Re: Encrypted archives and 7z on Debian Jessie (amavis 2.10.1)

2016-09-16 Thread Dino
So what happens when you try to extract a unencrypted 7z archive using the internal decoder? Does that work? On 9/14/2016 8:10 AM, Hoyer-Reuther, Christian wrote: Hello, our mailserver run amavisd-new-2.10.1 on Debian Jessie. Regarding encrypted archives I configured $undecipherable_subject_t

Re: Fwd: Can Amavisd block based on Message-ID ?

2016-09-16 Thread Dino
Well, you can create rules in spamassassin not amavis as far as I know. However, creating rules based on Message-ID is generally a bad idea because you will might get false pasitives. If you are still insisting to filter on Message-ID, insert something like below in your spamassassin local.cf f

Re: Anti-Virus

2016-09-19 Thread Dino
We use clam-av and sophos and they both seem to work really well complimenting each other on the same box. On 9/15/2016 10:27 AM, Phil Daws wrote: Would be interested to hear of which virus scanners work well for you with Amavis ? Thanks. -- Hermes Secure Email Gateway *Hermes Secure Emai

Re: List issues?

2016-09-20 Thread Dino
On 9/16/2016 2:08 AM, Noel Butler wrote: On 15/09/2016 19:05, @lbutlr wrote: I sent a message to the list yesterday (15:59 -0600) and it has not shown up, nor have I gotten any sort of notification that it was not posted or was rejected for some reason. From: "@lbutlr" Message-Id: <790f91

wblist issues

2015-09-10 Thread Dino Edwards
I'm trying to whitelist/blacklist either a sender email address or a sender domain to an internal domain. So if I understand this correctly, I would get the ID of the sender from the mailaddr table. So for example if I wanted to blacklist @hotmail.com, in my mailddr table, the id for @hotmail.co

RE: SOLUTION for white-listing senders for banned files.

2015-09-14 Thread Dino Edwards
> There's some ability, native to Amavis, to whitelist an IP, from what I > understand, but no ability to white-list a sender's email address in Amavis > itself. Doesn't the Amavis wblist MySQL table or the @whitelist_sender_maps directive provide that very functionality that you say is missin

RE: Pls recommend a web front end to manage amavis-new

2016-01-18 Thread Dino Edwards
I have developed such a solution. It's called Hermes Secure Email Gateway. It integrates postfix, amavis, ciphermail into one web GUI. It's designed to be used as a relay server with virtual domains and users. It archives all email on local storage and it will allow you to manage spam right from

wblist blacklist/whitelist to recipient domain

2016-01-28 Thread Dino Edwards
I'm able to blacklist/whitelist sender domains and sender e-mail addresses to recipient e-mail addresses in wblist. However, if try to blacklist/whitelist to recipient domains, it doesn't seem to work. I've tried adding the recipient domain in the recipients table as @domain.tld or domain.tld bu

RE: Running amavisd-new on MX hosts?

2016-02-10 Thread Dino Edwards
E-mail should never be quarantined unless there is a mechanism for the recipient to release those messages from quarantine themselves. You never want to be responsible for an e-mail NOT reaching its intended recipient. People get very upset when they don't receive e-mail they believe they should

Trying to whitelist/blacklist sender domain - 3rd attempt

2016-02-14 Thread Dino Edwards
This is my 3rd attempt to get an answer on this issue. I would appreciate some help on this. I'm trying to whitelist/blacklist either a sender email address or a sender domain to an internal domain. So if I understand this correctly, I would get the ID of the sender from the mailaddr table. S

expressions clarification

2016-03-02 Thread Dino Edwards
I'm trying to figure out what the difference between the following expressions are: [qr'.\.(mdb)$'ix => 0] [qr'.\.(uue)$'i => 0] [qr'^\.(lha)$' => 0] Mainly, trying to figure out when you put in "ix", "i" or nothing at all at the end of the expression. Thanks

RE: js in zip attachment of e-mail

2016-03-02 Thread Dino Edwards
Like this: [qr'.\.(js)$'ix => 1] Assuming you have a zip extractor installed in your machine it will work inside zip files. > -Original Message- > From: amavis-users [mailto:amavis-users- > bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of @lbutlr > Sent: Wednesday, March

RE: expressions clarification

2016-03-02 Thread Dino Edwards
; To: amavis-users@amavis.org > Subject: Re: expressions clarification > > On Wed, Mar 02, 2016 at 02:06:55PM +, Dino Edwards wrote: > > I'm trying to figure out what the difference between the following > expressions are: > > > > [qr'.\.(mdb)$'ix => 0]

RE: js in zip attachment of e-mail

2016-03-02 Thread Dino Edwards
|vbs|pif|scr|bat|cmd|com|cpl|rtf|js)$'i ); The above regexp ".\.(exe|vbs|pif|scr|bat|cmd|com|cpl|rtf|js)$" will match any file name with the above extensions (Example test.exe, test.vbs etc...). You can test the regexp at http://www.regex101.com (make sure you take out the double q

RE: help on bulkmail , offers - amavisd.conf file

2016-03-03 Thread Dino Edwards
It will match any of those keywords whether its’ part of the email, subject, body etc.. Take a look here: https://regex101.com/r/bQ1xB0/3 Try any of the possibilities you listed and you will get a match. From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.or

whitelist/blacklist sender domain

2016-03-15 Thread Dino Edwards
I'm trying to whitelist/blacklist either a sender email address or a sender domain to an internal domain. So if I understand this correctly, I would get the ID of the sender from the mailaddr table. So for example if I wanted to blacklist @hotmail.com, in my mailddr table, the id for @hotmail.co

RE: block a particular double extension files in amavisd.conf

2016-03-18 Thread Dino Edwards
While users surf the Internet? So, not coming through e-mail? From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Indunil Jayasooriya Sent: Thursday, March 17, 2016 1:10 AM To: amavis-users@amavis.org Subject: block a particular double extension

RE: block a particular double extension files in amavisd.conf

2016-03-18 Thread Dino Edwards
...@gmail.com] Sent: Thursday, March 17, 2016 4:25 AM To: Dino Edwards Cc: amavis-users@amavis.org Subject: Re: block a particular double extension files in amavisd.conf On Thu, Mar 17, 2016 at 1:46 PM, Dino Edwards mailto:dino.edwa...@mydirectmail.net>> wrote: While users surf the Internet? S

ClamAV and Sophos

2016-03-22 Thread Dino Edwards
7;. '--no-reset-atime {}', [0,2], qr/Virus .*? found/m, qr/^>>> Virus(?: fragment)? '?(.*?)'? found/m, ], Do I also need to install SAV Dynamic interface 2.2 from Sophos? Does anyone have a definitive guide on how to get this going? Thanks Dino

RE: Domains issue

2016-03-23 Thread Dino Edwards
So wouldn't this work better? @local_domains_maps=(read_hash("/etc/postfix/relay_domains")); I know it's not an LDAP or SQL query, but a little easier to manage. I'm thinking with an LDAP or MySQL query especially with a large number of domain it may become a performance issue? I know I've see

RE: ClamAV and Sophos [SOLVED]

2016-03-25 Thread Dino Edwards
://forums.deeztek.com/viewtopic.php?f=18&t=47825 A big Thanks to everyone else who pointed me in the right direction. Dino Edwards

RE: Banning .docm gives misleading error message

2016-04-05 Thread Dino Edwards
If you are trying to block office documents that will infect your PC with ransomware your approach will not work. The ransomware has been coming through with the old office document extensions. For example, the locky ransomware comes in with a .doc attachment. A more effective approach would be

RE: Allow attachment with blocked extension for some senders

2016-04-05 Thread Dino Edwards
Someone correct me if I'm wrong, but I don't believe there is a way to add exceptions for senders when it comes to attachments. > -Original Message- > From: amavis-users [mailto:amavis-users- > bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Jonny > Oschätzky > Sent: Tues

RE: This zip file passes the .exe banning why?

2016-04-11 Thread Dino Edwards
Can you paste your banned file configuration? From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Alessandro Briosi Sent: Monday, April 11, 2016 9:18 AM To: amavis-users@amavis.org Subject: This zip file passes the .exe banning why? Hi all, T

RE: ANNOUNCE: amavisd-new-2.11.0 released

2016-05-02 Thread Dino Edwards
> > youre more than welcome to filter ignore, or are you one of these people > who cant handle someone calling this mess as it is. either way I dont care > what you think. > OR, I know this is going to blow your mind but hear me out, you can stop being a dick

RE: Amavisd bug ?

2016-05-27 Thread Dino Edwards
Are you running this machine in a vmware environment by any chance? From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Olivier CALVANO Sent: Friday, May 27, 2016 12:26 PM To: Patrick Ben Koetter Cc: amavis-users@amavis.org Subject: Re: Amavisd

RE: Amavisd bug ?

2016-05-27 Thread Dino Edwards
the whole time. -Original Message- From: Olivier CALVANO [o.calv...@gmail.com] Received: Friday, 27 May 2016, 2:28PM To: Dino Edwards [dino.edwa...@mydirectmail.net] CC: amavis-users@amavis.org [amavis-users@amavis.org] Subject: Re: Amavisd bug ? Hi Yes it's on vmware esx Re

RE: Good value postfix/amavisd ?

2016-06-02 Thread Dino Edwards
Can you increase mem and see if the problem persists? Is this the same machine you were having kernel issues with from a previous post?

RE: Good value postfix/amavisd ?

2016-06-02 Thread Dino Edwards
Yes What did you do to fix the other issue? -Original Message- From: Olivier CALVANO [o.calv...@gmail.com] Received: Thursday, 02 Jun 2016, 5:37PM To: Dino Edwards [dino.edwa...@mydirectmail.net] CC: amavis-users@amavis.org [amavis-users@amavis.org] Subject: Re: Good value postfix

RE: F-Secure and failure to start

2016-06-27 Thread Dino Edwards
I can't offer any help with F-Secure, the only thing I know is Sophos, I've actually written a guide on how to integrate with amavis which I can share if you care. I know you said it sucks, just curious why do you believe it does. > -Original Message- > From: amavis-users [mailto:amavis

RE: Increasing spam filtering with spamassassin

2016-08-27 Thread Dino Edwards
> > I think this may be your first problem: you are running that command as root, > aren't you? > From the configuration you posted earlier, you've amavis setup to run under > the "amavis" user. See the problem? You are probably training one database > (at /root/.spamassassin), and then using a di

RE: List issues?

2016-09-18 Thread Dino Edwards
Did something change in the mailing list? I'm not getting my replies or my posts back. I can see they are showing up in the archives but the mailing list is not redistributing back to me. I hope this is not related to some ridiculous mailman config about reply to vs reply to list. > > I sent a

RE: List issues?

2016-09-21 Thread Dino Edwards
The messages show up in the archive but they are not being forwarded to list members In a timely manner. For instance The message below was just received on 9/18/2016 at 6:35 a.m. As you can see it was actually sent on 9/16/2016 at 3:28 a.m. On top of it, when I tried to report the problem to m

RE: List issues?

2016-09-21 Thread Dino Edwards
-Reuther, Christian > > Sent: Friday, September 16, 2016 2:34 PM > > To: '@lbutlr' > > Subject: Re: List issues? > > > > Hello, > > > > same problem here: > > > > "Dino support at deeztek.com" sent a mail to the thread "

RE: Mailinglist should be working again

2016-09-21 Thread Dino Edwards
I'll say. My inbox just got flooded with all the missing emails. Glad it's resolved. Thank you!! -- Hermes Secure Email Gateway Hermes Secure Email Gateway combines Open Source technologies such as Postfix, Apache SpamAssassin, ClamAV, Amavisd-new, MySQL and CipherMail under one unified web

RE: Password protected Word/phishing emails

2016-10-05 Thread Dino Edwards
I'm not sure how the scanner will open up a password protected document to scan it if it doesn't have the password. I would be the same thing with password protected zips. The best approach with MS docs in my opinion is to block all the old office formats (.xls, .doc ) since back then MS di

RE: Question about old Amavis thread

2016-10-07 Thread Dino Edwards
' WHERE (users.policy_id=policy.id) AND (users.email IN (%k))'; ' ORDER BY users.priority DESC'; Hope that helps. Let me know if you need anything else. Dino -- [hermes_logo3] Hermes Secure Email Gateway Hermes Secure Email Gateway combines Open Source technologies such as P

RE: Increase spamassassin bayes99 score

2016-10-14 Thread Dino Edwards
. Are you doing all you can to prevent spam from ever reaching your spam filter? Things like RBL blocking on the MTA level, graylisting etc? Thanks Dino -- [hermes_logo3] Hermes Secure Email Gateway Hermes Secure Email Gateway combines Open Source technologies such as Postfix, Apache SpamAssassin

RE: Increase spamassassin bayes99 score

2016-10-17 Thread Dino Edwards
> > reject_unknown_client_hostname (with Postfix < 2.3: > reject_unknown_client)Reject the request when 1) the client IP > address->name mapping fails, 2) the name->address mapping fails, or 3) > the name->address mapping does not match the client IP address. > This is a stronger restriction than

RE: Amavisd and Bayes (again...)

2016-11-24 Thread Dino Edwards
Why don't you do the following.: Edit your SA local.cf file and make sure the following lines are in it. NOTE the bayes_path, set that to a directory of your choice. Please also note that the last bayes of that path is NOT a directory but it's simply the prefix of that files in that directory

RE: Sender notifications - disable? customize?

2016-11-28 Thread Dino Edwards
> > There isn't any. Amavis is orphaned. > What does that mean exactly?

RE: Flashlight spam (and others)

2016-12-17 Thread Dino Edwards
Did you happen to set bayes_00 to assign a score of -4? That’s not default behavior at all. Can you send your local.cf config? Thanks On Sat, Dec 17, 2016 at 10:40 AM, Dino Edwards mailto:dino.edwa...@mydirectmail.net>> wrote: Am I looking at this right? Does BAYES_00 assign a score

RE: Flashlight spam (and others)

2016-12-18 Thread Dino Edwards
12:42 AM To: amavis-users@amavis.org Subject: Re: Flashlight spam (and others) > On Dec 17, 2016, at 10:40 AM, Dino Edwards > wrote: > > Am I looking at this right? Does BAYES_00 assign a score of -4 on these > messages? Yes. BAYES_00 is normally extremely effective at passing

RE: Logging IP address in error logs

2017-01-18 Thread Dino Edwards
Are you seeing this in postfix or amavis? -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Martin Schmid Sent: Wednesday, January 18, 2017 9:56 AM To: amavis-users@amavis.org Subject: Logging IP address in error log

RE: Logging IP address in error logs

2017-01-18 Thread Dino Edwards
This is an unusual setup. May I ask why? The reason I'm asking is because an SMTP server in front would cut down on that traffic. -Original Message- From: Martin Schmid [mailto:s...@aps-systems.ch] Sent: Wednesday, January 18, 2017 10:38 AM To: Dino Edwards Subject: Re: Loggi

RE: Logging IP address in error logs

2017-01-18 Thread Dino Edwards
I still don't understand how email comes in. Is amavis listening on port 25? -Original Message- From: Martin Schmid [mailto:s...@aps-systems.ch] Sent: Wednesday, January 18, 2017 11:15 AM To: Dino Edwards Subject: Re: Logging IP address in error logs Difficult to say. I've

RE: Logging IP address in error logs

2017-01-19 Thread Dino Edwards
From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Patrik Båt Sent: Thursday, January 19, 2017 4:36 AM To: amavis-users@amavis.org Subject: Re: Logging IP address in error logs http://www.postfix.org/SMTPD_PROXY_README.html Read here to under

RE: Amavis to ClamAV TCP with DNS lookup

2017-01-29 Thread Dino Edwards
Try fqdn -Original Message- From: Cyril [cy...@moncoindunet.fr] Received: Sunday, 29 Jan 2017, 6:11PM To: amavis-users@amavis.org [amavis-users@amavis.org] Subject: Re: Amavis to ClamAV TCP with DNS lookup Hum it was a good idea but I have the same issue: /usr/sbin/amavisd-new[17]: (0001

RE: Amavis DNS query timeout

2017-02-13 Thread Dino Edwards
So what happens when you run this command: dig @192.168.xxx.xxx -t txt 20161025._domainkey.google.com txt where 192.168.xxx.xxx is the IP of your DNS server set in the resolv.conf file of your amavis server? -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.ed

RE: Amavis DNS query timeout

2017-02-13 Thread Dino Edwards
I don't think you are correct. That header is usually generated when $enable_dkim_verification = 1; is set in the amavis config file. -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Dominic Raferd Sent: Sunday, Fe

RE: Amavis DNS query timeout

2017-02-13 Thread Dino Edwards
when queried independently, so its looking like amavis is not correctly moving through to alternative resolvers ? On 13 February 2017 at 13:21, Dominic Raferd wrote: > Ah yes you may be right, I have: $enable_dkim_verification = 0; > > On 13 February 2017 at 10:41, Dino Edwards > >

RE: amavisd-release does not work with SQL quarantine (missing quar_type = "Q")

2017-02-20 Thread Dino Edwards
rantine_method = 'local:virus/%m'; $spam_quarantine_method = 'local:spam/%m'; $banned_files_quarantine_method = 'local:banned/%m'; $bad_header_quarantine_method = 'local:bad_header/%m'; $clean_quarantine_method = 'local:clean/%m'; Dino Edward

RE: amavisd-release does not work with SQL quarantine (missing quar_type = "Q")

2017-02-20 Thread Dino Edwards
mavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of @lbutlr Sent: Monday, February 20, 2017 2:37 PM To: amavis-users@amavis.org Subject: Re: amavisd-release does not work with SQL quarantine (missing quar_type = "Q") On 2017-02-20 (06:16 MST), Dino Edwards wrote: >

RE: amavisd-release does not work with SQL quarantine (missing quar_type = "Q")

2017-02-20 Thread Dino Edwards
half Of @lbutlr Sent: Monday, February 20, 2017 2:37 PM To: amavis-users@amavis.org Subject: Re: amavisd-release does not work with SQL quarantine (missing quar_type = "Q") On 2017-02-20 (06:16 MST), Dino Edwards wrote: > > $QUARANTINEDIR = "/some/mountpoi

RE: amavisd-release does not work with SQL quarantine (missing quar_type = "Q")

2017-02-21 Thread Dino Edwards
any particular reason you are using sql instead > of local to quarantine? No there is no particular reason to use sql quarantine. But we have not so many quarantined mails in a week, so we can live with it. Thomas -Original Message- From: amavis-users [mailto:amavis-users-bounces+din

RE: Quarantine doc Files only with Macros?

2017-02-24 Thread Dino Edwards
I believe both of these have to be set to true in order for that to work ScanOLE2 true OLE2BlockMacros true -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of postmas...@wf-partner.com Sent: Friday, February 24,

RE: Quarantine doc Files only with Macros?

2017-02-24 Thread Dino Edwards
: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com] Sent: Friday, February 24, 2017 11:04 AM To: Dino Edwards Cc: amavis-users@amavis.org; amavis-users Subject: Re: Quarantine doc Files only with Macros? Both is set. I had to restart service amavis-daemon I think. But now at one of two

RE: Quarantine doc Files only with Macros?

2017-02-24 Thread Dino Edwards
: Dino Edwards Cc: amavis-users@amavis.org; amavis-users Subject: Re: Quarantine doc Files only with Macros? You are right, we have two different linux servers with mailservers and they are both set in the clamav config files like below but one of them is blocking outbound OLE2 macro files and

RE: Quarantine doc Files only with Macros?

2017-02-27 Thread Dino Edwards
do you have amavis policy setup that may specify virus_lover set to Y set on the server that accepts the macro enabled document by any chance? -Original Message- From: postmas...@wf-partner.com [mailto:postmas...@wf-partner.com] Sent: Monday, February 27, 2017 4:09 AM To: Dino Edwards

RE: spamtrap and dynamic blacklisting

2017-03-10 Thread Dino Edwards
This maybe a bit complicated but here's how I would approach this: 1. Setup SQL tables for Amavis. This will allow amavis to log all messages coming through along with the recipient and the sender (specific tables are msgrcpt, msgs, maddr, mailaddr) 2. Schedule queries to run against those mess

RE: spamtrap and dynamic blacklisting

2017-03-10 Thread Dino Edwards
Postfix senders table with reject action. Sender addresses are almost always forged so blocking the IP is probably better. Dino Edwards Hermes Secure Email Gateway Hermes Secure Email Gateway combines Open Source technologies such as Postfix, Apache

RE: spamtrap and dynamic blacklisting

2017-03-10 Thread Dino Edwards
vis. All this can be accomplished without writing any code, just some SQL queries. ---- Dino Edwards Hermes Secure Email Gateway Hermes Secure Email Gateway combines Open Source technologies such as Postfix, Apache SpamAssassin, ClamAV, Amavisd-new, MySQL and CipherMail un

RE: spamtrap and dynamic blacklisting

2017-03-15 Thread Dino Edwards
h Postfix. -Original Message- From: Patrick Proniewski [mailto:patrick.proniew...@univ-lyon2.fr] Sent: Tuesday, March 14, 2017 7:29 AM To: amavis-users@amavis.org Cc: Dino Edwards Subject: Re: spamtrap and dynamic blacklisting Hi Dino, I'm not so sure. Of course sender is potentially

RE: Handling spam, which is not yet on blacklists

2017-03-15 Thread Dino Edwards
You mean like graylisting? -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Frank de Bot (lists) Sent: Wednesday, March 15, 2017 3:36 PM To: amavis-users@amavis.org Subject: Handling spam, which is not yet on blackl

RE: "No SMTP response to data-dot"-message and delivered the message like 10 times

2017-04-07 Thread Dino Edwards
e kind of missconfiguration? So far I never had problems with amavis. Well, it was the first time, that I accidentally send an e-mail to myself, otherwise I wouldn't have noticed the whole problem... thanks in advance for any hints Michael Dino Edwards IT Consulting, S

RE: "No SMTP response to data-dot"-message and delivered the message like 10 times

2017-04-07 Thread Dino Edwards
noying part was, that the message got delivered more than 10 times (each time I deleted it, it reappeared a few hours later again, first I thought I'm becoming crazy ;-))) Am 7.4.2017 14:15, schrieb Dino Edwards: > Could this be part of the problem? It says MTA-BLOCKED because it

RE: "No SMTP response to data-dot"-message and delivered the message like 10 times

2017-04-07 Thread Dino Edwards
must be related to the " No SMTP response to data-dot " error. On 07.04.2017 14:43, Dino Edwards wrote: > Maybe it's not related to the specific issue, but an Open Relay is a HUGE > problem and I HIGHLY suggest before you look into any other problem, you > should l

RE: "No SMTP response to data-dot"-message and delivered the message like 10 times

2017-04-07 Thread Dino Edwards
a server with only two cpus a load of 3.5 is a lot. The strange thing was, that "top" didn't show any process hogging the cpu. Then afterwards I uploaded the same picture, to the same server to the nextcloud installation, and it took less than 2 seconds... On 07.04.2017 16:16, D

RE: "No SMTP response to data-dot"-message and delivered the message like 10 times

2017-04-11 Thread Dino Edwards
Absolutely correct. I've been looking at the log file and the problem starts here when amavis connects to your local MTA to deliver the email. This happens at Apr 10 15:32:29, see below: Apr 10 15:32:29.077 rmm.li /usr/sbin/amavisd-new[17487]: (17487-01) smtp cmd> EHLO localhost Apr 10 15:32:29

RE: Virus scanners with amavis and fedora

2017-04-14 Thread Dino Edwards
What problem are you having with Macro Viruses and PDF spam? -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Alex Sent: Thursday, April 13, 2017 8:32 PM To: amavis-users@amavis.org Subject: Virus scanners with amav

RE: Virus scanners with amavis and fedora

2017-04-14 Thread Dino Edwards
lstud...@gmail.com] Sent: Friday, April 14, 2017 9:01 AM To: Dino Edwards ; amavis-users@amavis.org Subject: Re: Virus scanners with amavis and fedora Hi, On Fri, Apr 14, 2017 at 8:53 AM, Dino Edwards wrote: > What problem are you having with Macro Viruses and PDF spam? They're not

RE: Virus scanners with amavis and fedora

2017-04-14 Thread Dino Edwards
@amavis.org Subject: Re: Virus scanners with amavis and fedora On Fri, 2017-04-14 at 09:00 -0400, Alex wrote: > Hi, > > On Fri, Apr 14, 2017 at 8:53 AM, Dino Edwards > wrote: > > What problem are you having with Macro Viruses and PDF spam? > > They're not being caught

RE: Virus scanners with amavis and fedora

2017-04-14 Thread Dino Edwards
directmail@amavis.org] On Behalf Of Alex Sent: Friday, April 14, 2017 3:03 PM To: amavis-users@amavis.org Subject: Re: Virus scanners with amavis and fedora Hi, On Fri, Apr 14, 2017 at 11:00 AM, Dino Edwards wrote: > I mean what specific issues are you having? Do you have Macro enabled >

RE: Open relay from localhost and other questions

2017-04-20 Thread Dino Edwards
In the @lookup_sql_dsn I have the following which works with no problem: @lookup_sql_dsn = ( ['DBI:mysql:database=dbase;host=127.0.0.1;port=3306', 'sqluser', 'somepassword']); I’m not exactly sure what you are attempting to do with the $sql_select_policy statement, maybe you can el

RE: Suppress delivery-notification/Read-receipt for spam?

2017-04-24 Thread Dino Edwards
How about an SA meta rule like this? header __DISPOSITION_NOTIFICATION_TO exists:Disposition-Notification-To header __SUBJECT_CONTAINS_SPAM Subject =~ /\bSPAM\b/i meta SPAM_WITH_READ_RECEIPT (__DISPOSITION_NOTIFICATION_TO && __SUBJECT_CONTAINS_SPAM) score SPAM_WITH_READ_RECEIPT 15 Assuming

RE: block exe in pdf-files?

2017-05-30 Thread Dino Edwards
Have you tried the following in your file rule? [qr'.\.(docm)$'ix => 1], [qr'.\.(dotm)$'ix => 1], [qr'.\.(xlsm)$'ix => 1], [qr'.\.(xltm)$'ix => 1] The above SHOULD Block macro enabled office docs. -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirect

RE: block exe in pdf-files?

2017-05-30 Thread Dino Edwards
in a pdf. JC Am 30.05.2017 um 15:38 schrieb Dino Edwards: > Have you tried the following in your file rule? > > [qr'.\.(docm)$'ix => 1], > [qr'.\.(dotm)$'ix => 1], > [qr'.\.(xlsm)$'ix => 1], > [qr'.\.(xltm)$'ix => 1] >

RE: How many antivirus are recommended?

2017-06-01 Thread Dino Edwards
Short answer is: As many as you can have where it won't impact email delivery or performance. -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Hugo Manuel Ojendiz Lemus Sent: Thursday, June 1, 2017 8:30 AM To: amav

RE: Tag spam only for recipients from a domain

2017-06-06 Thread Dino Edwards
First of all, for spam the following directive applies: $final_spam_destiny = D_DISCARD; Not $final_banned_destiny = D_DISCARD; $final_banned_destiny is for banned files not spam. In order to accomplish what you want, you should probably set up $final_spam_destiny = D_DISCARD; That w

RE: block exe in pdf-files? [SOLVED]

2017-06-10 Thread Dino Edwards
Great. Thanks for the feedback. I am glad it works. -Original Message- From: Daniel Rieken [danielrieke...@gmail.com] Received: Saturday, 10 Jun 2017, 12:13PM To: amavis-users@amavis.org [amavis-users@amavis.org] Subject: Re: block exe in pdf-files? [SOLVED] Hello Dino, that worked for

RE: block exe in pdf-files? [SOLVED]

2017-06-11 Thread Dino Edwards
@amavis.org [amavis-users@amavis.org]; amavis-users [amavis-users-bounces+postmaster=wf-partner@amavis.org] Subject: Re: block exe in pdf-files? [SOLVED] Hello Daniel, do you have an example pdf to test if this is working? Regards Thomas Am 2017-06-10 17:46, schrieb Daniel Rieken: > Hello D

RE: Client host rejected: Access denied

2017-06-14 Thread Dino Edwards
Technically, this question belongs to the postfix mailing list since this is not an amavis related. They will be able to assist you better. -Original Message- From: Scappatura Rocco [rocco.scappat...@infracom.it] Received: Wednesday, 14 Jun 2017, 6:09AM To: 'amavis-users@amavis.org' [am

RE: How many antivirus are recommended?

2017-06-20 Thread Dino Edwards
How about Eset? -Original Message- From: Alex [mysqlstud...@gmail.com] Received: Tuesday, 20 Jun 2017, 9:56AM To: Hugo Manuel Ojendiz Lemus [ojendi...@halmex.com.mx]; amavis-users@amavis.org [amavis-users@amavis.org] Subject: Re: How many antivirus are recommended? Hi, On Tue, Jun 20, 2

RE: different spamassassin behaviours

2017-06-26 Thread Dino Edwards
Do you know for a fact that the bayes database is making those scores get higher when you run it in debug? If so, where is your bayes database stored and who is the owner of that path? Do you know for a fact that Amavis calls Spamassassin to scan emails? [hermes_logo3] Herm

RE: different spamassassin behaviours

2017-06-27 Thread Dino Edwards
1[127.0.0.1]:10021, delay=2.6, delays=1.3/0/0/1.3, dsn=2.6.0, status=sent (250 2.6.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.6.0 Message received) From: Gabriele Bulfon [mailto:gbul...@sonicle.com] Sent: Tuesday, June 27, 2017 2:35 AM To: Dino Edwards ; amavis-users@amavis.org Subj

RE: [SUSPECTED SPAM]RE: different spamassassin behaviours

2017-06-27 Thread Dino Edwards
...@sonicle.com] Sent: Tuesday, June 27, 2017 9:03 AM To: Dino Edwards ; amavis-users@amavis.org Subject: [SUSPECTED SPAM]RE: different spamassassin behaviours The x-spam-status headers on that cases are not present, because the score is too low, and is considered non-spam. Is there any way I can force

RE: RE: RE: different spamassassin behaviours

2017-06-28 Thread Dino Edwards
use_bayes 1 use_bayes_rules 1 bayes_auto_learn 0 Dino Edwards [hermes_logo3] Hermes Secure Email Gateway Hermes Secure Email Gateway is a Free Open Source (Hermes SEG Community Only) Email Gateway that provides Spam, Virus and Malware protection, full in-transit

RE: RE: RE: RE: RE: different spamassassin behaviours

2017-06-29 Thread Dino Edwards
I don't know of a why of just cleaning the ham. Unless someone knows of a way. I always have just cleared the whole database and started feeding it ham and spam. From: Gabriele Bulfon [mailto:gabriele.bul...@sonicle.com] Sent: Thursday, June 29, 2017 9:22 AM To: Dino Edwards ; amavis-

RE: clearing just ham data

2017-06-30 Thread Dino Edwards
I don't know if this would work or not since I have never done that. I think it's best to start off fresh but it's up to you. Maybe someone else can weigh in on this particular question. From: Gabriele Bulfon [mailto:gabriele.bul...@sonicle.com] Sent: Friday, June 30, 2017 3

RE: drop NOTIFY= for spam mail

2017-07-26 Thread Dino Edwards
Maybe I'm not understanding what you need but it sounds like the following setting: $final_spam_destiny = D_DISCARD; -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Matus UHLAR - fantomas Sent: Wednesday, Jul

RE: WMF file concerns

2017-10-25 Thread Dino Edwards
There have been WMF vulnerabilities in the past. Here's an example: https://technet.microsoft.com/library/security/ms11-038 I know it's pretty old and but even if the systems are patched, it's probably best not to allow them. There could be some 0-day malware taking advantage of WMF vulnerabili

RE: Urgent:Amavisd or ClamD not blocked .exe files when change it to .pdf or .txt

2017-11-05 Thread Dino Edwards
Windows Dino Edwards Web: https://www.deeztek.com<https://www.deeztek.com/> [hermes_logo3] Hermes Secure Email Gateway Hermes Secure Email Gateway is a Free Open Source (Hermes SEG Community Only) Email Gateway that provides Spam, Virus and Malware prot

RE: submission, not originating ... for roaming, authenticated users?

2017-11-19 Thread Dino Edwards
What's in your /etc/postfix/all_local_domains_map file? This line below says that amavis can't match that email address: Nov 19 21:33:09 mailslut amavis[26104]: (26104-01) lookup => false, "dja...@nausch.org" matches, result="0", matching_key="(constant:0)" Is the nausch.org domain in that fil

RE: submission, not originating ... for roaming, authenticated users?

2017-11-20 Thread Dino Edwards
ember 20, 2017 3:19 AM To: amavis-users@amavis.org Subject: Re: submission, not originating ... for roaming, authenticated users? HI Dino! Am 20.11.2017 um 01:19 schrieb Dino Edwards: > What's in your /etc/postfix/all_local_domains_map file? This file incudes all local Domains, whee Pos

RE: Amavisd missing spam headers

2017-11-22 Thread Dino Edwards
Try this instead: $sa_tag_level_deflt = undef; -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Filip Bartmann Sent: Wednesday, November 22, 2017 2:22 PM To: amavis-users@amavis.org Subject: Amavisd missing spam

RE: Amavis doesn't mark mail as spam, and doesn't set spam headers

2017-12-01 Thread Dino Edwards
I suggest that all your customization be done on /etc/amavis/conf.d/50-user for simplicity sake instead of jumping around all those config files. Up to you. On your particular issue, try this: $mydomain = "mydomain.tld"; @local_domains_acl = ( "mydomain.tld", "localhost" ); The way you had i

RE: perl-DBD-MySQL (Fedora 24)

2018-01-02 Thread Dino Edwards
On policy_id=9 in your database, what are the values of the following columns? Spam_tag_level Spam_tag2_level Spam_kill_level Thanks -Original Message- From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail@amavis.org] On Behalf Of Alan Munday Sent: Tuesday, Ja

RE: perl-DBD-MySQL (Fedora 24)

2018-01-03 Thread Dino Edwards
Not sure, what's happening there. I can tell you on my end that those fields are float type also. What does your sql_select_policy look like? Mine looks like this: $sql_select_policy = 'SELECT *, users.id FROM users,policy'. ' WHERE (users.policy_id=policy.id) AND (users.email IN (%k))'; ' ORDER

RE: perl-DBD-MySQL (Fedora 24)

2018-01-03 Thread Dino Edwards
, 2018 1:22 PM To: amavis-users@amavis.org Subject: Re: perl-DBD-MySQL (Fedora 24) On 03/01/18 18:15, Dino Edwards wrote: > Not sure, what's happening there. I can tell you on my end that those fields > are float type also. What does your sql_select_policy look like? Mine looks

RE: perl-DBD-MySQL (Fedora 24)

2018-01-03 Thread Dino Edwards
users@amavis.org Subject: Re: perl-DBD-MySQL (Fedora 24) On 03/01/18 18:15, Dino Edwards wrote: > Not sure, what's happening there. I can tell you on my end that those fields > are float type also. What does your sql_select_policy look like? Mine looks > like this: > > $sq

  1   2   >