Re: [Mimedefang] Any Sophie users out there?

On Wed, 19 Mar 2014, Anne Bennett wrote: A belated thanks for the patch! ;-) What are you using now for anti-virus? No problem :-) Personally and professionally I've used ClamAV (via clamd) for a long time. I actually used to be a "team member" pre-Cisco, pre-SourceFire. I've used Avira

Re: [Mimedefang] Any Sophie users out there?

On Tue, 18 Mar 2014, Anne Bennett wrote: I wonder if there are any other Sophie users out there? Sophos has announced that they're retiring v4 of "Sophos Anti-Virus for {Linux,Unix}" this April, and I have no idea if v9 will be compatible with Sophie (haven't tried it yet), but since Sophie has

Re: [Mimedefang] Remembering lots of passwords (was Re: FYI: LinkedIn MIMEDefang group is gone)

n, so just type the master password. If you don't have both, you can't get in there. And if you need access to the list at the command-line, export it as text occasionally, encrypt it with gpg... (and shred the text file) Jason -- Jason Englander 394F 7E02 C105 7268 777A 3F5A

Re: [Mimedefang] SA network tests with MIMEDefang 2.53

On Thu, 29 Sep 2005, Jason Englander wrote: So, my guess would be that you're missing the call to detect_and_load_perl_modules() in your filter. See examples/suggested-minimum-filter-for-windows-clients for an example of where to put it. I should add to that, that I haven't u

Re: [Mimedefang] SA network tests with MIMEDefang 2.53

where to put it. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.ro

Re: [Mimedefang] Problem with create mask on ./Work directory

et User defang As long as MD is configured with --with-spooldir=/ram/MIMEDefang, $ClamdSock will be set to /ram/MIMEDefang/clamd.sock by default. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___

[Mimedefang] ClamAV 0.83

FYI, ClamAV 0.83 is out: http://www.clamav.net/stable.php -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIME

[Mimedefang] ClamAV 0.82

FYI, ClamAV 0.82 is out: http://www.clamav.net/stable.php Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIME

[Mimedefang] ClamAV 0.81

FYI, ClamAV 0.81 is out: http://sourceforge.net/project/shownotes.php?release_id=300116 -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIME

[Mimedefang] ClamAV 0.81rc1

http://lists.clamav.net/lurker/message/20050120.104118.f3a78aba.en.html -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailin

Re: [Mimedefang] ClamAV 0.72 is out

users mailing list: http://www.clamav.net/ml.html Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROT

[Mimedefang] ClamAV 0.72 is out

10 REM See subject 20 GOTO 10 -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpengu

[Mimedefang] clamav 0.68 and 0.70-rc

...are out. http://www.clamav.net/ -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED

Re: [Mimedefang] Virus Definition Question / Bagle.H alert

ay be moved elsewhere. The clamav.net address will always redirect you to the 'real' URL. If you can't or don't want to submit it via the CGI, you can also send samples to [EMAIL PROTECTED], but the CGI makes it a lot easier for the samples to be processed. If you can, please use t

Re: [Mimedefang] add to sa score for clients that only give hostname in helo.

in the arce? > Besides, all the info you need is already available in filter_begin > (in $Helo, $RelayName and $RelayAddr). I'll be dipped. I knew about the Relay ones, but not $Helo... Thanks. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A

Re: [Mimedefang] add to sa score for clients that only give hostname in helo.

...but you could set a global variable in filter_relay to reflect whether or not it only has a hostname component, then act on it where you can run action_change_header, change the SA score, etc. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C6

RE: [Mimedefang] minor upgrade of clamav, email not being scanned...

ult: disabled. I think this option was added for version 0.60 Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [E

Re: [Mimedefang] Problem scanning ZIP archives with CLAMAV

On Tue, 17 Feb 2004, Michael Faurot wrote: > Are there any issues with leaving StreamSaveToDisk turned on, even if > MD doesn't use it and clamav-milter isn't used either? Nope. It won't have any effect unless STREAM is used with clamd. Jason -- Jason Englander <

Re: [Mimedefang] Problem scanning ZIP archives with CLAMAV

On Tue, 17 Feb 2004, Lucas Albers wrote: > > Are these set in clamav.conf? > > > > ScanArchive > > StreamSaveToDisk > > Solved my problem. FYI, StreamSaveToDisk is not required with MIMEDefang. MD uses SCAN, not STREAM. STREAM is used by clamav-milter. Jaso

Re: [Mimedefang] sendmail 8.12.11

p, but 8.12.11 has worked fine for me since the day it came out (and the beta before that). Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.c

RE: [Mimedefang] x-virus checked-more

was checked. if ($VirusFound) { action_add_header("X-Virus-Check", "$FoundVirus"); } else { action_add_header("X-Virus-Checked", "yes"); } Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 8

Re: [Mimedefang] filters for subject content

me know and I'll be happy to write up one or two as an example for your filter. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] filters for subject content

On Mon, 9 Feb 2004, Andrew Jayes wrote: > so what do you think? Will this work in the mimedefang filter? And where > in the filter would I paste it in? They're SpamAssassin rules. They go in your SpamAssassin configuration file, not your MIMEDefang filter. -- Jason Englander <[E

RE: [Mimedefang] Using more than one virus scanner is a good idea.

On Tue, 3 Feb 2004, Richard Laager wrote: > in case of outbreaks? Otherwise, it's faster than the daemonized > virus scanners isn't it? Yes -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA

RE: [Mimedefang] Using more than one virus scanner is a good idea.

On Tue, 3 Feb 2004, Jason Englander wrote: > I'd say they should be handled the same as clamscan/clamd. ...and I see in the beta that they already are. -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0

RE: [Mimedefang] Using more than one virus scanner is a good idea.

engine, trophie uses trend's virus signatures and engine. I'd say they should be handled the same as clamscan/clamd. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedef

Re: [Mimedefang] uvscan catching MyDoom that clamav missing

iry mess. (maybe quarantine messages with base64 in them for later review?) clamav should be able to detect these in the future. There has been talk with the author of ripmime to link clamav with his library. This may be available to some degree in post-0.65 snapshots but I haven't tried any ye

Re: [Mimedefang] uvscan catching MyDoom that clamav missing

By the way, if you run ENTIRE_MESSAGE through ripmime, uudeview, metamail, or something like that you'll probably see that clamav detects it after it's extracted out into a file. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 77

Re: [Mimedefang] New .zip virus?

ple that don't think or don't know uvscan needs updating to have to modify mimedefang.pl to use it with MIMEDefang. Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www

Re: [Mimedefang] Request for help: Virus-scanner invocation review [was Re: New .zip virus]

ning 2.37, if the code for interpret_nai_code has been updated since then, never mind :-) Jason -- Jason Englander <[EMAIL PROTECTED]> 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA ___ Visit http://www.mimedefang.org and http://www.canit.c