RE: [Qmail-scanner-general]is it possible to deliver mails with virus instead of quarantine?

2004-04-07 Thread Will Saxon
> is it possible to deliver a Mail with Virus instead of > putting it into quarantine? McAfee Groupshield for Exchange seems like it could be configured to do this, but they warn against it. There is no good reason to configure an email virus scanner in this manner. Anyone arguing the contrar

Re: [Qmail-scanner-general]is it possible to deliver mails with virus instead of quarantine?

2004-04-07 Thread Chittaranjan Mandal (w/CSE & SIT)
[Reply to message from "Jason Haar" on Thursday 08 Apr 2004 3:07 am] > > is it possible to deliver a Mail with Virus instead of putting it into > > quarantine? > > No. Never. Sorry, but that is a fundamental component. An AV system must > stop viruses from reaching the recipient. Some filters del

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Jason Haar
On Wed, Apr 07, 2004 at 08:14:50PM -0400, Cees Hek wrote: > According to the perlsec docs, suidperl should not be called directly as > it is currently done in qmail-scanner. perl will automatically call > suidperl if it sees that the perl script has the suid bit set. Humph. That was only done i

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Cees Hek
Jason Haar wrote: On Wed, Apr 07, 2004 at 03:51:20PM -0400, Jamie Pratt wrote: I cant find that error message in the regular perl src for 5.8.3, but i did find this patch file on the web for 5.9.1 - is your suidperl binary setuid root, as well as qmail-scanner-queue.pl? Well I'm running Q-S un

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Jason Haar
On Wed, Apr 07, 2004 at 03:51:20PM -0400, Jamie Pratt wrote: > I cant find that error message in the regular perl src for 5.8.3, but i > did find this patch file on the web for 5.9.1 - is your suidperl binary > setuid root, as well as qmail-scanner-queue.pl? Well I'm running Q-S under Fedora - w

Re: [Qmail-scanner-general]is it possible to deliver mails with virus instead of quarantine?

2004-04-07 Thread Jason Haar
On Wed, Apr 07, 2004 at 09:21:27PM +0200, Cros wrote: > Hi all, > > is it possible to deliver a Mail with Virus instead of putting it into > quarantine? No. Never. Sorry, but that is a fundamental component. An AV system must stop viruses from reaching the recipient. I know of no product that d

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Niek Baakman
Hendrik Schaink wrote: Starting 2 days ago, on our Debian sarge (testing) mail server (qmail + qmail-scanner + SpamAssassin) we appear unable to scan for viruses and spam following a Perl maintenance upgrade from 5.8.3-2 to 5.8.3-3. We receive this error message: "suidperl needs fd script". Goo

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Cees Hek
Hendrik Schaink wrote: Starting 2 days ago, on our Debian sarge (testing) mail server (qmail + qmail-scanner + SpamAssassin) we appear unable to scan for viruses and spam following a Perl maintenance upgrade from 5.8.3-2 to 5.8.3-3. We receive this error message: "suidperl needs fd script". Goog

Re: [Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Jamie Pratt
I cant find that error message in the regular perl src for 5.8.3, but i did find this patch file on the web for 5.9.1 - is your suidperl binary setuid root, as well as qmail-scanner-queue.pl? regards, jamie From: http://aspn.activestate.com/ASPN/Mail/Message/perl5-porters/2028836 +#ifdef IAMSUI

[Qmail-scanner-general]is it possible to deliver mails with virus instead of quarantine?

2004-04-07 Thread Cros
Hi all, is it possible to deliver a Mail with Virus instead of putting it into quarantine? would be nice to have a option which just adds some headers like X-Qmail-Scanner: 1.21 (f-prot: 4.4.1/3.14.11. virus Found. Processed in 0.264887 secs) Virus-Description: EICAR_Test_File delivers it, and

[Qmail-scanner-general]Error "suidperl needs fd script"

2004-04-07 Thread Hendrik Schaink
Starting 2 days ago, on our Debian sarge (testing) mail server (qmail + qmail-scanner + SpamAssassin) we appear unable to scan for viruses and spam following a Perl maintenance upgrade from 5.8.3-2 to 5.8.3-3. We receive this error message: "suidperl needs fd script". Googling did not yield any

[Qmail-scanner-general]re: qmail-scanner 1.20 and ClamAV/Quarantine logs

2004-04-07 Thread B.K. DeLong
Not sure if this got lost in the shuffle or what. Where is the rotation of the quarantine.log file specified? I need to figure out why the file keeps overwriting itself so I can maintain a full log of what's in my quarantine. Otherwise, I'm going to have to rescan the whole dir every so often.

Re: [Qmail-scanner-general]qmail-scanner problem

2004-04-07 Thread Jesús Arnáiz
Alex Pleiner wrote: * Jesús Arnáiz <[EMAIL PROTECTED]> [2004-04-07 13:50]: Don't do this, as you lose the benefits. Instead open vpopmail.c in your editor and add QMAILQUEUE=/path/to/qmail-scanner.pl to the line that writes the open-smtp file (Hint: search for RELAYCLIENT). Recompile. Doing t

Re: [Qmail-scanner-general]qmail-scanner problem

2004-04-07 Thread Alex Pleiner
* Jesús Arnáiz <[EMAIL PROTECTED]> [2004-04-07 13:50]: > >Don't do this, as you lose the benefits. Instead open vpopmail.c in your > >editor and add QMAILQUEUE=/path/to/qmail-scanner.pl to the line that > >writes the open-smtp file (Hint: search for RELAYCLIENT). Recompile. > >Doing this, roamin

Re: [Qmail-scanner-general]qmail-scanner problem

2004-04-07 Thread Jesús Arnáiz
Don't do this, as you lose the benefits. Instead open vpopmail.c in your editor and add QMAILQUEUE=/path/to/qmail-scanner.pl to the line that writes the open-smtp file (Hint: search for RELAYCLIENT). Recompile. Doing this, roaming users get QMAILQUEUE set correctly. But, I understand that the bene

Re: [Qmail-scanner-general]hits=? in qmail-queue.log

2004-04-07 Thread Salvatore Toribio
At 10:27 +0200 7-04-2004, Andrej Trobentar wrote: Andrej Trobentar wrote: Hello, I don't know why this happens, but on some messages it seems that QS (or SA maybe?) can't determine required hits and the message isn't passed to spamc (according to /var/log/spamd/current). Here's one of this weir

Re: [Qmail-scanner-general]qmail-scanner problem

2004-04-07 Thread Alex Pleiner
* Chris Stone, MCSE <[EMAIL PROTECTED]> [2004-04-07 02:53]: > Jesús Arnáiz said: > > I'm experiencing some new problems with QS (qmail + clamav + > > qmail-qfilter + spamassassin on FreeBSD). > > It seems to works fine with local mails, but mail which comes from > > outside (other servers) never a

Re: [Qmail-scanner-general]hits=? in qmail-queue.log

2004-04-07 Thread Andrej Trobentar
Andrej Trobentar wrote: Hello, I don't know why this happens, but on some messages it seems that QS (or SA maybe?) can't determine required hits and the message isn't passed to spamc (according to /var/log/spamd/current). Here's one of this weird log entries : [] Really nobody knows? "grep

Re: [Qmail-scanner-general]qmail-scanner on one machine and AV on another?

2004-04-07 Thread Niek Baakman
Daniel Duclos wrote: Hello. Is it possible for me to run a qmail+Qmail-Scanner on a machine calling an AV running on another machine? I explain: I have one machine running a qmail+vpopmail+qmailadmin just fine. The machine does not have enough resources (CPU+RAM) to run qmail-sac

Re: [Qmail-scanner-general]qmail-scanner problem

2004-04-07 Thread Jesús Arnáiz
Chris Stone, MCSE wrote: Jesús Arnáiz said: I'm experiencing some new problems with QS (qmail + clamav + qmail-qfilter + spamassassin on FreeBSD). It seems to works fine with local mails, but mail which comes from outside (other servers) never arrives and there is no error to the sender or anythin

Re: [Qmail-scanner-general]qmail-scanner on one machine and AV on another?

2004-04-07 Thread Mandy
if you use a client-server scanner like clamd it should work (not tested) i know in kaspersky there is a socketfile called /var/run/aveserver so you can try a nfsmount to the socket and call the client to use use it. then scanner is done by the other maschine. if clamd also provides a socket, i

Re: [Qmail-scanner-general]Spamd

2004-04-07 Thread David Wilson
Title: Re: [Qmail-scanner-general]Spamd Thanks Salvatore. I'm impressed with the way this is now working. Thanks for all your help.   Kindest regardsDavid Wilson   D c D a t a Tel +27 33 342 7003Fax +27 33 345 4155Cell +27 83 267 7500http://www.dcdata.co.za[EMAIL PROTECTED][EMAIL PROTECTED]KZN

Re: [Qmail-scanner-general]Spamd

2004-04-07 Thread Salvatore Toribio
Title: Re: [Qmail-scanner-general]Spamd At 8:34 +0200 7-04-2004, David Wilson wrote: Hi guys/girls,   Thanks for your assistance with netqmail and qmail-scanner. Everything appears to be working nicely now. One last couple of questions. For qmail-scanner, should spamd be running as root or should