[Mimedefang] backing up quarantine dir, ridiculously long awk script

2004-06-29 Thread Lucas Albers
Directions: change to quarantine dir. backs each day to seperate tar.bz2. pipe through bash to run. works well enough for me. awk command: ls | awk -F- '{print tar cjpf $1-$2-$3-$4.tar.bz2 $1-$2-$3-$4*}'|sort -u |head -n 1 -- Luke Computer Science System Administrator Security

[Mimedefang] MIME::Parser: can't open tmpfile: Invalid argument

2004-06-29 Thread Andrew Pollock
Hi, I'm rebuilding my primary MX, and I've been trialling MIMEDefang on my secondary MX. So I duplicated the bulk of the config from my secondary MX to my (yet to be commissioned) new primary MX. I get the following: mimedefang-multiplexor: Starting slave 0 (pid 3075) (1 running): About to

Re: [Mimedefang] Sendmail mailertable question

2004-06-29 Thread WBrown
[EMAIL PROTECTED] wrote on 06/28/2004 07:19:53 PM: Try using it with quotes around the custom SMTP response string: Bizarre! The books sendmail and sendmail Cookbook do not indicate the need for the quotes. Neither does the documnetation at http:/sendmail.org. But I tried it anyways and

Re: [Mimedefang] I would like to discard all on a recipient basis

2004-06-29 Thread Lucas Albers
Why not just to a reject in the access list, that has the effect of discard, but notifies the sender. -- Luke Computer Science System Administrator Security Administrator,College of Engineering Montana State University-Bozeman,Montana ___ Visit

Re: [Mimedefang] Greylisting code, now with mysql Backend

2004-06-29 Thread Lucas Albers
Jonas Eckerman said: On Fri, 25 Jun 2004 12:49:34 -0700, Jeff Grossman wrote:   I know my next question is pretty open ended, but what do people   on this list prefer for their backend database, and why? [Jonas said snip, db-file works for me.] I'm unsure why you are suffering corruption in

Re: [Mimedefang] Internet Virus hits IIS

2004-06-29 Thread Kenneth Porter
--On Monday, June 28, 2004 10:59 AM -0400 Joseph Brennan [EMAIL PROTECTED] wrote: Anyone have a clue what the bad code is, so we could reject mail containing it? I believe the issue is that IE ignores MIME type inconsistently when deciding what to do with web content. The hostile website hosts

[Mimedefang] Stripping received lines

2004-06-29 Thread Kenneth Porter
I've got a colo'd server in Cogent address space that can't send mail to members at Road Runner addresses, presumably due to the Cogent black list. In the past I've successfully bounced the mail off my office server using mailertable entries but RR now recognizes the original source. I'm

Re: [Mimedefang] Greylisting code, now with mysql Backend

2004-06-29 Thread Jeff Grossman
on 6/29/04 9:49 AM, Lucas Albers at [EMAIL PROTECTED] wrote: Jonas Eckerman said: On Fri, 25 Jun 2004 12:49:34 -0700, Jeff Grossman wrote:   I know my next question is pretty open ended, but what do people   on this list prefer for their backend database, and why? [Jonas said snip,

Re: [Mimedefang] Internet Virus hits IIS

2004-06-29 Thread Joseph Brennan
To effectively block, you'd need to block all links with graphic extensions. Cool!!! Well, I don't think the user community here is ready... yet. Joseph Brennan Academic Technologies Group, Academic Information Systems (AcIS) Columbia University in the City of New York

Re: [Mimedefang] Internet Virus hits IIS

2004-06-29 Thread WBrown
[EMAIL PROTECTED] wrote on 06/28/2004 08:14:52 PM: I believe the issue is that IE ignores MIME type inconsistently when deciding what to do with web content. The hostile website hosts a file with a graphic filename extension (eg. .jpg or .gif) but the file is actually HTML with hostile

Re: [Mimedefang] Greylisting code, now with mysql Backend

2004-06-29 Thread Lucas Albers
Jeff Grossman said: [better] alternative to db_file with some of the corruption that has been mentioned. If many people are doing fine with db_file, then I might just stay with Well it's used as the native bayesian db format for SA, and their has not been complaints of corruption on the SA

Re: [Mimedefang] MIMEDefang embedded perl stability issues

2004-06-29 Thread Lucas Albers
Chris Gauch said: The embedded perl interpreter definitely minimizes the memory usage by the MD slaves, but I don't really notice an overall improvement in total memory usage when using the embedded perl option. All 1.5GB of RAM is still used up entirely, and I have the same number of

Re: [Mimedefang] MIMEDefang embedded perl stability issues

2004-06-29 Thread Lucas Albers
duh, didn't see any of the previous posts, until just now. I guess I never do a reread, always a restart, that would explain why I never saw the error. Dave, Should the default mimedefang-filter have use strict in it, in the default install? Would that solve some problems? -- Luke Computer

RE: [Mimedefang] Greylisting code, now with mysql Backend

2004-06-29 Thread Lee Dilkie
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Lucas Albers Sent: Tuesday, June 29, 2004 5:11 PM To: [EMAIL PROTECTED] Subject: Re: [Mimedefang] Greylisting code, now with mysql Backend Jeff Grossman said: [better] alternative to db_file with some of the

Re: [Mimedefang] MIMEDefang embedded perl stability issues

2004-06-29 Thread Martin Blapp
Hi, Should the default mimedefang-filter have use strict in it, in the default install? Would that solve some problems? It can fix some unpropper written code which makes troubles in the reload szenario ... Martin ___ Visit

Re: [Mimedefang] MIME::Parser: can't open tmpfile: Invalid argument (solved)

2004-06-29 Thread Andrew Pollock
On Tue, Jun 29, 2004 at 05:45:14PM +1000, Andrew Pollock wrote: Hi, I'm rebuilding my primary MX, and I've been trialling MIMEDefang on my secondary MX. So I duplicated the bulk of the config from my secondary MX to my (yet to be commissioned) new primary MX. I get the following:

RE: [Mimedefang] MIMEDefang embedded perl stability issues

2004-06-29 Thread Matthew . van . Eerde
From: Martin Blapp [mailto:[EMAIL PROTECTED] Should the default mimedefang-filter have use strict in it, in the default install? Would that solve some problems? It can fix some unpropper written code which makes troubles in the reload szenario ... *ALL* production Perl code should live

[Mimedefang]

2004-06-29 Thread Shawn Button
How do I set up auto-whitelisting in SA when running mimedefang? I uncommented the lines in my mimedefang-filter but it seems like I should do something to my sa-mimedefang.cf. I have SA 2.63 and mimedefang 2.39 Thanks much, Shawn ___ Visit

Re: [Mimedefang] Sendmail mailertable question

2004-06-29 Thread Mike Batchelor
On Tue, 29 Jun 2004 12:44:28 -0400, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote on 06/28/2004 07:19:53 PM: Try using it with quotes around the custom SMTP response string: Bizarre! The books sendmail and sendmail Cookbook do not indicate the need for the quotes.

[Mimedefang] ClamAV not detecting all viruses

2004-06-29 Thread Stewart James
OK here is the situation. I have clamav-daemon which is run before trend micro's vscan. The majority of viruses are found by clamav with no problems. One or two slip past and are picked up by trend. I altered my setup so the ones detected by trend get quarantined so I could look further.

Re: [Mimedefang] ClamAV not detecting all viruses

2004-06-29 Thread Bill Maidment
Stewart James wrote: OK here is the situation. I have clamav-daemon which is run before trend micro's vscan. The majority of viruses are found by clamav with no problems. One or two slip past and are picked up by trend. Which version of clamav. We had this issue before we installed 0.73. Still

Re: [Mimedefang] ClamAV not detecting all viruses

2004-06-29 Thread Stewart James
OK. It's .72, I remeber reading somewhere it was an issue in 0.70 but had been fixed. (and osrry to all for not inluding version numbers. Due to resource restraints (read: there is only one of me) I tend to rely on debian packages. A report of this issue being fixed 0.73 is enough for me to

Re: [Mimedefang] ClamAV not detecting all viruses

2004-06-29 Thread Bill Maidment
Stewart James wrote: OK. It's .72, I remeber reading somewhere it was an issue in 0.70 but had been fixed. (and osrry to all for not inluding version numbers. Hmmm.. it was supposed to have been fixed in 0.72, we couldn't use 0.72 because of a Proxy issue, so I can't confirm if it actually did

Re: [Mimedefang] ClamAV not detecting all viruses

2004-06-29 Thread Stewart James
Hmmm.. it was supposed to have been fixed in 0.72, we couldn't use 0.72 because of a Proxy issue, so I can't confirm if it actually did get fixed there. Well it's a 3 day wait (OK a couple more becuase that falls on a weekend here). I will see if 0.73 resolves it for me, if not, I can start