[Mimedefang] Try to reject sender

2014-04-23 Thread Ricardson Williams
Hi all, I´m trying to block some spammers but my rule is not working Spammer Address: www-data@test@hotmail.com Here is the rule. sub filter_sender { my ($sender, $ip, $hostname, $helo) = @_; if ($sender =~ /^?'www-data@test'\@hotmail\.com?$/i) { return ('REJECT',

Re: [Mimedefang] Try to reject sender

2014-04-23 Thread Matt Garretson
On 4/23/2014 2:21 PM, Ricardson Williams wrote: Spammer Address: www-data@test@hotmail.com http://hotmail.com [...] if ($sender =~ /^?'www-data@test'\@hotmail\.com?$/i) { You have an extra set of single quotes in your regex. ___ NOTE: If there

Re: [Mimedefang] Try to reject sender

2014-04-23 Thread Ricardson Williams
Yes. I tried also with only quote and the messages still pass. :( Sent from my iPhone On 23 Apr, 2014, at 5:59 pm, Matt Garretson ma...@assembly.state.ny.us wrote: On 4/23/2014 2:21 PM, Ricardson Williams wrote: Spammer Address: www-data@test@hotmail.com http://hotmail.com [...] if

Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Kees Theunissen
On Wed, 23 Apr 2014, Jon Rowlan wrote: I am rather embarrassed to say that after years of using MD, I have recently decided to bite the bullet and install a new Debian version and update all the associated tools that I use and for the life of me I cannot get md_syslog to work. Might be a stupid

Re: [Mimedefang] Try to reject sender

2014-04-23 Thread Kevin A. McGrail
On 4/23/2014 5:43 PM, Ricardson Williams wrote: Yes. I tried also with only quote and the messages still pass. :( Have you ever used the filter_sender and have you enabled it? For example, in /etc/sysconfig/mimedefang, change this: # If yes, turn on the multiplexor sender checking function

[Mimedefang] adding a new attachment or duplicating the existing attachment

2014-04-23 Thread Michael Lazar
Hello all, Is there a way to add a new (additional) attachment to an email? Is there a way to duplicate an attachment and re-attach it to the same email? The original attachment (if present) would still be processed normally. Thanks, Michael smime.p7s Description: S/MIME cryptographic

Re: [Mimedefang] md_syslog not working Mimedefang 2.71

2014-04-23 Thread Jon Rowlan
Might be a stupid question, but anyway: are you sure that you have a syslog daemon installed. Not really a stupid question Kees, I hadn't checked that :-) I am using Wheezy and this is a clean new install and not an upgrade. Syslogd is a virtual package as far as I can tell from Aptitude. It's

[Mimedefang] skip filtering if smtp auth even for local mail

2014-04-16 Thread Ghislain
Hi, i use a filter_sender clause to skip any filtering if the mail is sent by authentified users from smtp_auth ii mimedefang 2.69-1 e-mail filter program for sendmail ii sendmail 8.14.3-9.4 powerful,

Re: [Mimedefang] skip filtering if smtp auth even for local mail

2014-04-16 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 16 Apr 2014, Ghislain wrote: i use a filter_sender clause to skip any filtering if the mail is sent by authentified users from smtp_auth ii mimedefang 2.69-1 e-mail filter program for sendmail

Re: [Mimedefang] skip filtering if smtp auth even for local mail

2014-04-16 Thread Ghislain
Le 16/04/2014 13:02, Steffen Kaiser a écrit : md_syslog('warning', $RelayAddr . / . $SendmailMacros{auth_authen}) ok you helped me found the bug as the auth appear there, it seems that it was the comparison operator that was not a good perl one ($SendmailMacros{auth_authen} !=

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-15 Thread Kevin A. McGrail
On 4/14/2014 10:06 PM, David F. Skoll wrote: Specifically, here's a test from my Yahoo! account to an autism mailing list. Even though smfi_chgfrom appears to have worked, when the email is parsed by mailman, it does not appear to reflect the changed sender. Any thoughts appreciated...

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-15 Thread Kevin A. McGrail
On 4/14/2014 10:50 PM, Joseph Brennan wrote: DMARC is actually checking the header From, not just the envelope $Sender, Thanks. That's what I was overlooking. The problem I've got at our gateway is that milter gives us the @Recipient as in the RCPT TO, but I need to know what the recipient is

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-15 Thread David F. Skoll
On Tue, 15 Apr 2014 09:35:19 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: - All the various recipients that acknowledge p=reject reject the mail as forged That's the part I don't understand. Mail from my list will not have a yahoo.com envelope sender. And if I remove the DKIM header, what

[Mimedefang] ADMINISTRIVIA: Yahoo users may not post to this mailing list

2014-04-15 Thread David F. Skoll
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I regret to inform Yahoo users that they may no longer post to any mailing list hosted on lists.roaringpenguin.com. The reason is a recent policy change by Yahoo to their DMARC policy that makes third-party servers reject mailing list traffic

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-15 Thread Kevin A. McGrail
On 4/15/2014 9:52 AM, David F. Skoll wrote: On Tue, 15 Apr 2014 09:35:19 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: - All the various recipients that acknowledge p=reject reject the mail as forged That's the part I don't understand. Mail from my list will not have a yahoo.com envelope

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-15 Thread Jan-Pieter Cornet
On 2014-4-15 4:50 , Joseph Brennan wrote: DMARC is actually checking the header From, not just the envelope $Sender, and Yahoo is telling recipient systems to reject if the header From has a yahoo.com address and the message was not sent (directly) by yahoo.com. This breaks mailing lists and

Re: [Mimedefang] sendmail.cf

2014-04-15 Thread Joseph Brennan
On the way home I realized... all that was based on the envelope sender, and they're checking the header From. I keep forgetting we're in some other world where we're not checking the sender. Oh well, it's still nice to keep my hand in doing sendmail.cf. It's been a while. Maybe a

[Mimedefang] Yahoo DMARC

2014-04-14 Thread Joe Quinn
We are having issues with Yahoo's DMARC policy unsubscribing a very large number of members for Mailman lists we host. Does anyone have a quick piece of code that we can use which bounces their message and inserts a nice description of why? We are already matching on Yahoo senders to

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-14 Thread Kevin A. McGrail
On 4/14/2014 12:50 PM, Joe Quinn wrote: We are having issues with Yahoo's DMARC policy unsubscribing a very large number of members for Mailman lists we host. Does anyone have a quick piece of code that we can use which bounces their message and inserts a nice description of why? We are

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-14 Thread David F. Skoll
On Mon, 14 Apr 2014 16:27:58 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: However, we are seeing an issue with the change_sender(); function. Specifically, here's a test from my Yahoo! account to an autism mailing list. Even though smfi_chgfrom appears to have worked, when the email is

Re: [Mimedefang] Yahoo! DMARC and smfi_chngfrom was Yahoo DMARC

2014-04-14 Thread Joseph Brennan
if ($Sender =~ /kevin_mcgrail\@yahoo\.com?$/i and ($recip =~ m/\@mailman\./i or DMARC is actually checking the header From, not just the envelope $Sender, and Yahoo is telling recipient systems to reject if the header From has a yahoo.com address and the message was not

[Mimedefang] OFF-TOPIC: Heartbleed Information / OpenSSL 1.0.1 TLS Incompatibility w/Sendmail and Exchange 2003

2014-04-10 Thread Kevin A. McGrail
All, I thought this might be a good list where some people might care/comment on a TLS/Sendmail issue we uncovered while dealing with Heartbleed. We're using Sendmail 8.14.5 on a machine that had OpenSSL 1.0.0j. As a safety measure due to heartbleed, we upgraded to open OpenSSL 1.0.1g. We

Re: [Mimedefang] redirect spam for a single domain to another recipient

2014-04-03 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 2 Apr 2014, Marcus Schopen wrote: I use stream_by_domain and like to redirect/move spam for a single domain to a special recipient/mailbox and collect it there. Any better code possible? sub filter_end { [...] if ($Domain eq

Re: [Mimedefang] redirect spam for a single domain to another recipient

2014-04-03 Thread Marcus Schopen
Hi Steffen, Am Donnerstag, den 03.04.2014, 08:10 +0200 schrieb Steffen Kaiser: On Wed, 2 Apr 2014, Marcus Schopen wrote: I use stream_by_domain and like to redirect/move spam for a single domain to a special recipient/mailbox and collect it there. Any better code possible? sub

[Mimedefang] redirect spam for a single domain to another recipient

2014-04-02 Thread Marcus Schopen
Hi, I use stream_by_domain and like to redirect/move spam for a single domain to a special recipient/mailbox and collect it there. Any better code possible? sub filter_end { [...] if ($Domain eq 'mydomain.de' $hits = 5) { foreach $recip (@Recipients) {

Re: [Mimedefang] MIMEDefang Digest, Vol 126, Issue 10

2014-03-31 Thread G.W. Haywood
Hi there, On Thu, 20 Mar 2014, David F. Skoll wrote: Post-Cisco, ClamAV seems to have greatly declined in usefulness. It catches hardly anything anymore... anyone else experiencing this? Yes. OTOH I don't really care, as having no Windows machines I mainly use it for the third-party

Re: [Mimedefang] read domain list from config file

2014-03-28 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 27 Mar 2014, Marcus Schopen wrote: for some of my domains I'd like to reject mails at a given spamscore of =5. For some other domains at a higher score. Is it a good idea to read those domain names from different external config file

Re: [Mimedefang] read domain list from config file

2014-03-28 Thread Kris Deugau
(Please keep replies on-list.) Marcus Schopen wrote: Thanks for your idea and code. Nice idea! How did you create and modify the BerkeleyDB from console? Never did this by hand only via tools like saslpasswd e.g. for my cyrus/sendmail user db. I think it took a bit of fine-tuning to get the

[Mimedefang] read domain list from config file

2014-03-27 Thread Marcus Schopen
Hi, for some of my domains I'd like to reject mails at a given spamscore of =5. For some other domains at a higher score. Is it a good idea to read those domain names from different external config file instead of coding them hard into mimedefang-milter? sub filter_end { [...] if (($Domain eq

Re: [Mimedefang] read domain list from config file

2014-03-27 Thread Kris Deugau
Marcus Schopen wrote: z for some of my domains I'd like to reject mails at a given spamscore of =5. For some other domains at a higher score. Is it a good idea to read those domain names from different external config file instead of coding them hard into mimedefang-milter? I did this a number

[Mimedefang] filter_relay rejected host. (DNSBL)

2014-03-21 Thread Lars Bjærris
Hello, Can anybody help me figure out why the below code in /etc/mail/mimedefang-filter rejects email from all connecting sender ip's? ## sub filter_relay { my ( $ip, $name, $helo) = @_; if (relay_is_blacklisted($ip, ‘zen.spamhaus.org’)) { return(‘REJECT’,

Re: [Mimedefang] )What AV scanners do you use? (was Re: Any Sophie users out there?

2014-03-21 Thread Andrew Watkins
I have to agree I find ClamAV is not catching many virus recently (over the last few years). Great for catch old ones, but any thing new is not being caught. I know this since on the Windows desktops we run Trend and it catches a lot of e-mail attachments which look bad. Problem we run

Re: [Mimedefang] Extension blocking (was What AV scanners do you use? and was Re: Any Sophie users out there?)

2014-03-21 Thread David F. Skoll
On Fri, 21 Mar 2014 10:45:46 + Andrew Watkins and...@dcs.bbk.ac.uk wrote: I should tighten up on our extension blocking. Talking of extension blocking, I found a very nice tool called lsar that's part of the unar package. This is packaged in Debian (apt-get install unar) and source is

Re: [Mimedefang] filter_relay rejected host. (DNSBL)

2014-03-21 Thread David F. Skoll
On Fri, 21 Mar 2014 08:43:22 +0100 Lars Bjærris l...@daxzuli.com wrote: sub filter_relay { my ( $ip, $name, $helo) = @_; if (relay_is_blacklisted($ip, ‘zen.spamhaus.org’)) { return(‘REJECT’, ‘You are listed in zen.spamhaus.org’); } } You don't return

Re: [Mimedefang] filter_relay rejected host. (DNSBL)

2014-03-21 Thread Lars Bjærris
On Mar 21, 2014, at 2:30 PM, David F. Skoll d...@roaringpenguin.com wrote: On Fri, 21 Mar 2014 08:43:22 +0100 Lars Bjærris l...@daxzuli.com wrote: sub filter_relay { my ( $ip, $name, $helo) = @_; if (relay_is_blacklisted($ip, ‘zen.spamhaus.org’)) { return(‘REJECT’,

Re: [Mimedefang] Any Sophie users out there?

2014-03-20 Thread Jason Englander
On Wed, 19 Mar 2014, Anne Bennett wrote: A belated thanks for the patch! ;-) What are you using now for anti-virus? No problem :-) Personally and professionally I've used ClamAV (via clamd) for a long time. I actually used to be a team member pre-Cisco, pre-SourceFire. I've used Avira

[Mimedefang] )What AV scanners do you use? (was Re: Any Sophie users out there?

2014-03-20 Thread David F. Skoll
On Thu, 20 Mar 2014 14:49:32 -0400 (EDT) Jason Englander ja...@englanders.us wrote: Personally and professionally I've used ClamAV (via clamd) for a long time. I actually used to be a team member pre-Cisco, pre-SourceFire. Post-Cisco, ClamAV seems to have greatly declined in usefulness. It

Re: [Mimedefang] )What AV scanners do you use? (was Re: Any Sophie users out there?

2014-03-20 Thread wbrown
DFS wrote on 03/20/2014 03:04:07 PM: Post-Cisco, ClamAV seems to have greatly declined in usefulness. It catches hardly anything anymore... anyone else experiencing this? In my experience, most of the commercial AV scanners for Linux are horrible. They often use undocumented wire protocols

Re: [Mimedefang] )What AV scanners do you use? (was Re: Any Sophie users out there?

2014-03-20 Thread Richard Laager
On Thu, 2014-03-20 at 15:04 -0400, David F. Skoll wrote: Post-Cisco, ClamAV seems to have greatly declined in usefulness. It catches hardly anything anymore... anyone else experiencing this? Are you using clamav-unofficial-signatures? We are. I have no idea how much we should be catching. But

Re: [Mimedefang] )What AV scanners do you use? (was Re: Any Sophie users out there?

2014-03-20 Thread David F. Skoll
On Thu, 20 Mar 2014 15:46:49 -0400 wbr...@e1b.org wrote: We haven't seen an increase in virii detected by McAfee or Symantec on servers downstream from our CanIt system. Maybe that's because blocking the unsafe extensions kills them before we even call ClamAV. I've attached the statistics

Re: [Mimedefang] Any Sophie users out there?

2014-03-19 Thread Anne Bennett
Jason Englander responds to my question: I wonder if there are any other Sophie users out there? Sophos has announced that they're retiring v4 of Sophos Anti-Virus for {Linux,Unix} this April, and I have no idea if v9 will be compatible with Sophie (haven't tried it yet), I'm the one that

Re: [Mimedefang] Any Sophie users out there?

2014-03-19 Thread Scott Larnach
I find myself in the same boat. Browsing the Sophos web site I find a product called SAV Dynamic Interface. The documentation suggests it provides a daemon which supports the Sophie protocol. I'm hoping that means the same interface mimedefang uses to talk to sophie. I'll hopefully get some

[Mimedefang] reject a message if listed on more than one DNSBL

2014-03-18 Thread Marcus Schopen
Hi, is it possible to reject a message if it's sending server is listed in more than one given DNS-blacklists before the message is running into further resource hungry spamassassin content filtering? I'd like to reject messages from a server if its IP is found in at least _two_ of four given

Re: [Mimedefang] reject a message if listed on more than one DNSBL

2014-03-18 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 18 Mar 2014, Marcus Schopen wrote: is it possible to reject a message if it's sending server is listed in use the Net::DNS resolver and query the blacklists. mimedefang.pl has the skeleton how to query. - -- Steffen Kaiser -BEGIN

Re: [Mimedefang] reject a message if listed on more than one DNSBL

2014-03-18 Thread David F. Skoll
On Tue, 18 Mar 2014 17:16:53 +0100 (CET) Steffen Kaiser skmimedef...@smail.inf.fh-bonn-rhein-sieg.de wrote: use the Net::DNS resolver and query the blacklists. mimedefang.pl has the skeleton how to query. I also maintain a nice CPAN module:

[Mimedefang] Any Sophie users out there?

2014-03-18 Thread Anne Bennett
I wonder if there are any other Sophie users out there? Sophos has announced that they're retiring v4 of Sophos Anti-Virus for {Linux,Unix} this April, and I have no idea if v9 will be compatible with Sophie (haven't tried it yet), but since Sophie has apparently had no development since about

Re: [Mimedefang] Any Sophie users out there?

2014-03-18 Thread Jason Englander
On Tue, 18 Mar 2014, Anne Bennett wrote: I wonder if there are any other Sophie users out there? Sophos has announced that they're retiring v4 of Sophos Anti-Virus for {Linux,Unix} this April, and I have no idea if v9 will be compatible with Sophie (haven't tried it yet), but since Sophie has

Re: [Mimedefang] disabling the virus scanner?

2014-03-17 Thread Fredrik Pettai
On Mar 14, 2014, at 13:30 , Kees Theunissen c.j.theunis...@differ.nl wrote: On Thu, 13 Mar 2014, Fredrik Pettai wrote: Hi, I want to disable the virus scanner (ClamAV). If you want to disable all virus scanners (not only ClanAV) then just remove the line: my($code, $category, $action)

Re: [Mimedefang] Best place to collect Sender, Recipient and Server IP on a single log line

2014-03-16 Thread Jon Rowlan
Hi Paul, I thought that filter_recipient would be the best place but my filter_recipient doesn't seem to get called. I think I wrote the function some years ago but never set the trigger up. Back to the man I think :-) Many thanks for the feedback, that's a very useful explanation I will keep

[Mimedefang] Best place to collect Sender, Recipient and Server IP on a single log line

2014-03-15 Thread Jon Rowlan
Hi all, I want to collect the sender, recipient and IP of the sending server in a single line in my log file. I don't seem to have the recipient in the arguments to filter_sender and I don't really want to turn on filter_recipient And for servers listed to allow relay in access MD does not seem

Re: [Mimedefang] Best place to collect Sender, Recipient and Server IP on a single log line

2014-03-15 Thread Paul Murphy
Jon, Filter_sender is called after the MAIL FROM stage of the SMTP dialog, so the recipients are unknown at this time. Filter_recipient is called once per envelope recipient (RCPT TO in the SMTP dialog). You can write the (sender, recipient, RelayAddr) tuple out from here using md_syslog, which

Re: [Mimedefang] disabling the virus scanner?

2014-03-14 Thread Kees Theunissen
On Thu, 13 Mar 2014, Fredrik Pettai wrote: Hi, I want to disable the virus scanner (ClamAV). If you want to disable all virus scanners (not only ClanAV) then just remove the line: my($code, $category, $action) = message_contains_virus(); and the code handling the scan results from the

[Mimedefang] modern perl problems?

2014-03-13 Thread Fredrik Pettai
Hi, I upgraded perl + mimedefang, and then I tested the filter, it looks like this: bash-4.2$ mimedefang.pl -test main::rebuild_entity() called too early to check prototype at /usr/pkg/bin/mimedefang.pl line 805. Filter /usr/pkg/etc/mimedefang/mimedefang-filter seems syntactically correct. New

Re: [Mimedefang] modern perl problems?

2014-03-13 Thread David F. Skoll
On Thu, 13 Mar 2014 16:50:22 +0100 Fredrik Pettai pet...@nordu.net wrote: main::rebuild_entity() called too early to check prototype at /usr/pkg/bin/mimedefang.pl line 805. I have a patch in our git repo to fix this; just haven't done a new MIMEDefang release yet. diff --git

[Mimedefang] disabling the virus scanner?

2014-03-13 Thread Fredrik Pettai
Hi, I want to disable the virus scanner (ClamAV). I've tried to add this to global part of mimedefang-filter: […] # Disable Checking inside Zip #$Features{Archive::Zip} = ; # Disable ClamAV $Features{Virus:CLAMAV} = ; $Features{Virus:CLAMD} = ; # Detect and load Perl modules

Re: [Mimedefang] disabling the virus scanner?

2014-03-13 Thread Fredrik Pettai
On Mar 13, 2014, at 17:49 , Fredrik Pettai pet...@nordu.net wrote: Hi, I want to disable the virus scanner (ClamAV). I've tried to add this to global part of mimedefang-filter: […] # Disable Checking inside Zip #$Features{Archive::Zip} = ; # Disable ClamAV $Features{Virus:CLAMAV}

[Mimedefang] Blocked Files

2014-03-12 Thread Kevin A. McGrail
Hi Everyone, So I wanted to be able to answer what and why we blocked various attachments. Towards that end, for our installation, we wrote this page https://raptor.pccc.com/raptor.cgim?template=blocked_files To help out MD, we also wrote the following patch to help document in the

[Mimedefang] my own Mailman postings discarded!?

2014-03-03 Thread Web Analysts
My own postings to one of my Mailman lists is being rejected. My outbound message is using my own SMTP server and Mailman is on the same fedora machine. How can I fix this? This is maddening Mar  3 12:04:09 zippity mimedefang.pl[27748]: s23H43EK028228:

Re: [Mimedefang] my own Mailman postings discarded!?

2014-03-03 Thread David F. Skoll
On Mon, 3 Mar 2014 12:26:29 -0800 Web Analysts christ...@web-analysts.net wrote: My own postings to one of my Mailman lists is being rejected. My outbound message is using my own SMTP server and Mailman is on the same fedora machine. How can I fix this? This is maddening Well, something in

Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-26 Thread Jon Rowlan
If the spam is being relayed out through your filter, your IP address is likely to be the one that will get blacklisted. It will be seen as the source of the spam. You might want to look into rate limiting your customers as well as scanning the messages. To a certain extent that is already

Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-26 Thread David F. Skoll
On Wed, 26 Feb 2014 08:30:35 - Jon Rowlan jon.row...@sads.com wrote: It just makes sense for me to RBL check the sending servers because that is where the problem is and indeed we are finding these sending servers listed on RBL servers - ours does not seem to get blacklisted. MIMEDefang

Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-25 Thread Jon Rowlan
Leading question: Do you test outbound email for spam? I use sendmail/md/sa/clam to test for inbound, I actually don't know whether any checks are performed on the outgoing by this combination of systems, I would have thought that some check are made on mail going out as well as in. The systems

Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-25 Thread WBrown
Jon wrote on 02/25/2014 04:15:31 AM: I use sendmail/md/sa/clam to test for inbound, I actually don't know whether any checks are performed on the outgoing by this combination of systems, I would have thought that some check are made on mail going out as well as in. The systems relaying are

[Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-22 Thread Jon Rowlan
I'd like to get MD to email an alert to postmaster when one of my customer relay servers is featured on an RBL list. I use MD/Clam/SA/Sendmail. Currently if I allow a relay from a customer server, no RBL check is done and it can be some time later that I discover I have been spammed through. Is

Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL

2014-02-22 Thread Kevin A. McGrail
On 2/22/2014 4:54 AM, Jon Rowlan wrote: I'd like to get MD to email an alert to postmaster when one of my customer relay servers is featured on an RBL list. I use MD/Clam/SA/Sendmail. Currently if I allow a relay from a customer server, no RBL check is done and it can be some time later that I

Re: [Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

2014-02-21 Thread Kees Theunissen
On Fri, 21 Feb 2014, Steffen Kaiser wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 20 Feb 2014, Marcus Schopen wrote: I'm planning to move SPOOLDIR (/var/spool/MIMEDefang) to tmps. My /etc/fstab tmpfs /var/spool/MIMEDefang tmpfs

Re: [Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

2014-02-21 Thread Marcus Schopen
Hi Kees, I put $Features{'Path:QUARANTINEDIR'} to mimedefang.pl.conf and in my case (Ubuntu 12.04 LTS) .spamassassin is automatically located under /var/spool/MD-Quarantine without changing home in passwd or changing HOME=/var/spool/MD-Quarantine in /etc/init.d/mimedefang. Kind of strange, but it

[Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

2014-02-20 Thread Marcus Schopen
Hi, I'm planning to move SPOOLDIR (/var/spool/MIMEDefang) to tmps. My /etc/fstab tmpfs /var/spool/MIMEDefang tmpfs defaults,size=128m,mode=750,uid=ofdefanguser,gid=ofdefanggroup 0 0 This works fine, but mimedefang stores quarantinedir and spamassassin bayes files in

Re: [Mimedefang] move SPOOLDIR to tmpfs - how to keep bayes and qdir files at reboot?

2014-02-20 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 20 Feb 2014, Marcus Schopen wrote: I'm planning to move SPOOLDIR (/var/spool/MIMEDefang) to tmps. My /etc/fstab tmpfs /var/spool/MIMEDefang tmpfs defaults,size=128m,mode=750,uid=ofdefanguser,gid=ofdefanggroup 0 0 This works

Re: [Mimedefang] Warning: Malformed MIME virus in the wild

2014-02-12 Thread David F. Skoll
On Tue, 11 Feb 2014 22:19:01 +0100 (CET) Kees Theunissen c.j.theunis...@differ.nl wrote: I found this old message when I was searching my mailboxes for malformed Content-Disposition MIME headers. Note that the name= field in the Content-Disposition header above is also wrong. This should be a

Re: [Mimedefang] Warning: Malformed MIME virus in the wild

2014-02-11 Thread Kees Theunissen
On Thu, 10 Oct 2013, David F. Skoll wrote: Hi, We've run into a malformed MIME virus that has a structure like this: = To: some...@example.com Subject: Payroll Received by Intuit MIME-Version: 1.0 Content-Type:

Re: [Mimedefang] rate-limiting for outbound mails per sender

2014-02-10 Thread David F. Skoll
On Mon, 10 Feb 2014 07:08:38 +0100 (CET) Steffen Kaiser skmimedef...@smail.inf.fh-bonn-rhein-sieg.de wrote: what would be a good way to implement rate-limiting for outbound mails per sender e.g. 50 recipients per smtp_auth sender per hour? I do this in filter_begin. There I detect the

Re: [Mimedefang] Builds for MacOS X?

2014-02-10 Thread Philip Prindeville
On Feb 8, 2014, at 8:33 AM, David F. Skoll d...@roaringpenguin.com wrote: I'm certainly not a fan of the walled garden which is a major reason why I have an Android phone, but I'm pretty sure that ship has sailed. That's fine. Then what I'm doing is a quixotic indication of my core

Re: [Mimedefang] Builds for MacOS X?

2014-02-10 Thread David F. Skoll
On Mon, 10 Feb 2014 15:53:41 -0700 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Which is definitely your prerogative. But if the software contains community contributed enhancements, fixes, etc. is that a reasonable decision to make unilaterally? I do not care if it's

[Mimedefang] rate-limiting for outbound mails per sender

2014-02-09 Thread Marcus Schopen
Hi, what would be a good way to implement rate-limiting for outbound mails per sender e.g. 50 recipients per smtp_auth sender per hour? Ciao Marcus ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND

Re: [Mimedefang] rate-limiting for outbound mails per sender

2014-02-09 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 9 Feb 2014, Marcus Schopen wrote: what would be a good way to implement rate-limiting for outbound mails per sender e.g. 50 recipients per smtp_auth sender per hour? I do this in filter_begin. There I detect the sender, assign a SenderID

Re: [Mimedefang] Builds for MacOS X?

2014-02-08 Thread David F. Skoll
On Fri, 7 Feb 2014 18:13:04 -0800 John Nemeth jnem...@cue.bc.ca wrote: [David Skoll] } The best way to make a platform fail is for developers to } boycott it. I'm certainly not a fan of the walled garden which is a major reason why I have an Android phone, but I'm pretty sure that ship

Re: [Mimedefang] Builds for MacOS X?

2014-02-07 Thread Philip Prindeville
On Jan 29, 2014, at 7:00 PM, David F. Skoll d...@roaringpenguin.com wrote: No technical reason, I suppose, but I have a giant hate-on for Apple. :) http://david.skoll.ca/blog/2010-05-18-anti-apple.html You might be shooting yourself in the foot. By making products such as Mimedefang

Re: [Mimedefang] Builds for MacOS X?

2014-02-07 Thread David F. Skoll
On Thu, 6 Feb 2014 23:11:35 -0700 Philip Prindeville philipp_s...@redfish-solutions.com wrote: No technical reason, I suppose, but I have a giant hate-on for Apple. :) http://david.skoll.ca/blog/2010-05-18-anti-apple.html You might be shooting yourself in the foot. Shooting *myself*

Re: [Mimedefang] Builds for MacOS X?

2014-02-07 Thread John Nemeth
On Feb 7, 8:54am, David F. Skoll wrote: } On Thu, 6 Feb 2014 23:11:35 -0700 } Philip Prindeville philipp_s...@redfish-solutions.com wrote: } } By making products such as Mimedefang available to the walled } garden Apple users, you're giving them a glimpse into a wider world... } } I do not

[Mimedefang] Builds for MacOS X?

2014-01-29 Thread Philip Prindeville
I have some clients that are MacOS X shops, including using a Mac server box as their mail server. They currently don’t use Mimedefang, but I’m trying to sell them on the idea. MacOS already ships with Perl, SpamAssassin and Postfix, of course, so adding Mimedefang should be a no-brainer.

Re: [Mimedefang] Builds for MacOS X?

2014-01-29 Thread David F. Skoll
On Wed, 29 Jan 2014 17:17:19 -0700 Philip Prindeville philipp_s...@redfish-solutions.com wrote: Is there an obvious reason that Mimedefang isn't used with MacOS? No technical reason, I suppose, but I have a giant hate-on for Apple. :) http://david.skoll.ca/blog/2010-05-18-anti-apple.html

Re: [Mimedefang] Builds for MacOS X?

2014-01-29 Thread John Nemeth
On Jan 29, 5:17pm, Philip Prindeville wrote: } } I have some clients that are MacOS X shops, including using a } Mac server box as their mail server. } } They currently don't use Mimedefang, but I'm trying to sell them } on the idea. } } MacOS already ships with Perl, SpamAssassin and Postfix,

Re: [Mimedefang] mimedefang filter sender using filter_sender

2014-01-20 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 18 Jan 2014, Prabin Acharya wrote: My mailserver has been compromised. The scenario is: bogus users are using mailing address of my company and sending spam messages. Do you refer to this scenario as My mailserver has been compromised?

[Mimedefang] mimedefang filter sender using filter_sender

2014-01-18 Thread Prabin Acharya
I've come across a situation at my work recently. My mailserver has been compromised. We use sendmail with mimedefang. There was problem of spam attacks a year ago but after having MD installed and running it has been under control. The scenario is: bogus users are using mailing address of my

Re: [Mimedefang] mimedefang filter sender using filter_sender

2014-01-18 Thread David F. Skoll
On Sat, 18 Jan 2014 08:27:15 +0545 Prabin Acharya m...@prabinacharya.com.np wrote: I know my mail server is loose in terms of security Well... you need to fix that first, don't you think? Regards, David. ___ NOTE: If there is a disclaimer or other

[Mimedefang] Subject block - good success - Anyone else trying it? [REDUX]

2014-01-17 Thread si
Way back in July 2005 there was some discussion re- wisdom of maintaining a database of spammy subject lines, and blocking on the basis of this. Consensus seems to have been that, in the majority of cases, Bayes was a better bet. Recently (over the last year or so) we've been seeing an increase

[Mimedefang] OT: CERT/CSIRT contact for French ISP's?

2014-01-13 Thread Philip Prindeville
Sorry for the slightly off-topic posting. I was looking at: http://www.first.org/members/teams and I couldn’t figure out what team handles unresolved complaints from French ISPs (I’ve had ongoing issues with OVH and Proxad not only not dealing with complaints, but bouncing emails to their

[Mimedefang] spamassassin scores ignored in sa-mimedefang.cf

2014-01-08 Thread Christoph Lehmann
I like to use different configuration files for authenticated and non-authenticated users. Inside MD i call SA like ($hits, $req, $names, $report) = spam_assassin_check('/etc/mail/sa-mimedefang.cf'); or ($hits, $req, $names, $report) =

Re: [Mimedefang] spamassassin scores ignored in sa-mimedefang.cf

2014-01-08 Thread David F. Skoll
On Wed, 08 Jan 2014 14:28:51 +0100 Christoph Lehmann christoph.lehmann.germ...@web.de wrote: I like to use different configuration files for authenticated and non-authenticated users. ($hits, $req, $names, $report) = spam_assassin_check('/etc/mail/sa-mimedefang.cf'); MIMEDefang uses a

Re: [Mimedefang] spamassassin scores ignored in sa-mimedefang.cf

2014-01-08 Thread Christoph Lehmann
MIMEDefang uses a persistent Mail::SpamAssassin object, unfortunately. So once it's created, subsequent calls to spam_assassin_check simply return the same object even if the config file is specified differently. You can prevent this by calling: undef $SASpamTester; just before any of the

Re: [Mimedefang] add_recipient inconsistent results on postfix

2014-01-02 Thread Benoit Panizzon
Hi David Hmm, maybe you pointed me to the problem. Very strange, that this sometimes work even if it's not supposed to work. Well I guess I could store all changes via Storable and then pull them in filter_begin. Yes, you will need to do that. Let me know if that fixes it. Yes, that

[Mimedefang] mimedefang and incoming facebook email

2013-12-31 Thread cc
Hi, I'm using Sendmail with mimedefang. Recently a co-worker was having trouble with a company facebook account and got Facebook to send her a 'reset-password' email. When she received it, it came only with the following message: This message contains a rich-text HTML portion. Consult

Re: [Mimedefang] mimedefang and incoming facebook email

2013-12-31 Thread David F. Skoll
On Tue, 31 Dec 2013 17:06:08 +0800 cc c...@belfordhk.com wrote: My question is, how come I couldn't find This message ... in mimedefang's sources? Something in your filter is munging the email. You need to post your filter for us to make any sense of what's going on. Regards, David.

Re: [Mimedefang] mimedefang and incoming facebook email

2013-12-31 Thread Kees Theunissen
On Tue, 31 Dec 2013, cc wrote: Hi, I'm using Sendmail with mimedefang. Recently a co-worker was having trouble with a company facebook account and got Facebook to send her a 'reset-password' email. When she received it, it came only with the following message: This message contains a

Re: [Mimedefang] add_recipient inconsistent results on postfix

2013-12-30 Thread Benoit Panizzon
Hi David I'm not familiar with Postfix, but this does sound like a Postfix bug. I would post on a Postfix list because I think most of the people on this list are Sendmail users... Thank you for your reply. Via Postfix list I found someone who could tell me how to enable the milter debugging

Re: [Mimedefang] add_recipient inconsistent results on postfix

2013-12-30 Thread David F. Skoll
On Mon, 30 Dec 2013 11:23:17 +0100 Benoit Panizzon benoit.paniz...@imp.ch wrote: That's pretty weird now, because I have added an md_syslog instruction before those recipient changes dumping what is being changed so I know they are being run. Where are you calling action_add_recipient? It

[Mimedefang] add_recipient inconsistent results on postfix

2013-12-23 Thread Benoit Panizzon
Hello We moved from sendmail to postfix (unfortunately but my admin colleagues whated it that way). We use MIMEDefang to do some sender / recipient rewriting, mainly to implement email forwarding in a SRS compatible way. Now I have found a situation, where add_recipient apparently fails, but

Re: [Mimedefang] add_recipient inconsistent results on postfix

2013-12-23 Thread David F. Skoll
On Mon, 23 Dec 2013 11:35:11 +0100 Benoit Panizzon benoit.paniz...@imp.ch wrote: Same result, only local delivery. I'm not familiar with Postfix, but this does sound like a Postfix bug. I would post on a Postfix list because I think most of the people on this list are Sendmail users...

[Mimedefang] MIME::Head question

2013-12-12 Thread Philip Prindeville
If I want to add a header via: $entity-head()-add(‘Received’, “some-multiline-folded-text”); how do I encode the header value such that newlines aren’t stripped? Do I need \r\n\t ? Or \n\t ? I tried both but couldn’t get either to work. Thanks.

<    7   8   9   10   11   12   13   14   15   16   >