Re: [Mimedefang] Permissions on /varspool/MIMEDefang

-Original message- > From:Richard Laager > Sent: Thursday 11th February 2016 18:22 > To: mimedefang@lists.roaringpenguin.com > Subject: Re: [Mimedefang] Permissions on /varspool/MIMEDefang > > On 02/10/2016 11:01 PM, Bill Maidment wrote: > > Hi > > After your most

Re: [Mimedefang] Permissions on /varspool/MIMEDefang

Hi, > After your most recent release I have had problems with the > permissions on /var/spool/MIMEDefang being reset to 0750 after a > reboot. I need the permission to be 0770 to allow for clamd scanner > to use the directory. I eventually discovered this line > in

Re: [Mimedefang] Permissions on /varspool/MIMEDefang

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 11 Feb 2016, Bill Maidment wrote: -Original message- From:Richard Laager Sent: Thursday 11th February 2016 18:22 To: mimedefang@lists.roaringpenguin.com Subject: Re: [Mimedefang] Permissions on

Re: [Mimedefang] Permissions on /varspool/MIMEDefang

On 2/11/2016 5:54 AM, Bill Maidment wrote: > I meant /var/spool/MIMEDefang This is a wild guess, but perhaps /var/spool/MIMEDefang is being mounted as a separate filesystem? If so, that could explain why the perms change at reboot. You can specify the mode at mount time in fstab. Here is

Re: [Mimedefang] Word Macro warning in subject.

Thanks Steffen, I now call the subroutine using if (contains_office_macros($entity))... I made the changes to the sub contains_office_macros below, I hope that these changes are correct. Does the sub contains_office_macros need be called by sub filter_multipart only or does it need to be

[Mimedefang] Permissions on /varspool/MIMEDefang

Hi After your most recent release I have had problems with the permissions on /var/spool/MIMEDefang being reset to 0750 after a reboot. I need the permission to be 0770 to allow for clamd scanner to use the directory. I eventually discovered this line in /usr/lib/tmpfiles.d/mimedefang.conf z

Re: [Mimedefang] Permissions on /varspool/MIMEDefang

On 02/10/2016 11:01 PM, Bill Maidment wrote: Hi After your most recent release I have had problems with the permissions on /var/spool/MIMEDefang being reset to 0750 after a reboot. I need the permission to be 0770 to allow for clamd scanner to use the directory. I eventually discovered this

[Mimedefang] Word Macro warning in subject.

2 different AV scanners dont pick word macro virus. I am not a perl coder and am trying to get the code below working Any help with this would be appreciated. Thanks Slave 1 stderr: Can't call method "parts" on an undefined value at /etc/mail/mimedefang-filter sub filter { my($entity,

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 4 Feb 2016, mimedef...@bass-speaker.com wrote: F-PROT Antivirus for Linux Workstations - 1 user #9Corporate UseSubscription is there a fpscand executable shipped with? That's the demon and is more performant, however, you might

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

Thanks Steffan, Changing the call's to fpscan to include "--nospin &1"); and in message_contains_virus_fpscan run_virus_scanner($Features{'Virus:FPSCAN'} . " --report --archive=5 --scanlevel=4 --heurlevel=3 --nospin &1"); Thanks and Regards, Mack. -Original Message- From:

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

On Fri, 5 Feb 2016 07:47:25 +0100 (CET) Steffen Kaiser wrote: > First(ly), I would try to patch mimedefang.pl in sub > message_contains_virus_fpscan () to include > "--nospin progress bar and WHY do software developers write virus-scanners that

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

That's the bit I don't get - Emulating the call as MD does it, worked, even without the terminal etc, it was only when called from MD that it failed :( Thanks and Regards, Mack -Original Message- From: MIMEDefang [mailto:mimedefang-boun...@lists.roaringpenguin.com] On Behalf Of

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

AH, sorry I guess I wasn't very clear, I never made any changes to mimedefang.pl, just extracted the calling methods for it to see if it was something related to that (the way fpscan was being called) that was causing the hang The extracted code at the bottom of the email worked when called

Re: [Mimedefang] Off-Topic: AFO.NET (was Re: virus scan stopped working after update to 2.78)

And let's not pass up: *Anarchy* Sites containing information regarding militias, weapons, antigovernment groups, terrorism, and simliar sites. So, that's pretty much all of Fox news, right? (well, *all* news sites.) *Hate/Discrimination* Sites which target a group of people based on

Re: [Mimedefang] Off-Topic: AFO.NET (was Re: virus scan stopped working after update to 2.78)

Y'all are cracking me up. :D ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list

[Mimedefang] Off-Topic: AFO.NET (was Re: virus scan stopped working after update to 2.78)

On Thu, 4 Feb 2016 10:51:01 -0600 Cliff Hayes wrote: [... some stuff ...] Oh, hey! Are you using MIMEDefang to provide filtering for your email filtering service at http://afo.net/filtering.php#wgf ? I notice you block "Information promoting adultery, infidelity, same gender

Re: [Mimedefang] Off-Topic: AFO.NET (was Re: virus scan stopped working after update to 2.78)

Dianne, Don't skip over this part: R-rated Sites which contain lingerie, swimsuits, and revealing pictures. Sites that are adult in nature without being explicitly pornographic. For an overtly Christian organisation ("•AFO supports family values. We have the same

Re: [Mimedefang] virus scan stopped working after update to 2.78

Set your system to retain spool directories for a short period (-k option), send your test message again, and then manually scan the resulting INPUTMSG file or the Work/INPUTMBOX file with Clamd and see whether it detects anything. These will be in /var/spool/MIMEDefang/mdefang-, e.g.

Re: [Mimedefang] Off-Topic: AFO.NET (was Re: virus scan stopped working after update to 2.78)

On Thu, 4 Feb 2016 19:22:28 + Paul Murphy wrote: > Don't skip over this part: > R-rated >Sites which contain lingerie, swimsuits, and revealing > pictures. Ah. I've attached a little gift. Regards, Dianne.

[Mimedefang] virus scan stopped working after update to 2.78

Last night I did yum update to 2.78 This morning my daily virus test email sailed through mimedefang without being stopped. I did not change mimedefang-filter or anything else. Clamd is running without errors like always. No error messages in maillog or messages file. What do I do?

Re: [Mimedefang] virus scan stopped working after update to 2.78

On Thu, 4 Feb 2016 10:51:01 -0600 Cliff Hayes wrote: > I did not change mimedefang-filter or anything else. Clamd is > running without errors like always. No error messages in maillog or > messages file. What do I do? You start diagnosing. You are unlikely to get help from

[Mimedefang] Installed FPScan and it's just hanging and then timing out.

Hi, I've been using mimedefang with clamscan (and a few others like Kavscanner etc) for many years as the basis for my mail system. Recently, I started receiving a lot of the empty msoffice documents with macro viruses, which clamscan doesn't detect at all. So I decided to grab a licence for

Re: [Mimedefang] Installed FPScan and it's just hanging and then timing out.

Hi, I'm having a hard time following what you did. Can you post a diff of the old non-working mimedefang.pl vs the new, working mimedefang.pl? Regards, Dianne. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is

Re: [Mimedefang] Virus notification to virus administrator

On 1/7/2016 10:31 AM, jan hugo prins wrote: > I would have expected to see this output in $VirusScannerMessages. According to the mimedefang-filter manpage, that variable is only accessible in filter_begin, filter, filter_multipart and filter_end. Are you trying to access it in another

[Mimedefang] Virus notification to virus administrator

Hi, I'm currently trying to replace amavisd-new with mimedefang, but one thing is currently really stopping me from going on. We have a requirement to send a notification to an internal security list for all virusses detected including a scanner report, and a quarantine location for the mimepart.

Re: [Mimedefang] Virus notification to virus administrator

Hej, Am Donnerstag Januar 7 2016 12:25 schrieb jan hugo prins: > Hi, > > I'm currently trying to replace amavisd-new with mimedefang, but one > thing is currently really stopping me from going on. > We have a requirement to send a notification to an internal security > list for all virusses

Re: [Mimedefang] Virus notification to virus administrator

Hoi, On 01/07/2016 01:28 PM, Juergen Kleff wrote: > Hej, > > what about action_quarantine_entire_message(), which also sends a mail > to the mimedefang-admin, and action_notify_administrator()? And there > is add_recipient() and delete_recipient(), which might be useful in > your case. > >

Re: [Mimedefang] Understanding the -q flag

On Tue, 5 Jan 2016 12:16:49 -0800 Amit Gupta wrote: > So if your slave limit is 100 and they are all processing emails, but > you need to process 500 emails that moment, does this mean 400 emails > will be queued for processing as soon as the slaves start freeing up? Yes.

[Mimedefang] Understanding the -q flag

I saw in the documentation that the -q flag will allow mimedefang to accept more connections than the number of mimedefang slaves and it will queue connections if the slave limit is exceeded. I wanted to understand the implications and potential downsides of enabling this better.. So if your

[Mimedefang] Fwd: syncing sent item from pop3 account to webmail sent folder

Hi, Is there a way to sync sent item from pop3 account to webmail sent folder ? (pop3 account NOT IMAP account ) Can mimedefang do it? or is there any 3 rd party software that can sync pop3 sent folder to Webmail Sent Folder? what about procmail ? Hope to hear from you. -- cat /etc/motd

Re: [Mimedefang] Fwd: syncing sent item from pop3 account to webmail sent folder

On 11/30/2015 12:00 AM, Indunil Jayasooriya wrote: Hi, Is there a way to sync sent item from pop3 account to webmail sent folder ? For POP3, Sent Items would be stored only locally on the machine that sent the email. You likely need an automated bcc and a procmail rule to sort the copy

Re: [Mimedefang] Fwd: syncing sent item from pop3 account to webmail sent folder

Am Montag November 30 2015 06:00 schrieb Indunil Jayasooriya: > Hi, > > Is there a way to sync sent item from pop3 account to webmail sent > folder ? > > (pop3 account NOT IMAP account ) > > Can mimedefang do it? or is there any 3 rd party software that can > sync pop3 sent folder to Webmail

Re: [Mimedefang] Fwd: syncing sent item from pop3 account to webmail sent folder

Hi Indunil > Is there a way to sync sent item from pop3 account to webmail sent > folder ? A POP3 Server does not know about folders and does not know any status of an email. So it does not know what a 'sent' item ist. There is just an INBOX containing email messages, if you want to call it that

Re: [Mimedefang] Fwd: syncing sent item from pop3 account to webmail sent folder

Hi, Please note that this has nothing to do with MIMEDefang. I am going to block further replies on this thread. Regards, Dianne. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore

Re: [Mimedefang] limit Recipients for auth user

Hello Benoît .)filter_initialize {} and sub filter_cleanup {} are not inkl. In my filter :-( I Put it now below sub filter_end ($) {} .)perl module storable is default in my perl version lt. CPAN. But if i send a Mail to more recipient to answer is the same .. only 1. No error by mimedefang

Re: [Mimedefang] limit Recipients for auth user

Hello Benoît .)filter_initialize {} and sub filter_cleanup {} are not inkl. In my filter :-( I Put it now below sub filter_end ($) {} .)perl module storable is default in my perl version lt. CPAN. But if i send a Mail to more recipient to answer is the same .. only 1. No error by mimedefang

Re: [Mimedefang] limit Recipients for auth user

Hi Roman > my $recipient_to_count = ??; > my $recipient_cc_count = ??; > my $recipient_bcc_count = ??; I just re-read your email. I guess you want to distinguish the different types of recipient (to,cc and bcc). No, unfortunately this is not possible in filter_recipient as this processes the

Re: [Mimedefang] limit Recipients for auth user

Hi Roman > I need to limit the Recipients from to, cc bcc  for auth user in the > filter_recipient procedure .is this possible? Realy great it > would be, to get the count for each to, cc, bcc in the part between Sure it is. From the viewpoint of the SMTP Transfer, rcpt to: does not

Re: [Mimedefang] limit Recipients for auth user

Hello Benoît Please ,Is it maybe possible to get a slow copy and past und so a working code fragment :-) Thanks Roman ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it.

Re: [Mimedefang] limit Recipients for auth user

Hi Roman > Are you sure that you forgot notthing from your code?? > > Because i try and it don't work :-( It was not working code. It was just a quick copy-paste from parts of my code. -Benoît Panizzon- -- I m p r o W a r e A G-Leiter Commerce Kunden

Re: [Mimedefang] limit Recipients for auth user

Hi Roman At the start of your mimedefang-filter, where the 'use' statements are, add the Perl Storable Module. (You need to have the storable perl module installed for this to work). require Storable; You probably have sub filter_initialize {} and sub filter_cleanup {} somewhere in your code.

[Mimedefang] limit Recipients for auth user

Greetings all, I need to limit the Recipients from to, cc bcc  for auth user in the filter_recipient procedure .is this possible? Realy great it would be, to get the count for each to, cc, bcc in the part between  ## filter_recipient () { . if (defined($SendmailMacros{"auth_authen"})) {

Re: [Mimedefang] Weird Issue in mimedefang-filter.

OK I uninstalled minedefang and spamassassin. Wiped all traces of both from the system. Reinstalled both and now everyone is happy.. Just a weird system quirk -Original Message- From: mimedefang-boun...@lists.roaringpenguin.com [mailto:mimedefang-boun...@lists.roaringpenguin.com] On

Re: [Mimedefang] Weird Issue in mimedefang-filter.

This turned out to be some quirkiness with Perl. Had to temp store the variables in newer variable and everything is now working -Original Message- From: mimedefang-boun...@lists.roaringpenguin.com [mailto:mimedefang-boun...@lists.roaringpenguin.com] On Behalf Of Peter Benac Sent:

[Mimedefang] Weird Issue in mimedefang-filter.

Greetings all,    I just installed Mimedefang and SpamAssassin on a Debian (Jesse) VM.   For the most part everything seems to be working correctly; however, everything is getting marked as spam.   For some reason in the subroutine filter_end between the call to spam_assassin_check and the

Re: [Mimedefang] Weird Issue in mimedefang-filter.

On 11/9/2015 2:57 PM, Peter Benac wrote: > everything is getting marked as spam. For some reason in the subroutine > filter_end between the call to spam_assassin_check and the call to > action_delete_header the contents of $reg and $hits is being stomped on (set You haven't given us any of

Re: [Mimedefang] Weird Issue in mimedefang-filter.

Sorry Matt. I am looking at the default mimedefang-filter and the variable name was a typo on my part. $req and $hits are both nulled out. -Original Message- From: mimedefang-boun...@lists.roaringpenguin.com [mailto:mimedefang-boun...@lists.roaringpenguin.com] On Behalf Of Matt

[Mimedefang] Odd "error state"

I'm looking for any insight on what caused this odd event in the log. Below, these are the only two lines for sendmail process 12377 and the only one line for queue id t9SHqutp012377. The second line shows a recipient address (changed here) that really was User unknown, but no from= line is

[Mimedefang] Parser: can't flush: No space left on device and big files in /tmp

Lately we are seeing this error in the maillog several times a day: Oct 28 15:10:03 mail mimedefang-multiplexor[37348]: Slave 1 stderr: MIME::Parser: can't flush: No space left on device at /usr/local/lib/perl5/site_perl/5.8.9/MIME/Parser.pm line 815, line 2700428. The /var drive has plenty of

Re: [Mimedefang] Parser: can't flush: No space left on device and big files in /tmp

On 28 Oct 2015, at 16:48, Tom Knutson wrote: Lately we are seeing this error in the maillog several times a day: Oct 28 15:10:03 mail mimedefang-multiplexor[37348]: Slave 1 stderr: MIME::Parser: can't flush: No space left on device at /usr/local/lib/perl5/site_perl/5.8.9/MIME/Parser.pm line

[Mimedefang] $RelayAddr and IPv6?

A quick question for those who are using MIMEDefang on dual-stack IPv4/IPv6 hosts: what does $RelayAddr contain when an IPv6 relay connects? The MIMEDefang documentation implies that $RelayAddr will only ever be a dotted-quad IPv4 address: $RelayAddr The IP address of the sending

Re: [Mimedefang] $RelayAddr and IPv6?

On Mon, 26 Oct 2015 17:31:01 -0400 James Ralston wrote: > The MIMEDefang documentation implies that $RelayAddr will only ever be > a dotted-quad IPv4 address: The docs are wrong. On an IPv6-enabled system, $RelayAddr can be an IPv6 address (represented as

[Mimedefang] Block executables in 7Z archive - solution

We're getting a lot of trojan executables in 7Z archives lately. Like this one: https://www.virustotal.com/pl/file/8f766ccb4821488c8b34abda0d472e627dba6f1d261073852e079c66313a9f11/analysis/ I've added a code to my mimedefang-filter based on suggested-minimum-filter-for-windows-clients in

Re: [Mimedefang] Block executables in 7Z archive - solution

On Thu, 8 Oct 2015 13:36:23 +0200 Tomasz Ostrowski wrote: [...] > This requires 7za program (from p7zip package) installed on server. > This will also block 7z archives with encrypted filenames. There's also the "unar" package that contains the "lsar" program; it can

[Mimedefang] Curious about large mimedefang setups

Hi all, Just wondering how other companies are using Mimedefang and what people do to handle issues that arise with general email parsing/storage. My companies product involves email archiving. I have been working here for the past 7 years as (more or less) a solo engineer so I often feel like

Re: [Mimedefang] Embedded Perl (continued)

On 2015-9-22 17:16 , Steffen Kaiser wrote: > I had SpamAssassin rules allocating about 100MB, the forked children > only shared the C libraries after some time. That's a problem of > Perl's way to handle rereferences to data. It might help not to integrate SpamAssassin, but to use spamc to

Re: [Mimedefang] Embedded Perl (continued)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 22 Sep 2015, Amit Gupta wrote: My situation is that the number of mimedefang.pl processes jumps to about 70 during peak loads (we are processing a couple hundres messages per minute on average). Our filter file is in need of some

[Mimedefang] Embedded Perl (continued)

Apologies for starting a new thread. I couldn't find any messages in my inbox to reply to. Thanks Paul, Bill and Diane for your replies. My situation is that the number of mimedefang.pl processes jumps to about 70 during peak loads (we are processing a couple hundres messages per minute on

Re: [Mimedefang] Embedded Perl (continued)

On Tue, 22 Sep 2015 07:57:18 -0700 Amit Gupta wrote: > My situation is that the number of mimedefang.pl processes jumps to > about 70 during peak loads (we are processing a couple hundres > messages per minute on average). How much RAM do you have? 70 parallel scanners is

Re: [Mimedefang] Embedded Perl (continued)

We have 16GB of ram, though there are other processes running on this machine such as DB that will be segmented later. I'm curious how much resident memory each of your mimedefang.pl processes uses? I haven't been tracking my mimedefang.pl memory usage over time, so I was a little surprised to

Re: [Mimedefang] Embedded Perl (continued)

On Tue, 22 Sep 2015 08:20:16 -0700 Amit Gupta wrote: > We have 16GB of ram, though there are other processes running on this > machine such as DB that will be segmented later. I'm curious how much > resident memory each of your mimedefang.pl processes uses? About 110MB, but

Re: [Mimedefang] Embedded Perl

On 21 Sep 2015, at 17:04, Amit Gupta wrote: Hi, I'm using Centos7.1 and mimedefang 2.75 (still need to upgrade to latest). The documentation indicates that if you start mimedefang with the -E parameter, it uses embedded perl which is supposedly faster. I was wondering if someone could give me

Re: [Mimedefang] Embedded Perl

On Mon, 21 Sep 2015 18:53:04 -0400 "Bill Cole" wrote: > As MD & Perl have matured and systems have gotten much bigger and > much faster it has become less of a burden to just fork and exec > fully independent slaves and let them live a very long time, so

Re: [Mimedefang] Embedded Perl

On Mon, 21 Sep 2015 14:04:04 -0700 Amit Gupta wrote: > Hi, I'm using Centos7.1 and mimedefang 2.75 (still need to upgrade to > latest). The documentation indicates that if you start mimedefang with > the -E parameter, it uses embedded perl which is supposedly faster. I > was

[Mimedefang] Embedded Perl

Hi, I'm using Centos7.1 and mimedefang 2.75 (still need to upgrade to latest). The documentation indicates that if you start mimedefang with the -E parameter, it uses embedded perl which is supposedly faster. I was wondering if someone could give me insight into why it's actually faster under the

Re: [Mimedefang] Embedded Perl

If embedded perl is the same as compiled perl then I would guess the speed-up comes from not having to interpret a perl script with the perl interpreter. Or am I off-base here? -Original Message- From: mimedefang-boun...@lists.roaringpenguin.com

[Mimedefang] Somewhat off-topic: Perl module that might possible interest list members

Hi, all, In addition to CanIt and MIMEDefang, I use the very capable Email::Filter module for my personal email. It acts as a local delivery agent and automatically sorts my mail into specific folders and does some other magic. Anyway, I've created and uploaded a module called

Re: [Mimedefang] Timeout on md_check_against_smtp_server?

Dianne, Thank you very much for this! Changes effected and tested over the w/end and all seems OK. I'd never thought to do this if it weren't for that little prod. Regards, Dave On 15/08/2015 15:42, Dianne Skoll wrote: On Sat, 15 Aug 2015 12:39:04 +0100 Dave Osbourne

[Mimedefang] Timeout on md_check_against_smtp_server?

Hi Everyone, I wonder if there is away to enforce a timeout on md_check_against_smtp_server? We have 1 client that seems to have a dodgy AD binding that means every few months the callout gets stuck indefinitley waiting for the response to the RCPT TO: test and eventually all the MD slaves

Re: [Mimedefang] Timeout on md_check_against_smtp_server?

On Sat, 15 Aug 2015 12:39:04 +0100 Dave Osbourne d...@osbourne.uk.eu.org wrote: I wonder if there is away to enforce a timeout on md_check_against_smtp_server? The general-purpose way of enforcing timeouts is with alarm. { local $SIG{ALRM} = sub { die Timeout; }; my @result; eval

Re: [Mimedefang] Seeing weird SMFI errors

On Aug 11, 2015, at 9:06 PM, Dianne Skoll d...@roaringpenguin.com wrote: On Tue, 11 Aug 2015 16:24:25 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: You'll take a patch? Possibly, but I think I've made my feelings pretty clear, that filter_helo is not really

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 11 Aug 2015 14:00:44 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: What about adding ${tls_version} to the list of parameters to filter_helo? Feel free. Regards, Dianne. ___ NOTE: If there is a disclaimer or other legal

Re: [Mimedefang] Seeing weird SMFI errors

On 08/11/2015 03:25 PM, Dianne Skoll wrote: On Tue, 11 Aug 2015 14:00:44 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: What about adding ${tls_version} to the list of parameters to filter_helo? Feel free. Regards, Dianne. You'll take a patch?

Re: [Mimedefang] Seeing weird SMFI errors

On 08/04/2015 02:11 PM, Dianne Skoll wrote: On Tue, 4 Aug 2015 14:45:42 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: On 8/4/2015 2:02 PM, Philip Prindeville wrote: Is there any other way to figure out if this is HELO that follows a STARTTLS? Save state and re-call the helo check again

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 11 Aug 2015 16:24:25 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: You'll take a patch? Possibly, but I think I've made my feelings pretty clear, that filter_helo is not really something I like in MIMEDefang. I'd prefer to remove it, to be honest. But yes, if you

Re: [Mimedefang] Seeing weird SMFI errors

On Aug 4, 6:04pm, Philip Prindeville wrote: } On 08/04/2015 02:11 PM, Dianne Skoll wrote: } } This is why I resisted even adding a filter_helo callback. It's } basically useless. Anything you can do in filter_helo might as well } be deferred to filter_sender. } } If an SMTP client

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 04 Aug 2015 18:04:32 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: [...] Potentially, yes... If it's doing a denial of service attack I might want to notice the rate of incoming connections, save them into a .db file, and start blocking them in filter_relay()

Re: [Mimedefang] Seeing weird SMFI errors

On 08/04/2015 02:11 PM, Dianne Skoll wrote: On Tue, 4 Aug 2015 14:45:42 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: On 8/4/2015 2:02 PM, Philip Prindeville wrote: Is there any other way to figure out if this is HELO that follows a STARTTLS? Save state and re-call the helo check again

Re: [Mimedefang] Seeing weird SMFI errors

On Jul 29, 2015, at 7:22 PM, Philip Prindeville philipp_s...@redfish-solutions.com wrote: On 07/28/2015 08:17 PM, Dianne Skoll wrote: On Tue, 28 Jul 2015 14:27:45 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Am I correctly seeing that filter_helo() is being

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 4 Aug 2015 14:45:42 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: On 8/4/2015 2:02 PM, Philip Prindeville wrote: Is there any other way to figure out if this is HELO that follows a STARTTLS? Save state and re-call the helo check again in filter_sender, perhaps? This is why I

Re: [Mimedefang] Seeing weird SMFI errors

On 04/08/15 21:20, Kevin A. McGrail wrote: On 8/4/2015 4:11 PM, Dianne Skoll wrote: This is why I resisted even adding a filter_helo callback. It's basically useless. Anything you can do in filter_helo might as well be deferred to filter_sender. +1 If an SMTP client connects, says EHLO

Re: [Mimedefang] Seeing weird SMFI errors

On 8/4/2015 4:11 PM, Dianne Skoll wrote: This is why I resisted even adding a filter_helo callback. It's basically useless. Anything you can do in filter_helo might as well be deferred to filter_sender. +1 If an SMTP client connects, says EHLO and then closes the connection... do we really

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 4 Aug 2015 12:02:16 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Err, cipher_bits… or tls_version… except that, if I remember correctly, these can’t be accessed until after filter_sender(), right? True, in MIMEDefang. The symbols are available via the milter API,

Re: [Mimedefang] Seeing weird SMFI errors

On 8/4/2015 2:02 PM, Philip Prindeville wrote: Err, cipher_bits… or tls_version… except that, if I remember correctly, these can’t be accessed until after filter_sender(), right? Is there any other way to figure out if this is HELO that follows a STARTTLS? Save state and re-call the helo

Re: [Mimedefang] Seeing weird SMFI errors

On 07/28/2015 08:17 PM, Dianne Skoll wrote: On Tue, 28 Jul 2015 14:27:45 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Am I correctly seeing that filter_helo() is being called twice for the same connection? Looks that way. I bet the sequence was: EHLO STARTTLS EHLO

Re: [Mimedefang] Seeing weird SMFI errors

On Tue, 28 Jul 2015 14:27:45 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Am I correctly seeing that filter_helo() is being called twice for the same connection? Looks that way. I bet the sequence was: EHLO STARTTLS EHLO (this time over the encrypted connection)

Re: [Mimedefang] Seeing weird SMFI errors

On Jul 27, 2015, at 10:12 AM, Philip Prindeville philipp_s...@redfish-solutions.com wrote: On Jul 27, 2015, at 8:07 AM, Dianne Skoll d...@roaringpenguin.com wrote: On Mon, 27 Jul 2015 00:11:09 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Update: I changed the

Re: [Mimedefang] Seeing weird SMFI errors

On Mon, 27 Jul 2015 00:11:09 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Update: I changed the timeout argument to T=S:2m;R:2m;E:10m and rebuilt sendmail.cf, then restarted the service. The problem seems to have gone away, but I’m not sure why. Obviously, your filter

Re: [Mimedefang] Seeing weird SMFI errors

On Jul 27, 2015, at 8:07 AM, Dianne Skoll d...@roaringpenguin.com wrote: On Mon, 27 Jul 2015 00:11:09 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Update: I changed the timeout argument to T=S:2m;R:2m;E:10m and rebuilt sendmail.cf, then restarted the service. The

[Mimedefang] Problem with MIME::Tools and base64 encoded message/rfc822 attachements

Dear list, I'd like to use MIME::Tools for parsing a base64 encoded attachement of an e-mail. Please have a look at the attached tar. If using the test script parse.pl with a base64 encoded test attachement, ME_Parts isn't filled properly: ./parse.pl mail2-b64.eml [...]

Re: [Mimedefang] Seeing weird SMFI errors

On Jul 26, 2015, at 11:26 PM, Philip Prindeville philipp_s...@redfish-solutions.com wrote: On Jul 26, 2015, at 7:42 PM, Dianne Skoll d...@roaringpenguin.com wrote: On Sun, 26 Jul 2015 18:03:38 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Jul 26 17:44:31 mail

[Mimedefang] Seeing weird SMFI errors

I’m running mimedefang-2.78-2 on Fedora 21, along with sendmail-8.14.9-5. I’m seeing errors when getting email from vger.kernel.org (I get several kernel hacking mailing lists), and getting sporadic delivery. It seems to start when vger connects every 20 minutes or so and attempts to deliver a

Re: [Mimedefang] Seeing weird SMFI errors

On Sun, 26 Jul 2015 18:03:38 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Jul 26 17:44:31 mail mimedefang[31780]: t6QNhOYb027848: smfi_addheader returned MI_FAILURE Sendmail timed out (that's in the Milter (mimedefang): timeout before data read log line) so it tempfailed

Re: [Mimedefang] Seeing weird SMFI errors

On Jul 26, 2015, at 7:42 PM, Dianne Skoll d...@roaringpenguin.com wrote: On Sun, 26 Jul 2015 18:03:38 -0600 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Jul 26 17:44:31 mail mimedefang[31780]: t6QNhOYb027848: smfi_addheader returned MI_FAILURE Sendmail timed out (that's

Re: [Mimedefang] right value for MX_MAXIMUM

I did not get your reply to my e-mail box and I could only see it on the mailing list. So I am sending the info in this e-mail. Thank you for the responses, here are few more details. VMware guest with RHEL6.4 4 vCPU (2x2) 10 GB RAM FC datastore Yes, I am using clamav,mimedefang and

Re: [Mimedefang] right value for MX_MAXIMUM

On Thu, 25 Jun 2015 07:44:36 -0600 Muthu N.C ncmu...@gmail.com wrote: Talking about the performance, the issue is happening multiple times in a day. When this happens the load is going up to 8 and sometimes 12. The cpu utilisation is not much, the iowait reaches to 12 to 30%. Those are not

Re: [Mimedefang] right value for MX_MAXIMUM

On 6/24/2015 7:43 AM, Muthu N.C wrote: Hello, I am having the system with sendmail, mimedefang and spamassassin. Mimedefang is running with the below options. -m 2 -x 80 -y 0 -U defang -b 300 -l MX_MINIMUM=2 MX_MAXIMUM=80 #MX_QUEUE_SIZE=10 In a day I am getting the below error multiple

[Mimedefang] right value for MX_MAXIMUM

Hello, I am having the system with sendmail, mimedefang and spamassassin. Mimedefang is running with the below options. -m 2 -x 80 -y 0 -U defang -b 300 -l MX_MINIMUM=2 MX_MAXIMUM=80 #MX_QUEUE_SIZE=10 In a day I am getting the below error multiple times. By looking at the md-mx-ctrl rawstats,

Re: [Mimedefang] right value for MX_MAXIMUM

On Wed, 24 Jun 2015 05:43:20 -0600 Muthu N.C ncmu...@gmail.com wrote: In a day I am getting the below error multiple times. By looking at the md-mx-ctrl rawstats, all the 80 slaves are busy at that time. We are receiving around 500 e-mails in a minute. 500/minute is about 720K per day which

Re: [Mimedefang] right value for MX_MAXIMUM

I am having the system with sendmail, mimedefang and spamassassin. Mimedefang is running with the below options. Same here. MX_MINIMUM=2 MX_MAXIMUM=80 We are using MX_MINIMUM=40 MX_MAXIMUM=50 I think MX_MINIMUM is greater than we need. The reason we pushed it up high was that the

<    3   4   5   6   7   8   9   10   11   12   >