Re: [Mimedefang] More patent stupidity

2005-05-13 Thread Jeremy Mates
* David F. Skoll <[EMAIL PROTECTED]> > "The Trend Micro patent explains technology that scans e-mail and > Internet data transfers for viruses at gateways and servers, before > the data arrives at a desktop computer." > > Does anyone have prior art for gateway virus scanning prior to 1997? Old pr

Re: [Mimedefang] OT: Anyone here use Dovecot imap server in production evironment?

2005-04-06 Thread Jeremy Mates
* David F. Skoll <[EMAIL PROTECTED]> > Cyrus is definitely a much more "serious" server, and I do miss the > shared mailboxes. (We worked around it with Dovecot by creating > special users and giving access to the appropriate people: All the > salespeople get to access "shsales", for example.) The

Re: [Mimedefang] OT: Anyone here use Dovecot imap server in production evironment?

2005-04-06 Thread Jeremy Mates
* Shayne Hardesty <[EMAIL PROTECTED]> > From reading Dovecot's site (dovecot.org) it looks promising.. It can > use mbox or maildir, and is written to be fast and secure. I'm just > wondering if it's ready for prime time yet.. Anyone here use it on a > fairly busy server (500+ users)? If so please

Re: [Mimedefang] send PING to clamd via socket

2005-03-20 Thread Jeremy Mates
* Al Sparks <[EMAIL PROTECTED]> > When I first start clamd and then, >> sudo clamd PING > I don't get a PONG back. > > In fact the documented commands don't seem to work at all. What am I > doing wrong? Talk to the socket: perl -MIO::Socket::UNIX -we \ 'my $s = IO::Socket::UNIX->new(shift

Re: [Mimedefang] Sounds

2005-01-13 Thread Jeremy Mates
* Kenneth Porter <[EMAIL PROTECTED]> > I'm curious if anyone has configured a mail server with a sound card > to make different noises or tones based on different kinds of mail > received. It would be interesting to walk into the server room and > know the health of the system or the mix of the tra

[Mimedefang] follow clamav-virusdb for ClamAV definition changes

2004-11-29 Thread Jeremy Mates
* David F. Skoll <[EMAIL PROTECTED]> > I have my virus handling set to discard viruses, and I didn't even > know about the phish signatures until today. I use the clamav-virusdb mailing list to keep an eye on what ClamAV is blocking: http://lists.clamav.net/mailman/listinfo/clamav-virusdb ___

[Mimedefang] Re: Simple feature request

2004-09-14 Thread Jeremy Mates
* Kenneth Porter <[EMAIL PROTECTED]> > >I would rather use "hostname/port" than "hostname:port" to prepare for > >the miraculous day when IPv6 is widely used. :-) > > What do IPv6 URL's do instead of using the :port syntax? Well, for SMTP, "domain equivalent" addresses have square brackets around

[Mimedefang] MTA failing on multiline SMTP greetings

2004-08-06 Thread Jeremy Mates
* Kevin A. McGrail <[EMAIL PROTECTED]> > Before I jump on that bandwagon, I'd like to know if it causes any > legit MTAs to fall over dead as well. I would most certainly assume that certain MTA fail to handle the RFC properly, and fail if a multiple line greeting is encountered. Old versions of E

[Mimedefang] Re: MIMEDefang embedded perl stability issues

2004-06-25 Thread Jeremy Mates
* Chris Gauch <[EMAIL PROTECTED]> > I'm on Redhat Linux 9 for the OS, latest kernel, etc. (through RHN > update). MIMEDefang version is 2.43, Spamassassin 2.63, and ClamAV > 0.72. This problem was fairly consistent when using the embedded perl > interpreter, the MD multiplexor would crash at almost

[Mimedefang] Re: Greylist DB addition fails silently?

2004-06-23 Thread Jeremy Mates
* Justin <[EMAIL PROTECTED]> > Be careful with single point of failure. I believe many here have > noted that it's better to just have an independent greylist db on > each relay. With a global database handle, one can disable greylisting, though you also need a) warnings if the connection is down

[Mimedefang] Re: Another Greylist Question

2004-06-22 Thread Jeremy Mates
* Jeff Grossman <[EMAIL PROTECTED]> > It seems that when I am connecting remotely to my Sendmail machine > using SMTP Auth, it still temp fails my mail. How do I make it so that > my mail sent using SMTP Auth is not tempfailed, but sent immediately? Consult the Sendmail macros for the auth_* data

Re: (OT) Re: [Mimedefang] Sophos is _very_ commercial

2004-03-29 Thread Jeremy Mates
* SRAR Mail Admin <[EMAIL PROTECTED]> > Hm. Sophos had MyDoom-A pegged at 4:45 PM (PST) Jan. 26. IIRC, Clam > caught up about 7:00 PM that evening. Incorrect, ClamAV was blocking "MyDoom-A" first as "Worm.SCO.A", well before Sophos. ___ Visit http:/

[Mimedefang] "special use" IPv4 addresses to consider: RFC 3330

2004-03-09 Thread Jeremy Mates
* Network Guy <[EMAIL PROTECTED]> > Aaaa, block ALL incoming unroutable IP addys at the router. You should > not permit an IP from the 192.168.. 10... ( can't remember that other > one just now ) and 127.0.0.1. I do know of an ISP in my area that does > route 'local' IP's and permits customers to d

[Mimedefang] no need to name null callback subroutine?

2004-03-03 Thread Jeremy Mates
* Michal Jankowski <[EMAIL PROTECTED]> > sub dummy {}; Archive::Zip::setErrorHandler(\&dummy); Why not just: Archive::Zip::setErrorHandler(sub {}); ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] htt

[Mimedefang] Re: potential stock syslogd caveats

2004-03-01 Thread Jeremy Mates
* Les Mikesell <[EMAIL PROTECTED]> > What happens to a server if it is logging via tcp and the syslog-ng > receiving it can't keep up writing to disk? In the past I've seen > local unix socket connections kill named and sendmail when syslog > couldn't keep up - and of course there was no log about

[Mimedefang] potential stock syslogd caveats

2004-03-01 Thread Jeremy Mates
* Jon R. Kibler <[EMAIL PROTECTED]> > The only thing I have left to suggest is on the machine that isn't > logging, run syslogd in debug mode and see if it is ever getting the > log requests. Have the usual syslogd caveats been covered yet? 1. Some syslog varients *really* want tabs, not spaces i

[Mimedefang] Re: swatch script to email you when an error occurs.

2004-02-18 Thread Jeremy Mates
* Ole Craig <[EMAIL PROTECTED]> > I know this, and it's not quite what I was getting at. I'm perhaps > guilty of excessive indirection in attempting to highlight that a > script which attempts to > > *send mail* > when > *the mail server is malfunctioning* > > may have larger issues

[Mimedefang] Re: swatch script to email you when an error occurs.

2004-02-18 Thread Jeremy Mates
* Ole Craig <[EMAIL PROTECTED]> > I think to be on the safe side, the script should also check to make > sure it was able to send the alert mail correctly, and email you if it > didn't... :-) The swatch utility has a 'throttle' option, which should be used to limit notifications. Your log reportin

[Mimedefang] SMTP 'rejects' following DATA

2004-02-10 Thread Jeremy Mates
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> > > ... 5.0 is the threshold I'm using site-wide to move mail into a > > "Junk Mail" folder (I reject during the SMTP conversation if the > > score is 15 or up)... > > Huh? How do you do that? I don't get a SpamAssassin score until after > the DATA phase, at

[Mimedefang] Re: Versigin to screw things up again

2004-02-10 Thread Jeremy Mates
Code to block wildcard DNS and other related ruminations in the thread starting at: http://lists.roaringpenguin.com/pipermail/mimedefang/2003-September/016911.html ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL

[Mimedefang] Determine MTA or MSA port: consult the {daemon_*} macros

2004-02-03 Thread Jeremy Mates
* Steffen Kaiser <[EMAIL PROTECTED]> > This sounds cool. Despite the always mentioned problem, when Mail > clients connect to the server directly - like in my case. Is there a > way to determine, if the message came in through sendmail's MTA (Port > 25) or MSA (Port 587) channel? Sendmail knows wh

[Mimedefang] Re: Error running mimedefang

2004-01-29 Thread Jeremy Mates
* Fulano <[EMAIL PROTECTED]> > Jan 21 10:38:43 nina mimedefang-multiplexor: Slave 0 stderr: Global > symbol "$FoundVirus" requires explicit package name at /etc/mail/mimedefang- > filter line 614. Global symbol "$FoundVirus" requires explicit package > name at /etc/mail/mimedefang-filter line 712.

[Mimedefang] sample code to time malware scans using Time::HiRes

2004-01-28 Thread Jeremy Mates
* alan premselaar <[EMAIL PROTECTED]> > I'm not sure how to get the filter times into the syslog like that > however, i'd be willing to help in anyway I can. Perhaps something like the following in mimdefang-filter: use Time::HiRes (); after installing Time::HiRes if needed and enabling syslog s

[Mimedefang] Re: mail server not issueing helo ro similar

2004-01-18 Thread Jeremy Mates
* Lucas Albers <[EMAIL PROTECTED]> > How common is it for MTA's to not send a: > helo or etrn commnad? Not very common at all; usually these sorts of logs come from monitoring systems like Big Brother or Nagios that connect to see whether something is listening, then disconnect without issuing any

[Mimedefang] Re: rejecting on helo,drive-by-relay,forged_sender,

2004-01-14 Thread Jeremy Mates
* Chris Myers <[EMAIL PROTECTED]> > The wonderful thing about the SpamAssassin scoring system is that none > of us had mailers that refused all e-mail from the Internet when a > certain DNSBL went offline by listing the entire Internet as a spam > source. Sites that used the DNSBL's directly in sen