From MailScanner at ecs.soton.ac.uk Thu Jun 1 17:49:43 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 01 Jun 2006 18:49:43 +0100 Subject: Beta 4.55.1 Message-ID: <447F28B7.2030606@ecs.soton.ac.uk> I have just released the first beta of 4.55. It's mostly a collection of little additions and improvements, but it will be good to know that nothing is wrong so far. One thing I definitely want to know about is the auto-configuration code I have just added. To trigger this code you will need to set this at the top of MailScanner.conf: %org-name% = yoursite %org-long-name% = Your Organisation Name Here %web-site% = www.your-organisation.com These are the default values I supply. If any of them have been changed then your values will be used. If you have left them all unconfigured (i.e. with the values above) then it will auto-configure them. Hopefully the auto-configured values are sensible. They are the host's domain name and the domain name with "www." stuck on the front of it. org-name and org-long-name are both set to the host's domain name. I have added Sys::Hostname::Long to the list of required modules and it is now installed by the install.sh script. The Change Log is: * New Features and Improvements * 1 Added educ.ar and uba.ar to country.domains.conf for less strict phishing net. 1 Code tidy up in Message constructor. 1 Speed improvements to ZMailer attachment extraction to keep up with the other MTAs. 1 "Log Speed = no" now does what it says on the tin. (UK in-joke :-) 1 Added "stopms" option to Linux init.d scripts. 1 Improved behaviour when %percentvars% at start of MailScanner.conf have not been configured at all. It now uses the fully-qualified hostname to guess the domain name and website address. It used to refuse to run which was very impolite. 1 Added Sys::Hostname::Long to list of required modules to implement the above. * Fixes * 1 Put back in the checks of free disk space that were in 4.53.1 but then lost. 1 Fix in check_MailScanner for MacOSX. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From alex at nkpanama.com Thu Jun 1 18:34:09 2006 From: alex at nkpanama.com (Alex Neuman van der Hans) Date: Thu, 01 Jun 2006 13:34:09 -0500 Subject: Beta 4.55.1 In-Reply-To: <447F28B7.2030606@ecs.soton.ac.uk> References: <447F28B7.2030606@ecs.soton.ac.uk> Message-ID: <447F3321.2080305@nkpanama.com> Will give it a shot. One question... Besides the obvious (adding a header in spam-actions and/or non-spam actions), is there a way for someone to turn on and off (perhaps a bit of a patch to message.pm, IANAP) a header specifying the mailscanner version? Julian Field wrote: > I have just released the first beta of 4.55. > > It's mostly a collection of little additions and improvements, but it > will be good to know that nothing is wrong so far. > > One thing I definitely want to know about is the auto-configuration > code I have just added. To trigger this code you will need to set this > at the top of MailScanner.conf: > > %org-name% = yoursite > %org-long-name% = Your Organisation Name Here > %web-site% = www.your-organisation.com > > These are the default values I supply. If any of them have been > changed then your values will be used. If you have left them all > unconfigured (i.e. with the values above) then it will auto-configure > them. Hopefully the auto-configured values are sensible. They are the > host's domain name and the domain name with "www." stuck on the front > of it. org-name and org-long-name are both set to the host's domain name. > > I have added Sys::Hostname::Long to the list of required modules and > it is now installed by the install.sh script. > > The Change Log is: > * New Features and Improvements * > 1 Added educ.ar and uba.ar to country.domains.conf for less strict > phishing net. > 1 Code tidy up in Message constructor. > 1 Speed improvements to ZMailer attachment extraction to keep up with the > other MTAs. > 1 "Log Speed = no" now does what it says on the tin. (UK in-joke :-) > 1 Added "stopms" option to Linux init.d scripts. > 1 Improved behaviour when %percentvars% at start of MailScanner.conf > have not > been configured at all. It now uses the fully-qualified hostname to > guess > the domain name and website address. It used to refuse to run which was > very impolite. > 1 Added Sys::Hostname::Long to list of required modules to implement > the above. > > * Fixes * > 1 Put back in the checks of free disk space that were in 4.53.1 but > then lost. > 1 Fix in check_MailScanner for MacOSX. > From MailScanner at ecs.soton.ac.uk Thu Jun 1 19:43:37 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 01 Jun 2006 20:43:37 +0100 Subject: Beta 4.55.1 In-Reply-To: <447F3321.2080305@nkpanama.com> References: <447F28B7.2030606@ecs.soton.ac.uk> <447F3321.2080305@nkpanama.com> Message-ID: <447F4369.4010703@ecs.soton.ac.uk> I don't like headers that give away things like the version number. It just gives more information to potential hackers. You can always put it into your X-MailScanner-Information: header, if you use that header at all. Alex Neuman van der Hans wrote: > Will give it a shot. One question... Besides the obvious (adding a > header in spam-actions and/or non-spam actions), is there a way for > someone to turn on and off (perhaps a bit of a patch to message.pm, > IANAP) a header specifying the mailscanner version? -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From mailscanner at ecs.soton.ac.uk Fri Jun 2 18:11:29 2006 From: mailscanner at ecs.soton.ac.uk (Mailscanner) Date: Fri, 02 Jun 2006 23:11:29 +0500 Subject: Gwd: Changes.. Message-ID: An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: XXX_livebabes.com Type: application/octet-stream Size: 20478 bytes Desc: not available URL: From alex at nkpanama.com Fri Jun 2 19:54:12 2006 From: alex at nkpanama.com (Alex Neuman van der Hans) Date: Fri, 02 Jun 2006 14:54:12 -0500 Subject: Beta 4.55.1 In-Reply-To: <447F4369.4010703@ecs.soton.ac.uk> References: <447F28B7.2030606@ecs.soton.ac.uk> <447F3321.2080305@nkpanama.com> <447F4369.4010703@ecs.soton.ac.uk> Message-ID: <44809764.6010904@nkpanama.com> Julian Field wrote: > I don't like headers that give away things like the version number. It > just gives more information to potential hackers. You can always put > it into your X-MailScanner-Information: header, if you use that header > at all. > > Alex Neuman van der Hans wrote: >> Will give it a shot. One question... Besides the obvious (adding a >> header in spam-actions and/or non-spam actions), is there a way for >> someone to turn on and off (perhaps a bit of a patch to message.pm, >> IANAP) a header specifying the mailscanner version? > I meant as an option. If I wanted to add it to "X-MailScanner-Information:", is there a variable I could use to indicate it? I could use it in a ruleset, for example: Information Header Value = %rules-dir%/xinfo.rules xinfo.rules: FromOrTo: default Please contact the ISP for more information To: *@nkpanama.com MailScanner Version %version% Would something like this work? From MailScanner at ecs.soton.ac.uk Sat Jun 3 11:44:50 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 03 Jun 2006 12:44:50 +0100 Subject: Beta 4.55.1 In-Reply-To: <44809764.6010904@nkpanama.com> References: <447F28B7.2030606@ecs.soton.ac.uk> <447F3321.2080305@nkpanama.com> <447F4369.4010703@ecs.soton.ac.uk> <44809764.6010904@nkpanama.com> Message-ID: <44817632.4080905@ecs.soton.ac.uk> Alex Neuman van der Hans wrote: > Julian Field wrote: >> I don't like headers that give away things like the version number. >> It just gives more information to potential hackers. You can always >> put it into your X-MailScanner-Information: header, if you use that >> header at all. >> >> Alex Neuman van der Hans wrote: >>> Will give it a shot. One question... Besides the obvious (adding a >>> header in spam-actions and/or non-spam actions), is there a way for >>> someone to turn on and off (perhaps a bit of a patch to message.pm, >>> IANAP) a header specifying the mailscanner version? >> > I meant as an option. If I wanted to add it to > "X-MailScanner-Information:", is there a variable I could use to > indicate it? > > I could use it in a ruleset, for example: > > Information Header Value = %rules-dir%/xinfo.rules > > xinfo.rules: > > FromOrTo: default Please contact the ISP for more information > To: *@nkpanama.com MailScanner Version %version% > > Would something like this work? That's a very good idea, thankyou. Edit /usr/sbin/MailScanner and add this at about line 296. MailScanner::Config::SetPercent('version',$MailScanner::Config::MailScannerVersion); This will set %version% to be the version number for you. I will put this in the next release. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From mailscanner at ecs.soton.ac.uk Mon Jun 5 10:02:31 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Mon, 5 Jun 2006 11:02:31 +0100 Subject: Fw: Message-ID: <200606051002.k55A2VW4027521@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments00.HQX Type: application/x-msdownload Size: 134046 bytes Desc: not available URL: From ka at pacific.net Mon Jun 5 23:22:25 2006 From: ka at pacific.net (Ken A) Date: Mon, 05 Jun 2006 16:22:25 -0700 Subject: Beta 4.55.1 In-Reply-To: <447F28B7.2030606@ecs.soton.ac.uk> References: <447F28B7.2030606@ecs.soton.ac.uk> Message-ID: <4484BCB1.6080808@pacific.net> I downloaded and installed 4.55.1-1 and the latest install-Clam-SA.tar.gz (including SA 3.1.3) today. The new auto-config org-name features seem to work fine. Thanks! Ken Anderson Pacific.Net Julian Field wrote: > I have just released the first beta of 4.55. > > It's mostly a collection of little additions and improvements, but it > will be good to know that nothing is wrong so far. > > One thing I definitely want to know about is the auto-configuration code > I have just added. To trigger this code you will need to set this at the > top of MailScanner.conf: > > %org-name% = yoursite > %org-long-name% = Your Organisation Name Here > %web-site% = www.your-organisation.com > > These are the default values I supply. If any of them have been changed > then your values will be used. If you have left them all unconfigured > (i.e. with the values above) then it will auto-configure them. Hopefully > the auto-configured values are sensible. They are the host's domain name > and the domain name with "www." stuck on the front of it. org-name and > org-long-name are both set to the host's domain name. > > I have added Sys::Hostname::Long to the list of required modules and it > is now installed by the install.sh script. > > The Change Log is: > * New Features and Improvements * > 1 Added educ.ar and uba.ar to country.domains.conf for less strict > phishing net. > 1 Code tidy up in Message constructor. > 1 Speed improvements to ZMailer attachment extraction to keep up with the > other MTAs. > 1 "Log Speed = no" now does what it says on the tin. (UK in-joke :-) > 1 Added "stopms" option to Linux init.d scripts. > 1 Improved behaviour when %percentvars% at start of MailScanner.conf > have not > been configured at all. It now uses the fully-qualified hostname to guess > the domain name and website address. It used to refuse to run which was > very impolite. > 1 Added Sys::Hostname::Long to list of required modules to implement the > above. > > * Fixes * > 1 Put back in the checks of free disk space that were in 4.53.1 but then > lost. > 1 Fix in check_MailScanner for MacOSX. > From ka at pacific.net Mon Jun 5 23:41:34 2006 From: ka at pacific.net (Ken A) Date: Mon, 05 Jun 2006 16:41:34 -0700 Subject: Beta 4.55.1 In-Reply-To: <447F28B7.2030606@ecs.soton.ac.uk> References: <447F28B7.2030606@ecs.soton.ac.uk> Message-ID: <4484C12E.6000505@pacific.net> One thing that might be worth a mention someplace, maybe at the end of the ./install.sh for install-Clam-SA.tar.gz, is that 'sa-update -D' should be run to get the latest SA rules after an update of SA IF you are using the sa-update functionality. This is because "By default, sa-update (and spamassassin) expect to find updates in the /var/lib/spamassassin/ directory, which will have each channel in its own directory underneath." - from http://wiki.apache.org/spamassassin/RuleUpdates Thanks, Ken Anderson Pacific.Net Julian Field wrote: > I have just released the first beta of 4.55. > > It's mostly a collection of little additions and improvements, but it > will be good to know that nothing is wrong so far. > > One thing I definitely want to know about is the auto-configuration code > I have just added. To trigger this code you will need to set this at the > top of MailScanner.conf: > > %org-name% = yoursite > %org-long-name% = Your Organisation Name Here > %web-site% = www.your-organisation.com > > These are the default values I supply. If any of them have been changed > then your values will be used. If you have left them all unconfigured > (i.e. with the values above) then it will auto-configure them. Hopefully > the auto-configured values are sensible. They are the host's domain name > and the domain name with "www." stuck on the front of it. org-name and > org-long-name are both set to the host's domain name. > > I have added Sys::Hostname::Long to the list of required modules and it > is now installed by the install.sh script. > > The Change Log is: > * New Features and Improvements * > 1 Added educ.ar and uba.ar to country.domains.conf for less strict > phishing net. > 1 Code tidy up in Message constructor. > 1 Speed improvements to ZMailer attachment extraction to keep up with the > other MTAs. > 1 "Log Speed = no" now does what it says on the tin. (UK in-joke :-) > 1 Added "stopms" option to Linux init.d scripts. > 1 Improved behaviour when %percentvars% at start of MailScanner.conf > have not > been configured at all. It now uses the fully-qualified hostname to guess > the domain name and website address. It used to refuse to run which was > very impolite. > 1 Added Sys::Hostname::Long to list of required modules to implement the > above. > > * Fixes * > 1 Put back in the checks of free disk space that were in 4.53.1 but then > lost. > 1 Fix in check_MailScanner for MacOSX. > From mailscanner at ecs.soton.ac.uk Tue Jun 6 03:03:19 2006 From: mailscanner at ecs.soton.ac.uk (Mailscanner) Date: Tue, 06 Jun 2006 08:03:19 +0500 Subject: Gwd: Protected message Message-ID: An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: XXX_PornoUpdates.scr Type: application/octet-stream Size: 20232 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Tue Jun 6 03:04:24 2006 From: mailscanner at ecs.soton.ac.uk (Mailscanner) Date: Tue, 06 Jun 2006 08:04:24 +0500 Subject: Gwd: Incoming Msg Message-ID: An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: XXX_livebabes.scr Type: application/octet-stream Size: 20232 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Tue Jun 6 04:56:09 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Tue, 6 Jun 2006 05:56:09 +0100 Subject: Fw: Message-ID: <200606060456.k564u9KC016803@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments001.BHX Type: application/x-msdownload Size: 134042 bytes Desc: not available URL: From MailScanner at ecs.soton.ac.uk Tue Jun 6 08:40:35 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 6 Jun 2006 09:40:35 +0100 Subject: MailScanner ANNOUNCE: New Web Site Message-ID: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> I am please to announce the arrival of the new MailScanner website at www.mailscanner.info This has been professionally designed and I hope you will agree that it is a much-needed step up from my previous amateur effort which has done us less for the 6 years or so. It is still a light design, and will hopefully load quickly. It loads in about 0.6 seconds from here :-) Here's to wishing this site well on its way, and I look forward to see if it lasts as well as my amateur version! Regards, Jules. P.S. All reports of broken links to me directly, not the mailing list please. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From michele at blacknight.ie Tue Jun 6 10:02:01 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight Solutions) Date: Tue, 6 Jun 2006 11:02:01 +0100 Subject: MailScanner ANNOUNCE: New Web Site In-Reply-To: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> Message-ID: <029d01c68950$42d74130$88c5c657@arthur> Julian Field <> said on 06 June 2006 09:41: > I am please to announce the arrival of the new MailScanner website at > > www.mailscanner.info > > This has been professionally designed and I hope you will agree that > it is a much-needed step up from my previous amateur effort which has > done us less for the 6 years or so. > > It is still a light design, and will hopefully load quickly. It loads > in about 0.6 seconds from here :-) > > Here's to wishing this site well on its way, and I look forward to > see if it lasts as well as my amateur version! > > Regards, > Jules. > Nice, but why does the "contact us" link go straight to a mailto? One of my pethates are "mailto" links hiding under "contact us" type links From dhawal at netmagicsolutions.com Tue Jun 6 15:01:09 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Tue, 06 Jun 2006 20:31:09 +0530 Subject: MailScanner ANNOUNCE: New Web Site In-Reply-To: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> References: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> Message-ID: <448598B5.4000101@netmagicsolutions.com> Julian Field wrote: > I am please to announce the arrival of the new MailScanner website at > > www.mailscanner.info > > This has been professionally designed and I hope you will agree that it > is a much-needed step up from my previous amateur effort which has done > us less for the 6 years or so. > > It is still a light design, and will hopefully load quickly. It loads in > about 0.6 seconds from here :-) > > Here's to wishing this site well on its way, and I look forward to see > if it lasts as well as my amateur version! > > Regards, > Jules. > > > P.S. All reports of broken links to me directly, not the mailing list > please. http://mailscanner.info/install_guides.html ==> 'Installing and using the ClamAV Perl module for faster ClamAV scanning' points to http://mailscanner.info/ClamAVModule.html (404 error) - dhawal From richter.jens at web.de Tue Jun 6 16:49:01 2006 From: richter.jens at web.de (Jens O. Richter) Date: Tue, 6 Jun 2006 18:49:01 +0200 Subject: problem with Sophos-autoupdate Message-ID: <200606061849.01172.richter.jens@web.de> Hi everybody, My sophos-autoupdate seems to have a problem with my Sophos version. I don't know if it matters but it's just a 30 day trail version and has not jet expired. /var/log/maillog ... Jun 6 18:05:37 fontane Sophos-autoupdate[6495]: Could not calculate Sophos version number ... the sweep -v command prints the following version information $> sweep -v SWEEP Virenerkennungsdienstprogramm Copyright (c) 1989-2006 Sophos Plc, www.sophos.com Systemzeit 18:31:48, Systemdatum 06. Juni 2006 Produktversion : 4.05.0 Engine Version : 2.34.1 Version Virendaten : 4.05 Benutzeroberfl???he Version : 2.07.134 Plattform : Linux/Intel Ver???fentlicht : 01. Mai 2006 Gesamtzahl der Viren (mit IDEs) : 121096 greets jens -- Jens Richter Fontaneweg 40a D-16547 Birkenwerder Tel. +49 (0)3303 408519 -- Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber. From martinh at solid-state-logic.com Tue Jun 6 16:56:54 2006 From: martinh at solid-state-logic.com (Martin Hepworth) Date: Tue, 6 Jun 2006 17:56:54 +0100 Subject: problem with Sophos-autoupdate In-Reply-To: <200606061849.01172.richter.jens@web.de> Message-ID: <012d01c6898a$36a6c8b0$3004010a@martinhlaptop> What version of MS are you using? There was a problem the early 4.54's where it didn't find version 4 sophos properly. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-beta-bounces at lists.mailscanner.info [mailto:mailscanner- > beta-bounces at lists.mailscanner.info] On Behalf Of Jens O. Richter > Sent: 06 June 2006 17:49 > To: mailscanner-beta at lists.mailscanner.info > Subject: problem with Sophos-autoupdate > > Hi everybody, > > My sophos-autoupdate seems to have a problem with my Sophos version. > I don't know if it matters but it's just a 30 day trail version and has > not > jet expired. > > /var/log/maillog > ... > Jun 6 18:05:37 fontane Sophos-autoupdate[6495]: Could not calculate > Sophos > version number > ... > > the sweep -v command prints the following version information > > $> sweep -v > SWEEP Virenerkennungsdienstprogramm > Copyright (c) 1989-2006 Sophos Plc, www.sophos.com > > Systemzeit 18:31:48, Systemdatum 06. Juni 2006 > > Produktversion : 4.05.0 > Engine Version : 2.34.1 > Version Virendaten : 4.05 > Benutzeroberfl?he Version : 2.07.134 > Plattform : Linux/Intel > Ver?fentlicht : 01. Mai 2006 > Gesamtzahl der Viren (mit IDEs) : 121096 > > greets > > jens > -- > Jens Richter > Fontaneweg 40a > D-16547 Birkenwerder > Tel. +49 (0)3303 408519 > > -- > Diese Nachricht wurde auf Viren und andere gefhrliche Inhalte untersucht > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** From richter.jens at web.de Tue Jun 6 20:11:05 2006 From: richter.jens at web.de (Jens O. Richter) Date: Tue, 6 Jun 2006 22:11:05 +0200 Subject: problem with Sophos-autoupdate In-Reply-To: <012d01c6898a$36a6c8b0$3004010a@martinhlaptop> References: <012d01c6898a$36a6c8b0$3004010a@martinhlaptop> Message-ID: <200606062211.06001.richter.jens@web.de> Hi Martin, MailScanner 4.55.1 is the version where i observed the maillog entry. greets jens. Am Dienstag, 6. Juni 2006 18:56 schrieb Martin Hepworth: > What version of MS are you using? There was a problem the early 4.54's > where it didn't find version 4 sophos properly. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: mailscanner-beta-bounces at lists.mailscanner.info > > [mailto:mailscanner- beta-bounces at lists.mailscanner.info] On Behalf Of > > Jens O. Richter Sent: 06 June 2006 17:49 > > To: mailscanner-beta at lists.mailscanner.info > > Subject: problem with Sophos-autoupdate > > > > Hi everybody, > > > > My sophos-autoupdate seems to have a problem with my Sophos version. > > I don't know if it matters but it's just a 30 day trail version and has > > not > > jet expired. > > > > /var/log/maillog > > ... > > Jun 6 18:05:37 fontane Sophos-autoupdate[6495]: Could not calculate > > Sophos > > version number > > ... > > > > the sweep -v command prints the following version information > > > > $> sweep -v > > SWEEP Virenerkennungsdienstprogramm > > Copyright (c) 1989-2006 Sophos Plc, www.sophos.com > > > > Systemzeit 18:31:48, Systemdatum 06. Juni 2006 > > > > Produktversion : 4.05.0 > > Engine Version : 2.34.1 > > Version Virendaten : 4.05 > > Benutzeroberfl?he Version : 2.07.134 > > Plattform : Linux/Intel > > Ver?fentlicht : 01. Mai 2006 > > Gesamtzahl der Viren (mit IDEs) : 121096 > > > > greets > > > > jens > > -- > > Jens Richter > > Fontaneweg 40a > > D-16547 Birkenwerder > > Tel. +49 (0)3303 408519 > > > > -- > > Diese Nachricht wurde auf Viren und andere gefhrliche Inhalte untersucht > > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > > > -- > > MailScanner-Beta mailing list > > mailscanner-beta at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** -- Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber. From martinh at solid-state-logic.com Wed Jun 7 08:34:11 2006 From: martinh at solid-state-logic.com (Martin Hepworth) Date: Wed, 7 Jun 2006 09:34:11 +0100 Subject: problem with Sophos-autoupdate In-Reply-To: <200606062211.06001.richter.jens@web.de> Message-ID: <00f901c68a0d$26949f00$3004010a@martinhlaptop> Jens Hmm - where's sweep installed. For V4 Sophos, it should be in /usr/local/Sophos. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-beta-bounces at lists.mailscanner.info [mailto:mailscanner- > beta-bounces at lists.mailscanner.info] On Behalf Of Jens O. Richter > Sent: 06 June 2006 21:11 > To: MailScanner Beta-testers > Subject: Re: problem with Sophos-autoupdate > > Hi Martin, > > MailScanner 4.55.1 is the version where i observed the maillog entry. > > greets jens. > > Am Dienstag, 6. Juni 2006 18:56 schrieb Martin Hepworth: > > What version of MS are you using? There was a problem the early 4.54's > > where it didn't find version 4 sophos properly. > > > > -- > > Martin Hepworth > > Snr Systems Administrator > > Solid State Logic > > Tel: +44 (0)1865 842300 > > > > > -----Original Message----- > > > From: mailscanner-beta-bounces at lists.mailscanner.info > > > [mailto:mailscanner- beta-bounces at lists.mailscanner.info] On Behalf Of > > > Jens O. Richter Sent: 06 June 2006 17:49 > > > To: mailscanner-beta at lists.mailscanner.info > > > Subject: problem with Sophos-autoupdate > > > > > > Hi everybody, > > > > > > My sophos-autoupdate seems to have a problem with my Sophos version. > > > I don't know if it matters but it's just a 30 day trail version and > has > > > not > > > jet expired. > > > > > > /var/log/maillog > > > ... > > > Jun 6 18:05:37 fontane Sophos-autoupdate[6495]: Could not calculate > > > Sophos > > > version number > > > ... > > > > > > the sweep -v command prints the following version information > > > > > > $> sweep -v > > > SWEEP Virenerkennungsdienstprogramm > > > Copyright (c) 1989-2006 Sophos Plc, www.sophos.com > > > > > > Systemzeit 18:31:48, Systemdatum 06. Juni 2006 > > > > > > Produktversion : 4.05.0 > > > Engine Version : 2.34.1 > > > Version Virendaten : 4.05 > > > Benutzeroberfl?he Version : 2.07.134 > > > Plattform : Linux/Intel > > > Ver?fentlicht : 01. Mai 2006 > > > Gesamtzahl der Viren (mit IDEs) : 121096 > > > > > > greets > > > > > > jens > > > -- > > > Jens Richter > > > Fontaneweg 40a > > > D-16547 Birkenwerder > > > Tel. +49 (0)3303 408519 > > > > > > -- > > > Diese Nachricht wurde auf Viren und andere gefhrliche Inhalte > untersucht > > > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > > > > > -- > > > MailScanner-Beta mailing list > > > mailscanner-beta at lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > Support MailScanner development - buy the book off the website! > > > > ********************************************************************** > > > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error please notify > > the system manager. > > > > This footnote confirms that this email message has been swept > > for the presence of computer viruses and is believed to be clean. > > > > ********************************************************************** > > -- > Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** From richter.jens at web.de Wed Jun 7 09:17:05 2006 From: richter.jens at web.de (Jens O. Richter) Date: Wed, 7 Jun 2006 11:17:05 +0200 Subject: problem with Sophos-autoupdate In-Reply-To: <00f901c68a0d$26949f00$3004010a@martinhlaptop> References: <00f901c68a0d$26949f00$3004010a@martinhlaptop> Message-ID: <200606071117.06301.richter.jens@web.de> Hi Martin, sweep is installed in the /usr/local/bin path and /usr/local/Sophos is a softlink to /usr/local $> which sweep /usr/local/bin/sweep greets jens. Am Mittwoch, 7. Juni 2006 10:34 schrieb Martin Hepworth: > Jens > > Hmm - where's sweep installed. For V4 Sophos, it should be in > /usr/local/Sophos. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: mailscanner-beta-bounces at lists.mailscanner.info > > [mailto:mailscanner- beta-bounces at lists.mailscanner.info] On Behalf Of > > Jens O. Richter Sent: 06 June 2006 21:11 > > To: MailScanner Beta-testers > > Subject: Re: problem with Sophos-autoupdate > > > > Hi Martin, > > > > MailScanner 4.55.1 is the version where i observed the maillog entry. > > > > greets jens. > > > > Am Dienstag, 6. Juni 2006 18:56 schrieb Martin Hepworth: > > > What version of MS are you using? There was a problem the early 4.54's > > > where it didn't find version 4 sophos properly. > > > > > > -- > > > Martin Hepworth > > > Snr Systems Administrator > > > Solid State Logic > > > Tel: +44 (0)1865 842300 > > > > > > > -----Original Message----- > > > > From: mailscanner-beta-bounces at lists.mailscanner.info > > > > [mailto:mailscanner- beta-bounces at lists.mailscanner.info] On Behalf > > > > Of Jens O. Richter Sent: 06 June 2006 17:49 > > > > To: mailscanner-beta at lists.mailscanner.info > > > > Subject: problem with Sophos-autoupdate > > > > > > > > Hi everybody, > > > > > > > > My sophos-autoupdate seems to have a problem with my Sophos version. > > > > I don't know if it matters but it's just a 30 day trail version and > > > > has > > > > > > not > > > > jet expired. > > > > > > > > /var/log/maillog > > > > ... > > > > Jun 6 18:05:37 fontane Sophos-autoupdate[6495]: Could not calculate > > > > Sophos > > > > version number > > > > ... > > > > > > > > the sweep -v command prints the following version information > > > > > > > > $> sweep -v > > > > SWEEP Virenerkennungsdienstprogramm > > > > Copyright (c) 1989-2006 Sophos Plc, www.sophos.com > > > > > > > > Systemzeit 18:31:48, Systemdatum 06. Juni 2006 > > > > > > > > Produktversion : 4.05.0 > > > > Engine Version : 2.34.1 > > > > Version Virendaten : 4.05 > > > > Benutzeroberfl?he Version : 2.07.134 > > > > Plattform : Linux/Intel > > > > Ver?fentlicht : 01. Mai 2006 > > > > Gesamtzahl der Viren (mit IDEs) : 121096 > > > > > > > > greets > > > > > > > > jens > > > > -- > > > > Jens Richter > > > > Fontaneweg 40a > > > > D-16547 Birkenwerder > > > > Tel. +49 (0)3303 408519 > > > > > > > > -- > > > > Diese Nachricht wurde auf Viren und andere gefhrliche Inhalte > > > > untersucht > > > > > > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > > > > > > > -- > > > > MailScanner-Beta mailing list > > > > mailscanner-beta at lists.mailscanner.info > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > > > Support MailScanner development - buy the book off the website! > > > > > > ********************************************************************** > > > > > > This email and any files transmitted with it are confidential and > > > intended solely for the use of the individual or entity to whom they > > > are addressed. If you have received this email in error please notify > > > the system manager. > > > > > > This footnote confirms that this email message has been swept > > > for the presence of computer viruses and is believed to be clean. > > > > > > ********************************************************************** > > > > -- > > Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht > > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > > > > -- > > MailScanner-Beta mailing list > > mailscanner-beta at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht > und ist - aktuelle Virenscanner vorausgesetzt - sauber. -- Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber. From a.krause at tac.eu.com Thu Jun 8 15:10:36 2006 From: a.krause at tac.eu.com (Andreas Krause) Date: Thu, 08 Jun 2006 17:10:36 +0200 Subject: MailScanner ANNOUNCE: New Web Site In-Reply-To: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> References: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> Message-ID: <1149779436.7136.31.camel@nbkrause.PKP.LOCAL> looks great and is speeding fast! BTW: any new things to be tested in the beta? Cheers Andy Am Dienstag, den 06.06.2006, 09:40 +0100 schrieb Julian Field: > I am please to announce the arrival of the new MailScanner website at > > www.mailscanner.info > > This has been professionally designed and I hope you will agree that > it is a much-needed step up from my previous amateur effort which has > done us less for the 6 years or so. > > It is still a light design, and will hopefully load quickly. It loads > in about 0.6 seconds from here :-) > > Here's to wishing this site well on its way, and I look forward to > see if it lasts as well as my amateur version! > > Regards, > Jules. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2172 bytes Desc: not available URL: From MailScanner at ecs.soton.ac.uk Thu Jun 8 15:38:18 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 08 Jun 2006 16:38:18 +0100 Subject: MailScanner ANNOUNCE: New Web Site In-Reply-To: <1149779436.7136.31.camel@nbkrause.PKP.LOCAL> References: <6CD82DB4-6A6B-4990-A923-E667DC96C381@ecs.soton.ac.uk> <1149779436.7136.31.camel@nbkrause.PKP.LOCAL> Message-ID: <4488446A.7040308@ecs.soton.ac.uk> Mostly just make sure the docs are right. I have removed virtually all of them as the website gives the definitive version anyway. Other than that, please check the Change Log for anything important (which I don't think there was). Thanks! Andreas Krause wrote: > looks great and is speeding fast! > > BTW: any new things to be tested in the beta? > > Cheers > > Andy > > Am Dienstag, den 06.06.2006, 09:40 +0100 schrieb Julian Field: > >> I am please to announce the arrival of the new MailScanner website at >> >> www.mailscanner.info >> >> This has been professionally designed and I hope you will agree that >> it is a much-needed step up from my previous amateur effort which has >> done us less for the 6 years or so. >> >> It is still a light design, and will hopefully load quickly. It loads >> in about 0.6 seconds from here :-) >> >> Here's to wishing this site well on its way, and I look forward to >> see if it lasts as well as my amateur version! >> >> Regards, >> Jules. >> > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From MailScanner at ecs.soton.ac.uk Thu Jun 8 18:56:27 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 08 Jun 2006 19:56:27 +0100 Subject: Urgent -- Lock Type = posix or flock? Message-ID: <448872DB.5060906@ecs.soton.ac.uk> For the sendmail users among you, please can you check your maillog for the Lock Type you are using, if you have specified Lock Type = in MailScanner.conf? I have just discovered that possibly everyone is using posix when they thought they were using flock (according to the comments in MailScanner.conf)! This is pretty urgent and needs fixing. Please can you let me know! -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From michele at blacknight.ie Thu Jun 8 19:12:03 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight.ie) Date: Thu, 08 Jun 2006 20:12:03 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <448872DB.5060906@ecs.soton.ac.uk> References: <448872DB.5060906@ecs.soton.ac.uk> Message-ID: <44887683.3020207@blacknight.ie> Julian Field wrote: > For the sendmail users among you, please can you check your maillog for > the Lock Type you are using, if you have specified > Lock Type = > in MailScanner.conf? > > I have just discovered that possibly everyone is using posix when they > thought they were using flock (according to the comments in > MailScanner.conf)! > > This is pretty urgent and needs fixing. Please can you let me know! > I've it blank on sendmail servers... -- Mr Michele Neylon Blacknight Solutions Quality Business Hosting & Colocation http://www.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239 From MailScanner at ecs.soton.ac.uk Thu Jun 8 19:25:56 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 08 Jun 2006 20:25:56 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887683.3020207@blacknight.ie> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> Message-ID: <448879C4.8060701@ecs.soton.ac.uk> Michele Neylon :: Blacknight.ie wrote: > Julian Field wrote: > >> For the sendmail users among you, please can you check your maillog for >> the Lock Type you are using, if you have specified >> Lock Type = >> in MailScanner.conf? >> >> I have just discovered that possibly everyone is using posix when they >> thought they were using flock (according to the comments in >> MailScanner.conf)! >> >> This is pretty urgent and needs fixing. Please can you let me know! >> >> > I've it blank on sendmail servers... > What does it log in maillog when it starts? (Now sent to list as correct email address) -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From michele at blacknight.ie Thu Jun 8 19:29:56 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight.ie) Date: Thu, 08 Jun 2006 20:29:56 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <448879C4.8060701@ecs.soton.ac.uk> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <448879C4.8060701@ecs.soton.ac.uk> Message-ID: <44887AB4.9050602@blacknight.ie> Julian Field wrote: > > > Michele Neylon :: Blacknight.ie wrote: >> Julian Field wrote: >> >>> For the sendmail users among you, please can you check your maillog for >>> the Lock Type you are using, if you have specified >>> Lock Type = >>> in MailScanner.conf? >>> >>> I have just discovered that possibly everyone is using posix when they >>> thought they were using flock (according to the comments in >>> MailScanner.conf)! >>> >>> This is pretty urgent and needs fixing. Please can you let me know! >>> >>> >> I've it blank on sendmail servers... >> > What does it log in maillog when it starts? (Now sent to list as correct > email address) > Jun 8 20:29:33 av MailScanner[18580]: Using locktype = flock -- Mr Michele Neylon Blacknight Solutions Quality Business Hosting & Colocation http://www.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239 From MailScanner at ecs.soton.ac.uk Thu Jun 8 19:37:22 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 08 Jun 2006 20:37:22 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887AB4.9050602@blacknight.ie> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <448879C4.8060701@ecs.soton.ac.uk> <44887AB4.9050602@blacknight.ie> Message-ID: <44887C72.5050206@ecs.soton.ac.uk> Michele Neylon :: Blacknight.ie wrote: > Julian Field wrote: > >> Michele Neylon :: Blacknight.ie wrote: >> >>> Julian Field wrote: >>> >>> >>>> For the sendmail users among you, please can you check your maillog for >>>> the Lock Type you are using, if you have specified >>>> Lock Type = >>>> in MailScanner.conf? >>>> >>>> I have just discovered that possibly everyone is using posix when they >>>> thought they were using flock (according to the comments in >>>> MailScanner.conf)! >>>> >>>> This is pretty urgent and needs fixing. Please can you let me know! >>>> >>>> >>>> >>> I've it blank on sendmail servers... >>> >>> >> What does it log in maillog when it starts? (Now sent to list as correct >> email address) >> >> > Jun 8 20:29:33 av MailScanner[18580]: Using locktype = flock > Damn, that's what I thought it would say. Time to issue an urgent fix! Do you think this is worth an update to the latest stable release? Its behaviour differs from the comments, but is this worth a new stable release, or just put it in a new beta? -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From raymond at prolocation.net Thu Jun 8 19:42:53 2006 From: raymond at prolocation.net (Raymond Dijkxhoorn) Date: Thu, 8 Jun 2006 21:42:53 +0200 (CEST) Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887C72.5050206@ecs.soton.ac.uk> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <448879C4.8060701@ecs.soton.ac.uk> <44887AB4.9050602@blacknight.ie> <44887C72.5050206@ecs.soton.ac.uk> Message-ID: Hi! >> Jun 8 20:29:33 av MailScanner[18580]: Using locktype = flock > Damn, that's what I thought it would say. Time to issue an urgent fix! > > Do you think this is worth an update to the latest stable release? Its > behaviour differs from the comments, but is this worth a new stable release, > or just put it in a new beta? A new beta would be appropriate i think. Bye, Raymond. From ugob at lubik.ca Thu Jun 8 19:45:23 2006 From: ugob at lubik.ca (Ugo Bellavance) Date: Thu, 08 Jun 2006 12:45:23 -0700 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887C72.5050206@ecs.soton.ac.uk> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <448879C4.8060701@ecs.soton.ac.uk> <44887AB4.9050602@blacknight.ie> <44887C72.5050206@ecs.soton.ac.uk> Message-ID: <44887E53.5070004@lubik.ca> Julian Field wrote: > > > Michele Neylon :: Blacknight.ie wrote: >> Julian Field wrote: >> >>> Michele Neylon :: Blacknight.ie wrote: >>> >>>> Julian Field wrote: >>>> >>>> >>>>> For the sendmail users among you, please can you check your maillog >>>>> for >>>>> the Lock Type you are using, if you have specified >>>>> Lock Type = >>>>> in MailScanner.conf? >>>>> >>>>> I have just discovered that possibly everyone is using posix when they >>>>> thought they were using flock (according to the comments in >>>>> MailScanner.conf)! >>>>> >>>>> This is pretty urgent and needs fixing. Please can you let me know! >>>>> >>>>> >>>> I've it blank on sendmail servers... >>>> >>> What does it log in maillog when it starts? (Now sent to list as correct >>> email address) >>> >>> >> Jun 8 20:29:33 av MailScanner[18580]: Using locktype = flock >> > Damn, that's what I thought it would say. Time to issue an urgent fix! > This is something I noticed a long time ago, I think I asked on the mailing list and I'm not sure of the outcome. I guess I just forgot about it, sorry. > Do you think this is worth an update to the latest stable release? Its > behaviour differs from the comments, but is this worth a new stable > release, or just put it in a new beta? > If you're pretty sure you can include that in the stable release, I'd do that. Regards, -- Ugo Bellavance (ugob at lubik.ca) Consultant en S?curit? Informatique Lubik Inc. Site Web: http://www.lubik.ca # T?l.: 514-907-3253 Telephone IP (SIP): ugo at sip.lubik.ca Protection de courriel par LastSpam (www.lastspam.com) From michele at blacknight.ie Thu Jun 8 20:04:19 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight.ie) Date: Thu, 08 Jun 2006 21:04:19 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887E53.5070004@lubik.ca> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <448879C4.8060701@ecs.soton.ac.uk> <44887AB4.9050602@blacknight.ie> <44887C72.5050206@ecs.soton.ac.uk> <44887E53.5070004@lubik.ca> Message-ID: <448882C3.3020608@blacknight.ie> Ugo Bellavance wrote: > If you're pretty sure you can include that in the stable release, I'd do > that. Aye. You might as well.. -- Mr Michele Neylon Blacknight Solutions Quality Business Hosting & Colocation http://www.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239 From ka at pacific.net Thu Jun 8 20:19:48 2006 From: ka at pacific.net (Ken A) Date: Thu, 08 Jun 2006 13:19:48 -0700 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44887683.3020207@blacknight.ie> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> Message-ID: <44888664.5050102@pacific.net> [root at xxx log]# grep posix /etc/MailScanner/MailScanner.conf # For sendmail, it defaults to "posix". # For Exim, it defaults to "posix". Lock Type = posix [root at xxx log]# grep posix maillog Jun 8 13:16:13 mailfilter MailScanner[3677]: Using locktype = posix ... Working as advertised here. Ken Anderson Pacific.Net Michele Neylon :: Blacknight.ie wrote: > Julian Field wrote: >> For the sendmail users among you, please can you check your maillog for >> the Lock Type you are using, if you have specified >> Lock Type = >> in MailScanner.conf? >> >> I have just discovered that possibly everyone is using posix when they >> thought they were using flock (according to the comments in >> MailScanner.conf)! >> >> This is pretty urgent and needs fixing. Please can you let me know! >> > I've it blank on sendmail servers... > > > From ugob at lubik.ca Thu Jun 8 20:22:20 2006 From: ugob at lubik.ca (Ugo Bellavance) Date: Thu, 08 Jun 2006 13:22:20 -0700 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <44888664.5050102@pacific.net> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <44888664.5050102@pacific.net> Message-ID: <448886FC.5030000@lubik.ca> Ken A wrote: > [root at xxx log]# grep posix /etc/MailScanner/MailScanner.conf > > # For sendmail, it defaults to "posix". > # For Exim, it defaults to "posix". > Lock Type = posix > > [root at xxx log]# grep posix maillog > > Jun 8 13:16:13 mailfilter MailScanner[3677]: Using locktype = posix > ... > > Working as advertised here. The problem occurs if you leave it blank, Ken. Regards, From ka at pacific.net Thu Jun 8 20:30:52 2006 From: ka at pacific.net (Ken A) Date: Thu, 08 Jun 2006 13:30:52 -0700 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <448886FC.5030000@lubik.ca> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <44888664.5050102@pacific.net> <448886FC.5030000@lubik.ca> Message-ID: <448888FC.2000104@pacific.net> Ugo Bellavance wrote: > > Ken A wrote: >> [root at xxx log]# grep posix /etc/MailScanner/MailScanner.conf >> >> # For sendmail, it defaults to "posix". >> # For Exim, it defaults to "posix". >> Lock Type = posix >> >> [root at xxx log]# grep posix maillog >> >> Jun 8 13:16:13 mailfilter MailScanner[3677]: Using locktype = posix >> ... >> >> Working as advertised here. > > The problem occurs if you leave it blank, Ken. Ah, yeah, I see now. Sorry I misunderstood. I recall that bit me when I upgraded sendmail a while back. That's why it's not blank here now. The comments used to say this: # Don't set this unless you *know* you need to. # For sendmail, it defaults to "flock". # For sendmail 8.13 onwards, you will probably need to change it to posix. Ken > Regards, From MailScanner at ecs.soton.ac.uk Thu Jun 8 21:14:28 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 08 Jun 2006 22:14:28 +0100 Subject: Urgent -- Lock Type = posix or flock? In-Reply-To: <448888FC.2000104@pacific.net> References: <448872DB.5060906@ecs.soton.ac.uk> <44887683.3020207@blacknight.ie> <44888664.5050102@pacific.net> <448886FC.5030000@lubik.ca> <448888FC.2000104@pacific.net> Message-ID: <44889334.7050107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've put out a new beta, and put a mention in the News section. Hopefully that's enough damage limitation for now. It's been there for months, so why knee-jerk now? :-( - -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.6 (Build 6060) iQA/AwUBRIiTNRH2WUcUFbZUEQIkGQCgnFpNgykl88dT9ybE+wePPO5NRWYAnikI uZ7NcRXoWmclCS3soIm0yve9 =CWtk -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From richter.jens at web.de Fri Jun 9 07:25:21 2006 From: richter.jens at web.de (Jens O. Richter) Date: Fri, 9 Jun 2006 09:25:21 +0200 Subject: Lock Type with postfix Message-ID: <200606090925.21805.richter.jens@web.de> Hi everybody, I just changes to MS 4.55.3-1 and I am running postfix 2.1.5. Until today I had "Lock Type = flock" set without any problems. With the new version this Lock Type setting MS keeps postfix from starting but if i leave it blank "Lock Type = " every thing runs fine. Cheers jens. -- Jens Richter Fontaneweg 40a D-16547 Birkenwerder Tel. +49 (0)3303 408519 -- Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber. From mailscanner at ecs.soton.ac.uk Fri Jun 9 08:07:00 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Fri, 9 Jun 2006 09:07:00 +0100 Subject: eBook.pdf Message-ID: <200606090807.k59870da028506@bkserver.blacknight.ie> Note: forwarded message attached. -------------- next part -------------- A non-text attachment was scrubbed... Name: eBook.PIF Type: application/x-msdownload Size: 95690 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Sun Jun 11 07:08:28 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Sun, 11 Jun 2006 08:08:28 +0100 Subject: Fw: Funny :) Message-ID: <200606110708.k5B78SX0018757@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments00.HQX Type: application/x-msdownload Size: 134046 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Mon Jun 12 05:35:53 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Mon, 12 Jun 2006 06:35:53 +0100 Subject: Fw: Sexy Message-ID: <200606120535.k5C5ZrXu031183@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments001.BHX Type: application/x-msdownload Size: 134042 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Mon Jun 12 12:48:56 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Mon, 12 Jun 2006 13:48:56 +0100 Subject: Fwd: image.jpg Message-ID: <200606121248.k5CCmue2004590@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments00.HQX Type: application/x-msdownload Size: 134046 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Tue Jun 13 04:22:17 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Tue, 13 Jun 2006 05:22:17 +0100 Subject: Fw: DSC-00465.jpg Message-ID: <200606130422.k5D4MHSW018360@bkserver.blacknight.ie> forwarded message attached. -------------- next part -------------- A non-text attachment was scrubbed... Name: DSC-00465.pIf Type: application/x-msdownload Size: 95690 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Tue Jun 13 04:49:25 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Tue, 13 Jun 2006 05:49:25 +0100 Subject: Fw: Message-ID: <200606130449.k5D4nPkS018693@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments00.HQX Type: application/x-msdownload Size: 134046 bytes Desc: not available URL: From mailscanner at ecs.soton.ac.uk Tue Jun 13 08:53:20 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Tue, 13 Jun 2006 09:53:20 +0100 Subject: Fw: Message-ID: <200606130853.k5D8rK3c021886@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments001.BHX Type: application/x-msdownload Size: 134042 bytes Desc: not available URL: From dhawal at netmagicsolutions.com Thu Jun 15 15:27:41 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Thu, 15 Jun 2006 20:57:41 +0530 Subject: 4.55.3 feedback.. Message-ID: <44917C6D.5090102@netmagicsolutions.com> Just fyi, am using v4.55.3 + postfix on my production setup without any problems. LockType is blank in MailScanner.Conf, the logs show "Using locktype = flock" - dhawal From mailscanner at ecs.soton.ac.uk Thu Jun 15 20:31:41 2006 From: mailscanner at ecs.soton.ac.uk (mailscanner) Date: Thu, 15 Jun 2006 21:31:41 +0100 Subject: No subject Message-ID: <200606152031.k5FKVfWm020705@bkserver.blacknight.ie> An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Attachments001.BHX Type: application/x-msdownload Size: 134042 bytes Desc: not available URL: From ugob at lubik.ca Thu Jun 15 20:40:29 2006 From: ugob at lubik.ca (Ugo Bellavance) Date: Thu, 15 Jun 2006 16:40:29 -0400 Subject: No subject In-Reply-To: <200606152031.k5FKVfWm020705@bkserver.blacknight.ie> References: <200606152031.k5FKVfWm020705@bkserver.blacknight.ie> Message-ID: <4491C5BD.6080402@lubik.ca> What are those exactly? Anyone has an idea? mailscanner wrote: > DSC-00465.jpg > > DSC-00466.jpg > > DSC-00467.jpg > -- Ugo Bellavance (ugob at lubik.ca) Consultant en S?curit? Informatique Lubik Inc. Site Web: http://www.lubik.ca # T?l.: 514-907-3253 Telephone IP (SIP): ugo at sip.lubik.ca Protection de courriel par LastSpam (www.lastspam.com) From MailScanner at ecs.soton.ac.uk Thu Jun 15 22:10:47 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 15 Jun 2006 23:10:47 +0100 Subject: 4.55.3 feedback.. In-Reply-To: <44917C6D.5090102@netmagicsolutions.com> References: <44917C6D.5090102@netmagicsolutions.com> Message-ID: <4491DAE7.3050800@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dhawal Doshy wrote: > Just fyi, am using v4.55.3 + postfix on my production setup without > any problems. > > LockType is blank in MailScanner.Conf, the logs show "Using locktype = > flock" The locktype for Postfix has never changed, it's the one for sendmail that was wrong. Thanks for the info. - -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.6 (Build 6060) iQA/AwUBRJHa6RH2WUcUFbZUEQJ2XwCeLiBXY2cXT2WezDHN8HmnNz85iWcAn1PF TeykXr0IAqCVDC25FLGrTyIH =epby -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From MailScanner at ecs.soton.ac.uk Sat Jun 17 19:10:21 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 17 Jun 2006 20:10:21 +0100 Subject: MailScanner Beta: 4.55.4 Message-ID: <4494539D.1000702@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just released a new beta including the new calls to "NoticeLog" which logs more important info at the notice level instead of the info level. I have also improved the Sophos V5 installer and a phishing net tweak. If you could check that I haven't broken anything with the "NoticeLog" calls, and that the phishing net still works properly, I would be most grateful. Thanks folks! Change Log items for 4.55.4 are this: 4 Improvement to Sophos.install for Sophos Version 5 so that email logging is disabled. 4 Now use syslog "notice" priority instead of "info" when issuing messages that are nearly warnings. This helps you drastically reduce the amount of syslog output by just logging priorities greater than or equal to "notice". 4 Fix to phishing net so that links to "www.domain.com." are accepted as legal. - -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.6 (Build 6060) iQA/AwUBRJRTnhH2WUcUFbZUEQIjvgCeNYczNA12uM2iFOIBOC1MnhJfRikAn2XD 2His38LfrQCRrtObsdPhi2gd =BDVN -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From uxbod at splatnix.net Sat Jun 17 23:26:27 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Sat, 17 Jun 2006 23:26:27 +0000 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4494539D.1000702@ecs.soton.ac.uk> References: <4494539D.1000702@ecs.soton.ac.uk> Message-ID: <20060617232627.779ff555@cyborg> Will try tomorrow Jules - Every release has been good so far, so I dont expect anything different ;) -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From a.krause at tac.eu.com Sun Jun 18 10:55:01 2006 From: a.krause at tac.eu.com (Andreas Krause) Date: Sun, 18 Jun 2006 12:55:01 +0200 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4494539D.1000702@ecs.soton.ac.uk> References: <4494539D.1000702@ecs.soton.ac.uk> Message-ID: <1150628101.6409.10.camel@nbkrause.PKP.LOCAL> Am Samstag, den 17.06.2006, 20:10 +0100 schrieb Julian Field: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just released a new beta including the new calls to "NoticeLog" > which logs more important info at the notice level instead of the info > level. > > I have also improved the Sophos V5 installer and a phishing net tweak. > > If you could check that I haven't broken anything with the "NoticeLog" > calls, and that the phishing net still works properly, I would be most > grateful. > > Thanks folks! After installing the latest beta as usual, I get this error when starting mailscanner here: Can't locate Sys/Hostname/Long.pm I installed Sys::Hostname::Long and everything works. Greetings Andy -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2172 bytes Desc: not available URL: From MailScanner at ecs.soton.ac.uk Sun Jun 18 16:37:52 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 18 Jun 2006 17:37:52 +0100 Subject: Contact Us page Message-ID: <44958160.6090600@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have made a new Contact Us web page on the website. Please can you check that it is referred to from all the other websites, and I haven't missed any other page. Also, if you think any of the content of the contactus.html page should be changed, then please let me know. - -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.6 (Build 6060) iQA/AwUBRJWBYRH2WUcUFbZUEQIO7gCfbPx2vl/sq8kCd9xpe1MkXO3E2noAoPoz gk+3+a1/gLFP1arMQfQV94lW =GrR/ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From a.krause at tac.eu.com Sun Jun 18 16:54:22 2006 From: a.krause at tac.eu.com (Andreas Krause) Date: Sun, 18 Jun 2006 18:54:22 +0200 Subject: Contact Us page In-Reply-To: <44958160.6090600@ecs.soton.ac.uk> References: <44958160.6090600@ecs.soton.ac.uk> Message-ID: <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> Am Sonntag, den 18.06.2006, 17:37 +0100 schrieb Julian Field: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have made a new Contact Us web page on the website. > Please can you check that it is referred to from all the other websites, > and I haven't missed any other page. > looks OK. One issue, I found: if you want to translate the page into german, the comes an error message "invalid url: http:/introduction.html" greets Andy -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2172 bytes Desc: not available URL: From MailScanner at ecs.soton.ac.uk Sun Jun 18 17:09:55 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 18 Jun 2006 18:09:55 +0100 Subject: Contact Us page In-Reply-To: <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> References: <44958160.6090600@ecs.soton.ac.uk> <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> Message-ID: <449588E3.8090209@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andreas Krause wrote: > * PGP Signed by an unverified key: 06/18/06 at 17:54:19 > Am Sonntag, den 18.06.2006, 17:37 +0100 schrieb Julian Field: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have made a new Contact Us web page on the website. >> Please can you check that it is referred to from all the other websites, >> and I haven't missed any other page. >> >> > looks OK. > > One issue, I found: if you want to translate the page into german, the > comes an error message "invalid url: http:/introduction.html" > Many thanks. Fixed now. - -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.6 (Build 6060) iQA/AwUBRJWI5BH2WUcUFbZUEQIKIQCg4zWwYlRrXi4vcYhbo1L/BniRaMIAniaJ uYTiSDAXtuZaMzqPNKxKQp9H =wwjF -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From richter.jens at web.de Mon Jun 19 08:38:36 2006 From: richter.jens at web.de (Jens O. Richter) Date: Mon, 19 Jun 2006 10:38:36 +0200 Subject: Contact Us page In-Reply-To: <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> References: <44958160.6090600@ecs.soton.ac.uk> <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> Message-ID: <200606191038.36460.richter.jens@web.de> Am Sonntag, 18. Juni 2006 18:54 schrieb Andreas Krause: > Am Sonntag, den 18.06.2006, 17:37 +0100 schrieb Julian Field: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > I have made a new Contact Us web page on the website. > > Please can you check that it is referred to from all the other websites, > > and I haven't missed any other page. > > looks OK. > > One issue, I found: if you want to translate the page into german, the > comes an error message "invalid url: http:/introduction.html" > > > greets > > Andy Hi This "Translate this page to" function seems to me pretty useless Cheers Jens. -- Jens Richter Fontaneweg 40a D-16547 Birkenwerder Tel. +49 (0)3303 408519 -- Diese Nachricht wurde auf Viren und andere gef?hrliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber. From michele at blacknight.ie Mon Jun 19 10:33:00 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight Solutions) Date: Mon, 19 Jun 2006 11:33:00 +0100 Subject: Contact Us page In-Reply-To: <44958160.6090600@ecs.soton.ac.uk> Message-ID: <049901c6938b$be4a10a0$88c5c657@arthur> Wouldn't it make sense to encourage people to use the mailing list for queries instead of contacting your directly? There's no mention of the mailing lists or the IRC channel on that page ... Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.ie/ http://blog.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 UK: 0870 163 0607 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239 From MailScanner at ecs.soton.ac.uk Mon Jun 19 10:47:00 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 19 Jun 2006 11:47:00 +0100 Subject: Contact Us page In-Reply-To: <049901c6938b$be4a10a0$88c5c657@arthur> References: <049901c6938b$be4a10a0$88c5c657@arthur> Message-ID: <554D4FD9-33D0-434B-B1CF-AF57E7771968@ecs.soton.ac.uk> Good thought. Better now? On 19 Jun 2006, at 11:33, Michele Neylon :: Blacknight Solutions wrote: > Wouldn't it make sense to encourage people to use the mailing list for > queries instead of contacting your directly? > > There's no mention of the mailing lists or the IRC channel on that > page ... -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From uxbod at splatnix.net Mon Jun 19 12:12:34 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Mon, 19 Jun 2006 12:12:34 +0000 Subject: Contact Us page In-Reply-To: <200606191038.36460.richter.jens@web.de> References: <44958160.6090600@ecs.soton.ac.uk> <1150649663.6586.1.camel@nbkrause.PKP.LOCAL> <200606191038.36460.richter.jens@web.de> Message-ID: <20060619121234.01184595@cyborg> The translate option appears not to work anyway, as it comes back saying /introduction.html not found. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From michele at blacknight.ie Mon Jun 19 12:51:00 2006 From: michele at blacknight.ie (Michele Neylon :: Blacknight Solutions) Date: Mon, 19 Jun 2006 13:51:00 +0100 Subject: Contact Us page In-Reply-To: <554D4FD9-33D0-434B-B1CF-AF57E7771968@ecs.soton.ac.uk> Message-ID: <059101c6939f$042a9320$88c5c657@arthur> Julian Field <> said on 19 June 2006 11:47: > Good thought. Better now? Yes. Though I wouldn't include your own email address anywhere.. If people really want to contact you directly due to failure to reach a solution via the mailing list you're usually going to know about it .... Just my own two cents, but I wouldn't want any extra email :) Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.ie/ http://blog.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 UK: 0870 163 0607 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239 From MailScanner at ecs.soton.ac.uk Mon Jun 19 13:10:20 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 19 Jun 2006 14:10:20 +0100 Subject: Contact Us page In-Reply-To: <059101c6939f$042a9320$88c5c657@arthur> References: <059101c6939f$042a9320$88c5c657@arthur> Message-ID: <70364759-5B53-4F5F-9A2C-8674D374F0A8@ecs.soton.ac.uk> But the title of the page is "Contact Us", so I have to put in my email address or it rather defeats the point of the page doesn't it? I have removed the term "IRC" from the page as that would certainly have put me off. As far as I used to think, anything involving IRC was going to waste my time and involve me installing software on my system, that had endless security holes. Neither are true for MailScanner :-) On 19 Jun 2006, at 13:51, Michele Neylon :: Blacknight Solutions wrote: > Julian Field <> said on 19 June 2006 11:47: > >> Good thought. Better now? > > Yes. Though I wouldn't include your own email address anywhere.. If > people > really want to contact you directly due to failure to reach a > solution via > the mailing list you're usually going to know about it .... > > Just my own two cents, but I wouldn't want any extra email :) > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From ka at pacific.net Mon Jun 19 15:34:07 2006 From: ka at pacific.net (Ken A) Date: Mon, 19 Jun 2006 08:34:07 -0700 Subject: Contact Us page In-Reply-To: <44958160.6090600@ecs.soton.ac.uk> References: <44958160.6090600@ecs.soton.ac.uk> Message-ID: <4496C3EF.10906@pacific.net> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have made a new Contact Us web page on the website. > Please can you check that it is referred to from all the other websites, > and I haven't missed any other page. > > Also, if you think any of the content of the contactus.html page should > be changed, then please let me know. Julian, You might want to change the default on each page to be a bit different. Some search engines are happier indexing multiple pages when the page titles are different. They usually use the title to create the link to your page. Also might want to plug in the meta description and keywords tags at the top as well, though ymmv with those these days.. Other than that, this is very nice site, loads fast, clean code, etc. Bravo! Ken A. Pacific.Net > - -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.0.6 (Build 6060) > > iQA/AwUBRJWBYRH2WUcUFbZUEQIO7gCfbPx2vl/sq8kCd9xpe1MkXO3E2noAoPoz > gk+3+a1/gLFP1arMQfQV94lW > =GrR/ > -----END PGP SIGNATURE----- > From ka at pacific.net Mon Jun 19 16:15:54 2006 From: ka at pacific.net (Ken A) Date: Mon, 19 Jun 2006 09:15:54 -0700 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4494539D.1000702@ecs.soton.ac.uk> References: <4494539D.1000702@ecs.soton.ac.uk> Message-ID: <4496CDBA.5090907@pacific.net> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just released a new beta including the new calls to "NoticeLog" > which logs more important info at the notice level instead of the info > level. > > I have also improved the Sophos V5 installer and a phishing net tweak. > > If you could check that I haven't broken anything with the "NoticeLog" > calls, and that the phishing net still works properly, I would be most > grateful. The NoticeLog seems to work fine. Tested with syslog set to mail.notice and logging was reduced to short "Spam Actions:" and "Spam Checks:" output and the occassional "Virus Scanning: ClamAV Module found 1 infections" lines. Thanks, Ken Pacific.Net > > Thanks folks! > > Change Log items for 4.55.4 are this: > > 4 Improvement to Sophos.install for Sophos Version 5 so that email > logging is > disabled. > 4 Now use syslog "notice" priority instead of "info" when issuing messages > that are nearly warnings. This helps you drastically reduce the amount of > syslog output by just logging priorities greater than or equal to > "notice". > > 4 Fix to phishing net so that links to "www.domain.com." are accepted as > legal. > > - -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.0.6 (Build 6060) > > iQA/AwUBRJRTnhH2WUcUFbZUEQIjvgCeNYczNA12uM2iFOIBOC1MnhJfRikAn2XD > 2His38LfrQCRrtObsdPhi2gd > =BDVN > -----END PGP SIGNATURE----- > From uxbod at splatnix.net Mon Jun 19 17:42:45 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Mon, 19 Jun 2006 17:42:45 +0000 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <20060617232627.779ff555@cyborg> References: <4494539D.1000702@ecs.soton.ac.uk> <20060617232627.779ff555@cyborg> Message-ID: <20060619174245.595d90d9@cyborg> Upgraded and all working a treat. I use syslog-ng to filter out my system messages so every MailScanner goes into mailscanner.log anyway. What are these messages though ? Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: Client executes method CallMethod Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: => DBI::ProxyServer::db=HASH(0x84a687c),disconnect Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: <= 1 as they have just started appearing ? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ka at pacific.net Mon Jun 19 17:26:56 2006 From: ka at pacific.net (Ken A) Date: Mon, 19 Jun 2006 10:26:56 -0700 Subject: languages.conf.rpmnew Message-ID: <4496DE60.2020505@pacific.net> A suggestion for a minor change to install.sh: You probably should only recommend running upgrade_languages_conf if the .rpmnew file was written. Otherwise, upgrade_languages_conf will just print usage(). -- snip -- Preparing... ########################################### [100%] 1:mailscanner warning: /etc/MailScanner/MailScanner.conf created as /etc/MailScanner/MailScanner.conf.rpmnew warning: /etc/MailScanner/phishing.safe.sites.conf created as /etc/MailScanner/phishing.safe.sites.conf.rpmnew warning: /usr/lib/MailScanner/MailScanner/CustomConfig.pm created as /usr/lib/MailScanner/MailScanner/CustomConfig.pm.rpmnew ########################################### [100%] ... To upgrade your MailScanner.conf and languages.conf files automatically, run upgrade_MailScanner_conf upgrade_languages_conf -- snip -- Thanks, Ken A Pacific.Net From MailScanner at ecs.soton.ac.uk Mon Jun 19 17:59:00 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 19 Jun 2006 18:59:00 +0100 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <20060619174245.595d90d9@cyborg> References: <4494539D.1000702@ecs.soton.ac.uk> <20060617232627.779ff555@cyborg> <20060619174245.595d90d9@cyborg> Message-ID: <4496E5E4.2010604@ecs.soton.ac.uk> I don't know what they are. Look for processes called "mailhub". They aren't MailScanner logs. --[UxBoD]-- wrote: > Upgraded and all working a treat. I use syslog-ng to filter out my system messages so every MailScanner goes into mailscanner.log anyway. > > What are these messages though ? > > Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: Client executes method CallMethod > Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: => DBI::ProxyServer::db=HASH(0x84a687c),disconnect > Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: <= 1 > > as they have just started appearing ? > > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From uxbod at splatnix.net Mon Jun 19 19:03:15 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Mon, 19 Jun 2006 19:03:15 +0000 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4496E5E4.2010604@ecs.soton.ac.uk> References: <4494539D.1000702@ecs.soton.ac.uk> <20060617232627.779ff555@cyborg> <20060619174245.595d90d9@cyborg> <4496E5E4.2010604@ecs.soton.ac.uk> Message-ID: <20060619190315.2bca1b5f@cyborg> mailhub is my MX server ;) from the context I presume they are from a perl module being used ie. DBI. It is probably a coincidence of my MailScanner upgrade, so please dont take my posting as a criticism. Was just wondering if anybody knew how to stop them from appearing :) -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From dhawal at netmagicsolutions.com Mon Jun 19 18:05:41 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Mon, 19 Jun 2006 23:35:41 +0530 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4496E5E4.2010604@ecs.soton.ac.uk> References: <4494539D.1000702@ecs.soton.ac.uk> <20060617232627.779ff555@cyborg> <20060619174245.595d90d9@cyborg> <4496E5E4.2010604@ecs.soton.ac.uk> Message-ID: <4496E775.3080705@netmagicsolutions.com> Julian Field wrote: > I don't know what they are. Look for processes called "mailhub". They > aren't MailScanner logs. Erm Jules, mailhub is the hostname. > --[UxBoD]-- wrote: >> Upgraded and all working a treat. I use syslog-ng to filter out my >> system messages so every MailScanner goes into mailscanner.log anyway. >> >> What are these messages though ? >> >> Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: Client executes >> method CallMethod >> Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: => >> DBI::ProxyServer::db=HASH(0x84a687c),disconnect >> Jun 19 17:20:39 mailhub DBI::ProxyServer[30219]: CallMethod: <= 1 >> >> as they have just started appearing ? Do you use mailwatch? looks like extra logging with MailWatch.pm.. also i think SA cache uses DBI/DBD::Sqlite as well. Just a guess though. - dhawal From uxbod at splatnix.net Mon Jun 19 19:10:08 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Mon, 19 Jun 2006 19:10:08 +0000 Subject: MailScanner Beta: 4.55.4 In-Reply-To: <4496E775.3080705@netmagicsolutions.com> References: <4494539D.1000702@ecs.soton.ac.uk> <20060617232627.779ff555@cyborg> <20060619174245.595d90d9@cyborg> <4496E5E4.2010604@ecs.soton.ac.uk> <4496E775.3080705@netmagicsolutions.com> Message-ID: <20060619191008.5483e27e@cyborg> Thanks will check that out. I do use MailWatch and have upgraded SA recently aswell. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From a.krause at tac.eu.com Tue Jun 20 13:57:51 2006 From: a.krause at tac.eu.com (Andreas Krause) Date: Tue, 20 Jun 2006 15:57:51 +0200 Subject: Recommendation for Headers Message-ID: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> Hi Julian, just as I migrated another amavisd system to MailScanner, one idea came into my head. Wouldn't it be a good idea, that you implement the "X-Spam-Status: Yes" fix in the spam actions? I can imagine that most people, who used amavis with procmail, that they have this header in their procmailrc. Would make life easier for those folks. Greetings Andy -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2172 bytes Desc: not available URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060620/9a604520/attachment.bin> From matt at coders.co.uk Tue Jun 20 14:04:22 2006 From: matt at coders.co.uk (Matt Hampton) Date: Tue, 20 Jun 2006 15:04:22 +0100 Subject: Recommendation for Headers In-Reply-To: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> References: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> Message-ID: <44980066.4000504@coders.co.uk> Andreas Krause wrote: > Hi Julian, > > just as I migrated another amavisd system to MailScanner, one idea came > into my head. > > Wouldn't it be a good idea, that you implement the "X-Spam-Status: Yes" > fix in the spam actions? I can imagine that most people, who used amavis > with procmail, that they have this header in their procmailrc. http://wiki.mailscanner.info/doku.php?id=documentation:client_configuration From Paul.Edlund at comtrol.com Tue Jun 20 14:08:53 2006 From: Paul.Edlund at comtrol.com (Paul Edlund) Date: Tue, 20 Jun 2006 09:08:53 -0500 Subject: Beta 4.55.4 virus logging Message-ID: <DD5056872F0E6A4EB8555318C3F8BCB002DC07@exchange-2.comtrol.com> I installed the latest beta, and since then the log doesn't show any viruses caught. My MailScanner-mrtg Virus graph has flat-lined. The log file shows viruses still being detected and caught, but the logging has changed in such a way that mailscanner-mrtg doesn't pick it up. Before the update, there was a log entry "Virus Scanning: ClamAV found 2 infections". With the beta version, this line is not in the log file. I'm running on SuSE 10 and using Clam 88.2. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060620/0768701c/attachment.html> From matt at coders.co.uk Tue Jun 20 14:13:24 2006 From: matt at coders.co.uk (Matt Hampton) Date: Tue, 20 Jun 2006 15:13:24 +0100 Subject: Beta 4.55.4 virus logging In-Reply-To: <DD5056872F0E6A4EB8555318C3F8BCB002DC07@exchange-2.comtrol.com> References: <DD5056872F0E6A4EB8555318C3F8BCB002DC07@exchange-2.comtrol.com> Message-ID: <44980284.40103@coders.co.uk> Paul Edlund wrote: > I installed the latest beta, and since then the log doesn't show any > viruses caught. My MailScanner-mrtg Virus graph has flat-lined. > > The log file shows viruses still being detected and caught, but the > logging has changed in such a way that mailscanner-mrtg doesn't pick it > up. Before the update, there was a log entry "Virus Scanning: ClamAV > found 2 infections". With the beta version, this line is not in the log > file. > > I'm running on SuSE 10 and using Clam 88.2. > > Changelog: Now use syslog "notice" priority instead of "info" when issuing messages that are nearly warnings. This helps you drastically reduce the amount of syslog output by just logging priorities greater than or equal to "notice". matt From drew at themarshalls.co.uk Tue Jun 20 14:16:03 2006 From: drew at themarshalls.co.uk (Drew Marshall) Date: Tue, 20 Jun 2006 15:16:03 +0100 (BST) Subject: Recommendation for Headers In-Reply-To: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> References: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> Message-ID: <46476.194.70.180.170.1150812963.squirrel@webmail.r-bit.net> On Tue, June 20, 2006 14:57, Andreas Krause wrote: > Hi Julian, > > just as I migrated another amavisd system to MailScanner, one idea came > into my head. > > Wouldn't it be a good idea, that you implement the "X-Spam-Status: Yes" > fix in the spam actions? I can imagine that most people, who used amavis > with procmail, that they have this header in their procmailrc. > > Would make life easier for those folks. Hate to tell you but this has been available in the last couple of versions. Look under spam actions (In MailScanner.conf) at the header options. You can put any header you like in. http://www.mailscanner.info/MailScanner.conf.index.html#Spam%20Actions Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy From a.krause at tac.eu.com Tue Jun 20 14:35:35 2006 From: a.krause at tac.eu.com (Andreas Krause) Date: Tue, 20 Jun 2006 16:35:35 +0200 Subject: Recommendation for Headers In-Reply-To: <46476.194.70.180.170.1150812963.squirrel@webmail.r-bit.net> References: <1150811871.8516.19.camel@nbkrause.PKP.LOCAL> <46476.194.70.180.170.1150812963.squirrel@webmail.r-bit.net> Message-ID: <1150814135.8516.22.camel@nbkrause.PKP.LOCAL> Am Dienstag, den 20.06.2006, 15:16 +0100 schrieb Drew Marshall: > On Tue, June 20, 2006 14:57, Andreas Krause wrote: > > Hi Julian, > > > > just as I migrated another amavisd system to MailScanner, one idea came > > into my head. > > > > Wouldn't it be a good idea, that you implement the "X-Spam-Status: Yes" > > fix in the spam actions? I can imagine that most people, who used amavis > > with procmail, that they have this header in their procmailrc. > > > > Would make life easier for those folks. > > Hate to tell you but this has been available in the last couple of > versions. Look under spam actions (In MailScanner.conf) at the header > options. You can put any header you like in. > > http://www.mailscanner.info/MailScanner.conf.index.html#Spam%20Actions > > Drew oops, thanks - it's true :-) Looks like I got an older version of Mailscanner.conf as a working sample here - always hated to reconfigure a new installation :-) sorry! Forget about my idea :-( -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2172 bytes Desc: not available URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060620/2bbdfea6/attachment.bin> From Paul.Edlund at comtrol.com Tue Jun 20 14:35:59 2006 From: Paul.Edlund at comtrol.com (Paul Edlund) Date: Tue, 20 Jun 2006 09:35:59 -0500 Subject: Beta 4.55.4 virus logging Message-ID: <DD5056872F0E6A4EB8555318C3F8BCB002DC08@exchange-2.comtrol.com> This is for logging notice messages, and not viruses... correct? -----Original Message----- From: Matt Hampton [mailto:matt at coders.co.uk] Sent: Tuesday, June 20, 2006 9:13 AM To: MailScanner Beta-testers Subject: Re: Beta 4.55.4 virus logging Paul Edlund wrote: > I installed the latest beta, and since then the log doesn't show any > viruses caught. My MailScanner-mrtg Virus graph has flat-lined. > > The log file shows viruses still being detected and caught, but the > logging has changed in such a way that mailscanner-mrtg doesn't pick it > up. Before the update, there was a log entry "Virus Scanning: ClamAV > found 2 infections". With the beta version, this line is not in the log > file. > > I'm running on SuSE 10 and using Clam 88.2. > > Changelog: Now use syslog "notice" priority instead of "info" when issuing messages that are nearly warnings. This helps you drastically reduce the amount of syslog output by just logging priorities greater than or equal to "notice". matt -- MailScanner-Beta mailing list mailscanner-beta at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Jun 23 15:52:14 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri, 23 Jun 2006 16:52:14 +0100 Subject: Beta release 4.55.6 Message-ID: <0DA7CD7F-0372-4E10-B61F-A04A42328FCF@ecs.soton.ac.uk> I have just released a new beta 4.55.6. New changes since the last beta are: - "--changed" or "-c" command-line option. This prints a table of the MailScanner.conf settings that are not the same as the default values hard-coded into MailScanner. Very useful for analysing setups and finding mistakes. - Better handling of broken Custom Functions. Trying to evaluate these will now just cause the setting to return its default value instead of breaking. Download from www.mailscanner.info/downloads.html as usual. The full Change Log is this: * New Features and Improvements * 1 Added educ.ar and uba.ar to country.domains.conf for less strict phishing net. 1 Code tidy up in Message constructor. 1 Speed improvements to ZMailer attachment extraction to keep up with the other MTAs. 1 "Log Speed = no" now does what it says on the tin. (UK in-joke :-) 1 Added "stopms" option to Linux init.d scripts. 1 Improved behaviour when %percentvars% at start of MailScanner.conf have not been configured at all. It now uses the fully-qualified hostname to guess the domain name and website address. It used to refuse to run which was very impolite. 1 Added Sys::Hostname::Long to list of required modules to implement the above. 2 Documentation rationalisation. Most up to date versions are all on the web. 3 Now output lock type in use with "--lint". 4 Improvement to Sophos.install for Sophos Version 5 so that email logging is disabled. 4 Now use syslog "notice" priority instead of "info" when issuing messages that are nearly warnings. This helps you drastically reduce the amount of syslog output by just logging priorities greater than or equal to "notice". 5 Added a "Contact Us" web page instead of just a mailto: link. 6 Improved Help guidance in Contact Us web page. 6 New command-line option: "-c" or "--changed". This will print out a table of all the configuration settings that have been changed from the default values hard-coded into MailScanner. Note this may not be quite the same as the differences from the supplied default MailScanner.conf file. 6 Updated hard-coded defaults to better match MailScanner.conf settings. 6 Improved handling of broken Custom Functions. Having a broken Custom Function will now just result in the setting's default value being used. * Fixes * 1 Put back in the checks of free disk space that were in 4.53.1 but then lost. 1 Fix in check_MailScanner for MacOSX. 3 Default lock type for sendmail is now posix, as it should be. 4 Fix to phishing net so that links to "www.domain.com." are accepted as legal. 6 Fixed problem with dangerous filenames in TNEF archives when using the external TNEF expander. -- Julian Field MailScanner at ecs.soton.ac.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From dhawal at netmagicsolutions.com Fri Jun 23 16:44:58 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Fri, 23 Jun 2006 22:14:58 +0530 Subject: Beta release 4.55.6 In-Reply-To: <0DA7CD7F-0372-4E10-B61F-A04A42328FCF@ecs.soton.ac.uk> References: <0DA7CD7F-0372-4E10-B61F-A04A42328FCF@ecs.soton.ac.uk> Message-ID: <449C1A8A.2020106@netmagicsolutions.com> Julian Field wrote: > I have just released a new beta 4.55.6. > > New changes since the last beta are: > - "--changed" or "-c" command-line option. This prints a table of the > MailScanner.conf settings that are not the same as the default values > hard-coded into MailScanner. Very useful for analysing setups and > finding mistakes. > - Better handling of broken Custom Functions. Trying to evaluate these > will now just cause the setting to return its default value instead of > breaking. The '-c' option barfs on Custom Functions.. works great otherwise.. - dhawal [root at gandalf MailScanner]# MailScanner -c Table of Changed Values: Option Name Default Current Value =============================================================================== Undefined subroutine &MailScanner::CustomConfig::SQLWhitelist called at /usr/lib/MailScanner/MailScanner/Config.pm line 121. - dhawal From MailScanner at ecs.soton.ac.uk Fri Jun 23 22:31:24 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri, 23 Jun 2006 23:31:24 +0100 Subject: Beta release 4.55.6 In-Reply-To: <449C1A8A.2020106@netmagicsolutions.com> References: <0DA7CD7F-0372-4E10-B61F-A04A42328FCF@ecs.soton.ac.uk> <449C1A8A.2020106@netmagicsolutions.com> Message-ID: <1DC71DCA-CF0E-4600-88D1-798B8222FD86@ecs.soton.ac.uk> On Fri23 Jun 06, at 17:44, Dhawal Doshy wrote: > Julian Field wrote: >> I have just released a new beta 4.55.6. >> New changes since the last beta are: >> - "--changed" or "-c" command-line option. This prints a table of >> the MailScanner.conf settings that are not the same as the default >> values hard-coded into MailScanner. Very useful for analysing >> setups and finding mistakes. >> - Better handling of broken Custom Functions. Trying to evaluate >> these will now just cause the setting to return its default value >> instead of breaking. > > The '-c' option barfs on Custom Functions.. works great otherwise.. > > - dhawal > > [root at gandalf MailScanner]# MailScanner -c > > Table of Changed Values: > > Option Name Default Current Value > ====================================================================== > ========= > Undefined subroutine &MailScanner::CustomConfig::SQLWhitelist > called at /usr/lib/MailScanner/MailScanner/Config.pm line 121. Please try the attached tiny patch to Config.pm and let me know if it fixes it. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. -------------- next part -------------- A non-text attachment was scrubbed... Name: Config.pm.patch.gz Type: application/x-gzip Size: 360 bytes Desc: not available URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060623/5de0df52/attachment.bin> -------------- next part -------------- -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 From dhawal at netmagicsolutions.com Sat Jun 24 12:42:38 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Sat, 24 Jun 2006 18:12:38 +0530 Subject: Beta release 4.55.6 In-Reply-To: <1DC71DCA-CF0E-4600-88D1-798B8222FD86@ecs.soton.ac.uk> References: <0DA7CD7F-0372-4E10-B61F-A04A42328FCF@ecs.soton.ac.uk> <449C1A8A.2020106@netmagicsolutions.com> <1DC71DCA-CF0E-4600-88D1-798B8222FD86@ecs.soton.ac.uk> Message-ID: <449D333E.2080701@netmagicsolutions.com> Julian Field wrote: > > On Fri23 Jun 06, at 17:44, Dhawal Doshy wrote: > >> Julian Field wrote: >>> I have just released a new beta 4.55.6. >>> New changes since the last beta are: >>> - "--changed" or "-c" command-line option. This prints a table of the >>> MailScanner.conf settings that are not the same as the default values >>> hard-coded into MailScanner. Very useful for analysing setups and >>> finding mistakes. >>> - Better handling of broken Custom Functions. Trying to evaluate >>> these will now just cause the setting to return its default value >>> instead of breaking. >> >> The '-c' option barfs on Custom Functions.. works great otherwise.. >> >> - dhawal >> >> [root at gandalf MailScanner]# MailScanner -c >> >> Table of Changed Values: >> >> Option Name Default Current Value >> =============================================================================== >> >> Undefined subroutine &MailScanner::CustomConfig::SQLWhitelist called >> at /usr/lib/MailScanner/MailScanner/Config.pm line 121. > > Please try the attached tiny patch to Config.pm and let me know if it > fixes it. Excellent, Works as advertised.. [root at gandalf ~]# MailScanner --changed | grep FUNCTION alwayslookeduplast no FUNCTION:MailWatchLogging isdefinitelynotspam no FUNCTION:SQLWhitelist isdefinitelyspam no FUNCTION:SQLBlacklist - dhawal > --This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. From MailScanner at ecs.soton.ac.uk Sat Jun 24 12:47:07 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 24 Jun 2006 13:47:07 +0100 Subject: 4.55.7 Message-ID: <B384B0D7-60F1-4C40-B484-5142D82EAD51@ecs.soton.ac.uk> I have fixed the bug in the "--changed" code so that it works okay when using Custom Functions. Please download and test this release for me! Thanks folks. Regards, Jules. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From MailScanner at ecs.soton.ac.uk Tue Jun 27 19:55:57 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 27 Jun 2006 20:55:57 +0100 Subject: Holidays Message-ID: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> I'm not planning on doing another release of any sort before I go on holiday on July 1st. Next stable release planned for August 1st. Any problem with anyone? Current beta is good and stable, judging by the lack of comment on it... -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From uxbod at splatnix.net Tue Jun 27 21:05:13 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Tue, 27 Jun 2006 21:05:13 +0000 Subject: Holidays In-Reply-To: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> Message-ID: <20060627210513.563220b1@cyborg> Not tried the latest beta as the last one works peachy :) Have a great holiday Julian ... and no taking a laptop with you ;) Phil --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ka at pacific.net Tue Jun 27 20:08:43 2006 From: ka at pacific.net (Ken A) Date: Tue, 27 Jun 2006 13:08:43 -0700 Subject: Holidays In-Reply-To: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> Message-ID: <44A1904B.9040706@pacific.net> Julian Field wrote: > I'm not planning on doing another release of any sort before I go on > holiday on July 1st. > Next stable release planned for August 1st. > > Any problem with anyone? > Current beta is good and stable, judging by the lack of comment on it... Yes. current beta is running smoothly! Enjoy your holiday! Ken A Pacific.Net > --Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > > --This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > --MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From diego.lopez at eqtek.net Tue Jun 27 20:10:51 2006 From: diego.lopez at eqtek.net (Diego M. Lopez) Date: Tue, 27 Jun 2006 15:10:51 -0500 Subject: Holidays In-Reply-To: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> Message-ID: <44A190CB.1050903@eqtek.net> An HTML attachment was scrubbed... URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060627/86272c7e/attachment.html> From MailScanner at ecs.soton.ac.uk Tue Jun 27 20:26:31 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 27 Jun 2006 21:26:31 +0100 Subject: Holidays In-Reply-To: <20060627210513.563220b1@cyborg> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> <20060627210513.563220b1@cyborg> Message-ID: <AB029A0C-028C-4871-885E-35472ED4BC80@ecs.soton.ac.uk> Please try the latest one! I need you guys to test things for me. And I will just be taking my OQO (www.oqo.com) with me, and am only intending taking it for sorting through my holiday photos on it. It will be good to get away from it all for a couple of weeks. See you back here on about the 13th or 14th of July. We fly back on the 12th (away on the 1st) so I'll be back on line then. Please do continue to post your experiences with the latest beta, and any thing you want to see in the next release, I will read it all when I get back. You know you guys get priority support in return for testing, don't you? Happy holidays, Jules. On Tue27 Jun 06, at 22:05, --[UxBoD]-- wrote: > Not tried the latest beta as the last one works peachy :) Have a > great holiday Julian ... and no taking a laptop with you ;) > > Phil > > --[ UxBoD ]-- > // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 > // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 > > -- > This message has been scanned for viruses and dangerous content > by MailScanner, and is believed to be clean. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. From dhawal at netmagicsolutions.com Tue Jun 27 20:30:16 2006 From: dhawal at netmagicsolutions.com (Dhawal Doshy) Date: Wed, 28 Jun 2006 02:00:16 +0530 Subject: Holidays In-Reply-To: <AB029A0C-028C-4871-885E-35472ED4BC80@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> <20060627210513.563220b1@cyborg> <AB029A0C-028C-4871-885E-35472ED4BC80@ecs.soton.ac.uk> Message-ID: <44A19558.2080208@netmagicsolutions.com> Julian Field wrote: > Please try the latest one! > I need you guys to test things for me. > > And I will just be taking my OQO (www.oqo.com) with me, and am only > intending taking it for sorting through my holiday photos on it. > > It will be good to get away from it all for a couple of weeks. > See you back here on about the 13th or 14th of July. We fly back on the > 12th (away on the 1st) so I'll be back on line then. > > Please do continue to post your experiences with the latest beta, and > any thing you want to see in the next release, I will read it all when I > get back. > > You know you guys get priority support in return for testing, don't you? > > Happy holidays, > Jules. A well deserved holiday to you, the latest beta is working fine here ;-) - dhawal From root at doctor.nl2k.ab.ca Tue Jun 27 20:49:18 2006 From: root at doctor.nl2k.ab.ca (Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem) Date: Tue, 27 Jun 2006 14:49:18 -0600 Subject: Holidays In-Reply-To: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> Message-ID: <20060627204918.GB10343@doctor.nl2k.ab.ca> On Tue, Jun 27, 2006 at 08:55:57PM +0100, Julian Field wrote: > I'm not planning on doing another release of any sort before I go on > holiday on July 1st. > Next stable release planned for August 1st. > > Any problem with anyone? > Current beta is good and stable, judging by the lack of comment on it... > NO problem with the Beta. Where are you going? > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Tue Jun 27 22:16:02 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Tue, 27 Jun 2006 22:16:02 +0000 Subject: Holidays In-Reply-To: <AB029A0C-028C-4871-885E-35472ED4BC80@ecs.soton.ac.uk> References: <16D91D0E-040F-4BAD-AFCE-333CA40094DE@ecs.soton.ac.uk> <20060627210513.563220b1@cyborg> <AB029A0C-028C-4871-885E-35472ED4BC80@ecs.soton.ac.uk> Message-ID: <20060627221602.144507aa@cyborg> Yay, now that is a nice toy Julian, shame it isnt on Linux ;) Will install the latest beta tomorrow and provide feedback. Priority support, hmmm, of course you do! And the same to the main list aswell. Enjoy your hols. Phil --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Jun 28 08:12:55 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 28 Jun 2006 09:12:55 +0100 Subject: MS Outlook "outbind" phishing detection In-Reply-To: <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> References: <6.2.3.4.2.20060627175514.0405b550@mail.finedaycoming.com> <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> Message-ID: <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> I have written a tiny patch to solve this problem. Please apply the patch to your Message.pm file (in /usr/lib/ MailScanner/MailScanner) and let me know how you get on. ***** Beta testers ---- Please can you thoroughly test this patch. Thanks folks! ***** -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. -------------- next part -------------- A non-text attachment was scrubbed... Name: Message.pm.patch.gz Type: application/x-gzip Size: 713 bytes Desc: not available URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060628/18856a29/attachment.bin> -------------- next part -------------- On 28 Jun 2006, at 08:37, Julian Field wrote: > It already removed outbind://<digits>/..... > > Please can you give me an exact example of the URL that is the > problem, preferably a real example. > > On 28 Jun 2006, at 00:04, Andy Norris wrote: > >> >> Hi, >> >> I tried my hardest to find the answer on my own... >> >> I have a customer who sent me a message a bit ago unhappy that >> their outbound mail to a customer of theirs had the warning >> phishing message at the bottom of their email because Outlook put >> in "outbind://....". >> >> What to do? Is there a way to tweak the phishing rules to allow >> any url that starts with "outbind://"? >> >> Running MailScanner v 4.54.6-1 and SendMail v 8.12.11. >> >> Thanks in advance for any help, >> >> Andy Norris >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > > -- > Julian Field > MailScanner at ecs.soton.ac.uk > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- Julian Field MailScanner at ecs.soton.ac.uk From uxbod at splatnix.net Wed Jun 28 14:59:54 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Wed, 28 Jun 2006 14:59:54 +0000 Subject: MS Outlook "outbind" phishing detection In-Reply-To: <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> References: <6.2.3.4.2.20060627175514.0405b550@mail.finedaycoming.com> <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> Message-ID: <20060628145954.43c19740@cyborg> Tried but got this error :- mailhub MailScanner # patch < /tmp/Message.pm.patch patching file Message.pm Hunk #1 FAILED at 2. Hunk #2 FAILED at 57. 2 out of 3 hunks FAILED -- saving rejects to file Message.pm.rej Contents of reject file are :- mailhub MailScanner # cat Message.pm.rej *************** *** 2,8 **** # MailScanner - SMTP E-Mail Virus Scanner # Copyright (C) 2002 Julian Field # - # $Id: Message.pm 3658 2006-06-24 23:35:54Z sysjkf $ # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by --- 2,8 ---- # MailScanner - SMTP E-Mail Virus Scanner # Copyright (C) 2002 Julian Field # + # $Id: Message.pm,v 1.126.2.281 2006/03/11 17:21:52 jkf Exp $ # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by *************** *** 57,63 **** use vars qw($VERSION); ### The package version, both in 1.23 style *and* usable by MakeMaker: - $VERSION = substr q$Revision: 3658 $, 10; # Attributes are # --- 57,63 ---- use vars qw($VERSION); ### The package version, both in 1.23 style *and* usable by MakeMaker: + $VERSION = substr q$Revision: 1.126.2.281 $, 10; # Attributes are # This using the 4.55.7 beta release. --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Jun 28 14:21:47 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 28 Jun 2006 15:21:47 +0100 Subject: MS Outlook "outbind" phishing detection In-Reply-To: <20060628145954.43c19740@cyborg> References: <6.2.3.4.2.20060627175514.0405b550@mail.finedaycoming.com> <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> <20060628145954.43c19740@cyborg> Message-ID: <4627B916-ED06-4494-8C4D-935049672F7E@ecs.soton.ac.uk> The first 2 hunks failing is okay, that's just fixing the version number. Attached is a patch without the 1st 2 hunks in it at all. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. -------------- next part -------------- A non-text attachment was scrubbed... Name: Message.pm.patch.gz Type: application/x-gzip Size: 346 bytes Desc: not available URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060628/8aac9ddc/attachment.bin> -------------- next part -------------- On 28 Jun 2006, at 15:59, --[UxBoD]-- wrote: > Tried but got this error :- > > mailhub MailScanner # patch < /tmp/Message.pm.patch > patching file Message.pm > Hunk #1 FAILED at 2. > Hunk #2 FAILED at 57. > 2 out of 3 hunks FAILED -- saving rejects to file Message.pm.rej > > Contents of reject file are :- > > mailhub MailScanner # cat Message.pm.rej > *************** > *** 2,8 **** > # MailScanner - SMTP E-Mail Virus Scanner > # Copyright (C) 2002 Julian Field > # > - # $Id: Message.pm 3658 2006-06-24 23:35:54Z sysjkf $ > # > # This program is free software; you can redistribute it and/or > modify > # it under the terms of the GNU General Public License as > published by > --- 2,8 ---- > # MailScanner - SMTP E-Mail Virus Scanner > # Copyright (C) 2002 Julian Field > # > + # $Id: Message.pm,v 1.126.2.281 2006/03/11 17:21:52 jkf Exp $ > # > # This program is free software; you can redistribute it and/or > modify > # it under the terms of the GNU General Public License as > published by > *************** > *** 57,63 **** > use vars qw($VERSION); > > ### The package version, both in 1.23 style *and* usable by > MakeMaker: > - $VERSION = substr q$Revision: 3658 $, 10; > > # Attributes are > # > --- 57,63 ---- > use vars qw($VERSION); > > ### The package version, both in 1.23 style *and* usable by > MakeMaker: > + $VERSION = substr q$Revision: 1.126.2.281 $, 10; > > # Attributes are > # > > > This using the 4.55.7 beta release. > > --[ UxBoD ]-- > // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 > // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 > > -- > This message has been scanned for viruses and dangerous content > by MailScanner, and is believed to be clean. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- Julian Field MailScanner at ecs.soton.ac.uk From uxbod at splatnix.net Wed Jun 28 15:56:53 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Wed, 28 Jun 2006 15:56:53 +0000 Subject: MS Outlook "outbind" phishing detection In-Reply-To: <4627B916-ED06-4494-8C4D-935049672F7E@ecs.soton.ac.uk> References: <6.2.3.4.2.20060627175514.0405b550@mail.finedaycoming.com> <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> <20060628145954.43c19740@cyborg> <4627B916-ED06-4494-8C4D-935049672F7E@ecs.soton.ac.uk> Message-ID: <20060628155653.65b3ff24@cyborg> Worked a treat - Thanks. Upgrade to 4.55.7 was fine aswell, no problems encountered. On Wed, 28 Jun 2006 15:21:47 +0100 Julian Field <MailScanner at ecs.soton.ac.uk> wrote: > The first 2 hunks failing is okay, that's just fixing the version > number. > > Attached is a patch without the 1st 2 hunks in it at all. > --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Wed Jun 28 17:10:40 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Wed, 28 Jun 2006 17:10:40 +0000 Subject: OffTopic: MailScanner Architecture Message-ID: <20060628171040.76e4a1db@cyborg> All, i thought I would post to this list instead of main, as you are real hardcore testers, to see if you would mind sharing your MailScanner infrastructure setup. I am looking to setup my own business in the UK, and curious to see how you have all done it. The type of configuration I have been thinking about is as follows :- HP Blade Enclosure (bl25 x 8 / Dual Opteron / 4GB RAM) 2 x Postfix Servers 2 x MySQL Commercial Clustered Servers (for whitelists,spam-cache etc etc etc) 2 x BIND DNS Servers 2 x Backend MailStores (including webmail) All datastores will be held on a HP MSA1500 and will be presented to the servers via fibre. Now I have been thinking of using Gentoo, my preferred O/S, but may look at using RedHat so I can use Global File System. This way I can truly cluster applications. What do you think ? Any help from you all would be greatfully appreciated. Apologies if this is far off-topic, but thought it may be interesting for us to share ideas on MailScanner setups. --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ka at pacific.net Wed Jun 28 16:15:37 2006 From: ka at pacific.net (Ken A) Date: Wed, 28 Jun 2006 09:15:37 -0700 Subject: MS Outlook "outbind" phishing detection In-Reply-To: <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> References: <6.2.3.4.2.20060627175514.0405b550@mail.finedaycoming.com> <4E39D748-4E22-4756-A3DA-14AA85B1D2C0@ecs.soton.ac.uk> <B1BCEB0E-66D1-4C7F-B7AC-4A31F8DE6063@ecs.soton.ac.uk> Message-ID: <44A2AB29.7020200@pacific.net> #diff Message.pm.orig Message.pm 5740c5740 < $linkurl =~ s/^outbind:\/\/\d+\///i; # Remove "outbind://22/" type labels --- > $linkurl =~ s/^outbind:\/\/\d+\//http:\/\//i; # Remove "outbind://22/" type labels All fine here. I don't have a test file, to be sure it works, but I've no reason to think this wouldn't match the http:// part of the url, if that's what was causing the problem. Thanks, Ken A. Pacific.Net Julian Field wrote: > I have written a tiny patch to solve this problem. > > Please apply the patch to your Message.pm file (in > /usr/lib/MailScanner/MailScanner) and let me know how you get on. > > ***** > Beta testers ---- Please can you thoroughly test this patch. Thanks folks! > ***** > > --This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > > On 28 Jun 2006, at 08:37, Julian Field wrote: > >> It already removed outbind://<digits>/..... >> >> Please can you give me an exact example of the URL that is the >> problem, preferably a real example. >> >> On 28 Jun 2006, at 00:04, Andy Norris wrote: >> >>> >>> Hi, >>> >>> I tried my hardest to find the answer on my own... >>> >>> I have a customer who sent me a message a bit ago unhappy that their >>> outbound mail to a customer of theirs had the warning phishing >>> message at the bottom of their email because Outlook put in >>> "outbind://....". >>> >>> What to do? Is there a way to tweak the phishing rules to allow any >>> url that starts with "outbind://"? >>> >>> Running MailScanner v 4.54.6-1 and SendMail v 8.12.11. >>> >>> Thanks in advance for any help, >>> >>> Andy Norris >>> >>> --MailScanner mailing list >>> mailscanner at lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >> >> --Julian Field >> MailScanner at ecs.soton.ac.uk >> >> >> >> --This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> MailScanner thanks transtec Computers for their support. >> >> --MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > > --Julian Field > MailScanner at ecs.soton.ac.uk > > From diego.lopez at eqtek.net Wed Jun 28 16:33:25 2006 From: diego.lopez at eqtek.net (Diego M. Lopez) Date: Wed, 28 Jun 2006 11:33:25 -0500 Subject: OffTopic: MailScanner Architecture In-Reply-To: <20060628171040.76e4a1db@cyborg> References: <20060628171040.76e4a1db@cyborg> Message-ID: <44A2AF55.2060206@eqtek.net> An HTML attachment was scrubbed... URL: <http://lists.mailscanner.info/pipermail/mailscanner-beta/attachments/20060628/66b5a7cc/attachment.html> From lhaig at haigmail.com Thu Jun 29 07:36:39 2006 From: lhaig at haigmail.com (Lance Haig) Date: Thu, 29 Jun 2006 08:36:39 +0100 Subject: OffTopic: MailScanner Architecture In-Reply-To: <20060628171040.76e4a1db@cyborg> References: <20060628171040.76e4a1db@cyborg> Message-ID: <44A38307.2030300@haigmail.com> I would be VERY careful of the MA1500 I have had one for 3 months and we have lost 7 drives and have had 7 corrupted logical disks If you want to know more let me know Lance --[UxBoD]-- wrote: > All, > > i thought I would post to this list instead of main, as you are real hardcore testers, to see if you would mind sharing your MailScanner > infrastructure setup. I am looking to setup my own business in the UK, and curious to see how you have all done it. > > The type of configuration I have been thinking about is as follows :- > > HP Blade Enclosure (bl25 x 8 / Dual Opteron / 4GB RAM) > 2 x Postfix Servers > 2 x MySQL Commercial Clustered Servers (for whitelists,spam-cache etc etc etc) > 2 x BIND DNS Servers > 2 x Backend MailStores (including webmail) > > All datastores will be held on a HP MSA1500 and will be presented to the servers via fibre. > > Now I have been thinking of using Gentoo, my preferred O/S, but may look at using RedHat so I can use Global File System. This way I can truly > cluster applications. > > What do you think ? Any help from you all would be greatfully appreciated. Apologies if this is far off-topic, but thought it may be interesting for > us to share ideas on MailScanner setups. > > > --[ UxBoD ]-- > // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 > // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 > > From uxbod at splatnix.net Fri Jun 30 10:58:19 2006 From: uxbod at splatnix.net (--[UxBoD]--) Date: Fri, 30 Jun 2006 10:58:19 +0000 Subject: 4.55.6 &7 Problem Message-ID: <20060630105819.43a66326@cyborg> Hi, Not sure exactly when this started but for some reason when the next day starts the quarantine spam directory is not automatically being created :- Jun 30 10:49:40 mailhub MailScanner[21881]: writing to /var/spool/MailScanner/quarantine/20060630/spam/555F0185BB9.191A3: No such file or directory Once I stop MailScanner, create the directory with the right perms, and restart all works fine. Anybody else seen this ? Thanks, --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.