Re: amavisd-new regression suite

2016-03-19 Thread Quanah Gibson-Mount
--On Friday, March 18, 2016 12:31 PM -0700 "C.J. Collier" wrote: On Tue, Mar 15, 2016 at 10:38 PM, C.J. Collier wrote: Sounds like time to fork. After discussion with management, I need to make it exceedingly clear that

Re: From address spoofing my domain

2016-03-19 Thread @lbutlr
On Mar 19, 2016, at 4:24 PM, Benny Pedersen wrote: > sender did not add @ in from header, if you remove @forged domain you see > something about mortgage This amavisd adding the domain and why is it generating an error that stops the spam from being quarantined and/or tagged? --

Re: From address spoofing my domain

2016-03-19 Thread @lbutlr
On Mar 19, 2016, at 3:47 PM, @lbutlr wrote: > A user has been getting a lot of spam with headers that look something like > this: > > From: bos...@covisp.net, h...@covisp.net, restorat...@covisp.net One other detail, these are emails that SHOULD be getting quarantined. Here

Re: block a particular double extension files in amavisd.conf

2016-03-19 Thread Indunil Jayasooriya
On Thu, Mar 17, 2016 at 1:46 PM, Dino Edwards wrote: > While users surf the Internet? So, not coming through e-mail? > > > Your point is OK. But, I am afraid that an attacker sends emails to our domain with those attachment, I want my mail filer to block it.

Possible bug for fix in 2.11.0: null sender in releasing email from sql quarantine

2016-03-19 Thread Tom Johnson
Mark- Since you're preparing 2.11.0 for release, can you take a look at this possible bug I reported last December? > We're using a sql quarantine. > > We'd like to release emails from the quarantine and have the SMTP envelope > MAIL FROM reflect the original sender. > > So we set

@virus_name_to_spam_score_maps

2016-03-19 Thread Marco
Hello Amavis users, recently clamav and sanesecurity signature names have changed. New types have been introduced, such as yara. I added these to my @virus_name_to_spam_score_maps: [ qr'^SecuriteInfo\.com\.Spam'=> 0.1 ], [ qr'^YARA\.Sanesecurity_Spam'=>

Re: amavisd-new regression suite

2016-03-19 Thread C.J. Collier
On Tue, Mar 15, 2016 at 10:38 PM, C.J. Collier < cjcoll...@linuxfoundation.org> wrote: > Sounds like time to fork. > After discussion with management, I need to make it exceedingly clear that this is my personal opinion and that my employer in no way condones or approves of this message. I am

block a particular double extension files in amavisd.conf

2016-03-19 Thread Indunil Jayasooriya
Hi, I want to block files having double extensions. while users surf internet, some files such as* e7ea.tmp.exe* will be automatically downloaded. e7ea.tmp.exe is a ransomware. Attackers can send mails with files of these types as well. Now, I want to block files having double extension such

ANNOUNCE: amavisd-new-2.11.0-rc1 release candidate is available

2016-03-19 Thread Mark Martinec
A release candidade RC1 of the coming version 2.11.0 of amavisd-new is available at: https://www.ijs.si/software/amavisd/amavisd-new-2.11.0-rc1.tar.xz Release notes are at: https://www.ijs.si/software/amavisd/release-notes.txt Please try it out, feedback is welcome. amavisd-new-2.11.0