RE: [Mimedefang] Blocking spam senders using IPTables?

2004-11-04 Thread Paul Murphy
Jim, Looking at my log files I do NOT see the issue which you describe where a client continues to send data regardless of the commands returned. Of course I am not sure how much, if any, of that would be logged. I suspect only the initial connect and the quit would generate a log antry

Re: [Mimedefang] mimedefang.sock

2004-11-04 Thread Chris Masters
I've never seen the behavior you describe. Can you strace the milter to see what's happening? Good idea. Looks as though it hasn't even handed control over to 'int main()' yet. I guess this isn't a mimedefang issue. Chris [EMAIL PROTECTED] root]# gdb /usr/local/bin/mimedefang 20691

Re: [Mimedefang] New to Mimedefang

2004-11-04 Thread Aleksandar Milivojevic
Lisa Casey wrote: Hi, I got Mimedefang working now. Question: what are these directories for in /var/spool/MIMEDefang and do I need all these? Seems like a new directory is created with each e-mail. At this rate, might this eventually cause disk space problems? Can I delete these? drwxr-x---2

Re: [Mimedefang] New to Mimedefang

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 8:43, Aleksandar Milivojevic wrote: Another possiblity is if you killed MIMEDefang while it was still processing an email, directory might be left over. If you put the /var/spool/MIMEDefang directory on a ramdisk (using either an actual ramdisk or tempfs)

Re: [Mimedefang] Blocking spam senders using IPTables?

2004-11-04 Thread James Ebright
Yes, however, certain 5xx responses I do not see ANY reason for allowing a client to recover, for example, if the client was relaying through a blacklisted IP.. there is NOTHING the client can do to change that during the same conversation, thus it makes zero sense to allow it to recover or

Re: [Mimedefang] New to Mimedefang

2004-11-04 Thread David F. Skoll
On Thu, 4 Nov 2004, Jeff Rife wrote: If you put the /var/spool/MIMEDefang directory on a ramdisk (using either an actual ramdisk or tempfs) this not only speeds up the scanning but solves this problem in the long run, since every reboot gets rid of these randomly saved directories. Well,

[Mimedefang] Frustration...

2004-11-04 Thread Lisa Casey
Hi Folks, I've spent most of this week on this and am just getting frustrated. I'm Sysadmin for an ISP. I installed MIMEDefang, Spamassassin and filter::scan on my Red Hat Sendmail server as a way of dealing with my customers spam/virus (mostly the spam, it's a REAL problem). As far as I can

Re: [Mimedefang] Frustration...

2004-11-04 Thread alan premselaar
Lisa, Lisa Casey wrote: Hi Folks, ...snip... I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. I know I can do the above with MIMEDefang/Spamassassin, but I'll be darned if I can figure out how. And the more I try to figure it

Re: [Mimedefang] Frustration...

2004-11-04 Thread Yang Xiao
Hi, As a fellow newbie, I have struggled to get everything working for the past two weeks as well, and I can see you are having some of the same problem I had(still having), so here's my $0.02, hope it helps, and for the experts out there, please correct me if I'm wrong with any of my assumptions!

Re: [Mimedefang] Frustration...

2004-11-04 Thread Aleksandar Milivojevic
Lisa Casey wrote: and Spamassassin adds a SpamAssassinReport.txt as an attachment to each spam mail. But I've been reading websites for two days now and can't figure out how to do anything else with this. Basically I don't want spam coming into my users mailboxes, they don't want it. I understand

Re: [Mimedefang] Frustration...

2004-11-04 Thread Brent J. Nordquist
On Thu, Nov 04, 2004 at 02:15:20PM -0500, Lisa Casey wrote: I've spent most of this week on this and am just getting frustrated. I'm Sysadmin for an ISP. I installed MIMEDefang, Spamassassin and filter::scan (I assume you mean File::Scan there) on my Red Hat Sendmail server as a way of

[Mimedefang] Action bounce

2004-11-04 Thread Button, Shawn
Can I action bounce for a certain SA score and then action discard for a higher score? If the action is discard does it try to process the bounce line as well or does it stop with discard? Thank you kindly, Shawn # Spam checks if SpamAssassin is installed if ($Features{SpamAssassin}) {

[Mimedefang] Spamassassinreport.txt

2004-11-04 Thread Yang Xiao
Hi, What do I need to do to replace the actual email message body with the SpamAssassin-report.txt and send the spam message body as an attachment? I had it working for a while but now it forwards the spam and send the report as an attachment, please help. Yang

Re: [Mimedefang] Action bounce

2004-11-04 Thread Kelson
Button, Shawn wrote: Can I action bounce for a certain SA score and then action discard for a higher score? If the action is discard does it try to process the bounce line as well or does it stop with discard? Thank you kindly, Shawn if ($hits 9.0) { return

Re: [Mimedefang] Spamassassinreport.txt

2004-11-04 Thread Rob MacGregor
On Thu, 4 Nov 2004 15:35:31 -0500, Yang Xiao [EMAIL PROTECTED] wrote: Hi, What do I need to do to replace the actual email message body with the SpamAssassin-report.txt and send the spam message body as an attachment? I've certainly posted my solution to the list, so if you check the archive

RE: [Mimedefang] Action bounce

2004-11-04 Thread Button, Shawn
Thanks much. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kelson Sent: Thursday, November 04, 2004 1:51 PM To: [EMAIL PROTECTED] Subject: Re: [Mimedefang] Action bounce Button, Shawn wrote: Can I action bounce for a certain SA score and then action

Re: [Mimedefang] Spamassassinreport.txt

2004-11-04 Thread Yang Xiao
Got it, many thanks! Yang ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Frustration...

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 14:15, Lisa Casey wrote: and Spamassassin adds a SpamAssassinReport.txt as an attachment to each spam mail. But I've been reading websites for two days now and can't figure out how to do anything else with this. Basically I don't want spam coming into my users mailboxes,

Re: [Mimedefang] Frustration...

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 14:02, Brent J. Nordquist wrote: First off: What are you using for your mimedefang-filter script? The tarball has examples/suggested-minimum-filter-for-windows-clients which has a pretty complete framework. Unless I'm mistaken, I can't see any difference between this file and

Re: [Mimedefang] New to Mimedefang

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 13:08, David F. Skoll wrote: On Thu, 4 Nov 2004, Jeff Rife wrote: If you put the /var/spool/MIMEDefang directory on a ramdisk (using either an actual ramdisk or tempfs) this not only speeds up the scanning but solves this problem in the long run, since every reboot

Re: [Mimedefang] New to Mimedefang

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 19:29, Rob MacGregor wrote: But be aware that with FreeBSD 5.x and UFS2 short lived files (~6 s ISTR) don't get written to disk, so a RAM disk will rarely buy you anything, but costs you memory :-). That's what makes tempfs so nice. There is no memory use unless the file is

Re: [Mimedefang] Frustration...

2004-11-04 Thread Kris Deugau
Jeff Rife wrote: We're not an ISP, but I have found that dropping anything that scores higher than 10 (using the standard SA 2.63 rulesets) gives us zero false positives, and *nothing* that anybody could possibly want. Don't count on it. I've seen far too many legit mail me info about your

Re: [Mimedefang] Frustration...

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 17:33, Kris Deugau wrote: Jeff Rife wrote: We're not an ISP, but I have found that dropping anything that scores higher than 10 (using the standard SA 2.63 rulesets) gives us zero false positives, and *nothing* that anybody could possibly want. Don't count on it. I've

RE: [Mimedefang] Frustration...

2004-11-04 Thread Jeff Rife
On 4 Nov 2004 at 19:39, Tory Blue wrote: What I need is something that will do a dictionary look up and if the email contains more then 2 mispelled words in the subject it's bounced. That's not efficient, but how else are you going to

Re: [Mimedefang] Original-Content-Type in header

2004-11-04 Thread Rob MacGregor
On Thu, 04 Nov 2004 18:45:17 -0500, Tim Boyer [EMAIL PROTECTED] wrote: I'm using RH Enterprise, Sendmail Switch, MimeDefang 2.44 and SpamAssassin 3.0.1. Somewhere in there a very few html messages are having their content type changed to text/plain, and an 'Original-Content-Type' line