- Original Message -
From: "Doug Monroe" <[EMAIL PROTECTED]>
> reset's the bit??
> FWIW- VI works fine for me w/o resetting on RH 7.2
>
> # ls -la /var/qmail/bin/qmail-scanner-queue.pl
> -rwsr-xr-x1 qscand qscand 84012 Sep 12 21:52
>
I have these viruses listed in my qmail-scanner-queue.pl as silent viruses.
('klez','bugbear','hybris','yaha','braid','nimda','tanatos','sobig','winevar
','palyh','fizzer');
Today I noticed we're getting false sender notifications from a
Worm.LoveLorn.VBS and was wondering what else I need to put
- Original Message -
From: "Alex Pleiner" <[EMAIL PROTECTED]>
> >OK thanks for the clarification. I just want to stop the word "cum" in
any
> >case (upper, lower or mixed) from been in the subject. But I don't want
to
> >block words with "cum" in them like "document". So here's what I
- Original Message -
From: "Jesse Guardiani" <[EMAIL PROTECTED]>
> Basically, my script was designed to compliment an industrial strength
> spam filtering program like TMDA. TMDA will reliably block bogus messages
> with an empty envelope sender for you. For more info about TMDA, look
he
- Original Message -
From: "Jesse Guardiani" <[EMAIL PROTECTED]>
> > Jesse,
> >
> > Sorry for sounding like a dummy but can you explain point # 2 for me?
The
> > envelope sender is what a user sees in their email client right?
>
> No. The env
ient (for an interpretted script) and fast.
> It's also well tested at this point, and relatively bug-free. It
> runs under qmail-qfilter (a C wrapper for QMAILQUEUE scripts).
>
> Let me know if you're interested.
Jesse,
Sorry for sounding like a dummy but can you explain poin
need help with is how to
make qmail-scanner aware of my new script, how qmail-scanner will send data
to my script, and what sort of error codes and information qmail-scanner
expects back from me? We do have a development mail server which is where I
do all my testing and development.
- Original Message -
From: "Doug Monroe" <[EMAIL PROTECTED]>
> maybe I should clarify. The quarantine-attachements.txt file acts on
> headers, and can not be used to "scan" message body. QS is modular and
> it can pass the message to utilities like SpamAssassin which does
> content scannin
t (for an interpretted script) and fast.
> It's also well tested at this point, and relatively bug-free. It
> runs under qmail-qfilter (a C wrapper for QMAILQUEUE scripts).
>
> Let me know if you're interested.
I'm very interested. Please ema
- Original Message -
> QS does not do message body scanning. quarantine-attachments.txt works
> with message headers.
Humm that seems like a pretty major short coming. An email / qmail scanner
that can't scan email content? Are there any work arounds or alternatives
to do some content s
Hi,
I've managed to filter out certain subject lines but placing them in
/var/spool/qmailscan/quarantine-attachments.txt
Example
(?i).*test.*Virus-Subject:test
What's the syntax to filter certain words or phrases in the body of the
email? There don't seem to be any examples in there and
- Original Message -
From: "Doug Monroe" <[EMAIL PROTECTED]>
> (?i)(.* cum .*|cum|cum .*|.* cum)
Thanks Doug. Works perfect.
Malcolm
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Last week I sent an email to a server that did a neat trick. My email is
coming from [EMAIL PROTECTED] so before accepting my email it did a DNS
query and looked up the mx record for lds.dyndns.org and if it didn't match
my server's IP it wouldn't accept my email. This seems VERY affective the
mo
- Original Message -
> and what exact subject line is being sent?
>
> The above gets turned into
> /^(?i).* cum .*$/
>
> so it will NOT match
> Subject: cum
> or
> Subject: please cum
> e.g. it will NOT match any subject where the leading -or- trailing is
> NOT present
>
> It s
- Original Message -
From: "Jay Swackhamer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 15, 2003 1:07 PM
Subject: Re: [Qmail-scanner-general]blocking certain words
> Doug Monroe <[EMAIL PROTECTED]> wrote:
> > Secondly, the test is a simple pattern match:
> > i
- Original Message -
From: "Doug Monroe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 15, 2003 12:39 PM
Subject: Re: [Qmail-scanner-general]blocking certain words
> [EMAIL PROTECTED] wrote:
>
> > I've found in /var/spool/qmailscan/quarantine-attachements.txt I can
I've found in /var/spool/qmailscan/quarantine-attachements.txt I can block
certain words in the subject. Here's what I have.
cum Virus-Subject: cum
Unfortunately we get spam with all sorts of variation like Cum cUm cUM etc.
etc. Is there some sort of trick or reg expression you can use the
Hi there,
I'm a new user of qmail-scanner (soon to be ex RAV user). Just got it
working last week with clamd and have a few questions.
1.) I thought I read something about cleaning out the files in
/var/spool/qmailscan but now I can't find it. Do the quarantine files
eventually get deleted or d
18 matches
Mail list logo
