[Mimedefang] abnormal cpu usage

2004-04-28 Thread Muhammad Talha
Dear all i have Redhat 9 Pentitum II 398.950 MHz 1 GB RAM .kernel 2.4.26 /var/spool/MIMEdefang mounted as tmpfs server is not too much busy . MX_MAXIMUM=40 last month i removed spamassassin because of heavy load but still the same problem exists. mimedefang keep on opening new process more than

Re: [Mimedefang] Managing Quarantined Messages

2004-04-28 Thread Tim Pushor
David F. Skoll wrote: The simple way is to use quarantine_entire_message() and then have some kind of scripts (either command-line or Web-based, depending on your tastes) that remail the message. You also need to avoid filtering anything coming from 127.0.0.1 so you don't re-quarantine the messag

Re: [Mimedefang] Managing Quarantined Messages

2004-04-28 Thread David F. Skoll
On Wed, 28 Apr 2004, Tim Pushor wrote: > You know, I was half expecting this answer ;-) Well, you know, gotta try... > If I were selling a solution, It would be CanIt - however, this is for > me, and at least half of the fun of running a system based on Open > Source is writing this kind of stuf

Re: [Mimedefang] Managing Quarantined Messages

2004-04-28 Thread Tim Pushor
David F. Skoll wrote: It would be nice if the administrator could decide that the message was not malware or undesirable and just tag the message (via browser) for redelivery. Ahem... that's why we get the big bucks for CanIt... You know, I was half expecting this answer ;-) If I were s

Re: [Mimedefang] Managing Quarantined Messages

2004-04-28 Thread David F. Skoll
On Wed, 28 Apr 2004, Tim Pushor wrote: > It would be nice if the administrator could decide that the message was > not malware or undesirable and just tag the message (via browser) for > redelivery. Ahem... that's why we get the big bucks for CanIt... Regards, David. __

[Mimedefang] Managing Quarantined Messages

2004-04-28 Thread Tim Pushor
Hi all, I am trying to now wrap my head around how to easily deal with quarantined parts and messages. First of all, from a programmatic point of view, whats the best way to determine given a quarantine directory if the message or just individual parts were quarantined? The existence of an ENT

RE: [Mimedefang] .vcs files

2004-04-28 Thread Shawn Button
Thank you. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of -ray Sent: Wednesday, April 28, 2004 12:31 PM To: [EMAIL PROTECTED] Subject: Re: [Mimedefang] .vcs files Shawn, I wasn't sure about .vcs files either and didn't have time to research it. Our

DB File limits (was Re: [Mimedefang] greylisting DB_File locking)

2004-04-28 Thread David F. Skoll
On Wed, 28 Apr 2004, -ray wrote: > I accumulated a little over 38,000 in the past 12 hours, and i'm > wondering if i'm stretching the limitations of the DB_File format. A DB_File should handle millions of entries without a hiccup. Regards, David. ___

Re: [Mimedefang] Poll: Time to drop Trophie support?

2004-04-28 Thread Stephen Smoogen
On Wed, 2004-04-28 at 12:26, David F. Skoll wrote: > Hi, all. > > Is anyone using Trophie with MIMEDefang? It looks like Trend Micro doesn't > give out enough docs for the Trophie author to maintain it. If it's > a dead end, I will drop Trophie support. > > Yell if that will hurt you! > I was

Re: [Mimedefang] Poll: Time to drop Trophie support?

2004-04-28 Thread Matthew Schumacher
David F. Skoll wrote: Hi, all. Is anyone using Trophie with MIMEDefang? It looks like Trend Micro doesn't give out enough docs for the Trophie author to maintain it. If it's a dead end, I will drop Trophie support. Yell if that will hurt you! It seems like clamav is the best solution for mail sy

[Mimedefang] Feature / SOP Request

2004-04-28 Thread Kevin A. McGrail
Split the bad_exts into two lists: bad_exts and REALLY_bad_exts. Add things are NEVER legitimate mail (like .scr and .pif) to really_bad_exts. Have this really_bad_exts checked during the virus routine so that those mails can be silently discarded. False positives are nil and the users are alway

Re: [Mimedefang] greylisting DB_File locking

2004-04-28 Thread -ray
Andrea, Thanks for the info. I switched to DB_File::Lock and things seem to be running fine. How many records are in your greylistdb? I accumulated a little over 38,000 in the past 12 hours, and i'm wondering if i'm stretching the limitations of the DB_File format. ray =-=-=-=-=-=-=-=-=-=-=-=

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread WBrown
[EMAIL PROTECTED] wrote on 04/28/2004 02:29:56 PM: > Is this the version installed? How would I find out if the have the newer > version available on RHN? I have 3 year subscriptions on my spam boxes. Double Duh! Just go to the RHN web page and look. I think I need a nap now.

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread WBrown
[EMAIL PROTECTED] wrote on 04/28/2004 01:44:32 PM: > To finish Nate's sentences (a habit I havent had the pleasure of in 3 > years ;))... > > For an already installed package > rpm -q perl-HTML-Parser I didn't think to query rpm. I was think in terms of querying the perl module... DUH! >

Re: [Mimedefang] .vcs files

2004-04-28 Thread -ray
Shawn, I wasn't sure about .vcs files either and didn't have time to research it. Our calendar app also uses .vcs files, so i decided to allow vcs only internally, based on $RelayAddr. Below is my filter_bad_filename function. As always comments/suggestions are welcome. # This procedure re

[Mimedefang] Poll: Time to drop Trophie support?

2004-04-28 Thread David F. Skoll
Hi, all. Is anyone using Trophie with MIMEDefang? It looks like Trend Micro doesn't give out enough docs for the Trophie author to maintain it. If it's a dead end, I will drop Trophie support. Yell if that will hurt you! Regards, David. -- David F. Skoll <[EMAIL PROTECTED]>Roaring Pengui

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread Stephen Smoogen
On Wed, 2004-04-28 at 10:42, Nate Golnik wrote: > > > > Do you know what version ships w/ RHell 3.0? How does one check the > > version? > > > > RHEL 3 ships with perl-HTML-Parser-3.26-17.i386.rpm > > -Nate To finish Nate's sentences (a habit I havent had the pleasure of in 3 years ;))...

[Mimedefang] .vcs files

2004-04-28 Thread Shawn Button
We have had a request to allow .vcs files through mimedefang because Powertrip sends them out for itineraries for some of our employees who travel. I have attempted to research previous and possible virus propagation via this specific file type, but everything I pull up doesn't have info on the act

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread Nate Golnik
> > Do you know what version ships w/ RHell 3.0? How does one check the > version? > RHEL 3 ships with perl-HTML-Parser-3.26-17.i386.rpm -Nate -- Nate Golnik Red Hat System Administrator 1801 Varsity Drive Raleigh, NC 27606

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread WBrown
[EMAIL PROTECTED] wrote on 04/28/2004 10:30:51 AM: > Not sure if this is a solution or not at this point but someone > suggested I check the version of HTML::Parser. RedHat 8 ships with > version 3.26 and latest version is 3.36. Have upgraded and haven't > seen the error again but it's still

Re: [Mimedefang] nasty multiplexor death

2004-04-28 Thread Adam Lanier
Not sure if this is a solution or not at this point but someone suggested I check the version of HTML::Parser. RedHat 8 ships with version 3.26 and latest version is 3.36. Have upgraded and haven't seen the error again but it's still early yet... -- Adam Lanier Bernard L. Madoff Investment Se

Re: [Mimedefang] Problem with HTML messages

2004-04-28 Thread David F. Skoll
On Wed, 28 Apr 2004 [EMAIL PROTECTED] wrote: > I'm using MimeDefang v2.39, on a RH9. Few of my users complained > they don't received messages contain HTML body correctly. The > messages bodies are replaced by this message : No text/plain version > of the HTML message available I didn't have this

[Mimedefang] Problem with HTML messages

2004-04-28 Thread spepin
Hi, I'm using MimeDefang v2.39, on a RH9. Few of my users complained they don't received messages contain HTML body correctly. The messages bodies are replaced by this message : No text/plain version of the HTML message available I didn't have this trouble with the previous installed vesion (