Re: RelayedOpenRelay?

On 21/07/2022 03:54, Alex wrote: I realize this is an FAQ, but I've tried an exhaustive list of changes to try and solve it and still can't figure out why mail is reported as RelayedOpenRelay... I get this all the time and I ignore it. I suggest you do the same, as long as you are confident

Re: Better antivirus (AV) protection?

On 05/04/2022 08:57, Nikolaos Milas wrote: Hello, We have amavisd-new v2.12.1 in service with ClamAV v0.103.4 (on Rocky Linux 8.5) together with additional unofficial signatures from eXtremeSHOK (ref.: https://github.com/extremeshok/clamav-unofficial-sigs) Yet, we are recently receiving a lot

Re: problems with whitelisting

On 24/03/2022 17:13, hiller wrote: Dear list, i have installed amavisd-new version 2.11.0. I have problems with whitelisting. I have googled around and none of the soltions worked. I amavisd.conf i did: read_hash(\%whitelist_sender, '/etc/amavisd.whitelist_ext'), @whitelist_sender_maps =

Re: Keyword based custom subject warning

On 07/03/2022 11:12, Damian wrote: apparently, our users are receiving emails containing links and /or references to various publications, some of which are considered 'predatory'. Emails usually contain ISSN (International Standard Serial Number) and the idea is to scan the body of an email

Re: Excluding blocking macro/xlsx/docx files to specific recipients?

On 24/02/2022 19:37, Alex wrote: Hi, We have some users who receive machine-generated Excel spreadsheets that have macros, but our policy is to block them outright... A different possible approach is to use mraptor (see olevba project on Github) to analyse attachments that are macro-laden

Re: Remove headers from Amavis

I do not believe amavis can do this, but your MTA maybe can. Postfix has this capability, and if you want complex conditions to be met you can use postfwd, for example. On Fri, 21 Jan 2022, 08:58 Miro Igov, wrote: > I do not use DMARC and am not interested in ARC rules. > > I asked is it

Re: disable bad header checks ?

On 29/10/2021 06:32, li...@sbt.net.au wrote: long time installation of amavisd-new noticed some inbound emails ends in my badh inbasket how do I disable bad header checks ? the few emails in badh inbasket all genuine, so I think I don't really need it ? thanks for any pointers set:

Re: How do you change the file decoder in amavisd-new?

On 29/08/2021 04:03, Nick Tait wrote: Hi there. Apologies for resending this, but I discovered I had a problem with my DKIM signature on the original email, so it may have been blocked by many list recipients... I've recently upgraded my email relay, which has amavisd-new installed, and

Re: Amavisd-new policy banks and sasl_username in the returning smtpd instance

On 20/05/2021 10:29, Egoitz Aurrekoetxea wrote: I think I have been confusing XCLIENT with XFORWARD. I saw, that Amavis entered in different policy banks depending in the connecting ip to Postfix and I though it was ... I don't distinguish between XFORWARD and XCLIENT really :) I have been

Re: The good old "permission denied", the ignored group memberships, and a proposed solution

On 16/05/2021 16:37, Luc Pardon wrote: On Sat, 15 May 2021 17:29:40 +0100 Dominic Raferd wrote: I believe that if you use the new preferred way of calling clamav i.e. with --fdpass, the whole permissions issue disappears. Example: @av_scanners = (   ['ClamAV-clamdscan', 'clamdscan

Re: The good old "permission denied", the ignored group memberships, and a proposed solution

On 15/05/2021 16:55, Luc Pardon wrote: Recently I decided to do some restructuring of a Postfix/Amavis/ClamAV installation and ran into a puzzling situation. After some head-scratching, I came up with a solution and thought I'd share it, in case it should be helpful to others (that's also why

Re: amavis user login shell needed?

On 17/02/2021 18:18, Alexander Dalloz wrote: Am 17.02.2021 um 12:44 schrieb Dominic Raferd: On Linux, is it necessary that the amavis user have a valid login shell such as /bin/sh? For security I would prefer it to use a null shell. If it makes a difference, our amavis calls clamdscan

amavis user login shell needed?

On Linux, is it necessary that the amavis user have a valid login shell such as /bin/sh? For security I would prefer it to use a null shell. If it makes a difference, our amavis calls clamdscan with --fdpass (the 'modern' way). And of course amavis uses SA in the normal way.

Re: FW: amavis set nice level on ubuntu 18

Try: man start-stop-daemon The command adds -N10 to the call of start-stop-daemon On Wed, 10 Feb 2021, 12:00 , wrote: > Thank you Dominic, I have run this command, checked the chane, done a > reboot to be certain, checked again and it appears to have done the job. > Much appreciated. :) > >

Re: amavis set nice level on ubuntu 18

ot find where that config file is so I can set the nice level in the file it writes desired the nice level to the generated file. More ideas welcome, thank you. On 2021-02-09 13:55, Postmaster @ MX wrote: -Original Message- From: Dominic Raferd Sent: Monday, 8 February 2021 10:24 PM To:

Re: Whitelisting server "non-deliverable" notices

On 30/01/2021 09:15, Nikolaos Milas wrote: I would like to ask: is there a way an (incoming) mail gateway server (i.e. a server accepting incoming mail for an organization) to somehow detect/understand genuine non-deliverable notices and avoid blocking them as spam? These non-deliverable

***ACHTUNG UNGEPRUEFT*** Re: amavis set nice level on ubuntu 18

--- Begin Message --- Hello, I want to set Amavis to a nice level around 15 so other services take priority.  I have done a lot of looking and found where the file is that can accept a nice level, say Nice=15. However that file amavis.service is in  /run/systemd/generator.late and is  

***ACHTUNG UNGEPRUEFT*** Re: Normal mail classified as virus

--- Begin Message --- On 05/02/2021 17:55, Nikolaos Milas wrote: We had a report that some normal emails from a gmail user would not reach their destination (users in our org). It turned out that practically all of that user's mails were classified as

Re: Blocking cannibalized spam/virus mail with password-protected attachments

On 22/12/2020 08:39, Nikolaos Milas wrote: On 22/12/2020 10:24 π.μ., Nikolaos Milas wrote: Can you please suggest ways in which we can configure amavis so as to recognize and drop this kind of mail? Another, probably better, approach would be to add to amavis a scan rule like: If body

Re: Blocking by country

On Wed, 21 Oct 2020 at 01:57, Alex wrote: > I have a fedora32 server system with amavisd and postfix installed and > would like to block all email from China and a number of other > countries. It doesn't look like there's an easy way to do this. > > Perhaps a better approach would be to block all

Re: clamav (under amavis) not filtering out viruses!

On Thu, 15 Oct 2020 at 09:52, Nikolaos Milas wrote: > > Hello, > > As you may also see in another mail (thread) I have started (for bayes > db migration), we have an installation with > postfix/amavis/clamav/spamassassin on CentOS 6 using (legacy?) rpmforge > packages (for amavis/clamav). > > The

Re: prerving envelope address via X-Original-to

On Wed, 14 Oct 2020 at 10:34, Andrey Lelikov wrote: > > Good day. > > A newbie amavisd-new user here. I run a small mail server for myself & > family. Recently I've changed from to a iredmail system and discovered > postfix/amavisd setup. For a long time I have a set of filters that rely > on the

Re: Permission Denied Issue in amavisd service

On Wed, 26 Aug 2020 at 14:01, Aung Ye Kyaw wrote: > > Dear Sirs, > > I would like to ask one issue that I added a new dkim in amavisd.conf file > and then restarted amavisd service but service failed so I changed back to > original amavisd.conf file .The service is still failed.Let me know why

Re: Outgoing mail being scanned? Open relay warning.

On Wed, 5 Aug 2020 at 19:19, Ian Evans wrote: > > On Tue, Aug 4, 2020 at 6:19 PM Patrick Ben Koetter wrote: >> >> Ian, >> >> * Ian Evans : >> > On Tue, Aug 4, 2020 at 3:38 PM Matus UHLAR - fantomas >> > wrote: >> > >> > > >Open relay? Nonlocal recips but not originating: [person I'm emailing]

Re: Re: Timeout Amavis AV-Scan?

On Tue, 7 Jul 2020 at 11:12, wrote: > > Hi, > > in var/mail.log I see that amavis does not wait until longer av-scan results > are available. > There is a timeout. > > av-scanner FAILED: run_av error: Exceeded allowed time\n > > Would be great to know, how/where to customize this timeout. > >

Re: skip checking for mail address

On Mon, 18 May 2020 at 15:37, Matus UHLAR - fantomas wrote: > > seems that addresses used in bypass_virus_checks_maps and > bypass_spam_checks_maps, are the envelope from addresses. > > We have gateway that sends reports with envelope addresses empty ("<>"), but > From: in headers is in form

Re: Unable to load spamassassin

On Wed, 1 Apr 2020 at 13:09, Marcio Merlone wrote: > > I had to disable pyzor. > > use_pyzor 0 > > In general pyzor works fine with SA and amavis. But you should have (e.g. in /etc/spamassassin/local.cf): pyzor_timeout 20

Re: Finding the version number from amavis.

On Sat, 18 Jan 2020 at 07:52, Hoyer-Reuther, Christian < christian.hoyer-reut...@cac-chem.de> wrote: > grep myversion_id amavisd-new > > -Ursprüngliche Nachricht- > Von: amavis-users cac-chem...@amavis.org> Im Auftrag von Philip > Gesendet: Samstag, 18. Januar 2020 05:32 > An:

Re: Extra support for some archive types

On Sat, 10 Aug 2019 at 10:41, korsar...@gmail.com wrote: > Ralph Seichter писал(а) в своём письме Sat, 10 > Aug > 2019 00:05:12 +0300: > > > * korsar: > > > >> 1) ACE has no support at all, need to add it > > > > Not having seen ACE archives in the wild for more than 10 years, I don't > > think

Re: Spam sneaking in.

On Mon, 5 Aug 2019 at 23:15, Bob D wrote: > Well, I am still getting some sneaking in and it still seems funny, here > is one from today. > This is the header as it came in: > > ... > > There was some time difference between the message in and the command line > run, but still big difference. >

Re: Log SpamAsssassin X-Spam-Status (rules and scores) into amavis log file

On Fri, 19 Jul 2019 at 14:06, mabi wrote: > Hello, > > I would like to log the typical X-Spam-Status mail header which gets added > by SpamAssassin to a mail into the amavis log file in order to track the > rules and their scores which gets triggered by ham and spam mails. > > Is this somehow

Re: whitelist

On Sat, 13 Jul 2019 at 10:47, Matus UHLAR - fantomas wrote: > > On 12.07.19 16:47, Deeztek Support wrote: > >> BUT... amavis identifies the address by matching the envelope sender OR > >> the From: header sender. So (in theory) a spammer can easily fake the > >> envelope sender and get

Re: whitelist

On Fri, 12 Jul 2019 at 19:14, Benny Pedersen wrote: > > Gregory Sloop skrev den 2019-07-12 17:55: > > > DR> From: header) have their SA score reduced by (typically) 4. > > > > DR> /etc/spamassassin/local_whitening.cf: > > DR> describe LOCAL_WHITENING_4 Whiten known good senders > > DR> score

Re: whitelist

On Thu, 11 Jul 2019 at 22:10, Bob D wrote: > > Do you really wish to bypass virus checks via amavis ? > Is Spamassassin used ? > You can whitelist in Spamassassin via /etc/spamassassin/local.cf and append > lines like: > whitelist_from *@whitelistdomain.whatever > this bypasses spamassassin

Re: Recommended web UI for Amavisd quarantine?

On Tue, 9 Jul 2019 at 16:41, Rich Wales wrote: > On 07/09/2019 07:44, Dominic Raferd wrote: > > I don't use a web ui but I have some CLI-based bash code built around > > mutt and formail which allows me to manipulate quarantined mails. I also > > have it email me a few ti

Re: Recommended web UI for Amavisd quarantine?

On Tue, 9 Jul 2019 at 15:02, Rich Wales wrote: > > I'm not looking for a total replacement of my entire e-mail system. I'm > happily using Postfix, Spamassassin, Amavisd-new, and Dovecot. All I'm > looking for at this time is a replacement for Mailzu. > I don't use a web ui but I have some

Re: amavis broken

On Wed, 19 Jun 2019 at 13:34, Dorian ROSSE wrote: > I attach to you the files, > I add a semicolon where It is ask then It asks again to add a semicolon, > I think the amavis shell want become myself crazy about my Ubuntu server, > I don’t know what I must do, Thank you in advance to bring your

Re: clamd does not scan emails

So I guess you have explicitly set (probably in /etc/amavis/conf.d/50-user): $MYHOME = '/var/amavis'; whereas the preset in debian/ubuntu package of amavis is: $MYHOME = '/var/lib/amavis'; ... or maybe you built amavis from source? On Wed, 22 May 2019 at 15:28, Alexander Azeev wrote: > Question

Re: clamd does not scan emails

On Tue, 21 May 2019 at 14:54, Alexander Azeev wrote: > Hello, I have a problem with clamd not being able to scan mail properly. > In the amavis log there are messages like: > > run_av (ClamAV-clamd) result: > /var/amavis/tmp/amavis-20190518T065844-01954-dOjV4CBP/parts: lstat() > failed:

Re: reload or restart after spamassassin/local.cf change?

On Wed, 17 Apr 2019 at 11:45, Matus UHLAR - fantomas wrote: > >> On Wed, 2019-04-17 at 09:57 +0100, Dominic Raferd wrote: > >> > Just wanted to double check this, because it is counter-intuitive to > >> > me. I thought amavis called SA 'from scratch' each time i

Re: reload or restart after spamassassin/local.cf change?

019-04-17 at 09:57 +0100, Dominic Raferd wrote: > > > > Just wanted to double check this, because it is counter-intuitive to > > me. I thought amavis called SA 'from scratch' each time it wanted to > > use it, so any change in SA config would be picked up immediately > >

Re: reload or restart after spamassassin/local.cf change?

On Tue, 12 Feb 2019 at 19:55, Patrick Ben Koetter wrote: > * Patrick Proniewski : > > Hi, > > > > I often adjust scores in spamassassin config (spamassassin/local.cf > and/or spamassassin/*.pre). > > How should I proceed so that amavisd takes this modification into > account: > > - reload? > > -

Re: Delays when scanning outbound e-mails

On Wed, 27 Mar 2019 at 21:12, Nick Howitt wrote: > > > On 27/03/2019 20:27, Marc Pujol wrote: > > > > A 27/03/2019 15:39, Nick Howitt escrigué: > > > >> I am not sure how to read this but the TIMING and TIMING-SA figures > >> are huge with tests_pri_-90: 299180, b_finish: 297503 and > >>

Re: Error when ...Cron test -e /usr/sbin/amavisd-new-cronjob && /usr/sbin/amavisd-new-cronjob sa-sync

On Tue, 19 Mar 2019 at 16:29, OLCESE, Marcelo Oscar wrote: > Estos errores son a diario y aprox desde el 15/03 > Asunto: Cron test -e /usr/sbin/amavisd-new-cronjob && > /usr/sbin/amavisd-new-cronjob sa-sync > Debian 8 > razor2: razor2 check failed: razor2: razor2 had unknown error during >

Re: Error message generated by AMAVIS.

On Thu, 14 Mar 2019 at 22:06, Patrick Ben Koetter wrote: > > * Philip : > > I'm getting this error when this cronjob runs: > > > > Cron test -e /usr/sbin/amavisd-new-cronjob && > > /usr/sbin/amavisd-new-cronjob sa-clean > > > > Error: > > > > razor2: razor2 check failed: razor2: razor2 had

Re: Update to SA cf requires amavis restart?

On Tue, 12 Feb 2019 at 22:30, Michael Orlitzky wrote: > > On 2/12/19 12:30 PM, Curtis Maurand wrote: > > sudo /usr/sbin/amavisd-new reload > > The systemd service should be able to do this for you, e.g. > ExecReload=/usr/sbin/amavisd -c /etc/amavisd.conf reload > if the "forking" service type

Re: Update to SA cf requires amavis restart?

On Tue, 12 Feb 2019 at 22:30, Michael Orlitzky wrote: > > On 2/12/19 12:30 PM, Curtis Maurand wrote: > > sudo /usr/sbin/amavisd-new reload > > The systemd service should be able to do this for you, e.g. > ExecReload=/usr/sbin/amavisd -c /etc/amavisd.conf reload > if the "forking" service type

Update to SA cf requires amavis restart?

Does a change to a spamassassin configuration file (.cf) requires a restart of amavis for it to be effective (when SA is being called by amavis)? (Amavis doesn't seem to have a reload option, or at least systemctl doesn't seem to know about it under Debian).

Re: Amavis not being called from postfix

On Fri, 8 Feb 2019 at 18:40, Patrick Ben Koetter wrote: > There will be a MILTER section in the upcoming docs. great > If you use Postfix and want to use other milters, such as > open(dkim|spf|dmarc|...) together with amavis you *have* to use milter for > amavis, because smtpd_proxy_filter and

Re: Amavis not being called from postfix

On Fri, 8 Feb 2019 at 17:17, Robert Moskowitz wrote: ... > I would think I want to use MILTER. I too am interested in running amavis as milter (Patrick has written some instructions in German), but the standard and more common setup, and the one which you are emulating at present, is as content

Re: Send recipient notification of quarantined spam

On Fri, 8 Feb 2019 at 10:20, Dino Edwards wrote: > We have been able to accomplish what you are asking for with our appliance. > We have a job that runs on a scheduled basis (2, 4, 8 hours or daily > depending on recipient preferences) that goes through the msgs table and > selects any

Re: Send recipient notification of quarantined spam

On Thu, 7 Feb 2019 at 04:46, Tom Robinson wrote: > bump > On 5/2/19 12:08 pm, Tom Robinson wrote: > > Hi, > > I'm sure this has been answered before but I just can't seem to find the > right settings. > > I want the recipient of a quarantined SPAM email to receive a notification > that it was

Re: Whitelisting specific sender addresses for specific recipient addresses

On Tue, 8 Jan 2019 at 08:37, Engels, Jan wrote: > > Hi everyone, > > I'm currently trying to setup amavisd-new for whitelisting emails **from** a > specific sender address **to** a specific recipient address (under CentOS 7). > By whitelist I mean no virus/banned/header checks and no spam

Re: Amavis-new whitelist sender address and mail log

On Tue, 8 Jan 2019 at 07:09, Admin Beckspaced wrote: > > Hello there ;), > > I've set a sender address to be whitelisted by amavis-new. > If I look in the amavis-new log: > > 2019-01-07T05:55:43.476393+01:00 cx20 amavis[14703]: (14703-20) Passed > CLEAN {RelayedInbound}, EXTERNAL

Re: R: Bypass spam check for message from my local domain

On Wed, 7 Nov 2018 at 06:12, Benny Pedersen wrote: > Scappatura Rocco skrev den 2018-11-06 18:50: > > > Could you instruct me on how I could define ORIGINATING Policy Bank? > > > https://forum.iredmail.org/topic5009-iredmail-support-disabling-oubout-amavisd-scanning.html > > dont disable amavisd

Re: Example for amavisd-signer as separate systemd service?

On Fri, 2 Nov 2018 at 09:11, Dino Edwards wrote: > -Original Message- > From: amavis-users [mailto:amavis-users-bounces+dino.edwards= > mydirectmail@amavis.org] On Behalf Of ge...@ssl-mail.com > Sent: Thursday, November 1, 2018 8:00 PM > > I am just installing Amavisd-New to use with

Re: get rid of "Open relay?" and set up DKIM

On Thu, 18 Oct 2018 at 15:32, Matus UHLAR - fantomas wrote: > Hello, > > I am trying to get rid of annoying "Open relay?" messages and later set up > DKIM signing, which both I believe are doable by properly setting > @mynetworks. > > the README.lookups says: > > @mynetworks_maps =

Re: amavis: Next Steps

On Thu, 11 Oct 2018 at 17:13, Benny Pedersen wrote: > Curtis Maurand skrev den 2018-10-11 16:09: > > > I get public key not available. I have one other domain with a 512 bit > > keys and it works. > > opendkim have minimal keysize of 1024 > > so you will randomly get dkim fails > opendkim has

Re: Amavis not filtering spam for entries in second domain

On Tue, 18 Sep 2018 at 09:13, Miguel Almeida wrote: > My postfix installation is working correctly (delivery via dovecot, spam > filtering via amavis - spamassasin). > > I receive emails in itc.com and bbv.com domains. For the emails that sent > to, bbv.com amavis is not adding the spam headers

Re: amavisd-release

On Tue, 28 Aug 2018 at 16:26, Deeztek Support wrote: > > What command are you using to release message? > > -Original Message- > From: amavis-users > [mailto:amavis-users-bounces+support=deeztek@amavis.org] On Behalf Of R. > Sterenborg (Lists) > Sent: Tuesday, August 28, 2018 5:23

docx decoding (docx2txt.pl)

Can Amavis 2.11.0 decode docx files out of the box? A while ago I installed docx2txt.pl (which, as its name suggests, provides simple text output from a docx file) and set this in 50-user.conf: @decoders = ( ... ['doc', \_ole, 'docx2txt.pl'], ['docx', \_ole, 'docx2txt.pl'], ... but now I

Re: What dictates when freshclam updates?

On Wed, 1 Aug 2018 at 13:39, Danny Horne wrote: > Hi all, > > I've been trying to figure out what dictates the interval at which > freshclam updates the virus database. It currently updates every three > hours, but I rebooted my server at midnight last night, expecting > updates to be done at

Bug in Debian/Ubuntu amavisd-release 2.11

in the previously-packaged 2.10). (I've submitted a bug report for Ubuntu and hopefully it will make its way back to the Debian maintainers.) #!/bin/bash VERSION="0.2 [01 Aug 2018]" THIS=$(basename $0) echo -e "\n$THIS v$VERSION - by Dominic Raferd domi...@timedicer.co.uk ${THIS//

Re: whitelist sender domain 'Return-path:' vs 'From:'

lope sender which is observed. > > A failure of mine in the previous posts was, that I used quotes within the > files for whitelisting. > Thats's a baaad idea. > > Best regards > Martin Johannes Dauser > > On Wed, 2018-03-21 at 14:35 +, Dominic Raferd wro

Re: whitelist sender domain

On 26 February 2018 at 16:34, Dominic Raferd <domi...@timedicer.co.uk> wrote: > I have now updated my 50-user.conf to this: > $interface_policy{'10024'} = 'INCOMING'; > $policy_bank{'INCOMING'} = { > whitelist_sender_maps => [ read_hash('/etc/amavis/whitel

Re: whitelist sender domain

On 21 February 2018 at 10:21, Martin Johannes Dauser <mdau...@cs.sbg.ac.at> wrote: > > On Sat, 2018-02-17 at 09:49 +0000, Dominic Raferd wrote: > > On 16 February 2018 at 21:05, Dauser Martin Johannes > > <mdau...@cs.sbg.ac.at> wrote: > > > Well this t

Re: whitelist sender domain

On 16 February 2018 at 21:05, Dauser Martin Johannes <mdau...@cs.sbg.ac.at> wrote: > Well this topic is quite old, still when searching for hard > whitelisting with amavisd-new you'll find this solution on different > sites. > > Dominic Raferd wrote on Dec 11 2016 >

Re: originating flag not working - critical bug - RelayedOpenRelay / DKIM signing not working

On 12 February 2018 at 10:06, Dino Edwards wrote: > Wouldn't this be avoided by simply using opendkim for DKIM signing instead of > relying on amavis for that? ... and use a program to do one thing and do it well - https://en.wikipedia.org/wiki/Unix_philosophy

Re: Header -> amavis quarantine

On 9 February 2018 at 17:56, Markus Clardy <mar...@clardy.eu> wrote: > On Fri, Feb 9, 2018 at 5:41 PM, Dominic Raferd <domi...@timedicer.co.uk> > wrote: >> >> On 9 February 2018 at 16:59, Markus Clardy <mar...@clardy.eu> wrote: >> > On Fri,

Re: Header -> amavis quarantine

On 9 February 2018 at 16:59, Markus Clardy <mar...@clardy.eu> wrote: > On Fri, Feb 9, 2018 at 4:23 PM, Dominic Raferd <domi...@timedicer.co.uk> > wrote: >> >> Is there a way to have the presence of a specific header (or, better, >> a specific beginning to a hea

Header -> amavis quarantine

Is there a way to have the presence of a specific header (or, better, a specific beginning to a header, where the later text might vary) causing quarantining by amavis. Use case is that postfix header_checks will identify a suspect mail and add the header before the mail is passed to amavis.

Re: Scoring questions

On 30 January 2018 at 17:26, Computer Bob wrote: > > I spoke too soon. > Apparently the upgrade from Ubuntu 14.04 LTS to 16.04 LTS whacked the > spamassassin somehow and it was acting funny. > There was no report template somehow and any SA call did not return a report.

Re: Block ..rar files in amavisd

On 22 January 2018 at 22:28, @lbutlr wrote: > I have a file mime_headers.pcre in postfix: > /^\s*Content-(Disposition|Type).*name\s*=\s*"?(.*\.(ade|adp| > bas|bat|chm|cmd|com|cpl|crt|dll|exe|hlp|hta|inf|ins|isp| > js|jse|lnk|mdb|mde|mdt|mdw|msc|msi|msp|mst|nws|ops|pcd| >

Re: R: R: R: R: Message quarantined as SPAM

is the difference between the ‘score’ > reported by spamassassin (and X-Spam-Status header) and the Hits reported > by the amavisd log. > > > > Could someone explain the difference? > > > > Regards, > > > > RS > > > > *Da:* amavis-users [mailto:

Re: R: R: R: R: Message quarantined as SPAM

On 19 July 2017 at 12:56, Scappatura Rocco wrote: > Hello. > > Even after the changes done to the amavis configuration, I still notice > that some messages has been blocked as SPAM. For example: > > Jul 18 12:04:55 zzz amavis[18242]: (18242-14) Blocked SPAM >

Re: DSN generation problem for UTF-8 files

On 18 July 2017 at 12:24, Dmitry Melekhov wrote: > Hello! > > > I run Ubuntu 16.04, it has 2.10.1 of amavisd-new . > > If file is blocked by amavis, let's say it .exe file, and this file has > UTF8 name (let's say Тест.exe), then > > amavis dies, without DSN generation and

Re: Amavis stopping

On 28 June 2017 at 02:44, Paul R. Ganci wrote: > I have had the same problem which has recently begun maybe 10 days or so > ago. I have managed to track it down to two particular emails that are > definitely spam and have created a Amavis DoS attack situation. Basically > the

Re: Message quarantined as SPAM

On 22 June 2017 at 13:13, Scappatura Rocco wrote: > Hi, > > I have Debian Lenny with postfix+amavisd-new+spamassassin+clamav. > > I have detected that a message has been quarantined: > > Jun 22 11:45:48 av8 amavis[22610]: (22610-11) Blocked SPAM >

Re: SPF and trusted forwarder

On 5 June 2017 at 18:55, Phil Susi wrote: > I prefer to use my @ubuntu.com alias, which forwards mail to my real > server. Amavis then tries to check SPF against the forwarder, which > fails. Is there a way to configure it to trust this forwarding server > and check SPF

Re: Training with sa-learn for viruses?

On 31 May 2017 at 15:56, Nikolaos Milas wrote: > Would you happen to know if/how we can train clamav based on our actual > messages? > ​I don't think you can, but I would be interested if anyone knows otherwise. In my case, after passing through our mailserver all incoming

Re: Training with sa-learn for viruses?

On 31 May 2017 at 11:09, Nikolaos Milas wrote: > Hello, > > I am using amavis with clamav and spamassassin and I am regularly training > for spam using the command: > >sa-learn --dbpath '/var/amavis/var/.spamassassin' --spam >/var/amavis/reported-spam > > Things work fine

Re: Pflogsumm emails through amavisd and SA hitting BAYES_99

On 28 April 2017 at 11:34, Simon Wilson wrote: > Hi all, > > I have pflogsumm running log summaries on my postfix install, and sending > to an address that resolves locally. All is on localhost, which is a newly > installed CentOS7 server, amavisd-new 2.10.1 from EPEL. >

Re: Open relay from localhost and other questions

On 22 April 2017 at 00:00, Benny Pedersen wrote: > Robert Moskowitz skrev den 2017-04-21 21:16: > > Been doing some research. mynetworks should stop the localhost from >> seeming like an Open relay. I don't have this problem on my old >> production server. I am researching it. >

Re: Open relay from localhost and other questions

On 19 April 2017 at 21:48, Robert Moskowitz wrote: > This is my new test setup. > ​..​ > > > Lots of questions. The 4th line has a amavis SQL failure. > Then concern that it is coming from an open relay? > Amavis gets called a 2nd then 3rd time? Should I put

Re: Keep X-Spam-... header lines when releasing message from quarantine?

On 30 March 2017 at 05:09, Rich Wales wrote: > From examining the amavisd-new code, it appears the relevant portion is at > line 11554: > > *11554* } elsif (!$reporting && /^(?:X-Spam|X-CRM114)-.+:/si) { > *11555* # skip header fields inserted by us > *11556*

Re: amavisd-release does not work with SQL quarantine (missing quar_type = "Q")

On 16 February 2017 at 06:52, wrote: > Hello, > > We are using amavisd with iRedMail. Banned mails are quarantined in a SQL > quarantine. > > Everytime I tried to release an email with amavisd-release an error occured: > > 450 4.5.0 Failure: File

Re: Amavis DNS query timeout

config file. > > -Original Message- > From: amavis-users [mailto:amavis-users-bounces+dino.edwards= > mydirectmail@amavis.org] On Behalf Of Dominic Raferd > Sent: Sunday, February 12, 2017 12:37 PM > To: amavis-users@amavis.org > Subject: Re: Amavis DNS query timeout &

Re: Amavis DNS query timeout

On 12 February 2017 at 17:20, Tim Smith wrote: > > Well surely amavis is using the same DNS servers as the server ? > Therefore a "dig" on the server indicates that my DNS lookups are > working, and therefore why I am saying amavis is not right when it > says "DNS timeout".

Re: Subject change for password-protected archives

Point of info: most (or all?) of us need this command to check amavis version (undocumented in my man or info): # amavisd-new -V amavisd-new-2.10.1 (20141025) On 14 December 2016 at 22:25, Jonathan Engbrecht wrote: > solution: upgrade to amavisd 2.11.0 to fix a bug the way

Re: whitelist sender domain

On 11 December 2016 at 09:33, Dusan Obradovic wrote: > >> On Dec 11, 2016, at 07:24, Asif Iqbal wrote: >> >> How do I make sure it is working? After I configured like below, I restarted >> amavisd and postfix and I am seeing a lot of >> ``RelayedOpenRelay''

Re: Sender notifications - disable? customize?

I don't think there is a way to check what the current active settings are for amavisd-new (nothing like postconf -n) - including all defaults - unfortunately. We can of course check our own settings with something like: grep -r "warn" /etc/amavis/conf.d|grep -v "\s*#" The defaults that I am

Re: Amavisd and Bayes (again...)

Maybe this can help: https://www.nerd-quickies.net/2015/10/02/spamassassin-bayes_00-1-90-although-sa-learn-runs-daily/ On 24 November 2016 at 13:43, @lbutlr wrote: > On Nov 24, 2016, at 2:09 AM, Alex Masidlover > wrote: > > Any help would be