[Qmail-scanner-general]Re: the 'find' problem

2003-09-25 Thread taltos-qs
On Thu, 25 Sep 2003 16:17:28 -0400, Jason Haar wrote: > maybe someone with a Solaris system can check this cruftiness? > > find . \( \( \( -type f -name '*.log' -o -name '*.csv' -o -name '*.txt' > -o -name '*.db' \) -o \( -type d -name 'quarantine' -o -name 'archives' > \) \) -o -mtime +1 \) -p

[Qmail-scanner-general]exact size of zero, perlscanner logic

2003-09-25 Thread John Crawford
Hi, I'm running v1.16. It would be nice to be able to have perlscanner logic be able to match an attachment size of zero. As it now sits, zero is used to indicate no-size specified. If we used a negative number to specify ignore size, then zero could be matched, which could be helpful in some si

Re: [Qmail-scanner-general]qss 2.0.2 and QS 1.20RC3

2003-09-25 Thread Josh Trutwin
Excellent, thanks! This has been the one thing holding me back from going to qs 1.20rc3. Does it mean you have to wipe out the quaranteen log and start fresh though or will qss still parse the pre-1.20rc3 log entries. (I'm guessing No, but thought I'd check) Josh On Thu, 25 Sep 2003 14:01:5

[Qmail-scanner-general]Archiving options.

2003-09-25 Thread zak
Has anyone on this list ever considered a method of archiving only a random sample of incomming mail rather than everything. I'm considering doing this so a human can look at a random portion of our incomming mail, and train a bayesian filter manually. The problem that I'm finding is that I don't

[Qmail-scanner-general]two items

2003-09-25 Thread Paul Theodoropoulos
just joined the list. did a brief scan through the archives but didn't see these mentioned. if they've already been dealt with, apologies in advance. qmail-scanner-queue.pl, version 1.20rc3, on the following line: my $nowtime = strftime("%a, %d %b %Y %H:%M:%S %z", localtime(time)); at least u

[Qmail-scanner-general]group, working/new

2003-09-25 Thread Paul Theodoropoulos
Have just upgraded to 1.20rc3. have followed the steps to create qscand user/group, installed and running as same, updated perms on /var/spool/qmailscan. however, when qmailscanner runs on a message, i note things like the following: root-nesa /var/spool/qmailscan/working/new% ll total 260 drwxr

[Qmail-scanner-general]Re: How to handle 400 copies of Gibe/F a day.....

2003-09-25 Thread Jesse Guardiani
Tim Janes wrote: > > Hi, > > I run a small company email gateway that handles about 2500 email per day, > qmail-scanner has worked brilliantly for a couple of years, usually > finding 1 or 2 virus per day. > > However during the last week 2 of our users have been getting a large > volume of Gib

Re: [Qmail-scanner-general]How to handle 400 copies of Gibe/F a day.....

2003-09-25 Thread Doug Monroe
Tim Janes wrote: I can vouce that it is inconvenient having 400 identical emails notifiying me and the user about the arrival of a virus. What I am seeking is a modification to qmail-scanner so that these virus can be silently blocked. edit your qmail-scanner-queue.pl and add gibe to the silent li

Re: [Qmail-scanner-general]How to handle 400 copies of Gibe/F a day.....

2003-09-25 Thread Tim Janes
Joe, thanks for the fast respone. We are currently running qmail-scanner, sophie, Sophos A/V so the virused emails is being blocked, but qmail-scanner sends an information notice to the recipient and the admin (me). I can vouce that it is inconvenient having 400 identical emails notifiying me a

[Qmail-scanner-general]the 'find' problem (was: Questions on /working/new)

2003-09-25 Thread Doug Monroe
Jason Haar wrote: On Tue, Sep 23, 2003 at 01:55:30AM -0500, [EMAIL PROTECTED] wrote: Here is an updated version of my perl program to handle the find cleanup parts of qmail-scanner-queue.pl -z. The first version, if the /var/spool/qmailscan directory had not been updated in a day, went ahead

[Qmail-scanner-general]How to handle 400 copies of Gibe/F a day.....

2003-09-25 Thread Tim Janes
Hi, I run a small company email gateway that handles about 2500 email per day, qmail-scanner has worked brilliantly for a couple of years, usually finding 1 or 2 virus per day. However during the last week 2 of our users have been getting a large volume of Gibe/F virus, one user in excess of 350

[Qmail-scanner-general]Re: strange "activity" with --notify sender

2003-09-25 Thread Jesse Guardiani
Jason Haar wrote: > On Tue, Sep 23, 2003 at 01:51:34PM +0300, Fabrice LABORIE wrote: >> when a virus is caught, it seems that qmail-scanner is still trying to >> inject a notification mail to "<>". >> ... >> Is this a known bug or do I have something broken in my set up ? > > What bug? It sent

Re: [Qmail-scanner-general]Arbitrary script execution?

2003-09-25 Thread Greg Wildman
.qmail does not replace delivery, it controls delivery. You can deliver it to 10 Maildirs and run 10 programs if you want. Read more about it in the man page. "man dot-qmail" I think. On Thu, 2003-09-25 at 01:16, Benjamin Smith wrote: > Is there a way to execute a script within qmail? I'm familia

Re: [Qmail-scanner-general]Re:Clamav Problem (ADDENDUM)

2003-09-25 Thread Greg Wildman
On Thu, 2003-09-25 at 13:23, Lombardo Federico wrote: > I repoert the full error and I attach the clamav.conf: > Thu, 25 Sep 2003 13:02:19 +0200:19934: run > /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space > =100 /var/spool/qmailscan/Caronte106448773945619934 2>&1 >

Re: [Qmail-scanner-general]Re:Clamav Problem (ADDENDUM)

2003-09-25 Thread Doug Monroe
Lombardo Federico wrote: I repoert the full error and I attach the clamav.conf: Thu, 25 Sep 2003 13:02:19 +0200:19934: run /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space =100 /var/spool/qmailscan/Caronte106448773945619934 2>&1 ERROR: Please edit the example config

[Qmail-scanner-general]Re: virus notifications

2003-09-25 Thread Jesse Guardiani
Jason Haar wrote: > On Mon, Sep 22, 2003 at 10:45:18AM -0400, Jesse Guardiani wrote: >> Howdy list, >> >> Is there any way I can get qmail-scanner to only >> send me virus notifications via email if the headers >> of the quarantined virus contain a certain regular >> expression? >> >> For instan

[Qmail-scanner-general]Feature request for QS 2.0

2003-09-25 Thread Aaron Carr
Not sure if you're still taking feature requests for QS 2. One thing I'd like to see, as trivial as it is Have one of the configure options be to add a "scanned for virus" footer at the bottom of each email. Just something that when other people are relying on you for their mail servivce, it

Re: [Qmail-scanner-general]What to do about /var/spool/qmailscn

2003-09-25 Thread Matt
A little more debugging here... find /var/spool/qmailscan -type f ! -name '*.log' ! -name '*.txt' ! -name '*.db' ! -path '*/quarantine/*' -prune -mmin +2160 that's the command it says it's running... -type f is only going to search for files.. but it's directories that are being left behind... h

Re: [Qmail-scanner-general]What to do about /var/spool/qmailscn

2003-09-25 Thread Matt
I do on both accounts... behold: [EMAIL PROTECTED] qmailscan]# /var/qmail/bin/qmail-scanner-queue.pl -z [EMAIL PROTECTED] qmailscan]# ls -l total 1392 drwx--2 qmailq qmail4096 Feb 7 2003 hercules104463600842422712 drwx--2 qmailq qmail4096 Feb 7 2003 hercules

[Qmail-scanner-general]qss 2.0.2 and QS 1.20RC3

2003-09-25 Thread Arno Slatius
Hi all, I allready upgraded to QmailScanner 1.20RC3 but the Qmail Scanners Stats got completely screwed up with that move. The QSS php code was quite simple (but horrible ugly and undocumented) so I adjusted it to work with RC3. This works for me so far (using f-prot), I haven't got any other

[Qmail-scanner-general]Re:Clamav Problem (ADDENDUM)

2003-09-25 Thread Lombardo Federico
I repoert the full error and I attach the clamav.conf: Thu, 25 Sep 2003 13:02:19 +0200:19934: run /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space =100 /var/spool/qmailscan/Caronte106448773945619934 2>&1 ERROR: Please edit the example config file /usr/local/etc/clam

[Qmail-scanner-general]1.20rc3 problems (ignoring blocked files)

2003-09-25 Thread Lombardo Federico
I've installed 1.20rc3 and, from there I've a little problems: for first it seems to recognize the blocked files, but the mail continues trought. for example I block .exe files, I send a mail with an exe and I can see from qmail-qeue that qmail-scanner analize the mail and sends it trought. The p

[Qmail-scanner-general]Clamav Problem

2003-09-25 Thread Lombardo Federico
I've a strange problem with clamav. When qmail.scanner launches it I receive: error_condition: X-Qmail-Scanner-1.20rc3: clam_scanner: ERROR: Please edit the example config file : /usrlocal/etc/clamav.conf ERROR: Can't parse configuration file the problem is that the file have correct permission

[Qmail-scanner-general](no subject)

2003-09-25 Thread Bruno Sousa \(work\)
Hi folks! I've Installed Qmail-Qscanner and a few days ago and after that I've tried to install Magic-Smtpd to enable the control of relay efficiently. However I got surprised, the installation of the Magid-smtpd, just worked like I pretend it, but the Qmail-scanner stopped to sca