.92 to 0.92.1
>
> I was running 2.01st and am now running 2.02st, thinking that it
> might be a version recognition thing too.
>
>
> On Feb 21, 2008, at 4:54 PM, Jim Maul wrote:
>
>> Tim Duncan wrote:
>>> Hi there,
>>> I just had an odd think happen
Tim Duncan wrote:
> Hi there,
>
> I just had an odd think happen and not sure where to go to look for
> an answer.
>
> I just went through the update for ClamAV 0.92.1 and after the update
> I did the obligatory
>
> /var/qmail/bin/qmail-scanner-queue.pl -z
>
> and now the text makes no men
eant to say if the current version of SA and Clamd are
> compatible with Q-S 1.25?
>
>
I know that the current clamav does not work with that qmail-scanner
because the output of clamscan -v changed. better upgrade to new
qmail-scanner for it to work properly.
-Jim
e is on this
list actively. I think I remember someone a while back who posted a
message with something about Mark being too busy to update this patch.
I dont know if he will try to come back to it or not. Maybe contact him
version is netqmail-1.05.
>
did you run:
qmail-scanner-queue.pl -g
qmail-scanner-queue.pl -z
??
-Jim
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated t
Sebastião Antônio Campos (Infojoi) wrote:
> Hi people!
>
>
>
>
>
> I use q-mail 1.03 with qmail-scanner 1.25 and I have a one problem.
>
>
>
> When my users is sending e-mail the blue bar on the outlook express
> appears and stay for a long time displaying.
>
>
>
> And some time the
Maybe try
some SARE rules? SPAM on my system regularly scores between 15-30 points.
-Jim
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make y
La Pasion Del Rio wrote:
> Hi, Where I can find the patch qms for qmail-scanner-2.01?
>
>
You cant, it doesnt exist.
http://www.qms-analog.teel.ws/
-Jim
-
Take Surveys. Earn Cash. Influence the Future o
MT wrote:
> Hello,
>
> Is it possible to use a non-integer when setting values for sa-
> delete, sa-quarantine, etc.?
>
> I'm using qms 1.25
>
>
yes.
___
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.
s without the ST patch. I dont see why this ability would
have been removed with the patch so i really dont think thats the
problem.
What are the permissions of /var/spool/qscan/ ?
-Jim
yes, maybe this is the problem:
[EMAIL PROTECTED] root]# ls -l /var/spool/qscan/
total 74896
drwxrwx
uns as qscand user but I don't like it, there is another
solution??
Yeah, the solution is to have it correctly run as the clamav user. Did
you add clamav to the qscand group? Are the permissions of ALL
directories clamav uses owned by the clamav user (log fi
time ;)
Glad you got it fixed.
-Jim
---
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1
Cristina Tanzi Tolenti wrote:
Yeah, the solution is to have it correctly run as the clamav user. Did you
add clamav to the qscand group? Are the permissions of ALL directories clamav
uses owned by the clamav user (log files, database directory, etc..)?
-Jim
Yes, I add clamav to qscand
" in emails, I dont know how to add more text in it.
You should be using spamassassin for this, not qmail-scanner.
-Jim
---
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-inte
clamav problem. What are the permissions/owner of
/var/spool/qscan/ ?? What User is clamd running as? (check clamd.conf)
Does the user that clamd is running as have permissions to scan
/var/spool/qscan/ ?
-Jim
---
This SF.Net email is spons
connect to clamd. Is clamd running? does clamdscan
work when you run it manually?
-Jim
---
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
a
7;s happen?
This has nothing to do with qmail-scanner. You should be posting this
to the SpamAssassin mailing list.
-Jim
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download th
/
-Jim
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com
-scanner. You can do this with the
st patch though.
http://toribio.apollinare.org/qmail-scanner/
Jim
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam
for
times out after 5 minutes,
causing the delivering MTA to reschedule the delivery.
Any suggestions would be appreciated!
Since you did a 'killall clamscan' i would assume you are running
clamscan and not clamd/clamdscan. You should definitely try us
ng scanned). Still,
MyTob-LI slips through. ;-)
Then submit it ;)
http://cgi.clamav.net/sendvirus.cgi
-Jim
---
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and
Samuel Murez wrote:
Hello--
I just noticed my qmail-scanner install with clamav (0.65) is letting
through Win32:Mytob-MC
Anybody know why this could be and what I could do to fix it ?
Yeah, how about update to the newest clamav? .65 is like 8 releases
behind current.
-Jim
7;hawaii','holar-i','mimail','poffer','bagle','worm.galil','mydoom','worm.sco','tanx','novarg','[EMAIL PROTECTED]','cissy','cissi','qizy','bugler','dloade'
w and probably always will be. Whenever i new
version of qmail-scanner is released, the new version of the st patch is
always shortly behind it so i wouldnt worry about them be separate.
-Jim
---
SF.Net email is sponsored by:
Tame
Rabid Weasel Lawson wrote:
On Mon, 2005-09-19 at 15:03 -0400, Jim Maul wrote:
Eric Persson wrote:
Jim Maul wrote:
http://toribio.apollinare.org/qmail-scanner/
Yes, I read some parts of that, and it seems to be mostly what I need,
but is there a user interface for the quarantine
Eric Persson wrote:
Jim Maul wrote:
http://toribio.apollinare.org/qmail-scanner/
Yes, I read some parts of that, and it seems to be mostly what I need,
but is there a user interface for the quarantine available to this patch?
Best regards,
Eric
Not that i am aware of, but the
Or is there something similar to qmail-scanners builtin quarantine?
http://toribio.apollinare.org/qmail-scanner/
-Jim
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for f
and email scanning product and thefore
usually runs as the same user that processes email. Using
qmail-scanner, this is usually qscand. I have been using clamav for
this purpose (with qmail-scanner) for over a year now with great success.
-Jim
perlscanner module.
Obviosly, Dr.WEB isn't in that text.
How can i do to add it?
That is my question.
best regards
charly
You will have to alter qmail-scanner in a way that it can use dr web. I
dont know what you're really asking here. Are you expecti
does check
to make sure those are running also.
-Jim
---
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everythin
SA. You need to pick what mirrors to use and
maybe even register?? in /home/spamd/.razor there are a ton of config
files, i believe they get created when running razor-admin? i cant
remember... check 'man razor-admin' for more inf
issue with SA itself? Is
your machine underpowered for your mail load? Maybe you should ask a
question on the SA mailing list to see if anyone can help there?
All just suggestions...
-Jim
---
This SF.Net email is sponsored by the 'Do Mor
running clamav and spamassassin. Im really
surprised you havent seen more problems..
-Jim
---
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informati
That would be a bit of a silly thing to do, because that means you just
have to change the sender address to the allowed domain and then
anybody can relay through your server.
Much better just to use SMTP authentication or by allowed IPs.
James
--
http://www.TodHost.co.uk
- WebHosting Sol
That's the problem with MX records.
They have different priorities, from 10 to 50, 10 being the highest.
Make sure server A is 10, and B is 50.
However you'll still find some emails find their way directly to B,
despite the highest priority being A.
Nothing really you can do about that besi
- Jim - wrote:
Ah, probably best not to do it then!
Just out of interest though, how would it be done if I chose to do it?
Check /var/qmail/bin/qmail-scanner-queue.pl for the lines:
#Addresses that should be alerted of any quarantined Email
my $NOTIFY_ADDRS='psender';
This te
Ah, probably best not to do it then!
Just out of interest though, how would it be done if I chose to do it?
Cheers
Jim Maul wrote:
* Jim *
wrote:
Hi,
When an email containing a virus is sent to an address on my qmail
mailserver, a virus report is CCed to [EMAIL PROTECTED
* Jim * wrote:
Hi,
When an email containing a virus is sent to an address on my qmail
mailserver, a virus report is CCed to [EMAIL PROTECTED] and I
presume (by the contents of the mail) that it should be sent to the
sender as well, but it isn't.
Is there anyway to fix this and get
Hi,
When an email containing a virus is sent to an address on my qmail
mailserver, a virus report is CCed to [EMAIL PROTECTED] and I
presume (by the contents of the mail) that it should be sent to the
sender as well, but it isn't.
Is there anyway to fix this and get it to send the virus repor
e to this setting, try
"--fix-mime 1" first
before "--fix-mime no".
If qmail-scanner is already installed, you can just edit
qmail-scanner-queue.pl and set
#Try to fix bad MIME messages before passing to MIME unp
ng message containing mail scanned
report.
Please tell me if we can have this in qmail scanner.
Qmail-Scanner doesnt do this.
-Jim
---
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter n
Todd Rittinger wrote:
Hi Jim!
Thanx so much for the suggestion. Indeed, descriptive headers was turned on. I
have now set to 0, and the test messages sent to my client seem to showing up
as expected now.
Thanx again!
cya,TR
No problem, glad to hear you got it working.
-Jim
s, but
I can't see how it's related (since no one else on the
list seems to be
having the same issue). I tried moving to 1.25st, but
the problem persists.
If no one has any suggestions, I'll move back to
1.23st and see what happens.
Do you have descriptive headers
85: error_condition: X-AVSpamfilter-1.20:
>> corrupt
>> > or
>> > unknown Fsecu
>> > re scanner error or memory/resource/perms problem - exit status 8
>> >
>> > The error message only occurs when the file is suspect. Does anyone
>> know
>>
> User clamav
>
clamav needs to run as user qscand, not clamav. This also means that you
must change anything that clamav uses to owner qscand (/var/log/clamav,
clamav db's, etc).
-Jim
>
> On Sun, 30 Jan 2005 20:17:10 -0500 (EST), Jim Maul <[EMAIL PROTECTED]> wrote:
an was:
> /var/spool/qmailscan/tmp/inmte.com11071270504931610: Access denied. ERROR
> --
> Sun, 30 Jan 2005 18:17:30 EST:1610: error_condition:
> X-Qmail-Scanner-1.25: clamdscan: corrupt or unknown clamd scanner
> error or memory/resource/perms problem - exit status 512/
when the file is suspect. Does anyone know
> what this is from? Can it be cured by adding more memory to the server?
>
>
>
I'd try to increase your softlimit first. Looks like that may be it.
-Jim
---
This SF.Net email
ps someone else that
uses the st patch can offer more info. Also, the faw at
http://qmail-scanner.sourceforge.net/FAQ.php#cs offers some good info.
> Could someone with a similiar working setup be so kind to help? I am ready
> to provide any extra information if needed.
>
>
> OK
> i upgrate clamav to latest one
>
You're using an old version of qmail-scanner. In order to use the newest
clamav, you must upgrade qmail-scanner to the latest version. 1.25 was
just released
http://qmail-scanne
lly know the lwq install, but does it really
expect you to run qmail-scanner as root? That just doesnt sound right.
-Jim
---
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&
lent_viruses_array to
my @silent_viruses_array=();
or perhaps
my @silent_viruses_array=('');
Im not much of a perl guru here ;)
-Jim
---
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of
Also note that
if you have my $force_unzip=1; in qmail-scanner-queue.pl, it will block
emails that have disallowed attachments even if they are in an attached
zip file. For example, if you block .exe files, even if you have one in
a .zip file, it will still block it. If this is
x27;0';
my $archivedir='archives';
Note that this doesnt just archive spam. It archives all mail. You If
you want just the spam, you'll have to parse this folder and pull them
out somehow. Jason suggested a cronjob that checks for X-Spam-Status:
Yes
just fine for me.
-Jim
---
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=
as it increased to the
35mb value or did you try going further than this? After installing
0.80 of clamav, i had to bump mine up to 55mb to run correctly. I'd try
bumping the softlimit up quite high TEMPORARILY and then back it down
fr
qmail-scanner Changes for 1.24. It states that QS will only
call spamc for messages bigger than 250k. Is this really true or just a
typo and its actually the exact opposite? I dont see how this would work...
Thanks,
-Jim
---
This SF.net ema
memory. That sounds exactly like a softlimit
issue. I'd check that first. What do you have it at now?
Also, check the permissions of reformime. I remember seeing some posts
where it was not able to be executed by qmail-scanner and thus failed.
o be changed as well. I'd be happy to test any of
these changes of the need be..
Thanks
-Jim
---
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give u
-Jim
---
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http
Jim Maul wrote:
Hi,
allready tried to tail syslog?
# tail -f /var/log/syslog
Messages from qmail-scanner are written to syslog not to messages.
Depending on your distro (redhat in this case i believe) syslog is
/var/log/messages so he is correct.
Pardon the reply to myself but i just realized
> Hi,
>
> allready tried to tail syslog?
> # tail -f /var/log/syslog
>
> Messages from qmail-scanner are written to syslog not to messages.
>
Depending on your distro (redhat in this case i believe) syslog is
/var/log/messages so
. Clamav should be changed to
run as this user as well. If both programs were running as qscand and
you were still having problems, then there are other issues with the
install. What are the permissions of your /var/spool/qmailscan directory?
-Jim
nt when
virus is found?
I tried just changing the variable but it doesn"t seem to do anything.
You do not have to reconfigure qmail-scanner. Since it is just a perl script
you can edit it and have the changes take affect immediately.
-Jim
---
y this which is causing you to be an open relay?
Jim
---
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challe
ck google "qmail tnef" turned up
http://summersoft.fay.ar.us/pub/qmail/tnef/
Jim
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
d
work.
Am I on the right track? Anyone have anything to add to this?
http://xoomer.virgilio.it/j.toribio/qmail-scanner/
Jim
---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Son
ve is to use the ST patch for qmail-scanner. The
patch for qmail-scanner-1.23 should be out soon (author states 8/15/2004) so
you may wish to wait until then (or just use qmail-scanner 1.22 until then)
Check out
http://xoomer.virgilio.it/j.toribio/qmail-scanner/
Hope this helps
nced the exact same thing as you
without the dupication of emails so i'd tend to believe there is some other
problem with your system as Jason pointed out earlier.
Jim
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterp
e scan should i put options
-i ?
Well I can't explain that. Q-S explicitly lowercases the file extensions
anyway before checking. You haven't forgotten to use TABS or anything have
you?
Also ensure you are running the current release (1.20)
Dont yo
notification.
Also, check out http://xoomer.virgilio.it/j.toribio/qmail-scanner/ to
be able to
(among other things) quarantine spam.
Jim
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer
8792 Aug 5 2003 /usr/bin/reformime
[EMAIL PROTECTED] root]# ls -al /usr/local/bin/reformime
-rwxr-xr-x1 root root44956 Feb 19 16:06
/usr/local/bin/reformime
Works for me.
Jim
---
This SF.Net email is sponsored by BEA Weblogic
dea. I, for one, get quite a few (legitimate) messages from people who
were just too lazy to put a description. It may not be as common for some
people, but i've seen it happen too often to be blocking them.
Just an opinion tho...
Jim
---
T
imes since i installed
qmail-scanner and its worked fine each time.
Jim
---
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top
exact same score as spamc did when running from qmail-scanner. Im not sure of
why this happens, but its just what i've seen.
Jim
---
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & T
warning it
includes is different and indeed states it is version 2.63.
What else can I check to see what I have have done wrong?
/var/qmail/bin/qmail-scanner-queue.pl -z
Jim
---
This SF.Net email is sponsored by the new InstallShield X.
From Windo
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of
> Martinez, Michael
> Sent: Tuesday, May 25, 2004 1:39 PM
> To: [EMAIL PROTECTED]
> Subject: [Qmail-scanner-general]Support for selective email notification
> based on attachment or content type
>
>
> D
> 5.8.0 previously
> with no trouble. not 100% sure of that though since it was so long ago we
> upgraded.
>
>
No problems using 5.8.0 with Q-S 1.22. I had been using 1.21 before with no
issues either.
Jim
---
This SF.Net ema
o solve this problem is either to turn on
redundant scanning in qmail-scanner (as previously mentioned by someone else
on the list) or you could set skip_text_msgs=0 in qmail-scanner-queue.pl
which will run av scanners on all messages.
Jim
---
T
s email files.
>
No, you cant! Clamscan does not read clamav.conf, only clamDscan!
> That way you don't need to alter the qmail-scanner code at all.
>
Its hardly altering code. Your just adding -m (or --mbox) to the end of the
params already in the perl file.
Jim
---
nder ONLY if it
was blocked for policy reasons (like blocking all .exe files, NOT for virus
emails).
So basically, it is possible to notify sender or recipient when their email
was blocked because of exe attachments while at the same time not notifying
when it found a virus. I believe this is the
supposed to fix this by getting the logs into a format that
mrtg can understand, but does this incorporate back into qmail-mrtg or does
it produce a seperate page of graphs for spam and virus info? How could i
go about getting this information to show up on the broken graphs in the
original qmail-
can fix it by leaving these few characters out,
>> however, I would like to know how to make it work without this change.
>> Others may want to know too.
>
> this was discussed a week or so ago.
> Just edit the configure script and escape the "@"
ly
first and then it can autolearn from that. I believe it needs 200 or so
messages in its database for autolearn to be enabled.
check the sa-learn command.
Jim
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial pres
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of
> Jason Haar
> Sent: Thursday, March 18, 2004 3:58 PM
> To: Qmail-Scanner Mailing List
> Subject: Re: [Qmail-scanner-general]Scanning body of e-mail?
>
>
> On Thu, Mar 18,
> -Original Message-
> From: CertaintyTech-Ed [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 18, 2004 12:41 PM
> To: 'Jim Maul'; 'David Rueter'
> Cc: 'Qmail-Scanner Mailing List'
> Subject: RE: [Qmail-scanner-general]Scanning body of e-m
body of the e-mail by default (or just
> attachments)?
>
> I'm just worried about this new W32/Bagle-R that doesn't use attachments:
>
> http://www.sophos.com/virusinfo/analyses/w32bagler.html
>
>
Qmail-scanner scans the body of the email as well un
real sender is using.
>
> To the admins (me for one) of busy servers, these false notifications
> become SPAM ... completely meaningless, unwanted and time consuming.
>
She is referring to the recipient here, not the potentially faked sender
address.
Jim
-
. I
suppose it could be up to clamav (and other virus scanners) to support
binhex natively but since QS supports others i thought maybe it should
support binhex as well. Any ideas on this?
this is mainly directed toward jason but anyone else who has comments is
welcome.
thanks
Jim Maul
Eastern
such,
can not decode binhex messages. Does qmail-scanner have support for binhex?
Is there something else thati have to do to get it to recognize it?
Thanks
Jim Maul
Eastern Long Island Hospital
---
SF.Net is sponsored by: Speed Start Your
89 matches
Mail list logo
