkrebs.de/postfix/amavisd_tmpfs.shtml > If we are ref

Re: [AMaViS-user] workround for bad headers

2007-05-21 Thread Rocco Scappatura
> > I get these warning.. > > > > WARNING: bad headers - Improper use of control character > (char 0D hex): > > Subject: Richiesta di Invio Schede Prodotto\r \n > > If this is coming from your clients, these really need to be > fixed, using a bare CR within a header is an ugly offense. > Allow

[AMaViS-user] workround for bad headers

2007-05-21 Thread Rocco Scappatura
I get these warning.. WARNING: bad headers - Improper use of control character (char 0D hex): Subject: Richiesta di Invio Schede Prodotto\r \n I saw the amavisd.conf: # for defanging bad headers only turn on certain minor contents categories: $defang_by_ccat{+CC_BADH.",3"} = 1; # NUL or CR cha

[AMaViS-user] (no subject)

2007-05-21 Thread Rocco Scappatura
I get these warning.. WARNING: bad headers - Improper use of control character (char 0D hex): Subject: Richiesta di Invio Schede Prodotto\r \n I saw the amavisd.conf: # for defanging bad headers only turn on certain minor contents categories: $defang_by_ccat{+CC_BADH.",3"} = 1; # NUL or CR cha

[AMaViS-user] Temporary dir

2007-05-21 Thread Rocco Scappatura
Hello, I have problem with the directory tmp inside the home directory of the user running amavisd-new (which use spamassassin). That directory is configured as temporary dir for Amavisd-new. I mounted on it a tmpfs file system. The size of the partition is the one suggested for this job (to do

Re: [AMaViS-user] Deliver quarantined message

2007-03-23 Thread Rocco Scappatura
> You could use my script for resending ham and optionally > whitelisting (whitelist_from_rcvd in local.cf) the senders of > these ham messages. Thanks Leon, I will take take a look at you script. Surely, I will be very worth for me.. rocsca -

Re: [AMaViS-user] Deliver quarantined message

2007-03-21 Thread Rocco Scappatura
> Check amavisd.conf and see if you have a $unix_socketname configured. > Make a note of the current setting if it exists. If it does > not, then configure it. > > There is a program called amavisd-release. It comes with the > source code. You may have to edit the $socketname in > amavisd-relea

[AMaViS-user] Deliver quarantined message

2007-03-19 Thread Rocco Scappatura
Hello, I have a relay SMTP server system Amavisd-new+Postfix+MySQL-based. I have configured spamassassin to quarantine spam message. Now I would like to know a simple way to release a quarantined message after, for example, I have verified that the message is a false positive.. Could someone e

[AMaViS-user] AWL question

2007-01-16 Thread Rocco Scappatura
Hello, I use SA storing data on MySQL databases. I have seen the awl contains email address with the value 'none' in the field 'IP'. Why this field for some entriesis not correctly filled? Thanks, rocsca - Take Surveys. E

Re: [AMaViS-user] performance questions

2007-01-03 Thread Rocco Scappatura
Thanks Gary V for you answers, Could you suggest me something about this problem.. > > > I already have > > > > > innodb_data_file_path = /var/lib/mysql/ibdata1:500M:autoextend > > > > > which should be enough... > > > > I don't know enough about MySQL to know if it is or not. > This does no

Re: [AMaViS-user] performance questions

2007-01-03 Thread Rocco Scappatura
Hello, > > How I have to do so that I can delete the same entry from native SA > > database? (ie.: if I don't use the DB?) > > > rocsca > > See check_whitelist provided with the source code, or: > http://www.deepnet.cx/~kdeugau/spamtools/trim_whitelist > > but this deletes *all* 'one off' entr

Re: [AMaViS-user] performance questions

2007-01-03 Thread Rocco Scappatura
Thanks. > >> AFAIK AWL grows forever. Something like this may help somewhat: > >> DELETE FROM `awl` WHERE `count` = 1 AND `totscore` > 5; > > > Could You explain why you choose 5 as value threshold? > > Thanks, > > rocsca > > Somewhat arbitrary but SpamAssassin uses a target score of 5 > for th

  1   2   3   >