On Tue, 2005-08-23 at 23:40 +0200, AndrĂ¡s DORN wrote:
> Hi,
>
> Finally I could manage my problem. I had to change the user to qscand in
> the
> /etc/clamav/clamd.conf
> /etc/clamav/freshclam.conf
> and use
> chown -R qscand:qscand /var/run/clamav
> So the Acces denied problem has been solved, an
ALL emails (incoming or outgoing) which have RC set
(ie, we 'trust' this user) and also claim to be from an domain for which
we have an appropriate encryption key.
Initially simply checking for a valid key on incoming mail could be
useful though...
Regards,
Adam
--
--
Adam Goryach
tand you are pissed off, so should I be, since multiple
of my customers regularly are affected by these things where they will
get a few hundred to a few thousand such messages. I get them so often,
that I don't even notice it anymore but, let's
On Thu, 2005-06-09 at 15:59 +1200, Jeremy Bowen wrote:
> On Thursday 09 June 2005 3:34 pm, Adam Goryachev wrote:
> > On Thu, 2005-06-09 at 14:58 +1200, Jeremy Bowen wrote:
> > > I know Exchange does this but I wasn't aware that the default qmail
> > > installation
On Thu, 2005-06-09 at 14:58 +1200, Jeremy Bowen wrote:
> On Thursday 09 June 2005 11:20 am, Jason Haar wrote:
> > Jeremy Bowen wrote:
> > "ignorant mail-admins" just about defines every standard Qmail install
> > out there. That's exactly what Qmail does (and Exchange BTW).
>
> I know Exchange doe
On Tue, 2004-11-23 at 18:57, Jason Haar wrote:
> Justin Fielding wrote:
>
> > I am suffering from dictionary spam attacks causing qmail-scanner with
> > clamav and SA to overload the servers memory and now and then crash
> > it. When the spammer connects and starts firing off all these emails,
On Sat, 2004-08-14 at 09:42, Sean Kennedy wrote:
> Mark Turner wrote:
>
> >Is there any way to tie in qmail scanner/qmail and IPTables together so
> >that if a spammer hammers your connection even though they are being
> >denied, IPTables blocks them permanently or for a specified ammount of
> >ti
Maybe all you needed to do was:
chmod ug-s reformime
Some installs make it setuid root, which AFAIK, it should never be.
Regards,
Adam
On Tue, 2004-07-13 at 04:26, Steve Ritacco wrote:
> Ok, the problem was /usr/bin/reformime
>
> when qmail-scanner runs it to unpack the email it puts everything
On Fri, 2004-05-14 at 07:58, Jason Haar wrote:
> On Thu, May 13, 2004 at 03:07:40PM +1000, Adam Goryachev wrote:
> > There are some dis-advantages that should be considered, which don't
> > seem to have been noticed yet. Namely, *IF* a worm sent it's message
> >
t as well as
bounce the email.
Of course, the default settings would be to continue as-is.
IMHO, over time, we will see more and more AV enabled SMTP servers, and
more and more of them will bounce emails rather than accepting them and
causing just as much headache by sending out
[EMAIL PROTECTED] <> wrote:
> Adam Goryachev wrote:
>> [EMAIL PROTECTED] <> wrote:
>>> (Doug: as far as the "-m" option WRT ClamAV goes - let me have a
look at
>>> that - it's a separate, specific issue)
>> I would suggest against addi
and bugs. In fact, there was some sort of bug/hole found in
that code just last week (or maybe the week before)...
Regards,
Adam
--
Adam Goryachev
Website Managers
Ph: +61 2 9345 4395[EMAIL PROTECTED]
Fax: +61 2 9345 4396
qmail-scanner to a different preprocessor.
>
> Kind of a "post" preprocessing preprocessor. Say that 3 times fast.
--
Adam Goryachev
Website Managers
Ph: +61 2 9345 4395[EMAIL PROTECTED]
Fax: +61 2 9345 4396www.websitemanag
+ if(write(wsockd, buff, bread) <= 0)
+ {
+ mprintf("@Can't write to the socket.\n");
+ close(wsockd);
+ return 2;
+ }
+ }
+ if(myfileno)
+
fairly
capable with perl, and mildly capable with C. I will of course share the
modifications once I have something working, at the moment it is a bit
of a mess...
Regards,
Adam
--
Adam Goryachev
Website Managers
Ph: +61 2 9345 4395[EMAIL PROTECTED]
Fax: +61
+ attachments to clamd on a remote machine, which will scan
for viruses, before returning a result. Qmail-scanner will then either
continue or quarantine as normal.
So, in short, can I get qmail-scannel to use clamdscan and which uses
clamd on a remote machine?
Regards,
Adam
--
Adam Goryachev
Two things I can think off from the top of my head while going over that
document. They are more correctly defined as feature requests...
Instead of using a single regexp to define local domains, you could use any
one of the following:
file, array, hash, or function (function being especially the
> Oh yes - you're right there. In that case Q-S would crash due to an
> out-of-memory error and tempfail wouldn't get called - so there would be
> debris... I call that a feature ;-)
Sorry, I promise this is my last message on this point!
Is it possible to guard against this scenario ?
ie, let's
> On Mon, Apr 22, 2002 at 09:07:57AM +1000, Adam Goryachev wrote:
> > > Q-S doesn't leave the temp files lying around - you'd run out
> > > of disk space in no time! :-)
> > On a tempfail return code, qmail-scanner leaves both the temp
> > files
> On Sat, Apr 20, 2002 at 06:14:56PM +0200, Nerijus Baliunas wrote:
> > Hello,
> >
> > I sent 3 MB size file named 'asdfg'. qmail-queue.log shows that
> message was delivered 2 times,
> > but recipient got only one. If qmail delivered only message of
> 2nd attempt, why qmail-scanner
> > scanned me
> On Mon, Apr 22, 2002 at 07:37:42AM +1000, Kenneth wrote:
> > Hi all,
> >
> > I recently could not find the scanner result
> > files under /var/spool/qmailscan/
>
> It doesn't store it there!
>
> See the Email you would have been sent as the admin - it says the original
> message is stored under
21 matches
Mail list logo