Re: [Mimedefang] Problem scanning multiple attachments with Kaspersky Anti-Virus for Linux Workstation 5.0.2.0

2004-04-01 Thread David F. Skoll
On Fri, 2 Apr 2004, Ernst-Paul ten Brinke wrote: > Let's say you send a message with an attachment a.zip en b.zip and a.zip > contains a virus and b.zip not. [...] > Calling aveclient with multiple files or in this case with a * returns only > the scan return code of the last MIME part scanned.

[Mimedefang] Problem scanning multiple attachments with Kaspersky Anti-Virus for Linux Workstation 5.0.2.0

2004-04-01 Thread Ernst-Paul ten Brinke
I'm using MD 2.42 with Kaspersky Anti-Virus for Linux Workstation 5.0.2.0 I noticed a problem with scanning multiple attachments. In mimedefang.pl I see the following code in the subroutine for message_contains_virus_avp5 : # Run aveclient my($code, $category, $action) = run_virus_scanner($Feat

[Mimedefang] Help with filter - modified

2004-04-01 Thread Mark Penkower
In my last email, I posted the wrong filter - I forgot to uncomment out stuff. Here is the current (not working) one. Thanks Mark # -*- Perl -*- #*** # # mimedefang-filter # # Suggested minimum-protection filter for Microsoft

[Mimedefang] Please help with filter!

2004-04-01 Thread Mark Penkower
I have attached my mimedefang-filter. All that I need fot it to do is to block the banned extensions and to add the boilerplate disclaimer. I know that this does not work because I have the wrong number of brackets somewhere. This is driving me up a wall! Could somebody please post the correcte

Re: [Mimedefang] Correct order

2004-04-01 Thread WBrown
[EMAIL PROTECTED] wrote on 04/01/2004 02:17:55 PM: > My free disk space is limited right now, therefore I thought if I can scan > for viruses and reject if found before quarantining based on bad file > types, it would save on disk space. Yes it uses a bit more processor > power, but my grey

Re: [Mimedefang] Correct order

2004-04-01 Thread Todd Aiken
> > I'm doing the following using MIMEDefang: > > > > - Use filter_relay to bypass outgoing mail > > - Greylisting > > - Virus scanning (with uvscan) > > - Rejecting on bad filename extensions > > - Checking for SPAM with SpamAssassin > > > Why wouldn't you reject executable extensions before vir

Re: [Mimedefang] Correct order

2004-04-01 Thread WBrown
[EMAIL PROTECTED] wrote on 04/01/2004 01:15:37 PM: > I'm doing the following using MIMEDefang: > > - Use filter_relay to bypass outgoing mail > - Greylisting > - Virus scanning (with uvscan) > - Rejecting on bad filename extensions > - Checking for SPAM with SpamAssassin > Why wouldn't you reje

Re: [Mimedefang] slave error with razor2

2004-04-01 Thread Kelson Vibber
At 01:24 PM 3/31/2004, [EMAIL PROTECTED] wrote: mimedefang-multiplexor: Slave 12 stderr: razor2 check skipped: Bad file descriptor Died at /usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm line 409. IIRC, this means queries to the Razor servers are not responding. Try running razor-adm

RE: [Mimedefang] Quarantine management - anyone else working on

2004-04-01 Thread Troy Carpenter
Paul, I have a stop-gap system that I have been using, so if you want to develop a full blown system, that would be great. What I am about to describe probably has security holes, but that is not a problem for me, and I'm sure if someone wants to use this method and it's a problem, they will fix

[Mimedefang] Correct order

2004-04-01 Thread Todd Aiken
I'm doing the following using MIMEDefang: - Use filter_relay to bypass outgoing mail - Greylisting - Virus scanning (with uvscan) - Rejecting on bad filename extensions - Checking for SPAM with SpamAssassin I had to place greylist checking in filter_end because it seemed to be running before fi

Re: [Mimedefang] greylisting software... what do people use?

2004-04-01 Thread WBrown
[EMAIL PROTECTED] wrote on 04/01/2004 10:48:10 AM: > > What greylisting tools or programs do people use? I need something robust. > Volume of mail is not too high, but the software needs to work reliability. I use CanIT Pro. Works like a champ! ___

Re: [Mimedefang] md_check_against_smtp_server question

2004-04-01 Thread Kevin A. McGrail
Thanks, that'll work! KAM > You don't need to hack the function. Just do this in filter_recipient: > # Convert TEMPFAIL to CONTINUE > $answer = 'CONTINUE' if ($answer eq 'TEMPFAIL'); > return ($answer, $explanation); ___ Visit http://www.mimedefang.org

Re: [Mimedefang] greylisting software... what do people use?

2004-04-01 Thread Lucas Albers
There are 3-4 implementation out that that seem to work, including mine. I've never had any complaints about mine, or of the others...failing. Search the archives. The mimedefang one's use perl db-file. With that said, canit-pro is fuller featured and works out of the box with greylisting. Henrik

Re: [Mimedefang] md_check_against_smtp_server question

2004-04-01 Thread David F. Skoll
On Thu, 1 Apr 2004, Kevin A. McGrail wrote: > be queried cannot be reached. Since I am implementing this on the Backup > MX, I NEED it to queue if it can't be reached. > I was thinking that one parameter could be added to allow for this and I've > worked up the following code for comment: You d

[Mimedefang] md_check_against_smtp_server question

2004-04-01 Thread Kevin A. McGrail
I believe md_check_against_smtp_server will TEMPFAIL if the server trying to be queried cannot be reached. Since I am implementing this on the Backup MX, I NEED it to queue if it can't be reached. I was thinking that one parameter could be added to allow for this and I've worked up the following

Re: [Mimedefang] greylisting software... what do people use?

2004-04-01 Thread David F. Skoll
On Thu, 1 Apr 2004, Henrik Schmiediche wrote: > What greylisting tools or programs do people use? I use CanIt-PRO. :-) It's our commercial product. The greylisting uses PostgreSQL as a back-end DB. Evan Harris has a MySQL-based greylisting implementation; there are links to various greylisting

[Mimedefang] greylisting software... what do people use?

2004-04-01 Thread Henrik Schmiediche
Hello, I am thinking of implementing greylisting. I am using mimedefang 2.41 with spamassassin 2.63. What greylisting tools or programs do people use? I need something robust. Volume of mail is not too high, but the software needs to work reliability. Sincerely, - Henrik _

Re: [Mimedefang] md_copy_orig_msg question

2004-04-01 Thread Doug Brott
Kevin A. McGrail wrote: From the readings, I understand that clamav definitely will catch more viruses if you did this. Can anyone comment on the validity of using this with other scanners? Specifically, my interest is with McAfee's uvscan. Regards, KAM <>PLEASE NOTE: If you want your origina

[Mimedefang] HX- Header instead of Milter add: header X-

2004-04-01 Thread Christoph Martin
I just upgraded mimedefang from 2.39 to 2.40 on four of my machines. On all the boxes I have nearly the same mimedefang-filter using for instance action_add_header("X-Spam-Flag", "YES"); to add headers to the mails in filter_end. On ONE box I now get differnt syslog entries for this action. I used

[Mimedefang] Quarantine management - anyone else working on this?

2004-04-01 Thread Paul Murphy
Hi, I've been working on a CGI program to assist with managing the quarantine folders, which is now working but nowhere near ready for public inspection. The system consists of two Perl CGI scripts - one to display the message details for all quarantined messages (and to approve/delete them) and