Kaspersky AV

2016-03-02 Thread Olivier Nicole
Hi, I use Kaspersky for Linux (and FreeBSD) on my amavis server (FreeBSD 10.2) but I have an issue. When I define: @keep_decoded_original_maps = (new_RE( qr'^MAIL$', # retain full original message for virus checking The mail is being checked twice and trigger the anti-virus twice. If I

RE: js in zip attachment of e-mail

2016-03-02 Thread Dino Edwards
Just a way of doing it. Here's the whole config I use for a rule named "Default" since I like to assign file rules to amavis rules which in turn I assign to particular users. The "=>1" part means block. For allow you would use "=>0" and I just learned the "i" means case insensitive and if you

Re: Re: Addition of Another Spam filter to Amavis

2016-03-02 Thread Stephen Davies
On 01/03/16 21:46, ashish behl wrote: Hello All, Please let me know if anyone can suggest any options for adding a new spam filter to amavis. I have for now achieved this by writing a new module, extending from package Amavis::SpamControl and implementing method check, on the same lines as

Re: js in zip attachment of e-mail

2016-03-02 Thread @lbutlr
On Wed Mar 02 2016 07:32:48 Dino Edwards said: > > Like this: > > [qr'.\.(js)$'ix => 1] And where would I put that? And what sort of config is that? I’ve never seen any config file that put things inside square brackets… -- Blatant mistakes are the

RE: expressions clarification

2016-03-02 Thread Dino Edwards
Is there a scenario where whitespace, comments and case should not be ignored? > -Original Message- > From: amavis-users [mailto:amavis-users- > bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Pete > Houston > Sent: Wednesday, March 02, 2016 9:28 AM > To:

RE: js in zip attachment of e-mail

2016-03-02 Thread Dino Edwards
Like this: [qr'.\.(js)$'ix => 1] Assuming you have a zip extractor installed in your machine it will work inside zip files. > -Original Message- > From: amavis-users [mailto:amavis-users- > bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of @lbutlr > Sent: Wednesday,

expressions clarification

2016-03-02 Thread Dino Edwards
I'm trying to figure out what the difference between the following expressions are: [qr'.\.(mdb)$'ix => 0] [qr'.\.(uue)$'i => 0] [qr'^\.(lha)$' => 0] Mainly, trying to figure out when you put in "ix", "i" or nothing at all at the end of the expression. Thanks

Re: js in zip attachment of e-mail

2016-03-02 Thread @lbutlr
On Mar 1, 2016, at 3:05 PM, Jakob Curdes wrote: > Am 01.03.2016 um 22:38 schrieb Thomas Spuhler: >> There are a lot of e-mails on the lose with subject "Unpaid invoice # " >> containing a zipped js (Java Script) I got about 10 of them today. >> Is there a way to filter

block a mail based on Subject or body

2016-03-02 Thread Indunil Jayasooriya
Hi, How to block a mail based on Subject or body with amavisd-new ? -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts