Re: [Qmail-scanner-general]Qmail-scanner does not quarantine klez

2002-08-21 Thread Greg Wildman
What options did you use for the configure script? Look at the first few lines on /var/qmail/bin/qmail-scanner-queue.pl -- Greg On Mon, 2002-08-19 at 16:58, Mike Burkhouse wrote: > Hi All, > > I have a brand new setup here: > > Red Hat 7.3 > qmail 1.0.3 > Spamassassin 2.31 - spamd/spamc > Clam

RE: [Qmail-scanner-general]error line 426

2002-08-21 Thread CertaintyTech
> > And when I tried the following command: > > > ./configure > > > > I received this messages: > > __ > > > > ./configure: mktemp: not found > ./configure: syntax error at line 426: `(' unexpected > > > Any sugestion? > > Thanks > > Luciana Edit the "configure" sc

Re: [Qmail-scanner-general]error line 426

2002-08-21 Thread Jason Haar
On Wed, Aug 21, 2002 at 07:29:57PM -0300, Luciana dos Santos Regina Lemos wrote: > > > I have: > > > > Solaris 5.8 > > perl 5.8 and respectives modules for installetion > > qmail 1.03 Nice versioning detail - what version of Qmail-Scanner? :-) > ./configure: mktemp: not found > ./configure

Re: [Qmail-scanner-general]Perlscanner message header Question?

2002-08-21 Thread Ron Culler
Jason, I tried what you suggested and used the "/" but didn't seem to have any luck. This is the actual header element that I'm trying to catch: X-MessageWall-Warning: MIME/REJECT: body part contains disallowed string: Blocked sample txt This is the exact line from the quarantine-attachement.tx

[Qmail-scanner-general]error line 426

2002-08-21 Thread Luciana dos Santos Regina Lemos
> I have: > > Solaris 5.8 > perl 5.8 and respectives modules for installetion > qmail 1.03 > > And when I tried the following command: > ./configure > I received this messages: > __ ./configure: mktemp: not found ./configure: syntax error at line 426: `(' unexpected

Re: [Qmail-scanner-general]qmail-scanner line 426

2002-08-21 Thread Luciana dos Santos Regina Lemos
> I have: > > Solaris 5.8 > perl 5.8 and respectives modules for installetion > qmail 1.03 > I received this messages: --- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search

Re: [Qmail-scanner-general]Order of precedence

2002-08-21 Thread Jason Haar
On Wed, Aug 21, 2002 at 03:16:39PM -0400, Bill Arlofski wrote: > Is there a way to tell qmail-scanner what to check first when scanning? No. perlscanner is always first, then the virus scanners. perlscanner implements policy, virus scanners scan for viruses. I understand your need, but there's

Re: [Qmail-scanner-general]Perlscanner message header Question?

2002-08-21 Thread Jason Haar
On Wed, Aug 21, 2002 at 02:59:02PM -0400, Ron Culler wrote: > My quarantine-attachement.txt syntax is: > > MIME/REJECT: body part contains disallowed string > Virus-X-MessageWall-Warning: SPAM or Virus based body text detected > This is a regex string - so you need to escape the "/" Try: MIME

Re: [Qmail-scanner-general]Problem: header added by QS getting overrun on From line

2002-08-21 Thread Jason Haar
On Wed, Aug 21, 2002 at 10:18:54AM -0400, Martinez, Michael - CSREES/ISTM wrote: > The following problem started. When a local machine wants to send an > outbound mail, and connects to my qmail server, the antivirus header gets > screwed up in the following manner: > > ... > registered user

Re: [Qmail-scanner-general]problem with carriage return (CR) in header (username) and outlook express

2002-08-21 Thread Jason Haar
On Wed, Aug 21, 2002 at 10:05:02AM +0200, Michael Volk wrote: > qmail-scan detects mails with the carriage return (CR) character in the > username and quarantines them with the remark "Illegal MIME characters found > in headers" and sends a notice-mail to the mail administrator and to the > origin

[Qmail-scanner-general]Order of precedence

2002-08-21 Thread Bill Arlofski
Is there a way to tell qmail-scanner what to check first when scanning? For example, this Exploit.IFrame.Download virus/worm appears to sometimes send a .exe attachment. I have configured qmail-scanner to disallow .exe and .pif (and other) attachments and have also told qmail-scanner that 'ifram

[Qmail-scanner-general]Perlscanner message header Question?

2002-08-21 Thread Ron Culler
I am using the MessageWall Scoring server infront of my Qmail-Scanner and want to have perlscanner match a header entry and block with a message to the sender and admin. Much like Virus-Subject: etc.. The header entry that MessageWall adds to the email is: X-MessageWall-Warning: and the Key I'm

[Qmail-scanner-general]Checking incoming mail with qmail-scanner

2002-08-21 Thread mrtenente
Hello, I've found out that qmail-scanner has a possibility to scan incoming mail. At the moment qmail-scanner works fine for outgoing mail (qmail 1.03, qmail-scanner 1.14, vpopmail 5.2.1) at my server but what should be done to configure scanning of incoming mail? Maybe someone had experienc

[Qmail-scanner-general]Problem: header added by QS getting overrun on From line

2002-08-21 Thread Martinez, Michael - CSREES/ISTM
I am running qmail with qmail-scanner, with tcpserver listening on the smtp port, on a Redhat 7.1 system. i'm using antivir as the antivirus software. I've been doing this successfully for a couple months. The machine it's running on is allowed to accept mail from the world, but not to send mail d

[Qmail-scanner-general]problem with carriage return (CR) in header (username) and outlook express

2002-08-21 Thread Michael Volk
Hi, I have a problem with my qmail-scanner installation. I use version 1.12 of qmail-scan and version 4.1.60 of uvscan. I think the problem is, that qmail-scan detects mails with the carriage return (CR) character in the username and quarantines them with the remark "Illegal MIME characters found

RE : [Qmail-scanner-general]Re: a virus gateway

2002-08-21 Thread Patrice Blot
I did it ! :-) Just play with the Mx of you domains and the /var/qmail/control/smtproutes file of qmail on the AV gateway to resend the mail to the old mail gateway Assume your old gateway as for address : mail.yourdomain /var/qmail/control/smtproutes : :mail.yourdomain Wil resend all mail to