Re: Exim4 + Clamav

2005-08-05 Thread TreeBoy
On Tuesday 02 Aug 2005 21:32, Marco Tasinato wrote: > Hi! About mail scanner, surfing the net, I found that among a lot of > programs, the more used is amavis. But I don't know how I can configure > exim in order to use amavis or others mailscanners and also how configure > the mailscanners to use

Re: Re: Exim4 + Clamav

2005-08-03 Thread michael
Quoting Marco Tasinato <[EMAIL PROTECTED]>: But the addressee doesn't know anything about the rejection of this e-mail and continually calls me in order to know where is his e-mail. After telling him a lot of time that his e-mail has been refused because the sender had sent him a virus not by h

Re: Exim4 + Clamav

2005-08-03 Thread Paul Johnson
On Wednesday 03 August 2005 12:45 am, Marco Tasinato wrote: > Steve has perfectly understood! > > Could you help me? Maybe if you fix your mailer to stop breaking threads and learn to quote. pgp9gTWAYkhcy.pgp Description: PGP signature

Re: Re: Exim4 + Clamav

2005-08-03 Thread Marco Tasinato
Steve has perfectly understood!   Could you help me? I am  looking forward to getting your answer, thank you very much.   Marco

Re: Exim4 + Clamav

2005-08-02 Thread Paul Johnson
On Tuesday 02 August 2005 01:16 pm, Marco Tasinato wrote: > You have perfectly understood! Who? http://learn.to/quote pgphcbdBtzPg1.pgp Description: PGP signature

Re: Re: Exim4 + Clamav

2005-08-02 Thread Marco Tasinato
Hi! About mail scanner, surfing the net, I found that among a lot of programs, the more used is amavis. But I don't know how I can configure exim in order to use amavis or others mailscanners and also how configure the mailscanners to use clamav. Do you use exim4-daemon-heavy  in your firm?

Re: Re: Exim4 + Clamav

2005-08-02 Thread Marco Tasinato
You have perfectly understood! At the moment my exim4-daemon-heavy configuration works in this way: - I receive an e- mail message - I control  if  actualy there is the addressee - if he exists I accept the message and I begin to check it, otherwhise I turn it down. - If the message has been

Re: Exim4 + Clamav

2005-08-02 Thread TreeBoy
On Monday 01 Aug 2005 21:04, Marco Tasinato wrote: > Hi, > > I have a system with Debian Sarge 3.1 STABLE, MTA EXIM4-DAEMON-HEAVY, > CLAMAV-DAEMON. > > I have the following lines in the exim4 configuration file: > > av_scanner = clamd:/var/run/clamav/clamd.ctl > ># Reject messages containing ma

Re: Exim4 + Clamav

2005-08-01 Thread Paul Johnson
On Monday 01 August 2005 10:24 pm, Steve Lamb wrote: > Paul Johnson wrote: > > If you need a good example why trusting the From: header blindly > > like it sounds like you want to do by making ClamAV do exim's job > > may be found in the recent archives: > > You're getting it backwards, Paul.

Re: Exim4 + Clamav

2005-08-01 Thread Steve Lamb
Paul Johnson wrote: > If you need a good example why trusting the From: header blindly like > it sounds like you want to do by making ClamAV do exim's job may be > found in the recent archives: You're getting it backwards, Paul. He wants to notify the person the mail is supposedly going to

Re: Exim4 + Clamav

2005-08-01 Thread Paul Johnson
On Monday 01 August 2005 01:35 pm, Marco Tasinato wrote: > I know this is a very irksome thing but I can't delete an important > e-mail (that for mistake has got a virus) without saying it to my > customer. If you need a good example why trusting the From: header blindly like it sounds like you w

Re: Exim4 + Clamav

2005-08-01 Thread Paul Johnson
On Monday 01 August 2005 01:04 pm, Marco Tasinato wrote: > Hi, > > I have a system with Debian Sarge 3.1 STABLE, MTA > EXIM4-DAEMON-HEAVY, CLAMAV-DAEMON. > > I have the following lines in the exim4 configuration file: > > av_scanner = clamd:/var/run/clamav/clamd.ctl > ># Reject messages contain

Re: Exim4 + Clamav

2005-08-01 Thread Clive Menzies
On (01/08/05 22:35), Marco Tasinato wrote: > To: [EMAIL PROTECTED] > Cc: debian-user@lists.debian.org > From: Marco Tasinato <[EMAIL PROTECTED]> > Date: Mon, 1 Aug 2005 22:35:10 +0200 > Subject: Re: Exim4 + Clamav > > I know this is a very irksome thing but I can&#

Re: Exim4 + Clamav

2005-08-01 Thread Marco Tasinato
I know this is a very irksome thing but I can't delete an important e-mail (that for mistake has got a virus) without saying it to my customer.   Thanks Marco

Re: Exim4 + Clamav

2005-08-01 Thread Steve Lamb
Marco Tasinato wrote: > In this way clamav intercept the virus, exim4 reject the e-mail message > without notifying it to the receiver. > How can I enable clamav to sent an notification e-mail to the receiver > when clamav finds a virus and exim turns it down??? The more important question is

Re: Exim4 + ClamAV + Some Virii get through

2004-08-04 Thread David Purton
On Wed, Aug 04, 2004 at 09:43:41PM +0930, David Purton wrote: > On Tue, Aug 03, 2004 at 12:04:07PM -0700, Paul Johnson wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > David Purton <[EMAIL PROTECTED]> writes: > > > > > I have a question about virus scanning at smtp time. Sadly

Re: Exim4 + ClamAV + Some Virii get through

2004-08-04 Thread David Purton
On Tue, Aug 03, 2004 at 12:04:07PM -0700, Paul Johnson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > David Purton <[EMAIL PROTECTED]> writes: > > > I have a question about virus scanning at smtp time. Sadly I still > > find Exim4 acl stuff a bit of a black art :( > > > > Sometimes

Re: Exim4 + ClamAV + Some Virii get through

2004-08-03 Thread Alan Chandler
On Tuesday 03 August 2004 20:07, Paul Johnson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Alan Chandler <[EMAIL PROTECTED]> writes: > > Actually you can go further than that here is a sample from my config > > file (I have recombined into a single exim4.conf file) Not only can > >

Re: Exim4 + ClamAV + Some Virii get through

2004-08-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan Chandler <[EMAIL PROTECTED]> writes: > Actually you can go further than that here is a sample from my config > file (I have recombined into a single exim4.conf file) Not only can > you reject malformed mime, you can reject certain attachments and

Re: Exim4 + ClamAV + Some Virii get through

2004-08-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Purton <[EMAIL PROTECTED]> writes: > I have a question about virus scanning at smtp time. Sadly I still > find Exim4 acl stuff a bit of a black art :( > > Sometimes a virus that clamav *does* already know about gets through. That's usually a ne

Re: Exim4 + ClamAV + Some Virii get through

2004-08-03 Thread Alan Chandler
On Tuesday 03 August 2004 08:12, David Purton wrote: > On Tue, Aug 03, 2004 at 07:27:39AM +0100, Alan Chandler wrote: > > On Tuesday 03 August 2004 02:25, David Purton wrote: > > ... > > > > > It offers these lines, which might help in > > > /etc/exim4/conf.d/acl/40_exim4-config_check_data: > > > >

Re: Exim4 + ClamAV + Some Virii get through

2004-08-03 Thread David Purton
On Tue, Aug 03, 2004 at 07:27:39AM +0100, Alan Chandler wrote: > On Tuesday 03 August 2004 02:25, David Purton wrote: > ... > > > > It offers these lines, which might help in > > /etc/exim4/conf.d/acl/40_exim4-config_check_data: > > > > > > deny message = This message contains malformed MIME ($demi

Re: Exim4 + ClamAV + Some Virii get through

2004-08-02 Thread Alan Chandler
On Tuesday 03 August 2004 02:25, David Purton wrote: ... > > It offers these lines, which might help in > /etc/exim4/conf.d/acl/40_exim4-config_check_data: > > > deny message = This message contains malformed MIME ($demime_reason) > demime = * > condition = ${if >{$demime_errorlevel}{2}{1}{0}}

Re: Exim4, Clamav, SA-Exim,

2003-10-23 Thread Derrick 'dman' Hudson
On Thu, Oct 23, 2003 at 01:44:48AM -0700, Steve C. Lamb wrote: | Nothing says exim must use port 25 and, IIRC, there's a recipe on the Exim | site which explains how to divert a copy of mail to another MTA for testing | purposes. Throw it on :2525 and see how it works? Just thinking aloud. If y

Re: Exim4, Clamav, SA-Exim,

2003-10-23 Thread Steve C. Lamb
On Thu, Oct 23, 2003 at 09:39:28AM +0100, Karsten M. Self wrote: > on Thu, Oct 09, 2003 at 05:21:35PM +0100, Pigeon ([EMAIL PROTECTED]) wrote: > > chroot? > No. > The ports aren't chrooted, so you're sharing the same :25 with the > parent. > However user-mode Linux would work, on a separat

Re: Exim4, Clamav, SA-Exim,

2003-10-23 Thread Karsten M. Self
on Thu, Oct 09, 2003 at 05:21:35PM +0100, Pigeon ([EMAIL PROTECTED]) wrote: > On Wed, Oct 08, 2003 at 09:14:07PM -0700, [EMAIL PROTECTED] wrote: > > On Wed, Oct 08, 2003 at 08:36:26PM -0700, Paul Johnson wrote: > > > On Wed, Oct 08, 2003 at 04:36:36PM -0700, [EMAIL PROTECTED] wrote: > > > > How wou

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-13 Thread Kjetil Kjernsmo
On Sunday 12 October 2003 13:28, Paul Johnson wrote: > This howto seems to assume Red Hat, and I've never used exiscan > before. I tried to adapt, but doing so breaks exim. Is there a > howto that doesn't assume a retarded (RPM-based) distro? It was really useful to me, I'm pretty sure my Exim c

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-12 Thread Steve C. Lamb
On Sun, Oct 12, 2003 at 04:28:12AM -0700, Paul Johnson wrote: > This howto seems to assume Red Hat, and I've never used exiscan > before. I tried to adapt, but doing so breaks exim. Is there a howto > that doesn't assume a retarded (RPM-based) distro? Odd. The how-to was straight forward fo

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-12 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 08, 2003 at 08:14:34AM -0700, Steve Lamb wrote: > On Wed, 8 Oct 2003 02:37:47 -0700 > Paul Johnson <[EMAIL PROTECTED]> wrote: > > On Wed, Oct 08, 2003 at 02:12:41AM -0700, Steve Lamb wrote: > > > There isn't, really. My approach was to tr

Re: Exim4, Clamav, SA-Exim,

2003-10-09 Thread Pigeon
On Wed, Oct 08, 2003 at 09:14:07PM -0700, [EMAIL PROTECTED] wrote: > On Wed, Oct 08, 2003 at 08:36:26PM -0700, Paul Johnson wrote: > > On Wed, Oct 08, 2003 at 04:36:36PM -0700, [EMAIL PROTECTED] wrote: > > > How would I install exim4 .deb on woody for testing (i.e. without > > > replacing the curr

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 08, 2003 at 11:09:25PM -0700, Steve Lamb wrote: > It is compiled into exim4-daemon-heavy so just install that package. I > think I had read somewhere that Andreas might eventually include exiscan-acl > into exim4-daemon-light. I may b

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Steve Lamb
On Wed, 8 Oct 2003 22:48:54 -0700 Paul Johnson <[EMAIL PROTECTED]> wrote: > Yup, I found it. I like how KDE 3.2 finally has some kpdf > integration. > Question, though: Where do you get exiscan in debian form for exim4? It is compiled into exim4-daemon-heavy so just install that package.

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 08, 2003 at 08:14:34AM -0700, Steve Lamb wrote: > > Close enough. Got a howto? > > I found a pretty good how-to on-line with Google. Search on "exiscan-acl > clamav pdf". It should be the 2nd link. Yup, I found it. I like how KDE

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread moseley
On Wed, Oct 08, 2003 at 08:36:26PM -0700, Paul Johnson wrote: > On Wed, Oct 08, 2003 at 04:36:36PM -0700, [EMAIL PROTECTED] wrote: > > How would I install exim4 .deb on woody for testing (i.e. without > > replacing the current exim package)? > > You don't. They're mutually exclusive. So to test

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 08, 2003 at 04:36:36PM -0700, [EMAIL PROTECTED] wrote: > How would I install exim4 .deb on woody for testing (i.e. without > replacing the current exim package)? You don't. They're mutually exclusive. - -- .''`. Paul Johnson <[EMA

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread moseley
On Wed, Oct 08, 2003 at 01:25:55AM -0700, Paul Johnson wrote: > On Tue, Oct 07, 2003 at 04:46:48PM -0700, Jeremy Brooks wrote: > > Is there a package of exim 4 for woody? My smtp server is woody, and I > > really have no desire to upgrade it to a more recent distro. > > Have you searched apt-get.

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Kjetil Kjernsmo
On Wednesday 08 October 2003 17:28, Steve Lamb wrote: > > and modifies the Subject-line > > to include *SPAM** rather than just add another one. > > Any ideas on how to do this? > > To be honest, no. Actually, I discovered at least how to rewrite the Subject line, it's in example 3 in

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Steve Lamb
On Wed, 8 Oct 2003 12:20:00 +0200 Kjetil Kjernsmo <[EMAIL PROTECTED]> wrote: > However, I think I would prefer that it behaved as the current > SpamAssassin do, that is, it makes an attachment out of the original > message, inserts the report in the body, and modifies the Subject-line > to inclu

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Steve Lamb
On Wed, 8 Oct 2003 02:37:47 -0700 Paul Johnson <[EMAIL PROTECTED]> wrote: > On Wed, Oct 08, 2003 at 02:12:41AM -0700, Steve Lamb wrote: > > There isn't, really. My approach was to try to create a new eval() > > test in SA which called clamav. I ended up installing > > exim4-daemon-heavy and usin

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Kjetil Kjernsmo
On Tuesday 07 October 2003 22:46, Steve Lamb wrote: > What do you want to do? exiscan-acl can also query Spamassassin > and reject at SMTP time. The main reason to go with sa-exim is to > get the extra features it offers. Those features being saving the > message easily, teergrubing and such

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Oct 08, 2003 at 02:12:41AM -0700, Steve Lamb wrote: > On Wed, 8 Oct 2003 01:24:27 -0700 > Paul Johnson <[EMAIL PROTECTED]> wrote: > > I've been curious on how to tie in virus scanning to sa-exim as well, > > post it to this list if you figure

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Kjetil Kjernsmo
On Tuesday 07 October 2003 23:27, Alan Shutko wrote: > In my experience, still really, really good. I haven't been getting > any additional false possitives, and I haven't been missing any more > spam than normal. I see. Well, I haven't read up on how the Bayesian filter works (though I have b

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Steve Lamb
On Wed, 8 Oct 2003 01:24:27 -0700 Paul Johnson <[EMAIL PROTECTED]> wrote: > I've been curious on how to tie in virus scanning to sa-exim as well, > post it to this list if you figure it out. There isn't, really. My approach was to try to create a new eval() test in SA which called clamav. I

Re: Exim4, Clamav, SA-Exim,

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Oct 07, 2003 at 04:46:48PM -0700, Jeremy Brooks wrote: > Is there a package of exim 4 for woody? My smtp server is woody, and I > really have no desire to upgrade it to a more recent distro. Have you searched apt-get.org yet? - -- .''`.

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-08 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Oct 07, 2003 at 10:05:43PM +0200, Kjetil Kjernsmo wrote: > Yeah, that's one option. I considered it, but the problem is, if you > feed the learner with tons of similar viruses, how good will it be to > kill spam...? Bayesian filtering goes o

Re: Exim4, Clamav, SA-Exim,

2003-10-07 Thread Vineet Kumar
* Jeremy Brooks ([EMAIL PROTECTED]) [031007 17:04]: > Is there a package of exim 4 for woody? My smtp server is woody, and I > really have no desire to upgrade it to a more recent distro. Yes, courtesy of Andreas Metzler: # exim4 and gnutls from andreas metzler deb http://www.logic.univie.ac.at/

Re: Exim4, Clamav, SA-Exim,

2003-10-07 Thread Jeremy Brooks
On Tue, 2003-10-07 at 16:06, Karsten M. Self wrote: > on Tue, Oct 07, 2003 at 04:27:31PM -0500, Alan Shutko ([EMAIL PROTECTED]) wrote: > > Kjetil Kjernsmo <[EMAIL PROTECTED]> writes: > > > > > On Tuesday 07 October 2003 19:48, Alfredo Valles wrote: > > > > >> I was near suicide when some good guy

Re: Exim4, Clamav, SA-Exim,

2003-10-07 Thread Karsten M. Self
on Tue, Oct 07, 2003 at 04:27:31PM -0500, Alan Shutko ([EMAIL PROTECTED]) wrote: > Kjetil Kjernsmo <[EMAIL PROTECTED]> writes: > > > On Tuesday 07 October 2003 19:48, Alfredo Valles wrote: > > >> I was near suicide when some good guy in this list recommended me > >> spamassissin. It's so easy to

Re: Exim4, Clamav, SA-Exim,

2003-10-07 Thread Alan Shutko
Kjetil Kjernsmo <[EMAIL PROTECTED]> writes: > On Tuesday 07 October 2003 19:48, Alfredo Valles wrote: >> I was near suicide when some good guy in this list recommended me >> spamassissin. It's so easy to get to work and once that you train the >> bayesian filter bye bye to all the stupids swen ma

Re: Exim4, Clamav, SA-Exim, (was Re: SWEN isn't slowing down)

2003-10-07 Thread Steve Lamb
On Tue, 7 Oct 2003 22:05:43 +0200 Kjetil Kjernsmo <[EMAIL PROTECTED]> wrote: > Yeah, that's one option. I considered it, but the problem is, if you > feed the learner with tons of similar viruses, how good will it be to > kill spam...? Also, if you feed those to Vipul's Razor, what would it > me