From martinh at solidstatelogic.com Wed May 2 15:04:54 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed, 02 May 2007 16:04:54 +0100 Subject: SA 3.2.0 released Message-ID: Guys It's out and there's a really nice sa-compile facility that uses re2c to make perlXS modules out of rule sets to help speed things up. Anyone tried this? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From steve.freegard at fsl.com Wed May 2 17:36:28 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Wed, 02 May 2007 18:36:28 +0100 Subject: SA 3.2.0 released In-Reply-To: References: Message-ID: <4638CC1C.3030808@fsl.com> Hi Martin, Yes - I've been running the beta's for a while now on my dev box, it seems to work very well. Gives about a 20% speed-up. Not all rules are compatible however with re2c though. All you need to do is install the latest version of re2c, then run sa-compile (takes a while). I guess that you'll need to modify any sa-update/RulesDuJour cronjobs to run sa-compile afterwards too. Cheers, Steve. Martin.Hepworth wrote: > Guys > > It's out and there's a really nice sa-compile facility that uses re2c to > make perlXS modules out of rule sets to help speed things up. > > Anyone tried this? > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > > > > ********************************************************************** > Confidentiality : This e-mail and any attachments are intended for the > addressee only and may be confidential. If they come to you in error > you must take no action based on them, nor must you copy or show them > to anyone. Please advise the sender by replying to this e-mail > immediately and then delete the original from your computer. > > Opinion : Any opinions expressed in this e-mail are entirely those of > the author and unless specifically stated to the contrary, are not > necessarily those of the author's employer. > > Security Warning : Internet e-mail is not necessarily a secure > communications medium and can be subject to data corruption. We advise > that you consider this fact when e-mailing us. > > Viruses : We have taken steps to ensure that this e-mail and any > attachments are free from known viruses but in keeping with good > computing practice, you should ensure that they are virus free. > > Red Lion 49 Ltd T/A Solid State Logic > Registered as a limited company in England and Wales > (Company No:5362730) > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > United Kingdom > ********************************************************************** > > From root at doctor.nl2k.ab.ca Wed May 2 22:04:55 2007 From: root at doctor.nl2k.ab.ca (Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem) Date: Wed, 2 May 2007 16:04:55 -0600 Subject: SA 3.2.0 released In-Reply-To: <4638CC1C.3030808@fsl.com> References: <4638CC1C.3030808@fsl.com> Message-ID: <20070502220455.GC1334@doctor.nl2k.ab.ca> On Wed, May 02, 2007 at 06:36:28PM +0100, Steve Freegard wrote: > Hi Martin, > > Yes - I've been running the beta's for a while now on my dev box, it > seems to work very well. Gives about a 20% speed-up. Not all rules are > compatible however with re2c though. > > All you need to do is install the latest version of re2c, then run > sa-compile (takes a while). > > I guess that you'll need to modify any sa-update/RulesDuJour cronjobs to > run sa-compile afterwards too. > > Cheers, > Steve. > > Martin.Hepworth wrote: > >Guys > > > >It's out and there's a really nice sa-compile facility that uses re2c to > >make perlXS modules out of rule sets to help speed things up. > > > >Anyone tried this? > > > >-- > >Martin Hepworth > >Snr Systems Administrator > >Solid State Logic > >Tel: +44 (0)1865 842300 > > > > > > > > No problem with SA 3.2.0 with MS 4.58.9 . More options to block spamwads. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sat May 19 12:00:09 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 19 May 2007 13:00:09 +0100 Subject: Release 4.60.1 Message-ID: <464EE6C9.5000703@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just released the first beta version of 4.60. - -- Fixed problem causing a few false alarms in RBLs. - -- Custom Functions now take parameters to their per-message invocation as well as to the Init and End functions. - -- "clamavmodule" scanner no longer detects password-protected archives as viruses, allowing them to be easily released in MailWatch. - -- Phishing net now correctly handles HTML tags inside links. Download as usual from www.mailscanner.info. Please do help me by testing this release! Many thanks. The full Change Log is this: * New Features and Improvements * 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf ready for installation of Perl-SAVI module required for "sophossavi" virus scanner. 1 Custom Functions can now receive parameters not only to their Init and End functions, but also to their run-time calculation functions (i.e. the real custom function itself used when processing each message). The Custom Function is now passed not only the message, but also a ref to a list of parameters specified in the MailScanner.conf file. 1 Improvement to phishing net. 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, leaving MailScanner to do the check later in the dangerous content scanning. The consequence is that MailWatch will allow them to be released from quarantine. * Fixes * 1 Phishing net now correctly handles HTML tags inside links. 1 Deprecated clamscan flag replaced with supported one to stop it printing the summary. 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop scanner producing licensing details. Thanks to UxBoD. 1 Removed test in RPM distribution's test for RedHat 6 as it will clash with RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) 1 Worked round Perl bug in returning number of RBLs hit by a message. 1 Fixed problem causing some password-protected RAR archives to be missed. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop IrVtk9XCum0sBrn0VVUUztI= =61c6 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From res at ausics.net Sat May 19 12:15:38 2007 From: res at ausics.net (Res) Date: Sat, 19 May 2007 22:15:38 +1000 (EST) Subject: Release 4.60.1 In-Reply-To: <464EE6C9.5000703@ecs.soton.ac.uk> References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? Mailtools 1.71 but yet we have (had) 1.77 (and thats just the 2 I noticed) Jules is there a better way to detect and install perl modules rather than the current way which seems to downgrade what we already have installed? This is with the tarball version. On Sat, 19 May 2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just released the first beta version of 4.60. > > - -- Fixed problem causing a few false alarms in RBLs. > - -- Custom Functions now take parameters to their per-message invocation > as well as to the Init and End functions. > - -- "clamavmodule" scanner no longer detects password-protected archives > as viruses, allowing them to be easily released in MailWatch. > - -- Phishing net now correctly handles HTML tags inside links. > > Download as usual from www.mailscanner.info. > > Please do help me by testing this release! > Many thanks. > > > The full Change Log is this: > > * New Features and Improvements * > 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf > ready for > installation of Perl-SAVI module required for "sophossavi" virus scanner. > 1 Custom Functions can now receive parameters not only to their Init and End > functions, but also to their run-time calculation functions (i.e. the real > custom function itself used when processing each message). The Custom > Function is now passed not only the message, but also a ref to a list of > parameters specified in the MailScanner.conf file. > 1 Improvement to phishing net. > 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, > leaving MailScanner to do the check later in the dangerous content > scanning. > The consequence is that MailWatch will allow them to be released from > quarantine. > > * Fixes * > 1 Phishing net now correctly handles HTML tags inside links. > 1 Deprecated clamscan flag replaced with supported one to stop it printing > the summary. > 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop > scanner producing licensing details. Thanks to UxBoD. > 1 Removed test in RPM distribution's test for RedHat 6 as it will clash with > RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) > 1 Worked round Perl bug in returning number of RBLs hit by a message. > 1 Fixed problem causing some password-protected RAR archives to be missed. > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop > IrVtk9XCum0sBrn0VVUUztI= > =61c6 > -----END PGP SIGNATURE----- > > - -- Cheers Res Vote for your favourite MTA at http://polls.ausics.net/v3.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo FmcxsVY6fYU4YhI91OFCr4k= =F+G/ -----END PGP SIGNATURE----- From res at ausics.net Sat May 19 12:20:09 2007 From: res at ausics.net (Res) Date: Sat, 19 May 2007 22:20:09 +1000 (EST) Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Having a manual run on installing, shows there is a lot of these that were higher versions.. On Sat, 19 May 2007, Res wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? > Mailtools 1.71 but yet we have (had) 1.77 > > (and thats just the 2 I noticed) > > Jules is there a better way to detect and install perl modules rather than > the current way which seems to downgrade what we already have installed? > This is with the tarball version. > > > > On Sat, 19 May 2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released the first beta version of 4.60. >> >> - -- Fixed problem causing a few false alarms in RBLs. >> - -- Custom Functions now take parameters to their per-message invocation >> as well as to the Init and End functions. >> - -- "clamavmodule" scanner no longer detects password-protected archives >> as viruses, allowing them to be easily released in MailWatch. >> - -- Phishing net now correctly handles HTML tags inside links. >> >> Download as usual from www.mailscanner.info. >> >> Please do help me by testing this release! >> Many thanks. >> >> >> The full Change Log is this: >> >> * New Features and Improvements * >> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >> ready for >> installation of Perl-SAVI module required for "sophossavi" virus scanner. >> 1 Custom Functions can now receive parameters not only to their Init and >> End >> functions, but also to their run-time calculation functions (i.e. the real >> custom function itself used when processing each message). The Custom >> Function is now passed not only the message, but also a ref to a list of >> parameters specified in the MailScanner.conf file. >> 1 Improvement to phishing net. >> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, >> leaving MailScanner to do the check later in the dangerous content >> scanning. >> The consequence is that MailWatch will allow them to be released from >> quarantine. >> >> * Fixes * >> 1 Phishing net now correctly handles HTML tags inside links. >> 1 Deprecated clamscan flag replaced with supported one to stop it printing >> the summary. >> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop >> scanner producing licensing details. Thanks to UxBoD. >> 1 Removed test in RPM distribution's test for RedHat 6 as it will clash >> with >> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) >> 1 Worked round Perl bug in returning number of RBLs hit by a message. >> 1 Fixed problem causing some password-protected RAR archives to be missed. >> >> Jules >> >> - -- >> Julian Field MEng CITP >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> For all your IT requirements visit www.transtec.co.uk >> >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.6.1 (Build 1012) >> Charset: ISO-8859-1 >> >> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >> IrVtk9XCum0sBrn0VVUUztI= >> =61c6 >> -----END PGP SIGNATURE----- >> >> > > - -- > Cheers > Res > > Vote for your favourite MTA at http://polls.ausics.net/v3.php > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.6 (GNU/Linux) > > iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo > FmcxsVY6fYU4YhI91OFCr4k= > =F+G/ > -----END PGP SIGNATURE----- > - -- Cheers Res Vote for your favourite MTA at http://polls.ausics.net/v3.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGTut7sWhAmSIQh7MRAhQOAJ456gqRTVs3EdA4wDnYrbYzwFyGzQCgnUDH WUMCy3Iy14cNooPQg+rGYxo= =4abW -----END PGP SIGNATURE----- From jaearick at colby.edu Sat May 19 12:46:15 2007 From: jaearick at colby.edu (Jeff A. Earickson) Date: Sat, 19 May 2007 08:46:15 -0400 (EDT) Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: The first thing I do before an install is comment out the section of the install script that does "Rebuilding all the Perl modules...", down to the EOF statement. I don't want Julian's script messing with my perl modules, because I nearly always have later releases of modules he uses. I suppose this could be made an option in the install script. Jeff Earickson Colby College On Sat, 19 May 2007, Res wrote: > Date: Sat, 19 May 2007 22:15:38 +1000 (EST) > From: Res > Reply-To: MailScanner Beta-testers > To: MailScanner beta testers > Subject: Re: Release 4.60.1 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? > Mailtools 1.71 but yet we have (had) 1.77 > > (and thats just the 2 I noticed) > > Jules is there a better way to detect and install perl modules rather than > the current way which seems to downgrade what we already have installed? > This is with the tarball version. > > > > On Sat, 19 May 2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released the first beta version of 4.60. >> >> - -- Fixed problem causing a few false alarms in RBLs. >> - -- Custom Functions now take parameters to their per-message invocation >> as well as to the Init and End functions. >> - -- "clamavmodule" scanner no longer detects password-protected archives >> as viruses, allowing them to be easily released in MailWatch. >> - -- Phishing net now correctly handles HTML tags inside links. >> >> Download as usual from www.mailscanner.info. >> >> Please do help me by testing this release! >> Many thanks. >> >> >> The full Change Log is this: >> >> * New Features and Improvements * >> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >> ready for >> installation of Perl-SAVI module required for "sophossavi" virus scanner. >> 1 Custom Functions can now receive parameters not only to their Init and >> End >> functions, but also to their run-time calculation functions (i.e. the real >> custom function itself used when processing each message). The Custom >> Function is now passed not only the message, but also a ref to a list of >> parameters specified in the MailScanner.conf file. >> 1 Improvement to phishing net. >> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, >> leaving MailScanner to do the check later in the dangerous content >> scanning. >> The consequence is that MailWatch will allow them to be released from >> quarantine. >> >> * Fixes * >> 1 Phishing net now correctly handles HTML tags inside links. >> 1 Deprecated clamscan flag replaced with supported one to stop it printing >> the summary. >> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop >> scanner producing licensing details. Thanks to UxBoD. >> 1 Removed test in RPM distribution's test for RedHat 6 as it will clash >> with >> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) >> 1 Worked round Perl bug in returning number of RBLs hit by a message. >> 1 Fixed problem causing some password-protected RAR archives to be missed. >> >> Jules >> >> - -- >> Julian Field MEng CITP >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> For all your IT requirements visit www.transtec.co.uk >> >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.6.1 (Build 1012) >> Charset: ISO-8859-1 >> >> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >> IrVtk9XCum0sBrn0VVUUztI= >> =61c6 >> -----END PGP SIGNATURE----- >> >> > > - -- > Cheers > Res > > Vote for your favourite MTA at http://polls.ausics.net/v3.php > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.6 (GNU/Linux) > > iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo > FmcxsVY6fYU4YhI91OFCr4k= > =F+G/ > -----END PGP SIGNATURE----- > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From MailScanner at ecs.soton.ac.uk Sat May 19 13:11:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 19 May 2007 14:11:04 +0100 Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: <464EF768.3000003@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 But the install.sh script should only install later versions. Don't you get a "Blah version blah already installed" message when it is about to install an earlier version than the one you already have? Jeff A. Earickson wrote: > The first thing I do before an install is comment out the section of > the install script that does "Rebuilding all the Perl modules...", > down to the EOF statement. I don't want Julian's script messing with > my perl modules, because I nearly always have later releases of > modules he uses. I suppose this could be made an option in the > install script. > > Jeff Earickson > Colby College > > On Sat, 19 May 2007, Res wrote: > >> Date: Sat, 19 May 2007 22:15:38 +1000 (EST) >> From: Res >> Reply-To: MailScanner Beta-testers >> >> To: MailScanner beta testers >> Subject: Re: Release 4.60.1 >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? >> Mailtools 1.71 but yet we have (had) 1.77 >> >> (and thats just the 2 I noticed) >> >> Jules is there a better way to detect and install perl modules rather >> than the current way which seems to downgrade what we already have >> installed? >> This is with the tarball version. >> >> >> >> On Sat, 19 May 2007, Julian Field wrote: >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> I have just released the first beta version of 4.60. >>> >>> - -- Fixed problem causing a few false alarms in RBLs. >>> - -- Custom Functions now take parameters to their per-message >>> invocation >>> as well as to the Init and End functions. >>> - -- "clamavmodule" scanner no longer detects password-protected >>> archives >>> as viruses, allowing them to be easily released in MailWatch. >>> - -- Phishing net now correctly handles HTML tags inside links. >>> >>> Download as usual from www.mailscanner.info. >>> >>> Please do help me by testing this release! >>> Many thanks. >>> >>> >>> The full Change Log is this: >>> >>> * New Features and Improvements * >>> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >>> ready for >>> installation of Perl-SAVI module required for "sophossavi" virus >>> scanner. >>> 1 Custom Functions can now receive parameters not only to their Init >>> and End >>> functions, but also to their run-time calculation functions (i.e. >>> the real >>> custom function itself used when processing each message). The Custom >>> Function is now passed not only the message, but also a ref to a >>> list of >>> parameters specified in the MailScanner.conf file. >>> 1 Improvement to phishing net. >>> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as >>> viruses, >>> leaving MailScanner to do the check later in the dangerous content >>> scanning. >>> The consequence is that MailWatch will allow them to be released from >>> quarantine. >>> >>> * Fixes * >>> 1 Phishing net now correctly handles HTML tags inside links. >>> 1 Deprecated clamscan flag replaced with supported one to stop it >>> printing >>> the summary. >>> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm >>> to stop >>> scanner producing licensing details. Thanks to UxBoD. >>> 1 Removed test in RPM distribution's test for RedHat 6 as it will >>> clash with >>> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger >>> problems! :-) >>> 1 Worked round Perl bug in returning number of RBLs hit by a message. >>> 1 Fixed problem causing some password-protected RAR archives to be >>> missed. >>> >>> Jules >>> >>> - -- >>> Julian Field MEng CITP >>> www.MailScanner.info >>> Buy the MailScanner book at www.MailScanner.info/store >>> >>> MailScanner customisation, or any advanced system administration help? >>> Contact me at Jules at Jules.FM >>> >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> For all your IT requirements visit www.transtec.co.uk >>> >>> >>> >>> -----BEGIN PGP SIGNATURE----- >>> Version: PGP Desktop 9.6.1 (Build 1012) >>> Charset: ISO-8859-1 >>> >>> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >>> IrVtk9XCum0sBrn0VVUUztI= >>> =61c6 >>> -----END PGP SIGNATURE----- >>> >>> >> >> - -- Cheers >> Res >> >> Vote for your favourite MTA at http://polls.ausics.net/v3.php >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.6 (GNU/Linux) >> >> iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo >> FmcxsVY6fYU4YhI91OFCr4k= >> =F+G/ >> -----END PGP SIGNATURE----- >> -- >> MailScanner-Beta mailing list >> mailscanner-beta at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGTveuEfZZRxQVtlQRAqkAAJ9LihKLkOs8CaLst7xEHh9CqAcaNwCfa9ze ho7tGgz6p+mHOOM8tvmuf2U= =k9nY -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Sat May 19 13:24:00 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 19 May 2007 14:24:00 +0100 Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: <464EFA70.1060608@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Res wrote: > * PGP Signed by an unknown key > > > Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? I just tried this situation and my install script didn't overwrite DBI. > Mailtools 1.71 but yet we have (had) 1.77 The bundles are harder as it is more difficult to get a version number. There is no "Mailtools" Perl module to get a version from. > > (and thats just the 2 I noticed) > > Jules is there a better way to detect and install perl modules rather > than the current way which seems to downgrade what we already have > installed? > This is with the tarball version. > > > > On Sat, 19 May 2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released the first beta version of 4.60. >> >> - -- Fixed problem causing a few false alarms in RBLs. >> - -- Custom Functions now take parameters to their per-message >> invocation >> as well as to the Init and End functions. >> - -- "clamavmodule" scanner no longer detects password-protected >> archives >> as viruses, allowing them to be easily released in MailWatch. >> - -- Phishing net now correctly handles HTML tags inside links. >> >> Download as usual from www.mailscanner.info. >> >> Please do help me by testing this release! >> Many thanks. >> >> >> The full Change Log is this: >> >> * New Features and Improvements * >> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >> ready for >> installation of Perl-SAVI module required for "sophossavi" virus >> scanner. >> 1 Custom Functions can now receive parameters not only to their Init >> and End >> functions, but also to their run-time calculation functions (i.e. >> the real >> custom function itself used when processing each message). The Custom >> Function is now passed not only the message, but also a ref to a >> list of >> parameters specified in the MailScanner.conf file. >> 1 Improvement to phishing net. >> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as >> viruses, >> leaving MailScanner to do the check later in the dangerous content >> scanning. >> The consequence is that MailWatch will allow them to be released from >> quarantine. >> >> * Fixes * >> 1 Phishing net now correctly handles HTML tags inside links. >> 1 Deprecated clamscan flag replaced with supported one to stop it >> printing >> the summary. >> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to >> stop >> scanner producing licensing details. Thanks to UxBoD. >> 1 Removed test in RPM distribution's test for RedHat 6 as it will >> clash with >> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger >> problems! :-) >> 1 Worked round Perl bug in returning number of RBLs hit by a message. >> 1 Fixed problem causing some password-protected RAR archives to be >> missed. >> >> Jules >> >> - -- >> Julian Field MEng CITP >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> For all your IT requirements visit www.transtec.co.uk >> >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.6.1 (Build 1012) >> Charset: ISO-8859-1 >> >> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >> IrVtk9XCum0sBrn0VVUUztI= >> =61c6 >> -----END PGP SIGNATURE----- >> >> > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGTvp0EfZZRxQVtlQRAkdrAJ9/RIBSgBLRNrB41Ima7aYBGcKuGACePTm/ 72kDxqOAIgXLbsX/8hNtKao= =ubyn -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Sat May 19 21:09:08 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 19 May 2007 22:09:08 +0100 Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: <464F6774.5000805@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am putting together a new beta with up to date versions of as much as possible. I'll test it on a clean CentOS 4.4 system tomorrow. Res wrote: > * PGP Signed by an unknown key > > > Having a manual run on installing, shows there is a lot of these that > were higher versions.. > > On Sat, 19 May 2007, Res wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? >> Mailtools 1.71 but yet we have (had) 1.77 >> >> (and thats just the 2 I noticed) >> >> Jules is there a better way to detect and install perl modules rather >> than the current way which seems to downgrade what we already have >> installed? >> This is with the tarball version. >> >> >> >> On Sat, 19 May 2007, Julian Field wrote: >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> I have just released the first beta version of 4.60. >>> >>> - -- Fixed problem causing a few false alarms in RBLs. >>> - -- Custom Functions now take parameters to their per-message >>> invocation >>> as well as to the Init and End functions. >>> - -- "clamavmodule" scanner no longer detects password-protected >>> archives >>> as viruses, allowing them to be easily released in MailWatch. >>> - -- Phishing net now correctly handles HTML tags inside links. >>> >>> Download as usual from www.mailscanner.info. >>> >>> Please do help me by testing this release! >>> Many thanks. >>> >>> >>> The full Change Log is this: >>> >>> * New Features and Improvements * >>> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >>> ready for >>> installation of Perl-SAVI module required for "sophossavi" virus >>> scanner. >>> 1 Custom Functions can now receive parameters not only to their Init >>> and End >>> functions, but also to their run-time calculation functions (i.e. >>> the real >>> custom function itself used when processing each message). The Custom >>> Function is now passed not only the message, but also a ref to a >>> list of >>> parameters specified in the MailScanner.conf file. >>> 1 Improvement to phishing net. >>> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as >>> viruses, >>> leaving MailScanner to do the check later in the dangerous content >>> scanning. >>> The consequence is that MailWatch will allow them to be released from >>> quarantine. >>> >>> * Fixes * >>> 1 Phishing net now correctly handles HTML tags inside links. >>> 1 Deprecated clamscan flag replaced with supported one to stop it >>> printing >>> the summary. >>> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm >>> to stop >>> scanner producing licensing details. Thanks to UxBoD. >>> 1 Removed test in RPM distribution's test for RedHat 6 as it will >>> clash with >>> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger >>> problems! :-) >>> 1 Worked round Perl bug in returning number of RBLs hit by a message. >>> 1 Fixed problem causing some password-protected RAR archives to be >>> missed. >>> >>> Jules >>> >>> - -- >>> Julian Field MEng CITP >>> www.MailScanner.info >>> Buy the MailScanner book at www.MailScanner.info/store >>> >>> MailScanner customisation, or any advanced system administration help? >>> Contact me at Jules at Jules.FM >>> >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> For all your IT requirements visit www.transtec.co.uk >>> >>> >>> >>> -----BEGIN PGP SIGNATURE----- >>> Version: PGP Desktop 9.6.1 (Build 1012) >>> Charset: ISO-8859-1 >>> >>> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >>> IrVtk9XCum0sBrn0VVUUztI= >>> =61c6 >>> -----END PGP SIGNATURE----- >>> >>> >> >> - -- Cheers >> Res >> >> Vote for your favourite MTA at http://polls.ausics.net/v3.php >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.6 (GNU/Linux) >> >> iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo >> FmcxsVY6fYU4YhI91OFCr4k= >> =F+G/ >> -----END PGP SIGNATURE----- >> > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGT2d5EfZZRxQVtlQRAifwAJ9J8qLZk3wWHCcGeSHKd5QvI4faNQCgjMPk 4fXJmCrefLBAWkDrfBGAy2U= =BYae -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Sat May 19 21:53:59 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sat, 19 May 2007 22:53:59 +0100 Subject: Release 4.60.1 In-Reply-To: <464F6774.5000805@ecs.soton.ac.uk> References: <464EE6C9.5000703@ecs.soton.ac.uk> <464F6774.5000805@ecs.soton.ac.uk> Message-ID: <20070519225359.06d6011c@uxbod.splatnix.net> Have a weekend off Jules ! On Sat, 19 May 2007 22:09:08 +0100 Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I am putting together a new beta with up to date versions of as much > as possible. > I'll test it on a clean CentOS 4.4 system tomorrow. > > Res wrote: > > * PGP Signed by an unknown key > > > > > > Having a manual run on installing, shows there is a lot of these > > that were higher versions.. > > > > On Sat, 19 May 2007, Res wrote: > > > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> > >> Hrmmmmm, I have DBI 1.56 installed but MS has decided to install > >> 1.50 ? Mailtools 1.71 but yet we have (had) 1.77 > >> > >> (and thats just the 2 I noticed) > >> > >> Jules is there a better way to detect and install perl modules > >> rather than the current way which seems to downgrade what we > >> already have installed? > >> This is with the tarball version. > >> > >> > >> > >> On Sat, 19 May 2007, Julian Field wrote: > >> > >>> -----BEGIN PGP SIGNED MESSAGE----- > >>> Hash: SHA1 > >>> > >>> I have just released the first beta version of 4.60. > >>> > >>> - -- Fixed problem causing a few false alarms in RBLs. > >>> - -- Custom Functions now take parameters to their per-message > >>> invocation > >>> as well as to the Init and End functions. > >>> - -- "clamavmodule" scanner no longer detects password-protected > >>> archives > >>> as viruses, allowing them to be easily released in MailWatch. > >>> - -- Phishing net now correctly handles HTML tags inside links. > >>> > >>> Download as usual from www.mailscanner.info. > >>> > >>> Please do help me by testing this release! > >>> Many thanks. > >>> > >>> > >>> The full Change Log is this: > >>> > >>> * New Features and Improvements * > >>> 1 Improved Sophos.install script so that it sets > >>> up /etc/ld.so.conf ready for > >>> installation of Perl-SAVI module required for "sophossavi" virus > >>> scanner. > >>> 1 Custom Functions can now receive parameters not only to their > >>> Init and End > >>> functions, but also to their run-time calculation functions > >>> (i.e. the real > >>> custom function itself used when processing each message). The > >>> Custom Function is now passed not only the message, but also a > >>> ref to a list of > >>> parameters specified in the MailScanner.conf file. > >>> 1 Improvement to phishing net. > >>> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as > >>> viruses, > >>> leaving MailScanner to do the check later in the dangerous > >>> content scanning. > >>> The consequence is that MailWatch will allow them to be released > >>> from quarantine. > >>> > >>> * Fixes * > >>> 1 Phishing net now correctly handles HTML tags inside links. > >>> 1 Deprecated clamscan flag replaced with supported one to stop it > >>> printing > >>> the summary. > >>> 1 Added '-b' to nod32-1.99 command-line options in > >>> SweepViruses.pm to stop > >>> scanner producing licensing details. Thanks to UxBoD. > >>> 1 Removed test in RPM distribution's test for RedHat 6 as it will > >>> clash with > >>> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger > >>> problems! :-) > >>> 1 Worked round Perl bug in returning number of RBLs hit by a > >>> message. 1 Fixed problem causing some password-protected RAR > >>> archives to be missed. > >>> > >>> Jules > >>> > >>> - -- > >>> Julian Field MEng CITP > >>> www.MailScanner.info > >>> Buy the MailScanner book at www.MailScanner.info/store > >>> > >>> MailScanner customisation, or any advanced system administration > >>> help? Contact me at Jules at Jules.FM > >>> > >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > >>> For all your IT requirements visit www.transtec.co.uk > >>> > >>> > >>> > >>> -----BEGIN PGP SIGNATURE----- > >>> Version: PGP Desktop 9.6.1 (Build 1012) > >>> Charset: ISO-8859-1 > >>> > >>> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop > >>> IrVtk9XCum0sBrn0VVUUztI= > >>> =61c6 > >>> -----END PGP SIGNATURE----- > >>> > >>> > >> > >> - -- Cheers > >> Res > >> > >> Vote for your favourite MTA at http://polls.ausics.net/v3.php > >> -----BEGIN PGP SIGNATURE----- > >> Version: GnuPG v1.4.6 (GNU/Linux) > >> > >> iD8DBQFGTupssWhAmSIQh7MRAgBhAKCfPPAe4OHb1q/uFJUqdt/r5TUSwwCfQFOo > >> FmcxsVY6fYU4YhI91OFCr4k= > >> =F+G/ > >> -----END PGP SIGNATURE----- > >> > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGT2d5EfZZRxQVtlQRAifwAJ9J8qLZk3wWHCcGeSHKd5QvI4faNQCgjMPk > 4fXJmCrefLBAWkDrfBGAy2U= > =BYae > -----END PGP SIGNATURE----- > -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From res at ausics.net Sat May 19 22:05:03 2007 From: res at ausics.net (Res) Date: Sun, 20 May 2007 08:05:03 +1000 (EST) Subject: Release 4.60.1 In-Reply-To: <464EFA70.1060608@ecs.soton.ac.uk> References: <464EE6C9.5000703@ecs.soton.ac.uk> <464EFA70.1060608@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sat, 19 May 2007, Julian Field wrote: >> Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? > I just tried this situation and my install script didn't overwrite DBI. >> Mailtools 1.71 but yet we have (had) 1.77 > The bundles are harder as it is more difficult to get a version number. > There is no "Mailtools" Perl module to get a version from. I can appreciate that, I do see a lot of 'already installed' messages, but how about using perl MCPAN to get and install the modules rather than supply them? Jeffs idea for an option that prevents installing the perl modules with a big warning doing so at own risk dont cry to us blah blah blah type of thing :)??? - -- Cheers Res Vote for your favourite MTA at http://polls.ausics.net/v3.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGT3SRsWhAmSIQh7MRAouiAJ9GziXWkZX3tih3+cwXaIQofXc5IACfU3Q7 zXB6LpnnuSJ+XLDCRfBuO+s= =nDAL -----END PGP SIGNATURE----- From res at ausics.net Sat May 19 22:09:14 2007 From: res at ausics.net (Res) Date: Sun, 20 May 2007 08:09:14 +1000 (EST) Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sat, 19 May 2007, Jeff A. Earickson wrote: > The first thing I do before an install is comment out the section of > the install script that does "Rebuilding all the Perl modules...", > down to the EOF statement. I don't want Julian's script messing with > my perl modules, because I nearly always have later releases of > modules he uses. I suppose this could be made an option in the > install script. This has been probably going on for a while by your comments, it's just I got suspicious because I know I updated DBI and Mailtools for functionality reasons 2 days ago on the same machine, and saw lesser versions being built and installed, I like your idea about an install script option to disable installing whats included. - -- Cheers Res Vote for your favourite MTA at http://polls.ausics.net/v3.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGT3WMsWhAmSIQh7MRAvBKAJ9f1++IDhtWk1zPm2y7290GOJEW1QCeJhXI Zw+pnhz2Nu0/9kM516LiQkQ= =iJ/3 -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Sun May 20 09:26:24 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 20 May 2007 10:26:24 +0100 Subject: Release 4.60.1 In-Reply-To: References: <464EE6C9.5000703@ecs.soton.ac.uk> Message-ID: <46501440.40601@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Res wrote: > * PGP Signed by an unknown key > > > Hrmmmmm, I have DBI 1.56 installed but MS has decided to install 1.50 ? I have found a bug which was causing this. It won't do it any more. > Mailtools 1.71 but yet we have (had) 1.77 I have just upgraded that to 1.77, along with lots of others. > > (and thats just the 2 I noticed) > > Jules is there a better way to detect and install perl modules rather > than the current way which seems to downgrade what we already have > installed? > This is with the tarball version. > > > > On Sat, 19 May 2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released the first beta version of 4.60. >> >> - -- Fixed problem causing a few false alarms in RBLs. >> - -- Custom Functions now take parameters to their per-message >> invocation >> as well as to the Init and End functions. >> - -- "clamavmodule" scanner no longer detects password-protected >> archives >> as viruses, allowing them to be easily released in MailWatch. >> - -- Phishing net now correctly handles HTML tags inside links. >> >> Download as usual from www.mailscanner.info. >> >> Please do help me by testing this release! >> Many thanks. >> >> >> The full Change Log is this: >> >> * New Features and Improvements * >> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf >> ready for >> installation of Perl-SAVI module required for "sophossavi" virus >> scanner. >> 1 Custom Functions can now receive parameters not only to their Init >> and End >> functions, but also to their run-time calculation functions (i.e. >> the real >> custom function itself used when processing each message). The Custom >> Function is now passed not only the message, but also a ref to a >> list of >> parameters specified in the MailScanner.conf file. >> 1 Improvement to phishing net. >> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as >> viruses, >> leaving MailScanner to do the check later in the dangerous content >> scanning. >> The consequence is that MailWatch will allow them to be released from >> quarantine. >> >> * Fixes * >> 1 Phishing net now correctly handles HTML tags inside links. >> 1 Deprecated clamscan flag replaced with supported one to stop it >> printing >> the summary. >> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to >> stop >> scanner producing licensing details. Thanks to UxBoD. >> 1 Removed test in RPM distribution's test for RedHat 6 as it will >> clash with >> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger >> problems! :-) >> 1 Worked round Perl bug in returning number of RBLs hit by a message. >> 1 Fixed problem causing some password-protected RAR archives to be >> missed. >> >> Jules >> >> - -- >> Julian Field MEng CITP >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> For all your IT requirements visit www.transtec.co.uk >> >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.6.1 (Build 1012) >> Charset: ISO-8859-1 >> >> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop >> IrVtk9XCum0sBrn0VVUUztI= >> =61c6 >> -----END PGP SIGNATURE----- >> >> > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGUBRMEfZZRxQVtlQRAtC3AKCuYY3uaKCu4eE33dKGyFuI3GNTZwCeIDI3 3op11c8dA6KrLk7Q4HLaT6E= =sh2Y -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Sun May 20 09:54:57 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sun, 20 May 2007 10:54:57 +0100 Subject: Release 4.60.1 In-Reply-To: <46501440.40601@ecs.soton.ac.uk> References: <464EE6C9.5000703@ecs.soton.ac.uk> <46501440.40601@ecs.soton.ac.uk> Message-ID: <20070520105457.4022b092@uxbod.splatnix.net> All running fine here :) On Sun, 20 May 2007 10:26:24 +0100 Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Res wrote: > > * PGP Signed by an unknown key > > > > > > Hrmmmmm, I have DBI 1.56 installed but MS has decided to install > > 1.50 ? > I have found a bug which was causing this. It won't do it any more. > > Mailtools 1.71 but yet we have (had) 1.77 > I have just upgraded that to 1.77, along with lots of others. > > > > > (and thats just the 2 I noticed) > > > > Jules is there a better way to detect and install perl modules > > rather than the current way which seems to downgrade what we > > already have installed? > > This is with the tarball version. > > > > > > > > On Sat, 19 May 2007, Julian Field wrote: > > > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> I have just released the first beta version of 4.60. > >> > >> - -- Fixed problem causing a few false alarms in RBLs. > >> - -- Custom Functions now take parameters to their per-message > >> invocation > >> as well as to the Init and End functions. > >> - -- "clamavmodule" scanner no longer detects password-protected > >> archives > >> as viruses, allowing them to be easily released in MailWatch. > >> - -- Phishing net now correctly handles HTML tags inside links. > >> > >> Download as usual from www.mailscanner.info. > >> > >> Please do help me by testing this release! > >> Many thanks. > >> > >> > >> The full Change Log is this: > >> > >> * New Features and Improvements * > >> 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf > >> ready for > >> installation of Perl-SAVI module required for "sophossavi" virus > >> scanner. > >> 1 Custom Functions can now receive parameters not only to their > >> Init and End > >> functions, but also to their run-time calculation functions (i.e. > >> the real > >> custom function itself used when processing each message). The > >> Custom Function is now passed not only the message, but also a ref > >> to a list of > >> parameters specified in the MailScanner.conf file. > >> 1 Improvement to phishing net. > >> 1 'clamavmodule' scanner no longer detects encrypted zips/rars as > >> viruses, > >> leaving MailScanner to do the check later in the dangerous content > >> scanning. > >> The consequence is that MailWatch will allow them to be released > >> from quarantine. > >> > >> * Fixes * > >> 1 Phishing net now correctly handles HTML tags inside links. > >> 1 Deprecated clamscan flag replaced with supported one to stop it > >> printing > >> the summary. > >> 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm > >> to stop > >> scanner producing licensing details. Thanks to UxBoD. > >> 1 Removed test in RPM distribution's test for RedHat 6 as it will > >> clash with > >> RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger > >> problems! :-) > >> 1 Worked round Perl bug in returning number of RBLs hit by a > >> message. 1 Fixed problem causing some password-protected RAR > >> archives to be missed. > >> > >> Jules > >> > >> - -- > >> Julian Field MEng CITP > >> www.MailScanner.info > >> Buy the MailScanner book at www.MailScanner.info/store > >> > >> MailScanner customisation, or any advanced system administration > >> help? Contact me at Jules at Jules.FM > >> > >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > >> For all your IT requirements visit www.transtec.co.uk > >> > >> > >> > >> -----BEGIN PGP SIGNATURE----- > >> Version: PGP Desktop 9.6.1 (Build 1012) > >> Charset: ISO-8859-1 > >> > >> wj8DBQFGTubTEfZZRxQVtlQRAnFIAJ9DTJsWHMBcZXbnpY0upDTMBchTtwCfXbop > >> IrVtk9XCum0sBrn0VVUUztI= > >> =61c6 > >> -----END PGP SIGNATURE----- > >> > >> > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGUBRMEfZZRxQVtlQRAtC3AKCuYY3uaKCu4eE33dKGyFuI3GNTZwCeIDI3 > 3op11c8dA6KrLk7Q4HLaT6E= > =sh2Y > -----END PGP SIGNATURE----- > -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sun May 20 11:56:00 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 20 May 2007 12:56:00 +0100 Subject: Release 4.60.2 Message-ID: <46503750.50401@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just released another beta. I have updated a whole load of the required Perl modules, and have added a command-line option --nomodules which will stop it installing the required Perl modules, should you wish to do that. I have also fixed a whole bunch of bugs in the installer, so it shouldn't overwrite modules with older ones, which was happening in a few cases. Download as usual from www.mailscanner.info. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGUDdWEfZZRxQVtlQRAjRoAKCEo4hMuvzD6qW9n65RPcwBy3mg7ACg28jS lszMrqePEF33syo5oG9uFkI= =ZKo6 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From michele at blacknight.ie Sun May 20 12:44:45 2007 From: michele at blacknight.ie (Michele Neylon :: Blacknight) Date: Sun, 20 May 2007 13:44:45 +0100 Subject: Release 4.60.2 In-Reply-To: <46503750.50401@ecs.soton.ac.uk> References: <46503750.50401@ecs.soton.ac.uk> Message-ID: <465042BD.5070406@blacknight.ie> Is there a changelog for the beta? I could be blind, but I can't see it on the site M -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.ie/ http://blog.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 UK: 0870 163 0607 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 1 4811 763 From denis at croombs.org Sun May 20 12:56:32 2007 From: denis at croombs.org (Denis Croombs) Date: Sun, 20 May 2007 13:56:32 +0100 Subject: Release 4.60.2 In-Reply-To: <46503750.50401@ecs.soton.ac.uk> Message-ID: <200705201259.l4KCxJ5W006346@mail.deniscroombs.org> > I have just released another beta. > I have updated a whole load of the required Perl modules, and > have added a command-line option > --nomodules > which will stop it installing the required Perl modules, > should you wish to do that. > > I have also fixed a whole bunch of bugs in the installer, so > it shouldn't overwrite modules with older ones, which was > happening in a few cases. > > Download as usual from www.mailscanner.info. > > Jules All looks good on 2 of my Centos servers, 3 more to go. Regards Denis From uxbod at splatnix.net Sun May 20 14:42:01 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sun, 20 May 2007 15:42:01 +0100 Subject: Release 4.60.2 In-Reply-To: <46503750.50401@ecs.soton.ac.uk> References: <46503750.50401@ecs.soton.ac.uk> Message-ID: <20070520154201.5daa5df4@uxbod.splatnix.net> Oops on install.sh from the Other Linux version :- If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh --nodeps Setting Perl5 search path ./install.sh: line 287: syntax error near unexpected token `else' ./install.sh: line 287: ` else' On Sun, 20 May 2007 12:56:00 +0100 Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just released another beta. > I have updated a whole load of the required Perl modules, and have > added a command-line option > --nomodules > which will stop it installing the required Perl modules, should you > wish to do that. > > I have also fixed a whole bunch of bugs in the installer, so it > shouldn't overwrite modules with older ones, which was happening in a > few cases. > > Download as usual from www.mailscanner.info. > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGUDdWEfZZRxQVtlQRAjRoAKCEo4hMuvzD6qW9n65RPcwBy3mg7ACg28jS > lszMrqePEF33syo5oG9uFkI= > =ZKo6 > -----END PGP SIGNATURE----- > -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sun May 20 14:39:54 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 20 May 2007 15:39:54 +0100 Subject: Release 4.60.2 In-Reply-To: <465042BD.5070406@blacknight.ie> References: <46503750.50401@ecs.soton.ac.uk> <465042BD.5070406@blacknight.ie> Message-ID: <46505DBA.2040409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://www.mailscanner.info/ChangeLog should be it. Michele Neylon :: Blacknight wrote: > Is there a changelog for the beta? > > I could be blind, but I can't see it on the site > > M > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGUF5kEfZZRxQVtlQRAk6ZAKDFb1jXh6+DPZ8fZUvA4JQ4u8KmOwCg1Kvt tIR+Mr/IYOpciKbnbunqpJU= =DQU8 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Sun May 20 16:41:11 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 20 May 2007 17:41:11 +0100 Subject: Release 4.60.2 In-Reply-To: <20070520154201.5daa5df4@uxbod.splatnix.net> References: <46503750.50401@ecs.soton.ac.uk> <20070520154201.5daa5df4@uxbod.splatnix.net> Message-ID: <46507A27.1080507@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fixed, along with a couple of other screw-ups in that installer. Now if I can just pursuade Solaris 9 to install itself properly... I have published 4.60.2-2, in which the only difference from -1 is the non-Linux installer. - --[ UxBoD ]-- wrote: > Oops on install.sh from the Other Linux version :- > > If this fails due to dependency checks, and you wish to ignore > these problems, you can run > ./install.sh --nodeps > > Setting Perl5 search path > > ./install.sh: line 287: syntax error near unexpected token `else' > ./install.sh: line 287: ` else' > > > On Sun, 20 May 2007 12:56:00 +0100 > Julian Field wrote: > > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released another beta. >> I have updated a whole load of the required Perl modules, and have >> added a command-line option >> --nomodules >> which will stop it installing the required Perl modules, should you >> wish to do that. >> >> I have also fixed a whole bunch of bugs in the installer, so it >> shouldn't overwrite modules with older ones, which was happening in a >> few cases. >> >> Download as usual from www.mailscanner.info. >> >> Jules >> >> - -- >> Julian Field MEng CITP >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> For all your IT requirements visit www.transtec.co.uk >> >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.6.1 (Build 1012) >> Charset: ISO-8859-1 >> >> wj8DBQFGUDdWEfZZRxQVtlQRAjRoAKCEo4hMuvzD6qW9n65RPcwBy3mg7ACg28jS >> lszMrqePEF33syo5oG9uFkI= >> =ZKo6 >> -----END PGP SIGNATURE----- >> >> > > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGUHqIEfZZRxQVtlQRAncrAKCLXN08y19BHIzvSeA/d7X+uoFavwCfWn2C ljtuiRElOmZtRRuQatiPujs= =sG8r -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Sun May 20 17:24:01 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sun, 20 May 2007 18:24:01 +0100 Subject: Release 4.60.2 In-Reply-To: <46507A27.1080507@ecs.soton.ac.uk> References: <46503750.50401@ecs.soton.ac.uk> <20070520154201.5daa5df4@uxbod.splatnix.net> <46507A27.1080507@ecs.soton.ac.uk> Message-ID: <20070520182401.46681105@uxbod.splatnix.net> Works a treat now :) On Sun, 20 May 2007 17:41:11 +0100 Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Fixed, along with a couple of other screw-ups in that installer. Now > if I can just pursuade Solaris 9 to install itself properly... > > I have published 4.60.2-2, in which the only difference from -1 is > the non-Linux installer. > > - --[ UxBoD ]-- wrote: > > Oops on install.sh from the Other Linux version :- > > > > If this fails due to dependency checks, and you wish to ignore > > these problems, you can run > > ./install.sh --nodeps > > > > Setting Perl5 search path > > > > ./install.sh: line 287: syntax error near unexpected token `else' > > ./install.sh: line 287: ` else' > > > > > > On Sun, 20 May 2007 12:56:00 +0100 > > Julian Field wrote: > > > > > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> I have just released another beta. > >> I have updated a whole load of the required Perl modules, and have > >> added a command-line option > >> --nomodules > >> which will stop it installing the required Perl modules, should you > >> wish to do that. > >> > >> I have also fixed a whole bunch of bugs in the installer, so it > >> shouldn't overwrite modules with older ones, which was happening > >> in a few cases. > >> > >> Download as usual from www.mailscanner.info. > >> > >> Jules > >> > >> - -- > >> Julian Field MEng CITP > >> www.MailScanner.info > >> Buy the MailScanner book at www.MailScanner.info/store > >> > >> MailScanner customisation, or any advanced system administration > >> help? Contact me at Jules at Jules.FM > >> > >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > >> For all your IT requirements visit www.transtec.co.uk > >> > >> > >> > >> -----BEGIN PGP SIGNATURE----- > >> Version: PGP Desktop 9.6.1 (Build 1012) > >> Charset: ISO-8859-1 > >> > >> wj8DBQFGUDdWEfZZRxQVtlQRAjRoAKCEo4hMuvzD6qW9n65RPcwBy3mg7ACg28jS > >> lszMrqePEF33syo5oG9uFkI= > >> =ZKo6 > >> -----END PGP SIGNATURE----- > >> > >> > > > > > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGUHqIEfZZRxQVtlQRAncrAKCLXN08y19BHIzvSeA/d7X+uoFavwCfWn2C > ljtuiRElOmZtRRuQatiPujs= > =sG8r > -----END PGP SIGNATURE----- > -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From res at ausics.net Sun May 20 21:15:16 2007 From: res at ausics.net (Res) Date: Mon, 21 May 2007 07:15:16 +1000 (EST) Subject: Release 4.60.2 In-Reply-To: <46503750.50401@ecs.soton.ac.uk> References: <46503750.50401@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 20 May 2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just released another beta. > I have updated a whole load of the required Perl modules, and have added > a command-line option > --nomodules > which will stop it installing the required Perl modules, should you wish > to do that. Excellent!, thanks, works great :) - -- Cheers Res Vote for your favourite MTA at http://polls.ausics.net/v3.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGULpmsWhAmSIQh7MRAg0dAJ488fR/OEKIaKi8hRT8uroeeP3/OwCcCh70 beYlZAZepiCjyIcVY4gKYtk= =WC72 -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Mon May 21 14:30:16 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 21 May 2007 15:30:16 +0100 Subject: Release 4.60.2 In-Reply-To: References: <46503750.50401@ecs.soton.ac.uk> Message-ID: <4651ACF8.6020007@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 And in doing more testing on a Solaris 9 box (takes a while to download the whole of Solaris 9 onto my Mac!) I found another couple of bugs in the installer, which I have fixed. Test::Simple was in the wrong place, and Solaris 9 requires an update to Test::Harness before that will install. So I have released -3. Jules. Res wrote: > > > * PGP Signed by an unknown key > > On Sun, 20 May 2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released another beta. >> I have updated a whole load of the required Perl modules, and have added >> a command-line option >> --nomodules >> which will stop it installing the required Perl modules, should you wish >> to do that. > > Excellent!, thanks, works great :) > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGUa0eEfZZRxQVtlQRAgV5AJ9e0ZW5E6GuZU1F9MJ822UIMnEM4wCdFjNX hRcZUFyfocb/lk1XIMCtAb0= =wIuj -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From res at ausics.net Tue May 22 03:10:14 2007 From: res at ausics.net (Res) Date: Tue, 22 May 2007 13:10:14 +1000 (EST) Subject: Release 4.60.2 In-Reply-To: <4651ACF8.6020007@ecs.soton.ac.uk> References: <46503750.50401@ecs.soton.ac.uk> <4651ACF8.6020007@ecs.soton.ac.uk> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 21 May 2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > And in doing more testing on a Solaris 9 box (takes a while to download > the whole of Solaris 9 onto my Mac!) I found another couple of bugs in > the installer, which I have fixed. Test::Simple was in the wrong place, > and Solaris 9 requires an update to Test::Harness before that will install. > > So I have released -3. All good here still > > Jules. > > Res wrote: >> >> >> * PGP Signed by an unknown key >> >> On Sun, 20 May 2007, Julian Field wrote: >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> I have just released another beta. >>> I have updated a whole load of the required Perl modules, and have added >>> a command-line option >>> --nomodules >>> which will stop it installing the required Perl modules, should you wish >>> to do that. >> >> Excellent!, thanks, works great :) >> >> > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.6.1 (Build 1012) > Charset: ISO-8859-1 > > wj8DBQFGUa0eEfZZRxQVtlQRAgV5AJ9e0ZW5E6GuZU1F9MJ822UIMnEM4wCdFjNX > hRcZUFyfocb/lk1XIMCtAb0= > =wIuj > -----END PGP SIGNATURE----- > > - -- Cheers Res Vote for your favourite Operating System: http://polls.ausics.net/v1.php -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGUl8YsWhAmSIQh7MRAnYlAKCv79VXs8wdg9G0gDz7tg1hcNg+9gCeKoXh aOUAjgJf0KhuGR19ZisgVDQ= =/g+3 -----END PGP SIGNATURE----- From martinh at solidstatelogic.com Fri May 25 10:03:26 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri, 25 May 2007 11:03:26 +0100 Subject: MS 40.60.3 so far so good Message-ID: Running above on Freebsd 4.11 and exim 4.43 no issues so far. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From MailScanner at ecs.soton.ac.uk Fri May 25 15:59:39 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri, 25 May 2007 16:59:39 +0100 Subject: Beta release 4.60.4 Message-ID: <465707EB.4000805@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just released a new beta, 4.60.4, which includes the Postfix 2.3 and 2.4 patches provided by Glenn Steen. Download as usual from www.mailscanner.info. The full Change Log is: * New Features and Improvements * 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf ready for installation of Perl-SAVI module required for "sophossavi" virus scanner. 1 Custom Functions can now receive parameters not only to their Init and End functions, but also to their run-time calculation functions (i.e. the real custom function itself used when processing each message). The Custom Function is now passed not only the message, but also a ref to a list of parameters specified in the MailScanner.conf file. 1 Improvement to phishing net. 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, leaving MailScanner to do the check later in the dangerous content scanning. The consequence is that MailWatch will allow them to be released from quarantine. 2 Updated a whole load of Perl modules in the pre-requisites lists for both MailScanner and SpamAssassin. 2 Added a "--nomodules" command-line option to the MailScanner install.sh script to skip installing required Perl modules. 2-2 Fixed bugs introduced by 4.60.2 in generic installer. Only affects 'other Linux and non-Linux' installer. 2-4 Fixed more non-Linux installer problems. 4 Added more modules to the list output by "MailScanner --version". 4 Improved phishing net detection of HTML tags, courtesy of snifer_ at hotmail.com. 4 Added patches to provide full "p record" support in Postfix 2.3 and 2.4, courtesy of Glenn Steen . * Fixes * 1 Phishing net now correctly handles HTML tags inside links. 1 Deprecated clamscan flag replaced with supported one to stop it printing the summary. 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop scanner producing licensing details. Thanks to UxBoD. 1 Removed test in RPM distribution's test for RedHat 6 as it will clash with RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) 1 Worked round Perl bug in returning number of RBLs hit by a message. 1 Fixed problem causing some password-protected RAR archives to be missed. 3 Fixed bug introduced in earlier beta in RBL code. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGVwitEfZZRxQVtlQRAh5lAJ9+jXdkisKds85ya/cB4nfactX9DQCg3QJ5 yaR6O/fimQTO8JOe0t50vsY= =Hh95 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From kevin.greene at oceanos.org Fri May 25 22:58:49 2007 From: kevin.greene at oceanos.org (Kevin Greene) Date: Fri, 25 May 2007 15:58:49 -0700 Subject: New Mailscanner Beta .3 In-Reply-To: <200705251100.l4PB02kO022977@safir.blacknight.ie> References: <200705251100.l4PB02kO022977@safir.blacknight.ie> Message-ID: <46576A29.5070505@oceanos.org> Hi: I have it running here on a Sun Solaris 8 host and it is working great (~30,000 mails a day). I also am using ClamAV and McAfee as the two AV engines. We used the latest SA and ClamAV toolbox from Jules. We also have the MailScanner system set up to look for legally illegal images in real time using a special database query over HTTPS and again, no problems. Finds an interesting mix of images. Thanks Jules for a great mail filtering solution. Kevin Greene -------------- next part -------------- A non-text attachment was scrubbed... Name: kevin.greene.vcf Type: text/x-vcard Size: 339 bytes Desc: not available URL: From res at ausics.net Sat May 26 02:07:18 2007 From: res at ausics.net (Res) Date: Sat, 26 May 2007 12:07:18 +1000 (EST) Subject: stable release announcements Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian, do these still go out on this list? or only the betas ? - -- Cheers Res -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGV5ZZsWhAmSIQh7MRAsYdAKC0BnYVhJHYq4J1y6uxPL0XjXSrvwCfU1t4 15vQxXlRRHXIGtE+JeIRdVc= =BxeC -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Sat May 26 09:36:02 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat, 26 May 2007 10:36:02 +0100 Subject: stable release announcements In-Reply-To: References: Message-ID: <4657FF82.7020107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Only the betas go to the beta list. If you want the stable releases as well, subscribe to the -announce list. Res wrote: > * PGP Signed by an unknown key > > Julian, do these still go out on this list? or only the betas ? > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) Charset: ISO-8859-1 wj8DBQFGWAB/EfZZRxQVtlQRAqfvAJwLn3s1CotOZx+BfgUkcNAy5wDOWgCeP7i2 +OTN3mocrLL84DbS3BioWtk= =ENZe -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Sun May 27 10:01:22 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sun, 27 May 2007 11:01:22 +0100 Subject: 4.60.4 Message-ID: <20070527110122.0dd8914c@uxbod.splatnix.net> Installed this morning and so far so good. Glen, how do I go about testing your P patches for Postfix ? -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Sun May 27 10:10:21 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun, 27 May 2007 12:10:21 +0200 Subject: 4.60.4 In-Reply-To: <20070527110122.0dd8914c@uxbod.splatnix.net> References: <20070527110122.0dd8914c@uxbod.splatnix.net> Message-ID: <223f97700705270310w7349e8f6sf978619d1c631254@mail.gmail.com> On 27/05/07, --[ UxBoD ]-- wrote: > Installed this morning and so far so good. Glen, how do I go about > testing your P patches for Postfix ? > 1. By installing and running OK, you've verified that my changes didn't break the normal case (no milters). 2. By using a milter (as documented at http://www.postfix.org/MILTER_README.html and elsewhere) that would add a header, that would confirm that they are working as expected for the "postfix 2.3 case". 3. By using a milter that would do something to the body of the message (sign it, or whatever) you would confirm that it works properly for the "postfix 2.4 case". Assumes you are running 2.4, of course:-). Actually, we would get a preliminary answer already at #2. I'm fairly certain we are good to go with this... And I'm also fairly certain that milter use in the Postfix community is _very_ low ATM, especially when looking at the combination PF and MS, but also that it is set to rise sharply. So although these changes have little ramification right now, they do need to be there;-). Cheers, and thanks for doing some testing of this! -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Sun May 27 11:46:55 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Sun, 27 May 2007 12:46:55 +0100 Subject: 4.60.4 In-Reply-To: <223f97700705270310w7349e8f6sf978619d1c631254@mail.gmail.com> References: <20070527110122.0dd8914c@uxbod.splatnix.net> <223f97700705270310w7349e8f6sf978619d1c631254@mail.gmail.com> Message-ID: <20070527124655.4074dd8c@uxbod.splatnix.net> Will have a read of the Milter support and knock one up to try it out :) On Sun, 27 May 2007 12:10:21 +0200 "Glenn Steen" wrote: > On 27/05/07, --[ UxBoD ]-- wrote: > > Installed this morning and so far so good. Glen, how do I go about > > testing your P patches for Postfix ? > > > 1. By installing and running OK, you've verified that my changes > didn't break the normal case (no milters). > 2. By using a milter (as documented at > http://www.postfix.org/MILTER_README.html and elsewhere) that would > add a header, that would confirm that they are working as expected for > the "postfix 2.3 case". > 3. By using a milter that would do something to the body of the > message (sign it, or whatever) you would confirm that it works > properly for the "postfix 2.4 case". Assumes you are running 2.4, of > course:-). > > Actually, we would get a preliminary answer already at #2. > > I'm fairly certain we are good to go with this... And I'm also fairly > certain that milter use in the Postfix community is _very_ low ATM, > especially when looking at the combination PF and MS, but also that it > is set to rise sharply. > > So although these changes have little ramification right now, they do > need to be there;-). > > Cheers, and thanks for doing some testing of this! -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: uxbod at sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sun May 27 20:51:57 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 27 May 2007 21:51:57 +0100 Subject: Beta release: 4.60.5 - compress attachments Message-ID: <4659EF6D.2070107@ecs.soton.ac.uk> I have just written the feature you wanted to compress attachments into a zip file. The new MailScanner.conf configuration settings for this are: # Should the attachments be compressed and put into a single zip file? # This can also be the filename of a ruleset. Zip Attachments = no # If the attachments are to be compressed into a single zip file, # this is the filename of the zip file. # This can also be the filename of a ruleset. Attachments Zip Filename = MessageAttachments.zip You will obviously want to set the first one to "yes" to use it :-) Please test this for me! It is switched off by default, so you will need to set it to "yes" in your MailScanner.conf file to use it. Download it as usual from www.mailscanner.info. The full Change Log for this version is... * New Features and Improvements * 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf ready for installation of Perl-SAVI module required for "sophossavi" virus scanner. 1 Custom Functions can now receive parameters not only to their Init and End functions, but also to their run-time calculation functions (i.e. the real custom function itself used when processing each message). The Custom Function is now passed not only the message, but also a ref to a list of parameters specified in the MailScanner.conf file. 1 Improvement to phishing net. 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, leaving MailScanner to do the check later in the dangerous content scanning. The consequence is that MailWatch will allow them to be released from quarantine. 2 Updated a whole load of Perl modules in the pre-requisites lists for both MailScanner and SpamAssassin. 2 Added a "--nomodules" command-line option to the MailScanner install.sh script to skip installing required Perl modules. 2-2 Fixed bugs introduced by 4.60.2 in generic installer. Only affects 'other Linux and non-Linux' installer. 2-4 Fixed more non-Linux installer problems. 4 Added more modules to the list output by "MailScanner --version". 4 Improved phishing net detection of HTML tags, courtesy of snifer_ at hotmail.com. 4 Added patches to provide full "p record" support in Postfix 2.3 and 2.4, courtesy of Glenn Steen . 5 Added a new feature, to compress all the attachments in a message and replace them with a single zip file. Set "Zip Attachments = yes" (no by default), and set "Attachments Zip Filename = MessageAttachments.zip" * Fixes * 1 Phishing net now correctly handles HTML tags inside links. 1 Deprecated clamscan flag replaced with supported one to stop it printing the summary. 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop scanner producing licensing details. Thanks to UxBoD. 1 Removed test in RPM distribution's test for RedHat 6 as it will clash with RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) 1 Worked round Perl bug in returning number of RBLs hit by a message. 1 Fixed problem causing some password-protected RAR archives to be missed. 3 Fixed bug introduced in earlier beta in RBL code. Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From jan-peter at koopmann.eu Mon May 28 12:20:46 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Mon, 28 May 2007 14:20:46 +0200 Subject: Beta release: 4.60.5 - compress attachments In-Reply-To: <4659EF6D.2070107@ecs.soton.ac.uk> References: <4659EF6D.2070107@ecs.soton.ac.uk> Message-ID: On Sunday, May 27, 2007 10:52 PM Julian Field wrote: > I have just written the feature you wanted to compress attachments > into > a zip file. Wow. > Please test this for me! First tests show all is working. It would be great if later on you could decide what attachments you want to be compressed automatically. Examples: - messages with more than one attachment - attachment size --> makes no sense to zip a 100k file - filetype --> makes no sense to zip archives, movies, mp3 etc. But I am still impressed with the speed of you implementing this feature request! Great! Kind regards, JP From MailScanner at ecs.soton.ac.uk Mon May 28 14:42:18 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 15:42:18 +0100 Subject: Beta release: 4.60.5 - compress attachments In-Reply-To: References: <4659EF6D.2070107@ecs.soton.ac.uk> Message-ID: <465AEA4A.9080004@ecs.soton.ac.uk> Koopmann, Jan-Peter wrote: > On Sunday, May 27, 2007 10:52 PM Julian Field wrote: > > >> I have just written the feature you wanted to compress attachments >> into >> a zip file. >> > > Wow. > :-) > >> Please test this for me! >> > > First tests show all is working. It would be great if later on you could > decide what attachments you want to be compressed automatically. > Examples: > > - messages with more than one attachment > Still worth doing if the 1 attachment is big, so I don't support that one. > - attachment size --> makes no sense to zip a 100k file > That's possible. > - filetype --> makes no sense to zip archives, movies, mp3 etc. > It doesn't zip filenames ending in .zip or .rar or .gz. I don't want to do a full filetype check. > > But I am still impressed with the speed of you implementing this feature > request! Great! > No problem. Please test it out with TNEF messages (i.e. winmail.dat messages), and messages containing zip archives already. Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Mon May 28 15:01:09 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 16:01:09 +0100 Subject: Beta release: 4.60.5 - compress attachments In-Reply-To: References: <4659EF6D.2070107@ecs.soton.ac.uk> Message-ID: <465AEEB5.6080502@ecs.soton.ac.uk> See my posting to the beta list. Basic summary is 1) The min file size setting is a good idea, 2) don't like the others much, but already filenames ending in .zip or .rar or .gz are not added to the zip file. Koopmann, Jan-Peter wrote: > On Sunday, May 27, 2007 10:52 PM Julian Field wrote: > > >> I have just written the feature you wanted to compress attachments >> into >> a zip file. >> > > Wow. > > >> Please test this for me! >> > > First tests show all is working. It would be great if later on you could > decide what attachments you want to be compressed automatically. > Examples: > > - messages with more than one attachment > - attachment size --> makes no sense to zip a 100k file > - filetype --> makes no sense to zip archives, movies, mp3 etc. > > > But I am still impressed with the speed of you implementing this feature > request! Great! > > Kind regards, > JP > Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Mon May 28 15:08:26 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 16:08:26 +0100 Subject: Beta release: 4.60.5 - compress attachments In-Reply-To: References: <4659EF6D.2070107@ecs.soton.ac.uk> Message-ID: <465AF06A.1030706@ecs.soton.ac.uk> Koopmann, Jan-Peter wrote: > - attachment size --> makes no sense to zip a 100k file > - filetype --> makes no sense to zip archives, movies, mp3 etc. > Who else wants these? The filetype checks would be done by filename suffix, not by reading the actual file or launching any external program (such as the 'file' command). I don't want to make this a huge heavyweight beast. Zip Attachments Minimum Size = 100k Don't Zip Attachments Ending = .zip .rar .gz .mp3 .mpg .mpeg If I do implement either of these, this is as complicated as it's going to get. Who wants either (please specify which one) or both of these settings? Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Mon May 28 15:30:36 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 16:30:36 +0100 Subject: Beta release: 4.60.5 - compress attachments In-Reply-To: <398103.542.qm@web26307.mail.ukl.yahoo.com> References: <398103.542.qm@web26307.mail.ukl.yahoo.com> Message-ID: <465AF59C.8030006@ecs.soton.ac.uk> Andrew MacLachlan wrote: > I would suggest 2 rules: > Don't zip anything when the total attachments are under say 100kb (nice to have) > Good point about it being the total size, not the size of each attachment. I'll go for that instead of measuring the size of each attachment. > Don't zip archives (zip, rar, *gz etc - base this on filename though) (nicer to have) > > I can't see too many people complaining if you hardcoded these. (asbestos suit on just in case) > Hardcoding in one version usually upsets enough people that they become configurable in the next version :-) > -Andy > > ----- Original Message ---- > From: Julian Field > To: MailScanner Beta-testers > Cc: MailScanner discussion > Sent: Monday, 28 May, 2007 4:08:26 PM > Subject: Re: Beta release: 4.60.5 - compress attachments > > > > Koopmann, Jan-Peter wrote: > >> - attachment size --> makes no sense to zip a 100k file >> - filetype --> makes no sense to zip archives, movies, mp3 etc. >> >> > Who else wants these? The filetype checks would be done by filename > suffix, not by reading the actual file or launching any external program > (such as the 'file' command). I don't want to make this a huge > heavyweight beast. > > Zip Attachments Minimum Size = 100k > Don't Zip Attachments Ending = .zip .rar .gz .mp3 .mpg .mpeg > > If I do implement either of these, this is as complicated as it's going > to get. > Who wants either (please specify which one) or both of these settings? > > Jules > > Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From MailScanner at ecs.soton.ac.uk Mon May 28 17:27:20 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 18:27:20 +0100 Subject: Beta release 4.60.6 Message-ID: <465B10F8.6060405@ecs.soton.ac.uk> I have added the 2 configuration options that seemed worthwhile for the new "Zip Attachments" feature: # If the original total size of all the attachments to be compressed is # less than this number of bytes, they will not be zipped at all. # This can also be the filename of a ruleset. Attachments Min Total Size To Zip = 100k # Attachments whose filenames end in these strings will not be zipped. # This can also be the filename of a ruleset. Attachment Extensions Not To Zip = .zip .rar .gz .tgz .mpg .mpeg .mp3 .rpm Download as usual from www.mailscanner.info. Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Mon May 28 17:50:16 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Mon, 28 May 2007 18:50:16 +0100 Subject: Beta release 4.60.6 In-Reply-To: <465B10F8.6060405@ecs.soton.ac.uk> References: <465B10F8.6060405@ecs.soton.ac.uk> Message-ID: <20070528185016.1df9fbb1@uxbod.splatnix.net> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jules! Its a UK Bank Holiday relax!!! On Mon, 28 May 2007 18:27:20 +0100 Julian Field wrote: > I have added the 2 configuration options that seemed worthwhile for > the new "Zip Attachments" feature: > > # If the original total size of all the attachments to be compressed > is # less than this number of bytes, they will not be zipped at all. > # This can also be the filename of a ruleset. > Attachments Min Total Size To Zip = 100k > > # Attachments whose filenames end in these strings will not be zipped. > # This can also be the filename of a ruleset. > Attachment Extensions Not To Zip > = .zip .rar .gz .tgz .mpg .mpeg .mp3 .rpm > > Download as usual from www.mailscanner.info. > > Jules > - -- - --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (GNU/Linux) iD8DBQFGWxZeH7GwL121aHsRAovOAKCiunDj2nJJNhSRL9pahs1Q7TpcFgCdHJcd +QRnAnCij6etYhypp4ZfJGg= =sdRG -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Mon May 28 18:05:36 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 28 May 2007 19:05:36 +0100 Subject: Beta release 4.60.6 In-Reply-To: <20070528185016.1df9fbb1@uxbod.splatnix.net> References: <465B10F8.6060405@ecs.soton.ac.uk> <20070528185016.1df9fbb1@uxbod.splatnix.net> Message-ID: <465B19F0.4060303@ecs.soton.ac.uk> --[ UxBoD ]-- wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Jules! Its a UK Bank Holiday relax!!! > I was bored. And they were pretty easy to write. The only interesting bit was to turn ".mpg .gz .zip" into "\.mpg$|\.gz$|\.zip$". One of those things that is easy to write in Perl and a nightmare in most other languages. Annoyed I missed seeing the Monaco Formula 1 yesterday, it's one of my favourite races of the year, and I didn't realise it was this weekend :-( > On Mon, 28 May 2007 18:27:20 +0100 > Julian Field wrote: > > >> I have added the 2 configuration options that seemed worthwhile for >> the new "Zip Attachments" feature: >> >> # If the original total size of all the attachments to be compressed >> is # less than this number of bytes, they will not be zipped at all. >> # This can also be the filename of a ruleset. >> Attachments Min Total Size To Zip = 100k >> >> # Attachments whose filenames end in these strings will not be zipped. >> # This can also be the filename of a ruleset. >> Attachment Extensions Not To Zip >> = .zip .rar .gz .tgz .mpg .mpeg .mp3 .rpm >> >> Download as usual from www.mailscanner.info. >> >> Jules >> >> > > > - -- > - --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.4 (GNU/Linux) > > iD8DBQFGWxZeH7GwL121aHsRAovOAKCiunDj2nJJNhSRL9pahs1Q7TpcFgCdHJcd > +QRnAnCij6etYhypp4ZfJGg= > =sdRG > -----END PGP SIGNATURE----- > > Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Mon May 28 19:44:36 2007 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Mon, 28 May 2007 20:44:36 +0100 Subject: Beta release 4.60.6 In-Reply-To: <465B19F0.4060303@ecs.soton.ac.uk> References: <465B10F8.6060405@ecs.soton.ac.uk> <20070528185016.1df9fbb1@uxbod.splatnix.net> <465B19F0.4060303@ecs.soton.ac.uk> Message-ID: <20070528204436.7f351d58@uxbod.splatnix.net> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 That is why you should *RELAX* Jules ! ;) On Mon, 28 May 2007 19:05:36 +0100 Julian Field wrote: > --[ UxBoD ]-- wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Jules! Its a UK Bank Holiday relax!!! > > > I was bored. And they were pretty easy to write. > The only interesting bit was to turn ".mpg .gz .zip" into > "\.mpg$|\.gz$|\.zip$". One of those things that is easy to write in > Perl and a nightmare in most other languages. > > Annoyed I missed seeing the Monaco Formula 1 yesterday, it's one of > my favourite races of the year, and I didn't realise it was this > weekend :-( > > > On Mon, 28 May 2007 18:27:20 +0100 > > Julian Field wrote: > > > > > >> I have added the 2 configuration options that seemed worthwhile for > >> the new "Zip Attachments" feature: > >> > >> # If the original total size of all the attachments to be > >> compressed is # less than this number of bytes, they will not be > >> zipped at all. # This can also be the filename of a ruleset. > >> Attachments Min Total Size To Zip = 100k > >> > >> # Attachments whose filenames end in these strings will not be > >> zipped. # This can also be the filename of a ruleset. > >> Attachment Extensions Not To Zip > >> = .zip .rar .gz .tgz .mpg .mpeg .mp3 .rpm > >> > >> Download as usual from www.mailscanner.info. > >> > >> Jules > >> > >> > > > > > > - -- > > - --[ UxBoD ]-- > > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > > --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F > > 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > > // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v2.0.4 (GNU/Linux) > > > > iD8DBQFGWxZeH7GwL121aHsRAovOAKCiunDj2nJJNhSRL9pahs1Q7TpcFgCdHJcd > > +QRnAnCij6etYhypp4ZfJGg= > > =sdRG > > -----END PGP SIGNATURE----- > > > > > > Jules > - -- - --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (GNU/Linux) iD8DBQFGWzErH7GwL121aHsRAr3WAJ9bd2foinWzGoqeG38AT02nYHoS2QCeOygC xLI2y12GpRDPCmIks75tYRU= =HpgZ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From res at ausics.net Tue May 29 03:27:31 2007 From: res at ausics.net (Res) Date: Tue, 29 May 2007 13:27:31 +1000 (EST) Subject: Beta release 4.60.6 In-Reply-To: References: Message-ID: Julian, for when you get to the stable releases can you check the source packages, much of the text/readme style files and report files all have executable bits set upon install, this has been like this for a long time, I'm sure I sent you pvt mail about it ages ago but most likey binned so its on list now, also in the reports you have a lot of bak files which I think shouldn't be in (even beta) releases. Thanks From prandal at herefordshire.gov.uk Tue May 29 10:52:24 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue, 29 May 2007 11:52:24 +0100 Subject: Beta release 4.60.6 In-Reply-To: <465B10F8.6060405@ecs.soton.ac.uk> References: <465B10F8.6060405@ecs.soton.ac.uk> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBAD52C9D@HC-MBX02.herefordshire.gov.uk> .mpe is another common Wondows mpeg file extension which should be added to that list. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-beta-bounces at lists.mailscanner.info > [mailto:mailscanner-beta-bounces at lists.mailscanner.info] On > Behalf Of Julian Field > Sent: 28 May 2007 18:27 > To: MailScanner discussion; MailScanner beta testers > Subject: Beta release 4.60.6 > > I have added the 2 configuration options that seemed > worthwhile for the > new "Zip Attachments" feature: > > # If the original total size of all the attachments to be > compressed is > # less than this number of bytes, they will not be zipped at all. > # This can also be the filename of a ruleset. > Attachments Min Total Size To Zip = 100k > > # Attachments whose filenames end in these strings will not be zipped. > # This can also be the filename of a ruleset. > Attachment Extensions Not To Zip = .zip .rar .gz .tgz .mpg > .mpeg .mp3 .rpm > > Download as usual from www.mailscanner.info. > > Jules > > -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > For all your IT requirements visit www.transtec.co.uk > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From res at ausics.net Tue May 29 22:44:16 2007 From: res at ausics.net (Res) Date: Wed, 30 May 2007 08:44:16 +1000 (EST) Subject: phishing sites master conf Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian, can you have a look at your master file, it has less in it (5) than the safe conf in the beta package. - -- Cheers Res -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGXKzCsWhAmSIQh7MRAvX1AJ9G4fjBqFtigModuR1INji9JwhLCQCgikHK ugzbVWIiN+3r9/EvQGsUl/g= =lf4t -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Wed May 30 18:49:03 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 30 May 2007 19:49:03 +0100 Subject: Beta release 4.60.7 Message-ID: <465DC71F.2080303@ecs.soton.ac.uk> This release includes a patch to the new Postfix code in 4.60. If you are using Postfix versions 2.3 or 2.4, please upgrade to this version to test it for me. Download as usual from www.mailscanner.info. The full Change Log for this version is: * New Features and Improvements * 1 Improved Sophos.install script so that it sets up /etc/ld.so.conf ready for installation of Perl-SAVI module required for "sophossavi" virus scanner. 1 Custom Functions can now receive parameters not only to their Init and End functions, but also to their run-time calculation functions (i.e. the real custom function itself used when processing each message). The Custom Function is now passed not only the message, but also a ref to a list of parameters specified in the MailScanner.conf file. 1 Improvement to phishing net. 1 'clamavmodule' scanner no longer detects encrypted zips/rars as viruses, leaving MailScanner to do the check later in the dangerous content scanning. The consequence is that MailWatch will allow them to be released from quarantine. 2 Updated a whole load of Perl modules in the pre-requisites lists for both MailScanner and SpamAssassin. 2 Added a "--nomodules" command-line option to the MailScanner install.sh script to skip installing required Perl modules. 2-2 Fixed bugs introduced by 4.60.2 in generic installer. Only affects 'other Linux and non-Linux' installer. 2-4 Fixed more non-Linux installer problems. 4 Added more modules to the list output by "MailScanner --version". 4 Improved phishing net detection of HTML tags, courtesy of snifer_ at hotmail.com. 4 Added patches to provide full "p record" support in Postfix 2.3 and 2.4, courtesy of Glenn Steen . 5 Added a new feature, to compress all the attachments in a message and replace them with a single zip file. Set "Zip Attachments = yes" (no by default), and set "Attachments Zip Filename = MessageAttachments.zip" 6 Added 2 new configuration options for the "Zip Attachments" feature: Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .tgz .gz .mpg .mpeg .mp3 .rpm Hopefully these are fairly self-explanatory. * Fixes * 1 Phishing net now correctly handles HTML tags inside links. 1 Deprecated clamscan flag replaced with supported one to stop it printing the summary. 1 Added '-b' to nod32-1.99 command-line options in SweepViruses.pm to stop scanner producing licensing details. Thanks to UxBoD. 1 Removed test in RPM distribution's test for RedHat 6 as it will clash with RHEL 6 and Fedora. Anyone still running RedHat 6 has bigger problems! :-) 1 Worked round Perl bug in returning number of RBLs hit by a message. 1 Fixed problem causing some password-protected RAR archives to be missed. 3 Fixed bug introduced in earlier beta in RBL code. 6-2 Patch to Exim to handle named ACL variables as well as numbered ones. Courtesy of Maarten Vink. 7 Added v320.pre to mcp directory. 7 Postfix 2.3/2.4 patch fix. Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From john at tradoc.fr Thu May 31 07:28:33 2007 From: john at tradoc.fr (John Wilcock) Date: Thu, 31 May 2007 09:28:33 +0200 Subject: Beta release 4.60.7 In-Reply-To: <465DC71F.2080303@ecs.soton.ac.uk> References: <465DC71F.2080303@ecs.soton.ac.uk> Message-ID: <465E7921.3060401@tradoc.fr> Julian Field wrote: > This release includes a patch to the new Postfix code in 4.60. If you > are using Postfix versions 2.3 or 2.4, please upgrade to this version to > test it for me. FWIW it appears to be running fine here (postfix 2.3.6, though with no milters) on my secondary MX which gets almost exclusively spam. Is there anything specific you'd like me to test? John. -- -- Over 3000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From glenn.steen at gmail.com Thu May 31 07:58:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu, 31 May 2007 09:58:25 +0200 Subject: Beta release 4.60.7 In-Reply-To: <465E7921.3060401@tradoc.fr> References: <465DC71F.2080303@ecs.soton.ac.uk> <465E7921.3060401@tradoc.fr> Message-ID: <223f97700705310058p15a74400k60e9eeef92191f9e@mail.gmail.com> On 31/05/07, John Wilcock wrote: > Julian Field wrote: > > This release includes a patch to the new Postfix code in 4.60. If you > > are using Postfix versions 2.3 or 2.4, please upgrade to this version to > > test it for me. > > FWIW it appears to be running fine here (postfix 2.3.6, though with no > milters) on my secondary MX which gets almost exclusively spam. Is there > anything specific you'd like me to test? > > John. > Well, the bug was such that eventually all MS children would "get stuck" busy-waiting for a condition that never... happened. The patch should have taken care of that. Just keep an eye on your processes (that they don't suddenly start eating memory like crazy) and the mail flow:-). Also, if you'd like to enable some small milter that just does something harmless and adds a header, that would be helpful too;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Thu May 31 09:27:48 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 31 May 2007 10:27:48 +0100 Subject: Beta release 4.60.7 In-Reply-To: <465E7921.3060401@tradoc.fr> References: <465DC71F.2080303@ecs.soton.ac.uk> <465E7921.3060401@tradoc.fr> Message-ID: <465E9514.3090306@ecs.soton.ac.uk> John Wilcock wrote: > Julian Field wrote: >> This release includes a patch to the new Postfix code in 4.60. If you >> are using Postfix versions 2.3 or 2.4, please upgrade to this version >> to test it for me. > > FWIW it appears to be running fine here (postfix 2.3.6, though with no > milters) on my secondary MX which gets almost exclusively spam. Is > there anything specific you'd like me to test? I mostly just want to see that you're not getting either a) messages stuck in the in queue b) messages processed twice Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk