Re: [Qmail-scanner-general]about SPF

2005-04-11 Thread Arvinn Løkkebakken
Oops.. sorry. That one was supposed to be sent to the SA-list. Arvinn --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. S

[Qmail-scanner-general]about SPF

2005-04-11 Thread Arvinn Løkkebakken
I have two questions about the SPF plugin in SA. What is the difference between FAIL and SOFTFAIL on Helo? When running SA with bayes and network FAIL scores close to zero while SOFTFAIL gives a solid 3.1. Does FAIL hit a lot of ham? According to my stats, SPF_HELO_FAIL gets triggered about as o

Re: [Qmail-scanner-general]missing header in quarantine

2005-02-23 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: At 9:08 +0100 23-02-2005, Arvinn Løkkebakken wrote: Kyle Wheeler wrote: In a shell script, you mean? Nah, it's easy - qmail-scanner always adds 6 lines to the end of the mail, so if you're processing the mail itself, just look for X-Qmail-Scanner-Mail-From a

Re: [Qmail-scanner-general]missing header in quarantine

2005-02-23 Thread Arvinn Løkkebakken
Kyle Wheeler wrote: In a shell script, you mean? Nah, it's easy - qmail-scanner always adds 6 lines to the end of the mail, so if you're processing the mail itself, just look for X-Qmail-Scanner-Mail-From and X-Qmail-Scanner-Rcpt-To in the last 6 lines. Something like: cat mailfile | tail -

Re: [Qmail-scanner-general]missing header in quarantine

2005-02-22 Thread Arvinn Løkkebakken
Jason Haar wrote: Arvinn Løkkebakken wrote: Is there a reason for that Return-Path are not included in messages put in quarantine? Yes. Return-Path is added by a LDA - and Qmail-Scanner isn't a LDA :-) Oh, I didn't realize that. Thanks :) BTW: The "mail from" and "

[Qmail-scanner-general]missing header in quarantine

2005-02-21 Thread Arvinn Løkkebakken
Is there a reason for that Return-Path are not included in messages put in quarantine? Arvinn --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products tr

[Qmail-scanner-general]a minor debugging log?

2004-12-09 Thread Arvinn Løkkebakken
While looking around in the qmail-queue.log file I found what a belive is a minor bug in the logging feature: Day, DD Mon HH:MM:SS CET:pid: w_c: disallowed breakage found in header name (This is a multi-part message in MIME format. ) - potential virus Shouldn't be a \n before ") - potentia

Re: [Qmail-scanner-general]weird counts (st 1.24)

2004-12-09 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: At 13:58 +0100 9-12-2004, Arvinn Løkkebakken wrote: I guess I have a flaw in my system configuration. The numbers from my logs doesn't make sense. Total received mails on a recent given "low-volume-ham-day" was: 16707 (counting lines from qmail-queue.log c

[Qmail-scanner-general]weird counts (st 1.24)

2004-12-09 Thread Arvinn Løkkebakken
I guess I have a flaw in my system configuration. The numbers from my logs doesn't make sense. Total received mails on a recent given "low-volume-ham-day" was: 16707 (counting lines from qmail-queue.log containing "from='.*<[EMAIL PROTECTED]>', subj='.*', via SMTP from ") Total received mails on

Re: [Qmail-scanner-general]Version 1.24st patch 20041101

2004-11-03 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: If a mail from a local user is blocked it will be notified to the 'admin' even with 'nmladm' or 'nmlvadm' selected. The string 'LOCAL USER' is added to the subject of the notification, it would need to be localized in the future... (suggested by Nerijus Baliunas) Is it po

Re: [Qmail-scanner-general]logfiles return different values of qurantined messages (1.23st)

2004-11-01 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: Maybe I found it. Messages with a 'disallowed attachment assosiated with unrelated MIME type' can be quarantined as spam, but I added a check (I don't remember why) that stops the spamassassin routine of setting the quarantine_description if it already exists, so in the

Re: [Qmail-scanner-general]logfiles return different values of qurantined messages (1.23st)

2004-10-26 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: At 11:40 +0200 26-10-2004, Arvinn Løkkebakken wrote: How do you guys explain this? # grep "SA: yup, this smells like SPAM - hits=.*\.. - quarantining message\.\.\." qmail-queue.log | wc -l 9865 # grep "SPAM exceeds" quarantine.log | wc -l 9634 # The

[Qmail-scanner-general]logfiles return different values of qurantined messages (1.23st)

2004-10-26 Thread Arvinn Løkkebakken
How do you guys explain this? # grep "SA: yup, this smells like SPAM - hits=.*\.. - quarantining message\.\.\." qmail-queue.log | wc -l 9865 # grep "SPAM exceeds" quarantine.log | wc -l 9634 # These two log-files are for the exactly same 24 hours as they use the same log rotation scheme. Arvi

Re: [Qmail-scanner-general]monitoring auto-learning with QS and fast_spamassassin

2004-09-15 Thread Arvinn Løkkebakken
Salvatore Toribio wrote: At 10:29 +0200 15-09-2004, Arvinn Løkkebakken wrote: Sorry about that. To make it clear; I'll rephrase the question; If possible, how can I monitor wether a spam message got learned or not by bayes_auto_learn using the fast_spamassassin mode. Arvinn Enable debu

Re: [Qmail-scanner-general]monitoring auto-learning with QS and fast_spamassassin

2004-09-15 Thread Arvinn Løkkebakken
Sorry about that. To make it clear; I'll rephrase the question; If possible, how can I monitor wether a spam message got learned or not by bayes_auto_learn using the fast_spamassassin mode. Arvinn --- This SF.Net email is sponsored by: thawte's

[Qmail-scanner-general]monitoring auto-learning with QS and fast_spamassassin

2004-09-14 Thread Arvinn Løkkebakken
Hi. This is the qmail-send program at mailscan2.newmedia.no. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>: 66.35.250.206 failed after I sent the message. Remote host said: 550-Thi

[Qmail-scanner-general]SA doing lookups on SMTP client hosts

2004-08-03 Thread Arvinn Løkkebakken
Is it possible to have Q-A make SA look up the right ip-addresses against the RBL's when not using Q-S on my front-end servers? My situation now is that all incoming mail to my Q-S relay come from two different front-end servers, hence SA will look up my own hosts, right? Arvinn

[Qmail-scanner-general]disallowed MIME header

2004-07-26 Thread Arvinn Løkkebakken
Hi. As I am the postmaster of a server with qmail-scanner I get an email everytime there is a mail beeing quarantined because of policy. That's how I sconfigured it. However, there is one serious problem I discovered: A considerable big amount of legitimate mail are beeing quarantined by Q-S wit

Re: [Qmail-scanner-general]the warning messages

2004-07-16 Thread Arvinn Løkkebakken
Jim Maul wrote: Quoting Arvinn Løkkebakken <[EMAIL PROTECTED]>: Hi. I have setup qmail-scanner on FreeBSD using the to ports installation. I put in my parameters and left the rest be default. From qmail-scanner-queue.pl I find that these are the parameters that has been used for my instal

[Qmail-scanner-general]the warning messages

2004-07-16 Thread Arvinn Løkkebakken
Hi. I have setup qmail-scanner on FreeBSD using the to ports installation. I put in my parameters and left the rest be default. From qmail-scanner-queue.pl I find that these are the parameters that has been used for my installation: # ./configure --spooldir /usr/local/qmailscan --qmaildir /var/q