Re: [Mimedefang] watch-mimedefang

2010-02-15 Thread Michael Sims
In addition to the suggestions others have made, you can also install VNC server on your linux machine (most distros have a package for it) and use a VNC client from your Windows machine to connect to it. You can run multiple displays within the VNC server (each one for different users if you

Re: [Mimedefang] watch-mimedefang

2010-02-15 Thread Michael Sims
Cliff Hayes wrote: For this idea, don't I have to have a GUI OS installed on the linux box I'll be remoting into? I did a test install on a spare Ubuntu box I had here, and yes, when I ask apt to install vnc4server, it wants to pull down a ton of packages, including several xserver* ones. So

RE: [Mimedefang] $RelayHostname not matchingsendmail's Receivedheader?

2006-12-06 Thread Michael Sims
John Rudd wrote: Michael Sims wrote: No biggie, my Net::DNS solution is working fine so I'll stick with that for now. What exactly is it that you're trying to do? Get the PTR for the connecting relay, even if the forward and reverse lookups don't match. Apparently $RelayHostname only

RE: [Mimedefang] $RelayHostname not matchingsendmail's Receivedheader?

2006-12-06 Thread Michael Sims
Jan-Pieter Cornet wrote: On Tue, Dec 05, 2006 at 02:51:22PM -0600, Michael Sims wrote: Mike Lambert wrote: Michael Sims wrote: Ah. So you're saying that sendmail doesn't provide the PTR record to the milter unless it has verified that forward and reverse match? That certainly seems

RE: [Mimedefang] $RelayHostname not matchingsendmail's Receivedheader?

2006-12-06 Thread Michael Sims
John Rudd wrote: Michael Sims wrote: John Rudd wrote: What exactly is it that you're trying to do? Get the PTR for the connecting relay, even if the forward and reverse lookups don't match. Apparently $RelayHostname only contains the PTR if they do match. Currently I'm checking

RE: [Mimedefang] $RelayHostname not matching sendmail's Receivedheader?

2006-12-05 Thread Michael Sims
Joseph Brennan wrote: --On Thursday, November 30, 2006 14:51 -0600 Michael Sims [EMAIL PROTECTED] wrote: Received: from adsl86-34-215-137.romtelecom.net (adsl86-34-215-137.romtelecom.net [86.34.215.137] (may be forged)) by my relay running MIMEDefang ... However, inside my mimedefang

RE: [Mimedefang] $RelayHostname not matchingsendmail's Receivedheader?

2006-12-05 Thread Michael Sims
Mike Lambert wrote: Michael Sims wrote: Ah. So you're saying that sendmail doesn't provide the PTR record to the milter unless it has verified that forward and reverse match? That certainly seems to be what I'm seeing here. This feature may help (it works for access.db lookups): FEATURE

[Mimedefang] $RelayHostname not matching sendmail's Received header?

2006-11-30 Thread Michael Sims
might fail)? Any help is appreciated... (running MIMEDefang 2.56 if that is relevant...) Michael Sims ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http

RE: [OT] Debian Policy (was Re: [Mimedefang] Re: Quarantine location)

2005-08-29 Thread Michael Sims
Steffen Kaiser wrote: However, what would be the way to intelligently handle sendmail's .m4 conf script, without to disable lots of functionality? I'm not expert in this sort of thing, but I would have expected for the package to provide a sane default sendmail.mc and submit.mc, along with a

RE: [OT] Debian Policy (was Re: [Mimedefang] Re: Quarantine location)

2005-08-26 Thread Michael Sims
David F. Skoll wrote: Kris Deugau wrote: Maybe, maybe not. Debian package maintainers seem to delight in Doing Things Differently for a lot of packages, but maybe that's just my background learning all of the RedHat-isms first. g Tell me about it! Two of the pieces of software we rely on

RE: [Mimedefang] [off-topic] Help with AOL Postmaster Problem

2005-07-16 Thread Michael Sims
Kevin A. McGrail wrote: Apologies in advance for off-topic post but it is for a good cause and if anyone will know an answer, it's most likely to come from the Anti-SPAM community. [snip] You may also want to post this to the SPAM-L list if you haven't already. I know for a fact some AOL

RE: [Mimedefang] Need help with filter

2004-12-15 Thread Michael Sims
alan premselaar wrote: Ronald Vazquez NLM wrote: '192.168.1.0' = '0.255.255.255', also I think you also want to replace the = with , above. (my code uses commas, i'm not sure if the = will work as well or not off the top of my head) That's not necessary.

RE: Off-topic: Silly error messages (was RE: [Mimedefang]MIMEtype message/partial)

2004-11-10 Thread Michael Sims
Dave Williss wrote: Or how about the losers who program some BIOSes? Keyboard error. Press F1 to continue. Or Please reply if you did not recieve this message. My favorite was on an old Data General workstation... Kernel Panic Would you like to take a system dump? LOL!

RE: Off-topic: Silly error messages (was RE: [Mimedefang] MIME typemessage/partial)

2004-11-09 Thread Michael Sims
Aleksandar Milivojevic wrote: David F. Skoll wrote: Or how about the losers who program some BIOSes? Keyboard error. Press F1 to continue. Actually, this is not as silly as it might seem on first look. The purpuse of this error message is to make sure user will connect the keyboard

RE: [Mimedefang] OT: Perl Resource

2004-10-09 Thread Michael Sims
Jeff Grossman wrote: What is a good book on Perl programming? I would like something that will help me with the mimedefang-filter file. IMHO the two most essential books are O'Reilly's Programming Perl (often referred to as the Camel), and O'Reilly's Perl Cookbook. The first book is a very

RE: [Mimedefang] Wishlist for David

2004-07-01 Thread Michael Sims
Matthew Schumacher wrote: Anyway, why don't you put up a amazon wish list of something, while I personally don't have a lot of money to give I want to at least buy you a book, dvd, or something. At one time Roaring Penguin's site had a PayPal donate link although I can't seem to find it now.

RE: [Mimedefang] Re: MD upgrade - how?

2004-06-18 Thread Michael Sims
John Nemeth wrote: I save my mimedefang-filter file in a CVS repository. I basically use the methods mentioned here: http://www.mewburn.net/luke/papers/3rdparty-and-cvs.html . This allows me to roll forward changes pretty much automatically. Same here. In fact, I save every

RE: [Mimedefang] Need advise on how to proceed.

2004-06-14 Thread Michael Sims
Chris Myers wrote: Greylisting only delays mail the first time you see a sender/recipient pair, all subsequent messages from/to that same pair are accepted immediately. You can always write your greylisting code so that you don't reject for the first week or two and THEN turn on tempfails

RE: [Mimedefang] Per IP connection limit

2004-05-24 Thread Michael Sims
[EMAIL PROTECTED] wrote: Hi All, Is there a way to limit the number of SMTP connections based on sending host IP? You can do this with iptables and the iplimit module. See this post from the archive: http://lists.roaringpenguin.com/pipermail/mimedefang/2003-May/014352.html HTH

RE: [Mimedefang] Heads up: Change in behvior for 2.43

2004-05-07 Thread Michael Sims
my domain, or are bare IP addresses. Do you think that the impact of having to accept DATA from these relays before being able to reject will be noticeable? Or is there another approach that I'm missing? ___ Michael Sims Project Analyst - Information

RE: [Mimedefang] Removing read receipts for particular account.

2004-05-06 Thread Michael Sims
come from [EMAIL PROTECTED] and not someone else... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] Outbound virus but not spam scanning?

2004-05-05 Thread Michael Sims
Stephen Loeckle wrote: to bypass outgoing mail, but I was wondering if there was a way to still have it scan it for viruses (using mimedefang to call trend's vscan) but still skip the spam detection. See http://lists.roaringpenguin.com/pipermail/mimedefang/2003-May/014570.html You can search

RE: [Mimedefang] Embedded Perl External Perl Modules

2004-05-05 Thread Michael Sims
___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org and http://www.canit.ca

RE: [Mimedefang] filter based on From/To headers?

2004-05-05 Thread Michael Sims
Kelsey Cummings wrote: I need to check for 'invalid' From and To headers in our inbound email (primarily to catch spam that inserts '[EMAIL PROTECTED]' into either header.) Does anyone have an example of how they did this or pointers on where to wedge it in? You basically need to open and

RE: [Mimedefang] filter based on From/To headers?

2004-05-05 Thread Michael Sims
Kelsey Cummings wrote: On Wed, May 05, 2004 at 04:10:46PM -0500, Michael Sims wrote: Kelsey Cummings wrote: I need to check for 'invalid' From and To headers in our inbound email (primarily to catch spam that inserts '[EMAIL PROTECTED]' into either header.) Does anyone have an example

RE: [Mimedefang] filter based on From/To headers?

2004-05-05 Thread Michael Sims
David F. Skoll wrote: On Wed, 5 May 2004, Michael Sims wrote: One caveat: I believe it is possible for the To header to contain multiple lines. When MIMEDefang writes the HEADERS file, it explicitly unwraps the lines to ensure that exactly one complete header appears on each line. Oops, my

RE: [Mimedefang] Semi OT: Best configuration for two servers to handle 20,000msgs/day

2004-05-04 Thread Michael Sims
different maillogs. If you use the two instance method, all mail will pass through your external MX, so you can gather all the relevant information there. HTH... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648

RE: [Mimedefang] Block mail by subject (OT)

2004-03-24 Thread Michael Sims
in people's opinions. It's largely due to the .forward factor that I favor action_discard() wherever possible over action_bounce()... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] Need Tip on Filter

2004-03-20 Thread Michael Sims
(HEADERS, ' ./HEADERS'); while (HEADERS) { if (/^X-Telstra-AS-Scanner: .*?, (.*?)% /i $1 = 90) { delete_recipient($_) foreach (@Recipients); add_recipient('[EMAIL PROTECTED]'); last; } } close(HEADERS); ___ Michael Sims

RE: [Mimedefang] scanning message body

2004-03-19 Thread Michael Sims
-filter if SA found this rule... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http

RE: [Mimedefang]Localhost Messages Cause 'reject=451 4.7.1 Please try again later'

2004-03-17 Thread Michael Sims
mimedefang-filter? ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org

RE: [Mimedefang]Localhost Messages Cause 'reject=451 4.7.1 Please try again later'

2004-03-17 Thread Michael Sims
recipients inside the original block that runs the spam assassin check, so that you only run the check once, and you avoid running it at all on messages that are over 100k. ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office

RE: [Mimedefang] Re: users seeing strange text attachments??

2004-03-16 Thread Michael Sims
(or provide a link to) a (small) sample of one of the messages that is appearing this way? ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] MIMEDefang as a mail gateway...?

2004-03-05 Thread Michael Sims
a combination of cron, ssh, and scp. This is what I'm doing at the moment because at the time I implemented it it was the least drastic change to my existing setup... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758

RE: [Mimedefang] Milter failure processing Read and Delivery Receipts

2004-03-04 Thread Michael Sims
() back into place later I would suggest adding: return('CONTINUE', 'OK') if ($sender eq ''); It might avoid a lot of headaches. ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] Block emails pretending to come from my domain

2004-03-04 Thread Michael Sims
the IP of the relay, and if it isn't in your network AND the sender address isn't in your whitelist array, then reject or discard the message... HTH ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901

RE: [Mimedefang] Milter failure processing Read and Delivery Receipts

2004-03-04 Thread Michael Sims
Kris Deugau wrote: Michael Sims wrote: Your log files are showing the envelope sender, which is not always the same as the address in the From header. Read receipts (or disposition notifications or whatever you want to call them) are sent using a null () envelope sender for the same reason

RE: [Mimedefang] survey: dropping password protected file

2004-03-03 Thread Michael Sims
... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL

[Mimedefang] Network issues causing broken pipe errors (and subsequent tempfails)?

2004-02-27 Thread Michael Sims
... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list

RE: [Mimedefang] Network issues causing broken pipe errors (and subsequent tempfails)?

2004-02-27 Thread Michael Sims
David F. Skoll wrote: On Fri, 27 Feb 2004, Michael Sims wrote: Basically I say all this to ask a question. Is it possible that this message is taking so long to transfer that the MD slave is dying before it is fully received, and this is what is causing the broken pipe error? Nope

RE: [Mimedefang] Tracing/Debugging MIMEDefang

2004-02-26 Thread Michael Sims
Peter A. Cole wrote: - Original Message - From: Michael Sims [EMAIL PROTECTED] (3) Sometimes I'll temporarily use action_add_header() to add debug information directly into the headers of a message I'm using as a test. I'll have a go at doing this tonight. I assume by simply

RE: [Mimedefang] Tracing/Debugging MIMEDefang

2004-02-25 Thread Michael Sims
this. HTH... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org

RE: [Mimedefang] Huge messages causing try again later

2004-02-25 Thread Michael Sims
[quoting rearranged] [EMAIL PROTECTED] wrote: On 24 Feb 2004 at 18:47, Michael Sims wrote: Have you customized your filter? The example that comes with the distribution only calls SpamAssassin if the message is 100KB or less. I would suggest that you verify that this hasn't been changed

RE: [Mimedefang] Huge messages causing try again later

2004-02-25 Thread Michael Sims
PROTECTED], delay=00:03:10, pri=4723633, stat=Please try again later ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] Restart MIMEDefang after AV update?

2004-02-19 Thread Michael Sims
)? ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___ ___ Visit http://www.mimedefang.org and http://www.canit.ca

RE: [Mimedefang] New way of obfuscating text

2004-02-10 Thread Michael Sims
I adjust the score. My suspicion is that it'll be at least 99.9% spam. Thanks for sharing... ___ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722

RE: [Mimedefang] New way of obfuscating text

2004-02-10 Thread Michael Sims
[EMAIL PROTECTED] wrote: From: Michael Sims [mailto:[EMAIL PROTECTED] Personally I think that's a great idea. I've seen these a lot lately too and I think I'm going to put something like this into place as well. But how about making the pattern simply: /font-size:\s*1;/i rant

RE: [Mimedefang] New way of obfuscating text

2004-02-10 Thread Michael Sims
Kelson Vibber wrote: At 12:10 PM 2/10/2004, Michael Sims wrote: /font-size:\s*1\s*(?:px)?\s*;/i I'm not enough of a CSS expert to know what would happen if I threw em and ex in there, but I'm afraid that might create some false positives... 1em would be pointless for obfuscation purposes

RE: [Mimedefang] New way of obfuscating text

2004-02-10 Thread Michael Sims
[EMAIL PROTECTED] wrote: On Tue, 10 Feb 2004, Michael Sims wrote: Here's the pattern I finally settled on: /font-size:\s*1\s*(?:p[xt])?\s*;/i Cool, I think I will go with that one too. Just out of curiosity, how are you scoring that, and what is your reject threshold (if any)? Right