Re: X-Amavis-Alert: BANNED, message contains x.com

2024-07-17 Thread Benny Pedersen
Thomas Barth skrev den 2024-07-17 10:21: 250 2.7.0 Ok, discarded, id=382000-05 - BANNED: .asc,5152170002814110420.bat However, the system notifies me by e-mail when an e-mail has been banned. But it really rarely happens. I just have to keep an eye on it. okay with me :=) but https://sanes

Re: X-Amavis-Alert: BANNED, message contains x.com

2024-07-16 Thread Benny Pedersen
Thomas Barth skrev den 2024-07-16 18:58: Where can I set Amavis so that mails with invoices from X are not banned? make a dkim policy bank where banned content is accepted or disable banned quarantine hopefully x do dkim

Re: opinions about Ikarus

2024-01-08 Thread Benny Pedersen
A. Schulze skrev den 2024-01-08 13:38: Hello, since years, amavis support Ikarus Virus scanners: https://gitlab.com/amavis/amavis/-/blob/master/conf/amavisd.conf?ref_type=heads#L721-752 I like to collect opinions about - is it used - experiences - it's reliability - it's performance - what

Re: How to bypass a recipient domain?

2023-11-27 Thread Benny Pedersen
Ulrich Hiller, MPI Astronomie skrev den 2023-11-27 12:16: Hello, i want to bypass amavis for a specific *recipient* domain (not sender!). I am not sure how to do that, because all i find is whitelisting a sender. I would do it on MTA level in postfix's whitelist.pcre: /example\.com/ FILTER

Re: mynetworks - should server IP be included ?

2023-09-17 Thread Benny Pedersen
Patrick Ben Koetter skrev den 2023-09-17 08:45: * Benny Pedersen : li...@sbt.net.au skrev den 2023-09-16 14:09: > I;m just checking my amavis setup, under mynetworks I have: > > @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 > 10.0.0.0/8 172.16.0.0/12

Re: mynetworks - should server IP be included ?

2023-09-16 Thread Benny Pedersen
li...@sbt.net.au skrev den 2023-09-16 14:09: I;m just checking my amavis setup, under mynetworks I have: @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ); should I also include actual server IP ? in postfix main.cf I have s

Re: amavisd-new with postgresql help

2023-07-01 Thread Benny Pedersen
Christoph Moench-Tegeder skrev den 2023-06-14 23:05: ## Benny Pedersen (m...@junc.eu): $sql_select_white_black_list = 'SELECT wb FROM wblist,mailaddr WHERE (wblist.rid=?) AND (wblist.sid=mailaddr.id) AND (mailaddr.email IN (%k)) ORDER BY mailaddr.priority DESC'; Jun 14 21:46:02

amavisd-new with postgresql help

2023-06-14 Thread Benny Pedersen
@lookup_sql_dsn = ( ['DBI:Pg:database=amavis;host=127.0.0.1;port=5432', 'amavis', 'password' ] ); @storage_sql_dsn = @lookup_sql_dsn; $sql_select_policy = 'SELECT *,users.id FROM users,policy WHERE (users.policy_id=policy.id) AND (users.email IN (%k)) ORDER BY users.priority DESC'; $sql_s

Re: Virus checking options

2023-04-25 Thread Benny Pedersen
Wayne Spivak skrev den 2023-04-26 01:14: Is there a fuller explanation of the virus checking options. depends on virus scanner, amavisd is just a interface to many scanners, not a virus scanner on its own I want Clamsdcan to check attachments, but warn me, not either bock or delete the atta

Re: Amavisd restarts

2023-04-05 Thread Benny Pedersen
Stephen Davies skrev den 2023-04-05 09:15: I use bogofilter rather than spam assassin and the restarts are happening about every 3 minutes. thanks for using amavisd and cut the repley content :) may i ask are you using bogofilter-milter or just bogofilter ?, and are you using amavisd-milter

Re: Whitelisting mail servers

2022-11-27 Thread Benny Pedersen
Nikolaos Milas skrev den 2022-11-27 19:35: On 24/11/2022 8:23 π.μ., Patrick Ben Koetter wrote: I suggest to use valid DKIM signatures, if your bank sends DKIM signed messages and use one or a list of policy banks to overrule (here: disable) specific content classifications: Hi Patrick and eve

Re: Whitelisting mail servers

2022-11-23 Thread Benny Pedersen
Nikolaos Milas skrev den 2022-11-23 14:09: Is there a way to whitelist a mail server so that all mail sent to us by that server is accepted, bypassing all other checks, especially Bayes filtering? spamassassin use default dnswl.org The problem is with Banks; we are receiving huge amounts of

Re: X-Spam header missing regardless of low sa_tag_level_deflt but scores present in logs

2022-08-17 Thread Benny Pedersen
Bert Van de Poel skrev den 2022-08-18 01:18: Thanks for your help Benny and Matus! It seems like my problem was indeed @local_domains_acl. I've now had it set to "." for a few hours and all my mail is getting tagged as it should. do not just add "." there, you expose private info to all remote

Re: X-Spam header missing regardless of low sa_tag_level_deflt but scores present in logs

2022-08-17 Thread Benny Pedersen
t; ); is imho more correct 1;  # ensure a defined return /etc/mailname contains sys.bhack.net and nothing else I have been wondering about this "RelayedOpenRelay" too, but I don't see anything being "too open". On 17/08/2022 14:09, Benny Pedersen wrote: Bert Van d

Re: X-Spam header missing regardless of low sa_tag_level_deflt but scores present in logs

2022-08-17 Thread Benny Pedersen
Bert Van de Poel skrev den 2022-08-17 12:24: Aug 17 11:59:33 sys amavis[2337329]: (2337329-17) Passed CLEAN {RelayedOpenRelay}, [127.0.0.1] [40.107.20.101] -> , Message-ID: <8e22260c-6d20-86e4-d9e1-1a5d8a963...@uclouvain.be>, mail_id: 4EKz9ECqUE6T, Hits: 1.785, size: 8356, queued_as: 7C866BC40C

Re: RelayedOpenRelay?

2022-07-21 Thread Benny Pedersen
Alex skrev den 2022-07-21 04:54: Hi, I realize this is an FAQ, but I've tried an exhaustive list of changes to try and solve it and still can't figure out why mail is reported as RelayedOpenRelay. I found this thread from more than a decade ago where Mark suggested it was somehow related to the

Re: Question regarding new domains on server

2022-05-19 Thread Benny Pedersen
On 2022-05-19 15:59, Matus UHLAR - fantomas wrote: Please keep these unproductive and useless comments out. its open source maillist, why complain to non maintainers ? sorry for being stypid now

Re: Question regarding new domains on server

2022-05-19 Thread Benny Pedersen
On 2022-05-19 15:51, Matus UHLAR - fantomas wrote: don't override debian's 05-domain_id edit 50-user file and put your changes there. why debian override anything in /etc at all :/ in gentoo all in /etc is config protected

Re: Question regarding new domains on server

2022-05-19 Thread Benny Pedersen
On 2022-05-19 15:44, Timo Brandt wrote: I removed the dots and restarted postfix and amavis but nothing changed. For umweltsynergien.de Spam-Header are set, for timo-brandt.de not with so much sparse info there is no one that can help you logs please

Re: Question regarding new domains on server

2022-05-19 Thread Benny Pedersen
On 2022-05-19 15:00, Filip Bartmann wrote: čt 19. 5. 2022 v 14:44 odesílatel Benny Pedersen napsal: On 2022-05-19 14:28, Timo Brandt wrote: Maybe you can advise me what to do? Do you need any config files to be shown? amavisd does not add headers to recipints not local, so make sure all

Re: Question regarding new domains on server

2022-05-19 Thread Benny Pedersen
On 2022-05-19 14:28, Timo Brandt wrote: Maybe you can advise me what to do? Do you need any config files to be shown? amavisd does not add headers to recipints not local, so make sure all domains is known to be local with a domain list for amavisd, if not that, post amavisd logs for what hap

Re: Better antivirus (AV) protection?

2022-04-05 Thread Benny Pedersen
On 2022-04-05 23:20, Nikolaos Milas wrote: On 5/4/2022 11:06 μ.μ., Bastian Blank wrote: This is no 7z file, the same as was already reported here. Exactly. However the problem was solved, as you may see in the last mails of the thread, by installing unrar on the OS. sure, my point is unrar i

Re: Better antivirus (AV) protection?

2022-04-05 Thread Benny Pedersen
On 2022-04-05 09:57, Nikolaos Milas wrote: Based on your experiences with similar setups, can you please suggest additional ways to provide high (or at least better) AV protection? http://sanesecurity.com/foxhole-databases/ add as much of that 3dr party signatures to clamav, disable decode i

Re: Keyword based custom subject warning

2022-03-07 Thread Benny Pedersen
On 2022-03-07 12:23, Dominic Raferd wrote: On 07/03/2022 11:12, Damian wrote: apparently, our users are receiving emails containing links and /or references to various publications, some of which are considered 'predatory'. Emails usually contain ISSN (International Standard Serial Number) and

Re: Keyword based custom subject warning

2022-03-07 Thread Benny Pedersen
On 2022-03-07 12:13, Matus UHLAR - fantomas wrote: I was tinking if this could be solved using clamav with YARA rule that would detect such ISSN and report it, probably with virus_name_to_spam_score_maps ? yes this would work, but clamav is not a spam scanner i make more sense to crate spamas

Re: Keyword based custom subject warning

2022-03-07 Thread Benny Pedersen
On 2022-03-07 11:49, Patrick Ben Koetter wrote: it is not possible as of now. Your best guess is probably to look for other MILTER applications that let you scan a messages body and trigger an action, such as changing the Subject:-header. its simple in spamassassin, if i know what to scan fo

Re: Keyword based custom subject warning

2022-03-07 Thread Benny Pedersen
On 2022-03-07 10:41, Danilo Godec wrote: apparently, our users are receiving emails containing links and /or references to various publications, some of which are considered 'predatory'. Emails usually contain ISSN (International Standard Serial Number) and the idea is to scan the body of an ema

Re: Per User Bayes

2022-01-20 Thread Benny Pedersen
On 2022-01-20 16:24, Deeztek Support wrote: I'm having a very hard time parsing what you are talking about. I just wanted to know if there is a way to run per-user bayes in SA with Amavis. are you trolling now ? https://mailing.unix.amavis-user.narkive.com/5oit9RJe/per-user-sa-bayes-tokens-in-

Re: Per User Bayes

2022-01-20 Thread Benny Pedersen
On 2022-01-20 15:13, Dino Edwards wrote: how is your dbi config in spamassassin ? I don't have dbi config in spamassassin. I'm using file based bayes with all that permisson problems as readed on maillists running spamd as root is also discoraged if you force specifik username, then comment

Re: Per User Bayes

2022-01-19 Thread Benny Pedersen
On 2022-01-19 11:43, Dino Edwards wrote: I was trying to setup Per User Bayes with SA and Amavis but I couldn't get it to work. Then I read somewhere that even though SA's default behavior is Per User Bayes, using Amavis forces you with Global Bayes. Is that still the case? If so, are there plans

Re: Undesired ban of text mail

2021-12-11 Thread Benny Pedersen
On 2021-12-11 12:08, Nikolaos Milas wrote: I find banned plain text mail as follows (- I replaced real usernames with user1-3): p.path BANNED:1 us...@noa.gr: "P=p001,L=1,M=text/plain,T=exe", matching_key="(?^:^\\.(exe|lha|cab|dll|gz|tgz|lzh)$)" it contains both text and a modos exe file woul

Re: Cannot ban lzh attachment

2021-11-30 Thread Benny Pedersen
On 2021-11-30 13:35, Nikolaos Milas wrote: Hello, On CentOS 8 / amavis 2.12 we are receiving (a significant number of) incoming mail, each addressed to a large number of people in our org, each with two virus infected attachments: .lzh and .gz extension. clamav handle this very well if using f

Re: disable bad header checks ?

2021-10-29 Thread Benny Pedersen
On 2021-10-29 13:36, li...@sbt.net.au wrote: out of curiosity, in current q found these, from last 10 days: if amavisd should solve it it would require mime sanitizering how would any mua handle bad mime ?

Re: disable bad header checks ?

2021-10-29 Thread Benny Pedersen
On 2021-10-29 06:37, li...@sbt.net.au wrote: X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "MIME-Version" oh its not amaivisd fault then, no solution other then ignore it or tell the sender :) that sayed, you can make the test and disable the quarntine, i cant remember how in

Re: Question about '50-user' setting

2021-10-15 Thread Benny Pedersen
On 2021-10-15 05:13, Tyler Montney wrote: What does “force MTA conversion to 7-bit (e.g. before DKIM signing)” mean? if dkim signs 8bit mime it could be unstable on verify, so to make it more safe on verify dkim it is preprossed to only support 7bitmime, with in turn make dkim signer only see

Re: Using Amavis to reject/quarantine email with MIME-encoded Subject Fields

2021-08-31 Thread Benny Pedersen
On 2021-08-31 15:44, Simon B wrote: Hi I am receing a lot of spam, and the only constant is the email subject Subject: =?utf-8?B?0J/RgNC10LTQu9C+0LbQtdC90LjQtQ==?= How can I user Amavis to block, or at least add a couple of points to the X-Spam-Score? by adding rules to spamassassin, pretty

Re: Using Amavis to reject/quarantine email with MIME-encoded Subject Fields

2021-08-31 Thread Benny Pedersen
On 2021-08-31 18:58, Benedict White wrote: header MyRuleNumberOne Subject =~ /RgNC10LTQ/i score MyRuleNumberOne 5.0 The rules looks for something containing " RgNC10LTQ" and the i after the / means case insensitive. You can remove that if this is the precise spelling you ar

Re: Issue with mails in sql quarantine

2021-06-13 Thread Benny Pedersen
On 2021-06-14 01:26, Benedict White wrote: I had an issue for two days over a weekend where most emails got quarantined. Does anyone have an sql statement to list quarantined emails by user please? https://github.com/zedzedtop/mailzu google more on mailzu you should not make tracking links i

Re: ***ACHTUNG UNGEPRUEFT*** Normal mail classified as virus

2021-02-08 Thread Benny Pedersen
On 2021-02-05 18:55, Nikolaos Milas wrote: X-Amavis-Modified: Mail body modified (defanged) - de.postfix.org please fix amavisd defang, it breaks reply :/

***ACHTUNG UNGEPRUEFT*** Re: Amavis stats

2021-02-04 Thread Benny Pedersen
--- Begin Message --- On 2021-02-03 15:15, Nikolaos Milas wrote: Do you know of any external script (like pflogsumm) or built-in amavis option(s) that will provide a daily stats report with info like: http://www.huge-man-linux.net/man1/amavis-stats.html http://manpages.ubuntu.com/manpages/bio

Re: DKIM sign only unsigned

2020-12-30 Thread Benny Pedersen
On 2020-12-30 12:51, Matus UHLAR - fantomas wrote: On 28.12.20 18:20, Benny Pedersen wrote: On 2020-12-28 18:09, Matus UHLAR - fantomas wrote: we have mail gateway where most of internal mail comes already signed, and I'd prefer to sign only mail that is not signed already. +1 can I

Re: DKIM sign only unsigned

2020-12-28 Thread Benny Pedersen
On 2020-12-28 18:09, Matus UHLAR - fantomas wrote: we have mail gateway where most of internal mail comes already signed, and I'd prefer to sign only mail that is not signed already. +1 can I dkim-sign only mail that is not already signed? with policy banks yes you know how to make that

Re: Noob-Openly seeking guidance

2020-11-23 Thread Benny Pedersen
Joe Acquisto-j4 skrev den 2020-11-23 19:28: persistent connections to certain AV scanners, e.g. Sophie and Trophie; or directly callable AV scanner via Perl module to access Sophos engine: SAVI-Perl, or via Mail::ClamAV for ClamAV access;" it most simple to add foxhole 3dr party signatures for

amavisd dkim sign maillists

2020-11-01 Thread Benny Pedersen
please stop it, what amavisd should do is to ARC seal it, not doing DKIM sign all postings, i can only see dovecot maillist does what its needed to not break DKIM mails current amavisd does just not break DKIM, but it could be perfect to the specs if it did use the cyrcles to do ARC its not

Re: bypass clamav scan if it is down

2020-11-01 Thread Benny Pedersen
Damian skrev den 2020-11-01 20:41: If Clamav is down, in all mails I got the message "UNCKECKED". I don't want this behaviour. Put "['fake scanner', sub {0}]" into @av_scanners_backup. or comment all backup scanners

Re: banned content DISCARD istead of BOUNCE

2020-10-29 Thread Benny Pedersen
Damian skrev den 2020-10-29 22:38: The banned files check is the only mechanism I am aware of which allows categorization based on file names or file types. why not just use foxhole in clamav ? define exe in amavisd is just redudendant imho

Re: Invalid Header due to header filed: "Date"

2020-07-12 Thread Benny Pedersen
Michael C Miller skrev den 2020-07-12 19:53: Is there a way for me to make an exception just for the date so I can use Scan to Email on a HP Color LaserJet MFP M477? logs ? Thank you in advanced. maybe crystall balls exists, i dont know :=)

Re: skip checking for mail address

2020-05-20 Thread Benny Pedersen
On 2020-05-20 14:11, Matus UHLAR - fantomas wrote: we managed to change source address of the mail from null <> to the same that is in From: header, so finally I should be able to avoid scanning. amavisd have wasted code for dsn's you only maked a badly workaround

Re: skip checking for mail address

2020-05-19 Thread Benny Pedersen
On 2020-05-19 13:21, Matus UHLAR - fantomas wrote: all mail comes through this gateway, so I believe policy banks can't help. add ALL gateway ips to spamassassin, do the exact same to amavisd, and use postfix propperly to forward client ips so amavisd know if it gateway or not is that not

Re: skip checking for mail address

2020-05-18 Thread Benny Pedersen
On 2020-05-18 16:34, Matus UHLAR - fantomas wrote: Or is there any trick to whitelist such address? setup policy banks, when mails is originating whitelist in this policy bank only i think its good dokumented, maybe dkim sign all mails and then whitelist based on dkim signed domain last

Re: amavisd and centos8 compatibility

2020-04-16 Thread Benny Pedersen
On 2020-04-17 04:26, Ralph Seichter wrote: The good thing about open source software is that you can potentially tackle problems yourself. ;-) like i did last days with automx2 on gentoo with lets encrypt, was a learning curve for me emerge certbot-apache certbot --apache -d foo.example.org

Re: malware went through because RAR file fails to unpack

2020-03-23 Thread Benny Pedersen
On 2020-03-23 20:42, Patrick Ben Koetter wrote: Recent clamav version detect RARv5 archives and unpack them properly. adding foxhole to clamav will detect it until signature is maked, hopefully clamav get malware from virustotal

Re: malware went through because RAR file fails to unpack

2020-03-23 Thread Benny Pedersen
On 2020-03-23 18:01, Engels, Jan wrote: i.e. malware went through amavis because the RAR archive containing the malware could not be unpacked: is clamav detect this virus ? is amavisd unpacking it, or just not detect it ? sorry not using amavisd here, but fuglu could have same problem

Re: Sender white list

2019-08-13 Thread Benny Pedersen
korsar...@gmail.com skrev den 2019-08-13 12:42: Do the sender domains use DKIM? If they do, amavis can route messages from specific sender domains to dedicated policy banks. No they do not. good or bad ? to make it clear, do not whitelist untrusted senders, not even if sender domains is lo

Re: compressed files and 3rd-party tools to unpack them - why not let them do the job?

2019-08-01 Thread Benny Pedersen
Stefan Bauer skrev den 2019-08-01 14:45: I have no problem to install unrar-free, I'm asking, why it would make sense to have support in amavis or what might be the reasons, to keep unpacking, clamavs job. not all clamav can unpack rar, some debian maintainers say clamavs unrar lib is not fre

Re: AW: whitelist

2019-07-15 Thread Benny Pedersen
Ekkehard Burkon skrev den 2019-07-15 10:22: Running it as smtpd_proxy_filter by Postfix design limits its ability to integrate with other tools – MITLTERs won't be able to "see" the body, which mostly makes them useless. In a MILTER Setup the software does not see the Mail body? But that would

Re: whitelist

2019-07-12 Thread Benny Pedersen
Gregory Sloop skrev den 2019-07-12 17:55: DR> From: header) have their SA score reduced by (typically) 4. DR> /etc/spamassassin/local_whitening.cf: DR> describe LOCAL_WHITENING_4 Whiten known good senders DR> score LOCAL_WHITENING_4 -4 DR> header LOCAL_WHITENING_4 From =~ DR> /(known\@goodname\

Re: whitelist

2019-07-12 Thread Benny Pedersen
Deeztek Support skrev den 2019-07-12 18:47: BUT... amavis identifies the address by matching the envelope sender OR the From: header sender. So (in theory) a spammer can easily fake the envelope sender and get whitelisted. I was under the impression that amavis uses the Return-Path header and

Re: Domain custom SpamAssassin rules score with Amavis

2019-06-03 Thread Benny Pedersen
mabi skrev den 2019-06-03 20:59: I am planning to map everything to sql: in my @sa_userconf_maps and then simply let SA do its job by selecting the right username in the userpref table. This means if all works like I think I should be able to have per domain and per user user preferences where u

Re: About "Passed CLEAN {RelayedOpenRelay}"

2018-12-20 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2018-12-20 21:39: Patrick Ben Koetter skrev den 2018-12-19 21:28: It usually means amavis has no idea what is inbound and what is outbound mail. Configure @mynetworks and local_domains_maps correctly and you should be fine. On 19.12.18 21:49, Benny Pedersen

Re: About "Passed CLEAN {RelayedOpenRelay}"

2018-12-19 Thread Benny Pedersen
Patrick Ben Koetter skrev den 2018-12-19 21:28: It usually means amavis has no idea what is inbound and what is outbound mail. Configure @mynetworks and local_domains_maps correctly and you should be fine. and this does not depend on postfix config ?

Re: About "Passed CLEAN {RelayedOpenRelay}"

2018-12-19 Thread Benny Pedersen
sergio.belkin skrev den 2018-12-19 21:11: Thanks in advance no problem, need postconf -n, or maybe aswell postconf -Mf how is policy banks in amavisd configured ? what docs have you read ? note i do not use amavisd, but i know something from the time i did

Re: reset @mynetworks and load them from file

2018-12-07 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2018-12-07 16:54: @mynetworks=("127.0.0.0/8","[::1]"); &read_array(\@mynetworks, '/etc/postfix/mynetworks'); $policy_bank{'MYNETS'} = { originating => 1, }; does mails from mta port 25 go there now ? https://www.ijs.si/software/amavisd/README.postfix.h

Re: R: Bypass spam check for message from my local domain

2018-11-06 Thread Benny Pedersen
Scappatura Rocco skrev den 2018-11-06 18:50: Could you instruct me on how I could define ORIGINATING Policy Bank? https://forum.iredmail.org/topic5009-iredmail-support-disabling-oubout-amavisd-scanning.html dont disable amavisd for virus scanning, make the policy bank bounce virus to local s

Re: Bypass spam check for message from my local domain

2018-11-06 Thread Benny Pedersen
Scappatura Rocco skrev den 2018-11-06 17:05: I would like to avoid spam check for all message with sender listed in @local_domain_maps. its possible this senders is forged, no ? :) How could I set up a such behaviour? make ORIGINATING policy bank and disable spam test in this bank only th

Re: optimizing memory consumption

2018-11-04 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2018-11-04 15:32: On 02.11.18 18:29, Imre Rad wrote: Is there a known way to decrease the memory consumption of the Amavisd processes? ~110 MB/process for Resident Set Size is suboptimal, I think. you can limit $max_requests so any possible emory botleneck wil

Re: Is amavisd-new still being maintained?

2018-10-18 Thread Benny Pedersen
Christian Rößner skrev den 2018-10-18 15:36: Alternatives do exist, but need to be cobbled together. Maybe people should have a look at Rspamd ;-) its well tested on raspberry pi running netbsd Just my opinion. you are not alone ? (Proxy-maintainer for the Gentoo build of Rspamd) if

Re: amavis: Next Steps

2018-10-11 Thread Benny Pedersen
Curtis Maurand skrev den 2018-10-11 16:09: I get public key not available. I have one other domain with a 512 bit keys and it works. opendkim have minimal keysize of 1024 so you will randomly get dkim fails

Re: amavis: Next Steps

2018-10-11 Thread Benny Pedersen
Ralph Seichter skrev den 2018-10-11 15:19: Authentication-Results: ra.horus-it.com; dkim=pass (1024-bit key; unprotected) header.d=amavis.org header.i=@amavis.org header.b=hvGOHuCH; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=maurand.com

Re: amavis: Next Steps

2018-10-11 Thread Benny Pedersen
Ralf Hildebrandt skrev den 2018-10-11 15:11: * Curtis Maurand : And DKIM signing, please. 1024 bit keys don't seem to work Yes, both noted, but since we don't directly control DNS it can take a while sys4.de dkim works ? eassy enogh to make work in amavisd even if dns takes long, it should

Re: amavis: Next Steps

2018-10-11 Thread Benny Pedersen
Ralf Hildebrandt skrev den 2018-10-11 11:35: I am having problems signing up to the devel list via the web interface. The webserver was configured to use https://, Mailman still had DEFAULT_URL_PATTERN = 'http://...' as well as PUBLIC_ARCHIVE_URL = 'http://...' I fixed that now. good, will s

Re: Is amavisd-new still being maintained?

2018-10-08 Thread Benny Pedersen
Marco skrev den 2018-10-08 13:48: I hope Amavis could still be maintained. DSPAM is already gone. If also Amavis dies, Spamassassin will follow... and spampd, mimedefang, canit, canit-pro, procmail, fuglu will possible die aswell then ? :=) note rspamd can be used in amavisd aswell as dspam,

Re: Is amavisd-new still being maintained?

2018-10-07 Thread Benny Pedersen
Boris Gulay skrev den 2018-10-07 21:24: Benny Pedersen писал 2018-10-07 17:34: Ralph Seichter skrev den 2018-10-07 14:48: On 07.10.18 12:12, Alexander Dalloz wrote: That's too a one man show? See https://github.com/rspamd/rspamd/blob/master/AUTHORS.md impresive that amavisd have

Re: Is amavisd-new still being maintained?

2018-10-07 Thread Benny Pedersen
Ralph Seichter skrev den 2018-10-07 14:48: On 07.10.18 12:12, Alexander Dalloz wrote: That's too a one man show? See https://github.com/rspamd/rspamd/blob/master/AUTHORS.md impresive that amavisd have less tickets

Re: DKIM Signing

2018-05-11 Thread Benny Pedersen
Matt Penfold skrev den 2018-05-11 16:49: Can anyone suggest why amavis is not signing emails? check why amavisd does not see sasl auth mails as originating mails how is postfix "postconf -mF" how is amavisd policy banks ? i do not use amavisd, but i remember some problems from when i did :=

Re: Deleting emails with viruses

2018-04-30 Thread Benny Pedersen
André Rodier skrev den 2018-04-30 16:27: You can then drop or bounce them, and put the file in quarantine. clamsmtp cant reject, so it cant bounce to real sender, it would be possible it would go to forged sender, dont do that unless clamsmtp use used in prequeue mta stage, but since clamsmt

Re: Deleting emails with viruses

2018-04-21 Thread Benny Pedersen
Philip skrev den 2018-04-21 06:31: Do I have to enable clamav to delete emails that are found to have viruses in them?  Since the last update to 0.10 it's not scanning incoming emails.  I figured clamav is being triggered by AMAVIS. Suggestions, Comments... 1: amavisd-milter 2: amavisd-preque

Re: detect and block ACE archive

2018-04-20 Thread Benny Pedersen
Hoyer-Reuther, Christian skrev den 2018-04-20 14:41: With the ACE banning in my environment there is never a real mail blocked, but only virus mails. Maybe the spammers and virus creators love ACE archives because they know that amavis cannot handle it. design of amavisd is not to make the bes

Re: detect and block ACE archive

2018-04-20 Thread Benny Pedersen
Marcin Rożek skrev den 2018-04-20 10:14: But amavisd-new still passes this ransomware archives☹ https://sanesecurity.com/foxhole-databases/ clamav do support ace testing, it just need signatures please share ransomware to virustotal.com and clamav join sanesecurity mailling lists

Re: IP-based whitelisting

2018-02-12 Thread Benny Pedersen
chaouche yacine skrev den 2018-02-12 16:04: It seems my IP is listed in spamhaus so the SPF check didn't suffice ? show: 1: mynetworks in postconf -n 2: mynetworks in amavisd.conf 3: internal_networks in spamassassin, and trusted_networks in spamassassin 4: you did not have spf plugin enabl

Re: [SUSPECTED SPAM]Re: Scoring questions

2018-01-29 Thread Benny Pedersen
Computer Bob skrev den 2018-01-29 19:08: You should clear your bayes cause it looks poisoned. Should I clobber bayes_seen, bayes_toks or some others ? https://systembash.com/clear-spamassassin-bayes-tokens/ sa-learn --clear

Re: [SUSPECTED SPAM]Re: Scoring questions

2018-01-29 Thread Benny Pedersen
Computer Bob skrev den 2018-01-29 18:57: I assume you mean bayes_auto_learn in local.cf. I set it to 0 from 1 and restarted. yes its just bad advise, but setting this is what disables autolearn i suggest see autolearnthreashold instaed https://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamA

Re: Scoring questions

2018-01-29 Thread Benny Pedersen
Dino Edwards skrev den 2018-01-29 18:37: Really? i can add autoreader on html postings so i dont waste time on helping

Re: [SUSPECTED SPAM]Re: Scoring questions

2018-01-29 Thread Benny Pedersen
Dino Edwards skrev den 2018-01-29 18:30: First of all, please turn off your autolearn in SA. That always causes more problems than it’s worth. oh https://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_AutoLearnThreshold.html this can be avoided

Re: Scoring questions

2018-01-29 Thread Benny Pedersen
Computer Bob skrev den 2018-01-29 17:22: Greetings to all, disable html in thunderbird first

Re: submission, not originating ... for roaming, authenticated users?

2017-11-19 Thread Benny Pedersen
Django [BOfH] skrev den 2017-11-19 22:39: $interface_policy{'10024'} = 'ORIGINATING'; only that policy ? port 10024 is imho default non originating port for mails that are incomming Any idea? Suggestions or hints? make amavisd non verbose logging helps debug real problem i dont use ama

Re: problem with DKIM and big messages

2017-10-04 Thread Benny Pedersen
A. Schulze skrev den 2017-10-04 20:55: DKIM validation require access to full message body. For performance reasons amavisd-new present only $sa_mail_body_size_limit to spamassassin. maybe this is why amavisd have mail::dkim support so its not needed to let mail::spamassassin::plugins::dkim d

Re: possible bug in mail::dkim with amavisd signing

2017-10-04 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2017-10-04 16:56: On 04.10.17 16:40, Benny Pedersen wrote: and clearly aswell its a configure fail on amavisd, dont sign receicved header ! signs "*" probably? so sign all headers ?, that would be even more stupid then my cat :=) note more

Re: possible bug in mail::dkim with amavisd signing

2017-10-04 Thread Benny Pedersen
Benny Pedersen skrev den 2017-10-04 16:23: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=amavis.org; h= list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:user-agent:message-id:references:in-reply-to

possible bug in mail::dkim with amavisd signing

2017-10-04 Thread Benny Pedersen
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=amavis.org; h= list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:user-agent:message-id:references:in-reply-to :organization:subject:subject:from:from:date:date :content-transfer-encoding:conte

Re: problem with DKIM and big messages

2017-10-04 Thread Benny Pedersen
Johannes Feigl skrev den 2017-10-04 14:41: when i simply save the content of $str to a file, then i see that it has been cutted. amavisd works as intended, limit the msg body size so it does not use time on big attachment sizes that is valid dkim signed, only work around is to raise that bod

dmarc pass test

2017-09-03 Thread Benny Pedersen
ignore

Re: Amavisd spam score low

2017-08-31 Thread Benny Pedersen
Will Hall skrev den 2017-08-31 22:51: Have now installed the non-forwarding dns server unbound and am no longer black listed, yay! super i can again raise my outdoor flag in my garden tomorrow :=) Given that spamassassin and amavisd both use the same underling Perl modules, I still don't full

Re: Amavisd spam score low

2017-08-31 Thread Benny Pedersen
Will Hall skrev den 2017-08-31 21:41: Many thanks for the reply. +1 Not sure I completely follow when you say "spammers have a free ride on your limited data'. its possible not just uribl, but uribl tells you need to solve dns Yes, I am blocked by uribl, but resolving this is not trivial

Re: Suppress delivery-notification/Read-receipt for spam?

2017-04-23 Thread Benny Pedersen
Ralf Hildebrandt skrev den 2017-04-23 18:50: But WHICH headers to ignore? Primarily Outlook Read receipts are of my concern replyed private

Re: Suppress delivery-notification/Read-receipt for spam?

2017-04-22 Thread Benny Pedersen
Ralf Hildebrandt skrev den 2017-04-22 11:52: Can this be suppressed somehow? you know postfix very well imho :=) header_checks ignore. avanced users want it to be supported in amavisd sql/ldap pr recipient ?

Re: Open relay from localhost and other questions

2017-04-21 Thread Benny Pedersen
Robert Moskowitz skrev den 2017-04-21 21:16: Been doing some research. mynetworks should stop the localhost from seeming like an Open relay. I don't have this problem on my old production server. I am researching it. check originating policy banks in amavisd, make sure local originated ema

Re: Received trace question

2017-02-02 Thread Benny Pedersen
Per olof Ljungmark skrev den 2017-02-02 22:37: So what am I missing? This is clearly not "spam from laocal". x-forward https://help.ubuntu.com/community/PostfixAmavisNew good example config for postfix and amavisd there

Re: Amavis to ClamAV TCP with DNS lookup

2017-01-29 Thread Benny Pedersen
try tcp:clamav1:3310

Re: Amavisd and Bayes (again...)

2016-11-24 Thread Benny Pedersen
Zhang Huangbin skrev den 2016-11-25 00:20: Do you have any idea/suggestion/experience how to share/update/sync SA bayes across multiple mail servers without SQL? e.g. a mail cluster. redis, make it clusted do you really need it ? redis is not that stable in gentoo spamassassin redis plugin

  1   2   >