Re: [Qmail-scanner-general] Taps Control file alternative

2016-01-28 Thread Jason Haar
27;t do it directly, but there's nothing to stop you writing some kind of cronjob that scans the Maildir looking for new files and emails them off afterwards. Your previous option sounds easier :-) -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 4

Re: [Qmail-scanner-general] FW: FW: Error "setlocale: LC_ALL" on CentOS

2015-02-11 Thread Jason Haar
Set export LANG=C at the top of /service/smtp/run and restart the service. The problem is that environment variable needs to be fiddled with before qmail-scanner-queue.pl gets called. Jason -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481

Re: [Qmail-scanner-general] test_installation.sh fails, clamdscan: corrupt or unknown clamd scanner error

2013-09-02 Thread Jason Haar
mail-inject: fatal: qq temporary problem (#4.3.0) > Bad error. qmail-inject died > Re-reading your email now makes me think you may be on the wrong track. clamdscan reported an error - so you need to check out your syslogs and see what clamd is reporting the problem to be -- Cheers Jason H

Re: [Qmail-scanner-general] test_installation.sh fails, clamdscan: corrupt or unknown clamd scanner error

2013-09-02 Thread Jason Haar
annot be > expected to work on any linux system. Is this the case? Low volume could be because it does what it does and there are no outstanding bugs. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fi

Re: [Qmail-scanner-general] Qmail-scanner-general Digest, Vol 51, Issue 1

2013-06-13 Thread Jason Haar
On 13/06/13 17:05, Kunal Soni wrote: > Dear Jason, > > Thanks for the details. We have been using Spamassassin + ClamAV with > Qmail Scanner. Please let us know the steps to configure the DLP > Monitor with ClamAV and Qmail Scanner and How we can monitoer the > emails with

Re: [Qmail-scanner-general] Required Mail Filter for reserved words

2013-05-28 Thread Jason Haar
e a copy of such messages, and the logging will reflect this was a "DLP:" event. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -

Re: [Qmail-scanner-general] Name of virus in mailstats.csv truncated

2013-05-03 Thread Jason Haar
ld" mailstats logfile should cause no problems -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -

Re: [Qmail-scanner-general] Strange error

2013-03-29 Thread Jason Haar
it's a new default? Since it's failing near there > I'm wondering if that might be the problem. Any thoughts? > > You must have installed is as "automatic" - so it just enabled all the AVs it discovered. You can explicitly tell the ./configure script you only

Re: [Qmail-scanner-general] each e-mail with his own spam folder

2013-03-05 Thread Jason Haar
k it or otherwise run your own post-processing script to move that mail back into users structures afterwards Anyway, it's somewhere to start... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 84

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.11 released

2013-03-05 Thread Jason Haar
For more details and download instructions, please head over to http://qmail-scanner.sf.net/ -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422

Re: [Qmail-scanner-general] Qmail-scanner-general Digest, Vol 48, Issue 2

2013-03-04 Thread Jason Haar
xpect SA to parse (say) 10M mail messages -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -- Everyone hat

Re: [Qmail-scanner-general] QmailScanner SA:0(?/?) Problem

2012-11-30 Thread Jason Haar
#x27;s because SA isn't processing the message because it's too big (which is under your control to change) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PG

Re: [Qmail-scanner-general] Make faster qmail-scanner

2012-11-09 Thread Jason Haar
BLs, etc and that just takes time. Unless you are willing to run without anti-spam checks, there isn't a lot that can be done to fundamentally speed it up Note: obviously if you buy your own RBL data feeds, you can run those RBL lookups locally, that would speed things up enormously -- C

Re: [Qmail-scanner-general] Problems with clamd

2012-03-20 Thread Jason Haar
n/qmail-scanner-queue.pl? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -- This SF email is spo

Re: [Qmail-scanner-general] Problems with clamd

2012-03-15 Thread Jason Haar
ctions? chown qscand:qscand /var/qmail/bin/qmail-scanner-queue chmod 6755 /var/qmail/bin/qmail-scanner-queue -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407

Re: [Qmail-scanner-general] How to use MHR in qmail-scanner?

2012-02-16 Thread Jason Haar
gt; related configuration in qmail-scanner. > > Anyone has any information? It's a DNS-based file checker - basically Q-S takes checksums of attachments, sends them to MHR, and it says if it's a known malware match or not. Looks at their website for terms of use -- Cheers Jaso

Re: [Qmail-scanner-general] qmail-scanner and duplicated email

2012-02-15 Thread Jason Haar
Oh - that's not qmail-scanner - that's qmail-scanner-st I'll leave it to Salvatore to leap in Jason On 16/02/12 20:29, Alessio Cecchi wrote: > Il 16/02/2012 06:48, Jason Haar ha scritto: >> Hi Alessio >> >> What you describe doesn't explain the duplic

Re: [Qmail-scanner-general] qmail-scanner and duplicated email

2012-02-15 Thread Jason Haar
e over maxsizes. i.e. when you configure qmail-scanner, use the " --sa-maxsize" option and ensure it matches what spamd is set to. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6

Re: [Qmail-scanner-general] reformime malloc: Invalid or incomplete multibyte or wide character

2011-11-03 Thread Jason Haar
ot of these lines in my logs: > > d_m: output spotted from /usr/bin/reformime > -x/var/spool/qscan/tmp// (malloc: Invalid or incomplete multibyte or > wide character > > It seems to happen only one some documents and not all and I did not > manage to fiddle out the criteri

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.10 released

2011-10-02 Thread Jason Haar
use Bugfixes include * some locale-related changes * the fake Received: header added by Q-S has been changed to ${V_HEADER}-Diagnostics: * HBEDV support changed to use "avscan" instead of "antivir" For more details and download instructions, please head over to http://qm

Re: [Qmail-scanner-general] Disallowed content found in MIME attachment

2011-09-27 Thread Jason Haar
, but there has to be an empty line between header definitions and content ("--=_NextP" being the beginning of content in this case) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E

Re: [Qmail-scanner-general] Disallowed MIME Content-Type found

2011-09-19 Thread Jason Haar
- not valid > email > Then you've done something wrong - the code says elsif ($headers{'mime-version'} ne "" && ($BAD_MIME_CHECKS >= 1)) so if $BAD_MIME_CHECKS is set to zero, that line can never be true Are you sure you edited the existing $BAD_MIME_CHECK

Re: [Qmail-scanner-general] Disallowed content found in MIME attachment

2011-09-11 Thread Jason Haar
s MIME emails that have incorrectly nested boundaries. Can you send me an affected email (in a tar/zip file) so I can take a closer look? As it's blocked, it should be in your quarantine maildir tree Thanks -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1

Re: [Qmail-scanner-general] configure shows prompt in batch modeforcertain locales

2011-08-16 Thread Jason Haar
irectory, and disable the "--lang" option if there is no match. That would be safest -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint

Re: [Qmail-scanner-general] configure shows prompt in batch mode forcertain locales

2011-08-15 Thread Jason Haar
it is Why would you be trying to batch mode an install using options that won't work as expected? I'm trying to understand how you got into this situation? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 P

Re: [Qmail-scanner-general] Using qmail-scanner on mail relays breaks spamassassin's trust path

2011-08-11 Thread Jason Haar
-Diagnostics: header? Would that have any downside for anyone? Literally just changing a line? Jason On 12/08/11 01:11, spamassassinb...@htl-leonding.ac.at wrote: > qmail-scanner inserts his own header creating incomplete redundant > information (it doesn't show authentication information). >

Re: [Qmail-scanner-general] Using qmail-scanner on mail relays breaks spamassassin's trust path

2011-08-06 Thread Jason Haar
this sort of issue - does your one? (if not, I'd say that was a bug with that patch) Jason On 07/08/11 06:06, spamassassinb...@htl-leonding.ac.at wrote: > See comment 4 on https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6645 > > Short description: > If qmail-scanner is us

Re: [Qmail-scanner-general] disguised .exe files

2011-03-23 Thread Jason Haar
them A product like clamav would be better suited for this kind of work http://www.clamav.net/doc/latest/signatures.pdf -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64

Re: [Qmail-scanner-general] disguised .exe files

2011-03-22 Thread Jason Haar
; email with "notepad.gif" - which was an executable - it was blocked. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 --

Re: [Qmail-scanner-general] per-user spam folders

2011-03-22 Thread Jason Haar
e mail folders, so you'd have to do that first for existing accounts, and then create a Maildir/.Junk maildir tree under /etc/skel to make that automatically happen for any new Unix accounts (I cannot help for other more exotic setups) -- Cheers Jason Haar Information Security Manager, Trimbl

Re: [Qmail-scanner-general] spamd not returning valid content

2011-01-05 Thread Jason Haar
ush the results back to spamc. As long as it doesn't happen too often, it's fine. If it happens nearly all the time, then you should look to what you can do to improve spamd: more children/bigger servers/etc -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +6

Re: [Qmail-scanner-general] unset QS_SPAMASSASSIN

2010-11-18 Thread Jason Haar
nt? Basically, QS is meant to only call SA for email coming from IPs that aren't classified as "local" (ie via RELAYCLIENT). From what you have said, I can't see why you are using QS_SPAMASSASSIN at all - it's meant to be for people who want it to run SA on locally gen

Re: [Qmail-scanner-general] disallowed breakage

2010-06-22 Thread Jason Haar
t.co.uk-MOVED-X-Spam-Flag:" You've been fiddling with the "V_HEADER" variable haven't you :-) You can't put spaces in it - headers can't have spaces - that triggers the block As to why FF doesn't trigger the fault va MSIE - I have no idea. Let's just

Re: [Qmail-scanner-general] Disallowed breakage found in header name - not valid email

2010-06-21 Thread Jason Haar
they being blocked? If you can't figure it out, gzip one up and send to this list (or me) and I'll take a look. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9

[Qmail-scanner-general] [Qmail-scanner-announce] Warning: bug in latest reformime breaks Qmail-Scanner

2010-02-21 Thread Jason Haar
nvoked programs in English because there are lots of string matches that occur to cover corner-cases in AV products, if you set that to anything besides English, you will trigger AV errors. Unless I hear that breaks anything, I'll release an official version at the beginning of next week

Re: [Qmail-scanner-general] Qmail-Scanner 2.08 with Maildrop 2.3.0

2010-02-14 Thread Jason Haar
.. but I didn't have confidence in my ability to hack up Q-S. > > I've also just heard back from the author of maildrop and he says it's a bug. He's looking into it -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3

Re: [Qmail-scanner-general] Qmail-Scanner 2.08 with Maildrop 2.3.0

2010-02-13 Thread Jason Haar
o with the normal Q-S language support So forcing the locale to "C" (which is English) is critical for the AV string matches to work. As your host is en.* already, your change does no harm - but it would break non-en hosts. I'll have to take a look at a newer maildrop - obviously some

Re: [Qmail-scanner-general] clamav permissions problem and qmail-scanner

2010-02-08 Thread Jason Haar
09:15 qmail-scanner-queue.pl > > > WHEW! Scanning logs indicate successful scanning of attachments now. > THANKS for helping me to get back on track!!! > > Great. Don't forget to turn $DEBUG back to "1", otherwise you'll quickly accumulate a tonne of files. --

Re: [Qmail-scanner-general] clamav permissions problem and qmail-scanner

2010-02-07 Thread Jason Haar
nding files will be left behind... That should help us home in on the problem. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] Quarantine ?

2010-01-19 Thread Jason Haar
I have thought about writing them myself - but they wouldn't be a small task and I don't have much incentive myself to do it. Maybe someone else could...? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Finger

Re: [Qmail-scanner-general] HBEDV change

2009-11-08 Thread Jason Haar
o see a patch. If what you say is all the changes that are required, I think I can manage those changes myself - but if there are more, a patch would be preferred :-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerpri

Re: [Qmail-scanner-general] Problems with clamdscan

2009-10-01 Thread Jason Haar
I > upgraded to 2.06, I ended up with plenty of > > WARNING: lstat() failed on: ... > > in the clamd log file and viruses go through. > ? Well that is weird. Qmail-Scanner is specifically designed to tempfail if an AV returns a non-standard error code. Again - this smells like a hard

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.08 released

2009-09-10 Thread Jason Haar
'; to my $sa_timeout='120'; All users who have this 30sec timeout a *strongly urged* to increase it to 120 - either manually or by upgrading to 2.08 As always, the latest version of Qmail-Scanner is available via our friends at Sourceforge - http://qmail-scanner.sf.net/ -- Ch

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.07 released

2009-09-02 Thread Jason Haar
so Qmail-Scanner now tries to reflect that too. As always, the latest version of Qmail-Scanner is available via our friends at Sourceforge - http://qmail-scanner.sf.net/ -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerp

Re: [Qmail-scanner-general] maildrop 1.0 test broken

2009-06-01 Thread Jason Haar
David Sveningsson wrote: > > # maildrop -v 2>&1|grep '^maildrop'|grep '1\.0' > maildrop 2.1.0 Copyright 1998-2005 Double Precision, Inc. > > I suggest modifying the regexp match whitespace in front of the version > string. Noted. Will be fixed in nex

Re: [Qmail-scanner-general] Qmailscanner + Smtp Auth

2009-05-29 Thread Jason Haar
th and it sets RELAYCLIENT on successful authentication -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] Spamassassin logging with scanner

2009-05-10 Thread Jason Haar
Jason Haar wrote: > 0.003 secs to fail means spamd ain't running at a guess... > E - yucky English. Let's try that again "At a guess, I'd say spamd isn't even running." There - that's better ;-) -- Cheers Jason Haar Information Security Mana

Re: [Qmail-scanner-general] Spamassassin logging with scanner

2009-05-10 Thread Jason Haar
17:48:49 CDT:2211: SA: finished scan in 0.003359 secs - > hits=? > > SA is broken on your system at the moment that ran. Maybe it's totally broken - maybe it's only broken for a few seconds due to load/etc. 0.003 secs to fail means spamd ain't running at a guess...

Re: [Qmail-scanner-general] Qmail-Scanner and RBL Reject ?

2009-04-27 Thread Jason Haar
rformance hit, but we can actually see that message X, from Y to Z with Subject: line "" was blocked with a score of 300/5. Same end effect as RBL - but with much better logging ;-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fa

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.06 released

2009-03-19 Thread Jason Haar
Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -- Apps built with the Adobe(R) Flex(R

Re: [Qmail-scanner-general] [Qmail-scanner-announce] qmail-scanner-2.06-rc2 (new f-prot support)

2009-03-19 Thread Jason Haar
means I'm flapping around for ages ;-) However, I have taken your queries as a kick-in-the-pants, so we'll see what we can do in the next hour or so :-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint:

[Qmail-scanner-general] Some Qmail-Scanner usage stats

2009-02-19 Thread Jason Haar
79% of systems only used one scanner (almost always clam), 6% had two scanners, 0.5% three. There were a few systems with up to 5 scanners installed. As far as OSes go, 84% Linux, 1% Solaris, and all the rest (15%) were *BSD. No other OSes - which was interesting. -- Cheers Jason Haar Informat

[Qmail-scanner-general] [Qmail-scanner-announce] qmail-scanner-2.06-rc2 (new f-prot support)

2009-02-16 Thread Jason Haar
hanks -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -- Open Source Business Confe

Re: [Qmail-scanner-general] [Qmail-scanner-announce] qmail-scanner-2.06-rc1 (new f-prot support)

2009-02-16 Thread Jason Haar
mAV missed compared with the commercial scanners. If it was <10%, then it implies we are paying a lot of money for AVs that aren't as good as a free product :-) However, I'll see what I can do in the next release (2.07). I have uploaded qmail-scanner-2.06-rc2 with the fixed fpscan detect

[Qmail-scanner-general] [Qmail-scanner-announce] qmail-scanner-2.06-rc1 (new f-prot support)

2009-02-08 Thread Jason Haar
il-scanner-2.06.tgz.sig -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 -- Create

Re: [Qmail-scanner-general] SpamAssassin matches rules inconsistently

2009-01-13 Thread Jason Haar
shoving anything in there". So this is purely a SA problem - no amount of fiddling with Q-S will fix it. And as you say, it won't be a softlimit issue if you're not using softlimit. You should check your SA logs, and ask on the SA list instead (unless this is some "st"

Re: [Qmail-scanner-general] Disallowed MIME Content-Type found - not valid email

2008-12-29 Thread Jason Haar
Bookworm wrote: > In an old message from 2006, Jason Haar wrote > Wow - you're replying to a message from 2006? Good memory ;-) > By doing a bit more research, it turns out that this appears to be incorrect. > According to RFC 2045, section 5.2, it looks as though th

Re: [Qmail-scanner-general] Lots of header blocks

2008-11-16 Thread Jason Haar
-Mailer:Spam I don't want -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 - This

Re: [Qmail-scanner-general] Policy-MAILFROM: and Policy-FROM:

2008-11-06 Thread Jason Haar
# # i.e. "MAIL FROM:" and "RCPT TO:" envelope headers are mapped to # virtual headers MAILFROM: and RCPTTO: respectively. So "MAILFROM" is the envelope header, whereas "From" refers to a header in the email message itself -- Cheers Jason Haar Infor

Re: [Qmail-scanner-general] Quarentine Events exceptions

2008-11-06 Thread Jason Haar
(or to) some account ? > > No. Qmail-Scanner is a "global" application, not per-user. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9

Re: [Qmail-scanner-general] QS: check invalid address before starting scanners

2008-10-30 Thread Jason Haar
:-) I'd recommend the "RECIPIENTS extension" from http://www.fehcom.de/qmail/qmail.html -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] message too big skip it

2008-10-27 Thread Jason Haar
e "--sa-maxsize" -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 - This SF.Net email i

Re: [Qmail-scanner-general] using tnef

2008-10-23 Thread Jason Haar
-scanner before or after install tnef? You need to install qmail-scanner after making changes WRT system software in order for it to pick up such changes. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0

Re: [Qmail-scanner-general] Bounce mail

2008-10-23 Thread Jason Haar
ust blocking the mail. > > Did you enable the "--quarantine-reject" option, and is your Qmail patched to actually be able to do that? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerpr

Re: [Qmail-scanner-general] qmail-scanner and f-prot 6

2008-09-18 Thread Jason Haar
using the same product can confirm any such change actually works - I certainly don't want to roll out a new version of Qmail-Scanner that doesn't work due to it! :-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.05 released

2008-07-08 Thread Jason Haar
-- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 - Sponsored by: SourceForge.net

Re: [Qmail-scanner-general] Message-ID being stripped from header?

2008-07-02 Thread Jason Haar
FYI it looks like Mike Tedder is correct - there is a bug that is affecting Message-ID parsing in Qmail-Scanner 2.0[34] I am in the final testing phase of 2.05 which will fix the problem. It should be released next week. It will be the only change -- Cheers Jason Haar Information Security

Re: [Qmail-scanner-general] Message-ID being stripped from header?

2008-06-22 Thread Jason Haar
ther patches) that might be doing it? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

Re: [Qmail-scanner-general] Message-ID being stripped from header?

2008-06-22 Thread Jason Haar
thout the added "faked" Message-ID - and SA can score it correctly. Then after the scoring has been done, QS will add a Message-ID to it (if one isn't present) - just as it used to. Even though I can't see how that could affect you, that's the closest I can come - does

Re: [Qmail-scanner-general] a spam definitions database

2008-06-22 Thread Jason Haar
s safer and cleaner email system. > I assume you are already using SpamAssassin, and it's rules system is vastly more sophisticated than the simply "perlscanner" module in QS. Why don't you use that instead? And there's tonnes of "third party" rule op

Re: [Qmail-scanner-general] clamdscan version wrong after upgrade

2008-06-18 Thread Jason Haar
ueue.pl -z" once per day as stated in the docs? Not only does that clean up old files, it regenerates the AV version number details that are put in as headers. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerp

Re: [Qmail-scanner-general] Loosing emails when a failure occurs in spamd / clamav

2008-06-01 Thread Jason Haar
ther than > just dropping it and causing mail lost? > That is exactly how it works -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] X-Qmail-Scanner-1.25st: Process xxxxx closed, parent process died

2008-05-23 Thread Jason Haar
that could be causing the issue. Try running recordio inline (although if you know tcpdump, you'd use that instead - I don't see the point of recordio myself when a packet sniffer is available) to capture what is being sent/received. -- Cheers Jason Haar Information Security Manager

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.04 released

2008-05-08 Thread Jason Haar
s meant to - so you are all strongly urged to upgrade as soon as practical. As usual, the new release is available via our friendly people at Sourceforge http://qmail-scanner.sourceforge.net/ -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax:

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.03 released

2008-05-05 Thread Jason Haar
Berkeley DB bug * Updated clamAV support As usual, the new release is available via our friendly people at Sourceforge http://qmail-scanner.sourceforge.net/ -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint

Re: [Qmail-scanner-general] qmail-scanner-2.02st log

2008-04-02 Thread Jason Haar
faces - which would include localhost. Sounds like you've mapped it to just one or something? If you replace the sendmail binaries with qmail, this problem will disappear anyway - qmail doesn't talk to qmail-smtpd for local transactions. -- Cheers Jason Haar Information Securi

Re: [Qmail-scanner-general] Probs after upgrade / Reject instead of Quarantine

2008-03-31 Thread Jason Haar
er This must be a "st"-specific feature then? The "normal" Qmail-Scanner code effectively says "if it is a quarantine event and you are configured to do SMTP rejections, then reject". i.e it already works with perlscanner events. -- Cheers Jason Haar Informa

Re: [Qmail-scanner-general] Probs after upgrade / Reject instead of Quarantine

2008-03-31 Thread Jason Haar
of a message that should be rejected at the SMTP level onto a web server (http://pastebin.org/ is an option) so I can check it out? Thanks -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B

Re: [Qmail-scanner-general] qmail-scanner not reporting newest version of clamav

2008-02-21 Thread Jason Haar
- should have it out next week. BTW this bug is really a buglet: this hasn't broken anything in your system other than the reporting of the ClamAV version details. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerp

Re: [Qmail-scanner-general] Qmail-Scanner Working Directory Overfloweth

2008-01-03 Thread Jason Haar
n part-way through session). The first time you run "-z", it will probably take a very long time to finish, but then once per day should be very fast. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7

Re: [Qmail-scanner-general] Qmail Scanner 2 and ClamAV

2007-11-22 Thread Jason Haar
alled it in > > /usr/local/clamav/ > > Please read the FAQ - "*./configure doesn't find supported scanner 'X'*." -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fing

Re: [Qmail-scanner-general] White List

2007-11-14 Thread Jason Haar
Tomas Charvat wrote: > Actualy there is :)) > > see per-domain-settings ... you can define rule (and omit QS or clamav > or SA) on per user basis ;) You must be referring to qmail-scanner-st - QS doesn't have such a feature -- Cheers Jason Haar Information Security Manager, T

Re: [Qmail-scanner-general] Occasional error with some messages.

2007-11-14 Thread Jason Haar
l-1.05 (+ chkuser), vpopmail 5.4.13+mysql, QS 2.01st >> >> SA 3.1.7??? That is so old. >> Anyway, is it possible to change the timeout? >> Actually, with such an old version of SA - I have no idea -- Cheers Jason Haar Information Security Manager, T

Re: [Qmail-scanner-general] White List

2007-11-14 Thread Jason Haar
ture to disable the QS on a per-user basis. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] Qmail-scanner related problem ( cannot create /var/spool/qmailscan/tmp )

2007-11-11 Thread Jason Haar
u give me some pointers to resolving this problem ? Any help > will be apreciated. > > > 1. check ownerships - all files should be owned by qscand, and /usr/bin/qmail-scanner-queue.pl should be setuid qscand 2. SELinux. I haven't checked directly, but it could be blocking this too. As al

Re: [Qmail-scanner-general] [toaster] block outgoing messages

2007-11-02 Thread Jason Haar
domains you want archived to "$archiveit='onedom|twodom';" -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

Re: [Qmail-scanner-general] User validation before scanning the mail?

2007-10-20 Thread Jason Haar
.e. a patch) will remove a huge amount of traffic from even getting to Qmail-Scanner. I'd also suggest looking at the RECIPIENTS extension on http://www.fehcom.de/qmail/qmail.html -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.02 release

2007-10-08 Thread Jason Haar
SpamAssassin requiring changes to tcpserver added See http://qmail-scanner.sourceforge.net/CHANGES for full details Jason -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB

[Qmail-scanner-general] [Qmail-scanner-announce] Qmail-Scanner 2.02 release

2007-10-07 Thread Jason Haar
requiring changes to tcpserver added See http://qmail-scanner.sourceforge.net/CHANGES for full details Jason - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now

Re: [Qmail-scanner-general] qmail hangs for while

2007-10-05 Thread Jason Haar
that. You're box sounds way to grunty to be showing such symptoms with the low SMTP settings you have. A dual-core with 2G ram and SATA should easily be able to handle 200+ connections - not 50. Something is wrong for sure... -- Cheers Jason Haar Information Security Manager, Trimble Nav

Re: [Qmail-scanner-general] Missing numbers in required hits

2007-09-24 Thread Jason Haar
ou say you are using Q-S 1.25 and then ask if the current version is compatible? Current version is 2.01... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F

Re: [Qmail-scanner-general] /var/spool/qmailscan/tmp and /var/spool/qmailscan/working

2007-09-22 Thread Jason Haar
rge it for you. Old files are meant to be cleaned up that way. Of course, if you need the space *NOW* - then Salvatore is spot-on. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F

Re: [Qmail-scanner-general] Invalid cross-device link

2007-08-29 Thread Jason Haar
t you make "working" a tmpfs instead? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ---

Re: [Qmail-scanner-general] how can I insert more detailed info (SCANINFO) to quarantined e-mail ?

2007-08-27 Thread Jason Haar
Stefan Onken wrote: > or using simscan rather than qmail-scanner > http://www.inter7.com/?page=simscan > ??? As simscan doesn't support quarantining, and doesn't support SA verbose mode, I don't see how your answer helps anybody. -- Cheers Jason Haar Information S

Re: [Qmail-scanner-general] how can I insert more detailed info (SCANINFO) to quarantined e-mail ?

2007-08-27 Thread Jason Haar
"fast_spamassassin" leads to simply getting a score back from spamc - no detail. You will get what you want if you choose "verbose_spamassassin". Jason -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417

Re: [Qmail-scanner-general] cannot open for write /var/spool/qscan/quarantine-events.db.tmp

2007-07-15 Thread Jason Haar
-S. Remove the lot and do it again. End of the day, the /var/spool/qscan directory tree is meant to be owned by "qscand"... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F

Re: [Qmail-scanner-general] Disallowd Attachements not found

2007-07-09 Thread Jason Haar
t mutt. mutt is the perfect tool for the job: mutt -f /var/spool/qscan/quarantine/viruses -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 040

Re: [Qmail-scanner-general] Disallowed attachment not found

2007-06-21 Thread Jason Haar
will allow you to read all the policy-based quarantined emails -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5E

Re: [Qmail-scanner-general] Qmail-scanner ST - Spamassassin Verbose bug

2007-06-04 Thread Jason Haar
Salvatore Toribio wrote: > Hi Arno > > You are right, that check is wrong, and it is also wrong in the > original version I hope Jason should read this email. > > Got it - thanks! -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9

Re: [Qmail-scanner-general] qmail-scanner f-prot bug

2007-05-24 Thread Jason Haar
at. I agree - your patch looks good - thanks! -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 --

  1   2   3   4   5   6   7   8   9   10   >