Re: [AMaViS-user] Avira AV Entry

2009-08-19 Thread Thomas Mueller
hi Mark > My current entry (as compiled from some postings) is as follows: > > ### http://www.avira.com/ > ### Avira for UNIX 3.x > ['Avira AntiVir', ['avscan'], >'-s --batch --alert-action=none {}', [0], qr/(?:ALERT|FUND):/m, >qr/(?:ALERT|FUND): ([^;.]+) ;/m ], > > Does that work

Re: [AMaViS-user] Tracking recipient counts on a per user basis

2009-08-11 Thread Thomas Mueller
On Tue, 11 Aug 2009 16:52:13 -0400, Wendel, Ryan wrote: > I am trying to implement an anti-phishing strategy and was hoping some > of you could point me in the right direction. I want to keep track of > how many recipients a user sends mail to on a 24-hour basis. When a > given threshold is met, t

Re: [AMaViS-user] crm114

2009-08-11 Thread Thomas Mueller
On Mon, 10 Aug 2009 17:38:34 -0400, Patrick Wong wrote: > Thanks to Martin and Thomas for responding to my crm114 setup question. > I have since configured CRM114 as a SpamAssassin plugin, with my setup > essentially that documented by Mark. > > Mark had his crm114 setup to learn from scratch. Th

Re: [AMaViS-user] Avira AV Entry

2009-08-07 Thread Thomas Mueller
> > does somebody have an working av scanner entry for the new versions of > avira / antivir, which utilizes the command avscan for command line > scanning, instead of the old antivir command? i'm using this (posted already some times ago): ### Avira for UNIX 3 ['Avira AntiVir', ['avscan'],

Re: [AMaViS-user] POLL: Database Hardware vs Daily Messages

2009-08-07 Thread Thomas Mueller
> 4 x WD Velociraptor 10krpm 300GB in RAID10 setup i've had problems with Velociraptor drives in RAID configurations. every 2 months there are some defect blocks... (maybe this problem is fixed now in newer series). - Thomas ---

Re: [AMaViS-user] crm114

2009-08-07 Thread Thomas Mueller
* first train crm114 (see below) * then test crm114 "standalone" (cat | crm -u /var/ amavis/.crm114 mailreaver.crm --stats_only) > > Starting amavisd like this "amavisd -d noall,crm114" as suggested by > Mark did not yield more debugging info in the log file. > > After a 24 hour cycle, both sp

Re: [AMaViS-user] [PATCH] Customize SMTP Reject Reason

2009-06-05 Thread Thomas Mueller
On Thu, 04 Jun 2009 16:55:28 +0200, Mark Martinec wrote: > Noah, > >> Here is a patch to allow admins to customize the blocking SMTP response >> reason in a config variable. It is particularly useful for people using >> amavisd-new in milter and proxy contexts that want to customize their >> reje

[AMaViS-user] mynetwork_maps/client_ipaddr_policy in 2.6.3

2009-04-24 Thread Thomas Mueller
hi the ReleaseNotes state that backward compatibility with mynetwork_maps is retained. for me it only works if I place @client_ipaddr_policy = map { $_ => 'MYNETS' } @mynetworks_maps; after setting @mynetworks_maps in amavisd.conf. Else only RFC1918 addresses are considered as MYNETS. - Tho

Re: [AMaViS-user] Debian Package

2009-04-23 Thread Thomas Mueller
hi jeff > I am running Amavisd-new 2.6.2 from the Debian testing system. Not sure > when they will get the new 2.6.3 version setup. I noticed that Thomas > Mueller has the newer 2.6.3 setup in a deb form on his website at > http://chaschperli.ch/debian/lenny/. I was wondering if a

Re: [AMaViS-user] missing headers on quarantine messages?

2009-04-22 Thread Thomas Mueller
On Wed, 22 Apr 2009 13:14:41 +0200, Nicolas Haller wrote: > Hi, > > I don't see my first post on the ml so I repost. Sorry if I dup. > > I use DSPAM with Amavisd 2.6.2. All is right but X-DSPAM headers are > missing on messages in quarantine. There is something to do to amavisd > writes DSPAM he

Re: [AMaViS-user] infected message forwarded / Avira for UNIX 3.x

2009-04-20 Thread Thomas Mueller
On Fri, 17 Apr 2009 19:13:21 +0200, Mark Martinec wrote: > Thomas, > >> i've installed the new version from avira for unix, version 3. >> @av_scanner snippet: >> >> ### Avira for UNIX 3.x >> ['Avira AntiVir', ['avscan'], >> '-s --batch --alert-action=none {}', [0], qr/ALERT:/, qr/ALERT: >

Re: [AMaViS-user] inspect_a_bounce_message failed

2009-04-16 Thread Thomas Mueller
On Wed, 15 Apr 2009 11:10:54 +0200, Richter, Danny wrote: > hello Thomas, > > Try the release candidate for amavisd-2.6.3 > > http://www.ijs.si/software/amavisd/amavisd-new-2.6.3-rc1.tar.gz > > This is from the release notes: > > - provide a workaround for a Perl I/O bug, where a bounce kill

[AMaViS-user] infected message forwarded / Avira for UNIX 3.x

2009-04-16 Thread Thomas Mueller
hi i've installed the new version from avira for unix, version 3. @av_scanner snippet: ### Avira for UNIX 3.x ['Avira AntiVir', ['avscan'], '-s --batch --alert-action=none {}', [0], qr/ALERT:/, qr/ALERT: (.+)/m ], playing around i found a (maybe) misbehaviour of amavisd: if "qr/AL

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-15 Thread Thomas Mueller
On Wed, 15 Apr 2009 03:06:20 +0200, Mark Martinec wrote: > amavisd-new-2.6.3-rc1 release candidate is now available at: > > http://www.ijs.si/software/amavisd/amavisd-new-2.6.3-rc1.tar.gz > > release notes: > > http://www.ijs.si/software/amavisd/release-notes.txt > > The 2.6.3 is mainly a

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-15 Thread Thomas Mueller
On Wed, 15 Apr 2009 10:03:32 +, Thomas Mueller wrote: >> - better support for CRM114, either as a SpamAssassin plugin, >> or by directly calling it - instead of, or in addition to >> SpamAssassin; > > does this means it will pass the CRM114-Cache-ID header from sa

Re: [AMaViS-user] amavisd-new-2.6.3-rc1 release candidate available

2009-04-15 Thread Thomas Mueller
> - better support for CRM114, either as a SpamAssassin plugin, > or by directly calling it - instead of, or in addition to > SpamAssassin; does this means it will pass the CRM114-Cache-ID header from sa crm114 plugin without the patch from http://mschuette.name/wp/crm114- spamassassin-plugi

[AMaViS-user] inspect_a_bounce_message failed

2009-04-15 Thread Thomas Mueller
hi every now and then i see this message in syslog on different servers: Apr 15 08:10:42 mail amavis[16321]: (16321-20) (!) inspect_a_bounce_message failed: Error reading mail header section: Bad file descriptor at /usr/sbin/amavisd-new line 11519, line 28. anybody knows what this means? - Th

Re: [AMaViS-user] "Bad address syntax" on admin notifications

2009-03-31 Thread Thomas Mueller
On Tue, 31 Mar 2009 17:41:58 +0200, Stefan Förster wrote: > Hello world, > > what might be causing this: > #v+ > Mar 31 17:14:58 nemea postfix/smtpd[28774]: connect from > web.sender.example[10.0.0.1] Mar 31 17:14:58 nemea postfix/smtpd[28774]: > NOQUEUE: client=web.sender.example[10.0.0.1] Mar 3

Re: [AMaViS-user] 2.6.2 patches + source repository

2009-03-28 Thread Thomas Mueller
On Sat, 28 Mar 2009 10:59:54 +0100, Phil Regnauld wrote: > Mark Martinec (Mark.Martinec+amavis) writes: >> Gary, >> >> > Mark, I now have collected: >> >> > http://www200.pair.com/mecham/spam/amavisd.2.6.2.patch1.txt >> > http://www200.pair.com/mecham/spam/amavisd.2.6.2.patch2.txt >> > http://ww

Re: [AMaViS-user] "warning: Illegal address syntax from localhost" on infected reports

2009-03-27 Thread Thomas Mueller
i think i found the codepart: --- amavisd-new.orig2009-03-27 10:49:11.0 +0100 +++ amavisd-new 2009-03-27 12:16:20.0 +0100 @@ -12536,6 +12536,7 @@ $mailfrom_admin_q = qquote_rfc2821_local($mailfrom_admin); } else { # defaults to email address in hdrfrom_notify_admin

[AMaViS-user] "warning: Illegal address syntax from localhost" on infected reports

2009-03-27 Thread Thomas Mueller
hi sending the infected report fails, because the postmas...@mailhost1.domain.local smtp envelope sender address is not wraped with <>. it sends MAIL FROM:postmas...@mailhost1.domain.local instead of MAIL FROM: seems that somewhere msginfo->sender_smtp gets filled without <> around. I co

Re: [AMaViS-user] Outgoing not signed with DKIM

2009-03-26 Thread Thomas Mueller
On Wed, 25 Mar 2009 15:14:17 +0100, Raven wrote: > On Wed, 2009-03-25 at 11:03 +0000, Thomas Mueller wrote: >> On Wed, 25 Mar 2009 11:16:33 +0100, Raven wrote: >> >> > On Wed, 2009-03-25 at 06:56 +, Thomas Mueller wrote: >> >> On Tue, 24

Re: [AMaViS-user] Outgoing not signed with DKIM

2009-03-25 Thread Thomas Mueller
On Wed, 25 Mar 2009 11:16:33 +0100, Raven wrote: > On Wed, 2009-03-25 at 06:56 +0000, Thomas Mueller wrote: >> On Tue, 24 Mar 2009 23:58:52 +0100, Raven wrote: >> >> > Hi all. >> > I am trying to make amavis sign outgoing emails with DKIM. I followed >> &

Re: [AMaViS-user] Outgoing not signed with DKIM

2009-03-25 Thread Thomas Mueller
On Tue, 24 Mar 2009 23:58:52 +0100, Raven wrote: > Hi all. > I am trying to make amavis sign outgoing emails with DKIM. I followed > step by step the explanation on Amavis' page but could not get it to > work. > > I was able to generate the cert (I am using the same for various > domains) correct

Re: [AMaViS-user] penpals with incoming and outgoing mails

2009-03-23 Thread Thomas Mueller
> > > But With this configuration penpals is use for outgoing mail? because > With penpals the outgoing and the incoming mail must pass through > amavisd you have to turn on "originating => 1," in POLICY-OUT and define $penpals_bonus_score and probably $bounce_killer_score i prefere to have

Re: [AMaViS-user] penpals with incoming and outgoing mails

2009-03-23 Thread Thomas Mueller
On Mon, 23 Mar 2009 21:07:24 +0100, LEVEAU Stanislas wrote: > Hi, > > I use postfix with amavisd-new and penpals With penpals the outgoing and > the incoming mail must pass through amavisd. It's OK for incoming with a > content filter in postfix and a check in amavis with spamassassin and > amavi

Re: [AMaViS-user] Spam Scoring

2009-03-22 Thread Thomas Mueller
>> >> > I take the opportunity of this thread to ask about one behaviour, that I > think is not uncommon. Has sense today to set defaults destiny values > for spam to D_BOUNCE? I mean this: today 99.9% of SPAM comes from > a faked email address, so bouncing it to the sender means to a faked

Re: [AMaViS-user] pen pal feature: LOCAL or not LOCAL

2009-03-21 Thread Thomas Mueller
On Sat, 21 Mar 2009 02:42:27 +0100, Mark Martinec wrote: > Thomas, > >> i'm trying to activate the pen pals / bounce killer feature. > > P.S., > with amavisd-new-2.6.2 please apply the patch: > > http://marc.info/?l=amavis-user&m=123249133113408 > > when implementing SQL logging / pen pals,

[AMaViS-user] pen pal feature: LOCAL or not LOCAL

2009-03-20 Thread Thomas Mueller
Hi i'm trying to activate the pen pals / bounce killer feature. i'm using amavisd-new 2.6.2 on debian lenny. i configured storage_sql_dsn for logging. lookup is done in ldap. Full configuration here: http://pastebin.com/m45149835 i've configured a policybank SMTP and Submission. Postfix will