27;t do it
directly, but there's nothing to stop you writing some kind of cronjob
that scans the Maildir looking for new files and emails them off
afterwards. Your previous option sounds easier :-)
--
Cheers
Jason Haar
Corporate Information Security Manager, Trimble Navigation Ltd.
Phone: +1 4
Set
export LANG=C
at the top of /service/smtp/run and restart the service. The problem is
that environment variable needs to be fiddled with before
qmail-scanner-queue.pl gets called.
Jason
--
Cheers
Jason Haar
Corporate Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481
mail-inject: fatal: qq temporary problem (#4.3.0)
> Bad error. qmail-inject died
>
Re-reading your email now makes me think you may be on the wrong track.
clamdscan reported an error - so you need to check out your syslogs and
see what clamd is reporting the problem to be
--
Cheers
Jason H
annot be
> expected to work on any linux system. Is this the case?
Low volume could be because it does what it does and there are no
outstanding bugs.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fi
On 13/06/13 17:05, Kunal Soni wrote:
> Dear Jason,
>
> Thanks for the details. We have been using Spamassassin + ClamAV with
> Qmail Scanner. Please let us know the steps to configure the DLP
> Monitor with ClamAV and Qmail Scanner and How we can monitoer the
> emails with
e a copy
of such messages, and the logging will reflect this was a "DLP:" event.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-
ld"
mailstats logfile should cause no problems
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-
it's a new default? Since it's failing near there
> I'm wondering if that might be the problem. Any thoughts?
>
>
You must have installed is as "automatic" - so it just enabled all the
AVs it discovered. You can explicitly tell the ./configure script you
only
k it or otherwise run your own post-processing script
to move that mail back into users structures afterwards
Anyway, it's somewhere to start...
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 84
For more details and download instructions, please head over to
http://qmail-scanner.sf.net/
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422
xpect SA to parse (say) 10M
mail messages
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
Everyone hat
#x27;s because SA isn't processing the
message because it's too big (which is under your control to change)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PG
BLs, etc and
that just takes time. Unless you are willing to run without anti-spam
checks, there isn't a lot that can be done to fundamentally speed it up
Note: obviously if you buy your own RBL data feeds, you can run those
RBL lookups locally, that would speed things up enormously
--
C
n/qmail-scanner-queue.pl?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
This SF email is spo
ctions?
chown qscand:qscand /var/qmail/bin/qmail-scanner-queue
chmod 6755 /var/qmail/bin/qmail-scanner-queue
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407
gt; related configuration in qmail-scanner.
>
> Anyone has any information?
It's a DNS-based file checker - basically Q-S takes checksums of
attachments, sends them to MHR, and it says if it's a known malware
match or not. Looks at their website for terms of use
--
Cheers
Jaso
Oh - that's not qmail-scanner - that's qmail-scanner-st
I'll leave it to Salvatore to leap in
Jason
On 16/02/12 20:29, Alessio Cecchi wrote:
> Il 16/02/2012 06:48, Jason Haar ha scritto:
>> Hi Alessio
>>
>> What you describe doesn't explain the duplic
e over maxsizes. i.e. when you configure
qmail-scanner, use the " --sa-maxsize" option and ensure it matches what
spamd is set to.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6
ot of these lines in my logs:
>
> d_m: output spotted from /usr/bin/reformime
> -x/var/spool/qscan/tmp// (malloc: Invalid or incomplete multibyte or
> wide character
>
> It seems to happen only one some documents and not all and I did not
> manage to fiddle out the criteri
use
Bugfixes include
* some locale-related changes
* the fake Received: header added by Q-S has been changed to
${V_HEADER}-Diagnostics:
* HBEDV support changed to use "avscan" instead of "antivir"
For more details and download instructions, please head over to
http://qm
, but there has to be an empty line between header definitions and
content ("--=_NextP" being the beginning of content in this case)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E
- not valid
> email
>
Then you've done something wrong - the code says
elsif ($headers{'mime-version'} ne "" && ($BAD_MIME_CHECKS >= 1))
so if $BAD_MIME_CHECKS is set to zero, that line can never be true
Are you sure you edited the existing $BAD_MIME_CHECK
s MIME emails that have incorrectly nested boundaries. Can you
send me an affected email (in a tar/zip file) so I can take a closer look?
As it's blocked, it should be in your quarantine maildir tree
Thanks
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1
irectory, and disable the "--lang"
option if there is no match. That would be safest
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint
it is
Why would you be trying to batch mode an install using options that
won't work as expected? I'm trying to understand how you got into this
situation?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
P
-Diagnostics: header?
Would that have any downside for anyone? Literally just changing a line?
Jason
On 12/08/11 01:11, spamassassinb...@htl-leonding.ac.at wrote:
> qmail-scanner inserts his own header creating incomplete redundant
> information (it doesn't show authentication information).
>
this sort of issue - does your one? (if not,
I'd say that was a bug with that patch)
Jason
On 07/08/11 06:06, spamassassinb...@htl-leonding.ac.at wrote:
> See comment 4 on https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6645
>
> Short description:
> If qmail-scanner is us
them
A product like clamav would be better suited for this kind of work
http://www.clamav.net/doc/latest/signatures.pdf
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64
; email with "notepad.gif" -
which was an executable - it was blocked.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
e mail folders, so you'd have to do
that first for existing accounts, and then create a Maildir/.Junk
maildir tree under /etc/skel to make that automatically happen for any
new Unix accounts (I cannot help for other more exotic setups)
--
Cheers
Jason Haar
Information Security Manager, Trimbl
ush the results back
to spamc. As long as it doesn't happen too often, it's fine. If it
happens nearly all the time, then you should look to what you can do to
improve spamd: more children/bigger servers/etc
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +6
nt?
Basically, QS is meant to only call SA for email coming from IPs that
aren't classified as "local" (ie via RELAYCLIENT). From what you have
said, I can't see why you are using QS_SPAMASSASSIN at all - it's meant
to be for people who want it to run SA on locally gen
t.co.uk-MOVED-X-Spam-Flag:"
You've been fiddling with the "V_HEADER" variable haven't you :-)
You can't put spaces in it - headers can't have spaces - that triggers
the block
As to why FF doesn't trigger the fault va MSIE - I have no idea. Let's
just
they
being blocked? If you can't figure it out, gzip one up and send to this
list (or me) and I'll take a look.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9
nvoked programs in English because there are lots of string matches
that occur to cover corner-cases in AV products, if you set that to
anything besides English, you will trigger AV errors.
Unless I hear that breaks anything, I'll release an official version at
the beginning of next week
.. but I didn't have confidence in my ability to hack up Q-S.
>
>
I've also just heard back from the author of maildrop and he says it's a
bug. He's looking into it
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3
o with the normal Q-S language support
So forcing the locale to "C" (which is English) is critical for the AV
string matches to work. As your host is en.* already, your change does
no harm - but it would break non-en hosts.
I'll have to take a look at a newer maildrop - obviously some
09:15 qmail-scanner-queue.pl
>
>
> WHEW! Scanning logs indicate successful scanning of attachments now.
> THANKS for helping me to get back on track!!!
>
>
Great. Don't forget to turn $DEBUG back to "1", otherwise you'll quickly
accumulate a tonne of files.
--
nding files will be left
behind...
That should help us home in on the problem.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
I have thought about
writing them myself - but they wouldn't be a small task and I don't have
much incentive myself to do it. Maybe someone else could...?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Finger
o see a patch. If what you say is all the changes that are
required, I think I can manage those changes myself - but if there are
more, a patch would be preferred :-)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerpri
I
> upgraded to 2.06, I ended up with plenty of
>
> WARNING: lstat() failed on: ...
>
> in the clamd log file and viruses go through.
>
? Well that is weird. Qmail-Scanner is specifically designed to tempfail
if an AV returns a non-standard error code. Again - this smells like a
hard
';
to
my $sa_timeout='120';
All users who have this 30sec timeout a *strongly urged* to increase it
to 120 - either manually or by upgrading to 2.08
As always, the latest version of Qmail-Scanner is available via our
friends at Sourceforge - http://qmail-scanner.sf.net/
--
Ch
so Qmail-Scanner now
tries to reflect that too.
As always, the latest version of Qmail-Scanner is available via our
friends at Sourceforge - http://qmail-scanner.sf.net/
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerp
David Sveningsson wrote:
>
> # maildrop -v 2>&1|grep '^maildrop'|grep '1\.0'
> maildrop 2.1.0 Copyright 1998-2005 Double Precision, Inc.
>
> I suggest modifying the regexp match whitespace in front of the version
> string.
Noted. Will be fixed in nex
th and it sets RELAYCLIENT on successful
authentication
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
Jason Haar wrote:
> 0.003 secs to fail means spamd ain't running at a guess...
>
E - yucky English. Let's try that again
"At a guess, I'd say spamd isn't even running."
There - that's better ;-)
--
Cheers
Jason Haar
Information Security Mana
17:48:49 CDT:2211: SA: finished scan in 0.003359 secs -
> hits=?
>
>
SA is broken on your system at the moment that ran. Maybe it's totally
broken - maybe it's only broken for a few seconds due to load/etc.
0.003 secs to fail means spamd ain't running at a guess...
rformance hit, but we
can actually see that message X, from Y to Z with Subject: line ""
was blocked with a score of 300/5. Same end effect as RBL - but with
much better logging ;-)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fa
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
Apps built with the Adobe(R) Flex(R
means I'm
flapping around for ages ;-)
However, I have taken your queries as a kick-in-the-pants, so we'll see
what we can do in the next hour or so :-)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint:
79% of systems only used one
scanner (almost always clam), 6% had two scanners, 0.5% three. There
were a few systems with up to 5 scanners installed.
As far as OSes go, 84% Linux, 1% Solaris, and all the rest (15%) were
*BSD. No other OSes - which was interesting.
--
Cheers
Jason Haar
Informat
hanks
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
Open Source Business Confe
mAV missed compared with
the commercial scanners. If it was <10%, then it implies we are paying
a lot of money for AVs that aren't as good as a free product :-)
However, I'll see what I can do in the next release (2.07).
I have uploaded qmail-scanner-2.06-rc2 with the fixed fpscan detect
il-scanner-2.06.tgz.sig
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
Create
shoving anything in there". So this is purely a SA problem - no amount
of fiddling with Q-S will fix it. And as you say, it won't be a
softlimit issue if you're not using softlimit.
You should check your SA logs, and ask on the SA list instead (unless
this is some "st"
Bookworm wrote:
> In an old message from 2006, Jason Haar wrote
>
Wow - you're replying to a message from 2006? Good memory ;-)
> By doing a bit more research, it turns out that this appears to be incorrect.
> According to RFC 2045, section 5.2, it looks as though th
-Mailer:Spam I
don't want
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-
This
#
# i.e. "MAIL FROM:" and "RCPT TO:" envelope headers are mapped to
# virtual headers MAILFROM: and RCPTTO: respectively.
So "MAILFROM" is the envelope header, whereas "From" refers to a header
in the email message itself
--
Cheers
Jason Haar
Infor
(or to) some account ?
>
>
No. Qmail-Scanner is a "global" application, not per-user.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9
:-)
I'd recommend the "RECIPIENTS extension" from
http://www.fehcom.de/qmail/qmail.html
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
e "--sa-maxsize"
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-
This SF.Net email i
-scanner before or after install tnef? You need to
install qmail-scanner after making changes WRT system software in order
for it to pick up such changes.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0
ust blocking the mail.
>
>
Did you enable the "--quarantine-reject" option, and is your Qmail
patched to actually be able to do that?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerpr
using the
same product can confirm any such change actually works - I certainly
don't want to roll out a new version of Qmail-Scanner that doesn't work
due to it! :-)
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-
Sponsored by: SourceForge.net
FYI it looks like Mike Tedder is correct - there is a bug that is
affecting Message-ID parsing in Qmail-Scanner 2.0[34]
I am in the final testing phase of 2.05 which will fix the problem. It
should be released next week. It will be the only change
--
Cheers
Jason Haar
Information Security
ther patches) that might be doing it?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
thout the added "faked" Message-ID - and SA can
score it correctly. Then after the scoring has been done, QS will add a
Message-ID to it (if one isn't present) - just as it used to.
Even though I can't see how that could affect you, that's the closest I
can come - does
s safer and cleaner email system.
>
I assume you are already using SpamAssassin, and it's rules system is
vastly more sophisticated than the simply "perlscanner" module in QS.
Why don't you use that instead? And there's tonnes of "third party" rule
op
ueue.pl -z" once per
day as stated in the docs? Not only does that clean up old files, it
regenerates the AV version number details that are put in as headers.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerp
ther than
> just dropping it and causing mail lost?
>
That is exactly how it works
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
that could
be causing the issue. Try running recordio inline (although if you know
tcpdump, you'd use that instead - I don't see the point of recordio
myself when a packet sniffer is available) to capture what is being
sent/received.
--
Cheers
Jason Haar
Information Security Manager
s meant to - so you are all strongly urged to upgrade as soon as
practical.
As usual, the new release is available via our friendly people at
Sourceforge
http://qmail-scanner.sourceforge.net/
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax:
Berkeley DB bug
* Updated clamAV support
As usual, the new release is available via our friendly people at
Sourceforge
http://qmail-scanner.sourceforge.net/
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint
faces - which would include localhost.
Sounds like you've mapped it to just one or something? If you replace
the sendmail binaries with qmail, this problem will disappear anyway -
qmail doesn't talk to qmail-smtpd for local transactions.
--
Cheers
Jason Haar
Information Securi
er
This must be a "st"-specific feature then? The "normal" Qmail-Scanner
code effectively says "if it is a quarantine event and you are
configured to do SMTP rejections, then reject". i.e it already works
with perlscanner events.
--
Cheers
Jason Haar
Informa
of a message that should be rejected at the SMTP
level onto a web server (http://pastebin.org/ is an option) so I can
check it out?
Thanks
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B
- should have it out
next week.
BTW this bug is really a buglet: this hasn't broken anything in your
system other than the reporting of the ClamAV version details.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerp
n part-way through session). The first time you run "-z", it
will probably take a very long time to finish, but then once per day
should be very fast.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7
alled it in
>
> /usr/local/clamav/
>
>
Please read the FAQ - "*./configure doesn't find supported scanner 'X'*."
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fing
Tomas Charvat wrote:
> Actualy there is :))
>
> see per-domain-settings ... you can define rule (and omit QS or clamav
> or SA) on per user basis ;)
You must be referring to qmail-scanner-st - QS doesn't have such a feature
--
Cheers
Jason Haar
Information Security Manager, T
l-1.05 (+ chkuser), vpopmail 5.4.13+mysql, QS 2.01st
>>
>>
SA 3.1.7??? That is so old.
>> Anyway, is it possible to change the timeout?
>>
Actually, with such an old version of SA - I have no idea
--
Cheers
Jason Haar
Information Security Manager, T
ture to disable the QS on a per-user basis.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
u give me some pointers to resolving this problem ? Any help
> will be apreciated.
>
>
>
1. check ownerships - all files should be owned by qscand, and
/usr/bin/qmail-scanner-queue.pl should be setuid qscand
2. SELinux. I haven't checked directly, but it could be blocking this
too. As al
domains you want archived to
"$archiveit='onedom|twodom';"
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
.e. a patch) will remove a huge amount of traffic from even
getting to Qmail-Scanner.
I'd also suggest looking at the RECIPIENTS extension on
http://www.fehcom.de/qmail/qmail.html
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635
SpamAssassin
requiring changes to tcpserver added
See http://qmail-scanner.sourceforge.net/CHANGES for full details
Jason
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB
requiring changes to tcpserver added
See http://qmail-scanner.sourceforge.net/CHANGES for full details
Jason
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now
that.
You're box sounds way to grunty to be showing such symptoms with the low
SMTP settings you have. A dual-core with 2G ram and SATA should easily
be able to handle 200+ connections - not 50. Something is wrong for sure...
--
Cheers
Jason Haar
Information Security Manager, Trimble Nav
ou say you are using Q-S 1.25 and
then ask if the current version is compatible? Current version is 2.01...
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F
rge it for you. Old files are meant to be cleaned up that way. Of
course, if you need the space *NOW* - then Salvatore is spot-on.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F
t you make "working" a tmpfs instead?
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
---
Stefan Onken wrote:
> or using simscan rather than qmail-scanner
> http://www.inter7.com/?page=simscan
>
??? As simscan doesn't support quarantining, and doesn't support SA
verbose mode, I don't see how your answer helps anybody.
--
Cheers
Jason Haar
Information S
"fast_spamassassin" leads to simply getting a
score back from spamc - no detail.
You will get what you want if you choose "verbose_spamassassin".
Jason
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
-S. Remove the lot and do it again. End of the day, the
/var/spool/qscan directory tree is meant to be owned by "qscand"...
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F
t mutt.
mutt is the perfect tool for the job:
mutt -f /var/spool/qscan/quarantine/viruses
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 040
will allow you to read all the policy-based quarantined emails
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5E
Salvatore Toribio wrote:
> Hi Arno
>
> You are right, that check is wrong, and it is also wrong in the
> original version I hope Jason should read this email.
>
>
Got it - thanks!
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9
at.
I agree - your patch looks good - thanks!
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
1 - 100 of 970 matches
Mail list logo