[AMaViS-user] troubleshooting av issues: pdf as CCITT file ?

2011-01-10 Thread Voytek Eymont
one of my users complains she can no longer send PDFs, claim our mail server 'blocks them and marks them as virus' she says she emailed to her gmail account, as well, account on our server, and, on our server it came with a text attachement 'ZW.txt' which says 'virus detected' I'm guessing this

[AMaViS-user] troubleshooting av issues: pdf as CCITT file ?

2011-01-10 Thread Voytek Eymont
I'm guessing this ZW.txt is added by some equipment at their end ? before they upload it to our server seems case solved: -- I found its what was the problem. ZW.txt I think maybe Zywall35(our firewall). Everything working as well ZW.txt did not come again and .pdf file can

Re: [AMaViS-user] SMTP AUTH not subjected to unnecessary check?

2010-04-06 Thread Voytek Eymont
On Wed, March 17, 2010 3:14 am, Mark Martinec wrote: Advice (mouss and others) feed authenticated mail to amavisd on a dedicated port is good, regardless of whether you need this separation right away, or later. (from mouss): -o content_filter=smtp-amavis:[127.0.0.1]:10586 Mark, Gary,

Re: [AMaViS-user] delivering spam to individual users with + subaddress and virtual mailbox

2010-03-27 Thread Voytek Eymont
On Sat, March 27, 2010 12:32 pm, Mark Martinec wrote: I already have delimiter set # grep delimiter amavisd.conf $recipient_delimiter = '+'; # undef disables address extensions altogether $addr_extension_spam is undef by default, so you also need: $addr_extension_spam = 'spam'; And

Re: [AMaViS-user] delivering spam to individual users with + subaddress and virtual mailbox

2010-03-27 Thread Voytek Eymont
On Sat, March 27, 2010 5:04 pm, Voytek Eymont wrote: On Sat, March 27, 2010 12:32 pm, Mark Martinec wrote: #grep local_domains_maps amavisd.conf @local_domains_maps = ( [.$mydomain] ); # list of all local domains so, I need to list all my domains like: @local_domains_maps = ( [.$mydomain

[AMaViS-user] delivering spam to individual users with + subaddress and virtual mailbox

2010-03-26 Thread Voytek Eymont
I have postfixadmin 2.2.0, amavisd-new-2.6.4 (20090625), ClamAV, bdc, CourierIMAP, virtual domains/users in MySQL, it all works well, thanks. currently, all users spam goes to 'all_users_spam' mailbox. I'd like to implement '+' subaddressing for user+spam. reading a thread on postfix list, I

[AMaViS-user] ot: comparing effectivnes of av scanners detections

2010-03-26 Thread Voytek Eymont
I use ClamAV as well as BDC console edition 7.1, looking with 'top' whenever bdc scans, it seems to pull high CPU is there simple simple way to compare 'effectiveness' of Clam versus BDC ? what other av scanners do others use ? -- Voytek

[AMaViS-user] amavis-stats setup, no graphs

2010-03-23 Thread Voytek Eymont
anyone using amavis-stats ? I'm trying to setup amavis-stats 1.22 on centos/apache data seems to be collecting, but, no graphs being created I guess it fails trying to make a graph, but not sure how to figure this out sbt.net.au/amavis-stats/ I get the main page with buttons, but, no graphs,

Re: [AMaViS-user] bad header and foreign charcter sets

2010-03-16 Thread Voytek Eymont
On Tue, March 16, 2010 5:08 am, Mark Martinec wrote: No they are not valid according to RFC 5322 (ex RFC 2822). Mail client should have encoded these characters according to RFC 2047. Mark, Noel, thanks yes, they're using a rather old mail client WHAT IS AN INVALID CHARACTER IN A MAIL

Re: [AMaViS-user] DKIM verification startup message

2010-03-16 Thread Voytek Eymont
On Wed, March 17, 2010 11:00 am, Mark Martinec wrote: so, dumb question: These are two mostly independent features: verification and signing. The message [1] only says that verification is disabled. Turning on DKIM verification does not require any keys or certificates on your side, these

[AMaViS-user] bad header and foreign charcter sets

2010-03-15 Thread Voytek Eymont
I see some email tagged as 'bad heade'r where the user has say Polish ogonki charcters or Thai characters both of these are valid emails, what's the best way to avoid such charcters triggering bad header ? (or should I simply not test for bad headers?) X-Amavis-Alert: BAD HEADER SECTION

[AMaViS-user] SMTP AUTH not subjected to unnecessary check?

2010-03-03 Thread Voytek Eymont
I have Postfix with SMTP AUTH with amavisd, it all works well (as long as I don't touch it..) (cross posted to postfix list as well) I have now allowed some users to use SMTP AUTH, but, some of their mail then gets evaluated as 'spam' by amavisd/spamassasin scores, amongst these, 'dynamic ip'

[AMaViS-user] ot: temporary overcoming correct sa blacklist scores

2010-02-25 Thread Voytek Eymont
I have a user site geographically remote to my mail server, I've told them to use SMTP AUTH to be able to use the SMTP server, but, looking at the mail header of email I see this[1]; doing mxtoolbox lookup I see the IP addresses are listed in several blacklists[2]; one of the addresses is

Re: [AMaViS-user] ot: spamassasin/perl IO::File prob object binmode

2010-02-11 Thread Voytek Eymont
On Thu, February 11, 2010 8:59 pm, Mark Martinec wrote: Could it be that cpan install placed the module in a path not visible to your perl? Try: perl -le 'use IO::File; print IO::File-VERSION' Versions of IO::File prior to IO-1.22 did not have a binmode method. Mark, thanks again # perl

Re: [AMaViS-user] release problems: 450 4.5.0 Failure: SQL quarantine code not enabled at

2010-02-11 Thread Voytek Eymont
On Thu, February 11, 2010 9:16 pm, Mark Martinec wrote: Btw, if these mailboxes are directly viewable by users, then you are misusing a quarantine feature of amavisd. Quarantine entries are not per-recipient, so you'd be in trouble with multi-recipient messages. Also there are privacy

[AMaViS-user] release problems: 450 4.5.0 Failure: SQL quarantine code not enabled at

2010-02-10 Thread Voytek Eymont
I have several false-positives I need to release (old spam assasin 'date in the past' rules, etc) but I get: # amavisd-release pHHuN15T1vpc 450 4.5.0 Failure: SQL quarantine code not enabled at (eval 95) line 343, GEN202 line 4. # amavisd -V amavisd-new-2.6.4 (20090625) --- Feb 11

Re: [AMaViS-user] release problems: 450 4.5.0 Failure: SQL quarantine code not enabled at

2010-02-10 Thread Voytek Eymont
On Thu, February 11, 2010 3:35 am, Mark Martinec wrote: but I don't know what would be the best way to resolve it properly. Actually the following might be a more universal solution, relying on amavisd to decide whether it is a SQL or file-based quarantine, based on its SQL settings: ---

Re: [AMaViS-user] release problems: 450 4.5.0 Failure: SQL quarantine code not enabled at

2010-02-10 Thread Voytek Eymont
On Thu, February 11, 2010 6:53 am, Voytek Eymont wrote: oops, my 'spams' have been sent to spam mailbox, are not in Q... what the best way to requeue them as 'original sender' ? OK, this done the trick: email.pl v0.1 usage: email.pl file recipient_address [sender_address] does anyone has

[AMaViS-user] ot: date issue with sa

2010-02-10 Thread Voytek Eymont
several of my users had recently quite a few 'inter-office' emails wrongly diverted to 'spam user' mailbox: us...@thisdom us...@thisdom 'thisdom' is hosted on the server, but, the users are remote to the server, mail sent via several diferent isps I've looked at the spam headers, quite a few had

Re: [AMaViS-user] ot: date issue with sa

2010-02-10 Thread Voytek Eymont
On Thu, February 11, 2010 8:33 am, Noel Jones wrote: On 2/10/2010 3:06 PM, Voytek Eymont wrote: add to your spamassassin/local.cf score FH_DATE_PAST_20XX 0 Wild guess is the new SA version installed to a different location, and amavisd is still using the old version of SA. Noel, thanks

Re: [AMaViS-user] release problems: 450 4.5.0 Failure: SQL quarantine code not enabled at

2010-02-10 Thread Voytek Eymont
On Thu, February 11, 2010 6:53 am, Voytek Eymont wrote: oops, my 'spams' have been sent to spam mailbox, are not in Q... what the best way to requeue them as 'original sender' ? can I copy actual mail files from /var/mail/vhost/s...@domain mailbox to /var/virusmail, and, then use amavid

[AMaViS-user] ot: spamassasin/perl IO::File prob

2010-02-10 Thread Voytek Eymont
yesterday I was doing spamassasin update, just noticed in my mailq this: --- 3107CB446FB18582 Thu Feb 11 09:25:23 prvs=6500a7815=accountspaya...@xxx.com (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=32496-02, mime_decode-1 FAILED: Can't locate object method

[AMaViS-user] ot: spamassasin/perl IO::File prob object binmode

2010-02-10 Thread Voytek Eymont
I am getting mails caught in the deferred q with: -- AFA05B44845 3085241 Thu Feb 11 10:07:31 s...@hotmail.com (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=21117-12, mime_decode-1 FAILED: Can't locate object method binmode via package IO::File at

[AMaViS-user] ot: amavis-stats setup? Could not open file maillog

2008-11-02 Thread Voytek Eymont
I'm trying to setup Dale Walsh's amavis-stats 0.1.22 what the proper way to set up access to /var/log/maillog, I'm getting 'permission denied' -rw--- 1 root root 103472334 Nov 2 04:13 /var/log/maillog # amavis-stats debug Nov 2 23:33:38 Amavis-Stats[13230]: starting.

Re: [AMaViS-user] SaneSecurity - new signature format.

2008-10-29 Thread Voytek Eymont
On Wed, October 29, 2008 12:57 pm, Gary V wrote: thanks, Gary, Mike, Mark, remember to run: spamassassin --lint after adding any new rules. ooops, I think the rules might be OK, but, seems I have a problem soemwhere else...: any thoughts ? - # spamassassin --lint Subroutine

Re: [AMaViS-user] SaneSecurity - new signature format.

2008-10-29 Thread Voytek Eymont
(sorry, Gary, meant posting to the list) On Wed, October 29, 2008 12:57 pm, Gary V wrote: If you want the rules file, you could wget if from: http://www200.pair.com/mecham/spam/amavis-sanesecurity_v2.cf remember to run: spamassassin --lint after adding any new rules. Gary, Mike, Mark, many

Re: [AMaViS-user] clam lstat failed

2008-10-28 Thread Voytek Eymont
On Mon, October 27, 2008 10:14 am, Gary V wrote: I think it makes for a cleaner and simpler setup to run as clamav (as it appears you are doing), add the clamav user to the amavis group and insure 'AllowSupplementaryGroups yes' is set. Gary, thanks again for help and suggestions I've

Re: [AMaViS-user] clam lstat failed

2008-10-26 Thread Voytek Eymont
On Fri, October 24, 2008 12:51 pm, Gary V wrote: On 10/23/08, Voytek Eymont [EMAIL PROTECTED] wrote: Typically you need to add the amavis user to the clamav group and insure: AllowSupplementaryGroups yes is in clamd.conf. http://groups.google.com/group/mailing.unix.amavis-user

[AMaViS-user] clam lstat failed

2008-10-23 Thread Voytek Eymont
My clam setup failed quite a while ago, and, it's only now that I've fixed it (or perhaps not) even though clam wasn't running, I never disabled it from amavis (generating continual 'fail' log entries) now, I've started clam, stop/started amavis, and, see this: what is it telling me? Oct 23

Re: [AMaViS-user] ot: perl modules missing?

2008-07-24 Thread Voytek Eymont
On Sun, July 20, 2008 3:53 am, MrC wrote: Voytek Eymont wrote: Well, this is a tough call. You're using a distro with a stability policy, but CPAN is all about latest and greatest. So, if you need stability, stay with your distros packages and just update for security issues. If you want

Re: [AMaViS-user] ot: perl modules missing?

2008-07-19 Thread Voytek Eymont
On Sat, July 19, 2008 5:32 pm, MrC wrote: Voytek Eymont wrote: use Scalar::Util qw(dualvar); line. It is that module that is failing to be included. Since you've updated via CPAN, you can update Scalar::Util as well. In cpan: force install Scalar::Util OK this will force update

Re: [AMaViS-user] ot: perl modules missing?

2008-07-19 Thread Voytek Eymont
On Sat, July 19, 2008 9:00 pm, Voytek Eymont wrote: # service amavisd start Starting Mail Virus Scanner (amavisd): [ OK ] thanks ! now I noticed in mailq there are things with 'failed seek ... File::Temp' I've reinstalled File::Temp, reloaded amavisd, flush

Re: [AMaViS-user] ot: perl modules missing?

2008-07-19 Thread Voytek Eymont
On Sun, July 20, 2008 3:25 am, MrC wrote: Peter Huetmannsberger wrote: If it works for others, that's excellent. But if/when it fails, what's the next step for the OP ? ask question on amavis list ??? g,dr -- Voytek

Re: [AMaViS-user] ot: perl modules missing?

2008-07-19 Thread Voytek Eymont
On Sun, July 20, 2008 3:59 am, MrC wrote: Voytek Eymont wrote: now I noticed in mailq there are things with 'failed seek ... File::Temp' I've reinstalled File::Temp, reloaded amavisd, flush and requed queue reinstalled from what source ? Mr C, many thanks for all the help

[AMaViS-user] ot: perl modules missing?

2008-07-18 Thread Voytek Eymont
I have amavisd on Centos 4x, it all (used to) work fine; this morning I noticed amavisd not running, mail queuing up # service amavisd start Starting Mail Virus Scanner (amavisd): ERROR: MISSING REQUIRED BASIC MODULES: Compress::Zlib BEGIN failed--compilation aborted at /usr/sbin/amavisd line

Re: [AMaViS-user] ot: perl modules missing?

2008-07-18 Thread Voytek Eymont
On Sat, July 19, 2008 2:37 pm, MrC wrote: Voytek Eymont wrote: then it fails what went wrong with my perl ? I think this has occurred for you not too long ago. Have you looked through the past threads here: http://marc.info/?l=amavis-userw=2r=1s=%22Compress%3A%3AZlib%22q=b What

[AMaViS-user] allowing anything in ZIPs setup Q

2008-04-05 Thread Voytek Eymont
I have users that need to send executables and the like via email, currently, amavis rejects them with 'banned message', asking for encrypted ZIPs (see below) I edited /etc/amavis.conf as below, adding 'zip' ### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES: # ve 04/04/2008 added 'zip'

Re: [AMaViS-user] allowing anything in ZIPs setup Q

2008-04-05 Thread Voytek Eymont
On Sat, April 5, 2008 11:28 pm, Gary V wrote: On 4/5/08, Voytek Eymont wrote: It was rejected because it's an .exe file. You might move it up, before this: ### BLOCKED ANYWHERE # qr'^UNDECIPHERABLE$', # is or contains any undecipherable components qr'^\.(exe-ms|dll

Re: [AMaViS-user] allowing anything in ZIPs setup Q

2008-04-05 Thread Voytek Eymont
On Sat, April 5, 2008 11:28 pm, Gary V wrote: On 4/5/08, Voytek Eymont wrote: Gary, further to my earlier post, I'm still struggling to understand this, but, now I've used section of config that Markus posted here few month ago, as below, and, it seems to do what I need

[AMaViS-user] getting rid of quarantined spam after x days

2008-03-23 Thread Voytek Eymont
I currently have spam and bad header sent to spam@ and badheaders@ mailboxes; that works fine, but I need to get rid of accumulated spam after a few days; what the best way to get rid of mails older than say 7 days from spam@ mailbox ? I was thinking of running archive-mail utility against that

Re: [AMaViS-user] what needs reloading to fix IO::File ?

2008-03-18 Thread Voytek Eymont
On Wed, March 19, 2008 4:07 am, MrC wrote: Voytek Eymont wrote: ... === 2008-03-18 10:52:53 [27470] FuzzyOcr stopped, message got 9 points by other FuzzyOcr tests (10.00910). 2008-03-18 11:01:04 [27470] FuzzyOcr stopped, message got 9 points by other FuzzyOcr tests (10.01810

[AMaViS-user] excepting user's outbound newsletters from checks/rejection

2008-03-17 Thread Voytek Eymont
I have a user attempting to send newsletter over SMTP SASL AUTH that get blocked as header below from spam quarantine: what's my best way to avoid rejection ? - X-Quarantine-ID: IyJbtvja55Fh X-Spam-Flag: YES X-Spam-Score: 7.585 X-Spam-Level: *** X-Spam-Status: Yes, score=7.585 tag=0.5

[AMaViS-user] reloading gives dead/locked

2008-03-17 Thread Voytek Eymont
I just tried 'service reload' option but it didn't seem to work I guess this is perhaps a fault with 'service' script ? rather than amavis just reporting just in case centos 4.x # amavisd -V amavisd-new-2.5.4 (20080312) # service --version service ver. 0.91 # uname -a Linux 2.6.9-55.0.9.EL #1

Re: [AMaViS-user] what needs reloading to fix IO::File ?

2008-03-16 Thread Voytek Eymont
On Sat, March 15, 2008 11:06 am, Mark Martinec wrote: For FuzzyOcr it is optional, but you need to tell it that you don't have it. There is a setting in FuzzyOcr.cf where you can list what optional external programs you have. Comment out the ones that you do not have, e.g.: # Include

Re: [AMaViS-user] what needs reloading to fix IO::File ?

2008-03-15 Thread Voytek Eymont
On Sat, March 15, 2008 11:06 am, Mark Martinec wrote: so, I've installed the ready made executables from rpm... hower, I think I'm still missing 'pam-something' and 'someother', they seem to be in another RPM, that I aim to search for this weekend If you mean pamthreshold, it is from the

Re: [AMaViS-user] what needs reloading to fix IO::File ?

2008-03-14 Thread Voytek Eymont
On Fri, March 14, 2008 10:15 pm, Mark Martinec wrote: It is called IO::File, not IO:File. ooops...sorry.. thanks, Mark, now installed fine, hopefully the error will go away... (and, I've fixed most of the fuzzyOCR stuff, as well) -- Voytek

Re: [AMaViS-user] what needs reloading to fix IO::File ?

2008-03-14 Thread Voytek Eymont
On Sat, March 15, 2008 12:46 am, William Yodlowsky wrote: ooops...sorry.. thanks, Mark, now installed fine, hopefully the error will go away... (and, I've fixed most of the fuzzyOCR stuff, as well) Would you mind sharing what you've found with fuzzyocr? I have the same problem and it

Re: [AMaViS-user] can not restart with zlib error

2008-03-13 Thread Voytek Eymont
On Thu, March 13, 2008 5:33 pm, [EMAIL PROTECTED] wrote: peter, thanks It looks like you are running RHEL4. WHy don't you just uninstall the perl module like this: rpm -e perl-Compress-Zlib if it won't do that use: rpm -e --nodeps perl-Compress-Zlib so far so good And then reinstall the

Re: [AMaViS-user] can not restart with zlib error

2008-03-13 Thread Voytek Eymont
On Thu, March 13, 2008 1:44 pm, Clifton Royston wrote: On Thu, Mar 13, 2008 at 01:35:40PM +1100, Voytek Eymont wrote: On Thu, March 13, 2008 12:55 pm, John Evans wrote: cpan install Compress::Zlib with the force option (which I don't remember the syntax for at the moment.) Clifton

Re: [AMaViS-user] can not restart with zlib error

2008-03-13 Thread Voytek Eymont
On Thu, March 13, 2008 6:11 pm, [EMAIL PROTECTED] wrote: Make sure, you hava only one Zlib.pm in your perl folder. i.e. something like this: (on my CentOS5) /usr/lib/perl5/vendor_perl/5.8.8/Compress /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm

Re: [AMaViS-user] can not restart with zlib error

2008-03-13 Thread Voytek Eymont
On Thu, March 13, 2008 6:11 pm, [EMAIL PROTECTED] wrote: Make sure, you hava only one Zlib.pm in your perl folder. i.e. something like this: (on my CentOS5) /usr/lib/perl5/vendor_perl/5.8.8/Compress /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm

Re: [AMaViS-user] still strugling with zlib issue

2008-03-13 Thread Voytek Eymont
On Fri, March 14, 2008 10:25 am, Voytek Eymont wrote: thanks, MrC: # perl -e 'use Compress::Zlib;' Compress::Raw::Zlib defines neither package nor VERSION--version check failed at /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi/Compress/Raw/Zlib. thanks, MrC, I'm thinking I'm

[AMaViS-user] when I have broken fuzzyocr, do I need to remove till fixed ?

2008-03-13 Thread Voytek Eymont
my debug start says, inter alia: can I just 'leave as is' till I figure out /fix /whatever ? or, is there a deterimental aspect to this broken part ? [18179] warn: FuzzyOcr: Cannot find executable for giftopnm [18179] warn: FuzzyOcr: Cannot find executable for jpegtopnm [18179] warn:

[AMaViS-user] can not restart with zlib error

2008-03-13 Thread Voytek Eymont
I have amavisd since long time ago, today, I've altered some x-spam tag values in /etc/amavisd.conf; when I tried to restart, I get this error: how do I reinstall zlib ?? how it went missing...? # service amavisd status amavisd (pid 19876 19734 2671) is running... amavis-milter is stopped #

[AMaViS-user] what needs reloading to fix IO::File ?

2008-03-13 Thread Voytek Eymont
I noticed that in my log Mar 14 13:50:42 bilby amavis[30865]: (30865-01) (!!)TROUBLE in check_mail: mime_decode-1 FAILED: Can't locate object method binmode via package IO::File at /usr/lib/perl5/site_perl/5.8.5/MIME/Body.pm line 437. tried cpan install IO:File CPAN: Storable loaded ok Going

[AMaViS-user] can not restart with zlib error

2008-03-12 Thread Voytek Eymont
I have amavisd since long time ago, today, I've altered some x-spam tag values in /etc/amavisd.conf; when I tried to restart, I get this error: how do I reinstall zlib ?? how it went missing...? # service amavisd status amavisd (pid 19876 19734 2671) is running... amavis-milter is stopped #

Re: [AMaViS-user] can not restart with zlib error

2008-03-12 Thread Voytek Eymont
On Thu, March 13, 2008 12:18 pm, Voytek Eymont wrote: I've tried updating zlib as follows, but, no luck: # rpm -Uvh perl-Compress-Raw-Zlib-2.008-1.el4.rf.i386.rpm Preparing...### [100%] 1:perl-Compress-Raw-Zlib

Re: [AMaViS-user] can not restart with zlib error

2008-03-12 Thread Voytek Eymont
On Thu, March 13, 2008 12:55 pm, John Evans wrote: I'd use cpan as root and do this once in cpan: install Compress::Zlib If it asks for prerequesites to Compress::Zlib, allow cpan to install it. thanks, John, thanks, MrC -- cpan install Scalar::Util Scalar::Util is up to date. but when I

[AMaViS-user] exempting mail outs from self rejection

2008-02-19 Thread Voytek Eymont
what the best way to exempt legit mail outs from 'self rejection' ? one of my users is preparing template for b/cast emails and, sample template gets rejected: --- A message from to: - was considered unsolicited bulk e-mail (UBE). Our internal reference code for your message is

[AMaViS-user] ot: too many subsequent spaces in subject check?

2007-11-15 Thread Voytek Eymont
when I 1st setup Postfix, I've grabbed a whole swag of various antiUCE checks from several Postfix howto sites, and, have used happily ever since; amongst them, I have a Postfix header subject check like: # grep subseq header* header_checks:/^Subject: .*/WARN

Re: [AMaViS-user] ot: too many subsequent spaces in subject check?

2007-11-15 Thread Voytek Eymont
On Fri, November 16, 2007 5:29 am, Noel Jones wrote: Voytek Eymont wrote: I used something similar a couple years ago with a WARN and found it hit nearly equal amounts of ham and spam. So not an accurate predictor of spam at that time at that time, and I quit using it. SpamAssassin would

[AMaViS-user] allowing anything in ZIPs

2007-11-09 Thread Voytek Eymont
I'm trying to setup amavis to allow anything inside zips, but, seems I'm overlloking something, as ZIPs still gets blocked: -- BANNED CONTENTS ALERT Our content checker found banned name: multipart/mixed | application/x-zip-compressed,.zip,twunk_32.zip | .exe,.exe-ms,twunk_32.exe

Re: [AMaViS-user] allowing anything in ZIPs

2007-11-09 Thread Voytek Eymont
On Sat, November 10, 2007 9:06 am, Markus Edholm wrote: Voytek Eymont wrote: do you have this line? # qr'^\.(exe-ms|dll)$', # banned file(1) types, rudimentary Marcus, thanks, I have ### BLOCKED ANYWHERE # qr'^UNDECIPHERABLE$', # is or contains any undecipherable

Re: [AMaViS-user] ot: clamd monitor/restarter

2007-11-08 Thread Voytek Eymont
On Thu, November 8, 2007 10:46 pm, Marius Sturm wrote: have a look at monit: http://www.tildeslash.com/monit/ Marius, thanks, that's exactly what I was after, I'll set crond with it -- Voytek - This SF.net email is

Re: [AMaViS-user] [RFE] An amavisd-based filter to convert Microsoft attachements to ODF ?

2007-11-08 Thread Voytek Eymont
On Thu, November 8, 2007 6:49 pm, Patrick Ben Koetter wrote: * Răzvan Sandu [EMAIL PROTECTED]: Would it be possible to implement an amavisd-based filter (similar to clamav) that would convert on the fly the Microsoft files (MIME attachements to e-mails) to OpenDocument, leaving the body of

[AMaViS-user] ot: clamd monitor/restarter

2007-11-08 Thread Voytek Eymont
whilst in the past clamd has proven extremely reliable, in the last few weeks I had clamd die maube on 3 ocassions for some reason (perhaps related to the additional third party signature downloads getting corrupted?); so I was thinking of some sort of deamon monitor, if it dies to restart it,

Re: [AMaViS-user] ot: clamd monitor/restarter

2007-11-08 Thread Voytek Eymont
On Fri, November 9, 2007 12:05 am, Bill Landry wrote: Voytek Eymont wrote: Are you testing third-party signature files before moving them into production? There are several scripts available for downloading, testing, and utilizing third-party signatures (see www.sanesecurity.com). My

Re: [AMaViS-user] ot: clamd monitor/restarter

2007-11-08 Thread Voytek Eymont
On Fri, November 9, 2007 12:05 am, Bill Landry wrote: Are you testing third-party signature files before moving them into production? There are several scripts available for downloading, testing, and utilizing third-party signatures (see www.sanesecurity.com). My script can also be set to

Re: [AMaViS-user] per domain/user adjustments, end user interfaces ?

2007-10-30 Thread Voytek Eymont
On Tue, October 30, 2007 4:50 am, Gary V wrote: On 10/29/07, Voytek wrote: On Sat, October 20, 2007 2:45 am, Gary V wrote: For spam, quarantine is triggered by kill_level, so, to prevent spam from getting quarantined, you could set kill_level high (like ). For example:

Re: [AMaViS-user] per domain/user adjustments, end user interfaces ?

2007-10-30 Thread Voytek Eymont
On Wed, October 31, 2007 2:17 am, Gary V wrote: On 10/30/07, Voytek Eymont wrote: Personally, I'm not convinced all mail with bad headers should be treated as spam. Gary, thanks yes, I agree, this is just an 'interim' setup, to dump badh to INBOX.spam; once I can do that, I might try

Re: [AMaViS-user] ot: clamd lstat failed

2007-10-29 Thread Voytek Eymont
On Mon, October 29, 2007 9:20 pm, Mark Martinec wrote: # groups clamav clamav : clamav amavis It's the other way around: amavis:*:110:clamav Oops, sorry, you showed the optput of 'groups' command, not a line in /etc/groups. Seems you have it correctly. Perhaps you are missing the

Re: [AMaViS-user] ot: clamd lstat failed

2007-10-29 Thread Voytek Eymont
On Tue, October 30, 2007 11:16 am, Mark Martinec wrote: Looks fine. I don't know why clamd can't read files in directory /var/amavis/tmp/amavis-20071029T132434-15307/parts/ . Just in case please check the protection of each directory in the path - all the directories from /, /var, ... to the

[AMaViS-user] ot: clamd lstat failed

2007-10-28 Thread Voytek Eymont
I'm trying to install amavisd-new and clamav on a new Centos 4.x server, they both seem to run OK, but, I see 'lstat() failed' in the maillog: is that because clamd needs permissions to /var/amavis/tmp/ ? I tried : chmod -R 0770 /var/amavis/tmp but it didn't help # groups clamav clamav :

Re: [AMaViS-user] per domain/user adjustments, end user interfaces ?

2007-10-20 Thread Voytek Eymont
On Sat, October 20, 2007 1:45 am, Gary V wrote: On 10/19/07, Voytek wrote: Gary, many thanks To get amavisd-new to rewrite the address to user+spam, in amavisd.conf, ... Once the address is rewritten, what software is used to get the mail to a spam folder depends on what IMAP software you

Re: [AMaViS-user] per domain/user adjustments, end user interfaces ?

2007-10-19 Thread Voytek Eymont
On Fri, October 19, 2007 9:42 pm, Richard Bishop wrote: On Fri, 19 Oct 2007 21:18:24 +1000 (EST), Voytek Eymont I'm now looking at 'enhancing' the system with providing per domain or even per user controls and user 'self management tool' I suggest you take a look at MailZu which

[AMaViS-user] per domain/user adjustments, end user interfaces ?

2007-10-19 Thread Voytek Eymont
I have Postfix 2.4 /amavis 2.5.2 /mysql 4.1 /clam with virtual domains/users; it all works very well, with 'one size fits all' approach; with just badh/virus/spam/forbidden_lovers as only individual exceptions I'm now looking at 'enhancing' the system with providing per domain or even per user

Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread Voytek Eymont
On Mon, October 15, 2007 5:55 pm, Jordi Espasa Clofent wrote: I didn't know amavislogsumm, but I can see in the changelog that the last version is dated on feb-2004. It seems an old and out-of-date project. ¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella, an active member of

[AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-14 Thread Voytek Eymont
I have postfix with amavisd, I just tried getting some result reports, get as below; I'm fairly certain 'it used to work'... amavis is OK, spam goes to spam, just, nothing shows in reports what did I stuff up ? # amavisd -V amavisd-new-2.5.0 (20070423) # amavislogsumm --version amavislogsumm

Re: [AMaViS-user] Goed virusscanner

2006-12-12 Thread Voytek Eymont
On Tue, December 12, 2006 5:33 pm, Johan Barelds wrote: Hi all, I am only using ClamAv at the moment for virus scanning. Is there a good (free) virusscanner which can be used besides ClamAv to create a second line of defense? Thanks for your suggestions! I think BDC used to have, perhaps

Re: [AMaViS-user] Goed virusscanner

2006-12-12 Thread Voytek Eymont
On Wed, December 13, 2006 4:48 am, Benny Pedersen wrote: On Tue, December 12, 2006 12:03, Voytek Eymont wrote: it only depends on how much virus one commit to clamav, i use bitdefender and f-prot, each time this 2 finds a virus not cougt by clamav i commit it if all users do this from

Re: [AMaViS-user] spam reports get spam treatment, how to workaround ?

2006-12-02 Thread Voytek Eymont
On Sat, December 2, 2006 5:11 am, MrC wrote: Gary's solutions have been good ones. additional setup of postfix/amavis. If you're interested, I'll send you the mime-encoding script and source to mini_sendmail. MrC, if you feel your scripts are idiot-proof, pls send to [EMAIL PROTECTED]

Re: [AMaViS-user] spam reports get spam treatment, how to workaround ?

2006-11-30 Thread Voytek Eymont
On Thu, November 30, 2006 2:16 pm, Gary V wrote: Voytek wrote: On Thu, November 30, 2006 12:45 pm, Gary V wrote: is this the go: ? - pickupfifo n - n 60 1 pickup -o receive_override_options=no_header_body_checks -o content_filter= Yes, you can

Re: [AMaViS-user] spam reports get spam treatment, how to workaround ?

2006-11-29 Thread Voytek Eymont
On Thu, November 30, 2006 12:45 pm, Gary V wrote: Possibly bypass amavisd-new completely or use a policy bank to bypass spam checks by overriding the content_filter for the pickup service. You could even limit bypassing to a single recipient if desired. Here is an example:

[AMaViS-user] spam reports get spam treatment, how to workaround ?

2006-11-28 Thread Voytek Eymont
I have amavisd-new and postfix; I use Postconf's spamreport to send blocked email reports to some users; as of few weeks ago, *some* of my spam reports get canned as 'spam' and, don't go very far. what's my best solution to exempt or what should I do to allow spam reports to be delivered ?

[AMaViS-user] d-ot: sa tags meanings

2006-11-14 Thread Voytek Eymont
dumb Q: where do I find meaning of various SA tags ? I managed to find some on the http://spamassassin.apache.org/tests_3_1_x.html, but, can't find reference to TVD_FW_GRAPHIC Yes, score=7.719 tag=0.5 tag2=6.31 kill=6.31 tests=[BAYES_20=-0.74, DATE_IN_FUTURE_12_24=2.767, EXTRA_MPART_TYPE=1.091,

Re: [AMaViS-user] d-ot: sa tags meanings

2006-11-14 Thread Voytek Eymont
On Tue, November 14, 2006 11:05 pm, Henrik Krohns wrote: On Tue, Nov 14, 2006 at 10:11:29PM +1100, Voytek Eymont wrote: That comes from sa-update updates, I don't think all have reference. Find the updates from /var/lib/spamassassin where they normally go. If you can't understand what

[AMaViS-user] ot: SA FuzzzyOCR rejection Q

2006-11-07 Thread Voytek Eymont
I have a user complain valid sender got rejected, mail log says: Nov 3 14:19:17 koala amavis[26922]: (26922-03-3) SPAM, [EMAIL PROTECTED] - [EMAIL PROTECTED], Yes, score=6.941 tag=0.5 tag2=6.31 kill=6.31 tests=[BAYES_00=-2.599, EXTRA_MPART_TYPE=1.091, FUZZY_OCR=6.000, HTML_MESSAGE=0.001,

Re: [AMaViS-user] Tagging image spam

2006-10-22 Thread Voytek Eymont
On Sun, October 22, 2006 11:58 pm, albi albinootje wrote: On 10/22/06, techlist06 [EMAIL PROTECTED] wrote: i've decided to block .gif completely and advised my users to either use .jpg or .png, or use something like http://imageshack.us or to wrap it with gnupg complete blocking of .gif

Re: [AMaViS-user] Tagging image spam

2006-10-22 Thread Voytek Eymont
On Mon, October 23, 2006 12:27 am, albi albinootje wrote: On 10/22/06, Voytek Eymont [EMAIL PROTECTED] wrote: On Sun, October 22, 2006 11:58 pm, albi albinootje wrote: On 10/22/06, techlist06 [EMAIL PROTECTED] wrote: how/where did you implement blocking ? i've added gif to # banned

Re: [AMaViS-user] Tagging image spam

2006-10-22 Thread Voytek Eymont
On Mon, October 23, 2006 7:37 am, mouss wrote: albi albinootje wrote: mm, i wasn't aware that postfix can possibly also block gif-attachments, thanks for the reminder Not that I encourage blocking gif, but you can use header_checks. something like: /^Content-Type:\s*image\/gif/

Re: [AMaViS-user] amavisd-new-2.4.3 RELEASED

2006-10-01 Thread Voytek Eymont
On Mon, October 2, 2006 4:03 am, Ralf Hildebrandt wrote: * Mark Martinec [EMAIL PROTECTED]: Version amavisd-new-2.4.3 has been released. It seems to work here (no config change needed) same here, shut down, copied over, restarted, seems OK thanks -- Voytek

[AMaViS-user] recovering from Perl failure: transport unavailable

2006-07-04 Thread Voytek Eymont
somehow, whilst doing a Perl CPAN updates, my Perl got out of sync, causing Amavis failure. in the interim, I've diabled amavis from /etc/postfix/main.cf, so, my mail works again before I look at fixing my problems: how do I get all the 'stuck' mail out: #mailq ... F0D99238A2E11257 Tue Jul

[AMaViS-user] bypassing for sent to address ?

2006-05-31 Thread Voytek Eymont
Oz gov. recently set up an initiative for combating/tracing UCE/UBE/spam, where ppl can submit received spam for whatever action they'll take so, I figured I would submit a bunch of NAB phisihing emails that amavis just deposited to 'infected@' address of course as soon as I sent them, they

Re: [AMaViS-user] upgrading 2.3.1 ?

2006-05-18 Thread Voytek Eymont
On Wed, May 17, 2006 8:49 am, Mark Martinec wrote: Your Perl 5.6.1 is quite old, I haven't tested recent versions of amavisd-new with anything older than Perl 5.8.3. I believe you should upgrade your Perl and associated modules before or with upgrading of amavisd-new. Mark, thanks I just

Re: [AMaViS-user] upgrading 2.3.1 ?

2006-05-18 Thread Voytek Eymont
On Fri, May 19, 2006 1:58 am, Mark Martinec wrote: can I simply edit top of amavisd to point it at the more recent Perl ? Yes you can. But you would need to be extremely careful when using existing (and installing new) Perl modules, as these may come from (go to) one or the other of your

[AMaViS-user] upgrading 2.3.1 ?

2006-05-16 Thread Voytek Eymont
Hi, I'm running amavisd-new-2.3.1 perl v5.6.1 postfix 2.1x on RH73 all is well, it's not a very large setup, rather basic setup just looking on the amavisd-new site, I see we're up to 2.4.1 any compelling reasons to upgrade ? what is the suggested u/g procedure ? as always, many thanks to