Re: Kaspersky Security amavis

2023-05-23 Thread Jakob Curdes
with amavis? No, because the FreeBSD thing :) If I am going to pay for a piece of software, it can, at least, run on what OS I want and not the contrary. Olivier -- Jakob Curdes Anschrift iS information systems oHG Donnerschweer Str. 89-91 D-26123 Oldenbur

Re: Strip or modify URLs in mails - how?

2020-01-13 Thread Jakob Curdes
[1] https://gitlab.com/amavis/amavis/raw/master/amavisd-custom.conf Best regards, Jakob Curdes

Strip or modify URLs in mails - how?

2020-01-08 Thread Jakob Curdes
Hello all, this is a "side-topic" question but perhaps of interest to many. In the wake of the recent ransomware attacks, which we used to prevent effectively for our customers by banning old .doc (et al) formats, now the focus has been shifted on sending mails with seemingly valid links, and i

Re: ANNOUNCE: Amavis project handed over to new project leaders

2018-10-09 Thread Jakob Curdes
Mark, I would like to use the moment to thank you for years of work on this project which has evolved into an important part of mail handling for many of us. I am glad a solution has been found that shows a future for this software. Regards and have luck with your new interests, duties and prior

DSPAM training not working

2017-10-17 Thread Jakob Curdes
Hello, I have dspam activated on my amavisd and I see dspam scores in the results, so the principal dspam setup seems to be working. But I cannot see any training, neither spam nor ham, so the score is always -0.100 ... I use the following integration:   ['DSPAM', 'Amavis::SpamControl::ExtProg

Re: block exe in pdf-files?

2017-05-30 Thread Jakob Curdes
But would this work for a docm that needs to be extracted from a PDF? I was not aware that amavisd or the tolls it uses is able to extract stuff embedded in a pdf. JC Am 30.05.2017 um 15:38 schrieb Dino Edwards: Have you tried the following in your file rule? [qr'.\.(docm)$'ix => 1], [qr'.\

Re: Upgrade due to CentOS 5 EOL

2017-04-13 Thread Jakob Curdes
On 04/12/2017 09:53 PM, Curtis wrote: Good evening all We have been running Postfix/Cyrus/Amavis on CentOS for over 10 years. Now we are faced with upgrading from CentOS 5 due to EOL. Choices are CentOS 6 and 7. Comments as to best choice would be greatly appreciated. Please be aware that

Question RE disable banned recipient notification per domain

2016-07-07 Thread Jakob Curdes
must be possible somehow but I found no example how to do this. I suppose I need to pass some sort of array where the entry for one domain is set to false !? I would be glad if somebody could give me a hint. Best regards, Jakob Curdes

getmail and amavisd

2016-04-28 Thread Jakob Curdes
nds up in the "mynets" policy bank. Any idea how i coud differentiate this case from a mail actually originating at localhost!? Regards, Jakob Curdes

Re: Question RE Kaspersky 8.0 (klms) socket permission error

2016-03-30 Thread Jakob Curdes
Good day everyone Regarding this problem: https://lists.amavis.org/pipermail/amavis-users/2014-January/002737.html Is there any news of how to solve it. Ah yes there is an easy trick;amavisd wants its own user and klms also wants its own user. But with the two separate accounts you will not

Re: js in zip attachment of e-mail

2016-03-01 Thread Jakob Curdes
Am 01.03.2016 um 22:38 schrieb Thomas Spuhler: There are a lot of e-mails on the lose with subject "Unpaid invoice # " containing a zipped js (Java Script) I got about 10 of them today. Is there a way to filter them out using amavisd? We just banned .js as mail attachments everwhere, no s

Re: Amavis and anti-virus engine ?

2016-02-24 Thread Jakob Curdes
Am 24.02.2016 um 08:41 schrieb Patrick Ben Koetter: * Jakob Curdes : Yes but for the general audience this does not help very much... There are quite a few vendors where you can buy a scanner based on SAVAPI like any other regular product. I think it just isn't well known that such pro

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
Am 23.02.2016 um 19:58 schrieb Per-Erik Persson: Has anyone tried a recent clamav with YARA support and yara-rules available? I have just played around with yara but you need to be careful and read/understand each rule before dropping it into the clamav DB directory. There are rules that mark

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
Yes but for the general audience this does not help very much... JC

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Jakob Curdes
As far as I know, Avira has also discontinued their linux product. We have augmented clamav with the sanesecurity signatures. I just read about the interesting YARA project and am looking into adding these rules also. Also we block .js and the old microsoft office formats. Up to now this seems

dspam training not working?

2016-01-07 Thread Jakob Curdes
ight for the amavisd case. Is anbody else using DSPAM with a current amavisd? Regards, Jakob Curdes

Kaspersky KLMS 8.0 and amavis - partial success...

2014-06-23 Thread Jakob Curdes
ped me the environment; I did not detect anything unusual there. I have the feeling I am missing something small, but am not sure what it is. Regards, Jakob Curdes

amavisd and Avast! scanner - permission problems

2014-06-02 Thread Jakob Curdes
member of the amavis group. But this seems not to be enough? It seems that there is no option to have the avast processes run as user amavis, so we need to fix the permissions. Maybe other avast users can recommend a setup !? Regards, Jakob Curdes

Re: Question RE Kaspersky 8.0 (klms) socket permission error

2014-01-27 Thread Jakob Curdes via amavis-users
but not from the amavisd script. JC On Tue, Jan 21, 2014 at 6:30 PM, Jakob Curdes via amavis-users mailto:amavis-users@amavis.org>> wrote: > > I am now trying to start with simpler things: > with the command-line version of KLMS 8.0, kavscanner. > This is similar or identi

Re: Question RE Kaspersky 8.0 (klms) socket permission error

2014-01-21 Thread Jakob Curdes via amavis-users
I am now trying to start with simpler things: with the command-line version of KLMS 8.0, kavscanner. This is similar or identical to the scanner delivered with kav4fs, so I can use a predefined configuration, only the path must be modified: ### http://www.kaspersky.com/ ['Kaspersky Antivi

Re: Question RE Kaspersky 8.0 (klms) socket permission error

2014-01-20 Thread Jakob Curdes via amavis-users
Am 20.01.2014 15:31, schrieb Jernej Porenta: What about directory permissions of /var/run/klms? Looks correct to me: drwxrwx---. 2 kluserklusers 4096 Jan 20 16:05 klms JC On 20/01/14 15:15, Jakob Curdes via amavis-users wrote: Hi, we are installing the kaspersky for linux mail

Question RE Kaspersky 8.0 (klms) socket permission error

2014-01-20 Thread Jakob Curdes via amavis-users
Hi, we are installing the kaspersky for linux mail scanner 8.0 in conjunction with amavis following klms's manual. We are looking at our screens and do not understand why this is not working. We have ### Kaspersky Security 8.0 for Linux Mail Server ['Kaspersky Security 8.0 for Linux Mail

Re: Amavisd-new Error Information

2011-09-28 Thread Jakob Curdes
ably this would be a task for the consultant who installed and configured the system. Best regards, Jakob Curdes - No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1410 / Virus Database: 1520/3912 - Release Date: 09/22/11

Re: Amavisd-new Error Information

2011-09-22 Thread Jakob Curdes
So the remedy would be to open the firewall for the destination port 6277 UDP. Then the DCC component of spamassassin can contact the checksum servers. If this is not feasible the DCC check should be deactivated as it cannot deliver any information without contact to the network. Hope this help

Re: excluding checks for @mynetowrks - amavis vs. postfix problem

2011-09-21 Thread Jakob Curdes
On Wed, 21 Sep 2011, Jakob Curdes wrote: I just give these machines a negative score ... Nice, but I really don't know, how could I achieve that per IP address (howto begin with negative score). I found only this: http://www200.pair.com/mecham/spam/bypassing.html#5 Actually I do n

Re: excluding checks for @mynetowrks - amavis vs. postfix problem

2011-09-21 Thread Jakob Curdes
Am 21.09.2011 10:51, schrieb Tomas Macek: I want to exclude some part of Postfix's mynetworks from Amavis spam checks, but really only some part, the rest should be checked as ussual. The "some part" is a subnet, in that I have all my servers sending emails, that should be excluded. For example

Re: Problems with UTF8 and docx (???)

2011-03-29 Thread Jakob Curdes
dling Hello Mark, thank you for answering. I have problems repeating the issue as it doas not happen with all documents. I can give you the mail from the amavis tmp dir, which I will do in a separate message. Best regards, Jakob Curdes

Problems with UTF8 and docx (???)

2011-03-29 Thread Jakob Curdes
isable banned checking altogether. Our perl version is perl, v5.8.8 built for x86_64-linux-thread-multi What can I do to diagnose this further? Or does anybody have an idea what is going on here? It looks like it is specific to this environment as we have similar setups without this problem. Thank you for a hint, Jakob Curdes