Re: [Mimedefang] Spam ethics question

. It's still unsolicited, so it's valid data. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http

Re: [Mimedefang] Obscuring email addresses on the web

in your address, then go over it to check for typos. Not to say you shouldn't do it, of course -- some sort of obfuscation is practically a necessity these days -- but it *is* a trade-off that can impact usability. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] SPF Usefulness (was Re: SNARE spam detection)

, just let it run through the normal filter path. This is how SpamAssassin's whitelist_from_spf and whitelist_from_dkim methods work. (Well, mostly. It still runs through the regular filters, just subtracts a bunch of points at the end.) -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] On pinheaded ISP's that insist on a copy of Spam

their privacy, you should expect your own ISP to snoop on *your* email and invade *your* privacy. If you want your own ISP to respect your privacy, it's a bit counterproductive to advocate that other ISPs violate their users'. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] regex filter unwanted words

-positives. Agreed. One might say, Watch out for false positives. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit

Re: [Mimedefang] DoD finally bans HTML e-mail

it, and I know Thunderbird will read it. I'm not sure how widely it's supported in other clients, though. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message

Re: [Mimedefang] sa-update

the SARE rules. I haven't done so myself, since I was already running RDJ -- it ain't broke -- but I found info on how to set it up here: http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Question about mimedefang-filter

legit words that contain blacklisted words. Looking for cialis will trigger on specialist, for instance. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL

Re: [Mimedefang] Rejecting forged senders - comments?

exist. For instance, if we get mail with an envelope sender of [EMAIL PROTECTED], I don't think it even gets as far as MIMEDefang. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate

Re: [Mimedefang] Passing Variables from SA to DF

to figure out what you can pull out of the object to get the country info. IS SPAM is probably in there too, but you could also calculate it by checking whether $hits = $req. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE

Re: [Mimedefang] Checking SPAM first before virus

(which will probably require a newer version of MIMEDefang), since you're basically checking for 20-year-old spam. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message

Re: [Mimedefang] ANNOUCEMENT: Net::validMX v2.2.0 now available.

do. So yeah, '=' will show up in the LHS of a significant number of legit envelope senders. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL

Re: [Mimedefang] installing on Redhat core 5

R.Linga Reddy wrote: I want to install on Red hat fedora core 5, will it (Mime Defang ) support. Please suggest me. I don't see why not. Fedora Core 5 includes a version of Sendmail with milter support, and includes Perl. So it should work. -- Kelson Vibber SpeedGate Communications

Re: [Mimedefang] mimedefang in endless loop (socketpair)

servers. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http

[Mimedefang] OT: www. and lazy users (was Re: DNS and MX records)

and spam.) This seems like a clear-cut case of the latter. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http

Re: [Mimedefang] OT: www. and lazy users (was Re: DNS and MX records)

on this at all. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com

Re: [Mimedefang] sa-update

Jim McCullars wrote: I just tried running sa-update for the first time and I got the new rules, but MD doesn't seem to be using them. Someone posted a patch for mimedefang.pl a week or two ago... or you can install the 2.57 beta -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Another silly idea

, and if they send you a new copy of the virus every five minutes, you only need to scan it once a day until they clean the system or the virus stops sending. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other

Re: [Mimedefang] Multiplexor dies, leaving its slaves clueless behind...

), let it run multiple passes. Sometimes if the hardware is borderline, it can take a while to trigger a problem. When I've got a system acting suspiciously, I'll just let Memtest86 run overnight. Or occasionally even over the weekend. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Re: filter_recipient questions (Jan Pieter Cornet David Skoll)

, so they don't think the message went through. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http

Re: [Mimedefang] Addressbook as whitelist

is another one (IIRC) -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http

Re: [Mimedefang] Bayes setup questions

. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang

Re: [Mimedefang] Attention Yahoo subscribers

://antispam.yahoo.com/faqs#a15 -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http

Re: [Mimedefang] Per-recipient customization

rejection policies that you can apply in filter_begin, do those before the call to stream_by_recipient. That way you can still issue SMTP rejections in most cases, and bounces are limited to specific circumstances. -- Kelson Vibber SpeedGate Communications www.speed.net

[Mimedefang] RTF vs. HTML (was Re: Problem with RTF Format and Disclaimer usign append_text_boilerplate or append_html_boilerplate)

half a chance of reading it, or would HTML still be more evil, because of the potential as an attack vector given a sufficiently insecure client? Inquiring minds want to know! -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE

Re: [Mimedefang] sa-mimedefang.cf

webmaster wrote: nope. I searched my entire server and did not find it. where can I get a copy? It's installed by MIMEDefang. If you haven't run make install yet, then you probably won't find it. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Repeated attempts with different sender and IP whengreylisting

John Nemeth wrote: What anti-spam laws? The CAN-SPAM act is just that. It actually legalises spam. As long as you follow the rules (including opt-out provisions) you're free to spam to your heart's content. Fortunately, we're free to block them to our hearts' content, too. -- Kelson

Re: [Mimedefang] OT: Don't let this happen to you

with textarea (even checkboxes and radio buttons). That way you can try passing the script multi-line fields and see whether it accepts the extra lines, strips them out, or converts the newlines to spaces and wraps the extra-long headers. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] MIMEDefang 2.56 is Released

David F. Skoll wrote: MIMEDefang 2.56 is available at http://www.mimedefang.org/node.php?id=1 This is a bug-fix release; changelog relative to 2.55 follows. The GPG signature appears to be 404... -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Including archetypal filters to include in release?

, because chances are that the resulting FQDN doesn't exist if you're dealing with a home computer named by the end user. This of course can be resolved by requiring SMTP-AUTH, but when you still have half your users on POP-before-SMTP, it limits your options a bit. -- Kelson Vibber SpeedGate

Re: [Mimedefang] Pre-Emptive Greylist entries

blocked, dropped, or hidden. Why waste the time and bandwidth? It may not be your own connection anymore, but hey, access to those botnets costs money! -- Kelson Vibber SpeedGate Communications, www.speed.net ___ NOTE: If there is a disclaimer or other

Re: [Mimedefang] resending mail sent to /var/spool/mail

That starts a sendmail process that will run through the queue once. -- Kelson Vibber SpeedGate Communications, www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit

Re: [Mimedefang] Re: dictionary attacks looking for a valid user

Kenneth Porter wrote: --On Thursday, December 29, 2005 12:23 PM -0800 Kelson Vibber wrote: There is also confMAX_RCPTS_PER_MESSAGE, which limits the total number of recipients any message can target. But that includes valid recipients. Is that a global setting or can that be configured based

Re: [Mimedefang] dictionary attacks looking for a valid user

look into Sendmail's BAD_RCPT_THROTTLE feature. It doesn't block them, but it'll slow them down a bit. -- Kelson Vibber SpeedGate Communications www.speed.net ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL

Re: [Mimedefang] slightly OT - Next Sober attack

involved. ;-) Unless this Sober variant sends another round of neo-Nazi propaganda, I wouldn't presume any connection. And even if it does... you're probably right, and the connection is just money. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Negative addresses??

in formatting, so they're getting displayed as negative integers instead of dotted quads. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] SA upgrade difficulty

actually on the system. But sometimes it's trying to save you headaches down the road. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] strange spam coming in

' prospective customers have to jump through more hoops. At that point, blocking images becomes the only sure solution, but it's a tough policy to implement for, say, an ISP. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http

Re: [Mimedefang] MX - 127.0.0.1

of these are still around, and I never thought it was a good idea -- and you can definitely argue that it's a malicious config! -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang

Re: [Mimedefang] MX - 127.0.0.1

, and people who moved into it had to deal with traffic and mail being rejected because it was obviously forged. It wasn't resolved quickly, either. IIRC it took some sites months (or longer) to catch up. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] OT: Email web form exploits

was seeing things where they'd changed the recipient from [EMAIL PROTECTED] to [EMAIL PROTECTED],[EMAIL PROTECTED] -- which would still match /[EMAIL PROTECTED]/ -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http

Re: [Mimedefang] training spamassassin

training the same database you'll be using! -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http

Re: [Mimedefang] reject without creating a reject message

an intermediate relay would. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo

Re: [Mimedefang] Reject Spam instead of tag it

or if you have another server handing incoming mail to the MIMEDefang server, you will be stuck generating bounce notices, most of which will end up going to forged senders. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http

Re: [Mimedefang] Blatent spam getting X-Spam-Score: 0 ()

. As for scanning accuracy, action_delete_header doesn't take effect until MD sends the message back to Sendmail, so SA will see the original headers anyway. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http

Re: [Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

would still be getting the User unknown NDRs if we weren't rejecting them in filter_sender. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list

Re: [Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

SMTP connections. All a virus (or spam zombie) has to do is extract the settings from the user's mail config and send via the ISP's relay. Depending on how the app stores the password, it may even be possible to use SMTP AUTH. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] HELP! Can no longer receive/send email after kernel upgrade

. I seriously expected it to be Debian 4.0.) -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http

Re: [Mimedefang] Email Filtering Article

nosrc RPMs for some package that left out the tarball for bandwidth reasons, so it should be possible. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list

Re: [Mimedefang] interaction between sendmail 'access' check and MdF's milter checks

. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] clamav

. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] spam now a registered trademark for downloadable software by Hormel

Kevin A. McGrail wrote: Where did DECnet pick up the term? From Monty Python's Spamalot/SpamSPAMspamSpam Eggs. ...which brings us back to spam having its origins in negative commentary on SPAM. Or at least negative commentary on an *excess* of SPAM. -- Kelson Vibber SpeedGate

Re: [Mimedefang] spam now a registered trademark for downloadable

Ian Mitchell wrote: Always curious how someone who owns a trademark feels when they're trademark is essentially hijacked by a community as a whole for use to describe the bain of all existance ;) Yeah. When you think about it, Kleenex, Xerox, and Styrofoam have had it *easy*. -- Kelson

Re: [Mimedefang] [possibly off-topic] ALL TRUSTED SA Problem

in the next link should solve the problem. http://wiki.apache.org/spamassassin/TrustPath There are bugs in SA that cause ALL_TRUSTED to fire incorrectly for some people, but your best bet is to set trusted_networks first, and only disable ALL_TRUSTED if that isn't enough. -- Kelson Vibber

Re: [Mimedefang] [possibly off-topic] ALL TRUSTED SA Problem

is important for more than just that one rule. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com

Re: [Mimedefang] Blocking IP #

even entertain the notion of permitting executables in via e-mail.) Zip file containing whatever.txtbunch-of-spaces.pif One got into my mailbox before freshclam picked up the signature, so I had a chance to take a look at it. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Validate users before scanning?

scanning in filter_begin or filter_end, right? Those get triggered in the DATA phase. The virtusertable lookups should be done for each RCPT TO. If there are no valid recipients, will sendmail even accept anything for DATA? Or am I just completely confused here as to the process? -- Kelson Vibber

Re: [Mimedefang] freshclam -- Is it a daemon?

copies of Sober.P get through on Monday morning during the half-hour between the first hit and the first freshlcam after ClamAV added the signature. Of course, by get through I mean get defanged instead of discarded outright -- so it could have been considerably worse. -- Kelson Vibber

Re: [Mimedefang] Validate users before scanning?

for future reference -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] freshclam -- Is it a daemon?

was added or from another source, I forget which) and had the sense not to open it... but forwarded it to their network consultant, asking Is this a virus? The main nuisance Sober has caused here has been all the bogus bounces. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Dual system: filter_recipient and sendmail

, and then CONTINUE for everything else, letting sendmail take care of the rest. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com

Re: [Mimedefang] Streams and MaxRecipientsPerMessage

a filter. I'm not saying the motivation won't be there, just that it won't be very strong when there's a guaranteed multi-year transition period in which the old standard will still get the mail through. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Integrating SPF...

certain conditions. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Integrating SPF...

on Sender-ID basics, including the PRA header that Mark mentioned -- at http://spf.pobox.com/senderid.html -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] Integrating SPF...

that are not sent from an approved server should still be accepted but may be subjected to greater scrutiny. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] OT: New Sendmail spam block

side of the return address. So it *looks* like a FQDN, but chances are it isn't. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] REJECT in filter_relay not returning proper code?

/Exchange have an annoying tendency to sanitize out the useful error with a generic one, but I do know it at least makes it out the door. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] Installing clamav with MIMEDefang

. That, on the other hand, sounds like it could be useful, if you get a lot of virus traffic. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang

Re: [Mimedefang] Unfilter single Recipient -

for mimedefang-filter). -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Anti-virus software

down their servers.) I could be misremembering, though. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http

Re: [Mimedefang] Anti-virus software

at that said it only ran on Linux? -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman

Re: [Mimedefang] SURBL

and Habeas, forgeries are much harder than they used to be, so it depends on how much you trust their criteria and their verification process. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] Need to upgrade MD on Red Hat 8.0 and 7.3

problems aside from the occasional log clutter. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http

Re: [Mimedefang] two minor doc. errors

, aliases, random redirectors, etc. That said, I do see websites *cough*Mandrake*cough* getting these mixed up from time to time. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] Question on confidentiality statements

and Mockery Act. :D Disclaimer: All spelling errors are intentional. Except the ones that aren't. Your 'musement may vary. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing

Re: [Mimedefang] SpamAssassin 3.0.2 is released! (fwd)

Paul wrote: SpamAssassin 3.0.2 is released! 3.0.2 contains some important bugfixes, and is recommended. Anybody try this one with MD yet? If so, any issues, comments? No issues here. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit

Re: [Mimedefang] Need to turn off CC in Defang Notifications

SHell. If you set an account to use smrsh as its shell, then the user can only run the programs you specify -- and that includes programs called through procmail. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org

Re: [Mimedefang] Need to turn off CC in Defang Notifications

of Someone sent you a virus, but we deleted it. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo

Re: [Mimedefang] Need to turn off CC in Defang Notifications

Kelson wrote: To underscore the point a bit more fully, here's a post by one of a Mozilla developer ... make that a post by *a* Mozilla developer ... Beware large friendly toolbars. If you happen to sneeze while reaching for the menu, you just might hit Send by mistake -- Kelson Vibber

Re: [Mimedefang] Tracking down file descriptors

David F. Skoll wrote: On Thu, 11 Nov 2004, Kelson wrote: I've searched through my filter, and every single open call is inside a function. Despite this, I still get the Something in your Perl filter appears to have opened a file descriptor outside of any function warning in my logs. Are you

Re: [Mimedefang] Action bounce

action_discard(); ^^ Since you're calling return with the result of action_discard, it will leave filter_end. So yes, it should do what you want. (If you're concerned, just use an if...elsif structure.) -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] dealing with .exe/.com viruses

and a few others, and defang other bad filenames after some extra checks on files like whatever.com proposal.doc or cnn.com.html -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] Re: VERY Newbie Question

itself isn't license/patent/etc. encumbered, but Microsoft's sections are. (Though reportedly less so than they were originally. Something to research when I have time...) -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http

Re: [Mimedefang] Question about upgrading ClamAv

prefer to roll my own RPMs, which essentially automates the process of copying over the binaries and config files (plus it removes any outdated files as well.) When I do have to build something on a production server, I generally build it as a non-privileged user at low priority. -- Kelson

Re: [Mimedefang] What is USER_IN_DEF_WHITELIST?

on the wrng Received headers. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] MD consuming all memory...

into SA 3.0. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Re: OFF TOPIC - Need a product to block spyware (Mark Penkower)

a banking site cause problems it was just broken browser detection, not IE-only code. (It wanted me to upgrade to Netscape 6 before it would let me in.) -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http

Re: [Mimedefang] Re: Bounce AND send a copy?

in 2.45? Why have a separate function? -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo

Re: [Mimedefang] Bounce AND send a copy?

(a) have the client queue-runner active and (b) avoid running locally-generated mail through SpamAssassin. Alternatively, you can quarantine the message (using quarantine_entire_message) instead of sending it to your postmaster. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] Re: jpg exploit

jpeg virus and 0.75? From: Tomasz Kojm [EMAIL PROTECTED] Will there be an updated signature for the new jpeg virus for the 0.75 series of ClamAV? No, there will not - only 0.8x can detect JPEG exploits. -- Kelson Vibber SpeedGate Communications www.speed.net

Re: [Mimedefang] RE: JPEG exploit checking in mimedefang-filter

)) { my $path = $bh-path(); if (defined($path)) { -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http

Re: [Mimedefang] Reject vs Drop and MX

your favorite method for finding one item in a list. (array, hash, regexp, etc.) You only *really* need to use filter_relay if you want to act on the info before SMTP DATA. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http

Re: [Mimedefang] Clamav milter or call from MIMEDefang?

it itself -- which accomplishes the same thing. (Assuming you have the right options set in clamav.conf -- er, clamd.conf for 0.80) -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang

Re: [Mimedefang] MIMEDefang + spamd

spamd would just be extra overhead. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] again - Overlong line in RESULTS file

so that only a few rules will actually be visible in the report. (At the time it was written, that capability wasn't available.) -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca

Re: [Mimedefang] again - Overlong line in RESULTS file

-- well over half-way to the 8K limit. Throw in the report header and footer and a few other rules and you can hit 8K easily. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang

Re: [Mimedefang] quarantine_entire_message: I don't get it

Your mail server sent us a virus! messages when it's obvious from the headers (which are generally attached) that our server *didn't* send it. Sometimes I'll even write it in the style of the notice they sent. I don't know if it does any good, but it helps let off steam sometimes. -- Kelson

Re: [Mimedefang] Boilerplate message

Johann wrote: append_text_boilerplate($entity, Scanned for viruses, trojans and worms. Verified clean by Sophos Antivirus . /n Legal mumbo-jumbo here., 0); I tried with the /n both inside and outside of the quotes. Inside the quotes, and \n, not /n. -- Kelson Vibber SpeedGate Communications

Re: [Mimedefang] Sendmail - Mimedefang - Spamassassin

to put a check in filter_end right before SA is called. In either case, you can find examples in the list archives. -- Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list

Re: [Mimedefang] Conceptual stage at setting up email gateway

it in the local mailbox. As for spam checking, I'll second Gordon's recommendation of SpamAssassin www.spamassassin.org. ClamAV www.clamav.net works very well as a virus scanner and does frequent updates. -- Kelson Vibber SpeedGate Communications www.speed.net

  1   2   >