ool/qmailscan/tmp/guildenstern10962973144791836/Doll.scr: Worm.Bagle.AG.2 FOUND
I mailed Jason about that, so I guess he will fix it.
Until then you might change to
my $clamdscan_options="--disable-summary";
Alex
--
Alex Pleinerzeitform Internet Dien
QUEUE patch (and the ERRNO patch needed by
the OP).
Alex
[1] http://www.qmail.org/netqmail/
--
Alex Pleiner
zeitform Internet Dienste OHG Fraunhoferstr. 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6151 155-635
mailto:[EMAIL PROT
does not help in
real world scenarios.
I currently recommend BAD_MIME_CHECKS=1 to avoid false positives.
> User-Agent: Microsoft-Entourage/9.0.2509 <- (WTF is this?)
That's "Outlook" for the Mac.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
;
$BOUNDARY_REGEX =~ s/(^\||\|$)//;
&debug("w_c: now that \"$delete_bb\" has been removed, it's
\"$BOUNDARY_REGEX\"...");
}
$attachment_counter++;
#&debug("w_c: found :$BOUNDARY_REGEX: - must be attachment section
$attachment_counter&
mean the same dev machine you are testing new versions of
vpopmail and qmail-scanner.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6151 155-635
mailto:[EM
ost a patch for current
vpopmail or at least some instrcutions somewhere within the FAQ?
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6151 155-635
mai
Is this normal ?
No. Did you apply the patch to a fresh source dir or have you applied
other patches before?
If patching fails you still can change Makefile by hand. This is what
you must do if you applied other patches before.
Alex
--
Alex Pleiner
zeitform Internet Dienst
ot file types.
So you can't say: "block *.exe files" but "block attachments that start
with TVqQAAMAA in base64". We reject a lot of virus mails before they
even come near the virus scanner.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
t notifying sender or recipient. But again, checking
my logs, only a small amount of mails containing .pif are valid, so I
live with it.
Thanks for clarification
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
h
just my $.02
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6151 155-635
mailto:[EMAIL PROTECTED]Fax: +49 (0)6151 155-634
GnuPG/P
r unknown
> ClamAV scanner error or memory/resourc
> e/perms problem - exit status 2
What does the log file of clamd say?
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deT
sable sender notification unless you are very
up-to-date with your silent-viruses. Sender notification hurts more than
it helps nowadays. Read
http://www.attrition.org/security/rant/av-spammers.html for detailed
explanations.
Hope this helps,
Alex
--
Alex Pleiner
zeitform Internet Dienste
* Andrej T. <[EMAIL PROTECTED]> [2004-02-23 19:14]:
> Alex Pleiner wrote:
> >Read the FAQ at http://qmail-scanner.sourceforge.net/FAQ.php
> >(Section: Content-Scanner Issues, Items 14 and 15).
> >If you want your SA headers, you will need to configure Q-S to
(Section: Content-Scanner Issues, Items 14 and 15).
If you want your SA headers, you will need to configure Q-S to use
verbose_spamassassin.
Good luck
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http
are older than 5.3.2x (read twenty-something)
need an additional patch some lines above:
- while ( fgets(TmpBuf1, 100, fs ) != NULL ) {
+ while ( fgets(TmpBuf1, 150, fs ) != NULL ) {
You may see if you need it, if the lines in "open-smtp" are truncated.
You might also re
/bin/sh
a=no
ARCHIVEIT="1"
if [ "$a" != "" -a "`echo $a|grep '\-'`" = "" ] ; then
#shift
if [ "`echo $a|egrep -i '^0|^no'`" != "" ]; then## "no" is matched
ARCHIVEIT=&qu
der!
19/09/2003 12:47:00:1795: p_s: checking for objects containing subject:
(?i).*\bcum\b.*
19/09/2003 12:47:00:1795: p_s: something to block! (Test Subject for cum)
The Content-Type is needed as Q-S skips scanning if text/plain
A bit confused now
Alex
--
Alex Pleiner
zeitform In
ted (I mean the usage of \\)
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6151 155-635
mailto:[EMAIL PROTECTED]Fax: +49 (0)6151 15
ting the imaginary char
acters off the beginning and end of the string as matching
a "\W".
HTH,
alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.de
descriptions
where they are necessary to understand the purpose of the notification.
No need to change Q-S code.
Hope this helps.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.de
ge (2 lines)
http://alex.zeitform.de/qmail/vpopmail/vpopmail-5.3.20-qmailqueue-zf.patch
I guess you can get the idea.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.deTel.: +49 (0)6
cy (use ZIP if sending binary files) and
catches most of the viruses. All mails that sneak through are fed to
some AV to catch the viruses and finally to perlscanner to enforce the
policy.
Result: The incoming rate of Sobig.f dropped from 5 per minute to 5 per
day (those were bounces *with* the attachment)
l the virus/problem
descriptions are English only and make notification mails look
horrible mixed and ugly. I guess it's too late for a feature request
like that for the 1.20 release. Never mind.
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhofe
23 matches
Mail list logo
