[Qmail-scanner-general]RE: [Qmail-scanner-announce] FYI: Details about upcoming Qmail-Scanner v2

2002-04-21 Thread Adam Goryachev
Two things I can think off from the top of my head while going over that document. They are more correctly defined as feature requests... Instead of using a single regexp to define local domains, you could use any one of the following: file, array, hash, or function (function being especially the

Re: [Qmail-scanner-general]file missing

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 02:04:27PM +1000, Adam Goryachev wrote: > So, is there some method to tell perl, if you run out of memory, give me a > signal so I can fail nicely instead of just exiting. Not without using malloc - pre-allocating memory before you start filling it. > Yes, it does, but I

[Qmail-scanner-general][Qmail-scanner-announce] FYI: Details about upcoming Qmail-Scanner v2

2002-04-21 Thread Jason Haar
As you know, I am now way into the development cycle of Qmail-Scanner v2. It is a bigger beast that the v1 tree - more bits to it, and more configurable. As such, it is also likely to confuse more people :-) So I need your help. Could people look over the Configuration file I am working on that

RE: [Qmail-scanner-general]file missing

2002-04-21 Thread Adam Goryachev
> Oh yes - you're right there. In that case Q-S would crash due to an > out-of-memory error and tempfail wouldn't get called - so there would be > debris... I call that a feature ;-) Sorry, I promise this is my last message on this point! Is it possible to guard against this scenario ? ie, let's

[Qmail-scanner-general]strange errors

2002-04-21 Thread Trey Nolen
I saw a message in the archives concerning this error, but didn't see any solutions. I am running Sophos Sweep under Qmail-Scanner, and have been for some time. It has been working well, but in the last few days I've started seeing a strange error in the logs: Apr 21 20:35:49 mail qmail: 10194393

Re[2]: [Qmail-scanner-general]file missing

2002-04-21 Thread Kenneth
Hi all, Thanks for all the reply! Now I know that the original message is kept in: rh179.kncnet.com:/var/spool/qmailscan/quarantine and there shouldn't be any in /var/spool/qmailscan/. Maybe this folder is for temporary use only? But in what case we will use the following information, which i

Re: Re[4]: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 02:13:55AM +0200, Nerijus Baliunas wrote: > But why the following times do not match: > 22/04/2002 00:53:32:13867:[1019429826] > and > 22/04/2002 00:57:06:13867:[1019429826] Use the source Luke... [i.e. there is no problem with that] -- Cheers Jason Haar Information S

Re: [Qmail-scanner-general]file missing

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 10:08:40AM +1000, Adam Goryachev wrote: > BUT, as I said, I haven't looked, but if there is anything in the message > which is loaded into memory by qmail-scanner (eg, the entire message for me, > or perhaps just the to/from list) then this might be enough for qmail-scanner

Re[4]: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Nerijus Baliunas
On Mon, 22 Apr 2002 11:43:15 +1200 Jason Haar <[EMAIL PROTECTED]> wrote: JH> Took 2 seconds to do things and scan it... JH> > 22/04/2002 00:53:32:13867:[1019429826]:cleanup: /bin/rm -rf /var/spool/qmailscan JH> > /fw.autoukis.lt101942961240413867/ /var/spool/qmailscan/working/new/fw.autoukis.lt1

RE: [Qmail-scanner-general]file missing

2002-04-21 Thread Adam Goryachev
> On Mon, Apr 22, 2002 at 09:07:57AM +1000, Adam Goryachev wrote: > > > Q-S doesn't leave the temp files lying around - you'd run out > > > of disk space in no time! :-) > > On a tempfail return code, qmail-scanner leaves both the temp > > files as well as the original in working/new as I discover

Re: Re[2]: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 01:21:58AM +0200, Nerijus Baliunas wrote: > I just changed sub debug: Great. > 22/04/2002 00:53:32:13867:[1019429612]:w_c: start dumping incoming msg into >/var/spool/qmailscan/working/tmp/fw.autoukis.lt101942961240413867 [1019429612.4815] > 22/04/2002 00:53:32:13867:[10

Re: [Qmail-scanner-general]file missing

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 09:07:57AM +1000, Adam Goryachev wrote: > > Q-S doesn't leave the temp files lying around - you'd run out of disk space > > in no time! :-) > > > > On a tempfail return code, qmail-scanner leaves both the temp files as well as > the original in working/new as I discovered

Re[2]: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Nerijus Baliunas
On Mon, 22 Apr 2002 09:09:11 +1000 Adam Goryachev <[EMAIL PROTECTED]> wrote: AG> Does any of your filesystems use NFS ?? Did you have a temporary NFS outage or AG> something ?? No. Simple ext3 (RedHat 7.2). Regards, Nerijus ___ Qmail-scanner-genera

Re[2]: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Nerijus Baliunas
On Mon, 22 Apr 2002 09:09:21 +1200 Jason Haar <[EMAIL PROTECTED]> wrote: JH> I'd suggest changing the debug statement to: JH> JH> sub debug { JH> print LOG "$nowtime:$$:[",time,"]:",@_,"\n" if ($DEBUG); JH> } JH> JH> so that you can see the current time in each debug record. Then ensure there

RE: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Adam Goryachev
> On Sat, Apr 20, 2002 at 06:14:56PM +0200, Nerijus Baliunas wrote: > > Hello, > > > > I sent 3 MB size file named 'asdfg'. qmail-queue.log shows that > message was delivered 2 times, > > but recipient got only one. If qmail delivered only message of > 2nd attempt, why qmail-scanner > > scanned me

Re: [Qmail-scanner-general]this message fails.. is it a valid message?

2002-04-21 Thread Thilo Bangert
On Monday, 22. April 2002 00:36, you wrote: > On Sun, Apr 21, 2002 at 11:53:09PM +0200, Thilo Bangert wrote: > > bangert@yatze:~ > rm ./tmp/*; reformime -x./tmp/ < ts.ml ; echo $? > > ; ls -l ./tmp/ > > ./tmp/isdn exists. > > 0 > > Looks fine. So is that ts.ml an actual copy of the message that ha

RE: [Qmail-scanner-general]file missing

2002-04-21 Thread Adam Goryachev
> On Mon, Apr 22, 2002 at 07:37:42AM +1000, Kenneth wrote: > > Hi all, > > > > I recently could not find the scanner result > > files under /var/spool/qmailscan/ > > It doesn't store it there! > > See the Email you would have been sent as the admin - it says the original > message is stored under

Re: [Qmail-scanner-general]this message fails.. is it a valid message?

2002-04-21 Thread Jason Haar
On Sun, Apr 21, 2002 at 11:53:09PM +0200, Thilo Bangert wrote: > bangert@yatze:~ > rm ./tmp/*; reformime -x./tmp/ < ts.ml ; echo $? ; ls > -l ./tmp/ > ./tmp/isdn exists. > 0 Looks fine. So is that ts.ml an actual copy of the message that has this problem? Are you comparing like with like? Perha

Re: [Qmail-scanner-general]this message fails.. is it a valid message?

2002-04-21 Thread Thilo Bangert
On Sunday, 21. April 2002 23:12, you wrote: > On Sun, Apr 21, 2002 at 01:11:03AM +0200, Thilo Bangert wrote: > > 21/04/2002 01:02:34:24812: tempfail: X-Qmail-Scanner-1.10: cannot > > close mimeunpacker - > > Hmm, looks OK. I guess you should do as Ed said - what happens when > you run it manually?

Re: [Qmail-scanner-general]file missing

2002-04-21 Thread Rick Macdougall
Hi, It deletes the tmp files and moves flagged emails to /var/spool/qmailscan/quarantine/new Regards, Rick - Original Message - From: "Kenneth" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, April 21, 2002 5:37 PM Subject: [Qmail-scanner-general]file missing Hi all, I re

Re: [Qmail-scanner-general]file missing

2002-04-21 Thread Jason Haar
On Mon, Apr 22, 2002 at 07:37:42AM +1000, Kenneth wrote: > Hi all, > > I recently could not find the scanner result > files under /var/spool/qmailscan/ It doesn't store it there! See the Email you would have been sent as the admin - it says the original message is stored under /var/spool/qmails

[Qmail-scanner-general]file missing

2002-04-21 Thread Kenneth
Hi all, I recently could not find the scanner result files under /var/spool/qmailscan/ It is running normally and rejects any infected mail. Any idea ? using trophie 1.06, qmail-scanner-1.10, rh7.2 here are the email results but the file is not there : ---trophie results --- FILE/DIR INFECTED

Re: [Qmail-scanner-general]newbie-type question about reformime

2002-04-21 Thread Jason Haar
On Sat, Apr 20, 2002 at 07:39:50PM -0400, Vince Worthington wrote: > I don't currently run maildrop, but I do run 2 other courier mail > packages on my setup here already - sqwebmail and courier-imap. Both of > these build a reformime executable during compilation. Their reformime should be fi

Re: [Qmail-scanner-general]this message fails.. is it a valid message?

2002-04-21 Thread Jason Haar
On Sun, Apr 21, 2002 at 01:11:03AM +0200, Thilo Bangert wrote: > 21/04/2002 01:02:34:24812: tempfail: X-Qmail-Scanner-1.10: cannot close > mimeunpacker - > Hmm, looks OK. I guess you should do as Ed said - what happens when you run it manually? Call in the same thing that you can see in qmail-q

Re: [Qmail-scanner-general]long pause (26 min)

2002-04-21 Thread Jason Haar
On Sat, Apr 20, 2002 at 06:14:56PM +0200, Nerijus Baliunas wrote: > Hello, > > I sent 3 MB size file named 'asdfg'. qmail-queue.log shows that message was >delivered 2 times, > but recipient got only one. If qmail delivered only message of 2nd attempt, why >qmail-scanner > scanned message of 1s

Re: [Qmail-scanner-general]Header Return-Path

2002-04-21 Thread Jason Haar
On Fri, Apr 19, 2002 at 03:54:30PM -0300, Eduardo Gargiulo wrote: > I'm looking for some way to filter messages based upon Return-Path > header. I'd tryied Virus-Return-Path without success. Is there any way > to filter out messages based on that header? I'm afraid it doesn't exist... Return-Pat

Re: [Qmail-scanner-general]how to treat different incoming domains with different rules

2002-04-21 Thread Jason Haar
On Fri, Apr 19, 2002 at 05:39:14PM +0200, Alexander Bruns wrote: > when mail is send so the domain "TO: [EMAIL PROTECTED]", then only the > receipient and the administrator should get a warning-mail. > > when mail ist send "FROM: [EMAIL PROTECTED]" then the sender schold be > informed about the v

Re: [Qmail-scanner-general]newbie-type question about reformime

2002-04-21 Thread Vince Worthington
Jason Wong wrote: > > I've no idea whether the sqwebmail reformime works. > > But you don't need to install the whole maildrop package, just untar it, > configure and make, then copy the reformime binary to somewhere. That's cool. I was thinking it might just be best to do that, at least I

Re: [Qmail-scanner-general]newbie-type question about reformime

2002-04-21 Thread Jason Wong
On Sunday 21 April 2002 07:39, Vince Worthington wrote: > Hello everybody, > > I'm just getting started setting up QMS on our Qmail/Vpopmail mail > server. I noticed in the list of requirements that the reformime util > from the maildrop package is needed for QMS. > > I don't currently run maildr