[Qmail-scanner-general]QS not getting 'real' source IP

2004-01-27 Thread Ken Ironside
Hi, I am a comparative Linux newbie. I have a five-pc network which has a Linux RH9 server providing file (SAMBA), printing, DNS and mail services to the mixed Linux or Windows clients, all served by a DSL router & ADSL. I collect mail from my ISP's POP3 server via fetchmail which delivers to

[Qmail-scanner-general]Re: archive unique mail id suggestion..

2004-01-27 Thread tbsky
hi: and if i use old style id. ( just "time" . "." . "pid"), will any bad thing happen?? thanks a lot for help!! Best Regards, tbsky > hi: >older versions of qmail-scanner make unique mail id by >"time" + "pid", qmail-scanner 1.20 uses time + __LINE__ + pid. >can we add a

Re: [Qmail-scanner-general]Deletion based on header

2004-01-27 Thread Salvatore Toribio
At 23:53 + 22-01-2004, Andrew Cranson wrote: Anthony Baratta said: At 03:19 PM 1/22/2004, Andrew Cranson wrote: As far as I can tell that patch only allows deletion based on a global rule, I was looking for something that would find the "X-Spam-Status: Yes" header out and delete anything wit

[Qmail-scanner-general]archive unique mail id suggestion..

2004-01-27 Thread tbsky
hi: older versions of qmail-scanner make unique mail id by "time" + "pid", qmail-scanner 1.20 uses time + __LINE__ + pid. can we add a dot between each elements like before? eg: time . __LINE__ . pid. so we can easily analyze it. thanks!! Best Regards, tbsky --

[Qmail-scanner-general]spamc user

2004-01-27 Thread Trey Nolen
OK, I'm finally getting around to 1.20. We are actually having a problem with 1.16, but I know better than to ask a question while still on that older version. ;-) I'll get to that question after I make sure 1.20 doesn't fix it. Anyway, I see in the README or CHANGES (yes, I read them) that spa

RE: [Qmail-scanner-general].zips & blocked attachments - unique q uestion

2004-01-27 Thread Elliott Freis
I think you meant --unzip no In either case, I didn't realize the two were separate, thought that --unzip just meant use my scanner's unzip or not. Now that I looked at the code a little more closely, I see that it is to use its own unzip instead. That's what I get for being lazy! Problem solve

RE: [Qmail-scanner-general].zips & blocked attachments - unique question

2004-01-27 Thread CertaintyTech-Ed
./configure --unzip yes Then make sure you have an av scanner that can catch viruses inside zip files without having to unpack them. --- Ed > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Elliott Freis > Sent: Tuesday, January 27, 2004 7:03 PM

[Qmail-scanner-general].zips & blocked attachments - unique question

2004-01-27 Thread Elliott Freis
I would like qmail-scanner to unzip attachments and look for viruses, but NOT unzip and match for extensions. In other words: A message containing a .exe is blocked A message with .zip containing a virus is blocked A message with .zip containing a .exe is NOT blocked It would seem qmail-scanner w

Re: [Qmail-scanner-general]clamuko: Can't access the file ERROR

2004-01-27 Thread Assured Computing
Hi, I had a similar problem and the advice I got was: chmod 777 /var/spool/qmailscan -R That error went away after that. Clamav is giving me other errors now that I'll have to deal with later. I hope this helps Bob Kieran ([EMAIL PROTECTED]) wrote: > >I've been trying to fix this for most of tod

Re: [Qmail-scanner-general]Permission denied

2004-01-27 Thread Rick Macdougall
Justyn Kemple wrote: I had the same problem myself actually. Not to sure if its a issue with Slackware or whatnot. >The odd thing is I have used qmail-scanner on a few Slackware boxes and sometimes it works with qscand >owning it and sometimes it doesent. I have heard that there were a few Sl

Re: [Qmail-scanner-general]Permission denied

2004-01-27 Thread Justyn Kemple
I had the same problem myself actually. Not to sure if its a issue with Slackware or whatnot. The odd thing is I have used qmail-scanner on a few Slackware boxes and sometimes it works with qscand owning it and sometimes it doesent. I have heard that there were a few Slackware Qmail HOWTOs floating

[Qmail-scanner-general]two questions - list archives and clamav

2004-01-27 Thread Matt Kunze
first, is this list archived anywhere? I apologize if my second question was answered five minutes ago, but since I just joined the list I cannot see any old messages. Second, qmail-scanner has recently stopped working with ClamAV. It seems like maybe the virus database has finally hit a size l

[Qmail-scanner-general]clamuko: Can't access the file ERROR

2004-01-27 Thread Kieran
I've been trying to fix this for most of today and don't seem to be getting anywhere. Using netqmail-1.04, qmail-scanner 1.20 and clamav 0.65. Virus laden messages are being let through because clamdscan can't read the files within /var/spool/qmailscan/tmp/ scanloop: starting scan of directory

[Qmail-scanner-general]Clamuko on remote host

2004-01-27 Thread Adam Goryachev
Hi all, Further to my message that I sent earlier regarding how to have clamd on a separate machine to the mail server I have discovered/done the following. Before I put this 'tested/works for me' code into production, I would like to ask others if it sounds reasonable to do it this way... Firstl

Re: [Qmail-scanner-general]Permission denied

2004-01-27 Thread Assured Computing
Hi, This worked except now I'm getting the error: X-Qmail-Scanner-1.20:[luke107521975046116131] clamuko: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 2 so I'm off in search of the answer to that. Thanks Justyn Kemple ([EMAIL PROTECTED]) wrote: > >I had th

RE: [Qmail-scanner-general]Notifications

2004-01-27 Thread James Herschel
Well, unfortunately, since we've just recently rolled this out, we're not turfing emails with sa_delete/sa_reject just yet. That said, I'm sure I'll eliminate many, many bounces when we implement it. I guess what I'm looking for is confirmation that this is basically a necessary evil and that the

[Qmail-scanner-general]QS not getting 'real' source IP

2004-01-27 Thread Ken Ironside
Hi, I am a comparative Linux newbie. I have a five-pc network which has a Linux RH9 server providing file (SAMBA), printing, DNS and mail services to the mixed Linux or Windows clients, all served by a DSL router & ADSL. I collect mail from my ISP's POP3 server via fetchmail which delivers to qmai

Re: [Qmail-scanner-general]AVP 5, partialy

2004-01-27 Thread Mandy
I did it this way. Here it works ;-) replace the sub-avp.pl with the following one : for compiling i use the following trick. cp /opt/avp/kavscanner /bin/kavscanner so the avp is found ;-) and everthing works fine. If you try it out. Take care for the $DD. There needs to be /* behind the tempdir

[Qmail-scanner-general](no subject)

2004-01-27 Thread Ken Ironside
--- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___

Re: [Qmail-scanner-general]Permission denied

2004-01-27 Thread Assured Computing
Hi, Sorry, my first reply went to Ryan instead of the list. I'll try it again: I guess qmail-scanner isn't running as qscand because changing the owner to qscand didn't work. ps auxf doesn't show qmail-scanner in the list. How can I tell how qmail-scanner is running? Here is /var/qmail/supervis

[Qmail-scanner-general]hostname call

2004-01-27 Thread Mark Powell
Hi, Is there any reason that the hostname cannot be discovered with: use Sys::Hostname; my $hostname = hostname; rather than being hardcoded. When a new virus comes along (like ClamAV's Worm.SCO.A today) that I have to add to @silent_viruses_array, it's a pain when duplicating this to other mac

Re: [Qmail-scanner-general]New AVP Version *grr

2004-01-27 Thread Oden Eriksson
måndagen den 26 januari 2004 18.43 skrev Mandy: > Hi Group. > > I'm going to hell with Kaspersky ;-) > Today my Mailserver stops the Mailscanning :-( I don't know why. This is unrelated but I thought it may be of interest. About one year ago I bought their AV for Linux 4.0.3.x (about $50), and a

Re: [Qmail-scanner-general]AVP 5, partialy

2004-01-27 Thread Mandy
hi same problem here :-( the fault is in if ($DD =~ /\n[\s|] (LINFECTED) (.*)\n/) { I'm trying to probe some other lines. the sub-fprot looks nice for me. If i have some news, i'll tell you mandy Peter Mikeska wrote: Hi, I get also new AVP 5 , vith kavscaner its working I also try make it w

Re: [Qmail-scanner-general]AVP 5, partialy

2004-01-27 Thread Mandy
hi same problem here :-( the fault is in if ($DD =~ /\n[\s|] (LINFECTED) (.*)\n/) { I'm trying to probe some other lines. the sub-fprot looks nice for me. If i have some news, i'll tell you mandy Peter Mikeska wrote: Hi, I get also new AVP 5 , vith kavscaner its working I also try make it w

Re: [Qmail-scanner-general]Deletion based on header

2004-01-27 Thread Salvatore Toribio
At 20:34 + 26-01-2004, Andrew Cranson wrote: > Hi Andrew I think it will be possible with a little modification of my patch, the idea is to use sa_delete as a relative value, for example: sa_delete = required_hits + 2 ($sa_delete=$sa_max + 2;) But I don't understand one thing. Do

Re: [Qmail-scanner-general]Notifications

2004-01-27 Thread Salvatore Toribio
At 11:59 -0500 26-01-2004, James Herschel wrote: Hopefully this hasn't been asked a hundred times ... Basically, I've got qmail-scanner set up to send notifications to sender and admin so that remote users know if their email gets stopped by qmail-scanner. Using: SA 2.61 QS 1.20st ClamAV 0.65 Qmail

[Qmail-scanner-general]AVP 5, partialy

2004-01-27 Thread Peter Mikeska
Hi, I get also new AVP 5 , vith kavscaner its working I also try make it work with aveclient/server first of all, scanning with daemon version is about 5 time faster on single email second I make it work but I have lack of knowledge of perl ;(( so, I can get it through scanner, get back message th