[Mimedefang] Carefully Crafted Recipient executes script?

2019-06-25 Thread Stefan Schoeman
Hoping someone can assist me with this... I just came across an email processed by MIMEDefang that seems to have had a specially crafted recipient. It seems as if the crafted recipient managed to coerce either my mimedefang-filter, or MIMEDefang itself to actually execute script. The recipient

Re: [Mimedefang] Postfix and Mimedefang

2012-04-04 Thread Stefan Schoeman
What worked for me under Ubuntu 10.04 was to let Mimedefang run as the postfix user (change MX_USER=postfix in /etc/default/mimedefang or /etc/init.d/mimedefang) and to change ownership on /var/spool/MIMEDefang to postfix.defang and mode 750. I read somewhere that you should also not run post

[Mimedefang] Good morning to the MIMEDefang List, , , It seems that some of my machines running Slackware experienced an upgrade to the sudo package last night., This morning, I've got MIMEDefang mult

2010-09-16 Thread Stefan Schoeman
Good morning to the MIMEDefang List, It seems that some of my machines running Slackware experienced an upgrade to the sudo package last night. This morning, I've got MIMEDefang multiplexor refusing to start, stating the following: Starting mimedefang-multiplexor:

[Mimedefang] Mimedefang and sendmail queueing

2009-06-10 Thread Stefan Schoeman
he experts on this list please give me their appreciated insights on this? Thanks Stefan Schoeman ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit

Re: [Mimedefang] Simplified single purpose mimedefang-filter

2006-06-23 Thread Stefan Schoeman
MIMEDefang is written for people WHO KNOW PERL! That's the whole point of the program. If it makes you feel any better, MIMEDefang was THE motivation for me to sit down and learn Perl David ;). What I particularly like about MIMEDefang, is the mere basic level of Perl I need to know to do pre

Re: [Mimedefang] Re: dictionary attacks looking for a valid user

2005-12-29 Thread Stefan Schoeman
Hi All, I've found that greylisting takes care of these mining attempts anyway. Sure, my greylist database is filled with rubbish, but at least it will be cleared in 5 hours' time and the mining attempt would not have got a single username right, unless it was re-run 30 minutes later. With the di

Re: [Mimedefang] Is this possible w/ MIMEDefang?

2005-10-09 Thread Stefan Schoeman
Garry Glendown wrote: Sounds great ... off to compiling sendmail 8.13 or 8.12 with milter extension ;) Is the web app available for download? Well, my perl is very elementary, so I'd be a little too embaressed to offer this on a public download ;) Also, my scripts are more used to quarantine

Re: [Mimedefang] Is this possible w/ MIMEDefang?

2005-10-08 Thread Stefan Schoeman
Garry Glendown wrote: Can MIMEDefang : - quarantine large files for admin approval (e.g., forwarding to an admin account, with an extra header containing the original recipients) Yes, quite easily. MIMEDefang dumps the original unaltered mail in a file named INPUTMSG and you can easily che

Re: [Mimedefang] Enabling SURBL net tests only

2004-08-15 Thread Stefan Schoeman
Excellent! Thanks David. Incidentally, maybe just for someone searching the archives one day on why they can't get SURBL right - in my case my initial efforts failed because I did not have the Perl Module LWP installed. Once I installed this, SpamcopURI started showing up in my SpamAssassin repo

[Mimedefang] Enabling SURBL net tests only

2004-08-15 Thread Stefan Schoeman
Hi everyone, I've finally got the SURBL tests working on my MIMEDefang Setup. However, my SpamAssassin scan times are now quite badly affected with some scans taking up to 4 seconds. This is much much slower than before. Now I see that SpamAssassin can perform many more tests such as razor, pyz

[Mimedefang] SURBL

2004-07-13 Thread Stefan Schoeman
Hi everyone, I still don't seem to get SURBL to work the way I want it to. I had MD2.39 with SA2.60. I upgraded to SA2.63 and applied the SpamCopURI module. When restarting MD, I could see no difference. So, after reading through the mail archive, I enabled SALocalTestsOnly=0 as suggested. This le

Re: [Mimedefang] anyone parsing ISO-8859-1?blah?blah in subject?

2004-02-22 Thread Stefan Schoeman
David was kind enough to supply me with the answer to this a while ago. It's somewhere in the mailing archives, but all you have to do is the following: my $SubjectDecode = decode_mimewords($Subject); $SubjectDecode then contains the ASCII text. Despite kind people on this mailing list explaining

[Mimedefang] sendmail 8.12.11

2004-02-12 Thread Stefan Schoeman
Hi everyone, My apologies if this has already been answered. I tried searching for "8.12.11" on the MIMEDefang archives, but the search strips out "."'s, and hence does not really give useful results. In any case, I tried running MIMEDefang 2.39 recently with sendmail 8.12.11. Unfortunately, th