From P.G.M.Peters at UTWENTE.NL Fri Apr 1 12:47:32 2005 From: P.G.M.Peters at UTWENTE.NL (Peter Peters) Date: Thu Jan 12 21:29:12 2006 Subject: Newlines (\n) in subjects Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Stijn Jonker wrote on 31-3-2005 21:18: > First of all: I know this has been discussed recently but I can't find > it in the jiscmail archives. > > It seems that MailScanner is inserting a \n in subject lines somewhere > around char 80, I tried to dig the source on how to disable this, but > unfortunaly I couldn't find it. Are you sure MS is doing this? I know some MTA's (MS comes to mind) are doing that (incorrectly). -- Peter Peters, senior beheerder (Security) Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE) Universiteit Twente, Postbus 217, 7500 AE Enschede telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/itbe ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From devonharding at gmail.com Fri Apr 1 14:52:41 2005 From: devonharding at gmail.com (Devon Harding) Date: Thu Jan 12 21:29:13 2006 Subject: SA Timeouts & requeue Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] My Spamassassin keeps timing out (SpamAssassin Timeout = 240) and keeps delivering the SPAM message. Is there anyway I can have these messages requeued until SA is available? My Specs are AMD K62/400, 128MB RAM. I have only 1 child process running cause of the limited RAM. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Fri Apr 1 15:08:44 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:13 2006 Subject: SA Timeouts & requeue Message-ID: Devon what version of SA, any RBL's an dany extra rules defined for SA? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Devon Harding wrote: > My Spamassassin keeps timing out (SpamAssassin Timeout = 240) and > keeps delivering the SPAM message. Is there anyway I can have these > messages requeued until SA is available? > > My Specs are AMD K62/400, 128MB RAM. I have only 1 child process > running cause of the limited RAM. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From devonharding at gmail.com Fri Apr 1 15:34:56 2005 From: devonharding at gmail.com (Devon Harding) Date: Thu Jan 12 21:29:13 2006 Subject: SA Timeouts & requeue Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Using SA 3.0.2 In MailScanner: Spam List = dslb.org ORDB-RBL SBL+XBL spamhaus.org spamhaus-XBL spamcop.net NJABL CBL RSL DSBL SORBS-SPAM SURBL in /etc/mail/spamassassin/: -rw-r--r-- 1 root root 3.9K Apr 24 2004 70_sare_bayes_poison_nxm.cf -rw-r--r-- 1 root root 24K Mar 19 10:16 70_sare_evilnum0.cf -rw-r--r-- 1 root root 1.6K Mar 13 12:43 70_sare_evilnum1.cf -rw-r--r-- 1 root root 6.9K Mar 13 12:43 70_sare_evilnum2.cf -rw-r--r-- 1 root root 37K Mar 14 23:08 70_sare_html0.cf -rw-r--r-- 1 root root 44K Mar 14 23:08 70_sare_html1.cf -rw-r--r-- 1 root root 8.0K Mar 14 23:08 70_sare_html2.cf -rw-r--r-- 1 root root 19K Mar 14 23:08 70_sare_html3.cf -rw-r--r-- 1 root root 22K Mar 14 23:08 70_sare_html4.cf -rw-r--r-- 1 root root 2.8K Mar 14 23:08 70_sare_html_eng.cf -rw-r--r-- 1 root root 49K Mar 14 23:14 70_sare_uri.cf -rw-r--r-- 1 root root 18K Nov 16 18:05 71_sare_redirect_pre3.0.0.cf -rw-r--r-- 1 root root 16K Nov 16 18:06 72_sare_redirect_post3.0.0.cf -rw-r--r-- 1 root root 14K Apr 28 2004 antidrug.cf -rw-r--r-- 1 root root 935 Sep 22 2004 init.pre -rw-r--r-- 1 root root 331 Mar 29 08:35 local.cf On Apr 1, 2005 9:08 AM, Martin Hepworth wrote: > Devon > > what version of SA, any RBL's an dany extra rules defined for SA? > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > Devon Harding wrote: > > My Spamassassin keeps timing out (SpamAssassin Timeout = 240) and > > keeps delivering the SPAM message. Is there anyway I can have these > > messages requeued until SA is available? > > > > My Specs are AMD K62/400, 128MB RAM. I have only 1 child process > > running cause of the limited RAM. > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Fri Apr 1 15:51:08 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:13 2006 Subject: SA Timeouts & requeue Message-ID: Devon take out 71_sare_redirect_pre3.0.0.cf this is for pre 3.0 SA versions.. what have you got in spam.assassin.prefs.conf? esp anything to do with RBL's and/or URI-RBL's. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Devon Harding wrote: > Using SA 3.0.2 > > In MailScanner: > Spam List = dslb.org ORDB-RBL SBL+XBL spamhaus.org spamhaus-XBL > spamcop.net NJABL CBL RSL DSBL SORBS-SPAM SURBL > > in /etc/mail/spamassassin/: > -rw-r--r-- 1 root root 3.9K Apr 24 2004 70_sare_bayes_poison_nxm.cf > -rw-r--r-- 1 root root 24K Mar 19 10:16 70_sare_evilnum0.cf > -rw-r--r-- 1 root root 1.6K Mar 13 12:43 70_sare_evilnum1.cf > -rw-r--r-- 1 root root 6.9K Mar 13 12:43 70_sare_evilnum2.cf > -rw-r--r-- 1 root root 37K Mar 14 23:08 70_sare_html0.cf > -rw-r--r-- 1 root root 44K Mar 14 23:08 70_sare_html1.cf > -rw-r--r-- 1 root root 8.0K Mar 14 23:08 70_sare_html2.cf > -rw-r--r-- 1 root root 19K Mar 14 23:08 70_sare_html3.cf > -rw-r--r-- 1 root root 22K Mar 14 23:08 70_sare_html4.cf > -rw-r--r-- 1 root root 2.8K Mar 14 23:08 70_sare_html_eng.cf > -rw-r--r-- 1 root root 49K Mar 14 23:14 70_sare_uri.cf > -rw-r--r-- 1 root root 18K Nov 16 18:05 71_sare_redirect_pre3.0.0.cf > -rw-r--r-- 1 root root 16K Nov 16 18:06 72_sare_redirect_post3.0.0.cf > -rw-r--r-- 1 root root 14K Apr 28 2004 antidrug.cf > -rw-r--r-- 1 root root 935 Sep 22 2004 init.pre > -rw-r--r-- 1 root root 331 Mar 29 08:35 local.cf > > On Apr 1, 2005 9:08 AM, Martin Hepworth wrote: > >>Devon >> >>what version of SA, any RBL's an dany extra rules defined for SA? >> >>-- >>Martin Hepworth >>Snr Systems Administrator >>Solid State Logic >>Tel: +44 (0)1865 842300 >> >> >>Devon Harding wrote: >> >>>My Spamassassin keeps timing out (SpamAssassin Timeout = 240) and >>>keeps delivering the SPAM message. Is there anyway I can have these >>>messages requeued until SA is available? >>> >>>My Specs are AMD K62/400, 128MB RAM. I have only 1 child process >>>running cause of the limited RAM. >>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >> >>********************************************************************** >> >>This email and any files transmitted with it are confidential and >>intended solely for the use of the individual or entity to whom they >>are addressed. If you have received this email in error please notify >>the system manager. >> >>This footnote confirms that this email message has been swept >>for the presence of computer viruses and is believed to be clean. >> >>********************************************************************** >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From raymond at PROLOCATION.NET Fri Apr 1 15:59:24 2005 From: raymond at PROLOCATION.NET (Raymond Dijkxhoorn) Date: Thu Jan 12 21:29:13 2006 Subject: SA Timeouts & requeue Message-ID: Hi! > In MailScanner: > Spam List = dslb.org ORDB-RBL SBL+XBL spamhaus.org spamhaus-XBL > spamcop.net NJABL CBL RSL DSBL SORBS-SPAM SURBL > > in /etc/mail/spamassassin/: > -rw-r--r-- 1 root root 3.9K Apr 24 2004 70_sare_bayes_poison_nxm.cf Its much better to move your RBL checks towards SA. Then you can also use SURBL. Bye, Raymond ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Fri Apr 1 16:07:09 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out Message-ID: How did you install SpamAssassin? rpm or tarball? Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Craig White Sent: Friday, April 01, 2005 9:00 AM To: MAILSCANNER@JISCMAIL.AC.UK Subject: errors that I can't figure out # rpm -q mailscanner mailscanner-4.40.7-1 RHEL ES 3 # spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.conf --lint ...snip... debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf config: SpamAssassin failed to parse line, skipping: urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 debug: using "/root/.spamassassin" for user state dir debug: bayes: no dbs present, cannot tie DB R/O: /root/.spamassassin/bayes_toks debug: no method found for eval test check_uridnsbl ...snip... Failed to run URIBL_JP_SURBL SpamAssassin test, skipping: (Can't locate object method "check_uridnsbl" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312. ) ...snip... lint: 2 issues detected. please rerun with debug enabled for more information. How do I fix this? Craig ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Fri Apr 1 16:10:09 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out Message-ID: have you got the URI-RBL plugin installed in init.pre? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Craig White wrote: > # rpm -q mailscanner > mailscanner-4.40.7-1 > > RHEL ES 3 > > # spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.conf --lint > > ...snip... > debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf > config: SpamAssassin failed to parse line, skipping: urirhssub > URIBL_JP_SURBL multi.surbl.org. A 64 > debug: using "/root/.spamassassin" for user state dir > debug: bayes: no dbs present, cannot tie DB > R/O: /root/.spamassassin/bayes_toks > debug: no method found for eval test check_uridnsbl > > ...snip... > > Failed to run URIBL_JP_SURBL SpamAssassin test, skipping: > (Can't locate object method "check_uridnsbl" via package > "Mail::SpamAssassin::PerMsgStatus" > at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm > line 2312. > ) > ...snip... > > lint: 2 issues detected. please rerun with debug enabled for more > information. > > How do I fix this? > > Craig > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Fri Apr 1 16:17:55 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out Message-ID: I know in the past, it has been recommended to install SA from the tarball rather than the rpm. You might try removing the rpm and install from the tarball. Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Craig White Sent: Friday, April 01, 2005 9:12 AM To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: errors that I can't figure out # rpm -q spamassassin spamassassin-3.0.2-1.1.el3.rf sorry, I should have included it Craig On Fri, 2005-04-01 at 09:07 -0600, Mike Kercher wrote: > How did you install SpamAssassin? rpm or tarball? > > Mike > > > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > Behalf Of Craig White > Sent: Friday, April 01, 2005 9:00 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: errors that I can't figure out > > # rpm -q mailscanner > mailscanner-4.40.7-1 > > RHEL ES 3 > > # spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.conf --lint > > ...snip... > debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf > config: SpamAssassin failed to parse line, skipping: urirhssub > URIBL_JP_SURBL multi.surbl.org. A 64 > debug: using "/root/.spamassassin" for user state dir > debug: bayes: no dbs present, cannot tie DB > R/O: /root/.spamassassin/bayes_toks > debug: no method found for eval test check_uridnsbl > > ...snip... > > Failed to run URIBL_JP_SURBL SpamAssassin test, skipping: > (Can't locate object method "check_uridnsbl" via package > "Mail::SpamAssassin::PerMsgStatus" > at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm > line 2312. > ) > ...snip... > > lint: 2 issues detected. please rerun with debug enabled for more > information. > > How do I fix this? > > Craig > > ------------------------ MailScanner list ------------------------ To > unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the > archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ To > unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the > archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Fri Apr 1 16:30:09 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out Message-ID: Craig the init.pre contains lists of plugins etc hat should loaded. in my case it's in /etc/mail/spamassassin and contains.. # This is the right place to customize your installation of #SpamAssassin. # # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # # This file will be loaded before *all other* configuration files, #including # the system configuration. As such, it's a good place to set things # that # will affect how those files are parsed, like which plugins are loaded # etc. # ########################################################################### # RelayCountry - add metadata for Bayes learning, marking the countries # a message was relayed through # # loadplugin Mail::SpamAssassin::Plugin::RelayCountry # URIDNSBL - look up URLs found in the message against several DNS # blocklists. # loadplugin Mail::SpamAssassin::Plugin::URIDNSBL # Hashcash - perform hashcash verification. # loadplugin Mail::SpamAssassin::Plugin::Hashcash # SPF - perform SPF verification. # loadplugin Mail::SpamAssassin::Plugin::SPF As for the bayes DB issue, make sure your spam.assassin.prefs.conf has it set to the correct directory with.. bayes_path /usr/local/var/spamassassin/bayes or wherever it should be..if this is a fresh install you'll need to populate the DB with sa-learn and use 200 of spam and 200 of ham to train it. Either that or download examples from www.fsl.com/support -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Craig White wrote: > I don't even know what init.pre is > > I'm less concerned bout the URIBL_JP_SURBL issue than I am about having > a functional bayes system. > > If you can direct me to something that explains init.pre, I will check > it out. > > Craig > > On Fri, 2005-04-01 at 16:10 +0100, Martin Hepworth wrote: > >>have you got the URI-RBL plugin installed in init.pre? >> >>-- >>Martin Hepworth >>Snr Systems Administrator >>Solid State Logic >>Tel: +44 (0)1865 842300 >> >> >>Craig White wrote: >> >>># rpm -q mailscanner >>>mailscanner-4.40.7-1 >>> >>>RHEL ES 3 >>> >>># spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.conf --lint >>> >>>...snip... >>>debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf >>>config: SpamAssassin failed to parse line, skipping: urirhssub >>>URIBL_JP_SURBL multi.surbl.org. A 64 >>>debug: using "/root/.spamassassin" for user state dir >>>debug: bayes: no dbs present, cannot tie DB >>>R/O: /root/.spamassassin/bayes_toks >>>debug: no method found for eval test check_uridnsbl >>> >>>...snip... >>> >>>Failed to run URIBL_JP_SURBL SpamAssassin test, skipping: >>> (Can't locate object method "check_uridnsbl" via package >>>"Mail::SpamAssassin::PerMsgStatus" >>>at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm >>>line 2312. >>>) >>>...snip... >>> >>>lint: 2 issues detected. please rerun with debug enabled for more >>>information. >>> >>>How do I fix this? >>> >>>Craig >>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >> >>********************************************************************** >> >>This email and any files transmitted with it are confidential and >>intended solely for the use of the individual or entity to whom they >>are addressed. If you have received this email in error please notify >>the system manager. >> >>This footnote confirms that this email message has been swept >>for the presence of computer viruses and is believed to be clean. >> >>********************************************************************** >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From bob.jones at USG.EDU Fri Apr 1 17:08:13 2005 From: bob.jones at USG.EDU (Bob Jones) Date: Thu Jan 12 21:29:13 2006 Subject: Spam Check rule file issues and checking order. Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Okay, I'm back with more issues. MailScanner 4.39.6, Solaris 9, Sendmail 8.12.11, SpamAssassin 3.0.2. So, after the previous discussion about what determined when a ruleset would hit to kickoff spam checks, we're still having problem. In the previous thread Julian states: There is a workaround. Currently, when faced with a message with multiple headers, some of which want spam checks and some of which don't, it uses the answer for the first recipient. You can change this so that it uses any of the recipients by editing /usr/lib/MailScanner/MailScanner/ConfigDefs.pl. Look for the line starting "SpamChecks". If you look backwards (towards the start of the file) from there, you will see that it is in the [First,YesNo] section. Move that line into the [All,YesNo] section, then stop and restart MailScanner. We go on to discover that the order depends on the envelope headers, not the To: header. So, with the SpamChecks line in ConfigDefs.pl in the [First,YesNo] section it still doesn't appear to work as described. Here is what is in our rule file for the Spam Check option: From: 168.24.85. no From: 168.24.129. no From: 127.0.0.1 no To: ourdesk@usg.edu no To: abuse@usg.edu no To: /nic-(tech|billing|admin)@usg.edu/ no FromOrTo: default yes So, we telnet to port 25 on the mailserver and manually enter the mail from and rcpt to lines. One time with ourdesk@usg.edu entered first, and one time with glenn.leavell@usg.edu entered first. Here are the resulting q* files sendmail generated: ourdesk then glenn.leavell: V6 T1112370112 K0 N0 P60076 Fs $_66-23-211-254.clients.speedfactory.net [66.23.211.254] $rSMTP $s1pof.org ${daemon_flags} ${if_addr}168.24.195.10 Sglenn@leavell.com rRFC822; ourdesk@usg.edu RPFD:ourdesk@usg.edu rRFC822; glenn.leavell@usg.edu RPFD:glenn.leavell@usg.edu H?P?Return-Path: <<81>g> H??Received: from 1pof.org (66-23-211-254.clients.speedfactory.net [66.23.211.254]) by hermes.bor.usg.edu (8.12.11/8.12.11) with SMTP id j31FZrk4021592; Fri, 1 Apr 2005 10:41:52 -0500 (EST) H?D?Date: Fri, 1 Apr 2005 10:41:52 -0500 (EST) H?F?From: glenn@leavell.com H?M?Message-Id: <200504011541.j31FZrk4021592@hermes.bor.usg.edu> H??Subject: mailscanner down: our then glenn glenn.leavell then ourdesk: V6 T1112369969 K0 N0 P60076 Fs $_66-23-211-254.clients.speedfactory.net [66.23.211.254] $rSMTP $s1pof.org ${daemon_flags} ${if_addr}168.24.195.10 Sglenn@leavell.com rRFC822; glenn.leavell@usg.edu RPFD:glenn.leavell@usg.edu rRFC822; ourdesk@usg.edu RPFD:ourdesk@usg.edu H?P?Return-Path: <<81>g> H??Received: from 1pof.org (66-23-211-254.clients.speedfactory.net [66.23.211.254]) by hermes.bor.usg.edu (8.12.11/8.12.11) with SMTP id j31FZrk2021592; Fri, 1 Apr 2005 10:39:29 -0500 (EST) H?D?Date: Fri, 1 Apr 2005 10:39:29 -0500 (EST) H?F?From: glenn@leavell.com H?M?Message-Id: <200504011539.j31FZrk2021592@hermes.bor.usg.edu> H??Subject: mailscanner down: glenn then our So, if what I undestand Julian to have said to be true, the first message should not be scanned as the first match is with ourdesk which matches a rule to not scan and the second one should be scanned as the first match is with the default rule. However, in both instances the message is not scanned. Now for an even weirder (in my mind at least) issue. So, we move the SpamChecks line in ConfigDefs.pl to the [All,YesNo] section. If we send a message originating from IP address 168.24.85.103 (which is in the rules file to not be scanned) to ourdesk@usg.edu (which is also in the rules file to not be scanned), the message is scanned. If only one of those 2 criteria is used, the message is not scanned (correct result), but with both criteria the message *is* scanned. Any idea what is going on with that? Let me know if you need/want some more details. Thanks, Bob ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 1 17:27:50 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Spam Check rule file issues and checking order. Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ugh. Have you seen the config option in the "Advanced" section of MailScanner.conf the contains this: # When trying to work out the value of configuration parameters which are # using a ruleset, this controls the behaviour when a rule is checking the # "To:" addresses. # If this option is set to "yes", then the following happens when checking # the ruleset: # a) 1 recipient. Same behaviour as normal. # b) Several recipients, but all in the same domain (domain.com for example). # The rules are checked for one that matches the string "*@domain.com". # c) Several recipients, not all in the same domain. # The rules are checked for one that matches the string "*@*". # # If this option is set to "no", then some rules will use the result they # get from the first matching rule for any of the recipients of a message, # so the exact value cannot be predicted for messages with more than 1 # recipient. # # This value *cannot* be the filename of a ruleset. Use Default Rules With Multiple Recipients = no Bob Jones wrote: > Okay, I'm back with more issues. MailScanner 4.39.6, Solaris 9, > Sendmail 8.12.11, SpamAssassin 3.0.2. So, after the previous discussion > about what determined when a ruleset would hit to kickoff spam checks, > we're still having problem. > > In the previous thread Julian states: > > There is a workaround. Currently, when faced with a message with > multiple headers, some of which want spam checks and some of which > don't, it uses the answer for the first recipient. You can change this > so that it uses any of the recipients by editing > /usr/lib/MailScanner/MailScanner/ConfigDefs.pl. Look for the line > starting "SpamChecks". If you look backwards (towards the start of the > file) from there, you will see that it is in the [First,YesNo] section. > Move that line into the [All,YesNo] section, then stop and restart > MailScanner. > > We go on to discover that the order depends on the envelope headers, not > the To: header. So, with the SpamChecks line in ConfigDefs.pl in the > [First,YesNo] section it still doesn't appear to work as described. > Here is what is in our rule file for the Spam Check option: > > From: 168.24.85. no > From: 168.24.129. no > From: 127.0.0.1 no > To: ourdesk@usg.edu no > To: abuse@usg.edu no > To: /nic-(tech|billing|admin)@usg.edu/ no > FromOrTo: default yes > > So, we telnet to port 25 on the mailserver and manually enter the mail > from and rcpt to lines. One time with ourdesk@usg.edu entered first, > and one time with glenn.leavell@usg.edu entered first. Here are the > resulting q* files sendmail generated: > > ourdesk then glenn.leavell: > > V6 > T1112370112 > K0 > N0 > P60076 > Fs > $_66-23-211-254.clients.speedfactory.net [66.23.211.254] > $rSMTP > $s1pof.org > ${daemon_flags} > ${if_addr}168.24.195.10 > Sglenn@leavell.com > rRFC822; ourdesk@usg.edu > RPFD:ourdesk@usg.edu > rRFC822; glenn.leavell@usg.edu > RPFD:glenn.leavell@usg.edu > H?P?Return-Path: <<81>g> > H??Received: from 1pof.org (66-23-211-254.clients.speedfactory.net > [66.23.211.254]) > by hermes.bor.usg.edu (8.12.11/8.12.11) with SMTP id > j31FZrk4021592; > Fri, 1 Apr 2005 10:41:52 -0500 (EST) > H?D?Date: Fri, 1 Apr 2005 10:41:52 -0500 (EST) > H?F?From: glenn@leavell.com > H?M?Message-Id: <200504011541.j31FZrk4021592@hermes.bor.usg.edu> > H??Subject: mailscanner down: our then glenn > > > glenn.leavell then ourdesk: > > V6 > T1112369969 > K0 > N0 > P60076 > Fs > $_66-23-211-254.clients.speedfactory.net [66.23.211.254] > $rSMTP > $s1pof.org > ${daemon_flags} > ${if_addr}168.24.195.10 > Sglenn@leavell.com > rRFC822; glenn.leavell@usg.edu > RPFD:glenn.leavell@usg.edu > rRFC822; ourdesk@usg.edu > RPFD:ourdesk@usg.edu > H?P?Return-Path: <<81>g> > H??Received: from 1pof.org (66-23-211-254.clients.speedfactory.net > [66.23.211.254]) > by hermes.bor.usg.edu (8.12.11/8.12.11) with SMTP id > j31FZrk2021592; > Fri, 1 Apr 2005 10:39:29 -0500 (EST) > H?D?Date: Fri, 1 Apr 2005 10:39:29 -0500 (EST) > H?F?From: glenn@leavell.com > H?M?Message-Id: <200504011539.j31FZrk2021592@hermes.bor.usg.edu> > H??Subject: mailscanner down: glenn then our > > So, if what I undestand Julian to have said to be true, the first > message should not be scanned as the first match is with ourdesk which > matches a rule to not scan and the second one should be scanned as the > first match is with the default rule. However, in both instances the > message is not scanned. > > Now for an even weirder (in my mind at least) issue. So, we move the > SpamChecks line in ConfigDefs.pl to the [All,YesNo] section. If we send > a message originating from IP address 168.24.85.103 (which is in the > rules file to not be scanned) to ourdesk@usg.edu (which is also in the > rules file to not be scanned), the message is scanned. If only one of > those 2 criteria is used, the message is not scanned (correct result), > but with both criteria the message *is* scanned. Any idea what is going > on with that? > > Let me know if you need/want some more details. > > Thanks, > Bob > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 1 17:31:14 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Spam Check rule file issues and checking order. Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Bob Jones wrote: > Now for an even weirder (in my mind at least) issue. So, we move the > SpamChecks line in ConfigDefs.pl to the [All,YesNo] section. If we send > a message originating from IP address 168.24.85.103 (which is in the > rules file to not be scanned) to ourdesk@usg.edu (which is also in the > rules file to not be scanned), the message is scanned. If only one of > those 2 criteria is used, the message is not scanned (correct result), > but with both criteria the message *is* scanned. Any idea what is going > on with that? That's a bug. I just fixed it. In MessageBatch.pm there is a chunk of code like this: sub SpamChecks { my $this = shift; my($id, $message); my $counter = 0; #print STDERR "Starting spam checks\n"; MailScanner::Log::InfoLog("Spam Checks: Starting") if MailScanner::Config::Value('logspam'); while(($id, $message) = each %{$this->{messages}}) { next if $message->{deleted}; next unless MailScanner::Config::Value('spamchecks', $message) =~ /1/; Note the change to the last line. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dnsadmin at 1BIGTHINK.COM Fri Apr 1 17:30:50 2005 From: dnsadmin at 1BIGTHINK.COM (DNSAdmin) Date: Thu Jan 12 21:29:13 2006 Subject: Newlines (\n) in subjects Message-ID: At 06:47 AM 4/1/2005, you wrote: >Stijn Jonker wrote on 31-3-2005 21:18: > >>First of all: I know this has been discussed recently but I can't find >>it in the jiscmail archives. >> >>It seems that MailScanner is inserting a \n in subject lines somewhere >>around char 80, I tried to dig the source on how to disable this, but >>unfortunaly I couldn't find it. > >Are you sure MS is doing this? I know some MTA's (MS comes to mind) are >doing that (incorrectly). I'm running an older version, 4.24 I believe, due to old hardware and OS, on RedHat-based 7.2, but not RedHat OS. Mine gives wicked, evil results the same, but appears to be Euro-spammers, and port scanners as well as Asia, South American and suspected US spammers. Believe me I know I would hear IT if someone thought I was dropping legitimate mail! Apr 1 10:16:20 mx sendmail[29566]: j31FGHH29566: POSSIBLE ATTACK from [203.232.53.145]: newline in string "leo^M " Apr 1 10:26:15 mx sendmail[30728]: j31FQEH30728: POSSIBLE ATTACK from [221.153.126.83]: newline in string "golom^M " Cheers! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. http://www.sng.ecs.soton.ac.uk/mailscanner/ Configuration by Glenn Parsons dnsadmin-at-1bigthink.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 1 17:40:54 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Dropping Panda support Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Due to all sorts of nasty problems with this scanner, I am considering dropping support for it altogether and removing it from MailScanner. Are any of you actually using this product? -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 1 18:45:04 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Craig White wrote: >On Fri, 2005-04-01 at 16:30 +0100, Martin Hepworth wrote: > > >>Craig >> >>the init.pre contains lists of plugins etc hat should loaded. >> >>in my case it's in /etc/mail/spamassassin and contains.. >> >># This is the right place to customize your installation of #SpamAssassin. >># >># See 'perldoc Mail::SpamAssassin::Conf' for details of what can be >># tweaked. >># >># This file will be loaded before *all other* configuration files, >>#including >># the system configuration. As such, it's a good place to set things # that >># will affect how those files are parsed, like which plugins are loaded >># etc. >># >>########################################################################### >> >># RelayCountry - add metadata for Bayes learning, marking the countries >># a message was relayed through >># >># loadplugin Mail::SpamAssassin::Plugin::RelayCountry >> >># URIDNSBL - look up URLs found in the message against several DNS >># blocklists. >># >>loadplugin Mail::SpamAssassin::Plugin::URIDNSBL >> >># Hashcash - perform hashcash verification. >># >>loadplugin Mail::SpamAssassin::Plugin::Hashcash >> >># SPF - perform SPF verification. >># >>loadplugin Mail::SpamAssassin::Plugin::SPF >> >> >> >>As for the bayes DB issue, make sure your spam.assassin.prefs.conf has >>it set to the correct directory with.. >> >>bayes_path /usr/local/var/spamassassin/bayes >> >>or wherever it should be..if this is a fresh install you'll need to >>populate the DB with sa-learn and use 200 of spam and 200 of ham to >>train it. Either that or download examples from www.fsl.com/support >> >> >----- >YEP - but for the archives in case anyone follows my ignorant tracks... > >RHEL 3 - I upgraded to Dag's version of spamassassin... > >apt-get install spamassassin-tools #installs things like > # perl-Statistics-Distributions > # perl-Parse-Syslog > >which fixed the issues with the URINDSBL and spamassassin plugins > >then I created /etc/MailScanner/bayes > >downloaded fsl.com starter file for bayes... > >wget http://www.fsl.com/support/bayes-Linux-SA-3.0-starter-db.tar.gz > >untarred it in /etc/MailScanner/bayes > >restarted MailScanner and I was good to go > >Thanks for the fish and what appears to be a great tool that I don't >really fully comprehend. > >Do I really want to use SPF ? I wasn't much interested in it before. > > In my view, SPF doesn't do any harm. People like us who can't implement it don't cause any harm, but it may help occasionally for sites that can and do implement it. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From doc at MADDOC.NET Fri Apr 1 19:40:40 2005 From: doc at MADDOC.NET (Doc Schneider) Date: Thu Jan 12 21:29:13 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I did a search on the list archives but never did see anything on using the new MySQL features for Bayes with MailScanner. Mine appears to be working. At least it is scoring like it is working. Just wondering if anyone else is using it? -Doc ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Fri Apr 1 21:35:47 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:13 2006 Subject: Postfix 2.2 and hashed mail queues Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > I have just tried this out with hash queue depth of 1 (with Postfix 2.1) > and 0 (with Postfix 2.2) and it appears to work okay. > > But please test it some more! > I aim to release tomorrow or Saturday. OK I have the two new files installed and all seems to be well. I'll keep and eye on things but this would seem to have solved the issue. Thanks, once again you excel yourself. Under 24 hours for something that wasn't going to happen before April's release :-) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TristanRhodes at WEBER.EDU Fri Apr 1 21:51:47 2005 From: TristanRhodes at WEBER.EDU (Tristan RHODES) Date: Thu Jan 12 21:29:13 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: I am trying to install Mailscanner on Ubuntu Linux. Has anyone done this? (Or installed on debian-unstable?) Ubuntu comes with Postfix installed, and that is the MTA I want to use. I used apt-get to install mailscanner, but it looks to be configured for Exim (debian's default MTA). I have read the Postfix install guide: http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml Are there any additional steps I need to do? BTW, I have successfully installed and used Mailscanner + Postfix on Suse using the RPM. Tristan Rhodes ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Fri Apr 1 22:05:21 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:13 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Tristan RHODES wrote: >I am trying to install Mailscanner on Ubuntu Linux. Has anyone done >this? (Or installed on debian-unstable?) > >Ubuntu comes with Postfix installed, and that is the MTA I want to >use. > >I used apt-get to install mailscanner, but it looks to be configured >for Exim (debian's default MTA). > >I have read the Postfix install guide: >http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml > >Are there any additional steps I need to do? > >BTW, I have successfully installed and used Mailscanner + Postfix on >Suse using the RPM. > > Put simply, no. Just adjust the MailScanner.conf file for Postfix using the directions you have found (Check to see which version of Postfix you have installed, if it's 2.2.x then you will need some new files to accommodate the slight change in queue structure (Post back and I'll point you in the right direction)). I don't know how old the MailScanner version is in the unstable tree, so it would be worth check that also. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From SJCJonker at SJC.NL Fri Apr 1 22:12:10 2005 From: SJCJonker at SJC.NL (Stijn Jonker) Date: Thu Jan 12 21:29:13 2006 Subject: Newlines (\n) in subjects Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello Peter & Others, Peter Peters said the following on 01-Apr-2005 13:47: > Stijn Jonker wrote on 31-3-2005 21:18: > >> First of all: I know this has been discussed recently but I can't find >> it in the jiscmail archives. Hmm, I must be wrong on this then.. >> It seems that MailScanner is inserting a \n in subject lines somewhere >> around char 80, I tried to dig the source on how to disable this, but >> unfortunaly I couldn't find it. > > Are you sure MS is doing this? I know some MTA's (MS comes to mind) are > doing that (incorrectly). It seems that it's Thunderbird itself, I though I checked and double checked it, I now took out the good old tcpdump and the initial submission is already "newlined" Sorry for the waste of time and bandwidth... ;-) On to bugzilla.mozilla... Stijn -- Met Vriendelijke groet/Yours Sincerely Stijn Jonker ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TristanRhodes at WEBER.EDU Fri Apr 1 22:16:34 2005 From: TristanRhodes at WEBER.EDU (Tristan RHODES) Date: Thu Jan 12 21:29:13 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: Drew, Thanks for the quick reply. Your email arrived at the same time as my post! Ubuntu 5.04 (Hoary Hedgehog) currently uses Postfix 2.1.5. From what you said, this will not require the new files. I will follow the intructions in the Postfix guide and post my experience to the list. BTW, I am giving a presentation tomorrow (Saturday) to my Linux user group on setting up an email server with Mailscanner. I appreciate any help that can be provided before then. :) Tristan Rhodes >>> drew@THEMARSHALLS.CO.UK 04/01/05 2:05 PM >>> Tristan RHODES wrote: >I am trying to install Mailscanner on Ubuntu Linux. Has anyone done >this? (Or installed on debian-unstable?) > >Ubuntu comes with Postfix installed, and that is the MTA I want to >use. > >I used apt-get to install mailscanner, but it looks to be configured >for Exim (debian's default MTA). > >I have read the Postfix install guide: >http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml > >Are there any additional steps I need to do? > >BTW, I have successfully installed and used Mailscanner + Postfix on >Suse using the RPM. > > Put simply, no. Just adjust the MailScanner.conf file for Postfix using the directions you have found (Check to see which version of Postfix you have installed, if it's 2.2.x then you will need some new files to accommodate the slight change in queue structure (Post back and I'll point you in the right direction)). I don't know how old the MailScanner version is in the unstable tree, so it would be worth check that also. Drew ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Fri Apr 1 23:41:10 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:13 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] IS this slower than using berkley DB ? I assume performance is the most important factor of using idffference DBs? Doc Schneider wrote: > I did a search on the list archives but never did see anything on using > the new MySQL features for Bayes with MailScanner. > > Mine appears to be working. At least it is scoring like it is working. > > Just wondering if anyone else is using it? > > -Doc > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mark at TIPPINGMAR.COM Sat Apr 2 01:38:59 2005 From: mark at TIPPINGMAR.COM (Mark Nienberg) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Craig White wrote: > Do I really want to use SPF ? I wasn't much interested in it before. > > > I hope you decide to publish an SPF record for your domain. Then if spammers send junk to me using your address, my mailserver will know it is forged spam and will delete it. Mark Nienberg ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From doc at MADDOC.NET Sat Apr 2 03:58:03 2005 From: doc at MADDOC.NET (Doc Schneider) Date: Thu Jan 12 21:29:13 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Pete Russell wrote: > IS this slower than using berkley DB ? Actually with SA 3.0.2 using MySQL has fewer problems, according to the dev list for it. It seems to rock along too. No sure if on a really busy system it would be faster but I'm sure it would be close to as fast if not faster the BDB. YMMV of course. -Doc > I assume performance is the most important factor of using idffference DBs? > > Doc Schneider wrote: > >> I did a search on the list archives but never did see anything on using >> the new MySQL features for Bayes with MailScanner. >> >> Mine appears to be working. At least it is scoring like it is working. >> >> Just wondering if anyone else is using it? >> >> -Doc ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From sub at ICCONSULTING.COM.AU Sat Apr 2 06:47:41 2005 From: sub at ICCONSULTING.COM.AU (Scott Farrell) Date: Thu Jan 12 21:29:13 2006 Subject: anyone trap outgoing attachment and convert them, like word/excel to pdf? Message-ID: attention mailscanner guru's (julian et al) I am looking at working on some functionality to make sure staff dont send word/excel docs out of the company, and send them out in a more read only form. (OK I know PDF isnt strictly read-only, but its close). I figured hacking mail scanner might be smart, instead of trying to fix/train every user in the organisation. We have tools to convert word/excel to pdf reasonably reliably, but any idea if anyone has dont this, or anything similar, or where I might make a entry point into the code base? regards Scott Farrell Phone: 02-9411 3622 Mobile: 0412 927 156 http://www.icconsulting.com.au ic Consulting - helping you with innovation. We offer e-business consulting and perform services. We deliver high impact consulting, and fast turn around projects for our clients. Ask us about Web Content Management, Web Self Service, or working closer with your customers or suppliers. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From sub at ICCONSULTING.COM.AU Sat Apr 2 07:10:19 2005 From: sub at ICCONSULTING.COM.AU (Scott Farrell) Date: Thu Jan 12 21:29:13 2006 Subject: Just reading man sa-learn - you are not supposed to learn spam/ham from this mail list Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] This is from man sa-learn (see below) I have subscribed to this list (and spamassassin list) using sub@icconsulting.com.au I guess I can spam whitelist with a rule, but that might further re-inforce learning. Can I tell it to bypass learning? or do I have to do something smtp/domain specific, like subscribe an address in a domain that is not scanned at all. EFFECTIVE TRAINING Note that if your mail folders contain things like for¡ warded spam, discussions of spam-catching rules, etc., this will cause trouble. You should avoid scanning those messages if possible. (An easy way to do this is to move them aside, into a folder which is not scanned.) Scott sfarrell@icconsulting.com.au ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sat Apr 2 11:20:44 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Postfix 2.2 and hashed mail queues Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Drew Marshall wrote: > Julian Field wrote: > >> I have just tried this out with hash queue depth of 1 (with Postfix 2.1) >> and 0 (with Postfix 2.2) and it appears to work okay. >> >> But please test it some more! >> I aim to release tomorrow or Saturday. > > > OK I have the two new files installed and all seems to be well. I'll > keep and eye on things but this would seem to have solved the issue. > > Thanks, once again you excel yourself. Under 24 hours for something that > wasn't going to happen before April's release :-) > It turned out to be easier than I suspected, I wrote the initial code better than I thought. Feel free to show your appreciation on my Amazon.co.uk wish list :-) -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sat Apr 2 11:22:40 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Craig White wrote: >On Fri, 2005-04-01 at 22:05 +0100, Drew Marshall wrote: > > >>Put simply, no. Just adjust the MailScanner.conf file for Postfix using >>the directions you have found (Check to see which version of Postfix you >>have installed, if it's 2.2.x then you will need some new files to >>accommodate the slight change in queue structure (Post back and I'll >>point you in the right direction)). I don't know how old the MailScanner >>version is in the unstable tree, so it would be worth check that also. >> >> >---- >I'd be interested in pointers for Postfix 2.2.x as that is what I am >doing. > ># rpm -q mailscanner postfix >mailscanner-4.40.7-1 >postfix-2.2.1-1.rhel3 > >I think this is working... > ># tail -n 3 /etc/postfix/main.cf >hash_queue_names = incoming,hold,defer,deferred > >hash_queue_depth = 2 > >If I am missing something, please let me know > > You don't need the main.cf tweak, just install the April 1st release of MailScanner. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sat Apr 2 11:26:17 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: anyone trap outgoing attachment and convert them, like word/excel to pdf? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] You just need to use a ruleset to decide which of 2 filename.rules.conf and filetype.rules.conf files. Set up 1 file that starts by saying it bans doc and xls. Then use a ruleset to decide between the new file (followed by the old one) and the old one. Search for filename.rules.conf in the list archive, this has been discussed (with step by step guides) several times before. You don't need to "hack" anything, MailScanner already does it all. Scott Farrell wrote: > > attention mailscanner guru's (julian et al) > > I am looking at working on some functionality to make sure staff dont > send word/excel docs out of the company, and send them out in a more > read only form. (OK I know PDF isnt strictly read-only, but its close). > > I figured hacking mail scanner might be smart, instead of trying to > fix/train every user in the organisation. > > We have tools to convert word/excel to pdf reasonably reliably, but > any idea if anyone has dont this, or anything similar, or where I > might make a entry point into the code base? > > regards > Scott Farrell > Phone: 02-9411 3622 Mobile: 0412 927 156 > > http://www.icconsulting.com.au > ic Consulting - helping you with innovation. > We offer e-business consulting and perform services. We deliver high > impact consulting, and fast turn around projects for our clients. > Ask us about Web Content Management, Web Self Service, or working > closer with your customers or suppliers. ------------------------ > MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sat Apr 2 11:28:49 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Just reading man sa-learn - you are not supposed to learn spam/ham from this mail list Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] You could use a ruleset for "Is Definitely Not Spam", and put a rule in that ruleset that says "yes" to mail from the list address and to you. Make it say "no" for the default. If you need more help on rulesets, check out the online docs and buy the book. Scott Farrell wrote: > > This is from man sa-learn (see below) > > I have subscribed to this list (and spamassassin list) using > sub@icconsulting.com.au > > I guess I can spam whitelist with a rule, but that might further > re-inforce learning. Can I tell it to bypass learning? > > or do I have to do something smtp/domain specific, like subscribe an > address in a domain that is not scanned at all. > > EFFECTIVE TRAINING > > Note that if your mail folders contain things like for¡ > warded spam, discussions of spam-catching rules, etc., > this will cause trouble. You should avoid scanning those > messages if possible. (An easy way to do this is to move > them aside, into a folder which is not scanned.) > > > > Scott > sfarrell@icconsulting.com.au > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sat Apr 2 11:45:40 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: MAILSCANNER Announce: Version 4.40 released Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I have just released stable version 4.40. The major improvements this month are * More improvements to the phishing net, including rules to avoid false alarms when seeing Microsoft .NET * Support for unpacking RAR version 3 archives * Multiple Subject: headers are removed * Multiple queues for ZMailer supported * Timeout implemented in BitDefender updating script * Loads of other improvements, see the Change Log below Download it as usual from www.mailscanner.info The Change Log is: * New Features and Improvements * - The "clamavmodule" scanner cannot unpack archives of RAR version 3. 2 new configuration settings allow you to unpack the latest RAR archives for testing by the "clamavmodule" scanner. It also enables the contents of the RAR archive to be checked for illegal filenames and filetypes, and also to see if they are password-protected. Unrar Command = /usr/bin/unrar Unrar Timeout = 50 - "Allow Password-protected Archives" can now be a ruleset when using the clamavmodule virus scanner. - Multiple "Subject:" lines are removed. The 1st one is kept. - If the "Unrar Command" is defined and points to an executable program, it will automatically be used by the "clamav" scanner. No -wrapper tweaking is needed to do this any more. - You can now use shell environment variables such as $HOSTNAME or ${HOSTNAME} in MailScanner.conf and its relatives. - More improvements to the phishing net. - More additions to the starter phishing.safe.sites.conf file. - Removed my spam.assassin.prefs.conf file in favour of the one from www.fsl.com, with just enough changes to produce an identical file layout to my previous versions. - Re-enabled ALL_TRUSTED rule after comments from Matt Kettler. Thanks! - Added long comment about ALL_TRUSTED rule, many thanks to Matt Kettler. - Improved screen behaviour of RPM-based init.d script. - Greatly improved RAR archive handler, thanks to Rick Cooper. - Changed IPBlock DSN to 550 and made it easily configurable. Look for "$FailCode" in the CustomConfig.pm code and the IPBlock cron job. - Changed the "Envelope-From" and "Envelope-To" headers to include your organisation's name. - Made date and time stamps consistent across whole system. - Added extra rules to the phishing net to avoid false alarms with some examples of Microsoft's .NET system. - Added Custom Functions to implement multiple input and output queues for ZMailer users. Many thanks to MailScanner-devel@pert.com.ar (Leonardo Helman and Mariano Absatz) for all their hard work implementing this. - Improved RedHat init.d script so reload is handled better for Postfix. - Changed default supplied values for "Allow xxxxx Tags" to disarm all of these tags. - Added 20 minute timeout to bitdefender's autoupdate script. Easy to set the timeout to your own value, just look at the start of the script. - Added support for non-hashed queue directories for Postfix 2.2. * Fixes * - Fixed problem with missing Attachment-Warning when encountering a virus that is both silent and non-forging. - Improved output format of Sender warning, and removed duplicate lines. - In IPBlock facility, changed MTA dsn to 451 to temporarily refuse the connections, rather than the total block it used to do. - Removed erroneous log output from SpamAssassin bayes-rebuilder. - Postfix problem fixes. - Fixed SpamAssassin Bayes database rebuild timeout problem. - Fixed Exim problem with removing multiple "Subject:" headers. - Fixed Postfix problem with removing multiple "Subject:" headers. - Fixed problems in new Unrar code when renaming files in archives. - Fixed problems in earlier betas with occasional missing attachment warnings. - Fixed directory problem in vexira-autoupdate. - Fixed problems with defunct processes when not virus scanning. - Fixed problem with filename checks not happening without virus scanning. - Fixed problem extracting RAR archives with filenames containing special characters. - Fixed problem where 2 matching "No" rules would cause message to be checked for spam, if SpamChecks is moved in ConfigDefs.pl. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From vachanta at GMAIL.COM Sun Apr 3 00:26:40 2005 From: vachanta at GMAIL.COM (Venkata Achanta) Date: Thu Jan 12 21:29:13 2006 Subject: MCP checks for outgoing only Message-ID: Any word on this Julian ? Thanks On Thu, 31 Mar 2005 19:07:32 +0100, Venkata Achanta wrote: >Yes! i do reliase that only the e-mail that contain the MCP material should >be forwarded to user@domain.com but the problem i am having is all the >incoming and outgoing messages are also being fw'ded to user@domain.com >instead of the e-mail that just qualifies for MCP. > >OR is it not built that way ? > >From my first e-mail, > >>Is Definitely MCP = %rules-dir%/mcp.rules > >>I have this in my %rules-dir%/mcp.rules >> >>From: @domain.com yes >>FromOrTo: default no > > >Hope this is clear enough to give you a picture of whats happening or else >pleaselet me know i will try again. > > > >On Thu, 31 Mar 2005 18:55:51 +0100, Julian Field > wrote: > >>You realise that those MCP actions will deliver the mail to the original >>recipient as well as forward it to user@domain.com. >> >>Venkata Achanta wrote: >> >>>Julian, >>> >>>I think you didnt see the MCP config in the e-mail. >>> >>>Yes ! i am aware that spam actions have nothing to do with MCP. >>> >>> >>> >>>>MCP Actions = deliver user@domain.com >>>> >>>> >>>is what i have in the MCP actions and i still the behaviour mentioned >>>earlier. >>> >>> >>-- >>Julian Field >>www.MailScanner.info >>Buy the MailScanner book at www.MailScanner.info/store >>Professional Support Services at www.MailScanner.biz >>MailScanner thanks transtec Computers for their support >> >>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From vanhorn at WHIDBEY.COM Sun Apr 3 03:22:44 2005 From: vanhorn at WHIDBEY.COM (G. Armour Van Horn) Date: Thu Jan 12 21:29:13 2006 Subject: Whitelists being ignored Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Greetings, I'm still having the same problem with this server ignoring my whitelists. The client forwarded five e-mails to me this afternoon, all with the {Spam?} tag in the Subject line. They were from four senders: online@tesco.co.uk sns_team@sweet-n-sour.com PCW@client17.email-bureau.co.uk miscops@misco.co.uk I went to add them to the whitelist, but I found that three of them had long been in spam.whitelist.rules, and had been for a month: From: root@richmondsounddesign.com yes From: FaxToEmail@pacificcoast.net yes From: *@knmartin.co.uk yes From: newswire@news.bc.ndp.ca yes From: online@tesco.co.uk yes From: updatemembers@SUITE101.COM yes From: ANSWER@InternationalANSWER.org yes From: PCW@client17.email-bureau.co.uk yes From: graceaudio@inter-business.com.ar yes From: SnS_team@sweet-n-sour.com yes FromOrTo: default no I'm starting to feel like an idiot here. I've double-checked the paths to my rules, including posting those here last week (normally a sure why to catch a stupid typo). I need some way to track this down, please! Van -- ---------------------------------------------------------- Sign up now for Quotes of the Day, a handful of quotations on a theme delivered every morning. Enlightenment! Daily, for free! mailto:twisted@whidbey.com?subject=Subscribe_QOTD For photography, web design, hosting, and maintenance, visit Van's home page: http://www.domainvanhorn.com/van/ ----------------------------------------------------------- ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From raymond at PROLOCATION.NET Sun Apr 3 10:46:34 2005 From: raymond at PROLOCATION.NET (Raymond Dijkxhoorn) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: Hi! >> Do I really want to use SPF ? I wasn't much interested in it before. > In my view, SPF doesn't do any harm. People like us who can't implement > it don't cause any harm, but it may help occasionally for sites that can > and do implement it. Why cant you implement this? Just start doing authenticated SMTP for your end users. So they can also relay when out of office... Bye, Raymond. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 11:56:24 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: MCP checks for outgoing only Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Try putting in *@domain.com or just domain.com instead of @domain.com. Venkata Achanta wrote: >Any word on this Julian ? Thanks > > > >On Thu, 31 Mar 2005 19:07:32 +0100, Venkata Achanta >wrote: > > > >>Yes! i do reliase that only the e-mail that contain the MCP material should >>be forwarded to user@domain.com but the problem i am having is all the >>incoming and outgoing messages are also being fw'ded to user@domain.com >>instead of the e-mail that just qualifies for MCP. >> >>OR is it not built that way ? >> >> >> >>From my first e-mail, > > >>>Is Definitely MCP = %rules-dir%/mcp.rules >>> >>> >>>I have this in my %rules-dir%/mcp.rules >>> >>>From: @domain.com yes >>>FromOrTo: default no >>> >>> >>Hope this is clear enough to give you a picture of whats happening or else >>pleaselet me know i will try again. >> >> >> >>On Thu, 31 Mar 2005 18:55:51 +0100, Julian Field >> wrote: >> >> >> >>>You realise that those MCP actions will deliver the mail to the original >>>recipient as well as forward it to user@domain.com. >>> >>>Venkata Achanta wrote: >>> >>> >>> >>>>Julian, >>>> >>>>I think you didnt see the MCP config in the e-mail. >>>> >>>>Yes ! i am aware that spam actions have nothing to do with MCP. >>>> >>>> >>>> >>>> >>>> >>>>>MCP Actions = deliver user@domain.com >>>>> >>>>> >>>>> >>>>> >>>>is what i have in the MCP actions and i still the behaviour mentioned >>>>earlier. >>>> >>>> >>>> >>>> >>>-- >>>Julian Field >>>www.MailScanner.info >>>Buy the MailScanner book at www.MailScanner.info/store >>>Professional Support Services at www.MailScanner.biz >>>MailScanner thanks transtec Computers for their support >>> >>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >>> >>> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> >> > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 11:57:54 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Whitelists being ignored Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Have you checked the X-MailScanner-From: headers to find the real sender addresses? You need to provide the email envelope sender, not the contents of the From: header. G. Armour Van Horn wrote: > Greetings, > > I'm still having the same problem with this server ignoring my > whitelists. The client forwarded five e-mails to me this afternoon, all > with the {Spam?} tag in the Subject line. They were from four senders: > > online@tesco.co.uk > sns_team@sweet-n-sour.com > PCW@client17.email-bureau.co.uk > miscops@misco.co.uk > > I went to add them to the whitelist, but I found that three of them had > long been in spam.whitelist.rules, and had been for a month: > > From: root@richmondsounddesign.com yes > From: FaxToEmail@pacificcoast.net yes > From: *@knmartin.co.uk yes > From: newswire@news.bc.ndp.ca yes > From: online@tesco.co.uk yes > From: updatemembers@SUITE101.COM yes > From: ANSWER@InternationalANSWER.org yes > From: PCW@client17.email-bureau.co.uk yes > From: graceaudio@inter-business.com.ar yes > From: SnS_team@sweet-n-sour.com yes > FromOrTo: default no > > I'm starting to feel like an idiot here. I've double-checked the paths > to my rules, including posting those here last week (normally a sure why > to catch a stupid typo). I need some way to track this down, please! > > Van > > > -- > ---------------------------------------------------------- > Sign up now for Quotes of the Day, a handful of quotations > on a theme delivered every morning. > Enlightenment! Daily, for free! > mailto:twisted@whidbey.com?subject=Subscribe_QOTD > > For photography, web design, hosting, and maintenance, > visit Van's home page: http://www.domainvanhorn.com/van/ > ----------------------------------------------------------- > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 11:59:43 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Raymond Dijkxhoorn wrote: > Hi! > >>> Do I really want to use SPF ? I wasn't much interested in it before. >> > >> In my view, SPF doesn't do any harm. People like us who can't implement >> it don't cause any harm, but it may help occasionally for sites that can >> and do implement it. > > > Why cant you implement this? Just start doing authenticated SMTP for your > end users. So they can also relay when out of office... I need to set up the SSL cert for auth SMTP, as we have rules about sending unencrypted passwords across any network. Then we have a massive user-education problem :-( Currently they use their ISP's SMTP server and getting them to change will be a real struggle. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From raymond at PROLOCATION.NET Sun Apr 3 13:16:41 2005 From: raymond at PROLOCATION.NET (Raymond Dijkxhoorn) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: Hi! >> Why cant you implement this? Just start doing authenticated SMTP for your >> end users. So they can also relay when out of office... > I need to set up the SSL cert for auth SMTP, as we have rules about > sending unencrypted passwords across any network. Then we have a massive > user-education problem :-( Currently they use their ISP's SMTP server > and getting them to change will be a real struggle. I know... thats the real pain... What we do one some sites is offer VPN's so they actually are inside the campus network again. Solves a lot of trouble. Bye, Raymond. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ugob at CAMO-ROUTE.COM Sun Apr 3 14:24:07 2005 From: ugob at CAMO-ROUTE.COM (Ugo Bellavance) Date: Thu Jan 12 21:29:13 2006 Subject: DCC new version, new licence... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, I just noticed that DCC went from version 1.2.74 to 1.3 today. In the changelog: "New licence". This is the licence: http://www.rhyolite.com/anti-spam/dcc/dcc-tree/LICENSE The interresting part: * This agreement is not applicable to any entity which sells anti-spam * solutions to others or provides an anti-spam solution as part of a * security solution sold to other entities, or to a private network * which employes the DCC or uses data provided by operation of the DCC * but does not provide corresponding data to other users. And then it says it's free to use & distribute. So anyone selling services based on DCC would need a commercial licence. My questions: - Is that new? - What means this sentence : (from the home page) The Distributed Checksum Clearinghouse source carries a license that is free to organizations that do not sell filtering devices or services except to their own users and that participate in the global DCC network. (I.e. ISPs that use the DCC to filter mail for their own users are intended to be covered in the free license.) If someone runs a DCC server and sells services based on DCC, is it covered by the free licence? Thanks, Ugo ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 15:25:32 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Raymond Dijkxhoorn wrote: > Hi! > >>> Why cant you implement this? Just start doing authenticated SMTP for >>> your >>> end users. So they can also relay when out of office... >> > >> I need to set up the SSL cert for auth SMTP, as we have rules about >> sending unencrypted passwords across any network. Then we have a massive >> user-education problem :-( Currently they use their ISP's SMTP server >> and getting them to change will be a real struggle. > > > I know... thats the real pain... > > What we do one some sites is offer VPN's so they actually are inside the > campus network again. Solves a lot of trouble. We already offer VPNs, but many users, including all the Linux users and probably all the Mac users, don't/can't use the VPN service. Our VPNs are provided by 2 Windows boxes using PPTP VPNs. How do Mac and Linux users connect to them? Our users only other choice is SSH-tunneling which rules out most of them. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From richard.siddall at ELIRION.NET Sun Apr 3 15:43:15 2005 From: richard.siddall at ELIRION.NET (Richard Siddall) Date: Thu Jan 12 21:29:13 2006 Subject: DCC new version, new licence... Message-ID: Ugo Bellavance wrote: > Hi, > > I just noticed that DCC went from version 1.2.74 to 1.3 today. > In the > changelog: "New licence". > > This is the licence: > http://www.rhyolite.com/anti-spam/dcc/dcc-tree/LICENSE > > The interresting part: > > * This agreement is not applicable to any entity which sells anti-spam > * solutions to others or provides an anti-spam solution as part of a > * security solution sold to other entities, or to a private network > * which employes the DCC or uses data provided by operation of the DCC > * but does not provide corresponding data to other users. > > And then it says it's free to use & distribute. > > So anyone selling services based on DCC would need a commercial licence. > Ugo, See the discussion about the new license on the DCC mailing list: http://www.rhyolite.com/pipermail/dcc/2005/002570.html > My questions: > > - Is that new? > > - What means this sentence : (from the home page) The Distributed > Checksum Clearinghouse source carries a license that is free to > organizations that do not sell filtering devices or services except to > their own users and that participate in the global DCC network. (I.e. > ISPs that use the DCC to filter mail for their own users are intended to > be covered in the free license.) > Vernon Schryver was trying to prevent security appliance companies selling boxes that used DCC, but never contributed checksums to the public DCC servers, from using DCC for free. > If someone runs a DCC server and sells services based on DCC, is it > covered by the free licence? > You'd need to check with a lawyer. Regards, Richard. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kyle at MLUG.MISSOURI.EDU Sun Apr 3 15:49:22 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I know this has been brought up in the past, but was wanting to get an update on where it was in the pile. I have a Fedora 3 x86_64 build that I'm wishing to install Mailscanner on. Every time I try and install Mailscanner, it fails on the actuall Mailscanner rpm install. I have a regular non 64bit processer in another machine, which Mailscanner builds correctly on. See this e-mail string from the searchable mailing list : http://www.jiscmail.ac.uk/cgi-bin/wa.exe?A2=ind0503&L=mailscanner&P=R78667&I=-1 Just wondering if there is work and research going on the Fedora 3 64 bit platform and when something like this could get some attention ? :) Thanks Kyle ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 16:22:27 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I've just tried it on RHEL4 and it works fine, so it's some Fedora 3 screwup (wouldn't be the first). What's the output of rpmbuild -bc perl-Archive-Zip.spec Kyle Krieg wrote: > I know this has been brought up in the past, but was wanting to get an > update on where it was in the pile. > > I have a Fedora 3 x86_64 build that I'm wishing to install Mailscanner > on. Every time I try and install Mailscanner, it fails on the actuall > Mailscanner rpm install. I have a regular non 64bit processer in > another machine, which Mailscanner builds correctly on. > > See this e-mail string from the searchable mailing list : > > http://www.jiscmail.ac.uk/cgi-bin/wa.exe?A2=ind0503&L=mailscanner&P=R78667&I=-1 > > > > > Just wondering if there is work and research going on the Fedora 3 64 > bit platform and when something like this could get some attention ? :) -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From raymond at PROLOCATION.NET Sun Apr 3 17:00:34 2005 From: raymond at PROLOCATION.NET (Raymond Dijkxhoorn) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: Hi! > We already offer VPNs, but many users, including all the Linux users and > probably all the Mac users, don't/can't use the VPN service. > > Our VPNs are provided by 2 Windows boxes using PPTP VPNs. How do Mac and > Linux users connect to them? > > Our users only other choice is SSH-tunneling which rules out most of them. We might move this thread private ;) Sinec its a luittle offtopic, but :) You could have a look at Cisco 3000 series, we use those, they dont come cheap, but do come with all flavors clients. Solaris also. Bye, Raymond. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From chris at scorpion.nl Sun Apr 3 17:19:04 2005 From: chris at scorpion.nl (Christiaan den Besten) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] OpenVPN works like a charm and support most known OS'es .... Can work over any udp or tcp port... bye, Chris ----- Original Message ----- From: "Julian Field" To: Sent: Sunday, April 03, 2005 4:25 PM Subject: Re: errors that I can't figure out - SOLVED > Raymond Dijkxhoorn wrote: > >> Hi! >> >>>> Why cant you implement this? Just start doing authenticated >>>> SMTP for >>>> your >>>> end users. So they can also relay when out of office... >>> >> >>> I need to set up the SSL cert for auth SMTP, as we have rules >>> about >>> sending unencrypted passwords across any network. Then we have a >>> massive >>> user-education problem :-( Currently they use their ISP's SMTP >>> server >>> and getting them to change will be a real struggle. >> >> >> I know... thats the real pain... >> >> What we do one some sites is offer VPN's so they actually are >> inside the >> campus network again. Solves a lot of trouble. > > We already offer VPNs, but many users, including all the Linux > users and > probably all the Mac users, don't/can't use the VPN service. > > Our VPNs are provided by 2 Windows boxes using PPTP VPNs. How do > Mac and > Linux users connect to them? > > Our users only other choice is SSH-tunneling which rules out most > of them. > > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rcooper at DWFORD.COM Sun Apr 3 17:20:33 2005 From: rcooper at DWFORD.COM (Rick Cooper) Date: Thu Jan 12 21:29:13 2006 Subject: errors that I can't figure out - SOLVED Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Julian Field > Sent: Sunday, April 03, 2005 9:26 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: errors that I can't figure out - SOLVED > > > Raymond Dijkxhoorn wrote: > > > Hi! > > > >>> Why cant you implement this? Just start doing authenticated SMTP for > >>> your > >>> end users. So they can also relay when out of office... > >> > > > >> I need to set up the SSL cert for auth SMTP, as we have rules about > >> sending unencrypted passwords across any network. Then we have > a massive > >> user-education problem :-( Currently they use their ISP's SMTP server > >> and getting them to change will be a real struggle. > > > > > > I know... thats the real pain... > > > > What we do one some sites is offer VPN's so they actually are inside the > > campus network again. Solves a lot of trouble. > > We already offer VPNs, but many users, including all the Linux users and > probably all the Mac users, don't/can't use the VPN service. > > Our VPNs are provided by 2 Windows boxes using PPTP VPNs. How do Mac and > Linux users connect to them? > > Our users only other choice is SSH-tunneling which rules out most of them. > > -- Well you could use poptop on Linux boxes for the server (I do for about eight sites) Linux has the pptp client Mac Jaguar+ has a pptp client built in and there is digitunnel (commercial) for OS X 10.1 or PiePants (still free I believe) as well. The linux and Mac clients are compatable with either poptop or the windows software, and the windows clients are compatable with poptop. Rick -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kyle at MLUG.MISSOURI.EDU Sun Apr 3 18:54:26 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. Thanks for looking into this Julian. I've been using Mailscanner for 2 years now on a RH 8.0 machine with no issues. I've also show the following errors when using the install.sh script. Looks like to me, the install scripts it looking for packages in the i386x86_64 directory, which is not there. All the packages are in either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. There are two outputs below, the first from the rpmbuild -bc perl-Archive-Zip.spec and another from when I try and reinstall MailScanner from the install.sh script. I've cut out most of it and only given the errors that I think are important, but have the whole install log, if you would like it see it. Kyle ************************************************ [root@skywalker framadmn]# cd /usr/src/redhat/SPECS/ [root@skywalker SPECS]# rpmbuild -bc perl-Archive-Zip.spec Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.42431 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Archive-Zip-1.14 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/Archive-Zip-1.14.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd Archive-Zip-1.14 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.42431 + umask 022 + cd /usr/src/redhat/BUILD + cd Archive-Zip-1.14 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-Archive-Zip-1.14-1-root/usr Checking if your kit is complete... Looks good Writing Makefile for Archive::Zip + make cp lib/Archive/Zip.pod blib/lib/Archive/Zip.pod cp lib/Archive/Zip/Tree.pm blib/lib/Archive/Zip/Tree.pm cp lib/Archive/Zip/FAQ.pod blib/lib/Archive/Zip/FAQ.pod cp lib/Archive/Zip.pm blib/lib/Archive/Zip.pm cp lib/Archive/Zip/MemberRead.pm blib/lib/Archive/Zip/MemberRead.pm cp lib/Archive/Zip/MockFileHandle.pm blib/lib/Archive/Zip/MockFileHandle.pm cp lib/Archive/Zip/BufferedFileHandle.pm blib/lib/Archive/Zip/BufferedFileHandle.pm cp crc32 blib/script/crc32 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/crc32 Manifying blib/man3/Archive::Zip::Tree.3pm Manifying blib/man3/Archive::Zip.3pm Manifying blib/man3/Archive::Zip::FAQ.3pm Manifying blib/man3/Archive::Zip::MemberRead.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/test..............ok t/testex............ok t/testMemberRead....ok t/testTree..........ok t/testUpdate........ok All tests successful. Files=5, Tests=163, 3 wallclock secs ( 1.81 cusr + 0.48 csys = 2.29 CPU) + exit 0 [root@skywalker SPECS]# ******************************************************** Attempting to build and install MailScanner-perl-MIME-Base64-3.05-5 Installing MailScanner-perl-MIME-Base64-3.05-5.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.28423 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf MIME-Base64-3.05 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/MIME-Base64-3.05.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd MIME-Base64-3.05 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + chmod -R u+w /usr/src/redhat/BUILD/MIME-Base64-3.05 + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.28423 + umask 022 + cd /usr/src/redhat/BUILD + cd MIME-Base64-3.05 + LANG=C + export LANG + unset DISPLAY + grep -rsl '^#!.*perl' . + grep -v '.bak$' + xargs --no-run-if-empty /usr/bin/perl -MExtUtils::MakeMaker -e 'MY->fixin(@ARGV)' + CFLAGS='-O2 -g -pipe -m64' + /usr/bin/perl Makefile.PLPREFIX=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/util Checking if your kit is complete... Looks good Writing Makefile for MIME::Base64 + /usr/bin/make cp QuotedPrint.pm blib/lib/MIME/QuotedPrint.pm cp Base64.pm blib/lib/MIME/Base64.pm /usr/bin/perl /usr/lib/perl5/5.8.5/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.8.5/ExtUtils/typemap Base64.xs > Base64.xsc && mv Base64.xsc Base64.c gcc -c -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"3.05\" -DXS_VERSION=\"3.05\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" Base64.c Running Mkbootstrap for MIME::Base64 () chmod 644 Base64.bs rm -f blib/arch/auto/MIME/Base64/Base64.so gcc -shared Base64.o -o blib/arch/auto/MIME/Base64/Base64.so chmod 755 blib/arch/auto/MIME/Base64/Base64.so cp Base64.bs blib/arch/auto/MIME/Base64/Base64.bs chmod 644 blib/arch/auto/MIME/Base64/Base64.bs cp decode-qp blib/script/decode-qp /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/decode-qp cp encode-qp blib/script/encode-qp /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/encode-qp cp decode-base64 blib/script/decode-base64 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/decode-base64 cp encode-base64 blib/script/encode-base64 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/encode-base64 Manifying blib/man3/MIME::QuotedPrint.3pm Manifying blib/man3/MIME::Base64.3pm + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.56280 + umask 022 + cd /usr/src/redhat/BUILD + cd MIME-Base64-3.05 + LANG=C + export LANG + unset DISPLAY + '[' /var/tmp/MailScanner-perl-MIME-Base64-3.05-root '!=' / ']' + rm -rf /var/tmp/MailScanner-perl-MIME-Base64-3.05-root + /usr/bin/make prefix=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/ exec_prefix=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/ bindir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//bin sbindir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//sbin sysconfdir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/etc datadir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//share includedir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//include libdir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//lib64 libexecdir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//libexec localstatedir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var sharedstatedir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root//com mandir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/share/man infodir=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/share/info install DESTDIR=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/auto/MIME/Base64/Base64.bs Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/auto/MIME/Base64/Base64.so Files found in blib/arch: installing files in blib/lib into architecture dependent library tree Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/MIME/Base64.pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/MIME/QuotedPrint.pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/share/man/man3/MIME::Base64.3pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/share/man/man3/MIME::QuotedPrint.3pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/bin/decode-base64 Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/bin/decode-qp Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/bin/encode-base64 Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/bin/encode-qp Writing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/auto/MIME/Base64/.packlist Appending installation info to/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var/tmp/MailScanner-perl-MIME-B se64-3.05-root/usr/lib/MailScanner/utils/lib64/perl5/5.8.5/x86_64-linux-thread- ulti/perllocal.pod + make install_site Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/MIME/Base64/Base64.bs Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/MIME/Base64/Base64.so Files found in blib/arch: installing files in blib/lib into architecture dependent library tree Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/MIME/Base64.pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/MIME/QuotedPrint.pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/share man/man3/MIME::Base64.3pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/share man/man3/MIME::QuotedPrint.3pm Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/bin/d code-base64 Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/bin/d code-qp Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/bin/e code-base64 Installing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/bin/e code-qp Writing/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/MIME/Base64/.packlist Appending installation info to/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/5.8.5/x86_64-linux-thread-multi/perllocal.pod + '[' -x /usr/lib/rpm/brp-compress ']' + /usr/lib/rpm/brp-compress + '[' -e /etc/SuSE-release -o -e /etc/UnitedLinux-release ']' + find /var/tmp/MailScanner-perl-MIME-Base64-3.05-root -name perllocal.pod -o -name .packlist -o -name '*.bs' + xargs -i rm -f '{}' + rm -rf /var/tmp/MailScanner-perl-MIME-Base64-3.05-root/var + find /var/tmp/MailScanner-perl-MIME-Base64-3.05-root/ -type d -depth -exec rmdir '{}' ';' + /usr/bin/perl -MFile::Find -le ' find({ wanted => \&wanted, no_chdir => 1}, "/var/tmp/MailScanner-perl-MIME-Base64-3.05-root"); print "%doc Changes README"; for my $x (sort @dirs, @files) { push @ret, $x unless indirs($x); } print join "\n", sort @ret; sub wanted { return if /auto$/; local $_ = $File::Find::name; my $f = $_; s|^\Q/var/tmp/MailScanner-perl-MIME-Base64-3.05-root\E||; return unless length; return $files[@files] = $_ if -f $f; $d = $_; /\Q$d\E/ && return for reverse sort @INC; $d =~ /\Q$_\E/ && return for qw|/etc //man //bin //share|; $dirs[@dirs] = $_; } sub indirs { my $x = shift; $x =~ /^\Q$_\E\// && $x ne $_ && return 1 for @dirs; } ' + '[' -z MailScanner-perl-MIME-Base64-3.05-filelist ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.05 extracting debug info from/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/lib64 perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/redhat/brp-compress + /usr/lib/rpm/redhat/brp-strip /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump Processing files: MailScanner-perl-MIME-Base64-3.05-5 Executing(%doc): /bin/sh -e /var/tmp/rpm-tmp.54956 + umask 022 + cd /usr/src/redhat/BUILD + cd MIME-Base64-3.05 +DOCDIR=/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/util /doc/MailScanner-perl-MIME-Base64-3.05 + export DOCDIR + rm -rf/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/doc/M ilScanner-perl-MIME-Base64-3.05 + /bin/mkdir -p/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/doc/M ilScanner-perl-MIME-Base64-3.05 + cp -pr Changes README/var/tmp/MailScanner-perl-MIME-Base64-3.05-root/usr/lib/MailScanner/utils/doc/M ilScanner-perl-MIME-Base64-3.05 + exit 0 Provides: Base64.so()(64bit) perl(MIME::Base64) = 3.05 perl(MIME::QuotedPrint) = 3.03 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(VersionedDependencies) <= 3.0.3-1 Requires: /usr/bin/perl libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) perl(DynaLoader) perl(Exporter) perl(MIME::Base64) perl(MIME::QuotedPrint) perl(strict) perl(vars) Processing files: MailScanner-perl-MIME-Base64-debuginfo-3.05-5 Provides: Base64.so.debug()(64bit) Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/MailScanner-perl-MIME-Base64-3.05-root Wrote: /usr/src/redhat/RPMS/x86_64/MailScanner-perl-MIME-Base64-3.05-5.x86_64.rpm Wrote:/usr/src/redhat/RPMS/x86_64/MailScanner-perl-MIME-Base64-debuginfo-3.05-5.x86_6 .rpm Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.54956 + umask 022 + cd /usr/src/redhat/BUILD + cd MIME-Base64-3.05 + '[' /var/tmp/MailScanner-perl-MIME-Base64-3.05-root '!=' / ']' + rm -rf /var/tmp/MailScanner-perl-MIME-Base64-3.05-root + exit 0 Executing(--clean): /bin/sh -e /var/tmp/rpm-tmp.54956 + umask 022 + cd /usr/src/redhat/BUILD + rm -rf MIME-Base64-3.05 + exit 0 Missing file/usr/src/redhat/RPMS/i386x86_64/MailScanner-perl-MIME-Base64-3.05-5.i386x86_64. pm. Maybe it did not build correctly? Attempting to build and install perl-HTML-Parser-3.45-1 Installing perl-HTML-Parser-3.45-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.30033 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf HTML-Parser-3.45 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/HTML-Parser-3.45.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd HTML-Parser-3.45 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.30033 + umask 022 + cd /usr/src/redhat/BUILD + cd HTML-Parser-3.45 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-HTML-Parser-root/usr Checking if your kit is complete... Looks good Writing Makefile for HTML::Parser + make cp lib/HTML/PullParser.pm blib/lib/HTML/PullParser.pm cp Parser.pm blib/lib/HTML/Parser.pm cp lib/HTML/Entities.pm blib/lib/HTML/Entities.pm cp lib/HTML/LinkExtor.pm blib/lib/HTML/LinkExtor.pm cp lib/HTML/TokeParser.pm blib/lib/HTML/TokeParser.pm cp lib/HTML/HeadParser.pm blib/lib/HTML/HeadParser.pm cp lib/HTML/Filter.pm blib/lib/HTML/Filter.pm /usr/bin/perl /usr/lib/perl5/5.8.5/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.8.5/ExtUtils/typemap -typemap typemap Parser.xs > Parser.xsc && mv Parser.xsc Parser.c /usr/bin/perl mkhctype >hctype.h /usr/bin/perl mkpfunc >pfunc.h gcc -c -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"3.45\" -DXS_VERSION=\"3.45\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" -DMARKED_SECTION Parser.c Running Mkbootstrap for HTML::Parser () chmod 644 Parser.bs rm -f blib/arch/auto/HTML/Parser/Parser.so gcc -shared Parser.o -o blib/arch/auto/HTML/Parser/Parser.so chmod 755 blib/arch/auto/HTML/Parser/Parser.so cp Parser.bs blib/arch/auto/HTML/Parser/Parser.bs chmod 644 blib/arch/auto/HTML/Parser/Parser.bs Manifying blib/man3/HTML::PullParser.3pm Manifying blib/man3/HTML::Entities.3pm Manifying blib/man3/HTML::Parser.3pm Manifying blib/man3/HTML::TokeParser.3pm Manifying blib/man3/HTML::LinkExtor.3pm Manifying blib/man3/HTML::Filter.3pm Manifying blib/man3/HTML::HeadParser.3pm + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.50844 + umask 022 + cd /usr/src/redhat/BUILD + cd HTML-Parser-3.45 + LANG=C + export LANG + unset DISPLAY + rm -rf /var/tmp/perl-HTML-Parser-root ++ perl -V:installarchlib + eval 'installarchlib='\''/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi'\'';' ++ installarchlib=/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi + mkdir -p /var/tmp/perl-HTML-Parser-root//usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi + make install Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/auto/HTML/Parser/Parser.bs Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/auto/HTML/Parser/Parser.so Files found in blib/arch: installing files in blib/lib into architecture dependent library tree Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/PullParser.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/LinkExtor.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/TokeParser.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/Parser.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/HeadParser.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/Entities.pm Installing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/HTML/Filter.pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::TokeParser.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::Parser.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::HeadParser.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::Entities.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::LinkExtor.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::PullParser.3pm Installing /var/tmp/perl-HTML-Parser-root/usr/share/man/man3/HTML::Filter.3pm Writing/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/auto/HTML/Parser/.packlist Appending installation info to/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/ erllocal.pod + '[' -x /usr/lib/rpm/brp-compress ']' + /usr/lib/rpm/brp-compress + find /var/tmp/perl-HTML-Parser-root/usr -type f -print + grep -v perllocal.pod + grep -v '\.packlist' + sed 's@^/var/tmp/perl-HTML-Parser-root@@g' ++ cat HTML-Parser-3.45-filelist + '[' '/usr/share/man/man3/HTML::LinkExtor.3pm.gz /usr/share/man/man3/HTML::Entities.3pm.gz /usr/share/man/man3/HTML::PullParser.3pm.gz /usr/share/man/man3/HTML::TokeParser.3pm.gz /usr/share/man/man3/HTML::Filter.3pm.gz /usr/share/man/man3/HTML::HeadParser.3pm.gz /usr/share/man/man3/HTML::Parser.3pm.gz /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/HTML/Parser/Par er.bs /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/HTML/Parser/Par er.so /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/PullParser.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/Parser.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/HeadParser.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/Filter.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/LinkExtor.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/Entities.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/HTML/TokeParser.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/HTML-Parser-3.45 extracting debug info from/var/tmp/perl-HTML-Parser-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thr ad-multi/auto/HTML/Parser/Parser.so 161 blocks + /usr/lib/rpm/redhat/brp-compress + /usr/lib/rpm/redhat/brp-strip /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump Processing files: perl-HTML-Parser-3.45-1 Provides: Parser.so()(64bit) perl(HTML::Entities) = 1.29 perl(HTML::Filter) = 2.10 perl(HTML::HeadParser) = 2.21 perl(HTML::LinkExtor) = 1.33 perl(HTML::Parser) = 3.45 perl(HTML::PullParser) = 2.7 perl(HTML::TokeParser) = 2.30 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(VersionedDependencies) <= 3.0.3-1 Requires: libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) perl >= 0:5.004 perl(Carp) perl(DynaLoader) perl(Exporter) perl(HTML::Entities) perl(HTML::Parser) perl(HTML::PullParser) perl(HTML::Tagset) perl(strict) perl(vars) Processing files: perl-HTML-Parser-debuginfo-3.45-1 Provides: Parser.so.debug()(64bit) Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/perl-HTML-Parser-root warning: Installed (but unpackaged) file(s) found: /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/perllocal.pod /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/HTML/Parser/.pa klist Wrote: /usr/src/redhat/RPMS/x86_64/perl-HTML-Parser-3.45-1.x86_64.rpm Wrote: /usr/src/redhat/RPMS/x86_64/perl-HTML-Parser-debuginfo-3.45-1.x86_64.rpm Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.18412 + umask 022 + cd /usr/src/redhat/BUILD + cd HTML-Parser-3.45 + rm -rf /var/tmp/perl-HTML-Parser-root + exit 0 Executing(--clean): /bin/sh -e /var/tmp/rpm-tmp.18412 + umask 022 + cd /usr/src/redhat/BUILD + rm -rf HTML-Parser-3.45 + exit 0 Missing file /usr/src/redhat/RPMS/i386x86_64/perl-HTML-Parser-3.45-1.i386x86_64.rpm. Maybe it did not build correctly? Attempting to build and install perl-Archive-Zip-1.14-1 Installing perl-Archive-Zip-1.14-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.60161 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Archive-Zip-1.14 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/Archive-Zip-1.14.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd Archive-Zip-1.14 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.60161 + umask 022 + cd /usr/src/redhat/BUILD + cd Archive-Zip-1.14 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-Archive-Zip-1.14-1-root/usr Checking if your kit is complete... Looks good Writing Makefile for Archive::Zip + make cp lib/Archive/Zip.pod blib/lib/Archive/Zip.pod cp lib/Archive/Zip/Tree.pm blib/lib/Archive/Zip/Tree.pm cp lib/Archive/Zip/FAQ.pod blib/lib/Archive/Zip/FAQ.pod cp lib/Archive/Zip.pm blib/lib/Archive/Zip.pm cp lib/Archive/Zip/MemberRead.pm blib/lib/Archive/Zip/MemberRead.pm cp lib/Archive/Zip/MockFileHandle.pm blib/lib/Archive/Zip/MockFileHandle.pm cp lib/Archive/Zip/BufferedFileHandle.pm blib/lib/Archive/Zip/BufferedFileHandle.pm cp crc32 blib/script/crc32 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/crc32 Manifying blib/man3/Archive::Zip::Tree.3pm Manifying blib/man3/Archive::Zip.3pm Manifying blib/man3/Archive::Zip::FAQ.3pm Manifying blib/man3/Archive::Zip::MemberRead.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/test.............. t/test..............ok1/123 t/test..............ok2/123 t/test..............ok3/123 t/test..............ok4/123 t/test..............ok5/123 t/test..............ok6/123 t/test..............ok7/123 t/test..............ok8/123 t/test..............ok9/123 t/test..............ok10/123 t/test..............ok11/123 t/test..............ok12/123 t/test..............ok13/123 t/test..............ok14/123 t/test..............ok15/123 t/test..............ok16/123 t/test..............ok17/123 t/test..............ok18/123 t/test..............ok19/123 t/test..............ok20/123 t/test..............ok21/123 t/test..............ok22/123 t/test..............ok23/123 t/test..............ok24/123 t/test..............ok25/123 t/test..............ok26/123 t/test..............ok27/123 t/test..............ok28/123 t/test..............ok29/123 t/test..............ok30/123 t/test..............ok31/123 t/test..............ok32/123 t/test..............ok33/123 t/test..............ok34/123 t/test..............ok35/123 t/test..............ok36/123 t/test..............ok37/123 t/test..............ok38/123 t/test..............ok39/123 t/test..............ok40/123 t/test..............ok41/123 t/test..............ok42/123 t/test..............ok43/123 t/test..............ok44/123 t/test..............ok45/123 t/test..............ok46/123 t/test..............ok47/123 t/test..............ok48/123 t/test..............ok49/123 t/test..............ok50/123 t/test..............ok51/123 t/test..............ok52/123 t/test..............ok53/123 t/test..............ok54/123 t/test..............ok55/123 t/test..............ok56/123 t/test..............ok57/123 t/test..............ok58/123 t/test..............ok59/123 t/test..............ok60/123 t/test..............ok61/123 t/test..............ok62/123 t/test..............ok63/123 t/test..............ok64/123 t/test..............ok65/123 t/test..............ok66/123 t/test..............ok67/123 t/test..............ok68/123 t/test..............ok69/123 t/test..............ok70/123 t/test..............ok71/123 t/test..............ok72/123 t/test..............ok73/123 t/test..............ok74/123 t/test..............ok75/123 t/test..............ok76/123 t/test..............ok77/123 t/test..............ok78/123 t/test..............ok79/123 t/test..............ok80/123 t/test..............ok81/123 t/test..............ok82/123 t/test..............ok83/123 t/test..............ok84/123 t/test..............ok85/123 t/test..............ok86/123 t/test..............ok87/123 t/test..............ok88/123 t/test..............ok89/123 t/test..............ok90/123 t/test..............ok91/123 t/test..............ok92/123 t/test..............ok93/123 t/test..............ok94/123 t/test..............ok95/123 t/test..............ok96/123 t/test..............ok97/123 t/test..............ok98/123 t/test..............ok99/123 t/test..............ok100/123 t/test..............ok101/123 t/test..............ok102/123 t/test..............ok103/123 t/test..............ok104/123 t/test..............ok105/123 t/test..............ok106/123 t/test..............ok107/123 t/test..............ok108/123 t/test..............ok109/123 t/test..............ok110/123 t/test..............ok111/123 t/test..............ok112/123 t/test..............ok113/123 t/test..............ok114/123 t/test..............ok115/123 t/test..............ok116/123 t/test..............ok117/123 t/test..............ok118/123 t/test..............ok119/123 t/test..............ok120/123 t/test..............ok121/123 t/test..............ok122/123 t/test..............ok123/123 t/test..............ok t/testex............ t/testex............NOK 1# Test 1 got: "256" (t/testex.t at line 37) # Expected: "0" # t/testex.t line 37 is: ok( runPerlCommand( 'examples/copy.pl', INPUTZIP, OUTPUTZIP ), 0 ); t/testex............NOK 2# Test 2 got: "256" (t/testex.t at line 39) # Expected: "0" # t/testex.t line 39 is: ok( runPerlCommand( 'examples/extract.pl', OUTPUTZIP, ZFILENAME ), 0 ); t/testex............NOK 3# Test 3 got: "256" (t/testex.t at line 41) # Expected: "0" # t/testex.t line 41 is: ok( runPerlCommand( 'examples/mfh.pl', INPUTZIP ), 0 ); t/testex............NOK 4# Test 4 got: "256" (t/testex.t at line 43) # Expected: "0" # t/testex.t line 43 is: ok( runPerlCommand( 'examples/zip.pl', OUTPUTZIP, INPUTZIP, FILENAME ), 0 ); t/testex............NOK 5# Test 5 got: "256" (t/testex.t at line 46) # Expected: "0" # t/testex.t line 46 is: ok( $status, 0 ); t/testex............NOK 6# Test 6 got: "256" (t/testex.t at line 51) # Expected: "0" # t/testex.t line 51 is: ok( $status, 0 ); t/testex............NOK 7# Test 7 got: "256" (t/testex.t at line 56) # Expected: "0" # t/testex.t line 56 is: ok( $status, 0 ); t/testex............NOK 8# Test 8 got: "" (t/testex.t at line 57) # Expected: "testdir/testing.txt:100\n" # t/testex.t line 57 is: ok( $output, ZFILENAME . ":100\n" ); t/testex............NOK 9# Test 9 got: "256" (t/testex.t at line 66) # Expected: "0" # t/testex.t line 66 is: ok( runPerlCommand( 'examples/selfex.pl', OUTPUTZIP, FILENAME ), 0 ); t/testex............NOK 10# Test 10 got: "256" (t/testex.t at line 68) # Expected: "0" # t/testex.t line 68 is: ok( runPerlCommand(OUTPUTZIP), 0 ); t/testex............NOK 11# Test 11 got: (t/testex.t at line 72) # Expected: "1" (extracted/testdir/testing.txt exists) # t/testex.t line 72 is: ok( -f $fn, 1, "$fn exists" ); t/testex............NOK 12# Test 12 got: "256" (t/testex.t at line 81) # Expected: "0" (updateTree.pl create) # t/testex.t line 81 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl create" ); t/testex............NOK 13# Test 13 got: (t/testex.t at line 82) # Expected: "1" (zip created) # t/testex.t line 82 is: ok( -f OUTPUTZIP, 1, "zip created" ); t/testex............NOK 14# Test 14 got: "256" (t/testex.t at line 83) # Expected: "0" (updateTree.pl update) # t/testex.t line 83 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl update" ); t/testex............NOK 15# Test 15 got: (t/testex.t at line 84) # Expected: "1" (zip updated) # t/testex.t line 84 is: ok( -f OUTPUTZIP, 1, "zip updated" ); t/testex............FAILED tests 1-15 Failed 15/15 tests, 0.00% okay t/testMemberRead.... t/testMemberRead....ok1/7 t/testMemberRead....ok2/7 t/testMemberRead....ok3/7 t/testMemberRead....ok4/7 t/testMemberRead....ok5/7 t/testMemberRead....ok6/7 t/testMemberRead....ok7/7 t/testMemberRead....ok t/testTree.......... t/testTree..........ok1/6 t/testTree..........ok2/6 t/testTree..........ok3/6 t/testTree..........ok4/6 t/testTree..........ok5/6 t/testTree..........ok6/6 t/testTree..........ok t/testUpdate........ t/testUpdate........ok1/12 t/testUpdate........ok2/12 t/testUpdate........ok3/12 t/testUpdate........ok4/12 t/testUpdate........ok5/12 t/testUpdate........ok6/12 t/testUpdate........ok7/12 t/testUpdate........ok8/12 t/testUpdate........ok9/12 t/testUpdate........ok10/12 t/testUpdate........ok11/12 t/testUpdate........ok12/12 t/testUpdate........ok Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/testex.t 15 15 100.00% 1-15 Failed 1/5 test scripts, 80.00% okay. 15/163 subtests failed, 90.80% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.60161 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.60161 (%build) Missing file /usr/src/redhat/RPMS/noarch/perl-Archive-Zip-1.14-1.noarch.rpm. Maybe it did not build correctly? Julian Field wrote: I've just tried it on RHEL4 and it works fine, so it's some Fedora 3 screwup (wouldn't be the first). What's the output of rpmbuild -bc perl-Archive-Zip.spec Kyle Krieg wrote: I know this has been brought up in the past, but was wanting to get an update on where it was in the pile. I have a Fedora 3 x86_64 build that I'm wishing to install Mailscanner on. Every time I try and install Mailscanner, it fails on the actuall Mailscanner rpm install. I have a regular non 64bit processer in another machine, which Mailscanner builds correctly on. See this e-mail string from the searchable mailing list : http://www.jiscmail.ac.uk/cgi-bin/wa.exe?A2=ind0503&L=mailscanner&P=R78667&I=-1 Just wondering if there is work and research going on the Fedora 3 64 bit platform and when something like this could get some attention ? :) -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 19:21:57 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I think it actually built stuff okay, but has calculated the architecture wrongly. Please can you send me the output of rpm -qi perl rpm -qa | grep '^perl' rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl which perl perl -v For some reason it is picking up both i386 and x86_64 as the architecture, when it should just be x86_64 (which is what RHEL4 returns). That bunch of commands should give me an idea what is happening. Kyle Krieg wrote: > Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. > Thanks for looking into this Julian. I've been using Mailscanner for > 2 years now on a RH 8.0 machine with no issues. > > I've also show the following errors when using the install.sh script. > Looks like to me, the install scripts it looking for packages in the > i386x86_64 directory, which is not there. All the packages are in > either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or > /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. > > There are two outputs below, the first from the rpmbuild -bc > perl-Archive-Zip.spec and another from when I try and reinstall > MailScanner from the install.sh script. I've cut out most of it and > only given the errors that I think are important, but have the whole > install log, if you would like it see it. > > Kyle > > ************************************************ -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 19:30:32 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] In the mean time, replace your install.sh with the attached script. Julian Field wrote: > I think it actually built stuff okay, but has calculated the > architecture wrongly. > Please can you send me the output of > rpm -qi perl > rpm -qa | grep '^perl' > rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl > which perl > perl -v > > For some reason it is picking up both i386 and x86_64 as the > architecture, when it should just be x86_64 (which is what RHEL4 > returns). > > That bunch of commands should give me an idea what is happening. > > Kyle Krieg wrote: > >> Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. >> Thanks for looking into this Julian. I've been using Mailscanner for >> 2 years now on a RH 8.0 machine with no issues. >> >> I've also show the following errors when using the install.sh script. >> Looks like to me, the install scripts it looking for packages in the >> i386x86_64 directory, which is not there. All the packages are in >> either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or >> /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. >> >> There are two outputs below, the first from the rpmbuild -bc >> perl-Archive-Zip.spec and another from when I try and reinstall >> MailScanner from the install.sh script. I've cut out most of it and >> only given the errors that I think are important, but have the whole >> install log, if you would like it see it. >> >> Kyle >> >> ************************************************ > > > > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, Application/X-GZIP 5.8KB. ] [ Unable to print this part. ] From kyle at MLUG.MISSOURI.EDU Sun Apr 3 19:47:43 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Here is the output from the commands you asked for. My install was Fedora 3 base (full install) and the current yum updates. My yum updates are pointing to livna server. Thanks!! Kyle [root@skywalker framadmn]# rpm -qi perl Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 11:55:57 AM CDT Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: tweety.build.redh at.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 28442178 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 12:01:58 PM CDT Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: dolly.build.redha t.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 34190638 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. [root@skywalker framadmn]# rpm -qa | grep '^perl' perl-LDAP-0.31-5 perl-Compress-Zlib-1.33-6 perl-Net-CIDR-0.10-1 perl-XML-NamespaceSupport-1.08-6 perl-XML-LibXML-1.58-1 perl-RPM-Specfile-1.17-2 perl-Convert-TNEF-0.17-3 perl-5.8.5-9 perl-libwww-perl-5.79-5 perl-Time-HiRes-1.55-3 perl-BSD-Resource-1.23-6 perl-HTML-Tagset-3.03-30 perl-Devel-Symdump-2.03-19 perl-HTML-Parser-3.35-6 perl-Convert-ASN1-0.18-3 perl-XML-LibXML-Common-0.13-7 perl-Convert-BinHex-1.119-2 perl-MailTools-1.66-1 perl-TimeDate-1.1301-3 perl-Bit-Vector-6.3-3 perl-RPM2-0.66-7 perl-5.8.5-9 perl-URI-1.30-4 perl-XML-Dumper-0.71-2 perl-Digest-SHA1-2.07-5 perl-XML-Twig-3.13-6 perl-Filter-Simple-0.79-4 perl-Cyrus-2.2.10-3.fc3 perl-DateManip-5.42a-3 perl-XML-Encoding-1.01-26 perl-XML-Grove-0.46alpha-27 perl-IO-stringy-2.110-1 perl-File-MMagic-1.21-2 perl-TermReadKey-2.20-17 perl-DBD-MySQL-2.9003-5 perl-XML-Parser-2.34-5 perl-Net-DNS-0.48-1 perl-Crypt-SSLeay-0.51-5 perl-NKF-2.04-3 perl-Archive-Tar-1.08-3 perl-Frontier-RPC-0.06-38 perl-Inline-0.44-14 perl-Filter-1.30-6 perl-DBI-1.40-5 perl-libxml-perl-0.07-30 perl-Digest-HMAC-1.01-13 perl-Parse-Yapp-1.05-32 perl-Date-Calc-5.3-9 perl-MIME-tools-5.417-1 perl-Text-Kakasi-1.05-11 perl-DBD-Pg-1.31-6 perl-Parse-RecDescent-1.94-4 perl-PDL-2.4.1-5 perl-libxml-enno-1.02-31 perl-XML-SAX-0.12-7 perl-SGMLSpm-1.03ii-14 perl-suidperl-5.8.5-9.1 [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl perl 5.8.5 i386 perl 5.8.5 x86_64 [root@skywalker framadmn]# which perl /usr/bin/perl [root@skywalker framadmn]# perl -v This is perl, v5.8.5 built for x86_64-linux-thread-multi Copyright 1987-2004, Larry Wall Perl may be copied only under the terms of either the Artistic License or the GNU General Public License, which may be found in the Perl 5 source kit. Complete documentation for Perl, including FAQ lists, should be found on this system using `man perl' or `perldoc perl'. If you have access to the Internet, point your browser at http://www.perl.com/, the Perl Home Page. [root@skywalker framadmn]# Julian Field wrote: I think it actually built stuff okay, but has calculated the architecture wrongly. Please can you send me the output of rpm -qi perl rpm -qa | grep '^perl' rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl which perl perl -v For some reason it is picking up both i386 and x86_64 as the architecture, when it should just be x86_64 (which is what RHEL4 returns). That bunch of commands should give me an idea what is happening. Kyle Krieg wrote: Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. Thanks for looking into this Julian. I've been using Mailscanner for 2 years now on a RH 8.0 machine with no issues. I've also show the following errors when using the install.sh script. Looks like to me, the install scripts it looking for packages in the i386x86_64 directory, which is not there. All the packages are in either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. There are two outputs below, the first from the rpmbuild -bc perl-Archive-Zip.spec and another from when I try and reinstall MailScanner from the install.sh script. I've cut out most of it and only given the errors that I think are important, but have the whole install log, if you would like it see it. Kyle ************************************************ -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 20:00:47 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] You have 2 packages installed both called "perl-5.8.5-9". Just 2 different architectures. That should break RPM :-( Please do rpm -ql perl | grep bin The install.sh script I just sent you works around this problem. Kyle Krieg wrote: > Here is the output from the commands you asked for. My install was > Fedora 3 base (full install) and the current yum updates. My yum > updates are pointing to livna server. > > Thanks!! > > Kyle > > > [root@skywalker framadmn]# rpm -qi perl > Name : perl Relocations: (not relocatable) > Version : 5.8.5 Vendor: Red Hat, Inc. > Release : 9 Build Date: Tue 12 Oct > 2004 11:55:57 AM CDT > Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: > tweety.build.redh at.com > Group : Development/Languages Source RPM: > perl-5.8.5-9.src.rpm > Size : 28442178 License: Artistic or GPL > Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID > b44269d04f2a6fd2 > Packager : Red Hat, Inc. *MailScanner has detected a possible fraud > attempt from "bugzilla.redhat.com" claiming to be * > > URL : http://www.perl.org/ > Summary : The Perl programming language. > Description : > Perl is a high-level programming language with roots in C, sed, awk > and shell scripting. Perl is good at handling processes and files, > and is especially good at handling text. Perl's hallmarks are > practicality and efficiency. While it is used to do a lot of > different things, Perl's most common applications are system > administration utilities and web programming. A large proportion of > the CGI scripts on the web are written in Perl. You need the perl > package installed on your system so that your system can handle Perl > scripts. > > Install this package if you want to program in Perl or enable your > system to handle Perl scripts. > Name : perl Relocations: (not relocatable) > Version : 5.8.5 Vendor: Red Hat, Inc. > Release : 9 Build Date: Tue 12 Oct > 2004 12:01:58 PM CDT > Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: > dolly.build.redha t.com > Group : Development/Languages Source RPM: > perl-5.8.5-9.src.rpm > Size : 34190638 License: Artistic or GPL > Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID > b44269d04f2a6fd2 > Packager : Red Hat, Inc. *MailScanner has detected a possible fraud > attempt from "bugzilla.redhat.com" claiming to be * > > URL : http://www.perl.org/ > Summary : The Perl programming language. > Description : > Perl is a high-level programming language with roots in C, sed, awk > and shell scripting. Perl is good at handling processes and files, > and is especially good at handling text. Perl's hallmarks are > practicality and efficiency. While it is used to do a lot of > different things, Perl's most common applications are system > administration utilities and web programming. A large proportion of > the CGI scripts on the web are written in Perl. You need the perl > package installed on your system so that your system can handle Perl > scripts. > > Install this package if you want to program in Perl or enable your > system to handle Perl scripts. > [root@skywalker framadmn]# rpm -qa | grep '^perl' > perl-LDAP-0.31-5 > perl-Compress-Zlib-1.33-6 > perl-Net-CIDR-0.10-1 > perl-XML-NamespaceSupport-1.08-6 > perl-XML-LibXML-1.58-1 > perl-RPM-Specfile-1.17-2 > perl-Convert-TNEF-0.17-3 > perl-5.8.5-9 > perl-libwww-perl-5.79-5 > perl-Time-HiRes-1.55-3 > perl-BSD-Resource-1.23-6 > perl-HTML-Tagset-3.03-30 > perl-Devel-Symdump-2.03-19 > perl-HTML-Parser-3.35-6 > perl-Convert-ASN1-0.18-3 > perl-XML-LibXML-Common-0.13-7 > perl-Convert-BinHex-1.119-2 > perl-MailTools-1.66-1 > perl-TimeDate-1.1301-3 > perl-Bit-Vector-6.3-3 > perl-RPM2-0.66-7 > perl-5.8.5-9 > perl-URI-1.30-4 > perl-XML-Dumper-0.71-2 > perl-Digest-SHA1-2.07-5 > perl-XML-Twig-3.13-6 > perl-Filter-Simple-0.79-4 > perl-Cyrus-2.2.10-3.fc3 > perl-DateManip-5.42a-3 > perl-XML-Encoding-1.01-26 > perl-XML-Grove-0.46alpha-27 > perl-IO-stringy-2.110-1 > perl-File-MMagic-1.21-2 > perl-TermReadKey-2.20-17 > perl-DBD-MySQL-2.9003-5 > perl-XML-Parser-2.34-5 > perl-Net-DNS-0.48-1 > perl-Crypt-SSLeay-0.51-5 > perl-NKF-2.04-3 > perl-Archive-Tar-1.08-3 > perl-Frontier-RPC-0.06-38 > perl-Inline-0.44-14 > perl-Filter-1.30-6 > perl-DBI-1.40-5 > perl-libxml-perl-0.07-30 > perl-Digest-HMAC-1.01-13 > perl-Parse-Yapp-1.05-32 > perl-Date-Calc-5.3-9 > perl-MIME-tools-5.417-1 > perl-Text-Kakasi-1.05-11 > perl-DBD-Pg-1.31-6 > perl-Parse-RecDescent-1.94-4 > perl-PDL-2.4.1-5 > perl-libxml-enno-1.02-31 > perl-XML-SAX-0.12-7 > perl-SGMLSpm-1.03ii-14 > perl-suidperl-5.8.5-9.1 > [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} > %{ARCH}\n' perl > perl 5.8.5 i386 > perl 5.8.5 x86_64 > [root@skywalker framadmn]# which perl > /usr/bin/perl > [root@skywalker framadmn]# perl -v > > This is perl, v5.8.5 built for x86_64-linux-thread-multi > > Copyright 1987-2004, Larry Wall > > Perl may be copied only under the terms of either the Artistic License > or the > GNU General Public License, which may be found in the Perl 5 source kit. > > Complete documentation for Perl, including FAQ lists, should be found on > this system using `man perl' or `perldoc perl'. If you have access to the > Internet, point your browser at http://www.perl.com/, the Perl Home Page. > > [root@skywalker framadmn]# > > > > Julian Field wrote: > >> I think it actually built stuff okay, but has calculated the >> architecture wrongly. >> Please can you send me the output of >> rpm -qi perl >> rpm -qa | grep '^perl' >> rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl >> which perl >> perl -v >> >> For some reason it is picking up both i386 and x86_64 as the >> architecture, when it should just be x86_64 (which is what RHEL4 >> returns). >> >> That bunch of commands should give me an idea what is happening. >> >> Kyle Krieg wrote: >> >>> Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. >>> Thanks for looking into this Julian. I've been using Mailscanner for >>> 2 years now on a RH 8.0 machine with no issues. >>> >>> I've also show the following errors when using the install.sh script. >>> Looks like to me, the install scripts it looking for packages in the >>> i386x86_64 directory, which is not there. All the packages are in >>> either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or >>> /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. >>> >>> There are two outputs below, the first from the rpmbuild -bc >>> perl-Archive-Zip.spec and another from when I try and reinstall >>> MailScanner from the install.sh script. I've cut out most of it and >>> only given the errors that I think are important, but have the whole >>> install log, if you would like it see it. >>> >>> Kyle >>> >>> ************************************************ >> >> >> >> -- >> Julian Field >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> Professional Support Services at www.MailScanner.biz >> MailScanner thanks transtec Computers for their support >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kyle at MLUG.MISSOURI.EDU Sun Apr 3 20:12:32 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Yeah, I saw that I had 2 perl (same) versions different arch and the light bulb went off on why it could be breaking the install script...why does Fedora do that on x86_64...umm..mysteries... Here is the output from rpm -ql perl | grep bin. [root@skywalker etc]# rpm -ql perl | grep bin /usr/bin/a2p /usr/bin/c2ph /usr/bin/cpan /usr/bin/dprofpp /usr/bin/enc2xs /usr/bin/find2perl /usr/bin/h2ph /usr/bin/h2xs /usr/bin/instmodsh /usr/bin/libnetcfg /usr/bin/perl /usr/bin/perl5.8.5 /usr/bin/perlbug /usr/bin/perlcc /usr/bin/perldoc /usr/bin/perlivp /usr/bin/piconv /usr/bin/pl2pm /usr/bin/pod2html /usr/bin/pod2latex /usr/bin/pod2man /usr/bin/pod2text /usr/bin/pod2usage /usr/bin/podchecker /usr/bin/podselect /usr/bin/prove /usr/bin/psed /usr/bin/pstruct /usr/bin/s2p /usr/bin/splain /usr/bin/xsubpp /usr/lib/perl5/5.8.5/unicore/CombiningClass.pl /usr/lib/perl5/5.8.5/unicore/lib/gc_sc/InCombin.pl /usr/bin/a2p /usr/bin/c2ph /usr/bin/cpan /usr/bin/dprofpp /usr/bin/enc2xs /usr/bin/find2perl /usr/bin/h2ph /usr/bin/h2xs /usr/bin/instmodsh /usr/bin/libnetcfg /usr/bin/perl /usr/bin/perl5.8.5 /usr/bin/perlbug /usr/bin/perlcc /usr/bin/perldoc /usr/bin/perlivp /usr/bin/piconv /usr/bin/pl2pm /usr/bin/pod2html /usr/bin/pod2latex /usr/bin/pod2man /usr/bin/pod2text /usr/bin/pod2usage /usr/bin/podchecker /usr/bin/podselect /usr/bin/prove /usr/bin/psed /usr/bin/pstruct /usr/bin/s2p /usr/bin/splain /usr/bin/xsubpp /usr/lib/perl5/5.8.5/unicore/CombiningClass.pl /usr/lib/perl5/5.8.5/unicore/lib/gc_sc/InCombin.pl [root@skywalker etc]# Julian Field wrote: You have 2 packages installed both called "perl-5.8.5-9". Just 2 different architectures. That should break RPM :-( Please do rpm -ql perl | grep bin The install.sh script I just sent you works around this problem. Kyle Krieg wrote: Here is the output from the commands you asked for. My install was Fedora 3 base (full install) and the current yum updates. My yum updates are pointing to livna server. Thanks!! Kyle [root@skywalker framadmn]# rpm -qi perl Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 11:55:57 AM CDT Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: tweety.build.redh at.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 28442178 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. *MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be * MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 12:01:58 PM CDT Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: dolly.build.redha t.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 34190638 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. *MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be * MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. [root@skywalker framadmn]# rpm -qa | grep '^perl' perl-LDAP-0.31-5 perl-Compress-Zlib-1.33-6 perl-Net-CIDR-0.10-1 perl-XML-NamespaceSupport-1.08-6 perl-XML-LibXML-1.58-1 perl-RPM-Specfile-1.17-2 perl-Convert-TNEF-0.17-3 perl-5.8.5-9 perl-libwww-perl-5.79-5 perl-Time-HiRes-1.55-3 perl-BSD-Resource-1.23-6 perl-HTML-Tagset-3.03-30 perl-Devel-Symdump-2.03-19 perl-HTML-Parser-3.35-6 perl-Convert-ASN1-0.18-3 perl-XML-LibXML-Common-0.13-7 perl-Convert-BinHex-1.119-2 perl-MailTools-1.66-1 perl-TimeDate-1.1301-3 perl-Bit-Vector-6.3-3 perl-RPM2-0.66-7 perl-5.8.5-9 perl-URI-1.30-4 perl-XML-Dumper-0.71-2 perl-Digest-SHA1-2.07-5 perl-XML-Twig-3.13-6 perl-Filter-Simple-0.79-4 perl-Cyrus-2.2.10-3.fc3 perl-DateManip-5.42a-3 perl-XML-Encoding-1.01-26 perl-XML-Grove-0.46alpha-27 perl-IO-stringy-2.110-1 perl-File-MMagic-1.21-2 perl-TermReadKey-2.20-17 perl-DBD-MySQL-2.9003-5 perl-XML-Parser-2.34-5 perl-Net-DNS-0.48-1 perl-Crypt-SSLeay-0.51-5 perl-NKF-2.04-3 perl-Archive-Tar-1.08-3 perl-Frontier-RPC-0.06-38 perl-Inline-0.44-14 perl-Filter-1.30-6 perl-DBI-1.40-5 perl-libxml-perl-0.07-30 perl-Digest-HMAC-1.01-13 perl-Parse-Yapp-1.05-32 perl-Date-Calc-5.3-9 perl-MIME-tools-5.417-1 perl-Text-Kakasi-1.05-11 perl-DBD-Pg-1.31-6 perl-Parse-RecDescent-1.94-4 perl-PDL-2.4.1-5 perl-libxml-enno-1.02-31 perl-XML-SAX-0.12-7 perl-SGMLSpm-1.03ii-14 perl-suidperl-5.8.5-9.1 [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl perl 5.8.5 i386 perl 5.8.5 x86_64 [root@skywalker framadmn]# which perl /usr/bin/perl [root@skywalker framadmn]# perl -v This is perl, v5.8.5 built for x86_64-linux-thread-multi Copyright 1987-2004, Larry Wall Perl may be copied only under the terms of either the Artistic License or the GNU General Public License, which may be found in the Perl 5 source kit. Complete documentation for Perl, including FAQ lists, should be found on this system using `man perl' or `perldoc perl'. If you have access to the Internet, point your browser at http://www.perl.com/, the Perl Home Page. [root@skywalker framadmn]# Julian Field wrote: I think it actually built stuff okay, but has calculated the architecture wrongly. Please can you send me the output of rpm -qi perl rpm -qa | grep '^perl' rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl which perl perl -v For some reason it is picking up both i386 and x86_64 as the architecture, when it should just be x86_64 (which is what RHEL4 returns). That bunch of commands should give me an idea what is happening. Kyle Krieg wrote: Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. Thanks for looking into this Julian. I've been using Mailscanner for 2 years now on a RH 8.0 machine with no issues. I've also show the following errors when using the install.sh script. Looks like to me, the install scripts it looking for packages in the i386x86_64 directory, which is not there. All the packages are in either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. There are two outputs below, the first from the rpmbuild -bc perl-Archive-Zip.spec and another from when I try and reinstall MailScanner from the install.sh script. I've cut out most of it and only given the errors that I think are important, but have the whole install log, if you would like it see it. Kyle ************************************************ -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kyle at MLUG.MISSOURI.EDU Sun Apr 3 20:21:29 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:13 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I used your new install.sh script, and looks like it had a small problem with perl-Archive-Zip. Here is the output from the install...it's only failing on this one package.... Attempting to build and install perl-Archive-Zip-1.14-1 Installing perl-Archive-Zip-1.14-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.38076 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Archive-Zip-1.14 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/Archive-Zip-1.14.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd Archive-Zip-1.14 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.38076 + umask 022 + cd /usr/src/redhat/BUILD + cd Archive-Zip-1.14 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-Archive-Zip-1.14-1-root/usr Checking if your kit is complete... Looks good Writing Makefile for Archive::Zip + make cp lib/Archive/Zip.pod blib/lib/Archive/Zip.pod cp lib/Archive/Zip/Tree.pm blib/lib/Archive/Zip/Tree.pm cp lib/Archive/Zip/FAQ.pod blib/lib/Archive/Zip/FAQ.pod cp lib/Archive/Zip.pm blib/lib/Archive/Zip.pm cp lib/Archive/Zip/MemberRead.pm blib/lib/Archive/Zip/MemberRead.pm cp lib/Archive/Zip/MockFileHandle.pm blib/lib/Archive/Zip/MockFileHandle.pm cp lib/Archive/Zip/BufferedFileHandle.pm blib/lib/Archive/Zip/BufferedFileHandle.pm cp crc32 blib/script/crc32 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/crc32 Manifying blib/man3/Archive::Zip::Tree.3pm Manifying blib/man3/Archive::Zip.3pm Manifying blib/man3/Archive::Zip::FAQ.3pm Manifying blib/man3/Archive::Zip::MemberRead.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t ok 2/123 t/test..............ok 7/1 t .........ok 14/123 t/test....... 21/123 t/test..............ok 26 .............ok 33/123 t/test... .ok 40/123 t/test..............o est..............ok 52/123 t/tes .....ok 59/123 t/test........... 23 t/test..............ok 71/123 t .........ok 78/123 t/test....... 85/123 t/test..............ok 90 .............ok 97/123 t/test. ......ok 104/123 t/test...... .ok 111/123 t/test........... 18/123 t/test..............ok t/test..............ok t/testex............NOK 1# Test 1 got: "256" (t/testex.t at line 37) # Expected: "0" # t/testex.t line 37 is: ok( runPerlCommand( 'examples/copy.pl', INPUTZIP, OUTPUTZIP ), 0 ); t/testex............NOK 2# Test 2 got: "256" (t/testex.t at line 39) # Expected: "0" # t/testex.t line 39 is: ok( runPerlCommand( 'examples/extract.pl', OUTPUTZIP, ZFILENAME ), 0 ); t/testex............NOK 3# Test 3 got: "256" (t/testex.t at line 41) # Expected: "0" # t/testex.t line 41 is: ok( runPerlCommand( 'examples/mfh.pl', INPUTZIP ), 0 ); t/testex............NOK 4# Test 4 got: "256" (t/testex.t at line 43) # Expected: "0" # t/testex.t line 43 is: ok( runPerlCommand( 'examples/zip.pl', OUTPUTZIP, INPUTZIP, FILENAME ), 0 ); t/testex............NOK 5# Test 5 got: "256" (t/testex.t at line 46) # Expected: "0" # t/testex.t line 46 is: ok( $status, 0 ); t/testex............NOK 6# Test 6 got: "256" (t/testex.t at line 51) # Expected: "0" # t/testex.t line 51 is: ok( $status, 0 ); t/testex............NOK 7# Test 7 got: "256" (t/testex.t at line 56) # Expected: "0" # t/testex.t line 56 is: ok( $status, 0 ); t/testex............NOK 8# Test 8 got: "" (t/testex.t at line 57) # Expected: "testdir/testing.txt:100\n" # t/testex.t line 57 is: ok( $output, ZFILENAME . ":100\n" ); t/testex............NOK 9# Test 9 got: "256" (t/testex.t at line 66) # Expected: "0" # t/testex.t line 66 is: ok( runPerlCommand( 'examples/selfex.pl', OUTPUTZIP, FILENAME ), 0 ); t/testex............NOK 10# Test 10 got: "256" (t/testex.t at line 68) # Expected: "0" # t/testex.t line 68 is: ok( runPerlCommand(OUTPUTZIP), 0 ); t/testex............NOK 11# Test 11 got: (t/testex.t at line 72) # Expected: "1" (extracted/testdir/testing.txt exists) # t/testex.t line 72 is: ok( -f $fn, 1, "$fn exists" ); t/testex............NOK 12# Test 12 got: "256" (t/testex.t at line 81) # Expected: "0" (updateTree.pl create) # t/testex.t line 81 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl create" ); t/testex............NOK 13# Test 13 got: (t/testex.t at line 82) # Expected: "1" (zip created) # t/testex.t line 82 is: ok( -f OUTPUTZIP, 1, "zip created" ); t/testex............NOK 14# Test 14 got: "256" (t/testex.t at line 83) # Expected: "0" (updateTree.pl update) # t/testex.t line 83 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl update" ); t/testex............NOK 15# Test 15 got: (t/testex.t at line 84) # Expected: "1" (zip updated) # t/testex.t line 84 is: ok( -f OUTPUTZIP, 1, "zip updated" ); t/testex............FAILED tests 1-15 Failed 15/15 tests, 0.00% okay /7 rRead....ok 7/7 t/testMemberRead....ok /6 t/testTree..........ok 2/12 stUpdate........ok 7/12 t/testUpdate t/testUpdate........ok Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/testex.t 15 15 100.00% 1-15 Failed 1/5 test scripts, 80.00% okay. 15/163 subtests failed, 90.80% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.38076 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.38076 (%build) Missing file /usr/src/redhat/RPMS/noarch/perl-Archive-Zip-1.14-1.noarch.rpm. Maybe it did not build correctly? Julian Field wrote: You have 2 packages installed both called "perl-5.8.5-9". Just 2 different architectures. That should break RPM :-( Please do rpm -ql perl | grep bin The install.sh script I just sent you works around this problem. Kyle Krieg wrote: Here is the output from the commands you asked for. My install was Fedora 3 base (full install) and the current yum updates. My yum updates are pointing to livna server. Thanks!! Kyle [root@skywalker framadmn]# rpm -qi perl Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 11:55:57 AM CDT Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: tweety.build.redh at.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 28442178 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. *MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be * MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. Name : perl Relocations: (not relocatable) Version : 5.8.5 Vendor: Red Hat, Inc. Release : 9 Build Date: Tue 12 Oct 2004 12:01:58 PM CDT Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: dolly.build.redha t.com Group : Development/Languages Source RPM: perl-5.8.5-9.src.rpm Size : 34190638 License: Artistic or GPL Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID b44269d04f2a6fd2 Packager : Red Hat, Inc. *MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be * MailScanner has detected a possible fraud attempt from "bugzilla.redhat.com" claiming to be URL : http://www.perl.org/ Summary : The Perl programming language. Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. [root@skywalker framadmn]# rpm -qa | grep '^perl' perl-LDAP-0.31-5 perl-Compress-Zlib-1.33-6 perl-Net-CIDR-0.10-1 perl-XML-NamespaceSupport-1.08-6 perl-XML-LibXML-1.58-1 perl-RPM-Specfile-1.17-2 perl-Convert-TNEF-0.17-3 perl-5.8.5-9 perl-libwww-perl-5.79-5 perl-Time-HiRes-1.55-3 perl-BSD-Resource-1.23-6 perl-HTML-Tagset-3.03-30 perl-Devel-Symdump-2.03-19 perl-HTML-Parser-3.35-6 perl-Convert-ASN1-0.18-3 perl-XML-LibXML-Common-0.13-7 perl-Convert-BinHex-1.119-2 perl-MailTools-1.66-1 perl-TimeDate-1.1301-3 perl-Bit-Vector-6.3-3 perl-RPM2-0.66-7 perl-5.8.5-9 perl-URI-1.30-4 perl-XML-Dumper-0.71-2 perl-Digest-SHA1-2.07-5 perl-XML-Twig-3.13-6 perl-Filter-Simple-0.79-4 perl-Cyrus-2.2.10-3.fc3 perl-DateManip-5.42a-3 perl-XML-Encoding-1.01-26 perl-XML-Grove-0.46alpha-27 perl-IO-stringy-2.110-1 perl-File-MMagic-1.21-2 perl-TermReadKey-2.20-17 perl-DBD-MySQL-2.9003-5 perl-XML-Parser-2.34-5 perl-Net-DNS-0.48-1 perl-Crypt-SSLeay-0.51-5 perl-NKF-2.04-3 perl-Archive-Tar-1.08-3 perl-Frontier-RPC-0.06-38 perl-Inline-0.44-14 perl-Filter-1.30-6 perl-DBI-1.40-5 perl-libxml-perl-0.07-30 perl-Digest-HMAC-1.01-13 perl-Parse-Yapp-1.05-32 perl-Date-Calc-5.3-9 perl-MIME-tools-5.417-1 perl-Text-Kakasi-1.05-11 perl-DBD-Pg-1.31-6 perl-Parse-RecDescent-1.94-4 perl-PDL-2.4.1-5 perl-libxml-enno-1.02-31 perl-XML-SAX-0.12-7 perl-SGMLSpm-1.03ii-14 perl-suidperl-5.8.5-9.1 [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl perl 5.8.5 i386 perl 5.8.5 x86_64 [root@skywalker framadmn]# which perl /usr/bin/perl [root@skywalker framadmn]# perl -v This is perl, v5.8.5 built for x86_64-linux-thread-multi Copyright 1987-2004, Larry Wall Perl may be copied only under the terms of either the Artistic License or the GNU General Public License, which may be found in the Perl 5 source kit. Complete documentation for Perl, including FAQ lists, should be found on this system using `man perl' or `perldoc perl'. If you have access to the Internet, point your browser at http://www.perl.com/, the Perl Home Page. [root@skywalker framadmn]# Julian Field wrote: I think it actually built stuff okay, but has calculated the architecture wrongly. Please can you send me the output of rpm -qi perl rpm -qa | grep '^perl' rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl which perl perl -v For some reason it is picking up both i386 and x86_64 as the architecture, when it should just be x86_64 (which is what RHEL4 returns). That bunch of commands should give me an idea what is happening. Kyle Krieg wrote: Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. Thanks for looking into this Julian. I've been using Mailscanner for 2 years now on a RH 8.0 machine with no issues. I've also show the following errors when using the install.sh script. Looks like to me, the install scripts it looking for packages in the i386x86_64 directory, which is not there. All the packages are in either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. There are two outputs below, the first from the rpmbuild -bc perl-Archive-Zip.spec and another from when I try and reinstall MailScanner from the install.sh script. I've cut out most of it and only given the errors that I think are important, but have the whole install log, if you would like it see it. Kyle ************************************************ -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 20:35:19 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] It is probably having trouble with Compress-Zlib. Try uninstalling perl-Compress-Zlib (rpm -e perl-Compress-Zlib) and then running install.sh again. perl-Archive-Zip itself doesn't do anything platform-dependent I think, it's Compress-Zlib that does the hard work. Kyle Krieg wrote: > I used your new install.sh script, and looks like it had a small > problem with perl-Archive-Zip. Here is the output from the > install...it's only failing on this one package.... > > > Julian Field wrote: > >> You have 2 packages installed both called "perl-5.8.5-9". Just 2 >> different architectures. >> That should break RPM :-( >> >> Please do >> >> rpm -ql perl | grep bin >> >> The install.sh script I just sent you works around this problem. >> >> >> Kyle Krieg wrote: >> >>> Here is the output from the commands you asked for. My install was >>> Fedora 3 base (full install) and the current yum updates. My yum >>> updates are pointing to livna server. >>> >>> Thanks!! >>> >>> Kyle >>> >>> >>> [root@skywalker framadmn]# rpm -qi perl >>> Name : perl Relocations: (not >>> relocatable) >>> Version : 5.8.5 Vendor: Red Hat, Inc. >>> Release : 9 Build Date: Tue 12 Oct >>> 2004 11:55:57 AM CDT >>> Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: >>> tweety.build.redh at.com >>> Group : Development/Languages Source RPM: >>> perl-5.8.5-9.src.rpm >>> Size : 28442178 License: Artistic or GPL >>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID >>> b44269d04f2a6fd2 >>> Packager : Red Hat, Inc. *MailScanner has detected a possible fraud >>> attempt from "bugzilla.redhat.com" claiming to be * >>> *MailScanner has detected a possible fraud attempt from >>> "bugzilla.redhat.com" claiming to be * >>> >>> URL : http://www.perl.org/ >>> Summary : The Perl programming language. >>> Description : >>> Perl is a high-level programming language with roots in C, sed, awk >>> and shell scripting. Perl is good at handling processes and files, >>> and is especially good at handling text. Perl's hallmarks are >>> practicality and efficiency. While it is used to do a lot of >>> different things, Perl's most common applications are system >>> administration utilities and web programming. A large proportion of >>> the CGI scripts on the web are written in Perl. You need the perl >>> package installed on your system so that your system can handle Perl >>> scripts. >>> >>> Install this package if you want to program in Perl or enable your >>> system to handle Perl scripts. >>> Name : perl Relocations: (not >>> relocatable) >>> Version : 5.8.5 Vendor: Red Hat, Inc. >>> Release : 9 Build Date: Tue 12 Oct >>> 2004 12:01:58 PM CDT >>> Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: >>> dolly.build.redha t.com >>> Group : Development/Languages Source RPM: >>> perl-5.8.5-9.src.rpm >>> Size : 34190638 License: Artistic or GPL >>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID >>> b44269d04f2a6fd2 >>> Packager : Red Hat, Inc. *MailScanner has detected a possible fraud >>> attempt from "bugzilla.redhat.com" claiming to be * >>> *MailScanner has detected a possible fraud attempt from >>> "bugzilla.redhat.com" claiming to be * >>> >>> URL : http://www.perl.org/ >>> Summary : The Perl programming language. >>> Description : >>> Perl is a high-level programming language with roots in C, sed, awk >>> and shell scripting. Perl is good at handling processes and files, >>> and is especially good at handling text. Perl's hallmarks are >>> practicality and efficiency. While it is used to do a lot of >>> different things, Perl's most common applications are system >>> administration utilities and web programming. A large proportion of >>> the CGI scripts on the web are written in Perl. You need the perl >>> package installed on your system so that your system can handle Perl >>> scripts. >>> >>> Install this package if you want to program in Perl or enable your >>> system to handle Perl scripts. >>> [root@skywalker framadmn]# rpm -qa | grep '^perl' >>> perl-LDAP-0.31-5 >>> perl-Compress-Zlib-1.33-6 >>> perl-Net-CIDR-0.10-1 >>> perl-XML-NamespaceSupport-1.08-6 >>> perl-XML-LibXML-1.58-1 >>> perl-RPM-Specfile-1.17-2 >>> perl-Convert-TNEF-0.17-3 >>> perl-5.8.5-9 >>> perl-libwww-perl-5.79-5 >>> perl-Time-HiRes-1.55-3 >>> perl-BSD-Resource-1.23-6 >>> perl-HTML-Tagset-3.03-30 >>> perl-Devel-Symdump-2.03-19 >>> perl-HTML-Parser-3.35-6 >>> perl-Convert-ASN1-0.18-3 >>> perl-XML-LibXML-Common-0.13-7 >>> perl-Convert-BinHex-1.119-2 >>> perl-MailTools-1.66-1 >>> perl-TimeDate-1.1301-3 >>> perl-Bit-Vector-6.3-3 >>> perl-RPM2-0.66-7 >>> perl-5.8.5-9 >>> perl-URI-1.30-4 >>> perl-XML-Dumper-0.71-2 >>> perl-Digest-SHA1-2.07-5 >>> perl-XML-Twig-3.13-6 >>> perl-Filter-Simple-0.79-4 >>> perl-Cyrus-2.2.10-3.fc3 >>> perl-DateManip-5.42a-3 >>> perl-XML-Encoding-1.01-26 >>> perl-XML-Grove-0.46alpha-27 >>> perl-IO-stringy-2.110-1 >>> perl-File-MMagic-1.21-2 >>> perl-TermReadKey-2.20-17 >>> perl-DBD-MySQL-2.9003-5 >>> perl-XML-Parser-2.34-5 >>> perl-Net-DNS-0.48-1 >>> perl-Crypt-SSLeay-0.51-5 >>> perl-NKF-2.04-3 >>> perl-Archive-Tar-1.08-3 >>> perl-Frontier-RPC-0.06-38 >>> perl-Inline-0.44-14 >>> perl-Filter-1.30-6 >>> perl-DBI-1.40-5 >>> perl-libxml-perl-0.07-30 >>> perl-Digest-HMAC-1.01-13 >>> perl-Parse-Yapp-1.05-32 >>> perl-Date-Calc-5.3-9 >>> perl-MIME-tools-5.417-1 >>> perl-Text-Kakasi-1.05-11 >>> perl-DBD-Pg-1.31-6 >>> perl-Parse-RecDescent-1.94-4 >>> perl-PDL-2.4.1-5 >>> perl-libxml-enno-1.02-31 >>> perl-XML-SAX-0.12-7 >>> perl-SGMLSpm-1.03ii-14 >>> perl-suidperl-5.8.5-9.1 >>> [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} >>> %{ARCH}\n' perl >>> perl 5.8.5 i386 >>> perl 5.8.5 x86_64 >>> [root@skywalker framadmn]# which perl >>> /usr/bin/perl >>> [root@skywalker framadmn]# perl -v >>> >>> This is perl, v5.8.5 built for x86_64-linux-thread-multi >>> >>> Copyright 1987-2004, Larry Wall >>> >>> Perl may be copied only under the terms of either the Artistic License >>> or the >>> GNU General Public License, which may be found in the Perl 5 source >>> kit. >>> >>> Complete documentation for Perl, including FAQ lists, should be >>> found on >>> this system using `man perl' or `perldoc perl'. If you have access >>> to the >>> Internet, point your browser at http://www.perl.com/, the Perl Home >>> Page. >>> >>> [root@skywalker framadmn]# >>> >>> >>> >>> Julian Field wrote: >>> >>>> I think it actually built stuff okay, but has calculated the >>>> architecture wrongly. >>>> Please can you send me the output of >>>> rpm -qi perl >>>> rpm -qa | grep '^perl' >>>> rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl >>>> which perl >>>> perl -v >>>> >>>> For some reason it is picking up both i386 and x86_64 as the >>>> architecture, when it should just be x86_64 (which is what RHEL4 >>>> returns). >>>> >>>> That bunch of commands should give me an idea what is happening. >>>> >>>> Kyle Krieg wrote: >>>> >>>>> Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. >>>>> Thanks for looking into this Julian. I've been using Mailscanner for >>>>> 2 years now on a RH 8.0 machine with no issues. >>>>> >>>>> I've also show the following errors when using the install.sh script. >>>>> Looks like to me, the install scripts it looking for packages in the >>>>> i386x86_64 directory, which is not there. All the packages are in >>>>> either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or >>>>> /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. >>>>> >>>>> There are two outputs below, the first from the rpmbuild -bc >>>>> perl-Archive-Zip.spec and another from when I try and reinstall >>>>> MailScanner from the install.sh script. I've cut out most of it and >>>>> only given the errors that I think are important, but have the whole >>>>> install log, if you would like it see it. >>>>> >>>>> Kyle >>>>> >>>>> ************************************************ >>>> >>>> >>>> >>>> >>>> -- >>>> Julian Field >>>> www.MailScanner.info >>>> Buy the MailScanner book at www.MailScanner.info/store >>>> Professional Support Services at www.MailScanner.biz >>>> MailScanner thanks transtec Computers for their support >>>> >>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>>> >>>> ------------------------ MailScanner list ------------------------ >>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>> 'leave mailscanner' in the body of the email. >>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>> >>>> Support MailScanner development - buy the book off the website! >>> >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >>> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> *Support MailScanner development - buy the book off the website!* >> >> >> >> -- >> Julian Field >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> Professional Support Services at www.MailScanner.biz >> MailScanner thanks transtec Computers for their support >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From lists at JANSZ.COM Sun Apr 3 21:13:59 2005 From: lists at JANSZ.COM (Menno Jansz) Date: Thu Jan 12 21:29:14 2006 Subject: Mail loss after upgrading to 4.40.11-1 due to missing .rules suffix Message-ID: Just upgraded an old version of SpamAssassin to the latest stable 4.40.11-1 The config file between this version and the old version I was installing from had changed the ""Spam Actions", "High Scoring Spam Actions", and associated items to now enforce a .rule or .rules suffix. Not having the suffix causes the mail to be "lost", no error and causes output in the log file of the action as being the filename converted to lower case (thus very confusing). Only after some code debugging did I spot the change, if only I had spotted the comment in the config file :) May be worth highlighting this in the upgrade_MailScanner_conf script so others dont make the same mistake. Cheers, Menno ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Sun Apr 3 21:38:50 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Mail loss after upgrading to 4.40.11-1 due to missing .rules suffix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Thanks for highlighting that. I try to encourage people to always use a .rule or .rules filename suffix, but it's definitely one for the FAQ. It is probably adding a header called that, or trying to forward to that as an email address. The upgrade_MailScanner_conf script knows nothing about the contents of the options or the versions it is upgrading from or to, so adding any checks in there is pretty much impossible. Menno Jansz wrote: >Just upgraded an old version of SpamAssassin to the latest stable 4.40.11-1 > >The config file between this version and the old version I was installing >from had changed the ""Spam Actions", "High Scoring Spam Actions", and >associated items to now enforce a .rule or .rules suffix. Not having the >suffix causes the mail to be "lost", no error and causes output in the log >file of the action as being the filename converted to lower case (thus very >confusing). Only after some code debugging did I spot the change, if only I >had spotted the comment in the config file :) > >May be worth highlighting this in the upgrade_MailScanner_conf script so >others dont make the same mistake. > >Cheers, >Menno > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Sun Apr 3 22:58:39 2005 From: pete at ENITECH.COM.AU (Peter Russell) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Raymon Dijkxhoorn have provided alternate zlib that work fine on FC3 and RHEL4 (i pasted some of his post in below) - these were required to compile clamav (which i guess we were all doing before installing MS and therefore didnt have this problem) Is there any reason you would use FC3 over CentOS 4 for a mailscanner machine? http://mailscanner.prolocation.net/ Or the direct links: http://mailscanner.prolocation.net/zlib/zlib-1.2.2.2-1.i386.rpm http://mailscanner.prolocation.net/zlib/zlib-devel-1.2.2.2-1.i386.rpm Julian Field wrote: > It is probably having trouble with Compress-Zlib. Try uninstalling > perl-Compress-Zlib (rpm -e perl-Compress-Zlib) and then running > install.sh again. > > perl-Archive-Zip itself doesn't do anything platform-dependent I think, > it's Compress-Zlib that does the hard work. > > Kyle Krieg wrote: > >> I used your new install.sh script, and looks like it had a small >> problem with perl-Archive-Zip. Here is the output from the >> install...it's only failing on this one package.... >> >> >> Julian Field wrote: >> >>> You have 2 packages installed both called "perl-5.8.5-9". Just 2 >>> different architectures. >>> That should break RPM :-( >>> >>> Please do >>> >>> rpm -ql perl | grep bin >>> >>> The install.sh script I just sent you works around this problem. >>> >>> >>> Kyle Krieg wrote: >>> >>>> Here is the output from the commands you asked for. My install was >>>> Fedora 3 base (full install) and the current yum updates. My yum >>>> updates are pointing to livna server. >>>> >>>> Thanks!! >>>> >>>> Kyle >>>> >>>> >>>> [root@skywalker framadmn]# rpm -qi perl >>>> Name : perl Relocations: (not >>>> relocatable) >>>> Version : 5.8.5 Vendor: Red Hat, Inc. >>>> Release : 9 Build Date: Tue 12 Oct >>>> 2004 11:55:57 AM CDT >>>> Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: >>>> tweety.build.redh at.com >>>> Group : Development/Languages Source RPM: >>>> perl-5.8.5-9.src.rpm >>>> Size : 28442178 License: Artistic or GPL >>>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID >>>> b44269d04f2a6fd2 >>>> Packager : Red Hat, Inc. *MailScanner has detected a possible fraud >>>> attempt from "bugzilla.redhat.com" claiming to be * >>>> *MailScanner has detected a possible fraud attempt from >>>> "bugzilla.redhat.com" claiming to be * >>>> >>>> URL : http://www.perl.org/ >>>> Summary : The Perl programming language. >>>> Description : >>>> Perl is a high-level programming language with roots in C, sed, awk >>>> and shell scripting. Perl is good at handling processes and files, >>>> and is especially good at handling text. Perl's hallmarks are >>>> practicality and efficiency. While it is used to do a lot of >>>> different things, Perl's most common applications are system >>>> administration utilities and web programming. A large proportion of >>>> the CGI scripts on the web are written in Perl. You need the perl >>>> package installed on your system so that your system can handle Perl >>>> scripts. >>>> >>>> Install this package if you want to program in Perl or enable your >>>> system to handle Perl scripts. >>>> Name : perl Relocations: (not >>>> relocatable) >>>> Version : 5.8.5 Vendor: Red Hat, Inc. >>>> Release : 9 Build Date: Tue 12 Oct >>>> 2004 12:01:58 PM CDT >>>> Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: >>>> dolly.build.redha t.com >>>> Group : Development/Languages Source RPM: >>>> perl-5.8.5-9.src.rpm >>>> Size : 34190638 License: Artistic or GPL >>>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID >>>> b44269d04f2a6fd2 >>>> Packager : Red Hat, Inc. *MailScanner has detected a possible fraud >>>> attempt from "bugzilla.redhat.com" claiming to be * >>>> *MailScanner has detected a possible fraud attempt from >>>> "bugzilla.redhat.com" claiming to be * >>>> >>>> URL : http://www.perl.org/ >>>> Summary : The Perl programming language. >>>> Description : >>>> Perl is a high-level programming language with roots in C, sed, awk >>>> and shell scripting. Perl is good at handling processes and files, >>>> and is especially good at handling text. Perl's hallmarks are >>>> practicality and efficiency. While it is used to do a lot of >>>> different things, Perl's most common applications are system >>>> administration utilities and web programming. A large proportion of >>>> the CGI scripts on the web are written in Perl. You need the perl >>>> package installed on your system so that your system can handle Perl >>>> scripts. >>>> >>>> Install this package if you want to program in Perl or enable your >>>> system to handle Perl scripts. >>>> [root@skywalker framadmn]# rpm -qa | grep '^perl' >>>> perl-LDAP-0.31-5 >>>> perl-Compress-Zlib-1.33-6 >>>> perl-Net-CIDR-0.10-1 >>>> perl-XML-NamespaceSupport-1.08-6 >>>> perl-XML-LibXML-1.58-1 >>>> perl-RPM-Specfile-1.17-2 >>>> perl-Convert-TNEF-0.17-3 >>>> perl-5.8.5-9 >>>> perl-libwww-perl-5.79-5 >>>> perl-Time-HiRes-1.55-3 >>>> perl-BSD-Resource-1.23-6 >>>> perl-HTML-Tagset-3.03-30 >>>> perl-Devel-Symdump-2.03-19 >>>> perl-HTML-Parser-3.35-6 >>>> perl-Convert-ASN1-0.18-3 >>>> perl-XML-LibXML-Common-0.13-7 >>>> perl-Convert-BinHex-1.119-2 >>>> perl-MailTools-1.66-1 >>>> perl-TimeDate-1.1301-3 >>>> perl-Bit-Vector-6.3-3 >>>> perl-RPM2-0.66-7 >>>> perl-5.8.5-9 >>>> perl-URI-1.30-4 >>>> perl-XML-Dumper-0.71-2 >>>> perl-Digest-SHA1-2.07-5 >>>> perl-XML-Twig-3.13-6 >>>> perl-Filter-Simple-0.79-4 >>>> perl-Cyrus-2.2.10-3.fc3 >>>> perl-DateManip-5.42a-3 >>>> perl-XML-Encoding-1.01-26 >>>> perl-XML-Grove-0.46alpha-27 >>>> perl-IO-stringy-2.110-1 >>>> perl-File-MMagic-1.21-2 >>>> perl-TermReadKey-2.20-17 >>>> perl-DBD-MySQL-2.9003-5 >>>> perl-XML-Parser-2.34-5 >>>> perl-Net-DNS-0.48-1 >>>> perl-Crypt-SSLeay-0.51-5 >>>> perl-NKF-2.04-3 >>>> perl-Archive-Tar-1.08-3 >>>> perl-Frontier-RPC-0.06-38 >>>> perl-Inline-0.44-14 >>>> perl-Filter-1.30-6 >>>> perl-DBI-1.40-5 >>>> perl-libxml-perl-0.07-30 >>>> perl-Digest-HMAC-1.01-13 >>>> perl-Parse-Yapp-1.05-32 >>>> perl-Date-Calc-5.3-9 >>>> perl-MIME-tools-5.417-1 >>>> perl-Text-Kakasi-1.05-11 >>>> perl-DBD-Pg-1.31-6 >>>> perl-Parse-RecDescent-1.94-4 >>>> perl-PDL-2.4.1-5 >>>> perl-libxml-enno-1.02-31 >>>> perl-XML-SAX-0.12-7 >>>> perl-SGMLSpm-1.03ii-14 >>>> perl-suidperl-5.8.5-9.1 >>>> [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} >>>> %{ARCH}\n' perl >>>> perl 5.8.5 i386 >>>> perl 5.8.5 x86_64 >>>> [root@skywalker framadmn]# which perl >>>> /usr/bin/perl >>>> [root@skywalker framadmn]# perl -v >>>> >>>> This is perl, v5.8.5 built for x86_64-linux-thread-multi >>>> >>>> Copyright 1987-2004, Larry Wall >>>> >>>> Perl may be copied only under the terms of either the Artistic License >>>> or the >>>> GNU General Public License, which may be found in the Perl 5 source >>>> kit. >>>> >>>> Complete documentation for Perl, including FAQ lists, should be >>>> found on >>>> this system using `man perl' or `perldoc perl'. If you have access >>>> to the >>>> Internet, point your browser at http://www.perl.com/, the Perl Home >>>> Page. >>>> >>>> [root@skywalker framadmn]# >>>> >>>> >>>> >>>> Julian Field wrote: >>>> >>>>> I think it actually built stuff okay, but has calculated the >>>>> architecture wrongly. >>>>> Please can you send me the output of >>>>> rpm -qi perl >>>>> rpm -qa | grep '^perl' >>>>> rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl >>>>> which perl >>>>> perl -v >>>>> >>>>> For some reason it is picking up both i386 and x86_64 as the >>>>> architecture, when it should just be x86_64 (which is what RHEL4 >>>>> returns). >>>>> >>>>> That bunch of commands should give me an idea what is happening. >>>>> >>>>> Kyle Krieg wrote: >>>>> >>>>>> Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. >>>>>> Thanks for looking into this Julian. I've been using Mailscanner for >>>>>> 2 years now on a RH 8.0 machine with no issues. >>>>>> >>>>>> I've also show the following errors when using the install.sh script. >>>>>> Looks like to me, the install scripts it looking for packages in the >>>>>> i386x86_64 directory, which is not there. All the packages are in >>>>>> either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or >>>>>> /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. >>>>>> >>>>>> There are two outputs below, the first from the rpmbuild -bc >>>>>> perl-Archive-Zip.spec and another from when I try and reinstall >>>>>> MailScanner from the install.sh script. I've cut out most of it and >>>>>> only given the errors that I think are important, but have the whole >>>>>> install log, if you would like it see it. >>>>>> >>>>>> Kyle >>>>>> >>>>>> ************************************************ >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> Julian Field >>>>> www.MailScanner.info >>>>> Buy the MailScanner book at www.MailScanner.info/store >>>>> Professional Support Services at www.MailScanner.biz >>>>> MailScanner thanks transtec Computers for their support >>>>> >>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>>>> >>>>> ------------------------ MailScanner list ------------------------ >>>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>>> 'leave mailscanner' in the body of the email. >>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>>> >>>> ------------------------ MailScanner list ------------------------ >>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>> 'leave mailscanner' in the body of the email. >>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >>>> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>> >>>> *Support MailScanner development - buy the book off the website!* >>> >>> >>> >>> >>> -- >>> Julian Field >>> www.MailScanner.info >>> Buy the MailScanner book at www.MailScanner.info/store >>> Professional Support Services at www.MailScanner.biz >>> MailScanner thanks transtec Computers for their support >>> >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> Support MailScanner development - buy the book off the website! >> >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> *Support MailScanner development - buy the book off the website!* > > > > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From smf at F2S.COM Mon Apr 4 00:28:35 2005 From: smf at F2S.COM (Steve Freegard) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: Hi All, Is is possible to store archived mail (Archive Mail = /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue files?? Cheers, Steve ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ius at ALPHA.RBRANA.CO.ID Mon Apr 4 02:43:51 2005 From: ius at ALPHA.RBRANA.CO.ID (ius) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, good morning i was surfing in my maillog this morning, i found this spamassassin timed out. As i remembered i didn't do anything to my machine lately. Can anybody tell me what's wrong w/ my spamassassin ? tail -f /var/log/maillog |grep MailScanner Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 messages, 14123 bytes Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 messages waiting Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 messages, 5843 bytes Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content Scanning: Starting Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out and was killed, failure 10 of 20 Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content Scanning: Starting Thanks a lot ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 08:59:21 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steve, What are you doing here? You are a rare sight on this list! :-) Good to see you. Create an empty file for it to fill, then provide the full path of that file in Archive Mail (not just the directory it is in). Steve Freegard wrote: >Hi All, > >Is is possible to store archived mail (Archive Mail >= /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue >files?? > >Cheers, >Steve > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Mon Apr 4 09:08:16 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: Steve and of course you'll have to manage the file yourself, ie weekly/daily/.. stop MS, archive/compress the file, touch the file to create a new file, and restart MS. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Julian Field wrote: > Steve, > > What are you doing here? You are a rare sight on this list! > :-) > Good to see you. > > Create an empty file for it to fill, then provide the full path of that > file in Archive Mail (not just the directory it is in). > > Steve Freegard wrote: > >> Hi All, >> >> Is is possible to store archived mail (Archive Mail >> = /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue >> files?? >> >> Cheers, >> Steve >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Mon Apr 4 09:09:50 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: Ius What version of SA and MS? also any RBL's in the SA config and any extra rules in /etc/mail/spamassassin? what does "spamassassin -p /spam.assassin.prefs.conf -D --lint" give you? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ius wrote: > Hello, good morning > > i was surfing in my maillog this morning, i found this spamassassin > timed out. As i remembered i didn't do anything to my machine lately. > Can anybody tell me what's wrong w/ my spamassassin ? > > tail -f /var/log/maillog |grep MailScanner > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 messages, > 14123 bytes > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 messages > waiting > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 messages, > 5843 bytes > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content Scanning: > Starting > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out and was > killed, failure 10 of 20 > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content Scanning: > Starting > > Thanks a lot > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 09:16:39 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] But you can insert _DATE_ in it. To quote from MailScanner.conf: # Any of the items above can contain the magic string _DATE_ in them # which will be replaced with the current date in yyyymmdd format. # This will make archive-rolling and maintenance much easier, as you can # guarantee that yesterday's mail archive will not be in active use today. Martin Hepworth wrote: > Steve > > and of course you'll have to manage the file yourself, ie > weekly/daily/.. stop MS, archive/compress the file, touch the file to > create a new file, and restart MS. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > Julian Field wrote: > >> Steve, >> >> What are you doing here? You are a rare sight on this list! >> :-) >> Good to see you. >> >> Create an empty file for it to fill, then provide the full path of that >> file in Archive Mail (not just the directory it is in). >> >> Steve Freegard wrote: >> >>> Hi All, >>> >>> Is is possible to store archived mail (Archive Mail >>> = /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue >>> files?? >>> >>> Cheers, >>> Steve >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >> >> -- >> Julian Field >> www.MailScanner.info >> MailScanner thanks transtec Computers for their support >> Buy the MailScanner book at www.MailScanner.info/store >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! > > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Mon Apr 4 09:26:07 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: aha I knew Julian would have thought of this along the way - I'll get mi coat ;-) Goes off to try 4.40-11 -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Julian Field wrote: > But you can insert _DATE_ in it. To quote from MailScanner.conf: > > # Any of the items above can contain the magic string _DATE_ in them > # which will be replaced with the current date in yyyymmdd format. > # This will make archive-rolling and maintenance much easier, as you can > # guarantee that yesterday's mail archive will not be in active use today. > > > Martin Hepworth wrote: > >> Steve >> >> and of course you'll have to manage the file yourself, ie >> weekly/daily/.. stop MS, archive/compress the file, touch the file to >> create a new file, and restart MS. >> >> -- >> Martin Hepworth >> Snr Systems Administrator >> Solid State Logic >> Tel: +44 (0)1865 842300 >> >> >> Julian Field wrote: >> >>> Steve, >>> >>> What are you doing here? You are a rare sight on this list! >>> :-) >>> Good to see you. >>> >>> Create an empty file for it to fill, then provide the full path of that >>> file in Archive Mail (not just the directory it is in). >>> >>> Steve Freegard wrote: >>> >>>> Hi All, >>>> >>>> Is is possible to store archived mail (Archive Mail >>>> = /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue >>>> files?? >>>> >>>> Cheers, >>>> Steve >>>> >>>> ------------------------ MailScanner list ------------------------ >>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>> 'leave mailscanner' in the body of the email. >>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>>> >>> >>> -- >>> Julian Field >>> www.MailScanner.info >>> MailScanner thanks transtec Computers for their support >>> Buy the MailScanner book at www.MailScanner.info/store >>> >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> Support MailScanner development - buy the book off the website! >> >> >> >> ********************************************************************** >> >> This email and any files transmitted with it are confidential and >> intended solely for the use of the individual or entity to whom they >> are addressed. If you have received this email in error please notify >> the system manager. >> >> This footnote confirms that this email message has been swept >> for the presence of computer viruses and is believed to be clean. >> >> ********************************************************************** >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From shb at WIDEAREA.CO.UK Mon Apr 4 09:29:15 2005 From: shb at WIDEAREA.CO.UK (Simon Brock) Date: Thu Jan 12 21:29:14 2006 Subject: SA 3.0.2 and MySQL Message-ID: >Actually with SA 3.0.2 using MySQL has fewer problems, according to the >dev list for it. It seems to rock along too. I have been meaning to look into this myself but I was wondering if MySQL could be used to store a shared Bayes DB? We have a number of MailScanner installations here set up for different reasons and different clients. I was wondering if we used MySQL for the Bayes DB we could share learnt results between machines. Anyone tried that -- with or without MySQL? Regards, Simon. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Mon Apr 4 10:03:53 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: SA 3.0.2 and MySQL Message-ID: Simon I've heard of people doing this on the SA-users list, but I can't remember if anyone has proclaimed to be doing mysql bayes on this list. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Simon Brock wrote: >> Actually with SA 3.0.2 using MySQL has fewer problems, according to the >> dev list for it. It seems to rock along too. > > > I have been meaning to look into this myself but I was wondering if > MySQL could be used to store a shared Bayes DB? > > We have a number of MailScanner installations here set up for > different reasons and different clients. I was wondering if we used > MySQL for the Bayes DB we could share learnt results between > machines. Anyone tried that -- with or without MySQL? > > Regards, > Simon. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From adrik at SALESMANAGER.NL Mon Apr 4 10:39:36 2005 From: adrik at SALESMANAGER.NL (Adri Koppes) Date: Thu Jan 12 21:29:14 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Simon, I'm running MS 4.39.6 and SA 3.02 on a single server with the bayes and awl stored in MySql 4.1.10a. This works fine and I believe one of the design goals was to enable bayes+awl sharing between multiple servers. I haven't tried using multiple servers myself, but I think it should be no problem. Adri. > -----Original Message----- > From: Martin Hepworth [mailto:martinh@SOLID-STATE-LOGIC.COM] > Sent: 04 April, 2005 11:04 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: SA 3.0.2 and MySQL > > > Simon > > I've heard of people doing this on the SA-users list, but I can't > remember if anyone has proclaimed to be doing mysql bayes on > this list. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > Simon Brock wrote: > >> Actually with SA 3.0.2 using MySQL has fewer problems, > according to the > >> dev list for it. It seems to rock along too. > > > > > > I have been meaning to look into this myself but I was wondering if > > MySQL could be used to store a shared Bayes DB? > > > > We have a number of MailScanner installations here set up for > > different reasons and different clients. I was wondering if we used > > MySQL for the Bayes DB we could share learnt results between > > machines. Anyone tried that -- with or without MySQL? > > > > Regards, > > Simon. > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Mon Apr 4 12:50:06 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:14 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Simon Brock wrote: >> Actually with SA 3.0.2 using MySQL has fewer problems, according to the >> dev list for it. It seems to rock along too. > > > I have been meaning to look into this myself but I was wondering if > MySQL could be used to store a shared Bayes DB? > > We have a number of MailScanner installations here set up for > different reasons and different clients. I was wondering if we used > MySQL for the Bayes DB we could share learnt results between > machines. Anyone tried that -- with or without MySQL? > > Regards, > Simon. > We've been using it servicewide (for multiple servers, domains and customers) and it is working as expected.. we use blacklist / whitelists to override any specific requests from customers (rather than having different DBs) The migration to MySQL was simple enough, and speed has never been as issue. Also now I have a dedicated server doing just that (and mailwatch) for 3 (and growing) front-end MS servers. Only once in the last 4-5 months has the database stopped responding (the reason is yet unknown). The db size as of now is ~450MB (including data and indexes) and continues to grow, daily volume being in excess of 80K mails. Check the sa-users and sa-dev lists for more information. - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Mon Apr 4 14:24:19 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:14 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Dhawal Doshy wrote: > Simon Brock wrote: > >>> Actually with SA 3.0.2 using MySQL has fewer problems, according to the >>> dev list for it. It seems to rock along too. >> >> >> >> I have been meaning to look into this myself but I was wondering if >> MySQL could be used to store a shared Bayes DB? >> >> We have a number of MailScanner installations here set up for >> different reasons and different clients. I was wondering if we used >> MySQL for the Bayes DB we could share learnt results between >> machines. Anyone tried that -- with or without MySQL? >> >> Regards, >> Simon. >> > > We've been using it servicewide (for multiple servers, domains and > customers) and it is working as expected.. we use blacklist / whitelists > to override any specific requests from customers (rather than having > different DBs) > > The migration to MySQL was simple enough, and speed has never been as > issue. Also now I have a dedicated server doing just that (and > mailwatch) for 3 (and growing) front-end MS servers. Only once in the > last 4-5 months has the database stopped responding (the reason is yet > unknown). The db size as of now is ~450MB (including data and indexes) > and continues to grow, daily volume being in excess of 80K mails. > > Check the sa-users and sa-dev lists for more information. > > - dhawal Mmm that sounds like a treat. Would make a great addition to the new wiki documentation project. Care to write a guide and post it up? > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From devonharding at gmail.com Mon Apr 4 15:16:56 2005 From: devonharding at gmail.com (Devon Harding) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Welcome to tha club buddy. What are your machine specs? On Apr 4, 2005 4:09 AM, Martin Hepworth wrote: Ius What version of SA and MS? also any RBL's in the SA config and any extra rules in /etc/mail/spamassassin? what does "spamassassin -p /spam.assassin.prefs.conf -D --lint" give you? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ius wrote: > Hello, good morning > > i was surfing in my maillog this morning, i found this spamassassin > timed out. As i remembered i didn't do anything to my machine lately. > Can anybody tell me what's wrong w/ my spamassassin ? > > tail -f /var/log/maillog |grep MailScanner > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 messages, > 14123 bytes > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 messages > waiting > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 messages, > 5843 bytes > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content Scanning: > Starting > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out and was > killed, failure 10 of 20 > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content Scanning: > Starting > > Thanks a lot > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From joakim at CEFALK.COM Mon Apr 4 15:26:56 2005 From: joakim at CEFALK.COM (Joakim Cefalk) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I have the same problem earlier, try this, It works for me. # If you are using the Bayesian statistics engine on a busy server, # you may well need to force a Bayesian database rebuild and expiry # at regular intervals. This is measures in seconds. # 1 day = 86400 seconds. # To disable this feature set this to 0. Rebuild Bayes Every = 0 # The Bayesian database rebuild and expiry may take a 2 or 3 minutes # to complete. During this time you can either wait, or simply # disable SpamAssassin checks until it has completed. Wait During Bayes Rebuild = no Devon Harding wrote: > Welcome to tha club buddy. What are your machine specs? > > On Apr 4, 2005 4:09 AM, *Martin Hepworth* > > > wrote: > > Ius > > What version of SA and MS? > > also any RBL's in the SA config and any extra rules in > /etc/mail/spamassassin? > > what does "spamassassin -p /spam.assassin.prefs.conf -D > --lint" > give you? > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > ius wrote: > > Hello, good morning > > > > i was surfing in my maillog this morning, i found this spamassassin > > timed out. As i remembered i didn't do anything to my machine > lately. > > Can anybody tell me what's wrong w/ my spamassassin ? > > > > tail -f /var/log/maillog |grep MailScanner > > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 > messages, > > 14123 bytes > > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 messages > > waiting > > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 > messages, > > 5843 bytes > > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content Scanning: > > Starting > > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out > and was > > killed, failure 10 of 20 > > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content Scanning: > > Starting > > > > Thanks a lot > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk > with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk > with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From JHuber at MICROSOURCE.COM Mon Apr 4 16:34:28 2005 From: JHuber at MICROSOURCE.COM (Jeremy Huber) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: How do I get mailscanner to stop scanning attachments, period? Or better yet, how do I get it to stop scoring up a message? I'm getting swamped with complaints about 1) attachments artificially bumping up the score of a message to the point it gets deleted and 2) all the contents of an attachment - usually a word doc - being removed, so that they get a completely empty word doc. Help? Thanks! -- Jeremy Huber SCSA, LCP, CCNA Datacenter Engineer CH2M-Hill Microsource jhuber@microsource.com 303.706.0990 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From anders.andersson at LTKALMAR.SE Mon Apr 4 16:43:32 2005 From: anders.andersson at LTKALMAR.SE (Anders Andersson, IT) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: What about reading mailscanner.conf to begin with :) Look under attachment filename checking > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Jeremy Huber > Sent: Monday, April 04, 2005 5:34 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Mailscanner stops scanning attachments?? > > How do I get mailscanner to stop scanning attachments, > period? Or better yet, how do I get it to stop scoring up a > message? I'm getting swamped with complaints about 1) > attachments artificially bumping up the score of a message to > the point it gets deleted and 2) all the contents of an > attachment - usually a word doc - being removed, so that they > get a completely empty word doc. > > Help? > > Thanks! > > -- > Jeremy Huber > SCSA, LCP, CCNA > Datacenter Engineer > CH2M-Hill Microsource > jhuber@microsource.com > 303.706.0990 > > ------------------------ MailScanner list > ------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USHERBROOKE.CA Mon Apr 4 16:56:10 2005 From: Denis.Beauchemin at USHERBROOKE.CA (Denis Beauchemin) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jeremy Huber wrote: >How do I get mailscanner to stop scanning attachments, period? Or >better yet, how do I get it to stop scoring up a message? I'm getting >swamped with complaints about 1) attachments artificially bumping up the >score of a message to the point it gets deleted and 2) all the contents >of an attachment - usually a word doc - being removed, so that they get >a completely empty word doc. > > > Jeremy, Within MS, no attachment bumps the score up or down. Attachments are either left alone or deleted (depending on your setup) but they are not being modified at all unless they were encoded in QP when they should have been in Base64. Are you sure you don't have something else playing tricks on you? Denis -- _ °v° Denis Beauchemin, analyste /(_)\ Université de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x2252 F: 819.821.8045 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "S/MIME Cryptographic Signature" ] [ Application/X-PKCS7-SIGNATURE 4.4KB. ] [ Unable to print this part. ] From billy at PLANETGEEK.BIZ Mon Apr 4 17:42:25 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: I searched the mailscanner archives at http://www.jiscmail.ac.uk/cgi-bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S = But I could not locate updates information. I also tried to find the recently topic of "Complete Build". I know that there is a ton of information in there but I just could not find it. I know that a lot is talked about what to run it on, however if I may inquire on my setup as Linux is not my environment of expertise. I will try to make my questions short. My main and pretty much only question is what versions should I use? What I have now: 550mhz 384 RAM IDE hard drive (desktop) I will be moving to: Server Dual 600PIII 1024 RAM 3x9.1GB RAID 5 Hard drives What I have now: Redhat 9 (Shrike) MailScanner 4.25 Spamassassin 2.61 MailStats for statistics Running RulesDuJour Running other rules too Sendmail version ?? Sophos virus scanning In question to move to: Should I still use Redhat 9? Seems to work fine MailScanner 4.40.11 Sendmails latest version 8.13.4 Spamassassin latest version 3.0.2 Different rule sets from the web sites ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From vachanta at GMAIL.COM Mon Apr 4 17:54:54 2005 From: vachanta at GMAIL.COM (Venkata Achanta) Date: Thu Jan 12 21:29:14 2006 Subject: MCP checks for outgoing only Message-ID: Julian, Thanks for your responses.Tried by ip,*@domain.com,@domain.com with no luck. Anything else. Is anyone implementing MCP in their enviroment with a similar set up ? Please share your experience. Thanks much, Venkata Achanta On Sun, 3 Apr 2005 11:56:24 +0100, Julian Field wrote: >Try putting in *@domain.com or just domain.com instead of @domain.com. > >Venkata Achanta wrote: > >>Any word on this Julian ? Thanks >> >> >> >>On Thu, 31 Mar 2005 19:07:32 +0100, Venkata Achanta >>wrote: >> >> >> >>>Yes! i do reliase that only the e-mail that contain the MCP material should >>>be forwarded to user@domain.com but the problem i am having is all the >>>incoming and outgoing messages are also being fw'ded to user@domain.com >>>instead of the e-mail that just qualifies for MCP. >>> >>>OR is it not built that way ? >>> >>> >>> >>>From my first e-mail, >> >> >>>>Is Definitely MCP = %rules-dir%/mcp.rules >>>> >>>> >>>>I have this in my %rules-dir%/mcp.rules >>>> >>>>From: @domain.com yes >>>>FromOrTo: default no >>>> >>>> >>>Hope this is clear enough to give you a picture of whats happening or else >>>pleaselet me know i will try again. >>> >>> >>> >>>On Thu, 31 Mar 2005 18:55:51 +0100, Julian Field >>> wrote: >>> >>> >>> >>>>You realise that those MCP actions will deliver the mail to the original >>>>recipient as well as forward it to user@domain.com. >>>> >>>>Venkata Achanta wrote: >>>> >>>> >>>> >>>>>Julian, >>>>> >>>>>I think you didnt see the MCP config in the e-mail. >>>>> >>>>>Yes ! i am aware that spam actions have nothing to do with MCP. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>>MCP Actions = deliver user@domain.com >>>>>> >>>>>> >>>>>> >>>>>> >>>>>is what i have in the MCP actions and i still the behaviour mentioned >>>>>earlier. >>>>> >>>>> >>>>> >>>>> >>>>-- >>>>Julian Field >>>>www.MailScanner.info >>>>Buy the MailScanner book at www.MailScanner.info/store >>>>Professional Support Services at www.MailScanner.biz >>>>MailScanner thanks transtec Computers for their support >>>> >>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>>> >>>>------------------------ MailScanner list ------------------------ >>>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>>'leave mailscanner' in the body of the email. >>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>> >>>>Support MailScanner development - buy the book off the website! >>>> >>>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >>> >>> >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> >> >> > >-- >Julian Field >www.MailScanner.info >Buy the MailScanner book at www.MailScanner.info/store >Professional Support Services at www.MailScanner.biz >MailScanner thanks transtec Computers for their support > >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Mon Apr 4 17:55:07 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: Billy I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk will slow the I/O down quite alot. There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules into it, and make sure you have the URI-RBL's turned on too... Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in latest spam.assassin.prefs.conf). -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Billy Pumphrey wrote: > I searched the mailscanner archives at > http://www.jiscmail.ac.uk/cgi-bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > = > > But I could not locate updates information. I also tried to find the > recently topic of "Complete Build". I know that there is a ton of > information in there but I just could not find it. I know that a lot is > talked about what to run it on, however if I may inquire on my setup as > Linux is not my environment of expertise. I will try to make my questions > short. My main and pretty much only question is what versions should I use? > > What I have now: > 550mhz > 384 RAM > IDE hard drive (desktop) > > I will be moving to: > Server > Dual 600PIII > 1024 RAM > 3x9.1GB RAID 5 Hard drives > > What I have now: > Redhat 9 (Shrike) > MailScanner 4.25 > Spamassassin 2.61 > MailStats for statistics > Running RulesDuJour > Running other rules too > Sendmail version ?? > Sophos virus scanning > > In question to move to: > Should I still use Redhat 9? Seems to work fine > MailScanner 4.40.11 > Sendmails latest version 8.13.4 > Spamassassin latest version 3.0.2 > Different rule sets from the web sites > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mailscanner at ELKNET.NET Mon Apr 4 18:28:05 2005 From: mailscanner at ELKNET.NET (Alan) Date: Thu Jan 12 21:29:14 2006 Subject: Dangerous Content Scanning inconsistancies Message-ID: Julian, 1) In the MailScanner.conf comments for Dangerous Content Scanning, you mention that setting it to 'no' will disable all content checks except for "Virus Scanning, Allow Partial Messages and Allow External Message Bodies". Unless you do not consider the 'Phishing' test to be one of the 'Dangerous Content' checks, I think it should be added to the list of what is not disabled. I use a ruleset for both Virus scanning and Dangerous Content Scanning so that my customers can request to be removed from filtering. Today I had one of these customers report that they were still getting the Phishing edits done to their messages, even though they were set to a 'no' in the Dangerous Content Scanning ruleset. It was easily fixed by pointing the test for Phishing to the same ruleset, but it would have been nice to have known earlier via the comments that it was one of the tests that was not disabled in the Dangerous Content Scanning setting. 2) Along these lines, I have a feature request for the two settings: "Allow Partial Messages =" and "Allow External Message Bodies =" These two settings use the reverse logic of the other settings, such as "Dangerous Content Scanning", "Find Phishing Fraud", "Virus Scanning". Each of these settings referrs to testing for something bad, and if you want to allow one of these bad things by not looking for it, you set the config to a 'no', typically by using a ruleset. However, "Allow Partial Messages =" and "Allow External Message Bodies =" refer to 'allowing' something bad rather than 'testing', so if you want to allow one of these bad things to happen, you have to set it to a 'yes'. My point is that I can't use a single ruleset, I have to use two, each being the opposite of the other. If I have a customer, say 'jdoe@acme.com' who does not wish to be filtered, I have to put his address in one ruleset with his address set to 'no' for virus, content, and phishing checks, and then also put him in a second ruleset with his address set to 'yes' for 'Partial messages' and 'external message bodies. I then have to maintain two ruleset files. If "Allow Partial Messages =" and "Allow External Message Bodies =" were changed to perhaps "Partial Message Scanning" and "External Message Body Scanning", we could then use the same logic and rulesets as we do for the other settings; the 'yes' would become a 'no'. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dnsadmin at 1BIGTHINK.COM Mon Apr 4 18:34:20 2005 From: dnsadmin at 1BIGTHINK.COM (DNSAdmin) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: At 12:55 PM 4/4/2005, you wrote: >Billy > >I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk >will slow the I/O down quite alot. > >There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules >into it, and make sure you have the URI-RBL's turned on too... > >Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in >latest spam.assassin.prefs.conf). >-- >Martin Hepworth > >Billy Pumphrey wrote: >>I searched the mailscanner archives at >>http://www.jiscmail.ac.uk/cgi-bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S >>= >> >>But I could not locate updates information. I also tried to find the >>recently topic of "Complete Build". I know that there is a ton of >>information in there but I just could not find it. I know that a lot is >>talked about what to run it on, however if I may inquire on my setup as >>Linux is not my environment of expertise. I will try to make my questions >>short. My main and pretty much only question is what versions should I use? >> >>What I have now: >>550mhz >>384 RAM >>IDE hard drive (desktop) >> >>I will be moving to: >>Server >>Dual 600PIII >>1024 RAM >>3x9.1GB RAID 5 Hard drives >> >>What I have now: >>Redhat 9 (Shrike) >>MailScanner 4.25 >>Spamassassin 2.61 >>MailStats for statistics >>Running RulesDuJour >>Running other rules too >>Sendmail version ?? >>Sophos virus scanning >> >>In question to move to: >>Should I still use Redhat 9? Seems to work fine >>MailScanner 4.40.11 >>Sendmails latest version 8.13.4 >>Spamassassin latest version 3.0.2 >>Different rule sets from the web sites Hey Billy, Move to CentOS 3.4 http://www.centos.org. RedHat 9 support has already run out on you, hasn't it? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. http://www.sng.ecs.soton.ac.uk/mailscanner/ Configuration by Glenn Parsons dnsadmin-at-1bigthink.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From smf at F2S.COM Mon Apr 4 18:44:02 2005 From: smf at F2S.COM (Steve Freegard) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: Hi Jules, On Mon, 2005-04-04 at 08:59 +0100, Julian Field wrote: > Steve, > > What are you doing here? You are a rare sight on this list! > :-) > Good to see you. > I'm always lurking ;-)) Plus, I always get a warm welcome! > Create an empty file for it to fill, then provide the full path of that > file in Archive Mail (not just the directory it is in). If I wanted to create one file per message (by message id) in dated sub- folders (like the quarantine) - is there any reason I couldn't set this as a custom function that creates the file/folder in the archive directory and returns the path/filename?? Ta muchly, Steve. > > Steve Freegard wrote: > > >Hi All, > > > >Is is possible to store archived mail (Archive Mail > >= /var/spool/MailScanner/archive) in RFC822 format instead of MTA queue > >files?? > > > >Cheers, > >Steve > > > >------------------------ MailScanner list ------------------------ > >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > >'leave mailscanner' in the body of the email. > >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > >Support MailScanner development - buy the book off the website! > > > > > > > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 18:46:49 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Dangerous Content Scanning inconsistancies Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] All good points. Thanks for the comments. Alan wrote: >Julian, > >1) In the MailScanner.conf comments for Dangerous Content Scanning, you >mention that setting it to 'no' will disable all content checks except for >"Virus Scanning, Allow Partial Messages and Allow External Message Bodies". >Unless you do not consider the 'Phishing' test to be one of the 'Dangerous >Content' checks, I think it should be added to the list of what is not >disabled. I use a ruleset for both Virus scanning and Dangerous Content >Scanning so that my customers can request to be removed from filtering. >Today I had one of these customers report that they were still getting the >Phishing edits done to their messages, even though they were set to a 'no' >in the Dangerous Content Scanning ruleset. It was easily fixed by pointing >the test for Phishing to the same ruleset, but it would have been nice to >have known earlier via the comments that it was one of the tests that was >not disabled in the Dangerous Content Scanning setting. > >2) Along these lines, I have a feature request for the two settings: > "Allow Partial Messages =" and "Allow External Message Bodies =" > >These two settings use the reverse logic of the other settings, such as >"Dangerous Content Scanning", "Find Phishing Fraud", "Virus Scanning". Each >of these settings referrs to testing for something bad, and if you want to >allow one of these bad things by not looking for it, you set the config to a >'no', typically by using a ruleset. > >However, "Allow Partial Messages =" and "Allow External Message Bodies =" >refer to 'allowing' something bad rather than 'testing', so if you want to >allow one of these bad things to happen, you have to set it to a 'yes'. > >My point is that I can't use a single ruleset, I have to use two, each being >the opposite of the other. If I have a customer, say 'jdoe@acme.com' who >does not wish to be filtered, I have to put his address in one ruleset with >his address set to 'no' for virus, content, and phishing checks, and then >also put him in a second ruleset with his address set to 'yes' for 'Partial >messages' and 'external message bodies. > >I then have to maintain two ruleset files. > >If "Allow Partial Messages =" and "Allow External Message Bodies =" were >changed to perhaps "Partial Message Scanning" and "External Message Body >Scanning", we could then use the same logic and rulesets as we do for the >other settings; the 'yes' would become a 'no'. > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 18:48:07 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Archive Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steve Freegard wrote: >Hi Jules, > >On Mon, 2005-04-04 at 08:59 +0100, Julian Field wrote: > > >>Steve, >> >>What are you doing here? You are a rare sight on this list! >>:-) >>Good to see you. >> >> >> > >I'm always lurking ;-)) Plus, I always get a warm welcome! > > > >>Create an empty file for it to fill, then provide the full path of that >>file in Archive Mail (not just the directory it is in). >> >> > >If I wanted to create one file per message (by message id) in dated sub- >folders (like the quarantine) - is there any reason I couldn't set this >as a custom function that creates the file/folder in the archive >directory and returns the path/filename?? > > No reason at all, should work just fine. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kodak at FRONTIERHOMEMORTGAGE.COM Mon Apr 4 19:09:38 2005 From: kodak at FRONTIERHOMEMORTGAGE.COM (Jason Balicki) Date: Thu Jan 12 21:29:14 2006 Subject: [ot] qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: I've just set up a system where MailScanner running on a RH8 machine will send (via the mailertable) scanned mail to another machine that's running qmail. I know nothing about qmail at this point, but it looks like there's some sort of throttle built into qmail that keeps the MailScanner box from being able to send messages on occasion. When there's a lot of mail coming through the qmail box just stops responding for a while. It will eventually start up again, but by that point there's a lot of stuff in the MailScanner outbound queue and the cycle will repeat for a while until the mail is all out of the queue. I started tracing the qmail setup and didn't get very far before I got confused. I remember when I thought sendmail was confusing and complex and beyond my grasp. How quaintly naive. :) Does anyone know where I should look to find this throttle and turn it off? (The qmail box will only receive mail from the MS box so there's no reason to have it any more.) As always, any help at all is appreciated. --J(K) ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Mon Apr 4 19:26:51 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: I had no support contracts or anything. > -----Original Message----- > From: DNSAdmin [mailto:dnsadmin@1BIGTHINK.COM] > Sent: Monday, April 04, 2005 12:34 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > At 12:55 PM 4/4/2005, you wrote: > >Billy > > > >I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk > >will slow the I/O down quite alot. > > > >There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules > >into it, and make sure you have the URI-RBL's turned on too... > > > >Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in > >latest spam.assassin.prefs.conf). > >-- > >Martin Hepworth > > > >Billy Pumphrey wrote: > >>I searched the mailscanner archives at > >>http://www.jiscmail.ac.uk/cgi- > bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > >>= > >> > >>But I could not locate updates information. I also tried to find the > >>recently topic of "Complete Build". I know that there is a ton of > >>information in there but I just could not find it. I know that a lot is > >>talked about what to run it on, however if I may inquire on my setup as > >>Linux is not my environment of expertise. I will try to make my > questions > >>short. My main and pretty much only question is what versions should I > use? > >> > >>What I have now: > >>550mhz > >>384 RAM > >>IDE hard drive (desktop) > >> > >>I will be moving to: > >>Server > >>Dual 600PIII > >>1024 RAM > >>3x9.1GB RAID 5 Hard drives > >> > >>What I have now: > >>Redhat 9 (Shrike) > >>MailScanner 4.25 > >>Spamassassin 2.61 > >>MailStats for statistics > >>Running RulesDuJour > >>Running other rules too > >>Sendmail version ?? > >>Sophos virus scanning > >> > >>In question to move to: > >>Should I still use Redhat 9? Seems to work fine > >>MailScanner 4.40.11 > >>Sendmails latest version 8.13.4 > >>Spamassassin latest version 3.0.2 > >>Different rule sets from the web sites > > Hey Billy, > > Move to CentOS 3.4 http://www.centos.org. RedHat 9 support has already run > out on you, hasn't it? > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > http://www.sng.ecs.soton.ac.uk/mailscanner/ > Configuration by Glenn Parsons dnsadmin-at-1bigthink.com > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Mon Apr 4 19:28:14 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: Thank you for the reply. 1024 is the max on it. I only process about 2400 messages daily so 1024 should be good hey? I will go RAID1 then. > -----Original Message----- > From: Martin Hepworth [mailto:martinh@SOLID-STATE-LOGIC.COM] > Sent: Monday, April 04, 2005 11:55 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > Billy > > I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk > will slow the I/O down quite alot. > > There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules > into it, and make sure you have the URI-RBL's turned on too... > > Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in > latest spam.assassin.prefs.conf). > > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > Billy Pumphrey wrote: > > I searched the mailscanner archives at > > http://www.jiscmail.ac.uk/cgi- > bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > > = > > > > But I could not locate updates information. I also tried to find the > > recently topic of "Complete Build". I know that there is a ton of > > information in there but I just could not find it. I know that a lot is > > talked about what to run it on, however if I may inquire on my setup as > > Linux is not my environment of expertise. I will try to make my > questions > > short. My main and pretty much only question is what versions should I > use? > > > > What I have now: > > 550mhz > > 384 RAM > > IDE hard drive (desktop) > > > > I will be moving to: > > Server > > Dual 600PIII > > 1024 RAM > > 3x9.1GB RAID 5 Hard drives > > > > What I have now: > > Redhat 9 (Shrike) > > MailScanner 4.25 > > Spamassassin 2.61 > > MailStats for statistics > > Running RulesDuJour > > Running other rules too > > Sendmail version ?? > > Sophos virus scanning > > > > In question to move to: > > Should I still use Redhat 9? Seems to work fine > > MailScanner 4.40.11 > > Sendmails latest version 8.13.4 > > Spamassassin latest version 3.0.2 > > Different rule sets from the web sites > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Mon Apr 4 19:49:47 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:14 2006 Subject: qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: [ The following text is in the "utf-8" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jason Balicki writes: > I've just set up a system where MailScanner > running on a RH8 machine will send (via the > mailertable) scanned mail to another machine > that's running qmail. > > I know nothing about qmail at this point, but > it looks like there's some sort of throttle > built into qmail that keeps the MailScanner > box from being able to send messages on occasion. > > When there's a lot of mail coming through > the qmail box just stops responding for a > while. It will eventually start up again, > but by that point there's a lot of stuff in > the MailScanner outbound queue and the cycle > will repeat for a while until the mail is > all out of the queue. > > I started tracing the qmail setup and didn't > get very far before I got confused. I > remember when I thought sendmail was confusing > and complex and beyond my grasp. How quaintly > naive. :) > > Does anyone know where I should look to find > this throttle and turn it off? (The qmail > box will only receive mail from the MS box > so there's no reason to have it any more.) > > As always, any help at all is appreciated. > > --J(K) do you tarpitting enabled in qmail (some files like tarpit* in /var/qmail/control)? if yes, you could control it via the tcp.smtp file for specific ip addressess Use the following env variables in tcp.smtp: TARPITCOUNT=0 TARPITDELAY=0 let us know if it works. - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 20:28:34 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] 1024MB of RAM should be fine. I recommend 512MB per CPU. With only 2400 messages per day it should happily tick along pretty quietly. Billy Pumphrey wrote: >Thank you for the reply. 1024 is the max on it. I only process about 2400 >messages daily so 1024 should be good hey? I will go RAID1 then. > > > >>-----Original Message----- >>From: Martin Hepworth [mailto:martinh@SOLID-STATE-LOGIC.COM] >>Sent: Monday, April 04, 2005 11:55 AM >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: Re: Starting from scratch >> >>Billy >> >>I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk >>will slow the I/O down quite alot. >> >>There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules >>into it, and make sure you have the URI-RBL's turned on too... >> >>Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in >>latest spam.assassin.prefs.conf). >> >> >>-- >>Martin Hepworth >>Snr Systems Administrator >>Solid State Logic >>Tel: +44 (0)1865 842300 >> >> >>Billy Pumphrey wrote: >> >> >>>I searched the mailscanner archives at >>>http://www.jiscmail.ac.uk/cgi- >>> >>> >>bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S >> >> >>>= >>> >>>But I could not locate updates information. I also tried to find the >>>recently topic of "Complete Build". I know that there is a ton of >>>information in there but I just could not find it. I know that a lot is >>>talked about what to run it on, however if I may inquire on my setup as >>>Linux is not my environment of expertise. I will try to make my >>> >>> >>questions >> >> >>>short. My main and pretty much only question is what versions should I >>> >>> >>use? >> >> >>>What I have now: >>>550mhz >>>384 RAM >>>IDE hard drive (desktop) >>> >>>I will be moving to: >>>Server >>>Dual 600PIII >>>1024 RAM >>>3x9.1GB RAID 5 Hard drives >>> >>>What I have now: >>>Redhat 9 (Shrike) >>>MailScanner 4.25 >>>Spamassassin 2.61 >>>MailStats for statistics >>>Running RulesDuJour >>>Running other rules too >>>Sendmail version ?? >>>Sophos virus scanning >>> >>>In question to move to: >>>Should I still use Redhat 9? Seems to work fine >>>MailScanner 4.40.11 >>>Sendmails latest version 8.13.4 >>>Spamassassin latest version 3.0.2 >>>Different rule sets from the web sites >>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >>> >>> >>********************************************************************** >> >>This email and any files transmitted with it are confidential and >>intended solely for the use of the individual or entity to whom they >>are addressed. If you have received this email in error please notify >>the system manager. >> >>This footnote confirms that this email message has been swept >>for the presence of computer viruses and is believed to be clean. >> >>********************************************************************** >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> >> >> > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jhuber at MICROSOURCE.COM Mon Apr 4 22:16:22 2005 From: jhuber at MICROSOURCE.COM (Jeremy Huber) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: On Mon, 4 Apr 2005 11:56:10 -0400, Denis Beauchemin wrote: >Within MS, no attachment bumps the score up or down. Attachments are >either left alone or deleted (depending on your setup) but they are not >being modified at all unless they were encoded in QP when they should >have been in Base64. > >Are you sure you don't have something else playing tricks on you? No, I'm not certain at all (hence the begging nature of the email :) ). However, I do know that attachments ARE causing the score to be modified. An example from today.. This email was an HTML email, that happened to have a TIFF attached, and it triggered all these rules: Score Matching Rule Description 0.00 HTML_MESSAGE HTML included in message 1.00 MANGLED_COST mangled cost 1.00 MANGLED_DEALS mangled deal(s) 1.00 MANGLED_DIET mangled diet 1.00 MANGLED_GOOD mangled good 1.00 MANGLED_LIPS mangled lips 1.00 MANGLED_LOW mangled low 1.00 MANGLED_MEDS mangled med(s) 1.00 MANGLED_PILL mangled pill(s) 1.00 MANGLED_SAVELE mangled save sale 1.00 MANGLED_SEX mangled sex(ual)(ity) 1.50 MIME_ASCII0 Message body contains ASCII-0 character 0.50 MIME_BAD_LINEBREAK Message body with fishy line breaks 0.80 MIME_MISSING_BOUNDARY MIME section missing boundary 0.26 UPPERCASE_25_50 message body is 25-50% uppercase I had the user resend without the attachment, and it only triggered the HTML_MESSAGE rule. The other issue with data being pulled out of word docs I can't verify.. it's only heresay from a customer, but when he sends me the end result, it appears as a 64B .doc file and a winmail.dat file, so I suspect that MS (or something else) is messing up the attachment. I've turned off TNEF to see if that resolves that one. I'm not discounting at all the fact that I've probably misconfigured something, but I'm at a loss right now. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 4 22:34:37 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jeremy Huber wrote: >On Mon, 4 Apr 2005 11:56:10 -0400, Denis Beauchemin > wrote: > > > >>Within MS, no attachment bumps the score up or down. Attachments are >>either left alone or deleted (depending on your setup) but they are not >>being modified at all unless they were encoded in QP when they should >>have been in Base64. >> >>Are you sure you don't have something else playing tricks on you? >> >> > >No, I'm not certain at all (hence the begging nature of the email :) ). >However, I do know that attachments ARE causing the score to be modified. >An example from today.. This email was an HTML email, that happened to have >a TIFF attached, and it triggered all these rules: > >Score Matching Rule Description >0.00 HTML_MESSAGE HTML included in message >1.00 MANGLED_COST mangled cost >1.00 MANGLED_DEALS mangled deal(s) >1.00 MANGLED_DIET mangled diet >1.00 MANGLED_GOOD mangled good >1.00 MANGLED_LIPS mangled lips >1.00 MANGLED_LOW mangled low >1.00 MANGLED_MEDS mangled med(s) >1.00 MANGLED_PILL mangled pill(s) >1.00 MANGLED_SAVELE mangled save sale >1.00 MANGLED_SEX mangled sex(ual)(ity) >1.50 MIME_ASCII0 Message body contains ASCII-0 character >0.50 MIME_BAD_LINEBREAK Message body with fishy line breaks >0.80 MIME_MISSING_BOUNDARY MIME section missing boundary >0.26 UPPERCASE_25_50 message body is 25-50% uppercase > >I had the user resend without the attachment, and it only triggered the >HTML_MESSAGE rule. > > What have you set to generate that report? Exactly how? The answer may tell us important things about your setup. >The other issue with data being pulled out of word docs I can't verify.. >it's only heresay from a customer, but when he sends me the end result, it >appears as a 64B .doc file and a winmail.dat file, so I suspect that MS (or >something else) is messing up the attachment. I've turned off TNEF to see >if that resolves that one. > > MailScanner does not replace winmail.dat files with the files they contain. It unpacks them to virus scan and do filename/type checks, but you won't ever get a winmail.dat file as well as a doc file attached to the same message. What do you think is adding the doc? -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Mon Apr 4 22:49:47 2005 From: pete at ENITECH.COM.AU (Peter Russell) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I reckon centos 4.0 (which is just rhel without the license and groovy installer) is the go, or buy a red hat license and use Red Hat Proffessional 4.0 Red Hat 9 is too old now... Billy Pumphrey wrote: > I searched the mailscanner archives at > http://www.jiscmail.ac.uk/cgi-bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > = > > But I could not locate updates information. I also tried to find the > recently topic of "Complete Build". I know that there is a ton of > information in there but I just could not find it. I know that a lot is > talked about what to run it on, however if I may inquire on my setup as > Linux is not my environment of expertise. I will try to make my questions > short. My main and pretty much only question is what versions should I use? > > What I have now: > 550mhz > 384 RAM > IDE hard drive (desktop) > > I will be moving to: > Server > Dual 600PIII > 1024 RAM > 3x9.1GB RAID 5 Hard drives > > What I have now: > Redhat 9 (Shrike) > MailScanner 4.25 > Spamassassin 2.61 > MailStats for statistics > Running RulesDuJour > Running other rules too > Sendmail version ?? > Sophos virus scanning > > In question to move to: > Should I still use Redhat 9? Seems to work fine > MailScanner 4.40.11 > Sendmails latest version 8.13.4 > Spamassassin latest version 3.0.2 > Different rule sets from the web sites > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jhuber at MICROSOURCE.COM Mon Apr 4 22:56:47 2005 From: jhuber at MICROSOURCE.COM (Jeremy Huber) Date: Thu Jan 12 21:29:14 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: On Mon, 4 Apr 2005 22:34:37 +0100, Julian Field wrote: >What have you set to generate that report? Exactly how? The answer may >tell us important things about your setup. I'm using MS 4.38.9 (via RPM), with Mailwatch 0.51 and clamav and bitdefender for AV scanners. Mailwatch is what gave me that list of triggered rules. >MailScanner does not replace winmail.dat files with the files they >contain. It unpacks them to virus scan and do filename/type checks, but >you won't ever get a winmail.dat file as well as a doc file attached to >the same message. > >What do you think is adding the doc? I've got an email off to the person seeing it to find out more. All I know is that they're resume's being emailed out, and "everyone else gets the document correctly." I know that doesn't mean much. I know the last time I had a problem with winmail.dat, it turned out to be a problem with the mailer client that was doing it, not MS. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Tue Apr 5 00:09:20 2005 From: pete at ENITECH.COM.AU (Peter Russell) Date: Thu Jan 12 21:29:14 2006 Subject: OT: mailscanner & oom killer on fc2 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Any further info on this? I am still getting this problem on RHEL4. :( This event didnt give me the oom error, but the machine ran out of memory and used all swap and almost froze. Restarting the MS service doesnt fix it, a restart does :( Vlad Mazek wrote: > I doubt it, they don't use Ensim (or any other control panel for that > matter). What could possibly cause the MailScanner process to ping the > processor at 99% for over 6 minutes? > > I have found a number of issues with sendmail and oom killer, one with > MailScanner/FC3 specifically. However, none of those were ever answered > which is why I decided to post here. > > -Vlad > > Martin Hepworth wrote: > >> Hmm I wonder if this related to the Ensim issue as well. Quite different >> versions of MS, but both on FC.. > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kodak at FRONTIERHOMEMORTGAGE.COM Tue Apr 5 00:19:14 2005 From: kodak at FRONTIERHOMEMORTGAGE.COM (Jason Balicki) Date: Thu Jan 12 21:29:14 2006 Subject: qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: Dhawal Doshy <> wrote: > do you tarpitting enabled in qmail (some files like tarpit* in > /var/qmail/control)? if yes, you could control it via the tcp.smtp > file for specific ip addressess I couldn't find any tarpit* files in /var/qmail/control. (Nor anywhere on the system if the slocate db is to be trusted.) I did go ahead and add the variables below into tcp.smtp, but the traffic is too low right now to test (of course.) I'll keep an eye on it, but right now there's nothing to report. Thanks for the tip and I hope that's the answer. > Use the following env variables in tcp.smtp: > TARPITCOUNT=0 > TARPITDELAY=0 --J(K) ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ius at ALPHA.RBRANA.CO.ID Tue Apr 5 02:30:02 2005 From: ius at ALPHA.RBRANA.CO.ID (ius) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Joakim Cefalk wrote: > I have the same problem earlier, try this, It works for me. > > # If you are using the Bayesian statistics engine on a busy server, > # you may well need to force a Bayesian database rebuild and expiry > # at regular intervals. This is measures in seconds. > # 1 day = 86400 seconds. > # To disable this feature set this to 0. > Rebuild Bayes Every = 0 > > # The Bayesian database rebuild and expiry may take a 2 or 3 minutes > # to complete. During this time you can either wait, or simply > # disable SpamAssassin checks until it has completed. > Wait During Bayes Rebuild = no > > Devon Harding wrote: > >> Welcome to tha club buddy. What are your machine specs? >> >> On Apr 4, 2005 4:09 AM, *Martin Hepworth* >> > >> wrote: >> >> Ius >> >> What version of SA and MS? >> >> also any RBL's in the SA config and any extra rules in >> /etc/mail/spamassassin? >> >> what does "spamassassin -p /spam.assassin.prefs.conf -D >> --lint" >> give you? >> >> -- >> Martin Hepworth >> Snr Systems Administrator >> Solid State Logic >> Tel: +44 (0)1865 842300 >> >> >> ius wrote: >> > Hello, good morning >> > >> > i was surfing in my maillog this morning, i found this >> spamassassin >> > timed out. As i remembered i didn't do anything to my machine >> lately. >> > Can anybody tell me what's wrong w/ my spamassassin ? >> > >> > tail -f /var/log/maillog |grep MailScanner >> > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 >> messages, >> > 14123 bytes >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 >> messages >> > waiting >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 >> messages, >> > 5843 bytes >> > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content >> Scanning: >> > Starting >> > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out >> and was >> > killed, failure 10 of 20 >> > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content >> Scanning: >> > Starting >> > >> > Thanks a lot >> > >> > ------------------------ MailScanner list ------------------------ >> > To unsubscribe, email jiscmail@jiscmail.ac.uk >> with the words: >> > 'leave mailscanner' in the body of the email. >> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> > >> > Support MailScanner development - buy the book off the website! >> >> >> ********************************************************************** >> >> This email and any files transmitted with it are confidential and >> intended solely for the use of the individual or entity to whom they >> are addressed. If you have received this email in error please >> notify >> the system manager. >> >> This footnote confirms that this email message has been swept >> for the presence of computer viruses and is believed to be clean. >> >> >> ********************************************************************** >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk >> with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> *Support MailScanner development - buy the book off the website!* > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! I've already set those setting same as yours. But won't help either. And then i go to /root/.spamassassin/ and set all the files to 0 (zero) size. And go to /etc/MailScanner/bayes/ and do the same way to the files size. and do the MailScanner reload. It works!., no more spamassassin timed out. I've put my eyes on screen log for 1 hour now, no more timed out. i'm using spamassassin 3.02, MS 4.40.11 and mailwatch Thanks ius ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From devonharding at gmail.com Tue Apr 5 03:43:59 2005 From: devonharding at gmail.com (Devon Harding) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] When you say you set the files to zero, do you mean you remove them, then touch them (touch bayes_toks)? -Devon On Apr 4, 2005 9:30 PM, ius wrote: Joakim Cefalk wrote: > I have the same problem earlier, try this, It works for me. > > # If you are using the Bayesian statistics engine on a busy server, > # you may well need to force a Bayesian database rebuild and expiry > # at regular intervals. This is measures in seconds. > # 1 day = 86400 seconds. > # To disable this feature set this to 0. > Rebuild Bayes Every = 0 > > # The Bayesian database rebuild and expiry may take a 2 or 3 minutes > # to complete. During this time you can either wait, or simply > # disable SpamAssassin checks until it has completed. > Wait During Bayes Rebuild = no > > Devon Harding wrote: > >> Welcome to tha club buddy. What are your machine specs? >> >> On Apr 4, 2005 4:09 AM, *Martin Hepworth* >> > >> wrote: >> >> Ius >> >> What version of SA and MS? >> >> also any RBL's in the SA config and any extra rules in >> /etc/mail/spamassassin? >> >> what does "spamassassin -p /spam.assassin.prefs.conf -D >> --lint" >> give you? >> >> -- >> Martin Hepworth >> Snr Systems Administrator >> Solid State Logic >> Tel: +44 (0)1865 842300 >> >> >> ius wrote: >> > Hello, good morning >> > >> > i was surfing in my maillog this morning, i found this >> spamassassin >> > timed out. As i remembered i didn't do anything to my machine >> lately. >> > Can anybody tell me what's wrong w/ my spamassassin ? >> > >> > tail -f /var/log/maillog |grep MailScanner >> > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: Scanning 1 >> messages, >> > 14123 bytes >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 >> messages >> > waiting >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Scanning 1 >> messages, >> > 5843 bytes >> > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content >> Scanning: >> > Starting >> > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin timed out >> and was >> > killed, failure 10 of 20 >> > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content >> Scanning: >> > Starting >> > >> > Thanks a lot >> > >> > ------------------------ MailScanner list ------------------------ >> > To unsubscribe, email jiscmail@jiscmail.ac.uk >> with the words: >> > 'leave mailscanner' in the body of the email. >> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> > >> > Support MailScanner development - buy the book off the website! >> >> >> ********************************************************************** >> >> This email and any files transmitted with it are confidential and >> intended solely for the use of the individual or entity to whom they >> are addressed. If you have received this email in error please >> notify >> the system manager. >> >> This footnote confirms that this email message has been swept >> for the presence of computer viruses and is believed to be clean. >> >> >> ********************************************************************** >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk >> with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> *Support MailScanner development - buy the book off the website!* > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! I've already set those setting same as yours. But won't help either. And then i go to /root/.spamassassin/ and set all the files to 0 (zero) size. And go to /etc/MailScanner/bayes/ and do the same way to the files size. and do the MailScanner reload. It works!., no more spamassassin timed out. I've put my eyes on screen log for 1 hour now, no more timed out. i'm using spamassassin 3.02, MS 4.40.11 and mailwatch Thanks ius ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ius at ALPHA.RBRANA.CO.ID Tue Apr 5 07:44:44 2005 From: ius at ALPHA.RBRANA.CO.ID (ius) Date: Thu Jan 12 21:29:14 2006 Subject: SpamAssassin timed out Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Devon Harding wrote: > When you say you set the files to zero, do you mean you remove them, > then touch them (touch bayes_toks)? > > -Devon > > On Apr 4, 2005 9:30 PM, *ius* > wrote: > > Joakim Cefalk wrote: > > > I have the same problem earlier, try this, It works for me. > > > > # If you are using the Bayesian statistics engine on a busy server, > > # you may well need to force a Bayesian database rebuild and expiry > > # at regular intervals. This is measures in seconds. > > # 1 day = 86400 seconds. > > # To disable this feature set this to 0. > > Rebuild Bayes Every = 0 > > > > # The Bayesian database rebuild and expiry may take a 2 or 3 minutes > > # to complete. During this time you can either wait, or simply > > # disable SpamAssassin checks until it has completed. > > Wait During Bayes Rebuild = no > > > > Devon Harding wrote: > > > >> Welcome to tha club buddy. What are your machine specs? > >> > >> On Apr 4, 2005 4:09 AM, *Martin Hepworth* > >> > >> > >> wrote: > >> > >> Ius > >> > >> What version of SA and MS? > >> > >> also any RBL's in the SA config and any extra rules in > >> /etc/mail/spamassassin? > >> > >> what does "spamassassin -p > /spam.assassin.prefs.conf -D > >> --lint" > >> give you? > >> > >> -- > >> Martin Hepworth > >> Snr Systems Administrator > >> Solid State Logic > >> Tel: +44 (0)1865 842300 > >> > >> > >> ius wrote: > >> > Hello, good morning > >> > > >> > i was surfing in my maillog this morning, i found this > >> spamassassin > >> > timed out. As i remembered i didn't do anything to my machine > >> lately. > >> > Can anybody tell me what's wrong w/ my spamassassin ? > >> > > >> > tail -f /var/log/maillog |grep MailScanner > >> > Apr 4 08:18:18 sigma MailScanner[1878]: New Batch: > Scanning 1 > >> messages, > >> > 14123 bytes > >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: Found 2 > >> messages > >> > waiting > >> > Apr 4 08:18:31 sigma MailScanner[1913]: New Batch: > Scanning 1 > >> messages, > >> > 5843 bytes > >> > Apr 4 08:18:59 sigma MailScanner[1913]: Virus and Content > >> Scanning: > >> > Starting > >> > Apr 4 08:18:59 sigma MailScanner[1878]: SpamAssassin > timed out > >> and was > >> > killed, failure 10 of 20 > >> > Apr 4 08:19:05 sigma MailScanner[1878]: Virus and Content > >> Scanning: > >> > Starting > >> > > >> > Thanks a lot > >> > > >> > ------------------------ MailScanner list > ------------------------ > >> > To unsubscribe, email jiscmail@jiscmail.ac.uk > > >> > with the words: > >> > 'leave mailscanner' in the body of the email. > >> > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and > >> > the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > > >> > Support MailScanner development - buy the book off the > website! > >> > >> > >> > ********************************************************************** > >> > >> This email and any files transmitted with it are > confidential and > >> intended solely for the use of the individual or entity to > whom they > >> are addressed. If you have received this email in error please > >> notify > >> the system manager. > >> > >> This footnote confirms that this email message has been swept > >> for the presence of computer viruses and is believed to be > clean. > >> > >> > >> > ********************************************************************** > >> > >> ------------------------ MailScanner list > ------------------------ > >> To unsubscribe, email jiscmail@jiscmail.ac.uk > > >> > with the words: > >> 'leave mailscanner' in the body of the email. > >> Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and > >> the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > >> Support MailScanner development - buy the book off the website! > >> > >> > >> ------------------------ MailScanner list ------------------------ > >> To unsubscribe, email jiscmail@jiscmail.ac.uk > with the words: > >> 'leave mailscanner' in the body of the email. > >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > >> and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > >> *Support MailScanner development - buy the book off the website!* > > > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk > with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > I've already set those setting same as yours. But won't help > either. And > then i go to /root/.spamassassin/ and set all the files to 0 (zero) > size. And go to /etc/MailScanner/bayes/ and do the same way to the > files > size. and do the MailScanner reload. It works!., no more spamassassin > timed out. I've put my eyes on screen log for 1 hour now, no more > timed out. > > i'm using spamassassin 3.02, MS 4.40.11 and mailwatch > > Thanks > ius > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk > with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* yes .. i just do cat > file, then ^C. Then the file gone empty. I'm not sure this gets rid the timed out problem, but works for me. -ius- ps : sorry, my english so bad :-( ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Tue Apr 5 09:16:11 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:14 2006 Subject: qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jason Balicki wrote: > Dhawal Doshy <> wrote: > >>do you tarpitting enabled in qmail (some files like tarpit* in >>/var/qmail/control)? if yes, you could control it via the tcp.smtp >>file for specific ip addressess > > > I couldn't find any tarpit* files in /var/qmail/control. > (Nor anywhere on the system if the slocate db is to > be trusted.) > > I did go ahead and add the variables below into > tcp.smtp, but the traffic is too low right now > to test (of course.) > > I'll keep an eye on it, but right now there's > nothing to report. > > Thanks for the tip and I hope that's the answer. > > >>Use the following env variables in tcp.smtp: >>TARPITCOUNT=0 >>TARPITDELAY=0 > > > --J(K) > One more way to check if tarpit has been compiled into qmail is this: # grep tarpit /var/qmail/bin/qmail-smtpd Binary file /var/qmail/bin/qmail-smtpd matches Here's a way to stop using it: # cat /etc/tcp.smtp MailScanner_IP:allow,RELAYCLIENT="",TARPITCOUNT=0,TARPITDELAY=0 :deny And finally make sure, your /var/qmail/supervise/qmail-smtpd/run is using '-x /etc/tcp.smtp.cdb' via tcpserver. - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From res at AUSICS.NET Tue Apr 5 09:58:01 2005 From: res at AUSICS.NET (Res) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: On Tue, 5 Apr 2005, Peter Russell wrote: > I reckon centos 4.0 (which is just rhel without the license and groovy > installer) is the go, or buy a red hat license and use Red Hat > Proffessional 4.0 > > Red Hat 9 is too old now... Its tried and proven, we have RH9 boxes with manual kernel upgrades when security dictates, they are unbreakable, centos has had to be rebooted a few times, I have no intention of changing my mail servers off RH9 because i couldnt break the damn thing if i tried its so stable. > > Billy Pumphrey wrote: >> I searched the mailscanner archives at >> http://www.jiscmail.ac.uk/cgi-bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S >> = >> >> But I could not locate updates information. I also tried to find the >> recently topic of "Complete Build". I know that there is a ton of >> information in there but I just could not find it. I know that a lot is >> talked about what to run it on, however if I may inquire on my setup as >> Linux is not my environment of expertise. I will try to make my questions >> short. My main and pretty much only question is what versions should I >> use? >> >> What I have now: >> 550mhz >> 384 RAM >> IDE hard drive (desktop) >> >> I will be moving to: >> Server >> Dual 600PIII >> 1024 RAM >> 3x9.1GB RAID 5 Hard drives >> >> What I have now: >> Redhat 9 (Shrike) >> MailScanner 4.25 >> Spamassassin 2.61 >> MailStats for statistics >> Running RulesDuJour >> Running other rules too >> Sendmail version ?? >> Sophos virus scanning >> >> In question to move to: >> Should I still use Redhat 9? Seems to work fine >> MailScanner 4.40.11 >> Sendmails latest version 8.13.4 >> Spamassassin latest version 3.0.2 >> Different rule sets from the web sites >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Cheers Res ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Tue Apr 5 09:56:08 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: In that case should work very well... my 2.8Ghx Piv(HT) with 1.5GB DDR RAM does around 3000 messages per day and rarely goes above 0.2 load av..(plus it's a SMB file server for my AV update files) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Billy Pumphrey wrote: > Thank you for the reply. 1024 is the max on it. I only process about 2400 > messages daily so 1024 should be good hey? I will go RAID1 then. > > >>-----Original Message----- >>From: Martin Hepworth [mailto:martinh@SOLID-STATE-LOGIC.COM] >>Sent: Monday, April 04, 2005 11:55 AM >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: Re: Starting from scratch >> >>Billy >> >>I'd buy more RAM, drop a disk and use RAID1 - RAID 5 with only 3 disk >>will slow the I/O down quite alot. >> >>There's lots of nice stuff in SA3.02 so I'd drip feed you existing rules >>into it, and make sure you have the URI-RBL's turned on too... >> >>Also watch out for the ALL_TRUSTED rules in SA 3.02 (see the comment in >>latest spam.assassin.prefs.conf). >> >> >>-- >>Martin Hepworth >>Snr Systems Administrator >>Solid State Logic >>Tel: +44 (0)1865 842300 >> >> >>Billy Pumphrey wrote: >> >>>I searched the mailscanner archives at >>>http://www.jiscmail.ac.uk/cgi- >> >>bin/wa.exe?S1=mailscanner&D=0&T=0&H=0&O=T&F=&S >> >>>= >>> >>>But I could not locate updates information. I also tried to find the >>>recently topic of "Complete Build". I know that there is a ton of >>>information in there but I just could not find it. I know that a lot is >>>talked about what to run it on, however if I may inquire on my setup as >>>Linux is not my environment of expertise. I will try to make my >> >>questions >> >>>short. My main and pretty much only question is what versions should I >> >>use? >> >>>What I have now: >>>550mhz >>>384 RAM >>>IDE hard drive (desktop) >>> >>>I will be moving to: >>>Server >>>Dual 600PIII >>>1024 RAM >>>3x9.1GB RAID 5 Hard drives >>> >>>What I have now: >>>Redhat 9 (Shrike) >>>MailScanner 4.25 >>>Spamassassin 2.61 >>>MailStats for statistics >>>Running RulesDuJour >>>Running other rules too >>>Sendmail version ?? >>>Sophos virus scanning >>> >>>In question to move to: >>>Should I still use Redhat 9? Seems to work fine >>>MailScanner 4.40.11 >>>Sendmails latest version 8.13.4 >>>Spamassassin latest version 3.0.2 >>>Different rule sets from the web sites >>> >>>------------------------ MailScanner list ------------------------ >>>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>'leave mailscanner' in the body of the email. >>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>>Support MailScanner development - buy the book off the website! >> >>********************************************************************** >> >>This email and any files transmitted with it are confidential and >>intended solely for the use of the individual or entity to whom they >>are addressed. If you have received this email in error please notify >>the system manager. >> >>This footnote confirms that this email message has been swept >>for the presence of computer viruses and is believed to be clean. >> >>********************************************************************** >> >>------------------------ MailScanner list ------------------------ >>To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From garry at GLENDOWN.DE Tue Apr 5 12:07:19 2005 From: garry at GLENDOWN.DE (Garry Glendown) Date: Thu Jan 12 21:29:14 2006 Subject: Lots of Spam gets through ... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Lately, I've noticed a lot of spam mails getting through (though being flagged by Thunderbird) that only score around 3.x and 4.x points - most of these spams contain pipe signs (|) instead of lowercase "L" ... some 50% of the "l" seem to be replaced ... Anybody have some rules against this? Tnx, -gg ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Tue Apr 5 12:06:33 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Lots of Spam gets through ... Message-ID: Gary what version of SA and what extra rules from SARE etc in /etc/mail/spamassassin ?? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Garry Glendown wrote: > Lately, I've noticed a lot of spam mails getting through (though being > flagged by Thunderbird) that only score around 3.x and 4.x points - most > of these spams contain pipe signs (|) instead of lowercase "L" ... some > 50% of the "l" seem to be replaced ... > > Anybody have some rules against this? > > Tnx, -gg > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From garry at GLENDOWN.DE Tue Apr 5 12:40:54 2005 From: garry at GLENDOWN.DE (Garry Glendown) Date: Thu Jan 12 21:29:14 2006 Subject: Lots of Spam gets through ... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Martin Hepworth wrote: > Gary > > what version of SA and what extra rules from SARE etc in > /etc/mail/spamassassin ?? I'm running 3.02, 70_sare_bayes_poison_nxm.cf 70_sare_evilnum0.cf 70_sare_random.cf -gg ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Tue Apr 5 13:10:02 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:14 2006 Subject: Lots of Spam gets through ... Message-ID: Glen try the mangled.cf from the 'other rules' section I've got just all the rules mentioned in www.rulesemporium.com installed, apart from the high risk ones. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Garry Glendown wrote: > Martin Hepworth wrote: > >> Gary >> >> what version of SA and what extra rules from SARE etc in >> /etc/mail/spamassassin ?? > > > I'm running 3.02, > > 70_sare_bayes_poison_nxm.cf 70_sare_evilnum0.cf 70_sare_random.cf > > -gg > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ivessm at softecusa.com Tue Apr 5 13:41:10 2005 From: ivessm at softecusa.com (Stewart M. Ives) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ref OS question: I've been using FC2 without any problems what so ever. up2date works and keeps the box updated. I also run MailWatch on it. Great program to get an overall look at what is coming into the box and to keep records. If you ever needed something to justify your job MailWatch will do it for you. It will show what is happening and make you shine in that it is all being taken care of. I'll probably move up to FC4 a while after it is released. stew ---------- Original Message ----------- From: Res To: MAILSCANNER@JISCMAIL.AC.UK Sent: Tue, 5 Apr 2005 18:58:01 +1000 Subject: Re: Starting from scratch > On Tue, 5 Apr 2005, Peter Russell wrote: > > > I reckon centos 4.0 (which is just rhel without the license and groovy > > installer) is the go, or buy a red hat license and use Red Hat > > Proffessional 4.0 > > > > Red Hat 9 is too old now... > > Its tried and proven, we have RH9 boxes with manual kernel upgrades when > security dictates, they are unbreakable, centos has had to be > rebooted a few times, I have no intention of changing my mail > servers off RH9 because i couldnt break the damn thing if i tried > its so stable. > > > > > Billy Pumphrey wrote: > >> I searched the mailscanner archives at > >> http://www.jiscmail.ac.uk/cgi-bin/wa.exe? S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > >> = > >> > >> But I could not locate updates information. I also tried to find the > >> recently topic of "Complete Build". I know that there is a ton of > >> information in there but I just could not find it. I know that a lot is > >> talked about what to run it on, however if I may inquire on my setup as > >> Linux is not my environment of expertise. I will try to make my questions > >> short. My main and pretty much only question is what versions should I > >> use? > >> > >> What I have now: > >> 550mhz > >> 384 RAM > >> IDE hard drive (desktop) > >> > >> I will be moving to: > >> Server > >> Dual 600PIII > >> 1024 RAM > >> 3x9.1GB RAID 5 Hard drives > >> > >> What I have now: > >> Redhat 9 (Shrike) > >> MailScanner 4.25 > >> Spamassassin 2.61 > >> MailStats for statistics > >> Running RulesDuJour > >> Running other rules too > >> Sendmail version ?? > >> Sophos virus scanning > >> > >> In question to move to: > >> Should I still use Redhat 9? Seems to work fine > >> MailScanner 4.40.11 > >> Sendmails latest version 8.13.4 > >> Spamassassin latest version 3.0.2 > >> Different rule sets from the web sites > >> > >> ------------------------ MailScanner list ------------------------ > >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > >> 'leave mailscanner' in the body of the email. > >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > >> Support MailScanner development - buy the book off the website! > >> > >> > >> > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > > > -- > Cheers > Res > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------- End of Original Message ------- ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Tue Apr 5 15:40:51 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: Hhmm... thank you for all of the replies. I was just about to install red hat 9 just because I have the media already and it seemed to me it would be stable. Majority people are talking Centos. I will go centos if everyone thinks it is good. Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? I have not used centos before at all, is it a simple setup such as red hat? Also I will have to look into up2date as I have not heard of it either. > -----Original Message----- > From: Stewart M. Ives [mailto:ivessm@SOFTECUSA.COM] > Sent: Tuesday, April 05, 2005 7:41 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > Ref OS question: > > I've been using FC2 without any problems what so ever. up2date works and > keeps the box updated. > > I also run MailWatch on it. Great program to get an overall look at what > is > coming into the box and to keep records. If you ever needed something to > justify your job MailWatch will do it for you. It will show what is > happening and make you shine in that it is all being taken care of. > > I'll probably move up to FC4 a while after it is released. > > stew > > > ---------- Original Message ----------- > From: Res > To: MAILSCANNER@JISCMAIL.AC.UK > Sent: Tue, 5 Apr 2005 18:58:01 +1000 > Subject: Re: Starting from scratch > > > On Tue, 5 Apr 2005, Peter Russell wrote: > > > > > I reckon centos 4.0 (which is just rhel without the license and groovy > > > installer) is the go, or buy a red hat license and use Red Hat > > > Proffessional 4.0 > > > > > > Red Hat 9 is too old now... > > > > Its tried and proven, we have RH9 boxes with manual kernel upgrades when > > security dictates, they are unbreakable, centos has had to be > > rebooted a few times, I have no intention of changing my mail > > servers off RH9 because i couldnt break the damn thing if i tried > > its so stable. > > > > > > > > Billy Pumphrey wrote: > > >> I searched the mailscanner archives at > > >> http://www.jiscmail.ac.uk/cgi-bin/wa.exe? > S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > > >> = > > >> > > >> But I could not locate updates information. I also tried to find the > > >> recently topic of "Complete Build". I know that there is a ton of > > >> information in there but I just could not find it. I know that a lot > is > > >> talked about what to run it on, however if I may inquire on my setup > as > > >> Linux is not my environment of expertise. I will try to make my > questions > > >> short. My main and pretty much only question is what versions should > I > > >> use? > > >> > > >> What I have now: > > >> 550mhz > > >> 384 RAM > > >> IDE hard drive (desktop) > > >> > > >> I will be moving to: > > >> Server > > >> Dual 600PIII > > >> 1024 RAM > > >> 3x9.1GB RAID 5 Hard drives > > >> > > >> What I have now: > > >> Redhat 9 (Shrike) > > >> MailScanner 4.25 > > >> Spamassassin 2.61 > > >> MailStats for statistics > > >> Running RulesDuJour > > >> Running other rules too > > >> Sendmail version ?? > > >> Sophos virus scanning > > >> > > >> In question to move to: > > >> Should I still use Redhat 9? Seems to work fine > > >> MailScanner 4.40.11 > > >> Sendmails latest version 8.13.4 > > >> Spamassassin latest version 3.0.2 > > >> Different rule sets from the web sites > > >> > > >> ------------------------ MailScanner list ------------------------ > > >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > >> 'leave mailscanner' in the body of the email. > > >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > >> > > >> Support MailScanner development - buy the book off the website! > > >> > > >> > > >> > > > > > > ------------------------ MailScanner list ------------------------ > > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > 'leave mailscanner' in the body of the email. > > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > > > Support MailScanner development - buy the book off the website! > > > > > > > -- > > Cheers > > Res > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > ------- End of Original Message ------- > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Tue Apr 5 15:50:28 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Billy Pumphrey > Sent: den 5 april 2005 16:41 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > > Hhmm... thank you for all of the replies. I was just about > to install red > hat 9 just because I have the media already and it seemed to > me it would be > stable. Majority people are talking Centos. > > I will go centos if everyone thinks it is good. > Is the mailwatch you are speaking of this: > http://www.mailwatch.com/ ?? Probably not:-). Look at http://mailwatch.sourceforge.net/ instead. > I have not used centos before at all, is it a simple setup > such as red hat? It isessentially that yes. > Also I will have to look into up2date as I have not heard of > it either. Um, how did you keep your RH9s updated with the latest errata (before it going End Of Life about a year ago) then? Now you'll probably be using yum and fedoralegacy, but... Or haven't you been keeping up on the tools/apps side? Wouldn't be a good idea precisely... -- Glenn > > > -----Original Message----- > > From: Stewart M. Ives [mailto:ivessm@SOFTECUSA.COM] > > Sent: Tuesday, April 05, 2005 7:41 AM > > To: MAILSCANNER@JISCMAIL.AC.UK > > Subject: Re: Starting from scratch > > > > Ref OS question: > > > > I've been using FC2 without any problems what so ever. > up2date works and > > keeps the box updated. > > > > I also run MailWatch on it. Great program to get an > overall look at what > > is > > coming into the box and to keep records. If you ever > needed something to > > justify your job MailWatch will do it for you. It will show what is > > happening and make you shine in that it is all being taken care of. > > > > I'll probably move up to FC4 a while after it is released. > > > > stew > > > > > > ---------- Original Message ----------- > > From: Res > > To: MAILSCANNER@JISCMAIL.AC.UK > > Sent: Tue, 5 Apr 2005 18:58:01 +1000 > > Subject: Re: Starting from scratch > > > > > On Tue, 5 Apr 2005, Peter Russell wrote: > > > > > > > I reckon centos 4.0 (which is just rhel without the > license and groovy > > > > installer) is the go, or buy a red hat license and use Red Hat > > > > Proffessional 4.0 > > > > > > > > Red Hat 9 is too old now... > > > > > > Its tried and proven, we have RH9 boxes with manual > kernel upgrades when > > > security dictates, they are unbreakable, centos has had to be > > > rebooted a few times, I have no intention of changing my mail > > > servers off RH9 because i couldnt break the damn thing if i tried > > > its so stable. > > > > > > > > > > > Billy Pumphrey wrote: > > > >> I searched the mailscanner archives at > > > >> http://www.jiscmail.ac.uk/cgi-bin/wa.exe? > > S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > > > >> = > > > >> > > > >> But I could not locate updates information. I also > tried to find the > > > >> recently topic of "Complete Build". I know that there > is a ton of > > > >> information in there but I just could not find it. I > know that a lot > > is > > > >> talked about what to run it on, however if I may > inquire on my setup > > as > > > >> Linux is not my environment of expertise. I will try > to make my > > questions > > > >> short. My main and pretty much only question is what > versions should > > I > > > >> use? > > > >> > > > >> What I have now: > > > >> 550mhz > > > >> 384 RAM > > > >> IDE hard drive (desktop) > > > >> > > > >> I will be moving to: > > > >> Server > > > >> Dual 600PIII > > > >> 1024 RAM > > > >> 3x9.1GB RAID 5 Hard drives > > > >> > > > >> What I have now: > > > >> Redhat 9 (Shrike) > > > >> MailScanner 4.25 > > > >> Spamassassin 2.61 > > > >> MailStats for statistics > > > >> Running RulesDuJour > > > >> Running other rules too > > > >> Sendmail version ?? > > > >> Sophos virus scanning > > > >> > > > >> In question to move to: > > > >> Should I still use Redhat 9? Seems to work fine > > > >> MailScanner 4.40.11 > > > >> Sendmails latest version 8.13.4 > > > >> Spamassassin latest version 3.0.2 > > > >> Different rule sets from the web sites > > > >> > > > >> ------------------------ MailScanner list > ------------------------ > > > >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > >> 'leave mailscanner' in the body of the email. > > > >> Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and > > > >> the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > >> > > > >> Support MailScanner development - buy the book off the website! > > > >> > > > >> > > > >> > > > > > > > > ------------------------ MailScanner list > ------------------------ > > > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > > 'leave mailscanner' in the body of the email. > > > > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and > > > > the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > > > > > Support MailScanner development - buy the book off the website! > > > > > > > > > > -- > > > Cheers > > > Res > > > > > > ------------------------ MailScanner list ------------------------ > > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > 'leave mailscanner' in the body of the email. > > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > > > Support MailScanner development - buy the book off the website! > > ------- End of Original Message ------- > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stef at L5NET.NET Tue Apr 5 16:02:05 2005 From: stef at L5NET.NET (Stef Morrell) Date: Thu Jan 12 21:29:14 2006 Subject: [ot] qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Jason Balicki > Sent: 04 April 2005 19:10 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: [ot] qmail setup temporarily stopping mail forwarded > by MailScanner box > > I started tracing the qmail setup and didn't get very far > before I got confused. I remember when I thought sendmail > was confusing and complex and beyond my grasp. How quaintly > naive. :) sendmail.cf files scare me, hence I started on qmail, which totally makes sense and is easy to use. No... really. Once you understand that DJB wants you to do it all his way, and that anybody elses way is wrong, it starts to come together. Since starting on qmail, I've gained some degree of sense and so I use postfix... but on my personal server I retain qmail out of a sense of perversity and to ensure that if I should get run over by a bus, the machine goes to the grave with me. But I digress... > Does anyone know where I should look to find this throttle > and turn it off? (The qmail box will only receive mail from > the MS box so there's no reason to have it any more.) Where did you get your qmail from? I am unaware of anything in qmail which does this. I have seen a thing called spamthrottle for qmail: http://spamthrottle.qmail.ca/man/qmail-spamthrottle.5.html But this isn't part of a bare 1.03 install. Perhaps you have that installed, in which case the above manpage might help. Cheers Stef ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ian at MINTRA.COM Tue Apr 5 16:16:56 2005 From: ian at MINTRA.COM (Ian McCloy) Date: Thu Jan 12 21:29:14 2006 Subject: Queues Not Being Processed ? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, we have 2 nearly identical systems running MailScanner/SpamAssassin/SendMail/MailWatch both were running smoothly until a few weeks ago, when one stopped processing the queues. Mind you, they are small queues under 100. The queue files just build and build, so we stopped mailscanner and reverted to just using the MTA (sendmail), but of course we really would prefer to run MailScanner on this server. The .conf file is the same on both servers and the permissions look the same to me. the conf file is pointing to the correct locations for the queues, because the tables are populated in MailWatch. When I click on the far left, in mail watch to view a message waiting in the Queue, I get an error back that says. Message ID 'XYZ2131231231' Not Found . but If I do the same to a processed message, in the recent messages page it works fine. Any Ideas? help is highly appreciated, Ian McCloy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Tue Apr 5 16:37:39 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:14 2006 Subject: Starting from scratch Message-ID: > > I have not used centos before at all, is it a simple setup > > such as red hat? > It isessentially that yes. > > > Also I will have to look into up2date as I have not heard of > > it either. > Um, how did you keep your RH9s updated with the latest errata > (before it going End Of Life about a year ago) then? Now you'll > probably be using yum and fedoralegacy, but... Or haven't you > been keeping up on the tools/apps side? Wouldn't be a good idea > precisely... > I didn't ever update it. Yes I know, bad idea. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ssilva at SGVWATER.COM Tue Apr 5 16:37:56 2005 From: ssilva at SGVWATER.COM (Scott Silva) Date: Thu Jan 12 21:29:14 2006 Subject: Queues Not Being Processed ? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ian McCloy wrote: > Hello, > > we have 2 nearly identical systems running > MailScanner/SpamAssassin/SendMail/MailWatch > > both were running smoothly until a few weeks ago, when one stopped > processing the queues. > > Mind you, they are small queues under 100. > > The queue files just build and build, so we stopped mailscanner and > reverted to just using the MTA (sendmail), but of course we really would > prefer to run MailScanner on this server. > > The .conf file is the same on both servers and the permissions look the > same to me. > > the conf file is pointing to the correct locations for the queues, > because the tables are populated in MailWatch. > > When I click on the far left, in mail watch to view a message waiting in > the Queue, I get an error back that says. Message ID 'XYZ2131231231' > Not Found > . > but If I do the same to a processed message, in the recent messages page > it works fine. > > Any Ideas? > > help is highly appreciated, > Ian McCloy > You can try and move a few of the "oldest" files in that queue and restart MailScanner and see if it moves. Then you can move them back one at a time and see if it is a corrupt queue file. You should try to keep the matching qf and df files together. -- "If you have ever eaten crow, It don't taste like chicken!!" ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ian at MINTRA.COM Tue Apr 5 17:09:54 2005 From: ian at MINTRA.COM (Ian McCloy) Date: Thu Jan 12 21:29:15 2006 Subject: Queues Not Being Processed ? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello Scott, thank you for the quick reply! I went ahead and moved all the messages to a temp folder to see if it was indeed a corrupt file, but unfortunatlly, the email is still not processed. I can see new messages from the last few minutes. They are showing up in the mailwatch interface. And when I click the link to view the message I get the same, message not found, warning. If I look in my queue.in folder, I can see the new messages including both qf and df variations. I think for some reason it doesn't know where to look for the message queue, but strangely the mailwatch interface can populate it's SQL tables with the mail queue. any other ideas? thanks, Ian McCloy Scott Silva wrote: >Ian McCloy wrote: > > >>Hello, >> >>we have 2 nearly identical systems running >>MailScanner/SpamAssassin/SendMail/MailWatch >> >>both were running smoothly until a few weeks ago, when one stopped >>processing the queues. >> >>Mind you, they are small queues under 100. >> >>The queue files just build and build, so we stopped mailscanner and >>reverted to just using the MTA (sendmail), but of course we really would >>prefer to run MailScanner on this server. >> >>The .conf file is the same on both servers and the permissions look the >>same to me. >> >>the conf file is pointing to the correct locations for the queues, >>because the tables are populated in MailWatch. >> >>When I click on the far left, in mail watch to view a message waiting in >>the Queue, I get an error back that says. Message ID 'XYZ2131231231' >>Not Found >>. >>but If I do the same to a processed message, in the recent messages page >>it works fine. >> >>Any Ideas? >> >>help is highly appreciated, >> Ian McCloy >> >> >> >You can try and move a few of the "oldest" files in that queue and >restart MailScanner and see if it moves. >Then you can move them back one at a time and see if it is a corrupt >queue file. You should try to keep the matching qf and df files together. > >-- >"If you have ever eaten crow, >It don't taste like chicken!!" > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From shb at WIDEAREA.CO.UK Tue Apr 5 16:59:51 2005 From: shb at WIDEAREA.CO.UK (Simon Brock) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: Thanks for the positive responses about sharing SA BayeDB via MySQL. I need to spend upgrading my MS installations so I will write up what happens and let the list know what happens. Regards, Simon. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dnsadmin at 1BIGTHINK.COM Tue Apr 5 17:26:56 2005 From: dnsadmin at 1BIGTHINK.COM (DNSAdmin) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: At 10:40 AM 4/5/2005, you wrote: >Hhmm... thank you for all of the replies. I was just about to install red >hat 9 just because I have the media already and it seemed to me it would be >stable. Majority people are talking Centos. > >I will go centos if everyone thinks it is good. >Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? >I have not used centos before at all, is it a simple setup such as red hat? >Also I will have to look into up2date as I have not heard of it either. Hey Billy, I had suggested earlier that you take a look at CentOS 3.4 as opposed to the 4.0 route. The reason is you will be a a lot more familiar with it and will have less headaches with implementation. The 4.0 version is much more secure, but you have to disable those security capabilities to get the OS to behave with MailScanner and a whole other mess of services. Cheers! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. http://www.sng.ecs.soton.ac.uk/mailscanner/ Configuration by Glenn Parsons dnsadmin-at-1bigthink.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Tue Apr 5 17:41:21 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Pete Russell wrote: Mmm that sounds like a treat. Would make a great addition to the new wiki documentation project. Care to write a guide and post it up? okay, here goes, apologies for the HTML: You'll need the perl-DBI and perl-DBD-MySQL modules installed before you try this. Assumptions and Variables: SpamAssassin Bayes Database Name: sa_bayes SpamAssassin Bayes Database UserName: sa_user SpamAssassin Bayes Database Password: sa_password Your database server's real name: local_fqdn Every other server that'll connect to and use this database, this name should be resolvable by the DNS or /etc/hosts: remote_fqdn First of all, create a database where you intend on storing the bayesian information # mysql -u root -p #(some distros like redhat and clones have no password set by default.) mysql> create database sa_bayes; mysql> GRANT ALL ON sa_bayes.* TO sa_user@localhost IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@local_fqdn IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@remote_fqdn IDENTIFIED BY 'sa_password'; Locate the bayes_mysql.sql file For RedHat(like) systems: /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql # mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql Now backup your current bayes database: sa-learn -p /path/to/spam.assassin.prefs.conf --backup > sa_bayes_backup.txt sa-learn -p /path/to/spam.assassin.prefs.conf --clear #(optional, incase you want to rollback) Make some changes to your spam.assassin.prefs.conf, on remote (MS Front-end) servers replace 'localhost' with the value of 'local-fqdn' bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:sa_bayes:localhost bayes_sql_username sa_user bayes_sql_password sa_password and comment out the following lines bayes_path /etc/MailScanner/bayes/bayes bayes_file_mode 0660 Now for recovering the bayes_dbm to bayes_sql # sa-learn -p /path/to/spam.assassin.prefs.conf --restore sa_bayes_backup.txt And finally the acid test # spamassassin -x -D -p /path/to/spam.assassin.prefs.conf --lint Check for lines like debug: bayes: Database connection established debug: bayes: found bayes db version 3 debug: bayes: Using userid: 2 and some more like debug: bayes: tok_get_all: Token Count: 20 debug: bayes token 'somewhat' => 0.978 debug: bayes: score = 0.845189622547555 Make sure you stop and start MailScanner.. Futther reading / discussion can be taken up here: /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the sa-users / sa-dev lists cheers, - dhawal PS: Any mistakes are entirely mine (any yours if you follow this blindly), please test thoroughly before you go production. Also i couldn't find any way to post this to the new wiki, can someone guide me? ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ssilva at SGVWATER.COM Tue Apr 5 17:40:52 2005 From: ssilva at SGVWATER.COM (Scott Silva) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] DNSAdmin wrote: > At 10:40 AM 4/5/2005, you wrote: > >> Hhmm... thank you for all of the replies. I was just about to install >> red >> hat 9 just because I have the media already and it seemed to me it >> would be >> stable. Majority people are talking Centos. >> >> I will go centos if everyone thinks it is good. >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? >> I have not used centos before at all, is it a simple setup such as red >> hat? >> Also I will have to look into up2date as I have not heard of it either. > > > Hey Billy, > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > the 4.0 route. The reason is you will be a a lot more familiar with it and > will have less headaches with implementation. > > The 4.0 version is much more secure, but you have to disable those security > capabilities to get the OS to behave with MailScanner and a whole other > mess of services. > > Cheers! And 3.4 is based on RedHat Enterprise 3 which shared code base with RedHat 9. So technically you are still using 9, but have a good update path for at least 2 and a half more years. -- "If you have ever eaten crow, It don't taste like chicken!!" ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Tue Apr 5 17:57:54 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] DNSAdmin wrote: > At 10:40 AM 4/5/2005, you wrote: > >> Hhmm... thank you for all of the replies. I was just about to install >> red >> hat 9 just because I have the media already and it seemed to me it >> would be >> stable. Majority people are talking Centos. >> >> I will go centos if everyone thinks it is good. >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? >> I have not used centos before at all, is it a simple setup such as red >> hat? >> Also I will have to look into up2date as I have not heard of it either. > > > Hey Billy, > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > the 4.0 route. The reason is you will be a a lot more familiar with it and > will have less headaches with implementation. > > The 4.0 version is much more secure, but you have to disable those security > capabilities to get the OS to behave with MailScanner and a whole other > mess of services. > selinux can be set to disabled / warn during installation. Also centos comes with mysql4 (for mailwatch if required) and SA 3.0.1 so that is nice. It is quite simple to install (as easy as rh9 or centos 3.x). Plus yum is faster.. If you use postfix, (though i think not) you get v2.1 opposed to v2.0 in centos4 and finally it comes with kernel 2.6 (as compared to 2.4 in centos v3.x) If you have some time at your disposal, it'll be best if you try out both options before finalising. - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kodak at FRONTIERHOMEMORTGAGE.COM Tue Apr 5 18:05:14 2005 From: kodak at FRONTIERHOMEMORTGAGE.COM (Jason Balicki) Date: Thu Jan 12 21:29:15 2006 Subject: qmail setup temporarily stopping mail forwarded by MailScanner box Message-ID: Dhawal Doshy <> wrote: > One more way to check if tarpit has been compiled into qmail is this: > # grep tarpit /var/qmail/bin/qmail-smtpd > Binary file /var/qmail/bin/qmail-smtpd matches This test came up negative, so I'm guessing it's something else. Regardless, the problem has yet to rear it's head today, and could have just been me screwing around with it. Stef Morrell <> wrote: > Where did you get your qmail from? I am unaware of anything in > qmail which does this. I have seen a thing called spamthrottle > for qmail: Very long story shortened: I'm taking over for a site I used to administer but was administered by another party for the last two years. They installed a bunch of stuff and I'm becomming familiar with the changes. They pulled OUT the MailScanner+ClamAV+Sophos+SpamAssassin install that I had and replaced it with just qmail. No spam or virus protection or anything. They installed pegasus mail on every desktop because that "makes them immune to viruses." They also let their corporate Sophos license expire. As far as I can tell, the only reason they did the qmail thing is because they wanted catch-all addressing (which the users there now regret. Well, one in particular. :) The "they" in "they" is a largish IT consulting firm who had one "linux guy" on the payroll when they started the contract and then lost him about three months in. Thanks again, guys, for your suggestions. If it pops up again I'll post again (or if I find a fix I'll post.) --J(K) ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jwilliams at courtesymortgage.com Tue Apr 5 18:25:01 2005 From: jwilliams at courtesymortgage.com (Jason) Date: Thu Jan 12 21:29:15 2006 Subject: recommended SA rules to stop SPAM Message-ID: Specifically, the ones that have recently come out about buying certain pieces of stock. Currently running SA 2.63. Was skimming the SARE this morning, trying to see if there are any additional rules that are good ones to add. I am also using surbl_uri.cf and chickenpox.cf. (made a few of my own, but need better ones) Anybody recommend a few other rules to stop this type of spam and to have overall better blockage of spam? Thanks, Jason ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jhuber at MICROSOURCE.COM Tue Apr 5 18:49:39 2005 From: jhuber at MICROSOURCE.COM (Jeremy Huber) Date: Thu Jan 12 21:29:15 2006 Subject: Mailscanner stops scanning attachments?? Message-ID: On Mon, 4 Apr 2005 22:56:47 +0100, Jeremy Huber wrote: >>What have you set to generate that report? Exactly how? The answer may >>tell us important things about your setup. > >I'm using MS 4.38.9 (via RPM), with Mailwatch 0.51 and clamav and >bitdefender for AV scanners. Mailwatch is what gave me that list of >triggered rules. I just realized I forgot the important parts: Sendmail for the MTA, Fedora Core 2 for the OS, and SA 2.63 >>MailScanner does not replace winmail.dat files with the files they >>contain. It unpacks them to virus scan and do filename/type checks, but >>you won't ever get a winmail.dat file as well as a doc file attached to >>the same message. >> >>What do you think is adding the doc? > >I've got an email off to the person seeing it to find out more. All I know >is that they're resume's being emailed out, and "everyone else gets the >document correctly." I know that doesn't mean much. I know the last time >I had a problem with winmail.dat, it turned out to be a problem with the >mailer client that was doing it, not MS. I've gotten more info about this as well. Supposedly, he just attaches the document normally from within Outlook. Jeremy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From campbell at cnpapers.com Tue Apr 5 18:58:26 2005 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Excellent! What a great way to teach others. Although I may not implement this, it certainly educates me about SA and more. Thank you for your time and efforts. Steve Campbell campbell@cnpapers.com Charleston Newspapers ----- Original Message ----- From: Dhawal Doshy To: MAILSCANNER@JISCMAIL.AC.UK Sent: Tuesday, April 05, 2005 12:41 PM Subject: Re: SA 3.0.2 and MySQL Pete Russell wrote: Mmm that sounds like a treat. Would make a great addition to the new wiki documentation project. Care to write a guide and post it up? okay, here goes, apologies for the HTML: You'll need the perl-DBI and perl-DBD-MySQL modules installed before you try this. Assumptions and Variables: SpamAssassin Bayes Database Name: sa_bayes SpamAssassin Bayes Database UserName: sa_user SpamAssassin Bayes Database Password: sa_password Your database server's real name: local_fqdn Every other server that'll connect to and use this database, this name should be resolvable by the DNS or /etc/hosts: remote_fqdn First of all, create a database where you intend on storing the bayesian information # mysql -u root -p #(some distros like redhat and clones have no password set by default.) mysql> create database sa_bayes; mysql> GRANT ALL ON sa_bayes.* TO sa_user@localhost IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@local_fqdn IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@remote_fqdn IDENTIFIED BY 'sa_password'; Locate the bayes_mysql.sql file For RedHat(like) systems: /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql # mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql Now backup your current bayes database: sa-learn -p /path/to/spam.assassin.prefs.conf --backup > sa_bayes_backup.txt sa-learn -p /path/to/spam.assassin.prefs.conf --clear #(optional, incase you want to rollback) Make some changes to your spam.assassin.prefs.conf, on remote (MS Front-end) servers replace 'localhost' with the value of 'local-fqdn' bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:sa_bayes:localhost bayes_sql_username sa_user bayes_sql_password sa_password and comment out the following lines bayes_path /etc/MailScanner/bayes/bayes bayes_file_mode 0660 Now for recovering the bayes_dbm to bayes_sql # sa-learn -p /path/to/spam.assassin.prefs.conf --restore sa_bayes_backup.txt And finally the acid test # spamassassin -x -D -p /path/to/spam.assassin.prefs.conf --lint Check for lines like debug: bayes: Database connection established debug: bayes: found bayes db version 3 debug: bayes: Using userid: 2 and some more like debug: bayes: tok_get_all: Token Count: 20 debug: bayes token 'somewhat' => 0.978 debug: bayes: score = 0.845189622547555 Make sure you stop and start MailScanner.. Futther reading / discussion can be taken up here: /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the sa-users / sa-dev lists cheers, - dhawal PS: Any mistakes are entirely mine (any yours if you follow this blindly), please test thoroughly before you go production. Also i couldn't find any way to post this to the new wiki, can someone guide me? ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mkettler at EVI-INC.COM Tue Apr 5 20:00:20 2005 From: mkettler at EVI-INC.COM (Matt Kettler) Date: Thu Jan 12 21:29:15 2006 Subject: recommended SA rules to stop SPAM Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jason wrote: >Specifically, the ones that have recently come out about buying certain pieces >of stock. > >Currently running SA 2.63. > > upgrade to 2.64 or higher ASAP.. 2.63 is vulnerable to a DoS attack by sending it a message with malformed mime sections. This is a remote exploit. Anyone can exploit it by sending you a carefully crafted email. Admittedly it's just a DoS, but still not something you want on any kind of production server. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0796 This is not exactly new news. It's from August of last year. >Was skimming the SARE this morning, trying to see if there are any additional >rules that are good ones to add. > >I am also using surbl_uri.cf and chickenpox.cf. (made a few of my own, but >need better ones) > surbl is a VERY good one to be using, provided of course you added the Mail::SpamAssassin::SpamCopURI plugin. Also note, when you upgrade to 2.64 you'll need to re-install spamcopURI. SpamCopURI installs as a source-code patch to SA's evaltests.pm, and upgrading SA will clobber it. Not to toot my own horn, but another ruleset I'd recommend is antidrug. It was incorporated into SA 3.0 and works fairly well on pill-spam. A few of the latest ones evade it, but it catches a LOT of common obfuscations of drug names. http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Note: if you upgrade to SA 3.x instead of 2.64, you won't need to mess with SpamCopURI or antidrug, both are built-in with 3.0. However, 3.x does have a minimum perl version of 5.6.1. If you're on an older version of perl, you'll have to stick to 2.64. I also like SARE's fraud, random and specific rulesets. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Tue Apr 5 20:17:26 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: Thanks for more information on this all. To see if I understand you correctly DNSAdmin, I understood that you when you say centos, you mean centos 4? You reference centos otherwise as centos 3.x. I do not understand your line of: " selinux can be set to disabled / warn during installation." Please explain :) > -----Original Message----- > From: Dhawal Doshy [mailto:dhawal@NETMAGICSOLUTIONS.COM] > Sent: Tuesday, April 05, 2005 11:58 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > DNSAdmin wrote: > > At 10:40 AM 4/5/2005, you wrote: > > > >> Hhmm... thank you for all of the replies. I was just about to install > >> red > >> hat 9 just because I have the media already and it seemed to me it > >> would be > >> stable. Majority people are talking Centos. > >> > >> I will go centos if everyone thinks it is good. > >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ > ?? > >> I have not used centos before at all, is it a simple setup such as red > >> hat? > >> Also I will have to look into up2date as I have not heard of it either. > > > > > > Hey Billy, > > > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > > the 4.0 route. The reason is you will be a a lot more familiar with it > and > > will have less headaches with implementation. > > > > The 4.0 version is much more secure, but you have to disable those > security > > capabilities to get the OS to behave with MailScanner and a whole other > > mess of services. > > > > selinux can be set to disabled / warn during installation. > > Also centos comes with mysql4 (for mailwatch if required) and SA 3.0.1 > so that is nice. It is quite simple to install (as easy as rh9 or centos > 3.x). Plus yum is faster.. > > If you use postfix, (though i think not) you get v2.1 opposed to v2.0 in > centos4 and finally it comes with kernel 2.6 (as compared to 2.4 in > centos v3.x) > > If you have some time at your disposal, it'll be best if you try out > both options before finalising. > > - dhawal > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dnsadmin at 1BIGTHINK.COM Tue Apr 5 20:40:23 2005 From: dnsadmin at 1BIGTHINK.COM (DNSAdmin) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: At 03:17 PM 4/5/2005, you wrote: Please see inline comments >Thanks for more information on this all. >To see if I understand you correctly DNSAdmin, I understood that you when >you say centos, you mean centos 4? You reference centos otherwise as centos >3.x. No, CentOS has had versions 3.0 - 3.4 iso distros with applied updates throughout the life of RedHat ES 3.0 while RedHat only had version ES 3.0 with constant updates (that you have to pay to get support for). >I do not understand your line of: >" selinux can be set to disabled / warn during installation." >Please explain :) > The selinux part is what I was warning about, though Dhawal, referring to this fact knows more about it than I do.. that's why my description was so vague about CentOS 4.0/RedHat ES 4.0 and Dhawal was more precise. You'll be a lot more familiar with the CentOS 3.4. You'll have a whole new kernel and selinux to deal with in 4.0. You chose! Cheers! > > -----Original Message----- > > From: Dhawal Doshy [mailto:dhawal@NETMAGICSOLUTIONS.COM] > > Sent: Tuesday, April 05, 2005 11:58 AM > > To: MAILSCANNER@JISCMAIL.AC.UK > > Subject: Re: Starting from scratch > > > > DNSAdmin wrote: > > > At 10:40 AM 4/5/2005, you wrote: > > > > > >> Hhmm... thank you for all of the replies. I was just about to install > > >> red > > >> hat 9 just because I have the media already and it seemed to me it > > >> would be > > >> stable. Majority people are talking Centos. > > >> > > >> I will go centos if everyone thinks it is good. > > >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ > > ?? > > >> I have not used centos before at all, is it a simple setup such as red > > >> hat? > > >> Also I will have to look into up2date as I have not heard of it either. > > > > > > > > > Hey Billy, > > > > > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > > > the 4.0 route. The reason is you will be a a lot more familiar with it > > and > > > will have less headaches with implementation. > > > > > > The 4.0 version is much more secure, but you have to disable those > > security > > > capabilities to get the OS to behave with MailScanner and a whole other > > > mess of services. > > > > > > > selinux can be set to disabled / warn during installation. > > > > Also centos comes with mysql4 (for mailwatch if required) and SA 3.0.1 > > so that is nice. It is quite simple to install (as easy as rh9 or centos > > 3.x). Plus yum is faster.. > > > > If you use postfix, (though i think not) you get v2.1 opposed to v2.0 in > > centos4 and finally it comes with kernel 2.6 (as compared to 2.4 in > > centos v3.x) > > > > If you have some time at your disposal, it'll be best if you try out > > both options before finalising. > > > > - dhawal -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. http://www.sng.ecs.soton.ac.uk/mailscanner/ Configuration by Glenn Parsons dnsadmin-at-1bigthink.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Tue Apr 5 21:36:52 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "utf-8" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] sorry for creating the confusion: repeating (top posting) what i wrote earlier a bit more clearly CentOS 4x (based on rhel4) uses selinux (Security Enhanced Linux), which during installation can be set to the following 3 options. a. Enable (to enable selinux) b. Warn (to enable but only warn and not interfere otherwise) c. Disable (to completely disable selinux) While selinux is great in file / print environments, i currently see not much use for it in a relay only mail server (i may be wrong though). Apart from that CentOS 4x comes with the following packages: a. SpamAssassin 3.0.1 compared to 2.64 in centos 3.x b. MySQL 4.x (which i prefer for mailwatch) compared to 3.23 in centos 3.x c. Postfix 2.1.x rather than 2.0.x with centos 3.x d. Kernel 2.6 as opposed to 2.4 in centos 3.x Apart from that, yum (a utility for package management and to keep your server updated) is much faster compared to previous versions.. hope that clears all doubts.. if you need any further help installing centos4 (or even 3.x) i could be contacted off the list. i recently upgraded 4 servers to centos4.x and am quite happy with the performance and so far do not notice any compatibility or performance related issues. happy decision making.. - dhawal DNSAdmin writes: > At 03:17 PM 4/5/2005, you wrote: > > Please see inline comments > >> Thanks for more information on this all. >> To see if I understand you correctly DNSAdmin, I understood that you when >> you say centos, you mean centos 4? You reference centos otherwise as >> centos >> 3.x. > > No, CentOS has had versions 3.0 - 3.4 iso distros with applied updates > throughout the life of RedHat ES 3.0 while RedHat only had version ES 3.0 > with constant updates (that you have to pay to get support for). > >> I do not understand your line of: >> " selinux can be set to disabled / warn during installation." >> Please explain :) >> > > The selinux part is what I was warning about, though Dhawal, referring to > this fact knows more about it than I do.. that's why my description was so > vague about CentOS 4.0/RedHat ES 4.0 and Dhawal was more precise. > > You'll be a lot more familiar with the CentOS 3.4. > > You'll have a whole new kernel and selinux to deal with in 4.0. You chose! > > Cheers! > > >> > -----Original Message----- >> > From: Dhawal Doshy [mailto:dhawal@NETMAGICSOLUTIONS.COM] >> > Sent: Tuesday, April 05, 2005 11:58 AM >> > To: MAILSCANNER@JISCMAIL.AC.UK >> > Subject: Re: Starting from scratch >> > >> > DNSAdmin wrote: >> > > At 10:40 AM 4/5/2005, you wrote: >> > > >> > >> Hhmm... thank you for all of the replies. I was just about to >> install >> > >> red >> > >> hat 9 just because I have the media already and it seemed to me it >> > >> would be >> > >> stable. Majority people are talking Centos. >> > >> >> > >> I will go centos if everyone thinks it is good. >> > >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ >> > ?? >> > >> I have not used centos before at all, is it a simple setup such as >> red >> > >> hat? >> > >> Also I will have to look into up2date as I have not heard of it >> either. >> > > >> > > >> > > Hey Billy, >> > > >> > > I had suggested earlier that you take a look at CentOS 3.4 as opposed >> to >> > > the 4.0 route. The reason is you will be a a lot more familiar with >> it >> > and >> > > will have less headaches with implementation. >> > > >> > > The 4.0 version is much more secure, but you have to disable those >> > security >> > > capabilities to get the OS to behave with MailScanner and a whole >> other >> > > mess of services. >> > > >> > >> > selinux can be set to disabled / warn during installation. >> > >> > Also centos comes with mysql4 (for mailwatch if required) and SA 3.0.1 >> > so that is nice. It is quite simple to install (as easy as rh9 or >> centos >> > 3.x). Plus yum is faster.. >> > >> > If you use postfix, (though i think not) you get v2.1 opposed to v2.0 >> in >> > centos4 and finally it comes with kernel 2.6 (as compared to 2.4 in >> > centos v3.x) >> > >> > If you have some time at your disposal, it'll be best if you try out >> > both options before finalising. >> > >> > - dhawal > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > http://www.sng.ecs.soton.ac.uk/mailscanner/ > Configuration by Glenn Parsons dnsadmin-at-1bigthink.com > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Tue Apr 5 22:07:45 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:15 2006 Subject: Wildcard support in phishing.safe.sites.conf Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Attached is a patch for the Message.pm in the latest stable (4.40) version. With this patch applied, you can list wildcarded hosts in phishing.safe.sites.conf. So instead of listing www.safedomain.com www2.safedomain.com www.internal.safedomain.com and other hosts like that one at a time, you can just use *.safedomain.com instead. I strongly advise against adding *.com to your safe.sites file! Use this feature with care. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, Application/X-GZIP 900bytes. ] [ Unable to print this part. ] From ivessm at softecusa.com Wed Apr 6 00:24:10 2005 From: ivessm at softecusa.com (Stewart M. Ives) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Billy, The MailWatch I'm talking about is: http://sourceforge.net/projects/mailwatch/ As to centos.org I haven't done anything with it. stew ---------- Original Message ----------- From: Billy Pumphrey To: MAILSCANNER@JISCMAIL.AC.UK Sent: Tue, 5 Apr 2005 09:40:51 -0500 Subject: Re: Starting from scratch > Hhmm... thank you for all of the replies. I was just about to > install red hat 9 just because I have the media already and it > seemed to me it would be stable. Majority people are talking Centos. > > I will go centos if everyone thinks it is good. > Is the mailwatch you are speaking of this: http://www.mailwatch.com/ > ?? I have not used centos before at all, is it a simple setup such > as red hat? Also I will have to look into up2date as I have not > heard of it either. > > > -----Original Message----- > > From: Stewart M. Ives [mailto:ivessm@SOFTECUSA.COM] > > Sent: Tuesday, April 05, 2005 7:41 AM > > To: MAILSCANNER@JISCMAIL.AC.UK > > Subject: Re: Starting from scratch > > > > Ref OS question: > > > > I've been using FC2 without any problems what so ever. up2date works and > > keeps the box updated. > > > > I also run MailWatch on it. Great program to get an overall look at what > > is > > coming into the box and to keep records. If you ever needed something to > > justify your job MailWatch will do it for you. It will show what is > > happening and make you shine in that it is all being taken care of. > > > > I'll probably move up to FC4 a while after it is released. > > > > stew > > > > > > ---------- Original Message ----------- > > From: Res > > To: MAILSCANNER@JISCMAIL.AC.UK > > Sent: Tue, 5 Apr 2005 18:58:01 +1000 > > Subject: Re: Starting from scratch > > > > > On Tue, 5 Apr 2005, Peter Russell wrote: > > > > > > > I reckon centos 4.0 (which is just rhel without the license and groovy > > > > installer) is the go, or buy a red hat license and use Red Hat > > > > Proffessional 4.0 > > > > > > > > Red Hat 9 is too old now... > > > > > > Its tried and proven, we have RH9 boxes with manual kernel upgrades when > > > security dictates, they are unbreakable, centos has had to be > > > rebooted a few times, I have no intention of changing my mail > > > servers off RH9 because i couldnt break the damn thing if i tried > > > its so stable. > > > > > > > > > > > Billy Pumphrey wrote: > > > >> I searched the mailscanner archives at > > > >> http://www.jiscmail.ac.uk/cgi-bin/wa.exe? > > S1=mailscanner&D=0&T=0&H=0&O=T&F=&S > > > >> = > > > >> > > > >> But I could not locate updates information. I also tried to find the > > > >> recently topic of "Complete Build". I know that there is a ton of > > > >> information in there but I just could not find it. I know that a lot > > is > > > >> talked about what to run it on, however if I may inquire on my setup > > as > > > >> Linux is not my environment of expertise. I will try to make my > > questions > > > >> short. My main and pretty much only question is what versions should > > I > > > >> use? > > > >> > > > >> What I have now: > > > >> 550mhz > > > >> 384 RAM > > > >> IDE hard drive (desktop) > > > >> > > > >> I will be moving to: > > > >> Server > > > >> Dual 600PIII > > > >> 1024 RAM > > > >> 3x9.1GB RAID 5 Hard drives > > > >> > > > >> What I have now: > > > >> Redhat 9 (Shrike) > > > >> MailScanner 4.25 > > > >> Spamassassin 2.61 > > > >> MailStats for statistics > > > >> Running RulesDuJour > > > >> Running other rules too > > > >> Sendmail version ?? > > > >> Sophos virus scanning > > > >> > > > >> In question to move to: > > > >> Should I still use Redhat 9? Seems to work fine > > > >> MailScanner 4.40.11 > > > >> Sendmails latest version 8.13.4 > > > >> Spamassassin latest version 3.0.2 > > > >> Different rule sets from the web sites > > > >> > > > >> ------------------------ MailScanner list ------------------------ > > > >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > >> 'leave mailscanner' in the body of the email. > > > >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > > >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > >> > > > >> Support MailScanner development - buy the book off the website! > > > >> > > > >> > > > >> > > > > > > > > ------------------------ MailScanner list ------------------------ > > > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > > 'leave mailscanner' in the body of the email. > > > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > > > > > Support MailScanner development - buy the book off the website! > > > > > > > > > > -- > > > Cheers > > > Res > > > > > > ------------------------ MailScanner list ------------------------ > > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > > 'leave mailscanner' in the body of the email. > > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > > > Support MailScanner development - buy the book off the website! > > ------- End of Original Message ------- > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------- End of Original Message ------- ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Wed Apr 6 06:13:40 2005 From: pete at ENITECH.COM.AU (Peter Russell) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] DNSAdmin wrote: > At 10:40 AM 4/5/2005, you wrote: > >> Hhmm... thank you for all of the replies. I was just about to install >> red >> hat 9 just because I have the media already and it seemed to me it >> would be >> stable. Majority people are talking Centos. >> >> I will go centos if everyone thinks it is good. >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? >> I have not used centos before at all, is it a simple setup such as red >> hat? >> Also I will have to look into up2date as I have not heard of it either. > > > Hey Billy, > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > the 4.0 route. The reason is you will be a a lot more familiar with it and > will have less headaches with implementation. > > The 4.0 version is much more secure, but you have to disable those security > capabilities to get the OS to behave with MailScanner and a whole other > mess of services. > why? Does Red HAt 4 and centos almost the same? PLenty of us using RHEL4. Pete > Cheers! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > http://www.sng.ecs.soton.ac.uk/mailscanner/ > Configuration by Glenn Parsons dnsadmin-at-1bigthink.com > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mailscanner-list at OKLA.COM Wed Apr 6 07:27:58 2005 From: mailscanner-list at OKLA.COM (Tracy Greggs) Date: Thu Jan 12 21:29:15 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] He is probably referring to SELinux which if enabled breaks a ton of things. Tracy ----- Original Message ----- From: "Peter Russell" To: Sent: Wednesday, April 06, 2005 12:13 AM Subject: Re: Starting from scratch > DNSAdmin wrote: > > At 10:40 AM 4/5/2005, you wrote: > > > >> Hhmm... thank you for all of the replies. I was just about to install > >> red > >> hat 9 just because I have the media already and it seemed to me it > >> would be > >> stable. Majority people are talking Centos. > >> > >> I will go centos if everyone thinks it is good. > >> Is the mailwatch you are speaking of this: http://www.mailwatch.com/ ?? > >> I have not used centos before at all, is it a simple setup such as red > >> hat? > >> Also I will have to look into up2date as I have not heard of it either. > > > > > > Hey Billy, > > > > I had suggested earlier that you take a look at CentOS 3.4 as opposed to > > the 4.0 route. The reason is you will be a a lot more familiar with it and > > will have less headaches with implementation. > > > > The 4.0 version is much more secure, but you have to disable those security > > capabilities to get the OS to behave with MailScanner and a whole other > > mess of services. > > > > why? Does Red HAt 4 and centos almost the same? PLenty of us using RHEL4. > Pete > > Cheers! > > > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > http://www.sng.ecs.soton.ac.uk/mailscanner/ > > Configuration by Glenn Parsons dnsadmin-at-1bigthink.com > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > > > > > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > Oklahoma Network Consulting has scanned this > message for viruses and dangerous content with > MailScanner, and commercial virus scanners McAfee > and F-Prot and is believed to be clean. > --- -- Oklahoma Network Consulting has scanned this message for viruses and dangerous content with MailScanner, and commercial virus scanners McAfee and F-Prot and is believed to be clean. --- ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From john at TRADOC.FR Wed Apr 6 08:21:36 2005 From: john at TRADOC.FR (John Wilcock) Date: Thu Jan 12 21:29:15 2006 Subject: Phishing net doesn't like backslashes... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > MailScanner has > detected a possible fraud attempt from "http:\\www.example.com" claiming > to be http:\\www.example.com Not that backslashes should ever be used in URIs, of course, but they are occasionally seen in practice and are totally harmless. John. -- -- Over 2500 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 09:28:11 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, I have a question about MailScanner's support for IPv6. I checked the mailing list archives and found the release notes for 4.21-8, stating: - Now support IPv6 addresses completely. I also found some IPv6 references in .pm files in lib/MailScanner/. However, I'm having troubles with IPv6. The OS is SuSE Linux 9.2 (kernel 2.6.11.6). Whenever a message is received over IPv6, MailScanner seems to think the sending mail server is the localhost (127.0.0.1). Here is an example (some info obscured): ******************************************************************** Apr 6 09:53:38 mx1 sendmail-in[13464]: j367qhO9013464: from=SENDER, size=105, class=0, nrcpts=1, msgid=MSGID, proto=SMTP, daemon=MTA-Inet, relay=xs6.xs4all.nl [IPv6:2001:888:0:1::666] Apr 6 09:53:38 mx1 sendmail-in[13464]: j367qhO9013464: to=RECIPIENT, delay=00:00:32, mailer=esmtp, pri=30105, stat=queued Apr 6 09:53:40 mx1 MailScanner[31983]: New Batch: Scanning 1 messages, 670 bytes Apr 6 09:53:41 mx1 MailScanner[31983]: Saved archive copies of j367qhO9013464 Apr 6 09:53:41 mx1 MailScanner[31983]: MCP Checks completed at 670 bytes per second Apr 6 09:53:41 mx1 MailScanner[31983]: Spam Checks: Starting Apr 6 09:53:45 mx1 MailScanner[31983]: Message j367qhO9013464 from 127.0.0.1 (SENDER) to RECIPIENT is not spam, SpamAssassin (score=-15, required 4, autolearn=not spam, BAYES_00 -15.00) ******************************************************************** Because of this, all mail received from the IPv6 net is tagged as non spam, since localhost is bypassed for several checks (mainly because of MailWatch). Does MailScanner have some sort of default (127.0.0.1), when the IP address cannot be determined or something? Does anyone else experience this or are there not much IPv6 connected mail hosts out there? ;-) Regards, Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at ZANKER.ORG Wed Apr 6 09:52:19 2005 From: mike at ZANKER.ORG (Mike Zanker) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Mike wrote: > Does anyone else experience this or are there not much IPv6 connected mail hosts out there? ;-) I receive a fair amount of mail over IPv6 (including everything from the Exim mailing list) but have not had any problems. I am using Exim, though, not sendmail. Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Wed Apr 6 09:53:13 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: Will you take this Peter? Or perhaps better... Dahwal, driop Ugo a line and join in the fun...:-). -- Glenn -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Dhawal Doshy Sent: den 5 april 2005 18:41 To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: SA 3.0.2 and MySQL Pete Russell wrote: Mmm that sounds like a treat. Would make a great addition to the new wiki documentation project. Care to write a guide and post it up? okay, here goes, apologies for the HTML: You'll need the perl-DBI and perl-DBD-MySQL modules installed before you try this. Assumptions and Variables: SpamAssassin Bayes Database Name: sa_bayes SpamAssassin Bayes Database UserName: sa_user SpamAssassin Bayes Database Password: sa_password Your database server's real name: local_fqdn Every other server that'll connect to and use this database, this name should be resolvable by the DNS or /etc/hosts: remote_fqdn First of all, create a database where you intend on storing the bayesian information # mysql -u root -p #(some distros like redhat and clones have no password set by default.) mysql> create database sa_bayes; mysql> GRANT ALL ON sa_bayes.* TO sa_user@localhost IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@local_fqdn IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@remote_fqdn IDENTIFIED BY 'sa_password'; Locate the bayes_mysql.sql file For RedHat(like) systems: /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql # mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql Now backup your current bayes database: sa-learn -p /path/to/spam.assassin.prefs.conf --backup > sa_bayes_backup.txt sa-learn -p /path/to/spam.assassin.prefs.conf --clear #(optional, incase you want to rollback) Make some changes to your spam.assassin.prefs.conf, on remote (MS Front-end) servers replace 'localhost' with the value of 'local-fqdn' bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:sa_bayes:localhost bayes_sql_username sa_user bayes_sql_password sa_password and comment out the following lines bayes_path /etc/MailScanner/bayes/bayes bayes_file_mode 0660 Now for recovering the bayes_dbm to bayes_sql # sa-learn -p /path/to/spam.assassin.prefs.conf --restore sa_bayes_backup.txt And finally the acid test # spamassassin -x -D -p /path/to/spam.assassin.prefs.conf --lint Check for lines like debug: bayes: Database connection established debug: bayes: found bayes db version 3 debug: bayes: Using userid: 2 and some more like debug: bayes: tok_get_all: Token Count: 20 debug: bayes token 'somewhat' => 0.978 debug: bayes: score = 0.845189622547555 Make sure you stop and start MailScanner.. Futther reading / discussion can be taken up here: /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the sa-users / sa-dev lists cheers, - dhawal PS: Any mistakes are entirely mine (any yours if you follow this blindly), please test thoroughly before you go production. Also i couldn't find any way to post this to the new wiki, can someone guide me? ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ^@ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Wed Apr 6 09:59:14 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: Oops, missed the PS... It's quite simple, just register a user, make a blurb on the volonteers page... and off you go:-). -- Glenn -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Steen, Glenn Sent: den 6 april 2005 10:53 To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: SA 3.0.2 and MySQL Will you take this Peter? Or perhaps better... Dahwal, driop Ugo a line and join in the fun...:-). -- Glenn -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Dhawal Doshy Sent: den 5 april 2005 18:41 To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: SA 3.0.2 and MySQL Pete Russell wrote: Mmm that sounds like a treat. Would make a great addition to the new wiki documentation project. Care to write a guide and post it up? okay, here goes, apologies for the HTML: You'll need the perl-DBI and perl-DBD-MySQL modules installed before you try this. Assumptions and Variables: SpamAssassin Bayes Database Name: sa_bayes SpamAssassin Bayes Database UserName: sa_user SpamAssassin Bayes Database Password: sa_password Your database server's real name: local_fqdn Every other server that'll connect to and use this database, this name should be resolvable by the DNS or /etc/hosts: remote_fqdn First of all, create a database where you intend on storing the bayesian information # mysql -u root -p #(some distros like redhat and clones have no password set by default.) mysql> create database sa_bayes; mysql> GRANT ALL ON sa_bayes.* TO sa_user@localhost IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@local_fqdn IDENTIFIED BY 'sa_password'; mysql> GRANT ALL ON sa_bayes.* TO sa_user@remote_fqdn IDENTIFIED BY 'sa_password'; Locate the bayes_mysql.sql file For RedHat(like) systems: /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql # mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql Now backup your current bayes database: sa-learn -p /path/to/spam.assassin.prefs.conf --backup > sa_bayes_backup.txt sa-learn -p /path/to/spam.assassin.prefs.conf --clear #(optional, incase you want to rollback) Make some changes to your spam.assassin.prefs.conf, on remote (MS Front-end) servers replace 'localhost' with the value of 'local-fqdn' bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:sa_bayes:localhost bayes_sql_username sa_user bayes_sql_password sa_password and comment out the following lines bayes_path /etc/MailScanner/bayes/bayes bayes_file_mode 0660 Now for recovering the bayes_dbm to bayes_sql # sa-learn -p /path/to/spam.assassin.prefs.conf --restore sa_bayes_backup.txt And finally the acid test # spamassassin -x -D -p /path/to/spam.assassin.prefs.conf --lint Check for lines like debug: bayes: Database connection established debug: bayes: found bayes db version 3 debug: bayes: Using userid: 2 and some more like debug: bayes: tok_get_all: Token Count: 20 debug: bayes token 'somewhat' => 0.978 debug: bayes: score = 0.845189622547555 Make sure you stop and start MailScanner.. Futther reading / discussion can be taken up here: /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the sa-users / sa-dev lists cheers, - dhawal PS: Any mistakes are entirely mine (any yours if you follow this blindly), please test thoroughly before you go production. Also i couldn't find any way to post this to the new wiki, can someone guide me? ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ^@ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 10:32:13 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Mike Zanker > >I receive a fair amount of mail over IPv6 (including everything from the >Exim mailing list) but have not had any problems. I am using Exim, >though, not sendmail. I think I've located the problem, it's in lib/Sendmail.pm (so it's sendmail related): ********************** if ($Line =~ /^\$_/) { $ip = $Line; #chomp $ip; if ($ip =~ /\[([\d.:abcdef]+)\]/) { $message->{clientip} = $1; } else { # It is a locally-created message and doesn't have an smtp client ip $message->{clientip} = '127.0.0.1'; } $IPFound = 1; # We have found the client IP address } ********************** Now to figure out what the "if ($ip =~ /\[([\d.:abcdef]+)\]/) {" check needs to be (I'm not a perl guru). I'll try to experiment a bit. >Mike. Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Wed Apr 6 11:15:46 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] ? I will add this to the wiki on his behalf. Kind regards and thanks for providing this doco. I am going to try it on a new test machine i am building next week. Thanks again Pete Steen, Glenn wrote: > Will you take this Peter? > Or perhaps better... Dahwal, driop Ugo a line and join in the fun...:-). > > -- Glenn > > -----Original Message----- > *From:* MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] > *On Behalf Of *Dhawal Doshy > *Sent:* den 5 april 2005 18:41 > *To:* MAILSCANNER@JISCMAIL.AC.UK > *Subject:* Re: SA 3.0.2 and MySQL > > Pete Russell wrote: > >> Mmm that sounds like a treat. Would make a great addition to the new >> wiki documentation project. >> >> Care to write a guide and post it up? > > okay, here goes, apologies for the HTML: > > You'll need the perl-DBI and perl-DBD-MySQL modules installed before > you try this. > > _Assumptions and Variables:_ > SpamAssassin Bayes Database Name: *sa_bayes* > SpamAssassin Bayes Database UserName: *sa_user* > SpamAssassin Bayes Database Password: *sa_password* > Your database server's real name: *local_fqdn* > Every other server that'll connect to and use this database, this > name should be resolvable by the DNS or /etc/hosts: *remote_fqdn* > > First of all, create a database where you intend on storing the > bayesian information > /# mysql -u root -p/ #(some distros like redhat and clones have no > password set by default.) > /mysql> create database sa_bayes; > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@localhost IDENTIFIED > BY '*sa_password*'; > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@*local_fqdn* > IDENTIFIED BY '*sa_password*'; > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@*remote_fqdn* > IDENTIFIED BY '*sa_password*'; > / > Locate the bayes_mysql.sql file > For RedHat(like) systems: > /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql > > /# mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql/ > > Now backup your current bayes database: > /sa-learn -p /path/to/spam.assassin.prefs.conf --backup > > sa_bayes_backup.txt > sa-learn -p /path/to/spam.assassin.prefs.conf --clear #(optional, > incase you want to rollback) > / > Make some changes to your spam.assassin.prefs.conf, on remote (MS > Front-end) servers replace '*localhost*' with the value of > '*local-fqdn*' > > bayes_store_module Mail::SpamAssassin::BayesStore::SQL > bayes_sql_dsn DBI:mysql:*sa_bayes:localhost* > bayes_sql_username *sa_user* > bayes_sql_password *sa_password* > * > *and comment out the following lines > bayes_path /etc/MailScanner/bayes/bayes > bayes_file_mode 0660 > > Now for recovering the bayes_dbm to bayes_sql > /# sa-learn -p /path/to/spam.assassin.prefs.conf --restore > sa_bayes_backup.txt/ > > And finally the acid test > /# spamassassin -x -D -p /path/to/spam.assassin.prefs.conf --lint/ > > Check for lines like > debug: bayes: Database connection established > debug: bayes: found bayes db version 3 > debug: bayes: Using userid: 2 > and some more like > debug: bayes: tok_get_all: Token Count: 20 > debug: bayes token 'somewhat' => 0.978 > debug: bayes: score = 0.845189622547555 > > Make sure you stop and start MailScanner.. > > Futther reading / discussion can be taken up here: > /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the > sa-users / sa-dev lists > > cheers, > - dhawal > > PS: Any mistakes are entirely mine (any yours if you follow this > blindly), please test thoroughly before you go production. > Also i couldn't find any way to post this to the new wiki, can > someone guide me? > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 11:37:05 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Mike > >Now to figure out what the "if ($ip =~ /\[([\d.:abcdef]+)\]/) {" check >needs to be (I'm not a perl guru). I'll try to experiment a bit. I solved this (see patch) by changing if ($ip =~ /\[([\d.:abcdef]+)\]/) { into if ($ip =~ /\[([IPv6\d.:abcdef]+)\]/) { in Sendmail.pm. I'm not sure if this is the best check (ItWorksForMe[tm]), but I'll leave that to Julian. Now I'm off to MailWatch, since it seems there's also something going wrong there. The mailscanner database does have the correct clientip record, however the details of a IPv6 message shows "127.0.0.1" as "Received from:". There will probably a similar check with default "127.0.0.1" in one of the .php files. Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "Sendmail.pm-IPv6.diff" Application/OCTET-STREAM (Name: ] [ "Sendmail.pm-IPv6.diff") 592bytes. ] [ Unable to print this part. ] From rcooper at DWFORD.COM Wed Apr 6 11:47:45 2005 From: rcooper at DWFORD.COM (Rick Cooper) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Mike > Sent: Wednesday, April 06, 2005 5:37 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: MailScanner & IPv6 [SOLVED] > > > >-----Original Message----- > >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > >Behalf Of Mike > > > >Now to figure out what the "if ($ip =~ /\[([\d.:abcdef]+)\]/) {" check > >needs to be (I'm not a perl guru). I'll try to experiment a bit. > > I solved this (see patch) by changing > > if ($ip =~ /\[([\d.:abcdef]+)\]/) { > > into > > if ($ip =~ /\[([IPv6\d.:abcdef]+)\]/) { I was about to suggest you go with if ($ip =~ /\[IPv6:([\d.:abcdef]+)\]/) { if they are using the same format as in the log snipet you showed I don't believe you actually want the "IPv6:" portion in the IP address, unless somewhere else in the code it's removed. Your change would return the IP as IPv6:2001:888:0:1::666 not 2001:888:0:1::666 Rick > > in Sendmail.pm. I'm not sure if this is the best check > (ItWorksForMe[tm]), but I'll leave that to Julian. > > Now I'm off to MailWatch, since it seems there's also something > going wrong there. The mailscanner database does have the correct > clientip record, however the details of a IPv6 message shows > "127.0.0.1" as "Received from:". There will probably a similar > check with default "127.0.0.1" in one of the .php files. > > Mike. > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 11:57:53 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Rick Cooper > >I was about to suggest you go with if ($ip =~ /\[IPv6:([\d.:abcdef]+)\]/) { > >if they are using the same format as in the log snipet you showed I don't >believe you actually want the "IPv6:" portion in the IP address, unless >somewhere else in the code it's removed. Your change would return the IP as >IPv6:2001:888:0:1::666 not 2001:888:0:1::666 Well, actually you do want that, since it's easier to distinguish that's an IPv6 address. I also believe that the IPv6: tag is mantory (at least for now), or am I wrong? Also, I don't think your statement works. It also has to match non IPv6 addresses, which your solution does not. In your case IPv6 works, but regular IPv4 addresses will get the default "127.0.0.1", since the if only matches when it starts with IPv6. I'll let Julian come up with a good/better solution than mine. I just made a quick fix, so IPv6 mail is no longer automagically tagged as coming from the localhost and ergo being non spam. >Rick Thanks, Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rcooper at DWFORD.COM Wed Apr 6 12:11:10 2005 From: rcooper at DWFORD.COM (Rick Cooper) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Mike > Sent: Wednesday, April 06, 2005 5:58 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: MailScanner & IPv6 [SOLVED] > > > >-----Original Message----- > >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > >Behalf Of Rick Cooper > > > >I was about to suggest you go with if ($ip =~ > /\[IPv6:([\d.:abcdef]+)\]/) { > > > >if they are using the same format as in the log snipet you showed I don't > >believe you actually want the "IPv6:" portion in the IP address, unless > >somewhere else in the code it's removed. Your change would > return the IP as > >IPv6:2001:888:0:1::666 not 2001:888:0:1::666 > > Well, actually you do want that, since it's easier to distinguish > that's an IPv6 address. I also believe that the IPv6: tag is > mantory (at least for now), or am I wrong? > It's not part of the specification, which is why I mentioned it. It's easy to spot an IPv6 address anyway because of the format. > Also, I don't think your statement works. It also has to match > non IPv6 addresses, which your solution does not. In your case > IPv6 works, but regular IPv4 addresses will get the default > "127.0.0.1", since the if only matches when it starts with IPv6. > Yeah, should have made that "(?:Ipv6:)?" oops! I doubt that the accuracy of the address is an issue once it's gotten to mailscanner anyway. > I'll let Julian come up with a good/better solution than mine. I > just made a quick fix, so IPv6 mail is no longer automagically > tagged as coming from the localhost and ergo being non spam. > > >Rick > > Thanks, > Mike. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Wed Apr 6 12:35:05 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Pete Russell > Sent: den 6 april 2005 12:16 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: SA 3.0.2 and MySQL > > > ? Well... I would've done it myself if I had the time... But Real Work(tm) is limiting that resource for me ATM... Aparantly Dahwal would've too, but failed somehow (can't imagine how, seeing as it is so simple:-). Cheers -- Glenn > > I will add this to the wiki on his behalf. > > Kind regards and thanks for providing this doco. I am going > to try it on > a new test machine i am building next week. > > Thanks again > Pete > > Steen, Glenn wrote: > > Will you take this Peter? > > Or perhaps better... Dahwal, driop Ugo a line and join in > the fun...:-). > > > > -- Glenn > > > > -----Original Message----- > > *From:* MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] > > *On Behalf Of *Dhawal Doshy > > *Sent:* den 5 april 2005 18:41 > > *To:* MAILSCANNER@JISCMAIL.AC.UK > > *Subject:* Re: SA 3.0.2 and MySQL > > > > Pete Russell wrote: > > > >> Mmm that sounds like a treat. Would make a great > addition to the new > >> wiki documentation project. > >> > >> Care to write a guide and post it up? > > > > okay, here goes, apologies for the HTML: > > > > You'll need the perl-DBI and perl-DBD-MySQL modules > installed before > > you try this. > > > > _Assumptions and Variables:_ > > SpamAssassin Bayes Database Name: *sa_bayes* > > SpamAssassin Bayes Database UserName: *sa_user* > > SpamAssassin Bayes Database Password: *sa_password* > > Your database server's real name: *local_fqdn* > > Every other server that'll connect to and use this > database, this > > name should be resolvable by the DNS or /etc/hosts: > *remote_fqdn* > > > > First of all, create a database where you intend on storing the > > bayesian information > > /# mysql -u root -p/ #(some distros like redhat and > clones have no > > password set by default.) > > /mysql> create database sa_bayes; > > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@localhost > IDENTIFIED > > BY '*sa_password*'; > > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@*local_fqdn* > > IDENTIFIED BY '*sa_password*'; > > mysql> GRANT ALL ON *sa_bayes*.* TO *sa_user*@*remote_fqdn* > > IDENTIFIED BY '*sa_password*'; > > / > > Locate the bayes_mysql.sql file > > For RedHat(like) systems: > > /usr/share/doc/spamassassin-%version%/sql/bayes_mysql.sql > > > > /# mysql -u sa_user -p sa_bayes < /path/to/bayes_mysql.sql/ > > > > Now backup your current bayes database: > > /sa-learn -p /path/to/spam.assassin.prefs.conf --backup > > > sa_bayes_backup.txt > > sa-learn -p /path/to/spam.assassin.prefs.conf --clear > #(optional, > > incase you want to rollback) > > / > > Make some changes to your spam.assassin.prefs.conf, on > remote (MS > > Front-end) servers replace '*localhost*' with the value of > > '*local-fqdn*' > > > > bayes_store_module Mail::SpamAssassin::BayesStore::SQL > > bayes_sql_dsn DBI:mysql:*sa_bayes:localhost* > > bayes_sql_username *sa_user* > > bayes_sql_password *sa_password* > > * > > *and comment out the following lines > > bayes_path /etc/MailScanner/bayes/bayes > > bayes_file_mode 0660 > > > > Now for recovering the bayes_dbm to bayes_sql > > /# sa-learn -p /path/to/spam.assassin.prefs.conf --restore > > sa_bayes_backup.txt/ > > > > And finally the acid test > > /# spamassassin -x -D -p > /path/to/spam.assassin.prefs.conf --lint/ > > > > Check for lines like > > debug: bayes: Database connection established > > debug: bayes: found bayes db version 3 > > debug: bayes: Using userid: 2 > > and some more like > > debug: bayes: tok_get_all: Token Count: 20 > > debug: bayes token 'somewhat' => 0.978 > > debug: bayes: score = 0.845189622547555 > > > > Make sure you stop and start MailScanner.. > > > > Futther reading / discussion can be taken up here: > > /usr/share/doc/spamassassin-%version%/sql/README.bayes OR on the > > sa-users / sa-dev lists > > > > cheers, > > - dhawal > > > > PS: Any mistakes are entirely mine (any yours if you follow this > > blindly), please test thoroughly before you go production. > > Also i couldn't find any way to post this to the new wiki, can > > someone guide me? > > ------------------------ MailScanner list > ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > > and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.h> tml). > > > > > *Support MailScanner development - buy the > book off the website!* > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > *Support MailScanner development - buy the book off the website!* > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 12:38:45 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Rick Cooper > >It's not part of the specification, which is why I mentioned it. It's easy >to spot an IPv6 address anyway because of the format. Ok, it's just that every program/service that uses IPv6, seems to leave the IPv6 tag in tact. I'll leave it to Julian. >Yeah, should have made that "(?:Ipv6:)?" oops! I doubt that the accuracy of >the address is an issue once it's gotten to mailscanner anyway. It's important for ACL I think, since you need to know what to match against. I've done some tests with "(?:Ipv6:)?", but that only works for IPv4, no longer for IPv6. This is what I used for testing: **************** #! /usr/bin/perl $ip = "$_xs6.xs4all.nl [IPv6:2001:888:0:1::666]"; #$ip = "$_smtp.jiscmail.ac.uk [130.246.192.55]"; if ($ip =~ /\[(?:Ipv6:)?([\d.:abcdef]+)\]/) { print "match\n"; print "$1\n"; } else { print "no match\n"; print "$1\n"; } **************** Anyway, Julian will hopefully shed his guru perl light on the problem and a proper fix! ;-) >> >Rick Thanks, Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rcooper at DWFORD.COM Wed Apr 6 12:48:06 2005 From: rcooper at DWFORD.COM (Rick Cooper) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Mike > Sent: Wednesday, April 06, 2005 6:39 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: MailScanner & IPv6 [SOLVED] > > > >-----Original Message----- > >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > >Behalf Of Rick Cooper > > > >It's not part of the specification, which is why I mentioned it. > It's easy > >to spot an IPv6 address anyway because of the format. > > Ok, it's just that every program/service that uses IPv6, seems to > leave the IPv6 tag in tact. I'll leave it to Julian. > > >Yeah, should have made that "(?:Ipv6:)?" oops! I doubt that the > accuracy of > >the address is an issue once it's gotten to mailscanner anyway. > > It's important for ACL I think, since you need to know what to > match against. > > I've done some tests with "(?:Ipv6:)?", but that only works for > IPv4, no longer for IPv6. This is what I used for testing: > should be IPv6 not Ipv6, my apologies, I actually tested it but didn't clip and copy... I am working on a couple of other things and this conversation was in the periphery and I shouldn't do that, I am sorry. Whole line: if ($ip =~ /\[(?:IPv6:)?([\d.:abcdef]+)\]/) { will match both formats. Rick > **************** > #! /usr/bin/perl > > $ip = "$_xs6.xs4all.nl [IPv6:2001:888:0:1::666]"; > #$ip = "$_smtp.jiscmail.ac.uk [130.246.192.55]"; > > if ($ip =~ /\[(?:Ipv6:)?([\d.:abcdef]+)\]/) { > print "match\n"; > print "$1\n"; > } else { > print "no match\n"; > print "$1\n"; > } > **************** > > Anyway, Julian will hopefully shed his guru perl light on the > problem and a proper fix! ;-) > > >> >Rick > > Thanks, > Mike. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 12:56:05 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Rick Cooper > >Yeah, should have made that "(?:Ipv6:)?" oops! I doubt that the accuracy of >the address is an issue once it's gotten to mailscanner anyway. How about this then: if ($ip =~ /\[[IPv6:]*([\d.:abcdef]+)\]/) { This way, the IP address can optionally consist of the "IPv6:" tag. I'm not sure if the IPv6: tag is Linux specific. If it DOES consists of the IPv6: tag, the tag will not be removed. Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rcooper at DWFORD.COM Wed Apr 6 13:36:48 2005 From: rcooper at DWFORD.COM (Rick Cooper) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Mike > Sent: Wednesday, April 06, 2005 6:56 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: MailScanner & IPv6 [SOLVED] > > > >-----Original Message----- > >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > >Behalf Of Rick Cooper > > > >Yeah, should have made that "(?:Ipv6:)?" oops! I doubt that the > accuracy of > >the address is an issue once it's gotten to mailscanner anyway. > > How about this then: > > if ($ip =~ /\[[IPv6:]*([\d.:abcdef]+)\]/) { > > This way, the IP address can optionally consist of the "IPv6:" > tag. I'm not sure if the IPv6: tag is Linux specific. If it DOES > consists of the IPv6: tag, the tag will not be removed. I am thinking, and again I am not a sendmail man, that the IPv6: is a sendmail designation for logging or other internal use. If you do a: host IPv6:2001:888:0:1::666 you get Host IPv6:2001:888:0:1::666 not found: 3(NXDOMAIN) but if you do: host 2001:888:0:1::666 you get 6.6.6.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.0.0.0.8.8.8.0.1.0.0.2.ip6.arpa domain name pointer xs6.xs4all.nl. So as you can see the IPv6 is not actually part of the IP address and the code fragment is attempting to retrieve the IP address (hence the $message->{clientip} = $1; part). That is why I used (?:IPv6:)? which is non-capturing and leaves the $1 set as the actual IP portion of [IPv6:address] or [dotted quad address]. I haven't looked through all the code so I don't know if this address is used for anything other than logging. If it is, then it would be important that only an accurate address be returned. Anyway as you can verify by doing a lookup on the address in your example adding in the IPv6: portion results in an address that cannot be resolved, removing it results in a resolvable address. Rick > > Mike. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Wed Apr 6 13:54:18 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steen, Glenn wrote: > > Well... I would've done it myself if I had the time... But Real > Work(tm) is limiting that resource for me ATM... > Aparantly Dahwal would've too, but failed somehow (can't imagine > how, seeing as it is so simple:-). > > Cheers > -- Glenn http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sql btw, there is no mention or link of this wiki on the mailscanner.info site (none that i could spot easily) - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 14:00:03 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Rick Cooper > >I am thinking, and again I am not a sendmail man, that the IPv6: is a >sendmail designation for logging or other internal use. If you do a: > >host IPv6:2001:888:0:1::666 you get Host IPv6:2001:888:0:1::666 not found: >3(NXDOMAIN) > >but if you do: > >host 2001:888:0:1::666 you get >6.6.6.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.0.0.0.8.8.8.0.1.0.0.2.ip6.arpa >domain name pointer xs6.xs4all.nl. Yes, this is absolutely true. The IPv6: tag is NOT part of the address itself of course. However, other applications (I seem to recall BIND) also use the IPv6: tag, so I'm not sure if it's sendmail specific. If it however is sendmail specific, then I think the tag should be removed as early as possible, in which case your solution is preferable. But that's not clear to me at this point. For the moment I'm using the same solution for MailWatch, since functions.php contains a function called get_mail_relays(), which is used by detail.php to show through which relays the mail has gone. At the moment I remove the IPv6: tag, since else the gethostbyaddr() fails (as with your example). >Rick Thanks, Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Wed Apr 6 14:46:30 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Dhawal Doshy wrote: > Steen, Glenn wrote: > >> >> Well... I would've done it myself if I had the time... But Real >> Work(tm) is limiting that resource for me ATM... >> Aparantly Dahwal would've too, but failed somehow (can't imagine >> how, seeing as it is so simple:-). >> >> Cheers >> -- Glenn > > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sql > > > btw, there is no mention or link of this wiki on the mailscanner.info > site (none that i could spot easily) > Still in development i believe. > - dhawal > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From wollie at FEYERABEND.LIS.BREMEN.DE Wed Apr 6 14:14:18 2005 From: wollie at FEYERABEND.LIS.BREMEN.DE (Wolfgang Kohnen (FEYERABEND)) Date: Thu Jan 12 21:29:15 2006 Subject: undoing mailscanner modifications before feeding into sa-learn Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi folks, I want to feed back spam and ham messages to the bayes filter. I've setup two shared folders (ham & spam) on my imap machine and a fetchmail which fetches the messages from there and puts it into sa-learn with fetchmails --mda feature. This works fine so far. The docs of sa-learn say, that it internally does some undos (like spamassassin -d) in order to remove mail headers which originates by spamassassin so that there is no bias reinforcement. My question: is sa-learn aware of how mailscanner modifies the message and can sa-learn undo it? How do I have to tweak mailscanner? For example, I will have to turn off disarming of html and other destructive conversions. Any experiences? The faq-o-matic doesn't note this issue at all. TIA, Wollie ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Wed Apr 6 15:07:46 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:15 2006 Subject: undoing mailscanner modifications before feeding into sa-learn Message-ID: Wolfgang in spam.assassin.prefs.conf you'll need something like.... bayes_ignore_header X-SSL-MailScanner bayes_ignore_header X-SSL-MailScanner-SpamCheck bayes_ignore_header X-SSL-MailScanner-SpamScore bayes_ignore_header X-SSL-MailScanner-Information bayes_ignore_header X-SSL-Mailscanner-From Where SSL needs to be replaced with the org-name setting in your MailScanner.conf Other settings should make much difference as the first thing sa-learn does is to token-ise the email... then run sa-learn -p /spam.assassin.prefs.cong --spam .... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Wolfgang Kohnen (FEYERABEND) wrote: > Hi folks, > > I want to feed back spam and ham messages to the bayes filter. I've > setup two shared folders (ham & spam) on my imap machine and a fetchmail > which fetches the messages from there and puts it into sa-learn with > fetchmails --mda feature. This works fine so far. > > The docs of sa-learn say, that it internally does some undos (like > spamassassin -d) in order to remove mail headers which originates by > spamassassin so that there is no bias reinforcement. > > My question: is sa-learn aware of how mailscanner modifies the message > and can sa-learn undo it? How do I have to tweak mailscanner? For > example, I will have to turn off disarming of html and other destructive > conversions. Any experiences? The faq-o-matic doesn't note this issue > at all. > > TIA, > Wollie > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Wed Apr 6 15:29:32 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:15 2006 Subject: SA 3.0.2 and MySQL Message-ID: Yep, and that's why I directed you (dahwal) to Ugo (who is project lead in this). Anyway, very nice, thanks... and wellcome aboard. -- Glenn > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Pete Russell > Sent: den 6 april 2005 15:47 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: SA 3.0.2 and MySQL > > > Dhawal Doshy wrote: > > Steen, Glenn wrote: > > > >> > >> Well... I would've done it myself if I had the time... But Real > >> Work(tm) is limiting that resource for me ATM... > >> Aparantly Dahwal would've too, but failed somehow (can't imagine > >> how, seeing as it is so simple:-). > >> > >> Cheers > >> -- Glenn > > > > > > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_sp am:spamassassin:bayes:sql > > > btw, there is no mention or link of this wiki on the mailscanner.info > site (none that i could spot easily) > Still in development i believe. > - dhawal > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From wollie at FEYERABEND.LIS.BREMEN.DE Wed Apr 6 15:50:05 2005 From: wollie at FEYERABEND.LIS.BREMEN.DE (Wolfgang Kohnen (FEYERABEND)) Date: Thu Jan 12 21:29:15 2006 Subject: undoing mailscanner modifications before feeding into sa-learn Message-ID: Hi, Martin Hepworth schrieb: > Other settings should make much difference as the first thing sa-learn > does is to token-ise the email... can I tell MailScanner to attach spams as a mime attachment to a spam notification email and can sa-learn undo this? Thanks, Wollie ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Wed Apr 6 15:54:04 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:15 2006 Subject: undoing mailscanner modifications before feeding into sa-learn Message-ID: no sa-learn needs the emails pretty much intact with all the original headers.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Wolfgang Kohnen (FEYERABEND) wrote: > Hi, > > Martin Hepworth schrieb: > >> Other settings should make much difference as the first thing sa-learn >> does is to token-ise the email... > > > can I tell MailScanner to attach spams as a mime attachment > to a spam notification email and can sa-learn undo this? > > Thanks, > Wollie > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From wollie at FEYERABEND.LIS.BREMEN.DE Wed Apr 6 16:00:13 2005 From: wollie at FEYERABEND.LIS.BREMEN.DE (Wolfgang Kohnen (FEYERABEND)) Date: Thu Jan 12 21:29:15 2006 Subject: undoing mailscanner modifications before feeding into sa-learn Message-ID: Martin Hepworth schrieb: > no > sa-learn needs the emails pretty much intact with all the original > headers.. > Hm, sad. Thanks! This is everything I need to know. Wollie ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From waldner at WALDNER.PRIV.AT Wed Apr 6 16:07:20 2005 From: waldner at WALDNER.PRIV.AT (Robert Waldner) Date: Thu Jan 12 21:29:15 2006 Subject: Problem with MailScanner, postfix and corrupt mails Message-ID: Since running with perl 5.6 isn't going to last, a colleague has written a perl script which converts the corrupted mails for bsmtp's use. Since a couple of you also have seen this problem, it might be helpful for you, too. Feedback welcoem ;) cheers, &rw ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 1.2, "corrupt2bsmtp.pl" Text/X-PERL (Name: ] [ "corrupt2bsmtp.pl") 334 lines. ] [ Unable to print this part. ] [ Part 1.3: "Attached Text" ] -- You know you have a bad personality when you swallow -- your pride and it gives you food poisoning. -- http://www.glasbergen.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, Application/PGP-SIGNATURE 196bytes. ] [ Unable to print this part. ] From MailScanner at ecs.soton.ac.uk Wed Apr 6 18:14:40 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I am pretty sure the IPv6: leader is Linux-specific, it should just put the IP(v6) address in there. I certainly do not want the IPv6: included in the IP address inside MailScanner. So I'm going with Rick's suggestion below. Rick Cooper wrote: > if ($ip =~ /\[(?:IPv6:)?([\d.:abcdef]+)\]/) { So the relevant bit of Sendmail.pm (starting line 317) now reads: if ($Line =~ /^\$_/) { $ip = $Line; #chomp $ip; # Linux adds "IPv6:" on the front of the IPv6 address, so remove it if ($ip =~ /\[(?:IPv6:)?([\d.:abcdef]+)\]/) { $message->{clientip} = $1; } else { # It is a locally-created message and doesn't have an smtp client ip $message->{clientip} = '127.0.0.1'; } $IPFound = 1; # We have found the client IP address } -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From michael at NOMENNESCIO.NET Wed Apr 6 18:57:39 2005 From: michael at NOMENNESCIO.NET (Mike) Date: Thu Jan 12 21:29:15 2006 Subject: MailScanner & IPv6 [SOLVED] Message-ID: [ The following text is in the "ISO-8859-15" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Julian Field > >I am pretty sure the IPv6: leader is Linux-specific, it should just put >the IP(v6) address in there. >I certainly do not want the IPv6: included in the IP address inside >MailScanner. >So I'm going with Rick's suggestion below. It seems the IPv6: tag is sendmail specific, not Linux. I went through some documentation of some IPv6 related services, i.e. ssh, sendmail and BIND. Although I first thought that the IPv6: tag also appeared in the other services, I was wrong. It's only mentioned in sendmail. The only place where I've also found them is in milters, but those are obviously sendmail related. Rick's solution is therefore the correct one. ;-) Thanks, Mike. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 6 20:28:11 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:15 2006 Subject: Phishing net doesn't like backslashes... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Please try this patch for Message.pm: -----SNIP----- --- Message.pm.old 2005-04-05 22:11:00.000000000 +0100 +++ Message.pm 2005-04-06 20:24:49.396377737 +0100 @@ -4729,6 +4729,7 @@ #print STDERR "Was $linkurl\n"; $linkurl = "" unless $linkurl =~ /[.\/]/; # Ignore if it is not a website at all $linkurl =~ s/\s+//g; # Remove any whitespace + $linkurl =~ s/\\/\//g; # Change \ to / as many browsers do this #print STDERR "Is $linkurl\n"; $linkurl = "" if $linkurl =~ /\@/ && $linkurl !~ /\//; # Ignore emails #$linkurl =~ s/(\<\/?[^>]*\>)*//ig; # Remove tags -----SNIP----- Seems to work for me. Let me know how you get on. John Wilcock wrote: >> MailScanner has >> detected a possible fraud attempt from "http:\\www.example.com" claiming >> to be http:\\www.example.com > > > Not that backslashes should ever be used in URIs, of course, but they > are occasionally seen in practice and are totally harmless. > > John. > > -- > -- Over 2500 webcams from ski resorts around the world - www.snoweye.com > -- Translate your technical documents and web pages - www.tradoc.fr > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kyle at MLUG.MISSOURI.EDU Thu Apr 7 00:29:05 2005 From: kyle at MLUG.MISSOURI.EDU (Kyle Krieg) Date: Thu Jan 12 21:29:16 2006 Subject: Mailscanner + Fedora 3 x86_64 + sendmail Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I just got back from on the road and tried uninstalling perl-Compress-Zlib again and ran the new install.sh script with the same errors. The link below has zlib-1.2.2.2-1 for an rpm. I have zlib-1.2.1.2-1 on my FC3 machine. I'm a little confused with this. Is perl-Compress-Zlib and zlib-1.2.2.2-1 the same and I can upgrade to zlib-1.2.2.2-1 to solve my problems with installing per-Compress-Zlib? Attached is the install.sh log and what errored out... Peter Russell wrote: > Raymon Dijkxhoorn have provided alternate zlib that work fine on FC3 and > RHEL4 (i pasted some of his post in below) - these were required to > compile clamav (which i guess we were all doing before installing MS and > therefore didnt have this problem) > > Is there any reason you would use FC3 over CentOS 4 for a mailscanner > machine? > > http://mailscanner.prolocation.net/ > > Or the direct links: > > http://mailscanner.prolocation.net/zlib/zlib-1.2.2.2-1.i386.rpm > http://mailscanner.prolocation.net/zlib/zlib-devel-1.2.2.2-1.i386.rpm > > > Julian Field wrote: > >> It is probably having trouble with Compress-Zlib. Try uninstalling >> perl-Compress-Zlib (rpm -e perl-Compress-Zlib) and then running >> install.sh again. >> >> perl-Archive-Zip itself doesn't do anything platform-dependent I think, >> it's Compress-Zlib that does the hard work. >> >> Kyle Krieg wrote: >> >>> I used your new install.sh script, and looks like it had a small >>> problem with perl-Archive-Zip. Here is the output from the >>> install...it's only failing on this one package.... >>> >>> >>> Julian Field wrote: >>> >>>> You have 2 packages installed both called "perl-5.8.5-9". Just 2 >>>> different architectures. >>>> That should break RPM :-( >>>> >>>> Please do >>>> >>>> rpm -ql perl | grep bin >>>> >>>> The install.sh script I just sent you works around this problem. >>>> >>>> >>>> Kyle Krieg wrote: >>>> >>>>> Here is the output from the commands you asked for. My install was >>>>> Fedora 3 base (full install) and the current yum updates. My yum >>>>> updates are pointing to livna server. >>>>> >>>>> Thanks!! >>>>> >>>>> Kyle >>>>> >>>>> >>>>> [root@skywalker framadmn]# rpm -qi perl >>>>> Name : perl Relocations: (not >>>>> relocatable) >>>>> Version : 5.8.5 Vendor: Red Hat, Inc. >>>>> Release : 9 Build Date: Tue 12 Oct >>>>> 2004 11:55:57 AM CDT >>>>> Install Date: Sun 20 Mar 2005 08:52:50 PM CST Build Host: >>>>> tweety.build.redh at.com >>>>> Group : Development/Languages Source RPM: >>>>> perl-5.8.5-9.src.rpm >>>>> Size : 28442178 License: Artistic >>>>> or GPL >>>>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:33 PM CDT, Key ID >>>>> b44269d04f2a6fd2 >>>>> Packager : Red Hat, Inc. *MailScanner has detected a possible >>>>> fraud >>>>> attempt from "bugzilla.redhat.com" claiming to be * >>>>> *MailScanner has detected a possible fraud attempt from >>>>> "bugzilla.redhat.com" claiming to be * >>>>> >>>>> URL : http://www.perl.org/ >>>>> Summary : The Perl programming language. >>>>> Description : >>>>> Perl is a high-level programming language with roots in C, sed, awk >>>>> and shell scripting. Perl is good at handling processes and files, >>>>> and is especially good at handling text. Perl's hallmarks are >>>>> practicality and efficiency. While it is used to do a lot of >>>>> different things, Perl's most common applications are system >>>>> administration utilities and web programming. A large proportion of >>>>> the CGI scripts on the web are written in Perl. You need the perl >>>>> package installed on your system so that your system can handle Perl >>>>> scripts. >>>>> >>>>> Install this package if you want to program in Perl or enable your >>>>> system to handle Perl scripts. >>>>> Name : perl Relocations: (not >>>>> relocatable) >>>>> Version : 5.8.5 Vendor: Red Hat, Inc. >>>>> Release : 9 Build Date: Tue 12 Oct >>>>> 2004 12:01:58 PM CDT >>>>> Install Date: Sun 20 Mar 2005 08:52:55 PM CST Build Host: >>>>> dolly.build.redha t.com >>>>> Group : Development/Languages Source RPM: >>>>> perl-5.8.5-9.src.rpm >>>>> Size : 34190638 License: Artistic >>>>> or GPL >>>>> Signature : DSA/SHA1, Wed 20 Oct 2004 12:36:57 PM CDT, Key ID >>>>> b44269d04f2a6fd2 >>>>> Packager : Red Hat, Inc. *MailScanner has detected a possible >>>>> fraud >>>>> attempt from "bugzilla.redhat.com" claiming to be * >>>>> *MailScanner has detected a possible fraud attempt from >>>>> "bugzilla.redhat.com" claiming to be * >>>>> >>>>> URL : http://www.perl.org/ >>>>> Summary : The Perl programming language. >>>>> Description : >>>>> Perl is a high-level programming language with roots in C, sed, awk >>>>> and shell scripting. Perl is good at handling processes and files, >>>>> and is especially good at handling text. Perl's hallmarks are >>>>> practicality and efficiency. While it is used to do a lot of >>>>> different things, Perl's most common applications are system >>>>> administration utilities and web programming. A large proportion of >>>>> the CGI scripts on the web are written in Perl. You need the perl >>>>> package installed on your system so that your system can handle Perl >>>>> scripts. >>>>> >>>>> Install this package if you want to program in Perl or enable your >>>>> system to handle Perl scripts. >>>>> [root@skywalker framadmn]# rpm -qa | grep '^perl' >>>>> perl-LDAP-0.31-5 >>>>> perl-Compress-Zlib-1.33-6 >>>>> perl-Net-CIDR-0.10-1 >>>>> perl-XML-NamespaceSupport-1.08-6 >>>>> perl-XML-LibXML-1.58-1 >>>>> perl-RPM-Specfile-1.17-2 >>>>> perl-Convert-TNEF-0.17-3 >>>>> perl-5.8.5-9 >>>>> perl-libwww-perl-5.79-5 >>>>> perl-Time-HiRes-1.55-3 >>>>> perl-BSD-Resource-1.23-6 >>>>> perl-HTML-Tagset-3.03-30 >>>>> perl-Devel-Symdump-2.03-19 >>>>> perl-HTML-Parser-3.35-6 >>>>> perl-Convert-ASN1-0.18-3 >>>>> perl-XML-LibXML-Common-0.13-7 >>>>> perl-Convert-BinHex-1.119-2 >>>>> perl-MailTools-1.66-1 >>>>> perl-TimeDate-1.1301-3 >>>>> perl-Bit-Vector-6.3-3 >>>>> perl-RPM2-0.66-7 >>>>> perl-5.8.5-9 >>>>> perl-URI-1.30-4 >>>>> perl-XML-Dumper-0.71-2 >>>>> perl-Digest-SHA1-2.07-5 >>>>> perl-XML-Twig-3.13-6 >>>>> perl-Filter-Simple-0.79-4 >>>>> perl-Cyrus-2.2.10-3.fc3 >>>>> perl-DateManip-5.42a-3 >>>>> perl-XML-Encoding-1.01-26 >>>>> perl-XML-Grove-0.46alpha-27 >>>>> perl-IO-stringy-2.110-1 >>>>> perl-File-MMagic-1.21-2 >>>>> perl-TermReadKey-2.20-17 >>>>> perl-DBD-MySQL-2.9003-5 >>>>> perl-XML-Parser-2.34-5 >>>>> perl-Net-DNS-0.48-1 >>>>> perl-Crypt-SSLeay-0.51-5 >>>>> perl-NKF-2.04-3 >>>>> perl-Archive-Tar-1.08-3 >>>>> perl-Frontier-RPC-0.06-38 >>>>> perl-Inline-0.44-14 >>>>> perl-Filter-1.30-6 >>>>> perl-DBI-1.40-5 >>>>> perl-libxml-perl-0.07-30 >>>>> perl-Digest-HMAC-1.01-13 >>>>> perl-Parse-Yapp-1.05-32 >>>>> perl-Date-Calc-5.3-9 >>>>> perl-MIME-tools-5.417-1 >>>>> perl-Text-Kakasi-1.05-11 >>>>> perl-DBD-Pg-1.31-6 >>>>> perl-Parse-RecDescent-1.94-4 >>>>> perl-PDL-2.4.1-5 >>>>> perl-libxml-enno-1.02-31 >>>>> perl-XML-SAX-0.12-7 >>>>> perl-SGMLSpm-1.03ii-14 >>>>> perl-suidperl-5.8.5-9.1 >>>>> [root@skywalker framadmn]# rpm -q --queryformat='%{NAME} %{VERSION} >>>>> %{ARCH}\n' perl >>>>> perl 5.8.5 i386 >>>>> perl 5.8.5 x86_64 >>>>> [root@skywalker framadmn]# which perl >>>>> /usr/bin/perl >>>>> [root@skywalker framadmn]# perl -v >>>>> >>>>> This is perl, v5.8.5 built for x86_64-linux-thread-multi >>>>> >>>>> Copyright 1987-2004, Larry Wall >>>>> >>>>> Perl may be copied only under the terms of either the Artistic >>>>> License >>>>> or the >>>>> GNU General Public License, which may be found in the Perl 5 source >>>>> kit. >>>>> >>>>> Complete documentation for Perl, including FAQ lists, should be >>>>> found on >>>>> this system using `man perl' or `perldoc perl'. If you have access >>>>> to the >>>>> Internet, point your browser at http://www.perl.com/, the Perl Home >>>>> Page. >>>>> >>>>> [root@skywalker framadmn]# >>>>> >>>>> >>>>> >>>>> Julian Field wrote: >>>>> >>>>>> I think it actually built stuff okay, but has calculated the >>>>>> architecture wrongly. >>>>>> Please can you send me the output of >>>>>> rpm -qi perl >>>>>> rpm -qa | grep '^perl' >>>>>> rpm -q --queryformat='%{NAME} %{VERSION} %{ARCH}\n' perl >>>>>> which perl >>>>>> perl -v >>>>>> >>>>>> For some reason it is picking up both i386 and x86_64 as the >>>>>> architecture, when it should just be x86_64 (which is what RHEL4 >>>>>> returns). >>>>>> >>>>>> That bunch of commands should give me an idea what is happening. >>>>>> >>>>>> Kyle Krieg wrote: >>>>>> >>>>>>> Below is the output of the rpmbuild -bc perl-Archive-Zip.spec. >>>>>>> Thanks for looking into this Julian. I've been using >>>>>>> Mailscanner for >>>>>>> 2 years now on a RH 8.0 machine with no issues. >>>>>>> >>>>>>> I've also show the following errors when using the install.sh >>>>>>> script. >>>>>>> Looks like to me, the install scripts it looking for packages in >>>>>>> the >>>>>>> i386x86_64 directory, which is not there. All the packages are in >>>>>>> either /usr/src/redhat/RPMS/x86_64, /usr/src/redhat/RPMS/noarch or >>>>>>> /usr/src/redhat/SPECS for the perl-Archive-Zip.spec files. >>>>>>> >>>>>>> There are two outputs below, the first from the rpmbuild -bc >>>>>>> perl-Archive-Zip.spec and another from when I try and reinstall >>>>>>> MailScanner from the install.sh script. I've cut out most of it >>>>>>> and >>>>>>> only given the errors that I think are important, but have the >>>>>>> whole >>>>>>> install log, if you would like it see it. >>>>>>> >>>>>>> Kyle >>>>>>> >>>>>>> ************************************************ >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> Julian Field >>>>>> www.MailScanner.info >>>>>> Buy the MailScanner book at www.MailScanner.info/store >>>>>> Professional Support Services at www.MailScanner.biz >>>>>> MailScanner thanks transtec Computers for their support >>>>>> >>>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>>>>> >>>>>> ------------------------ MailScanner list ------------------------ >>>>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>>>> 'leave mailscanner' in the body of the email. >>>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>>>> >>>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------ MailScanner list ------------------------ >>>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>>> 'leave mailscanner' in the body of the email. >>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >>>>> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>>> >>>>> *Support MailScanner development - buy the book off the website!* >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> Julian Field >>>> www.MailScanner.info >>>> Buy the MailScanner book at www.MailScanner.info/store >>>> Professional Support Services at www.MailScanner.biz >>>> MailScanner thanks transtec Computers for their support >>>> >>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>>> >>>> ------------------------ MailScanner list ------------------------ >>>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>>> 'leave mailscanner' in the body of the email. >>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>>> >>>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) >>> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> *Support MailScanner development - buy the book off the website!* >> >> >> >> >> -- >> Julian Field >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> Professional Support Services at www.MailScanner.biz >> MailScanner thanks transtec Computers for their support >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2: "Attached Text" ] Attempting to build and install perl-Compress-Zlib-1.33-2 Detected Compress-Zlib, building appropriately... Installing perl-Compress-Zlib-1.33-2.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.15945 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Compress-Zlib-1.33 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/Compress-Zlib-1.33.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd Compress-Zlib-1.33 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.15945 + umask 022 + cd /usr/src/redhat/BUILD + cd Compress-Zlib-1.33 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-Compress-Zlib-1.33-2-root/usr Parsing config.in... Building Zlib enabled Looks Good. Up/Downgrade complete. Checking if your kit is complete... Looks good Writing Makefile for Compress::Zlib + make cp Zlib.pm blib/lib/Compress/Zlib.pm AutoSplitting blib/lib/Compress/Zlib.pm (blib/lib/auto/Compress/Zlib) /usr/bin/perl /usr/lib/perl5/5.8.5/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.8.5/ExtUtils/typemap -typemap typemap Zlib.xs > Zlib.xsc && mv Zlib.xsc Zlib.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" Zlib.c Zlib.xs: In function `XS_Compress__Zlib__inflateStream_inflate': Zlib.xs:982: warning: comparison is always false due to limited range of data type Zlib.xs: In function `XS_Compress__Zlib__inflateStream_inflateSync': Zlib.xs:1017: warning: comparison is always false due to limited range of data type gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" adler32.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" compress.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" crc32.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" gzio.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" uncompr.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" deflate.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" trees.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" zutil.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" inflate.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" infblock.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" inftrees.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" infcodes.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" infutil.c gcc -c -I./zlib-src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -m64 -DVERSION=\"1.33\" -DXS_VERSION=\"1.33\" -fPIC "-I/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/CORE" inffast.c Running Mkbootstrap for Compress::Zlib () chmod 644 Zlib.bs rm -f blib/arch/auto/Compress/Zlib/Zlib.so gcc -shared Zlib.o adler32.o compress.o crc32.o gzio.o uncompr.o deflate.o trees.o zutil.o inflate.o infblock.o inftrees.o infcodes.o infutil.o inffast.o -o blib/arch/auto/Compress/Zlib/Zlib.so chmod 755 blib/arch/auto/Compress/Zlib/Zlib.so cp Zlib.bs blib/arch/auto/Compress/Zlib/Zlib.bs chmod 644 blib/arch/auto/Compress/Zlib/Zlib.bs Manifying blib/man3/Compress::Zlib.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/01version..... t/01version.....ok 1/1 t/01version.....ok t/02zlib........ t/02zlib........ok 1/239 t/02zlib........ok 2/239 t/02zlib........ok 3/239 t/02zlib........ok 4/239 t/02zlib........ok 5/239 t/02zlib........ok 6/239 t/02zlib........ok 7/239 t/02zlib........ok 8/239 t/02zlib........ok 9/239 t/02zlib........ok 10/239 t/02zlib........ok 11/239 t/02zlib........ok 12/239 t/02zlib........ok 13/239 t/02zlib........ok 14/239 t/02zlib........ok 15/239 t/02zlib........ok 16/239 t/02zlib........ok 17/239 t/02zlib........ok 18/239 t/02zlib........ok 19/239 t/02zlib........ok 20/239 t/02zlib........ok 21/239 t/02zlib........ok 22/239 t/02zlib........ok 23/239 t/02zlib........ok 24/239 t/02zlib........ok 25/239 t/02zlib........ok 26/239 t/02zlib........ok 27/239 t/02zlib........ok 28/239 t/02zlib........ok 29/239 t/02zlib........ok 30/239 t/02zlib........ok 31/239 t/02zlib........ok 32/239 t/02zlib........ok 33/239 t/02zlib........ok 34/239 t/02zlib........ok 35/239 t/02zlib........ok 36/239 t/02zlib........ok 37/239 t/02zlib........ok 38/239 t/02zlib........ok 39/239 t/02zlib........ok 40/239 t/02zlib........ok 41/239 t/02zlib........ok 42/239 t/02zlib........ok 43/239 t/02zlib........ok 44/239 t/02zlib........ok 45/239 t/02zlib........ok 46/239 t/02zlib........ok 47/239 t/02zlib........ok 48/239 t/02zlib........ok 49/239 t/02zlib........ok 50/239 t/02zlib........ok 51/239 t/02zlib........ok 52/239 t/02zlib........ok 53/239 t/02zlib........ok 54/239 t/02zlib........ok 55/239 t/02zlib........ok 56/239 t/02zlib........ok 57/239 t/02zlib........ok 58/239 t/02zlib........ok 59/239 t/02zlib........ok 60/239 t/02zlib........ok 61/239 t/02zlib........ok 62/239 t/02zlib........ok 63/239 t/02zlib........ok 64/239 t/02zlib........ok 65/239 t/02zlib........ok 66/239 t/02zlib........ok 67/239 t/02zlib........ok 68/239 t/02zlib........ok 69/239 t/02zlib........ok 70/239 t/02zlib........ok 71/239 t/02zlib........ok 72/239 t/02zlib........ok 73/239 t/02zlib........ok 74/239 t/02zlib........ok 75/239 t/02zlib........ok 76/239 t/02zlib........ok 77/239 t/02zlib........ok 78/239 t/02zlib........ok 79/239 t/02zlib........ok 80/239 t/02zlib........ok 81/239 t/02zlib........ok 82/239 t/02zlib........ok 83/239 t/02zlib........ok 84/239 t/02zlib........ok 85/239 t/02zlib........ok 86/239 t/02zlib........ok 87/239 t/02zlib........ok 88/239 t/02zlib........ok 89/239 t/02zlib........ok 90/239 t/02zlib........ok 91/239 t/02zlib........ok 92/239 t/02zlib........ok 93/239 t/02zlib........ok 94/239 t/02zlib........ok 95/239 t/02zlib........ok 96/239 t/02zlib........ok 97/239 t/02zlib........ok 98/239 t/02zlib........ok 99/239 t/02zlib........ok 100/239 t/02zlib........ok 101/239 t/02zlib........ok 102/239 t/02zlib........ok 103/239 t/02zlib........ok 104/239 t/02zlib........ok 105/239 t/02zlib........ok 106/239 t/02zlib........ok 107/239 t/02zlib........ok 108/239 t/02zlib........ok 109/239 t/02zlib........ok 110/239 t/02zlib........ok 111/239 t/02zlib........ok 112/239 t/02zlib........ok 113/239 t/02zlib........ok 114/239 t/02zlib........ok 115/239 t/02zlib........ok 116/239 t/02zlib........ok 117/239 t/02zlib........ok 118/239 t/02zlib........ok 119/239 t/02zlib........ok 120/239 t/02zlib........ok 121/239 t/02zlib........ok 122/239 t/02zlib........ok 123/239 t/02zlib........ok 124/239 t/02zlib........ok 125/239 t/02zlib........ok 126/239 t/02zlib........ok 127/239 t/02zlib........ok 128/239 t/02zlib........ok 129/239 t/02zlib........ok 130/239 t/02zlib........ok 131/239 t/02zlib........ok 132/239 t/02zlib........ok 133/239 t/02zlib........ok 134/239 t/02zlib........ok 135/239 t/02zlib........ok 136/239 t/02zlib........ok 137/239 t/02zlib........ok 138/239 t/02zlib........ok 139/239 t/02zlib........ok 140/239 t/02zlib........ok 141/239 t/02zlib........ok 142/239 t/02zlib........ok 143/239 t/02zlib........ok 144/239 t/02zlib........ok 145/239 t/02zlib........ok 146/239 t/02zlib........ok 147/239 t/02zlib........ok 148/239 t/02zlib........ok 149/239 t/02zlib........ok 150/239 t/02zlib........ok 151/239 t/02zlib........ok 152/239 t/02zlib........ok 153/239 t/02zlib........ok 154/239 t/02zlib........ok 155/239 t/02zlib........ok 156/239 t/02zlib........ok 157/239 t/02zlib........ok 158/239 t/02zlib........ok 159/239 t/02zlib........ok 160/239 t/02zlib........ok 161/239 t/02zlib........ok 162/239 t/02zlib........ok 163/239 t/02zlib........ok 164/239 t/02zlib........ok 165/239 t/02zlib........ok 166/239 t/02zlib........ok 167/239 t/02zlib........ok 168/239 t/02zlib........ok 169/239 t/02zlib........ok 170/239 t/02zlib........ok 171/239 t/02zlib........ok 172/239 t/02zlib........ok 173/239 t/02zlib........ok 174/239 t/02zlib........ok 175/239 t/02zlib........ok 176/239 t/02zlib........ok 177/239 t/02zlib........ok 178/239 t/02zlib........ok 179/239 t/02zlib........ok 180/239 t/02zlib........ok 181/239 t/02zlib........ok 182/239 t/02zlib........ok 183/239 t/02zlib........ok 184/239 t/02zlib........ok 185/239 t/02zlib........ok 186/239 t/02zlib........ok 187/239 t/02zlib........ok 188/239 t/02zlib........ok 189/239 t/02zlib........ok 190/239 t/02zlib........ok 191/239 t/02zlib........ok 192/239 t/02zlib........ok 193/239 t/02zlib........ok 194/239 t/02zlib........ok 195/239 t/02zlib........ok 196/239 t/02zlib........ok 197/239 t/02zlib........ok 198/239 t/02zlib........ok 199/239 t/02zlib........ok 200/239 t/02zlib........ok 201/239 t/02zlib........ok 202/239 t/02zlib........ok 203/239 t/02zlib........ok 204/239 t/02zlib........ok 205/239 t/02zlib........ok 206/239 t/02zlib........ok 207/239 t/02zlib........ok 208/239 t/02zlib........ok 209/239 t/02zlib........ok 210/239 t/02zlib........ok 211/239 t/02zlib........ok 212/239 t/02zlib........ok 213/239 t/02zlib........ok 214/239 t/02zlib........ok 215/239 t/02zlib........ok 216/239 t/02zlib........ok 217/239 t/02zlib........ok 218/239 t/02zlib........ok 219/239 t/02zlib........ok 220/239 t/02zlib........ok 221/239 t/02zlib........ok 222/239 t/02zlib........ok 223/239 t/02zlib........ok 224/239 t/02zlib........ok 225/239 t/02zlib........ok 226/239 t/02zlib........ok 227/239 t/02zlib........ok 228/239 t/02zlib........ok 229/239 t/02zlib........ok 230/239 t/02zlib........ok 231/239 t/02zlib........ok 232/239 t/02zlib........ok 233/239 t/02zlib........ok 234/239 t/02zlib........ok 235/239 t/02zlib........ok 236/239 t/02zlib........ok 237/239 t/02zlib........ok 238/239 t/02zlib........ok 239/239 t/02zlib........ok t/03examples.... t/03examples....ok 1/13 t/03examples....ok 2/13 t/03examples....ok 3/13 t/03examples....ok 4/13 t/03examples....ok 5/13 t/03examples....ok 6/13 t/03examples....ok 7/13 t/03examples....ok 8/13 t/03examples....ok 9/13 t/03examples....ok 10/13 t/03examples....ok 11/13 t/03examples....ok 12/13 t/03examples....ok 13/13 t/03examples....ok t/04encoding.... t/04encoding....ok 1/15 t/04encoding....ok 2/15 t/04encoding....ok 3/15 t/04encoding....ok 4/15 t/04encoding....ok 5/15 t/04encoding....ok 6/15 t/04encoding....ok 7/15 t/04encoding....ok 8/15 t/04encoding....ok 9/15 t/04encoding....ok 10/15 t/04encoding....ok 11/15 t/04encoding....ok 12/15 t/04encoding....ok 13/15 t/04encoding....ok 14/15 t/04encoding....ok 15/15 t/04encoding....ok t/05gzsetp...... t/05gzsetp......ok 1/11 t/05gzsetp......ok 2/11 t/05gzsetp......ok 3/11 t/05gzsetp......ok 4/11 t/05gzsetp......ok 5/11 t/05gzsetp......ok 6/11 t/05gzsetp......ok 7/11 t/05gzsetp......ok 8/11 t/05gzsetp......ok 9/11 t/05gzsetp......ok 10/11 t/05gzsetp......ok 11/11 t/05gzsetp......ok t/06gzdopen..... t/06gzdopen.....ok 1/23 t/06gzdopen.....ok 2/23 t/06gzdopen.....ok 3/23 t/06gzdopen.....ok 4/23 t/06gzdopen.....ok 5/23 t/06gzdopen.....ok 6/23 t/06gzdopen.....ok 7/23 t/06gzdopen.....ok 8/23 t/06gzdopen.....ok 9/23 t/06gzdopen.....ok 10/23 t/06gzdopen.....ok 11/23 t/06gzdopen.....ok 12/23 t/06gzdopen.....ok 13/23 t/06gzdopen.....ok 14/23 t/06gzdopen.....ok 15/23 t/06gzdopen.....ok 16/23 t/06gzdopen.....ok 17/23 t/06gzdopen.....ok 18/23 t/06gzdopen.....ok 19/23 t/06gzdopen.....ok 20/23 t/06gzdopen.....ok 21/23 t/06gzdopen.....ok 22/23 t/06gzdopen.....ok 23/23 t/06gzdopen.....ok All tests successful. Files=6, Tests=302, 1 wallclock secs ( 0.48 cusr + 0.15 csys = 0.63 CPU) + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.54310 + umask 022 + cd /usr/src/redhat/BUILD + cd Compress-Zlib-1.33 + LANG=C + export LANG + unset DISPLAY + rm -rf /var/tmp/perl-Compress-Zlib-1.33-2-root ++ perl -V:installarchlib + eval 'installarchlib='\''/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi'\'';' ++ installarchlib=/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi + mkdir -p /var/tmp/perl-Compress-Zlib-1.33-2-root//usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi + make install Installing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/Zlib.so Installing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/Zlib.bs Files found in blib/arch: installing files in blib/lib into architecture dependent library tree Installing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/Compress/Zlib.pm Installing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/autosplit.ix Installing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/share/man/man3/Compress::Zlib.3pm Writing /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/.packlist Appending installation info to /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/perllocal.pod + '[' -x /usr/lib/rpm/brp-compress ']' + /usr/lib/rpm/brp-compress + find /var/tmp/perl-Compress-Zlib-1.33-2-root/usr -type f -print + sed 's@^/var/tmp/perl-Compress-Zlib-1.33-2-root@@g' + grep -v perllocal.pod + grep -v '\.packlist' ++ cat Compress-Zlib-1.33-filelist + '[' '/usr/share/man/man3/Compress::Zlib.3pm.gz /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/Compress/Zlib.pm /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/autosplit.ix /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/Zlib.so /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/Zlib.bsX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress-Zlib-1.33 extracting debug info from /var/tmp/perl-Compress-Zlib-1.33-2-root/usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/Zlib.so cpio: Compress-Zlib-1.33/: No such file or directory 723 blocks + /usr/lib/rpm/redhat/brp-compress + /usr/lib/rpm/redhat/brp-strip /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump Processing files: perl-Compress-Zlib-1.33-2 Provides: Zlib.so()(64bit) perl(Compress::Zlib) = 1.33 Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(VersionedDependencies) <= 3.0.3-1 Requires: libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) perl >= 0:5.004 perl(AutoLoader) perl(Carp) perl(DynaLoader) perl(Exporter) perl(IO::Handle) perl(constant) perl(strict) perl(warnings) Processing files: perl-Compress-Zlib-debuginfo-1.33-2 Provides: Zlib.so.debug()(64bit) Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/perl-Compress-Zlib-1.33-2-root warning: Installed (but unpackaged) file(s) found: /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/perllocal.pod /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi/auto/Compress/Zlib/.packlist Wrote: /usr/src/redhat/RPMS/x86_64/perl-Compress-Zlib-1.33-2.x86_64.rpm Wrote: /usr/src/redhat/RPMS/x86_64/perl-Compress-Zlib-debuginfo-1.33-2.x86_64.rpm Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.72190 + umask 022 + cd /usr/src/redhat/BUILD + cd Compress-Zlib-1.33 + rm -rf /var/tmp/perl-Compress-Zlib-1.33-2-root + exit 0 Executing(--clean): /bin/sh -e /var/tmp/rpm-tmp.72190 + umask 022 + cd /usr/src/redhat/BUILD + rm -rf Compress-Zlib-1.33 + exit 0 Do not worry too much about errors from the next command. It is quite likely that some of the Perl modules are already installed on your system. The important ones are HTML-Parser and MIME-tools. Preparing... (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H# (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############ (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############# (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################ (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################# (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################ (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################# (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################ (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################# (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################### [100%] 1:perl-Compress-Zlib ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H# ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H## ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H### ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#### ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##### ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###### ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####### ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######## ( 20%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########## ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############ ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############# ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############## ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################ ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################# ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################## ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################## ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################### ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################## ( 61%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################ ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################# ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################## ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H############################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################ ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################# ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################## ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H#################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H##################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H###################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H####################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################################## ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H######################################### ( 94%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################## (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################### (100%)^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H########################################### [100%] Attempting to build and install perl-Archive-Zip-1.14-1 Installing perl-Archive-Zip-1.14-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.82128 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Archive-Zip-1.14 + /usr/bin/gzip -dc /usr/src/redhat/SOURCES/Archive-Zip-1.14.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd Archive-Zip-1.14 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.82128 + umask 022 + cd /usr/src/redhat/BUILD + cd Archive-Zip-1.14 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -m64' + perl Makefile.PL PREFIX=/var/tmp/perl-Archive-Zip-1.14-1-root/usr Checking if your kit is complete... Looks good Writing Makefile for Archive::Zip + make cp lib/Archive/Zip.pod blib/lib/Archive/Zip.pod cp lib/Archive/Zip/Tree.pm blib/lib/Archive/Zip/Tree.pm cp lib/Archive/Zip/FAQ.pod blib/lib/Archive/Zip/FAQ.pod cp lib/Archive/Zip.pm blib/lib/Archive/Zip.pm cp lib/Archive/Zip/MemberRead.pm blib/lib/Archive/Zip/MemberRead.pm cp lib/Archive/Zip/MockFileHandle.pm blib/lib/Archive/Zip/MockFileHandle.pm cp lib/Archive/Zip/BufferedFileHandle.pm blib/lib/Archive/Zip/BufferedFileHandle.pm cp crc32 blib/script/crc32 /usr/bin/perl "-MExtUtils::MY" -e "MY->fixin(shift)" blib/script/crc32 Manifying blib/man3/Archive::Zip::Tree.3pm Manifying blib/man3/Archive::Zip.3pm Manifying blib/man3/Archive::Zip::FAQ.3pm Manifying blib/man3/Archive::Zip::MemberRead.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/test.............. t/test..............ok 1/123 t/test..............ok 2/123 t/test..............ok 3/123 t/test..............ok 4/123 t/test..............ok 5/123 t/test..............ok 6/123 t/test..............ok 7/123 t/test..............ok 8/123 t/test..............ok 9/123 t/test..............ok 10/123 t/test..............ok 11/123 t/test..............ok 12/123 t/test..............ok 13/123 t/test..............ok 14/123 t/test..............ok 15/123 t/test..............ok 16/123 t/test..............ok 17/123 t/test..............ok 18/123 t/test..............ok 19/123 t/test..............ok 20/123 t/test..............ok 21/123 t/test..............ok 22/123 t/test..............ok 23/123 t/test..............ok 24/123 t/test..............ok 25/123 t/test..............ok 26/123 t/test..............ok 27/123 t/test..............ok 28/123 t/test..............ok 29/123 t/test..............ok 30/123 t/test..............ok 31/123 t/test..............ok 32/123 t/test..............ok 33/123 t/test..............ok 34/123 t/test..............ok 35/123 t/test..............ok 36/123 t/test..............ok 37/123 t/test..............ok 38/123 t/test..............ok 39/123 t/test..............ok 40/123 t/test..............ok 41/123 t/test..............ok 42/123 t/test..............ok 43/123 t/test..............ok 44/123 t/test..............ok 45/123 t/test..............ok 46/123 t/test..............ok 47/123 t/test..............ok 48/123 t/test..............ok 49/123 t/test..............ok 50/123 t/test..............ok 51/123 t/test..............ok 52/123 t/test..............ok 53/123 t/test..............ok 54/123 t/test..............ok 55/123 t/test..............ok 56/123 t/test..............ok 57/123 t/test..............ok 58/123 t/test..............ok 59/123 t/test..............ok 60/123 t/test..............ok 61/123 t/test..............ok 62/123 t/test..............ok 63/123 t/test..............ok 64/123 t/test..............ok 65/123 t/test..............ok 66/123 t/test..............ok 67/123 t/test..............ok 68/123 t/test..............ok 69/123 t/test..............ok 70/123 t/test..............ok 71/123 t/test..............ok 72/123 t/test..............ok 73/123 t/test..............ok 74/123 t/test..............ok 75/123 t/test..............ok 76/123 t/test..............ok 77/123 t/test..............ok 78/123 t/test..............ok 79/123 t/test..............ok 80/123 t/test..............ok 81/123 t/test..............ok 82/123 t/test..............ok 83/123 t/test..............ok 84/123 t/test..............ok 85/123 t/test..............ok 86/123 t/test..............ok 87/123 t/test..............ok 88/123 t/test..............ok 89/123 t/test..............ok 90/123 t/test..............ok 91/123 t/test..............ok 92/123 t/test..............ok 93/123 t/test..............ok 94/123 t/test..............ok 95/123 t/test..............ok 96/123 t/test..............ok 97/123 t/test..............ok 98/123 t/test..............ok 99/123 t/test..............ok 100/123 t/test..............ok 101/123 t/test..............ok 102/123 t/test..............ok 103/123 t/test..............ok 104/123 t/test..............ok 105/123 t/test..............ok 106/123 t/test..............ok 107/123 t/test..............ok 108/123 t/test..............ok 109/123 t/test..............ok 110/123 t/test..............ok 111/123 t/test..............ok 112/123 t/test..............ok 113/123 t/test..............ok 114/123 t/test..............ok 115/123 t/test..............ok 116/123 t/test..............ok 117/123 t/test..............ok 118/123 t/test..............ok 119/123 t/test..............ok 120/123 t/test..............ok 121/123 t/test..............ok 122/123 t/test..............ok 123/123 t/test..............ok t/testex............ t/testex............NOK 1# Test 1 got: "256" (t/testex.t at line 37) # Expected: "0" # t/testex.t line 37 is: ok( runPerlCommand( 'examples/copy.pl', INPUTZIP, OUTPUTZIP ), 0 ); t/testex............NOK 2# Test 2 got: "256" (t/testex.t at line 39) # Expected: "0" # t/testex.t line 39 is: ok( runPerlCommand( 'examples/extract.pl', OUTPUTZIP, ZFILENAME ), 0 ); t/testex............NOK 3# Test 3 got: "256" (t/testex.t at line 41) # Expected: "0" # t/testex.t line 41 is: ok( runPerlCommand( 'examples/mfh.pl', INPUTZIP ), 0 ); t/testex............NOK 4# Test 4 got: "256" (t/testex.t at line 43) # Expected: "0" # t/testex.t line 43 is: ok( runPerlCommand( 'examples/zip.pl', OUTPUTZIP, INPUTZIP, FILENAME ), 0 ); t/testex............NOK 5# Test 5 got: "256" (t/testex.t at line 46) # Expected: "0" # t/testex.t line 46 is: ok( $status, 0 ); t/testex............NOK 6# Test 6 got: "256" (t/testex.t at line 51) # Expected: "0" # t/testex.t line 51 is: ok( $status, 0 ); t/testex............NOK 7# Test 7 got: "256" (t/testex.t at line 56) # Expected: "0" # t/testex.t line 56 is: ok( $status, 0 ); t/testex............NOK 8# Test 8 got: "" (t/testex.t at line 57) # Expected: "testdir/testing.txt:100\n" # t/testex.t line 57 is: ok( $output, ZFILENAME . ":100\n" ); t/testex............NOK 9# Test 9 got: "256" (t/testex.t at line 66) # Expected: "0" # t/testex.t line 66 is: ok( runPerlCommand( 'examples/selfex.pl', OUTPUTZIP, FILENAME ), 0 ); t/testex............NOK 10# Test 10 got: "256" (t/testex.t at line 68) # Expected: "0" # t/testex.t line 68 is: ok( runPerlCommand(OUTPUTZIP), 0 ); t/testex............NOK 11# Test 11 got: (t/testex.t at line 72) # Expected: "1" (extracted/testdir/testing.txt exists) # t/testex.t line 72 is: ok( -f $fn, 1, "$fn exists" ); t/testex............NOK 12# Test 12 got: "256" (t/testex.t at line 81) # Expected: "0" (updateTree.pl create) # t/testex.t line 81 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl create" ); t/testex............NOK 13# Test 13 got: (t/testex.t at line 82) # Expected: "1" (zip created) # t/testex.t line 82 is: ok( -f OUTPUTZIP, 1, "zip created" ); t/testex............NOK 14# Test 14 got: "256" (t/testex.t at line 83) # Expected: "0" (updateTree.pl update) # t/testex.t line 83 is: ok( runPerlCommand( 'examples/updateTree.pl', OUTPUTZIP, TESTDIR ), 0, "updateTree.pl update" ); t/testex............NOK 15# Test 15 got: (t/testex.t at line 84) # Expected: "1" (zip updated) # t/testex.t line 84 is: ok( -f OUTPUTZIP, 1, "zip updated" ); t/testex............FAILED tests 1-15 Failed 15/15 tests, 0.00% okay t/testMemberRead.... t/testMemberRead....ok 1/7 t/testMemberRead....ok 2/7 t/testMemberRead....ok 3/7 t/testMemberRead....ok 4/7 t/testMemberRead....ok 5/7 t/testMemberRead....ok 6/7 t/testMemberRead....ok 7/7 t/testMemberRead....ok t/testTree.......... t/testTree..........ok 1/6 t/testTree..........ok 2/6 t/testTree..........ok 3/6 t/testTree..........ok 4/6 t/testTree..........ok 5/6 t/testTree..........ok 6/6 t/testTree..........ok t/testUpdate........ t/testUpdate........ok 1/12 t/testUpdate........ok 2/12 t/testUpdate........ok 3/12 t/testUpdate........ok 4/12 t/testUpdate........ok 5/12 t/testUpdate........ok 6/12 t/testUpdate........ok 7/12 t/testUpdate........ok 8/12 t/testUpdate........ok 9/12 t/testUpdate........ok 10/12 t/testUpdate........ok 11/12 t/testUpdate........ok 12/12 t/testUpdate........ok Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/testex.t 15 15 100.00% 1-15 Failed 1/5 test scripts, 80.00% okay. 15/163 subtests failed, 90.80% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.82128 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.82128 (%build) Missing file /usr/src/redhat/RPMS/noarch/perl-Archive-Zip-1.14-1.noarch.rpm. Maybe it did not build correctly? Installing tnef decoder ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Thu Apr 7 08:59:32 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:16 2006 Subject: test email Message-ID: All just a test to make sure I'm getting list emails.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From john at TRADOC.FR Thu Apr 7 09:59:54 2005 From: john at TRADOC.FR (John Wilcock) Date: Thu Jan 12 21:29:16 2006 Subject: Phishing net doesn't like backslashes... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > Please try this patch for Message.pm: ... > Seems to work for me. Let me know how you get on. Seems fine here too. Thanks Julian. John. -- -- Over 2500 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From carinus.carelse at MRC.AC.ZA Thu Apr 7 13:38:05 2005 From: carinus.carelse at MRC.AC.ZA (Carinus Carelse) Date: Thu Jan 12 21:29:16 2006 Subject: [Mailwatch-users] Problem with MSQL Message-ID: I have setup the mysql and it is working well except that it doesn't seen to log everything and then I get this message in the dbitrace.log. Then whenever i try to write to the database I just get the DBI:END. Can anyone help me with this problem. -> commit for DBD::mysql::db (DBI::db=HASH(0x1060e80)~0x105af3c) Commmit ineffective while AutoCommit is on warning 20 recorded: Commmit ineffective while AutoCommit is on !! ERROR: 20 'Commmit ineffective while AutoCommit is on' (err#0) <- commit= 1 at MailWatch.pm line 93 -> disconnect for DBD::mysql::db (DBI::db=HASH(0x1060e80)~0x105af3c) &imp_dbh->mysql: 103c830 <- disconnect= 1 at MailWatch.pm line 94 -- DBI::END -> disconnect_all for DBD::mysql::dr (DBI::dr=HASH(0x6fb028)~0x1061f64) <- disconnect_all= (not implemented) at DBI.pm line 677 ! -> DESTROY for DBD::mysql::st (DBI::st=HASH(0x103668c)~INNER) ! <- DESTROY= undef during global destruction ! -> DESTROY for DBD::mysql::db (DBI::db=HASH(0x105af3c)~INNER) ! <- DESTROY= undef during global destruction ! -> DESTROY in DBD::_::common for DBD::mysql::dr (DBI::dr=HASH(0x1061f64)~INNER) ! <- DESTROY= undef during global destruction -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END -- DBI::END ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Andreas.Doerfler at KEMPTEN.DE Thu Apr 7 14:12:50 2005 From: Andreas.Doerfler at KEMPTEN.DE ([iso-8859-1] Dörfler Andreas) Date: Thu Jan 12 21:29:16 2006 Subject: [Mailwatch-users] Problem with MSQL Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] please dont crosspost to mailwatch and mailscanner list ! greetings andy --free your mind, use open source http://www.mono-project.com ASCII ribbon campaign ( ) - against HTML email X & vCards / \ -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Carinus Carelse Sent: Thursday, April 07, 2005 2:38 PM To: MAILSCANNER@JISCMAIL.AC.UK Subject: [Mailwatch-users] Problem with MSQL I have setup the mysql and it is working well except that it doesn't seen to log everything and then I get this message in the dbitrace.log. Then whenever i try to write to the database I just get the DBI:END. Can anyone help me with this problem. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Thu Apr 7 15:31:05 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:16 2006 Subject: Starting from scratch Message-ID: I didn't know if I should continue this topic or start a new one. I have gotten thus far with installing MailScanner, but I cannot figure out what I have done wrong or haven't done yet. 1. Downloaded CentOS4 and installed with most server packages, development packages, sendmail, spamassassin. 2. Installed this mailscanner: Version 4.40.11-1 for RedHat and Mandrake Linux (and other RPM-based Linux distributions) 3. Ran these commands: Chkconfig --level all sendmail off Chkconfig --leve 345 MailScanner on Service sendmail stop Service MailScanner start 4. I changed the following files (my mailscanner is a gateway to a Microsoft Exchange machine: Mailertable Woodmaclaw.com esmtp:[10.1.1.2] www.woowmaclaw.com esmtp:[10.1.1.2] ran the command make -C /etc/mail relaydomains woodmaclaw.com www.woodmaclaw.com mailscanner.conf various options, but mostly default. No virus scanners, as I have not installed them yet Turned on spamassassin 5. restarted MailScanner several times. 6. Info... I do not see any errors, here are some entries of my maillog: Apr 7 09:25:34 dell8600 MailScanner[22695]: Using locktype = flock Apr 7 09:25:38 dell8600 MailScanner[22685]: MailScanner child caught a SIGHUP Apr 7 09:25:38 dell8600 MailScanner[22693]: MailScanner child caught a SIGHUP Apr 7 09:25:38 dell8600 MailScanner[22689]: MailScanner child caught a SIGHUP Apr 7 09:25:38 dell8600 MailScanner[22692]: MailScanner child caught a SIGHUP Apr 7 09:25:38 dell8600 MailScanner[22695]: MailScanner child caught a SIGHUP Apr 7 09:25:49 dell8600 sendmail[22741]: alias database /etc/aliases rebuilt by bpumphrey Apr 7 09:25:49 dell8600 sendmail[22741]: /etc/aliases: 78 aliases, longest 10 b ytes, 802 bytes total Apr 7 09:25:49 dell8600 sendmail[22749]: starting daemon (8.13.1): SMTP Apr 7 09:25:49 dell8600 sm-msp-queue[22753]: starting daemon (8.13.1): queueing @00:15:00 Apr 7 09:25:49 dell8600 sendmail[22758]: starting daemon (8.13.1): queueing@00: 15:00 Apr 7 09:25:53 dell8600 MailScanner[22777]: MailScanner E-Mail Virus Scanner ve rsion 4.40.11 starting... Apr 7 09:25:54 dell8600 MailScanner[22777]: Read 108 hostnames from the phishin g whitelist Apr 7 09:25:55 dell8600 MailScanner[22777]: Enabling SpamAssassin auto-whitelis t functionality... Apr 7 09:25:57 dell8600 MailScanner[22777]: Using locktype = flock Apr 7 09:26:04 dell8600 MailScanner[22781]: MailScanner E-Mail Virus Scanner ve rsion 4.40.11 starting... Apr 7 09:26:05 dell8600 MailScanner[22781]: Read 108 hostnames from the phishin g whitelist Apr 7 09:26:06 dell8600 MailScanner[22781]: Enabling SpamAssassin auto-whitelis t functionality... Apr 7 09:26:08 dell8600 MailScanner[22781]: Using locktype = flock Apr 7 09:26:15 dell8600 MailScanner[22783]: MailScanner E-Mail Virus Scanner ve rsion 4.40.11 starting... Apr 7 09:26:16 dell8600 MailScanner[22783]: Read 108 hostnames from the phishin g whitelist Apr 7 09:26:17 dell8600 MailScanner[22783]: Enabling SpamAssassin auto-whitelis t functionality... Apr 7 09:26:19 dell8600 MailScanner[22783]: Using locktype = flock 7. I do not even though if this says anything, but I checked the /var/spool/MailScanner/incoming directory and there seem to be mail in there. There were these folders: 22777 22781 22783 22785 22786 I checked the directories and they were empty. My first guess is that MailScanner is not picking them up? Help is appreciated on trouble shooting this. Thank you! :) Billy Pumphrey ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ssilva at SGVWATER.COM Thu Apr 7 15:38:58 2005 From: ssilva at SGVWATER.COM (Scott Silva) Date: Thu Jan 12 21:29:16 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Billy Pumphrey wrote: > I didn't know if I should continue this topic or start a new one. > > I have gotten thus far with installing MailScanner, but I cannot figure out > what I have done wrong or haven't done yet. > > 1. Downloaded CentOS4 and installed with most server packages, development > packages, sendmail, spamassassin. > > 2. Installed this mailscanner: Version 4.40.11-1 for RedHat and Mandrake > Linux (and other RPM-based Linux distributions) > > 3. Ran these commands: > Chkconfig --level all sendmail off > Chkconfig --leve 345 MailScanner on > Service sendmail stop > Service MailScanner start > > 4. I changed the following files (my mailscanner is a gateway to a > Microsoft Exchange machine: > Mailertable > Woodmaclaw.com esmtp:[10.1.1.2] > www.woowmaclaw.com esmtp:[10.1.1.2] > ran the command make -C /etc/mail > > relaydomains > woodmaclaw.com > www.woodmaclaw.com > > mailscanner.conf > various options, but mostly default. > No virus scanners, as I have not installed them yet > Turned on spamassassin > > 5. restarted MailScanner several times. > > 6. Info... > I do not see any errors, here are some entries of my maillog: > Apr 7 09:25:34 dell8600 MailScanner[22695]: Using locktype = flock > Apr 7 09:25:38 dell8600 MailScanner[22685]: MailScanner child caught a > SIGHUP > Apr 7 09:25:38 dell8600 MailScanner[22693]: MailScanner child caught a > SIGHUP > Apr 7 09:25:38 dell8600 MailScanner[22689]: MailScanner child caught a > SIGHUP > Apr 7 09:25:38 dell8600 MailScanner[22692]: MailScanner child caught a > SIGHUP > Apr 7 09:25:38 dell8600 MailScanner[22695]: MailScanner child caught a > SIGHUP > Apr 7 09:25:49 dell8600 sendmail[22741]: alias database /etc/aliases > rebuilt by > bpumphrey > Apr 7 09:25:49 dell8600 sendmail[22741]: /etc/aliases: 78 aliases, longest > 10 b > ytes, 802 bytes total > Apr 7 09:25:49 dell8600 sendmail[22749]: starting daemon (8.13.1): SMTP > Apr 7 09:25:49 dell8600 sm-msp-queue[22753]: starting daemon (8.13.1): > queueing > @00:15:00 > Apr 7 09:25:49 dell8600 sendmail[22758]: starting daemon (8.13.1): > queueing@00: > 15:00 > Apr 7 09:25:53 dell8600 MailScanner[22777]: MailScanner E-Mail Virus > Scanner ve > rsion 4.40.11 starting... > Apr 7 09:25:54 dell8600 MailScanner[22777]: Read 108 hostnames from the > phishin > g whitelist > Apr 7 09:25:55 dell8600 MailScanner[22777]: Enabling SpamAssassin > auto-whitelis > t functionality... > Apr 7 09:25:57 dell8600 MailScanner[22777]: Using locktype = flock > Apr 7 09:26:04 dell8600 MailScanner[22781]: MailScanner E-Mail Virus > Scanner ve > rsion 4.40.11 starting... > Apr 7 09:26:05 dell8600 MailScanner[22781]: Read 108 hostnames from the > phishin > g whitelist > Apr 7 09:26:06 dell8600 MailScanner[22781]: Enabling SpamAssassin > auto-whitelis > t functionality... > Apr 7 09:26:08 dell8600 MailScanner[22781]: Using locktype = flock > Apr 7 09:26:15 dell8600 MailScanner[22783]: MailScanner E-Mail Virus > Scanner ve > rsion 4.40.11 starting... > Apr 7 09:26:16 dell8600 MailScanner[22783]: Read 108 hostnames from the > phishin > g whitelist > Apr 7 09:26:17 dell8600 MailScanner[22783]: Enabling SpamAssassin > auto-whitelis > t functionality... > Apr 7 09:26:19 dell8600 MailScanner[22783]: Using locktype = flock > > 7. I do not even though if this says anything, but I checked the > /var/spool/MailScanner/incoming directory and there seem to be mail in > there. There were these folders: > 22777 > 22781 > 22783 > 22785 > 22786 > I checked the directories and they were empty. My first guess is that > MailScanner is not picking them up? > > > Help is appreciated on trouble shooting this. Thank you! :) > Billy Pumphrey > First thing to try is setting locking to posix, because Sendmail 13 has issues with flock. -- "If you have ever eaten crow, It don't taste like chicken!!" ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From hkclark at gmail.com Thu Apr 7 15:56:11 2005 From: hkclark at gmail.com (Kennedy Clark) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I installed MailScanner/SpamAssassin/ClamAV last week. I used Johnny Hughes' excellent guide at http://www.hughesjr.com/content/category/1/14/30/Guides (see Part 4). I'm using RHEL 3/CentOS 3.4. On the MTA side, I am using Postfix with a virtual alias table. I want to have MailScanner use the "forward" "Spam Actions" option to put all spam in a central email account (it's a local account on the same server). I can email to this central spam account no problem (both locally and from outside accounts such as gmail). The "Spam Actions = forward blah@blah.com" works if blah@blah.com is an account on a separate system (such as this account on gmail). However, no matter what I do, I cannot make it work with a local account -- I always get the following postfix error in /var/log/maillog: ..., status=bounced (user unknown in virtual alias table). I'm guessing it has something to do with the fact that I'm using a virtual alias table, but I don't want to get rid of that (even for testing purposes) because it's obviously being used for live email. :-) Many thanks for any assistance! Kennedy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From carinus.carelse at MRC.AC.ZA Thu Apr 7 16:21:24 2005 From: carinus.carelse at MRC.AC.ZA (Carinus Carelse) Date: Thu Jan 12 21:29:16 2006 Subject: Error when Running MailScanner in Debug Mode Message-ID: I wonder if anyone on the list can help me with this one. I am using the Patched MailWatch.pm Can't modify non-lvalue subroutine call at /opt/MailScanner/lib/MailScanner/MailWatch.pm line 93, line 26. Carinus ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 7 16:29:10 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:16 2006 Subject: Error when Running MailScanner in Debug Mode Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Please ask MailWatch questions on the MailWatch mailing list. They should be able to help you there. Carinus Carelse wrote: > > I wonder if anyone on the list can help me with this one. I am using > the Patched MailWatch.pm > > Can't modify non-lvalue subroutine call at > /opt/MailScanner/lib/MailScanner/MailWatch.pm line 93, line 26. > > > Carinus > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 7 16:32:16 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Kennedy Clark > Sent: den 7 april 2005 16:56 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: MailScanner SPAM Forward & Postfix Problem > > > I installed MailScanner/SpamAssassin/ClamAV last week. I used Johnny > Hughes' excellent guide at > http://www.hughesjr.com/content/category/1/14/30/Guides (see Part 4). This uses the older (unsafe) "two postfix" setup (unsafe since postfix and MailScanner will try manage the deferred queue *without there being any locking*). You should've followed the instructions in http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml on how to setup and use a "one postfix through the HOLD feature". > > I'm using RHEL 3/CentOS 3.4. On the MTA side, I am using > Postfix with a > virtual alias table. I want to have MailScanner use the "forward" > "Spam Actions" option to put all spam in a central email account (it's > a local account on the same server). I can email to this central spam > account no problem (both locally and from outside accounts such as > gmail). The "Spam Actions = forward blah@blah.com" works if > blah@blah.com is an account on a separate system (such as this account > on gmail). However, no matter what I do, I cannot make it work with > a local account -- I always get the following postfix error in > /var/log/maillog: > > ..., status=bounced (user unknown in virtual alias table). > > I'm guessing it has something to do with the fact that I'm using a > virtual alias table, but I don't want to get rid of that (even for > testing purposes) because it's obviously being used for live email. > :-) You can keep the table, but you cannot use any virtual alias for forward spam actions. This is a known (unresolved/unresolvable) issue, methinks. Workaround is to use a real address in the forward (IIRC). Or do a real address bork out too? -- Glenn > Many thanks for any assistance! > Kennedy > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From gdoris at rogers.com Thu Apr 7 16:39:55 2005 From: gdoris at rogers.com (Gerry Doris) Date: Thu Jan 12 21:29:16 2006 Subject: recommended SA rules to stop SPAM Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > Jason wrote: > >>Specifically, the ones that have recently come out about buying certain >> pieces >>of stock. >> >>Currently running SA 2.63. >> >> > > upgrade to 2.64 or higher ASAP.. 2.63 is vulnerable to a DoS attack by > sending it a message with malformed mime sections. > > This is a remote exploit. Anyone can exploit it by sending you a > carefully crafted email. > > Admittedly it's just a DoS, but still not something you want on any kind > of production server. > > http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0796 > > This is not exactly new news. It's from August of last year. > >>Was skimming the SARE this morning, trying to see if there are any >> additional >>rules that are good ones to add. >> >>I am also using surbl_uri.cf and chickenpox.cf. (made a few of my own, >> but >>need better ones) >> > > surbl is a VERY good one to be using, provided of course you added the > Mail::SpamAssassin::SpamCopURI plugin. Also note, when you upgrade to > 2.64 you'll need to re-install spamcopURI. SpamCopURI installs as a > source-code patch to SA's evaltests.pm, and upgrading SA will clobber it. > > Not to toot my own horn, but another ruleset I'd recommend is antidrug. > It was incorporated into SA 3.0 and works fairly well on pill-spam. A > few of the latest ones evade it, but it catches a LOT of common > obfuscations of drug names. > > http://mywebpages.comcast.net/mkettler/sa/antidrug.cf > > Note: if you upgrade to SA 3.x instead of 2.64, you won't need to mess > with SpamCopURI or antidrug, both are built-in with 3.0. However, 3.x > does have a minimum perl version of 5.6.1. If you're on an older version > of perl, you'll have to stick to 2.64. > > I also like SARE's fraud, random and specific rulesets. Lately, I've also noticed more spam getting through. I've moved the Bayes and spamcop scores up especially for high end bayes in spam.assassin.prefs.conf as well as spamcop. This has virtually eliminated spam again. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Thu Apr 7 16:44:42 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Kennedy Clark said: > I installed MailScanner/SpamAssassin/ClamAV last week. I used Johnny Hughes' excellent guide at > http://www.hughesjr.com/content/category/1/14/30/Guides (see Part 4). > > I'm using RHEL 3/CentOS 3.4. On the MTA side, I am using Postfix with a virtual alias table. I want to have MailScanner use the "forward" "Spam Actions" option to put all spam in a central email account (it's a local account on the same server). I can email to this central spam account no problem (both locally and from outside accounts such as gmail). The "Spam Actions = forward blah@blah.com" works if > blah@blah.com is an account on a separate system (such as this account on gmail). However, no matter what I do, I cannot make it work with a local account -- I always get the following postfix error in > /var/log/maillog: > > ..., status=bounced (user unknown in virtual alias table). > > I'm guessing it has something to do with the fact that I'm using a virtual alias table, but I don't want to get rid of that (even for testing purposes) because it's obviously being used for live email. :-) This is a Postfix err, 'feature'. Because of the way that Postfix and MailScanner work, you can't forward spam to a virtual user. The why: Postfix uses the cleanup agent to do the virtual aliasing, unfortunately this happens _before_ MailScanner sees the message. So when you re-inject a spam message to a virtual user, it's after Postfix would have alised it to it's real destination, hence the bounce. The solution: Forward spam to a local account that is alised to your virual user e.g. forward spam to localuser@box.domain.tld then in the aliases table put localuser: virtual@virtual.tld and then $newaliases That will then do the job for you. HTH Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stef at L5NET.NET Thu Apr 7 16:59:41 2005 From: stef at L5NET.NET (Stef Morrell) Date: Thu Jan 12 21:29:16 2006 Subject: Spam Actions Message-ID: I am putting together a set of rules for spam actions. Does it matter in which order the actions come? eg: is To: a@b.com delete forward spamtrap@b.com FromOrTo: default deliver the same as To: a@b.com forward spamtrap@b.com delete FromOrTo: default deliver And is tab spacing important in this type of ruleset? Thanks Stef Stefan Morrell | Director Tel: 0870 365 2813 | Level 5 Internet Ltd Fax: 0192 450 7307 | Part of the Alpha Omega Group stef@l5net.net | stef@aoc-uk.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Thu Apr 7 17:10:16 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:16 2006 Subject: Spam Actions Message-ID: I think the key is that the default entry be LAST in your list. Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Stef Morrell Sent: Thursday, April 07, 2005 11:00 AM To: MAILSCANNER@JISCMAIL.AC.UK Subject: Spam Actions I am putting together a set of rules for spam actions. Does it matter in which order the actions come? eg: is To: a@b.com delete forward spamtrap@b.com FromOrTo: default deliver the same as To: a@b.com forward spamtrap@b.com delete FromOrTo: default deliver And is tab spacing important in this type of ruleset? Thanks Stef Stefan Morrell | Director Tel: 0870 365 2813 | Level 5 Internet Ltd Fax: 0192 450 7307 | Part of the Alpha Omega Group stef@l5net.net | stef@aoc-uk.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stef at L5NET.NET Thu Apr 7 17:15:58 2005 From: stef at L5NET.NET (Stef Morrell) Date: Thu Jan 12 21:29:16 2006 Subject: Spam Actions Message-ID: Sorry, I've not been clear. It's where I have multiple actions for a single recipient, I want to delete the message, ie not have it delivered to it's usual recipient *and* forward a copy to another address. The example given is Spam Actions = store forward anonymous@ecs.soton.ac.uk I want effectively Spam Actions = delete forward anonymous@ecs.soton.ac.uk The question is, does it matter if the delete comes before the forward, or vice versa? For the ruleset, do I need to use tabs to separate the fields, or will any whitespace do? Stef > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Mike Kercher > Sent: 07 April 2005 17:10 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Spam Actions > > I think the key is that the default entry be LAST in your list. > > Mike > > > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Stef Morrell > Sent: Thursday, April 07, 2005 11:00 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Spam Actions > > I am putting together a set of rules for spam actions. > > Does it matter in which order the actions come? > > eg: > > is > > To: a@b.com delete forward spamtrap@b.com > FromOrTo: default deliver > > the same as > > To: a@b.com forward spamtrap@b.com delete > FromOrTo: default deliver > > And is tab spacing important in this type of ruleset? > > Thanks > > Stef > Stefan Morrell | Director > Tel: 0870 365 2813 | Level 5 Internet Ltd > Fax: 0192 450 7307 | Part of the Alpha Omega Group > stef@l5net.net | stef@aoc-uk.com > > > ------------------------ MailScanner list > ------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list > ------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This email has been scanned by the Level 5 Internet > MailCrusader for viruses, spam and dangerous content. > For more information please visit http://www.l5net.net > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From chuck.foster at STREAMSHIELD.COM Thu Apr 7 17:27:38 2005 From: chuck.foster at STREAMSHIELD.COM (Chuck Foster) Date: Thu Jan 12 21:29:16 2006 Subject: TodayDir() function Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, Finally had time to play with the new MailScanner code, and looked at the changes made from below. One thing that I've realised now that I hadn't before is that the originating time() value isn't being kept, which meant that it wasn't available to my custom functions as I'd hoped - having to parse the string to get the hours and minutes out is a bit painful! A simple addition to the new function to keep that value would be very useful; I used $dateval for that in my code: # Set the date string and number $this->{dateval} = time; $this->{datestring} = scalar localtime($this->{dateval}); my ($day, $month, $year) = (localtime($this->dateval))[3,4,5]; $this->{datenumber} = sprintf("%04d%02d%02d", $year+1900, $month+1, $day); This also avoided the (very very slight!) situation where the day changes between the setting of datestring and datenumber in the original code, which both called a fresh time in localtime(). Also, there are a couple of points in the code that still call TodayDir() in the archiving (Message.pm line 669,3982, MCPMessage.pm line 372) which could conceivably end up with different dates - any plans to move those to $this->{datenumber} too? (unless I missed something obvious!) Best Wishes, Chuck -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On Behalf Of Julian Field Sent: 18 March 2005 17:30 To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: TodayDir() function Very good idea. I might do this over the weekend, but it certainly should be in the next release. Chuck Foster wrote: >Hi, > >Sorry if this is a general discussion point, I hadn't spotted it in the >archives as yet. > >There's a few places where TodayDir() gets called (and a couple where the >date is still calculated manually); the function uses the current time on >the server to generate the date string used, but this would mean that >there's going to be the odd time (sorry!) when it will flick from 23:59:59 >to 00:00:00 whilst a message is being processed, so yielding two potential >dates for where a file might be quarantined/archived. > >I think. > >Would it be more beneficial to record a message's "date" within the object >itself, so that the same one could be used anywhere in the code relating to >that message without having to re-calculate it and potentially get a >different result? The reason this came up for me in the first place is that >I do some housekeeping in a custom function, one of which was to work out >where a quarantined message would be ... if the function is called on a >different day then ... oops! Having a $m->{date} type variable would be >quite invaluable! > >C:> > > >This message should be regarded as confidential. If you have received this >email in error please notify the sender and destroy it immediately. >Statements of intent shall only become binding when confirmed in hard copy >by an authorized signatory. > > >-- >This message has been scanned for all known viruses >and dangerous content by StreamShield Protector, >and has been found to be clean. > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! -- This message has been scanned for all known viruses and dangerous content by StreamShield Protector, and has been found to be clean. This message should be regarded as confidential. If you have received this email in error please notify the sender and destroy it immediately. Statements of intent shall only become binding when confirmed in hard copy by an authorized signatory. -- This message has been scanned for viruses and potentially harmful content by StreamShield Protector. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stebaume2004 at YAHOO.FR Thu Apr 7 17:28:28 2005 From: stebaume2004 at YAHOO.FR (ste baume) Date: Thu Jan 12 21:29:16 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello all, Since many days our MailScanner server have a curious behavior: - Most of the time they work slowly (less than 50 mails by minute are treated) which causes latency to mail delivery (up to 4 hours) - Sometimes, they work normaly and they can empty the queues. First we suspected an issue between the Mailscanner server and the Exchange servers. But after many tests all seem to be OK on this point. When we disable SpamAssasin from the mailscanner.conf, the queues decrease quickly, but after hours the queues increase again. When we disable the Anti-virus from mailscanner.conf, we have no improvement. When we diable Mailscanner, and use only postfix, we have no problem. Volume : 150 000 messages per day Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G SCSI HDD Software : RHE3, Mailscanner 4.40.11, Postfix 2.2.1, SpammAssassin 3.0.2, Kaspersky 5.0 RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in MailScanner, all in SPAMASSASSIN Average Load : Around 6 Is anybody can help us please, we are in dead end ? Stephane __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Thu Apr 7 17:52:45 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:16 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Are you running a local caching nameserver on your MailScanner box? Sounds like it could be DNS latency killing you. Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of ste baume Sent: Thursday, April 07, 2005 11:28 AM To: MAILSCANNER@JISCMAIL.AC.UK Subject: Mailscanner treats the mails very slowly Hello all, Since many days our MailScanner server have a curious behavior: - Most of the time they work slowly (less than 50 mails by minute are treated) which causes latency to mail delivery (up to 4 hours) - Sometimes, they work normaly and they can empty the queues. First we suspected an issue between the Mailscanner server and the Exchange servers. But after many tests all seem to be OK on this point. When we disable SpamAssasin from the mailscanner.conf, the queues decrease quickly, but after hours the queues increase again. When we disable the Anti-virus from mailscanner.conf, we have no improvement. When we diable Mailscanner, and use only postfix, we have no problem. Volume : 150 000 messages per day Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G SCSI HDD Software : RHE3, Mailscanner 4.40.11, Postfix 2.2.1, SpammAssassin 3.0.2, Kaspersky 5.0 RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in MailScanner, all in SPAMASSASSIN Average Load : Around 6 Is anybody can help us please, we are in dead end ? Stephane __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jaearick at COLBY.EDU Thu Apr 7 17:52:11 2005 From: jaearick at COLBY.EDU (Jeff A. Earickson) Date: Thu Jan 12 21:29:16 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Do you run DNS on your mailscanner box? Are DNS lookups slow? Having local (cached) DNS on the mailscanner box can make a big difference in thruput. Jeff Earickson Colby College On Thu, 7 Apr 2005, ste baume wrote: > Date: Thu, 7 Apr 2005 18:28:28 +0200 > From: ste baume > Reply-To: MailScanner mailing list > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Mailscanner treats the mails very slowly > > Hello all, > > Since many days our MailScanner server have a curious > behavior: > - Most of the time they work slowly (less than 50 > mails by minute are treated) which causes latency to > mail delivery (up to 4 hours) > - Sometimes, they work normaly and they can empty the > queues. > > > First we suspected an issue between the Mailscanner > server and the > Exchange servers. But after many tests all seem to be > OK on this point. > > > When we disable SpamAssasin from the mailscanner.conf, > the queues > decrease quickly, but after hours the queues increase > again. > When we disable the Anti-virus from mailscanner.conf, > we have no improvement. > When we diable Mailscanner, and use only postfix, we > have no problem. > > Volume : 150 000 messages per day > Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G SCSI > HDD > Software : RHE3, Mailscanner 4.40.11, Postfix 2.2.1, > SpammAssassin 3.0.2, Kaspersky 5.0 > RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in > MailScanner, all in SPAMASSASSIN > Average Load : Around 6 > > Is anybody can help us please, we are in dead end ? > > Stephane > > > > > > > __________________________________________________________________ > Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! > Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Thu Apr 7 16:31:09 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:16 2006 Subject: Starting from scratch Message-ID: > First thing to try is setting locking to posix, because Sendmail 13 has > issues with flock. > Ok, I did this. Now the log says to the effect of: Apr 7 10:25:21 WoodenMS MailScanner[2574]: Using locktype = posix Apr 7 10:25:21 WoodenMS MailScanner[2574]: Creating hardcoded struct_flock subr outine for linux (Linux-type) I did not know that the log does not show as it did before in previous versions. Before I would do tail -f /var/log/maillog and see the emails coming through. How does it work now? Looking that the log was what I was doing to see if it would work or not. Since nothing came through the log I did not think that it was working. MailScanner is Working!! However I would like to know how to "view the log". Thank you ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 7 18:29:00 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:16 2006 Subject: Spam Actions Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] No, it doesn't make any difference. Stef Morrell wrote: >Sorry, I've not been clear. > >It's where I have multiple actions for a single recipient, >I want to delete the message, ie not have it delivered to >it's usual recipient *and* forward a copy to another >address. > >The example given is > >Spam Actions = store forward anonymous@ecs.soton.ac.uk > >I want effectively > >Spam Actions = delete forward anonymous@ecs.soton.ac.uk > >The question is, does it matter if the delete comes >before the forward, or vice versa? > >For the ruleset, do I need to use tabs to separate the >fields, or will any whitespace do? > >Stef > > > >>-----Original Message----- >>From: MailScanner mailing list >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Mike Kercher >>Sent: 07 April 2005 17:10 >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: Re: Spam Actions >> >>I think the key is that the default entry be LAST in your list. >> >>Mike >> >> >>-----Original Message----- >>From: MailScanner mailing list >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Stef Morrell >>Sent: Thursday, April 07, 2005 11:00 AM >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: Spam Actions >> >>I am putting together a set of rules for spam actions. >> >>Does it matter in which order the actions come? >> >>eg: >> >>is >> >>To: a@b.com delete forward spamtrap@b.com >>FromOrTo: default deliver >> >>the same as >> >>To: a@b.com forward spamtrap@b.com delete >>FromOrTo: default deliver >> >>And is tab spacing important in this type of ruleset? >> >>Thanks >> >>Stef >>Stefan Morrell | Director >>Tel: 0870 365 2813 | Level 5 Internet Ltd >>Fax: 0192 450 7307 | Part of the Alpha Omega Group >>stef@l5net.net | stef@aoc-uk.com >> >> >>------------------------ MailScanner list >>------------------------ To unsubscribe, email >>jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ >>(http://www.mailscanner.biz/maq/) and the archives >>(http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> >>------------------------ MailScanner list >>------------------------ To unsubscribe, email >>jiscmail@jiscmail.ac.uk with the words: >>'leave mailscanner' in the body of the email. >>Before posting, read the MAQ >>(http://www.mailscanner.biz/maq/) and the archives >>(http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >>Support MailScanner development - buy the book off the website! >> >>-- >>This email has been scanned by the Level 5 Internet >>MailCrusader for viruses, spam and dangerous content. >>For more information please visit http://www.l5net.net >> >> >> >> > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ebruce at HPMICH.COM Thu Apr 7 18:35:12 2005 From: ebruce at HPMICH.COM (Ed Bruce) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steen, Glenn wrote: -----Original Message----- From: MailScanner mailing list ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ebruce at HPMICH.COM Thu Apr 7 18:40:37 2005 From: ebruce at HPMICH.COM (Ed Bruce) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Trying 2nd time, looks like message got truncated last attempt Steen, Glenn wrote: >>-----Original Message----- >>From: MailScanner mailing list >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Kennedy Clark >>Sent: den 7 april 2005 16:56 >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: MailScanner SPAM Forward & Postfix Problem >> >> >>I installed MailScanner/SpamAssassin/ClamAV last week. I used Johnny >>Hughes' excellent guide at >>http://www.hughesjr.com/content/category/1/14/30/Guides (see Part 4). >> >> >This uses the older (unsafe) "two postfix" setup (unsafe since postfix >and MailScanner will try manage the deferred queue *without there being >any locking*). >You should've followed the instructions in >http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml >on how to setup and use a "one postfix through the HOLD feature". > > > Having not followed these instructions, is it possible/safe to go back and follow them after having setup a "two postfix" operation? -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ssilva at SGVWATER.COM Thu Apr 7 18:37:49 2005 From: ssilva at SGVWATER.COM (Scott Silva) Date: Thu Jan 12 21:29:16 2006 Subject: Starting from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Billy Pumphrey wrote: >>First thing to try is setting locking to posix, because Sendmail 13 has >>issues with flock. >> > > > > Ok, I did this. Now the log says to the effect of: > Apr 7 10:25:21 WoodenMS MailScanner[2574]: Using locktype = posix > Apr 7 10:25:21 WoodenMS MailScanner[2574]: Creating hardcoded struct_flock > subr > outine for linux (Linux-type) > > > I did not know that the log does not show as it did before in previous > versions. Before I would do tail -f /var/log/maillog and see the emails > coming through. How does it work now? > > Looking that the log was what I was doing to see if it would work or not. > Since nothing came through the log I did not think that it was working. > > MailScanner is Working!! > > However I would like to know how to "view the log". > > Thank you > Have you looked in the /etc/MailScanner/MailScanner.conf section on logging. Maybe you have something off in there. -- "If you have ever eaten crow, It don't taste like chicken!!" ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 7 19:05:24 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "Windows-1252" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hm, haven't spent a lot of thought on that... I treat myself to complete rebuilds from time to time:-). But it shouldn't be to hard.... stop MailScanner, stop both postfix instances (if you use the rpm install it's one "service MailScanner stop" command), then reversa all that you did in /etc/postfix ... Perhaps make sure there are no pending messages in /var spool/postfix.in with a postqueue -c /etc/postfix.in -p and ls -lR /var/spool/postfix.in/defer* (If there is, you'd have to perhaps start some things (like just MailScanner) up to "drain" it... Or move them manually. Then implement the HOLD thing and do the changes in MailScanner.conf (which should undo all the "incompatible" changes (that you did for the 2 postfix setup))... And then fire it up. Should be ratehr easy and safe. (I'm sure all other postfix/MailScanner users will toast me if I missed something... Right Drew:-):-) -- Glenn -----Original Message----- From: MailScanner mailing list on behalf of Ed Bruce Sent: Thu 4/7/2005 7:40 PM To: MAILSCANNER@JISCMAIL.AC.UK Cc: Subject: Re: MailScanner SPAM Forward & Postfix Problem Trying 2nd time, looks like message got truncated last attempt Steen, Glenn wrote: >>-----Original Message----- >>From: MailScanner mailing list >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Kennedy Clark >>Sent: den 7 april 2005 16:56 >>To: MAILSCANNER@JISCMAIL.AC.UK >>Subject: MailScanner SPAM Forward & Postfix Problem >> >> >>I installed MailScanner/SpamAssassin/ClamAV last week. I used Johnny >>Hughes' excellent guide at >>http://www.hughesjr.com/content/category/1/14/30/Guides (see Part 4). >> >> >This uses the older (unsafe) "two postfix" setup (unsafe since postfix >and MailScanner will try manage the deferred queue *without there being >any locking*). >You should've followed the instructions in >http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml >on how to setup and use a "one postfix through the HOLD feature". > > > Having not followed these instructions, is it possible/safe to go back and follow them after having setup a "two postfix" operation? -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From billy at PLANETGEEK.BIZ Thu Apr 7 19:35:29 2005 From: billy at PLANETGEEK.BIZ (Billy Pumphrey) Date: Thu Jan 12 21:29:16 2006 Subject: Starting from scratch Message-ID: I'll thoroughly look at the .conf file in the next few days to see. Other than changing the flock, really that is all that I changed and the rest are defaults. Thank you :) > -----Original Message----- > From: Scott Silva [mailto:ssilva@SGVWATER.COM] > Sent: Thursday, April 07, 2005 12:38 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Starting from scratch > > Billy Pumphrey wrote: > >>First thing to try is setting locking to posix, because Sendmail 13 has > >>issues with flock. > >> > > > > > > > > Ok, I did this. Now the log says to the effect of: > > Apr 7 10:25:21 WoodenMS MailScanner[2574]: Using locktype = posix > > Apr 7 10:25:21 WoodenMS MailScanner[2574]: Creating hardcoded > struct_flock > > subr > > outine for linux (Linux-type) > > > > > > I did not know that the log does not show as it did before in previous > > versions. Before I would do tail -f /var/log/maillog and see the emails > > coming through. How does it work now? > > > > Looking that the log was what I was doing to see if it would work or > not. > > Since nothing came through the log I did not think that it was working. > > > > MailScanner is Working!! > > > > However I would like to know how to "view the log". > > > > Thank you > > > Have you looked in the /etc/MailScanner/MailScanner.conf section on > logging. > Maybe you have something off in there. > > > -- > "If you have ever eaten crow, > It don't taste like chicken!!" > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From tom at SKYRESEARCH.COM Thu Apr 7 22:31:25 2005 From: tom at SKYRESEARCH.COM (Tom Schuetz) Date: Thu Jan 12 21:29:16 2006 Subject: Allow only zipped exe's? Message-ID: Is there a way to deny "naked" exe attachments, but to allow zipped exe's, WITHOUT setting the archive scan depth to 0? In other words, we still want zip files scanned, but exe's in zips should get a free pass. Thanks, Tom ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From sub at ICCONSULTING.COM.AU Thu Apr 7 22:48:57 2005 From: sub at ICCONSULTING.COM.AU (Scott Farrell) Date: Thu Jan 12 21:29:16 2006 Subject: Just reading man sa-learn - you are not supposed to learn spam/ham from this mail list Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian, thanx for the reply (and on the word/pdf one as well). I ended up putting a rule on "Spam Checks" To: sub@icconsulting.com.au no default: yes given sub@icconsulting.com.au is my mail subscription user, mostly for spamassassin and this list, I assume it now wont go through anything in spamassassin at all. That way I wont re-inforce any bad bayes learning from content in this list. thanx again Scott Julian Field Sent by: MailScanner mailing list 02/04/2005 08:28 PM Please respond to MailScanner mailing list To MAILSCANNER@JISCMAIL.AC.UK cc Subject Re: Just reading man sa-learn - you are not supposed to learn spam/ham from this mail list You could use a ruleset for "Is Definitely Not Spam", and put a rule in that ruleset that says "yes" to mail from the list address and to you. Make it say "no" for the default. If you need more help on rulesets, check out the online docs and buy the book. Scott Farrell wrote: > > This is from man sa-learn (see below) > > I have subscribed to this list (and spamassassin list) using > sub@icconsulting.com.au > > I guess I can spam whitelist with a rule, but that might further > re-inforce learning. Can I tell it to bypass learning? > > or do I have to do something smtp/domain specific, like subscribe an > address in a domain that is not scanned at all. > > EFFECTIVE TRAINING > > Note that if your mail folders contain things like for¡ > warded spam, discussions of spam-catching rules, etc., > this will cause trouble. You should avoid scanning those > messages if possible. (An easy way to do this is to move > them aside, into a folder which is not scanned.) > > > > Scott > sfarrell@icconsulting.com.au > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mkettler at EVI-INC.COM Fri Apr 8 00:41:35 2005 From: mkettler at EVI-INC.COM (Matt Kettler) Date: Thu Jan 12 21:29:16 2006 Subject: Allow only zipped exe's? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Tom Schuetz wrote: >Is there a way to deny "naked" exe attachments, but to allow zipped exe's, >WITHOUT setting the archive scan depth to 0? > >In other words, we still want zip files scanned, but exe's in zips should >get a free pass. > Define "we still want zipfiles scanned". Do you mean you still want files inside zips to be scanned for viruses, or scanned for filename restrictions? If you set archive scan depth to 0, archives, and all the files within zipfiles and other archives are still scanned for viruses. Your virus scanner will do the unpacking itself. The archive depth setting setting ONLY applies to how deep MailScanner goes when applying filename.rules and filetype.rules. It has no effect on virus scans. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From bg.mahesh at INDIAINFO.COM Fri Apr 8 05:47:07 2005 From: bg.mahesh at INDIAINFO.COM (BG Mahesh) Date: Thu Jan 12 21:29:16 2006 Subject: ExtUtils-MakeMaker-6.05 problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] hi I am trying to install MS 4.40.11-1 on a Linux machine. I have manually installed ExtUtils-MakeMaker-6.27 from cpan.org During installation of MS the error I get is, /usr/bin/instmodshX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/ExtUtils-MakeMaker-6.05 0 blocks find: /var/tmp/perl-ExtUtils-MakeMaker-6.05-1-root/usr/lib/debug: No such file or directory Shouldn't MS skip the installation of ExtUtils-MakeMaker-6.05 because I have a newer version? find: /var/tmp/perl-Net-CIDR-0.10-1-root/usr/lib/debug: No such file or directory + /usr/lib/rpm/redhat/brp-compress + /usr/lib/rpm/redhat/brp-strip /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump Processing files: perl-Net-CIDR-0.10-1 error: Couldn't exec /usr/lib/rpm/perl.prov: No such file or directory getOutputFrom(): Broken pipe I already have the latest Net::CDIR, not sure why it is being installed. HOw can I solve this? -- B.G. Mahesh bg.mahesh@indiainfo.com http://www.indiainfo.com/ -- ______________________________________________ IndiaInfo Mail - the free e-mail service with a difference! www.indiainfo.com Check out our value-added Premium features, such as an extra 20MB for mail storage, POP3, e-mail forwarding, and ads-free mailboxes! Powered by Outblaze ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stebaume2004 at YAHOO.FR Fri Apr 8 08:04:44 2005 From: stebaume2004 at YAHOO.FR (ste baume) Date: Thu Jan 12 21:29:16 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, I omitted to speak about it but cache DNS is active. I just changed on spam.assassin.pref.conf the following directives : dns_available yes rbl_timeout 5 (instead 20) What do you think about it ? Thanks Stephane Jeff A. Earickson wrote: > Do you run DNS on your mailscanner box? Are DNS lookups slow? > Having local (cached) DNS on the mailscanner box can make a > big difference in thruput. > > Jeff Earickson > Colby College > > On Thu, 7 Apr 2005, ste baume wrote: > >> Date: Thu, 7 Apr 2005 18:28:28 +0200 >> From: ste baume >> Reply-To: MailScanner mailing list >> To: MAILSCANNER@JISCMAIL.AC.UK >> Subject: Mailscanner treats the mails very slowly >> >> Hello all, >> >> Since many days our MailScanner server have a curious >> behavior: >> - Most of the time they work slowly (less than 50 >> mails by minute are treated) which causes latency to >> mail delivery (up to 4 hours) >> - Sometimes, they work normaly and they can empty the >> queues. >> >> >> First we suspected an issue between the Mailscanner >> server and the >> Exchange servers. But after many tests all seem to be >> OK on this point. >> >> >> When we disable SpamAssasin from the mailscanner.conf, >> the queues >> decrease quickly, but after hours the queues increase >> again. >> When we disable the Anti-virus from mailscanner.conf, >> we have no improvement. >> When we diable Mailscanner, and use only postfix, we >> have no problem. >> >> Volume : 150 000 messages per day >> Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G SCSI >> HDD >> Software : RHE3, Mailscanner 4.40.11, Postfix 2.2.1, >> SpammAssassin 3.0.2, Kaspersky 5.0 >> RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in >> MailScanner, all in SPAMASSASSIN >> Average Load : Around 6 >> >> Is anybody can help us please, we are in dead end ? >> >> Stephane __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stef at L5NET.NET Fri Apr 8 08:45:14 2005 From: stef at L5NET.NET (Stef Morrell) Date: Thu Jan 12 21:29:16 2006 Subject: Spam Actions Message-ID: Ok thanks :) > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Julian Field > Sent: 07 April 2005 18:29 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Spam Actions > > No, it doesn't make any difference. > > Stef Morrell wrote: > > >Sorry, I've not been clear. > > > >It's where I have multiple actions for a single recipient, I want to > >delete the message, ie not have it delivered to it's usual recipient > >*and* forward a copy to another address. > > > >The example given is > > > >Spam Actions = store forward anonymous@ecs.soton.ac.uk > > > >I want effectively > > > >Spam Actions = delete forward anonymous@ecs.soton.ac.uk > > > >The question is, does it matter if the delete comes before > the forward, > >or vice versa? > > > >For the ruleset, do I need to use tabs to separate the > fields, or will > >any whitespace do? > > > >Stef > > > > > > > >>-----Original Message----- > >>From: MailScanner mailing list > >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Mike Kercher > >>Sent: 07 April 2005 17:10 > >>To: MAILSCANNER@JISCMAIL.AC.UK > >>Subject: Re: Spam Actions > >> > >>I think the key is that the default entry be LAST in your list. > >> > >>Mike > >> > >> > >>-----Original Message----- > >>From: MailScanner mailing list > >>[mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Stef Morrell > >>Sent: Thursday, April 07, 2005 11:00 AM > >>To: MAILSCANNER@JISCMAIL.AC.UK > >>Subject: Spam Actions > >> > >>I am putting together a set of rules for spam actions. > >> > >>Does it matter in which order the actions come? > >> > >>eg: > >> > >>is > >> > >>To: a@b.com delete forward spamtrap@b.com > >>FromOrTo: default deliver > >> > >>the same as > >> > >>To: a@b.com forward spamtrap@b.com delete > >>FromOrTo: default deliver > >> > >>And is tab spacing important in this type of ruleset? > >> > >>Thanks > >> > >>Stef > >>Stefan Morrell | Director > >>Tel: 0870 365 2813 | Level 5 Internet Ltd > >>Fax: 0192 450 7307 | Part of the Alpha Omega Group > >>stef@l5net.net | stef@aoc-uk.com > >> > >> > >>------------------------ MailScanner list > >>------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk > >>with the words: > >>'leave mailscanner' in the body of the email. > >>Before posting, read the MAQ > >>(http://www.mailscanner.biz/maq/) and the archives > >>(http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > >>Support MailScanner development - buy the book off the website! > >> > >>------------------------ MailScanner list > >>------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk > >>with the words: > >>'leave mailscanner' in the body of the email. > >>Before posting, read the MAQ > >>(http://www.mailscanner.biz/maq/) and the archives > >>(http://www.jiscmail.ac.uk/lists/mailscanner.html). > >> > >>Support MailScanner development - buy the book off the website! > >> > >>-- > >>This email has been scanned by the Level 5 Internet > MailCrusader for > >>viruses, spam and dangerous content. > >>For more information please visit http://www.l5net.net > >> > >> > >> > >> > > > >------------------------ MailScanner list > ------------------------ To > >unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > >'leave mailscanner' in the body of the email. > >Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the > >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > >Support MailScanner development - buy the book off the website! > > > > > > > > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list > ------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This email has been scanned by the Level 5 Internet > MailCrusader for viruses, spam and dangerous content. > For more information please visit http://www.l5net.net > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Fri Apr 8 08:51:29 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:16 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Kennedy Clark said: > Drew, > Great info. Thanks! Quick question: I'm not completely following your example. So, say I have two domains called "mydomain.com" and "myotherdomain.com" (the server is "svr.mydomain.com"). I want to forward MailScanner SPAM to an email address called > "spamstuff@mydomain.com" (and spamstuff exists as a system/shell account as well). Would I then do this... > > /etc/MailScanner/MailScanner.conf: > Spam Actions = store forward spamstuff@mydomain.com > > /etc/postfix/aliases > spamstuff: spamstuff > > And remove "spamstuff@mydomain.com spamstuff@localhost" from my /etc/postfix/virtial_alias table. > > When I try this, I don't get anything for spamstuff@mydomain.com when I try to his it from a gmail account. > > Sorry if I'm being dense here, If the account you are forwarding to is a local account (Which it would be if it has a shell account) then you don't need to do anything other than specify it in MailScanner. I have assumed that you have defined mydomains = mydomain.com (So Postfix knows it's local), then remove spamstuff from your aliases file and that should work. If you haven't specified mydomain as local in /etc/postfix/main.cf then the easiest way to make it work is just to specify the local address in MailScanner.conf e.g. Spam Actions = store forward spamstuff@svr.mydomain.com and that will work also. The problem only really pops up when MailScanner is used as a gateway for another machine and where you want spam forwarded to an account on this other machine, but even that can be got round :-) I hope that makes sense (Not enough coffee yet!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Fri Apr 8 08:56:45 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:17 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steen, Glenn said: > Hm, haven't spent a lot of thought on that... I treat myself > to complete rebuilds from time to time:-). > But it shouldn't be to hard.... stop MailScanner, stop both > postfix instances (if you use the rpm install it's one > "service MailScanner stop" command), then reversa all that you > did in /etc/postfix ... Perhaps make sure there are no pending > messages in /var spool/postfix.in with a > postqueue -c /etc/postfix.in -p > and > ls -lR /var/spool/postfix.in/defer* > (If there is, you'd have to perhaps start some things (like > just MailScanner) up to "drain" it... Or move them manually. > Then implement the HOLD thing and do the changes in > MailScanner.conf (which should undo all the "incompatible" > changes (that you did for the 2 postfix setup))... And then > fire it up. > Should be ratehr easy and safe. > (I'm sure all other postfix/MailScanner users will toast me > if I missed something... Right Drew:-):-) Glenn You do yourself an injustice :-) In fact you can get away with following the single set up instructions (With MailScanner stopped) and just move the /etc/postfix.in directory (to /etc/postfix.in.old?) and move the spool directory also in a similar way. That way you have a quick back out if you need. Re-start MailScanner/ Postfix, make sure it's working properly, then delete the now disused 'second Postfix' directories. Either way works fine! Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Fri Apr 8 09:02:00 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:17 2006 Subject: Just reading man sa-learn - you are not supposed to learn spam/ham from this mail list Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Scott mine is.. From: owner-mailscanner@jiscmail.ac.uk yes that way any spam that's to your address gets spam scanned too, rather from this list.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Scott Farrell wrote: > > Julian, > > > thanx for the reply (and on the word/pdf one as well). > > I ended up putting a rule on "Spam Checks" > > To: sub@icconsulting.com.au no > default: yes > > given sub@icconsulting.com.au is my mail subscription user, mostly for > spamassassin and this list, I assume it now wont go through anything in > spamassassin at all. That way I wont re-inforce any bad bayes learning > from content in this list. > > thanx again > Scott > > > > *Julian Field * > Sent by: MailScanner mailing list > > 02/04/2005 08:28 PM > Please respond to > MailScanner mailing list > > > > To > MAILSCANNER@JISCMAIL.AC.UK > cc > > Subject > Re: Just reading man sa-learn - you are not supposed to learn spam/ham > from this mail list > > > > > > > > > You could use a ruleset for "Is Definitely Not Spam", and put a rule in > that ruleset that says "yes" to mail from the list address and to you. > Make it say "no" for the default. > > If you need more help on rulesets, check out the online docs and buy the > book. > > Scott Farrell wrote: > > > > > This is from man sa-learn (see below) > > > > I have subscribed to this list (and spamassassin list) using > > sub@icconsulting.com.au > > > > I guess I can spam whitelist with a rule, but that might further > > re-inforce learning. Can I tell it to bypass learning? > > > > or do I have to do something smtp/domain specific, like subscribe an > > address in a domain that is not scanned at all. > > > > EFFECTIVE TRAINING > > > > Note that if your mail folders contain things like for¡ > > warded spam, discussions of spam-catching rules, etc., > > this will cause trouble. You should avoid scanning those > > messages if possible. (An easy way to do this is to move > > them aside, into a folder which is not scanned.) > > > > > > > > Scott > > sfarrell@icconsulting.com.au > > > > ------------------------ MailScanner list ------------------------ > > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > *Support MailScanner development - buy the book off the website!* > > > -- > Julian Field > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > Professional Support Services at www.MailScanner.biz > MailScanner thanks transtec Computers for their support > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Fri Apr 8 13:23:50 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:17 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Kennedy Clark said: > On Apr 8, 2005 3:50 AM, Drew Marshall wrote: >> If the account you are forwarding to is a local account (Which it would >> be >> if it has a shell account) then you don't need to do anything other than >> specify it in MailScanner. I have assumed that you have defined >> mydomains >> = mydomain.com (So Postfix knows it's local), then remove spamstuff from >> your aliases file and that should work. >> > > Yeah, this makes perfect sense... which is why this is driving me nuts > (this is what I tried first). I have "mydomain = mydomain.com" in > main.conf, so it should know it's local. I then remove all mention > of spamstuff from both /etc/postfix/aliases and > /etc/postfix/virtual_alias (and obviously rebuild both .db files). I > have then tried several options in MailScanner.conf (I'm using the > "Non Spam Actions" here because I can test it right away vs. having to > wait for spam to come in -- once I get it working I'll obviously > remove this and put it in as a spam action): > Non Spam Actions = deliver forward spamstuff > Non Spam Actions = deliver forward spamstuff@mydomain.com > Non Spam Actions = deliver forward spamstuff@localhost.mydomain.com > Non Spam Actions = deliver forward spamstuff@svr.mydomain.com > I try every one of these (one at a time, of course) and I get the same > result: > > Apr 8 05:43:18 svr postfix/error[19471]: 5CF4C73C651: > to=, orig_to=, relay=none, delay=3, > status=deferred (SOFT BOUNCE - user unknown in virtual alias table) > > No matter what I do, it always says the users isn't in the virtual > table. I have found this to be true before I installed MailScanner... > it's like it ignores the /etc/postfix/aliases. BTW, I believe I do > have both aliases and virtial_alias correctly specified in my postfix > main.cf -- here are thre relevant bits: > mydestination = $myhostname, localhost.$mydomain > virtual_alias_domains = mydomain.com, myotherdomain.com OK here is the first problem. You _don't_ have mydomain listed under mydestination. Move it from virtual_alias_domains to mydestination. (This assumes that you deliver mail to local mailboxes, which I believe is true but you haven't confirmed). > virtual_alias_maps = hash:/etc/postfix/virtual_alias Again with the same assumption, move any reference to mydomain out of virtual_alias and any aliases to _real_ accounts into /etc/postfix/aliases > alias_maps = hash:/etc/postfix/aliases > Have I got something else hosed? Is using the virtual_alias_maps > supposed to complete shut off the normal aliases file? No, the idea of virtual_alias_maps is that it translates virtual aliases to either virtual mailboxes or other addresses for example, sales@virtdomain.com becomes salesman@internal.virtdomain.com (So you can run MailScanner as a gateway in front of Exchange or Notes for example). For anything local, you must use proper shell accounts and the aliases table (Where domains are not listed). Some times users don't want/ need shell accounts so you can use virtual_mailbox_domains for these, this needs more setting up to do correctly, but it's not too tricky. Speak to me off list if you want help with that). > (Actually, I know it's still there in some way [it still works for the "devnull: > /dev/null" entry I have in /etc/postfix/aliases], but all I can't get > it to work for normal email addresses [local or remote]). > > It's driving me crazy! Am I doing something dumb here? Maybe I'm the > one who needs coffee. :-) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jaearick at COLBY.EDU Fri Apr 8 14:49:55 2005 From: jaearick at COLBY.EDU (Jeff A. Earickson) Date: Thu Jan 12 21:29:17 2006 Subject: quarantine report running amok Message-ID: Julian, MS 4.40.11, Solaris 9. I found this in my daily report of quarantined stuff. The push @quarantines in CreatePostmasterNotice() seems to have run amok here. Any idea why it would push the same string so many times? j37L9Nr5007705: 137.146.156.144 (xxx@colby.edu) quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, /var/spool/MailScanne! MailScanner: Executable DOS/Windows programs are dangerous in email (SETUP.EXE) Jeff Earickson Colby College ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 8 15:06:04 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: quarantine report running amok Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] This is possible. Here is a patch for Message.pm to clean up the output: -----SNIP----- --- Message.pm.old 2005-04-08 14:33:30.000000000 +0100 +++ Message.pm 2005-04-08 15:03:20.940680796 +0100 @@ -3872,12 +3872,18 @@ my $from = $this->{from}; #my $to = join(', ', @{$this->{to}}); my $subj = $this->{subject}; + my $ip = $this->{clientip}; my $rept = join(" $reportword: ", @everyrept); + #print STDERR "Rept is\n$rept\n"; + + # Build list of unique archive and quarantine storage locations my @quarantines = grep /\//, @{$this->{archiveplaces}}; push @quarantines, grep /\//, @{$this->{quarantineplaces}}; - my $quarantine = join(", ", @quarantines); - my $ip = $this->{clientip}; - #print STDERR "Rept is\n$rept\n"; + my($quarantine, %quarantinelist); + foreach $quarantine (@quarantines) { + $quarantinelist{$quarantine} = 1; + } + $quarantine = join(', ', sort keys %quarantinelist); # Build unique list of recipients. Avoids Postfix problem which has # separate lists of real recipients and original recipients. -----SNIP----- Please give this a try and let me know how you get on. Jeff A. Earickson wrote: > Julian, > > MS 4.40.11, Solaris 9. I found this in my daily report of quarantined > stuff. The push @quarantines in CreatePostmasterNotice() seems to have > run amok here. Any idea why it would push the same string so many times? > > j37L9Nr5007705: 137.146.156.144 (xxx@colby.edu) > quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, > /var/spool/MailScanne! > MailScanner: Executable DOS/Windows programs are dangerous in email > (SETUP.EXE) > > Jeff Earickson > Colby College > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jaearick at COLBY.EDU Fri Apr 8 15:10:05 2005 From: jaearick at COLBY.EDU (Jeff A. Earickson) Date: Thu Jan 12 21:29:17 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, I use the defaults of dns_available yes rbl_timeout 20 I would suggest moving some of the RBL's (like SpamHaus) to the MTA if possible, to get rid of some of the spam early. You might need more memory for your system. Jeff Earickson Colby College On Fri, 8 Apr 2005, ste baume wrote: > Date: Fri, 8 Apr 2005 09:04:44 +0200 > From: ste baume > Reply-To: MailScanner mailing list > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Mailscanner treats the mails very slowly > > Hello, > > I omitted to speak about it but cache DNS is active. > I just changed on spam.assassin.pref.conf the > following directives : > dns_available yes > rbl_timeout 5 (instead 20) > > What do you think about it ? > > Thanks > > Stephane > > Jeff A. Earickson wrote: >> Do you run DNS on your mailscanner box? Are DNS > lookups slow? >> Having local (cached) DNS on the mailscanner box can > make a >> big difference in thruput. >> >> Jeff Earickson >> Colby College >> >> On Thu, 7 Apr 2005, ste baume wrote: >> >>> Date: Thu, 7 Apr 2005 18:28:28 +0200 >>> From: ste baume >>> Reply-To: MailScanner mailing list > >>> To: MAILSCANNER@JISCMAIL.AC.UK >>> Subject: Mailscanner treats the mails very slowly >>> >>> Hello all, >>> >>> Since many days our MailScanner server have a > curious >>> behavior: >>> - Most of the time they work slowly (less than 50 >>> mails by minute are treated) which causes latency > to >>> mail delivery (up to 4 hours) >>> - Sometimes, they work normaly and they can empty > the >>> queues. >>> >>> >>> First we suspected an issue between the Mailscanner >>> server and the >>> Exchange servers. But after many tests all seem to > be >>> OK on this point. >>> >>> >>> When we disable SpamAssasin from the > mailscanner.conf, >>> the queues >>> decrease quickly, but after hours the queues > increase >>> again. >>> When we disable the Anti-virus from > mailscanner.conf, >>> we have no improvement. >>> When we diable Mailscanner, and use only postfix, > we >>> have no problem. >>> >>> Volume : 150 000 messages per day >>> Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G > SCSI >>> HDD >>> Software : RHE3, Mailscanner 4.40.11, Postfix > 2.2.1, >>> SpammAssassin 3.0.2, Kaspersky 5.0 >>> RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in >>> MailScanner, all in SPAMASSASSIN >>> Average Load : Around 6 >>> >>> Is anybody can help us please, we are in dead end ? >>> >>> Stephane > > > > > > > __________________________________________________________________ > Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! > Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Fri Apr 8 15:25:17 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:17 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] What does your /etc/resolv.conf have in it? Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of ste baume Sent: Friday, April 08, 2005 2:05 AM To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: Mailscanner treats the mails very slowly Hello, I omitted to speak about it but cache DNS is active. I just changed on spam.assassin.pref.conf the following directives : dns_available yes rbl_timeout 5 (instead 20) What do you think about it ? Thanks Stephane Jeff A. Earickson wrote: > Do you run DNS on your mailscanner box? Are DNS lookups slow? > Having local (cached) DNS on the mailscanner box can make a > big difference in thruput. > > Jeff Earickson > Colby College > > On Thu, 7 Apr 2005, ste baume wrote: > >> Date: Thu, 7 Apr 2005 18:28:28 +0200 >> From: ste baume >> Reply-To: MailScanner mailing list >> To: MAILSCANNER@JISCMAIL.AC.UK >> Subject: Mailscanner treats the mails very slowly >> >> Hello all, >> >> Since many days our MailScanner server have a curious >> behavior: >> - Most of the time they work slowly (less than 50 mails by minute are >> treated) which causes latency to >> mail delivery (up to 4 hours) >> - Sometimes, they work normaly and they can empty the >> queues. >> >> >> First we suspected an issue between the Mailscanner server and the >> Exchange servers. But after many tests all seem to be >> OK on this point. >> >> >> When we disable SpamAssasin from the mailscanner.conf, >> the queues >> decrease quickly, but after hours the queues increase >> again. >> When we disable the Anti-virus from mailscanner.conf, >> we have no improvement. >> When we diable Mailscanner, and use only postfix, we >> have no problem. >> >> Volume : 150 000 messages per day >> Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G SCSI >> HDD >> Software : RHE3, Mailscanner 4.40.11, Postfix 2.2.1, >> SpammAssassin 3.0.2, Kaspersky 5.0 >> RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in MailScanner, all in >> SPAMASSASSIN Average Load : Around 6 >> >> Is anybody can help us please, we are in dead end ? >> >> Stephane __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From kodak at FRONTIERHOMEMORTGAGE.COM Fri Apr 8 15:32:40 2005 From: kodak at FRONTIERHOMEMORTGAGE.COM (Jason Balicki) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing subject line Message-ID: Sorry if this has been addressed, but I just went through (quickly) my MailScanner.conf again and did a cursory check of google: Is there any way to make the phishing detection change the subject of admin notifications to "Phishing fraud detected"? Right now viruses say "Bad Filename Detected: Virus Detected" and phishing fraud says "Virus Detected" which isn't bad, but I'm getting ready to turn the reins over for one set of mail servers to someone else and I want things to be as clear as possible. I'm running mailscanner-4.39.6-1 on that particular box (I'm doing an overhaul next Saturday on it, so I'm going to upgrade it to whatever is the most recent version at that point.) So if this is in a more recent version, just point me at it. Thanks, --J(K) ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 8 16:14:40 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing subject line Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] No there isn't. Jason Balicki wrote: >Sorry if this has been addressed, but I just went >through (quickly) my MailScanner.conf again and >did a cursory check of google: > >Is there any way to make the phishing detection >change the subject of admin notifications to >"Phishing fraud detected"? > >Right now viruses say "Bad Filename Detected: >Virus Detected" and phishing fraud says "Virus >Detected" which isn't bad, but I'm getting ready >to turn the reins over for one set of mail servers >to someone else and I want things to be as clear >as possible. > >I'm running mailscanner-4.39.6-1 on that particular >box (I'm doing an overhaul next Saturday on it, >so I'm going to upgrade it to whatever is the >most recent version at that point.) So if this >is in a more recent version, just point me at >it. > > -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stebaume2004 at YAHOO.FR Fri Apr 8 16:24:31 2005 From: stebaume2004 at YAHOO.FR (ste baume) Date: Thu Jan 12 21:29:17 2006 Subject: Mailscanner treats the mails very slowly Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, /etc/resolv.conf nameserver 127.0.0.1 nameserver 2ndary DNS Server domain mydomain.com Stephane Mike Kercher wrote: > What does your /etc/resolv.conf have in it? > > Mike > > > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf > Of ste baume > Sent: Friday, April 08, 2005 2:05 AM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: Mailscanner treats the mails very slowly > > Hello, > > I omitted to speak about it but cache DNS is active. > I just changed on spam.assassin.pref.conf the following directives : > dns_available yes > rbl_timeout 5 (instead 20) > > What do you think about it ? > > Thanks > > Stephane > > Jeff A. Earickson wrote: > >>Do you run DNS on your mailscanner box? Are DNS > > lookups slow? > >>Having local (cached) DNS on the mailscanner box can > > make a > >>big difference in thruput. >> >>Jeff Earickson >>Colby College >> >>On Thu, 7 Apr 2005, ste baume wrote: >> >> >>>Date: Thu, 7 Apr 2005 18:28:28 +0200 >>>From: ste baume >>>Reply-To: MailScanner mailing list > > > >>>To: MAILSCANNER@JISCMAIL.AC.UK >>>Subject: Mailscanner treats the mails very slowly >>> >>>Hello all, >>> >>>Since many days our MailScanner server have a > > curious > >>>behavior: >>>- Most of the time they work slowly (less than 50 mails by minute are >>>treated) which causes latency > > to > >>>mail delivery (up to 4 hours) >>>- Sometimes, they work normaly and they can empty > > the > >>>queues. >>> >>> >>>First we suspected an issue between the Mailscanner server and the >>>Exchange servers. But after many tests all seem to > > be > >>>OK on this point. >>> >>> >>>When we disable SpamAssasin from the > > mailscanner.conf, > >>>the queues >>>decrease quickly, but after hours the queues > > increase > >>>again. >>>When we disable the Anti-virus from > > mailscanner.conf, > >>>we have no improvement. >>>When we diable Mailscanner, and use only postfix, > > we > >>>have no problem. >>> >>>Volume : 150 000 messages per day >>>Hardware : 1 Pentium Xeon 2.4G, 1.5 MB RAM, 36G > > SCSI > >>>HDD >>>Software : RHE3, Mailscanner 4.40.11, Postfix > > 2.2.1, > >>>SpammAssassin 3.0.2, Kaspersky 5.0 >>>RBL : Postfix (SpamCop, ORDB, SPAMHAUS); None in MailScanner, all in >>>SPAMASSASSIN Average Load : Around 6 >>> >>>Is anybody can help us please, we are in dead end ? >>> >>>Stephane __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USHERBROOKE.CA Fri Apr 8 16:38:09 2005 From: Denis.Beauchemin at USHERBROOKE.CA (Denis Beauchemin) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing net behaving strangely Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, I am testing the phishing net for the first time. I use MS 4.40.11 on a brand new machine. Language.conf contains: PossibleFraudStart = MailScanner soupçonne le lien PossibleFraudEnd = d'être une tentative de fraude de la part de Here is what I sent to test (I added some underscores to make sure my message would not be trapped again): bad tag
Here is what I got: MailScanner soupçonne le lien "132.210.244.102" d'être une tentative de fraude de la part de pas le bon
Which makes MS' message appear as a link. The message translates to: MS believes the link "132.210.0.0" to be a phishing fraud attempt from bad tag. Is this normal behaviour? Denis -- _ °v° Denis Beauchemin, analyste /(_)\ Université de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x2252 F: 819.821.8045 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "S/MIME Cryptographic Signature" ] [ Application/X-PKCS7-SIGNATURE 4.4KB. ] [ Unable to print this part. ] From martinh at SOLID-STATE-LOGIC.COM Fri Apr 8 16:43:39 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing net behaving strangely Message-ID: Denis there's a setting in MailScanner.conf that will enable or disable the phishing net for ip-address.... # While detecting "Phishing" attacks, do you also want to point out links # to numeric IP addresses. Genuine links to totally numeric IP addresses # are very rare, so this option is set to "yes" by default. If a numeric # IP address is found in a link, the same phishing warning message is used # as in the Find Phishing Fraud option above. # This can also be the filename of a ruleset. Also Find Numeric Phishing = yes -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Denis Beauchemin wrote: > Hello, > > I am testing the phishing net for the first time. I use MS 4.40.11 on a > brand new machine. Language.conf contains: > PossibleFraudStart = MailScanner soupçonne > le lien > PossibleFraudEnd = d'être une tentative de fraude de la part > de > > Here is what I sent to test (I added some underscores to make sure my > message would not be trapped again): > bad tag
> > Here is what I got: > MailScanner > soupçonne le lien "132.210.244.102" d'être une tentative de > fraude de la part de pas le bon
> > Which makes MS' message appear as a link. The message translates to: MS > believes the link "132.210.0.0" to be a phishing fraud attempt from bad > tag. > > Is this normal behaviour? > > Denis > ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USHERBROOKE.CA Fri Apr 8 16:46:11 2005 From: Denis.Beauchemin at USHERBROOKE.CA (Denis Beauchemin) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing net behaving strangely Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Denis Beauchemin wrote: > Hello, > > I am testing the phishing net for the first time. I use MS 4.40.11 on > a brand new machine. Language.conf contains: > PossibleFraudStart = MailScanner soupçonne > le lien > PossibleFraudEnd = d'être une tentative de fraude de la part > de > > Here is what I sent to test (I added some underscores to make sure my > message would not be trapped again): > bad tag
> > Here is what I got: > color="red">MailScanner soupçonne le lien "132.210.244.102" > d'être une tentative de fraude de la part de pas le > bon
> > Which makes MS' message appear as a link. The message translates to: > MS believes the link "132.210.0.0" to be a phishing fraud attempt from > bad tag. > > Is this normal behaviour? > I just tried it again after changing MS' setup to English and the results are the same: MS' warning is inside the link... so I guess it is normal behaviour... I just noticed Martin's answer. I noticed the setup for IP addresses and I think it should be on on my servers. Thanks! -- _ °v° Denis Beauchemin, analyste /(_)\ Université de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x2252 F: 819.821.8045 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "S/MIME Cryptographic Signature" ] [ Application/X-PKCS7-SIGNATURE 4.4KB. ] [ Unable to print this part. ] From MailScanner at ecs.soton.ac.uk Fri Apr 8 16:51:52 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing net behaving strangely Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Denis Beauchemin wrote: > Denis Beauchemin wrote: > >> Hello, >> >> I am testing the phishing net for the first time. I use MS 4.40.11 >> on a brand new machine. Language.conf contains: >> PossibleFraudStart = MailScanner >> soupçonne le lien >> PossibleFraudEnd = d'être une tentative de fraude de la part >> de >> >> Here is what I sent to test (I added some underscores to make sure my >> message would not be trapped again): >> bad tag
>> >> Here is what I got: >> > color="red">MailScanner soupçonne le lien "132.210.244.102" >> d'être une tentative de fraude de la part de pas le >> bon
>> >> Which makes MS' message appear as a link. The message translates to: >> MS believes the link "132.210.0.0" to be a phishing fraud attempt >> from bad tag. >> >> Is this normal behaviour? >> > I just tried it again after changing MS' setup to English and the > results are the same: MS' warning is inside the link... so I guess it > is normal behaviour... The idea is to leave the link active, but make the warning message part of the link. So if it is a false alarm, they can still easily click on the link. They have to be made aware that what they are doing is potentially dangerous, but I don't (and shouldn't) actually stop them being able to follow the link. -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Fri Apr 8 16:53:01 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: quarantine report running amok Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Did the patch work? I'm off very soon and won't be back online much till tomorrow. Julian Field wrote: > This is possible. Here is a patch for Message.pm to clean up the output: > -----SNIP----- > --- Message.pm.old 2005-04-08 14:33:30.000000000 +0100 > +++ Message.pm 2005-04-08 15:03:20.940680796 +0100 > @@ -3872,12 +3872,18 @@ > my $from = $this->{from}; > #my $to = join(', ', @{$this->{to}}); > my $subj = $this->{subject}; > + my $ip = $this->{clientip}; > my $rept = join(" $reportword: ", @everyrept); > + #print STDERR "Rept is\n$rept\n"; > + > + # Build list of unique archive and quarantine storage locations > my @quarantines = grep /\//, @{$this->{archiveplaces}}; > push @quarantines, grep /\//, @{$this->{quarantineplaces}}; > - my $quarantine = join(", ", @quarantines); > - my $ip = $this->{clientip}; > - #print STDERR "Rept is\n$rept\n"; > + my($quarantine, %quarantinelist); > + foreach $quarantine (@quarantines) { > + $quarantinelist{$quarantine} = 1; > + } > + $quarantine = join(', ', sort keys %quarantinelist); > > # Build unique list of recipients. Avoids Postfix problem which has > # separate lists of real recipients and original recipients. > -----SNIP----- > > Please give this a try and let me know how you get on. > > Jeff A. Earickson wrote: > >> Julian, >> >> MS 4.40.11, Solaris 9. I found this in my daily report of quarantined >> stuff. The push @quarantines in CreatePostmasterNotice() seems to have >> run amok here. Any idea why it would push the same string so many >> times? >> >> j37L9Nr5007705: 137.146.156.144 (xxx@colby.edu) >> quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >> /var/spool/MailScanne! >> MailScanner: Executable DOS/Windows programs are dangerous in email >> (SETUP.EXE) >> >> Jeff Earickson >> Colby College >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! > > > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jaearick at COLBY.EDU Fri Apr 8 18:34:17 2005 From: jaearick at COLBY.EDU (Jeff A. Earickson) Date: Thu Jan 12 21:29:17 2006 Subject: quarantine report running amok Message-ID: Julian, Yes, it looks like it worked. Many thanks. Jeff Earickson Colby College On Fri, 8 Apr 2005, Julian Field wrote: > Date: Fri, 8 Apr 2005 16:53:01 +0100 > From: Julian Field > Reply-To: MailScanner mailing list > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: quarantine report running amok > > Did the patch work? I'm off very soon and won't be back online much till > tomorrow. > > Julian Field wrote: > >> This is possible. Here is a patch for Message.pm to clean up the output: >> -----SNIP----- >> --- Message.pm.old 2005-04-08 14:33:30.000000000 +0100 >> +++ Message.pm 2005-04-08 15:03:20.940680796 +0100 >> @@ -3872,12 +3872,18 @@ >> my $from = $this->{from}; >> #my $to = join(', ', @{$this->{to}}); >> my $subj = $this->{subject}; >> + my $ip = $this->{clientip}; >> my $rept = join(" $reportword: ", @everyrept); >> + #print STDERR "Rept is\n$rept\n"; >> + >> + # Build list of unique archive and quarantine storage locations >> my @quarantines = grep /\//, @{$this->{archiveplaces}}; >> push @quarantines, grep /\//, @{$this->{quarantineplaces}}; >> - my $quarantine = join(", ", @quarantines); >> - my $ip = $this->{clientip}; >> - #print STDERR "Rept is\n$rept\n"; >> + my($quarantine, %quarantinelist); >> + foreach $quarantine (@quarantines) { >> + $quarantinelist{$quarantine} = 1; >> + } >> + $quarantine = join(', ', sort keys %quarantinelist); >> >> # Build unique list of recipients. Avoids Postfix problem which has >> # separate lists of real recipients and original recipients. >> -----SNIP----- >> >> Please give this a try and let me know how you get on. >> >> Jeff A. Earickson wrote: >> >>> Julian, >>> >>> MS 4.40.11, Solaris 9. I found this in my daily report of quarantined >>> stuff. The push @quarantines in CreatePostmasterNotice() seems to have >>> run amok here. Any idea why it would push the same string so many >>> times? >>> >>> j37L9Nr5007705: 137.146.156.144 (xxx@colby.edu) >>> quarantine: /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanner/quarantine/20050407/j37L9Nr5007705, >>> /var/spool/MailScanne! >>> MailScanner: Executable DOS/Windows programs are dangerous in email >>> (SETUP.EXE) >>> >>> Jeff Earickson >>> Colby College >>> >>> ------------------------ MailScanner list ------------------------ >>> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >>> 'leave mailscanner' in the body of the email. >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >>> >>> Support MailScanner development - buy the book off the website! >> >> >> >> -- >> Julian Field >> www.MailScanner.info >> MailScanner thanks transtec Computers for their support >> Buy the MailScanner book at www.MailScanner.info/store >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USHERBROOKE.CA Fri Apr 8 18:54:45 2005 From: Denis.Beauchemin at USHERBROOKE.CA (Denis Beauchemin) Date: Thu Jan 12 21:29:17 2006 Subject: Phishing net behaving strangely Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: >>> ... >>> >>> Here is what I got: >>> >> color="red">MailScanner soupçonne le lien "132.210.244.102" >>> d'être une tentative de fraude de la part de pas le >>> bon
>>> >>> Which makes MS' message appear as a link. The message translates to: >>> MS believes the link "132.210.0.0" to be a phishing fraud attempt >>> from bad tag. >>> >>> Is this normal behaviour? >>> >> I just tried it again after changing MS' setup to English and the >> results are the same: MS' warning is inside the link... so I guess it >> is normal behaviour... > > > The idea is to leave the link active, but make the warning message part > of the link. So if it is a false alarm, they can still easily click on > the link. They have to be made aware that what they are doing is > potentially dangerous, but I don't (and shouldn't) actually stop them > being able to follow the link. > Julian, It makes perfect sense but the result is somewhat intriguing nonetheless. ;-) Thanks! Denis -- _ °v° Denis Beauchemin, analyste /(_)\ Université de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x2252 F: 819.821.8045 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "S/MIME Cryptographic Signature" ] [ Application/X-PKCS7-SIGNATURE 4.4KB. ] [ Unable to print this part. ] From hkclark at gmail.com Fri Apr 8 20:25:07 2005 From: hkclark at gmail.com (Kennedy Clark) Date: Thu Jan 12 21:29:17 2006 Subject: MailScanner SPAM Forward & Postfix Problem Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Drew, I can't thank you enough! I did something a little bit different than what you describe, but your explanation made a few things *finally* click for me and it's now working like a champ! I VERY much appreciate all the helpful advice I received in this thread. I will carry the info I gained over to the CentOS list so those folks can benefit as well. Now on to getting a single instance of Postfix working as per Glenn's suggestion! :-) Regards, Kennedy PS -- And, to answer your question about local account: yes, I'm using all local mail accounts on this box. On Apr 8, 2005 8:23 AM, Drew Marshall wrote: > > OK here is the first problem. You _don't_ have mydomain listed under > mydestination. Move it from virtual_alias_domains to mydestination. (This > assumes that you deliver mail to local mailboxes, which I believe is true > but you haven't confirmed). > > > virtual_alias_maps = hash:/etc/postfix/virtual_alias > > Again with the same assumption, move any reference to mydomain out of > virtual_alias and any aliases to _real_ accounts into /etc/postfix/aliases > > > alias_maps = hash:/etc/postfix/aliases > > Have I got something else hosed? Is using the virtual_alias_maps > > supposed to complete shut off the normal aliases file? > > No, the idea of virtual_alias_maps is that it translates virtual aliases > to either virtual mailboxes or other addresses for example, > sales@virtdomain.com becomes salesman@internal.virtdomain.com (So you can > run MailScanner as a gateway in front of Exchange or Notes for example). > For anything local, you must use proper shell accounts and the aliases > table (Where domains are not listed). Some times users don't want/ need > shell accounts so you can use virtual_mailbox_domains for these, this > needs more setting up to do correctly, but it's not too tricky. Speak to > me off list if you want help with that). > > > (Actually, I know it's still there in some way [it still works for the > "devnull: > > /dev/null" entry I have in /etc/postfix/aliases], but all I can't get > > it to work for normal email addresses [local or remote]). > > > > It's driving me crazy! Am I doing something dumb here? Maybe I'm the > > one who needs coffee. :-) > > Drew > > -- > In line with our policy, this message has > been scanned for viruses and dangerous > content by MailScanner, and is believed to be clean. > www.themarshalls.co.uk/policy > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From chardlist at CHARD.NET Fri Apr 8 22:10:05 2005 From: chardlist at CHARD.NET (chardlist) Date: Thu Jan 12 21:29:17 2006 Subject: Mail Archiving (OT) Message-ID: I'm working with the "forward" command in a delivery ruleset for MailScanner. I have the actual ruleset working just fine. However, the archiving company that I have to forward the e-mail copies to has a bit of a strange setup. Here's the scenario: Let's say I have to forward the e-mail copies to archive@archivedomain.com But archivedomain.com does not actually have any A records. Further, it has 4 MX records that all point to bogus IP addresses. I have been given the actual IP address and now have the responsibility of configuring my server to ignore the public (bogus) DNS records and deliver any mail that is addressed to archive@archivedomain.com to the IP address I've been given. I'm running FreeBSD 4.7 with Sendmail 8.13.1 Thanks in advance for any help. -Brendan ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From steve.swaney at FSL.COM Fri Apr 8 22:31:52 2005 From: steve.swaney at FSL.COM (Stephen Swaney) Date: Thu Jan 12 21:29:17 2006 Subject: Mail Archiving (OT) Message-ID: > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > Behalf Of chardlist > Sent: Friday, April 08, 2005 5:10 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Mail Archiving (OT) > > I'm working with the "forward" command in a delivery ruleset for > MailScanner. I have the actual ruleset working just fine. However, the > archiving company that I have to forward the e-mail copies to has a bit of > a > strange setup. > > Here's the scenario: > > Let's say I have to forward the e-mail copies to archive@archivedomain.com > > But archivedomain.com does not actually have any A records. Further, it > has > 4 MX records that all point to bogus IP addresses. > > I have been given the actual IP address and now have the responsibility of > configuring my server to ignore the public (bogus) DNS records and deliver > any mail that is addressed to archive@archivedomain.com to the IP address > I've been given. > > I'm running FreeBSD 4.7 with Sendmail 8.13.1 > > Thanks in advance for any help. > > -Brendan > Brendan, This is ugly since Sendmail really really likes to use DNS data. The simplest way might be to set up a DNS server with internal and external views. The internal view would have "faked" entries for the MX records for archivedomain.com that point to the IP addresses they provided you. Steve Steve Swaney President Fortress Systems Ltd. Phone: 202 338-1670 Cell: 202 352-3262 www.fsl.com steve.swaney@fsl.com Steve Swaney President Fortress Systems Ltd. Phone: 202 338-1670 Cell: 202 352-3262 www.fsl.com steve.swaney@fsl.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Fri Apr 8 23:17:59 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:17 2006 Subject: Mail Archiving (OT) Message-ID: I would add archivedomain.com to /etc/mail/relay-domains. Then I'd use a mailertable entry to tell sendmail where to send the mail: archivedomain.com esmtp:[192.168.1.1] Mike -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of chardlist Sent: Friday, April 08, 2005 4:10 PM To: MAILSCANNER@JISCMAIL.AC.UK Subject: Mail Archiving (OT) I'm working with the "forward" command in a delivery ruleset for MailScanner. I have the actual ruleset working just fine. However, the archiving company that I have to forward the e-mail copies to has a bit of a strange setup. Here's the scenario: Let's say I have to forward the e-mail copies to archive@archivedomain.com But archivedomain.com does not actually have any A records. Further, it has 4 MX records that all point to bogus IP addresses. I have been given the actual IP address and now have the responsibility of configuring my server to ignore the public (bogus) DNS records and deliver any mail that is addressed to archive@archivedomain.com to the IP address I've been given. I'm running FreeBSD 4.7 with Sendmail 8.13.1 Thanks in advance for any help. -Brendan ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ius at ALPHA.RBRANA.CO.ID Sat Apr 9 05:48:16 2005 From: ius at ALPHA.RBRANA.CO.ID (ius) Date: Thu Jan 12 21:29:17 2006 Subject: unsuccesfull make Mail::ClamAV Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Guys, Trying to install Mail::Clamav-0.17 here, and unsuccesfull. [root@sigma Mail-ClamAV-0.17]# perl Makefile.PL Checking if your kit is complete... Looks good Writing Makefile for Mail::ClamAV [root@sigma Mail-ClamAV-0.17]# make cp ClamAV.pm blib/lib/Mail/ClamAV.pm /usr/bin/perl -Mblib -MInline=NOISY,_INSTALL_ -MMail::ClamAV -e1 0.17 blib/arch Starting Build Prepocess Stage Finished Build Prepocess Stage Starting Build Parse Stage Finished Build Parse Stage Starting Build Glue 1 Stage Finished Build Glue 1 Stage Starting Build Glue 2 Stage Finished Build Glue 2 Stage Starting Build Glue 3 Stage Finished Build Glue 3 Stage Starting Build Compile Stage Starting "perl Makefile.PL" Stage Writing Makefile for Mail::ClamAV Finished "perl Makefile.PL" Stage Starting "make" Stage make[1]: Entering directory `/root/.cpan/build/Mail-ClamAV-0.17/_Inline/build/Mail/ClamAV' /usr/bin/perl /usr/lib/perl5/5.8.3/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.8.3/ExtUtils/typemap ClamAV.xs > ClamAV.xsc && mv ClamAV.xsc ClamAV.c gcc -c -I/root/.cpan/build/Mail-ClamAV-0.17 -I/usr/include -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -march=i386 -mcpu=i686 -DVERSION=\"0.17\" -DXS_VERSION=\"0.17\" -fPIC "-I/usr/lib/perl5/5.8.3/i386-linux-thread-multi/CORE" ClamAV.c Running Mkbootstrap for Mail::ClamAV () chmod 644 ClamAV.bs rm -f blib/arch/auto/Mail/ClamAV/ClamAV.so LD_RUN_PATH="/usr/lib" gcc -shared -L/usr/local/lib ClamAV.o -o blib/arch/auto/Mail/ClamAV/ClamAV.so -L/usr/lib -lz -lbz2 -lgmp -lcurl -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -lz -lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -lz -lpthread -lclamav /usr/bin/ld: cannot find -lbz2 collect2: ld returned 1 exit status make[1]: *** [blib/arch/auto/Mail/ClamAV/ClamAV.so] Error 1 make[1]: Leaving directory `/root/.cpan/build/Mail-ClamAV-0.17/_Inline/build/Mail/ClamAV' A problem was encountered while attempting to compile and install your Inline C code. The command that failed was: make The build directory was: /root/.cpan/build/Mail-ClamAV-0.17/_Inline/build/Mail/ClamAV To debug the problem, cd to the build directory, and inspect the output files. at /root/.cpan/build/Mail-ClamAV-0.17/blib/lib/Mail/ClamAV.pm line 193 BEGIN failed--compilation aborted at /root/.cpan/build/Mail-ClamAV-0.17/blib/lib/Mail/ClamAV.pm line 537. Compilation failed in require. BEGIN failed--compilation aborted. make: *** [ClamAV.inl] Error 2 [root@sigma Mail-ClamAV-0.17]# Anybody know what's wrong ? Thanks a lot ius ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Sat Apr 9 11:16:10 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:17 2006 Subject: unsuccesfull make Mail::ClamAV Message-ID: > rm -f blib/arch/auto/Mail/ClamAV/ClamAV.so > LD_RUN_PATH="/usr/lib" gcc -shared -L/usr/local/lib ClamAV.o -o > blib/arch/auto/Mail/ClamAV/ClamAV.so -L/usr/lib -lz -lbz2 > -lgmp -lcurl > -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl > -lz -lz -lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err > -lk5crypto -lresolv -ldl -lz -lz -lpthread -lclamav > /usr/bin/ld: cannot find -lbz2 You probably don't have the bzip2-devel package installed (assuming you have a redhat-ish rpm-based system)... So there is no lib to link against. Install it, rerun... and you should be fine. -- Glenn > Anybody know what's wrong ? > > Thanks a lot > ius > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From t.d.lee at DURHAM.AC.UK Sat Apr 9 11:25:57 2005 From: t.d.lee at DURHAM.AC.UK (David Lee) Date: Thu Jan 12 21:29:17 2006 Subject: unsuccesfull make Mail::ClamAV Message-ID: On Sat, 9 Apr 2005, ius wrote: > Trying to install Mail::Clamav-0.17 here, and unsuccesfull. > > [root@sigma Mail-ClamAV-0.17]# perl Makefile.PL > Checking if your kit is complete... > Looks good > Writing Makefile for Mail::ClamAV > > [root@sigma Mail-ClamAV-0.17]# make > cp ClamAV.pm blib/lib/Mail/ClamAV.pm > [...] > LD_RUN_PATH="/usr/lib" gcc -shared -L/usr/local/lib ClamAV.o -o > blib/arch/auto/Mail/ClamAV/ClamAV.so -L/usr/lib -lz -lbz2 -lgmp -lcurl > -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl > -lz -lz -lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err > -lk5crypto -lresolv -ldl -lz -lz -lpthread -lclamav > /usr/bin/ld: cannot find -lbz2 > collect2: ld returned 1 exit status > make[1]: *** [blib/arch/auto/Mail/ClamAV/ClamAV.so] Error 1 > make[1]: Leaving directory > `/root/.cpan/build/Mail-ClamAV-0.17/_Inline/build/Mail/ClamAV' > [...] In my experience, the building and testing of Mail::ClamAV is sensitive to local variations of things like "PATH" and "LD_RUN_PATH". Mail::ClamAV depends on other software. That's fine: indeed, it is a good principle. But if those things are not in the places "Mail:ClamAV" expects them on your system, then errors such as you see above tend to occur. If this is the case, you need to help it along, hold its hand, etc. In your case, when attempting to link "Mail::ClamAV" to the libraries it needs, it cannot find the libraries for "bz2". So firstly you need to find out where the "bz2" library (probably called something like "libbz2.so") lives on your system. Then you probably need to do something like adjusting the LD_RUN_PATH environment variable (and "export" if your shell requires it) to include this directory location that leads to that library. Then rebuild. For safety, rebuild from scratch: "make clean; perl Makefile.PL; make". (If you are comfortable with, and knowledgable about, your shell, make, perl, etc., then you might be able to make some shortcuts in the above.) Note carefully the words "probably" and "something like" in the above. It is intended as a guide to be read, interpreted and adapted; it isn't a guaranteed recipe to work! Hope that helps. (I'm going to be out of email contact for the next week or so, so any further help will have to come from other folk.) -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : University of Durham : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham : : Phone: +44 191 334 2752 U.K. : ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jwilliams at courtesymortgage.com Sun Apr 10 00:52:31 2005 From: jwilliams at courtesymortgage.com (Jason) Date: Thu Jan 12 21:29:17 2006 Subject: FreeBSD users out there... Message-ID: Just wanted to get some friendly advice and recommendations from fellow FreeBSD users out there. i'm going to upgrading Mailscanner this week from 4.29 to the latest stable version in the ports. i will also be updating SA from 2.64 to the latest stable in Ports as well. I have portupgrade installed and was curious as to what others recommend. maybe a simple; portupgrade Or any other nifty tricks. i usually just use portupgrade , but I figured i'd ask here, see what others experience as been. Much appreciated. Jas ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Sun Apr 10 01:11:03 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:17 2006 Subject: FreeBSD users out there... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jason wrote: >Just wanted to get some friendly advice and recommendations from fellow >FreeBSD users out there. > >i'm going to upgrading Mailscanner this week from 4.29 to the latest stable >version in the ports. > >i will also be updating SA from 2.64 to the latest stable in Ports as well. > >I have portupgrade installed and was curious as to what others recommend. > >maybe a simple; portupgrade > > For SpamAssassin, yes. For MailScanner, no. Personally, I would always look to build MS thus: $ cd /usr/ports/mail/mailscanner $ make $make deinstall ^^^^^^^^^^^^ to remove the old version $ make reinstall Then you still keep access to the wrapper and languages update scripts (Details of which you will see at the end of the installation. Once you have done these (If required) then $ make clean You then need to cd to /usr/local/etc/MailScanner and check the MailScanner.conf..new (I think it's called. You won't miss it anyway). It will have been automatically updated with the details from your old MailScanner.conf but there may be new features or options. You can compare against the default, which will also be in the same directory called MailScanner.conf.sample. Check also the differences between the other old files in that directory and the .sample new ones (Use diff to help you). I would also check the change log at www.mailscanner.info for other details as you might want to look at phishing safe site lists for example. Once you are happy you are ready to go. Don't forget you ought to run $ portupgrade -an just to see what else needs updating. There could well be perl modules that MS wants that need updating also. If you upgrade MS first and you are happy with the output of portupgrade -an just run portupgrade -a and go for coffee! The portupgrade will do the rest. Good luck Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jwilliams at courtesymortgage.com Sun Apr 10 01:29:59 2005 From: jwilliams at courtesymortgage.com (Jason) Date: Thu Jan 12 21:29:17 2006 Subject: FreeBSD users out there... Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi Drew. I appreciate your suggestions. I noted below: > For SpamAssassin, yes. For MailScanner, no. Personally, I would always > look to build MS thus: > $ cd /usr/ports/mail/mailscanner > $ make > $make deinstall > ^^^^^^^^^^^^ to remove the old version > $ make reinstall > Then you still keep access to the wrapper and languages update scripts > (Details of which you will see at the end of the installation. Once you > have done these (If required) then > $ make clean Good to know. Looks pretty straight forward really. No jumping through rings of fire or eating glass. :D > > You then need to cd to /usr/local/etc/MailScanner and check the > MailScanner.conf..new (I think it's called. You won't > miss it anyway). It will have been automatically updated with the > details from your old MailScanner.conf but there may be new features or > options. You can compare against the default, which will also be in the > same directory called MailScanner.conf.sample. Check also the > differences between the other old files in that directory and the > .sample new ones (Use diff to help you). I would also check the change > log at www.mailscanner.info for other details as you might want to look > at phishing safe site lists for example. Once you are happy you are > ready to go. Alright. I'll make sure I do that. Reading the changelog as I write. > > Don't forget you ought to run $ portupgrade -an just to see what else > needs updating. There could well be perl modules that MS wants that need > updating also. If you upgrade MS first and you are happy with the output > of portupgrade -an just run portupgrade -a and go for coffee! The > portupgrade will do the rest. You know, i forgot about using portupgrade -an. Really is a handy tool. If you don't mind, just for kicks i ran it inside the mailscanner port (/usr/ports/mail/mailscanner) as well as the spamassassin port (/usr/ports/mail/p5-Mail-SpamAsassin). Interesting thing happened when I ran portupgrade -an in the SA port: Looking at the output, it looks as if it wants to upgrade quite a bit of ports. Some of them are: bash2 sudo sendmail apache Even had mailscanner in there. :) I was a little surprised by this. Is that correct? I could email you a output list if you like if your curious to see what it came up with. > > Good luck > thanks Jason ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Sun Apr 10 01:47:13 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:17 2006 Subject: FreeBSD users out there... Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Jason wrote: Hi Drew. I appreciate your suggestions. I noted below: For SpamAssassin, yes. For MailScanner, no. Personally, I would always look to build MS thus: $ cd /usr/ports/mail/mailscanner $ make $make deinstall ^^^^^^^^^^^^ to remove the old version $ make reinstall Then you still keep access to the wrapper and languages update scripts (Details of which you will see at the end of the installation. Once you have done these (If required) then $ make clean Good to know. Looks pretty straight forward really. No jumping through rings of fire or eating glass. :D You then need to cd to /usr/local/etc/MailScanner and check the MailScanner.conf..new (I think it's called. You won't miss it anyway). It will have been automatically updated with the details from your old MailScanner.conf but there may be new features or options. You can compare against the default, which will also be in the same directory called MailScanner.conf.sample. Check also the differences between the other old files in that directory and the .sample new ones (Use diff to help you). I would also check the change log at www.mailscanner.info for other details as you might want to look at phishing safe site lists for example. Once you are happy you are ready to go. Alright. I'll make sure I do that. Reading the changelog as I write. Don't forget you ought to run $ portupgrade -an just to see what else needs updating. There could well be perl modules that MS wants that need updating also. If you upgrade MS first and you are happy with the output of portupgrade -an just run portupgrade -a and go for coffee! The portupgrade will do the rest. You know, i forgot about using portupgrade -an. Really is a handy tool. If you don't mind, just for kicks i ran it inside the mailscanner port (/usr/ports/mail/mailscanner) as well as the spamassassin port (/usr/ports/mail/p5-Mail-SpamAsassin). Interesting thing happened when I ran portupgrade -an in the SA port: Looking at the output, it looks as if it wants to upgrade quite a bit of ports. Some of them are: bash2 sudo sendmail apache Even had mailscanner in there. :) I was a little surprised by this. Is that correct? I could email you a output list if you like if your curious to see what it came up with. The -a flag of portupgrade means all and -n is no action. It doesn't matter where you run the command, portupgrade will look to upgrade *all* the packages on your machine. In this instance it includes Apache, Sendmail and I would be surprised to see a raft of perl modules. Now if you don't want to update every thing, you can be clever and just: $ cd /var/db/pkg (Which is the database of all the packages and ports installed on your box) $ portupgrade p5-* (which would upgrade all the perl modules, for example) So you can use wildcards, which is really handy for the perl modules. HTH Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From carinus.carelse at MRC.AC.ZA Mon Apr 11 06:51:28 2005 From: carinus.carelse at MRC.AC.ZA (Carinus Carelse) Date: Thu Jan 12 21:29:17 2006 Subject: Two Copies of Mailscanner with different exim configs Message-ID: I would like to have two copies of mailscanner running with a different exim config for each one and a different set of rules for each one. Is this possible and how do I go about doing it. Carinus ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From smilga at MIKROTIK.COM Mon Apr 11 08:04:35 2005 From: smilga at MIKROTIK.COM (Martins Smilga) Date: Thu Jan 12 21:29:17 2006 Subject: Cannot allocate memory Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, What could couse this error? Mailscanner was running more then month without any problem. MailScanner[15034]: fork: Cannot allocate memory Best Regards, Martins Smilga ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 11 08:08:59 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: Two Copies of Mailscanner with different exim configs Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Just have 2 different MailScanner.conf files and start them up with MailScanner /etc/MailScanner/config1.conf MailScanner /etc/MailScanner/config2.conf You will obviously need 2 incoming, outgoing directories, though they should be able to share a working and quarantine directory. You will see how to start up exim with different configs in the MailScanner init.d script. Carinus Carelse wrote: > > I would like to have two copies of mailscanner running with a > different exim config for each one and a different set of rules for > each one. Is this possible and how do I go about doing it. > > > Carinus > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Apr 11 08:10:01 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:17 2006 Subject: Cannot allocate memory Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] What is your "Restart Every" setting? How much RAM do you have? What did you set "Max Children" to be? What else is the machine running apart from MailScanner? Martins Smilga wrote: > Hello, > > What could couse this error? Mailscanner was running more then month > without > any problem. > > MailScanner[15034]: fork: Cannot allocate memory -- Julian Field www.MailScanner.info MailScanner thanks transtec Computers for their support Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From bg.mahesh at INDIAINFO.COM Mon Apr 11 08:19:17 2005 From: bg.mahesh at INDIAINFO.COM (BG Mahesh) Date: Thu Jan 12 21:29:18 2006 Subject: ExtUtils-MakeMaker-6.05 problem Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Can anyone help me how I could solve this problem? ----- Original Message ----- From: "BG Mahesh" To: MAILSCANNER@JISCMAIL.AC.UK Subject: ExtUtils-MakeMaker-6.05 problem Date: Fri, 8 Apr 2005 10:17:07 +0530 > > hi > > I am trying to install MS 4.40.11-1 on a Linux machine. I have > manually installed ExtUtils-MakeMaker-6.27 from cpan.org > > During installation of MS the error I get is, > > /usr/bin/instmodshX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/ExtUtils-MakeMaker-6.05 > 0 blocks > find: /var/tmp/perl-ExtUtils-MakeMaker-6.05-1-root/usr/lib/debug: > No such file or directory > > Shouldn't MS skip the installation of ExtUtils-MakeMaker-6.05 > because I have a newer version? > > find: /var/tmp/perl-Net-CIDR-0.10-1-root/usr/lib/debug: No such > file or directory > + /usr/lib/rpm/redhat/brp-compress > + /usr/lib/rpm/redhat/brp-strip /usr/bin/strip > + /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip > + /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump > Processing files: perl-Net-CIDR-0.10-1 > error: Couldn't exec /usr/lib/rpm/perl.prov: No such file or directory > getOutputFrom(): Broken pipe > > I already have the latest Net::CDIR, not sure why it is being installed. > > HOw can I solve this? > > -- > B.G. Mahesh > bg.mahesh@indiainfo.com > http://www.indiainfo.com/ > > -- > ______________________________________________ > IndiaInfo Mail - the free e-mail service with a difference! www.indiainfo.com > Check out our value-added Premium features, such as an extra 20MB > for mail storage, POP3, e-mail forwarding, and ads-free mailboxes! > > Powered by Outblaze > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! -- B.G. Mahesh bg.mahesh@indiainfo.com http://www.indiainfo.com/ -- ______________________________________________ IndiaInfo Mail - the free e-mail service with a difference! www.indiainfo.com Check out our value-added Premium features, such as an extra 20MB for mail storage, POP3, e-mail forwarding, and ads-free mailboxes! Powered by Outblaze ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From smilga at MIKROTIK.COM Mon Apr 11 09:21:03 2005 From: smilga at MIKROTIK.COM (Martins Smilga) Date: Thu Jan 12 21:29:18 2006 Subject: Cannot allocate memory Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, > What is your "Restart Every" setting? Restart Every = 14400 > How much RAM do you have? 776856k > What did you set "Max Children" to be? Max Children = 5 > What else is the machine running apart from MailScanner? Exim and Mailscanner-mrtg Thanks in advance. Best Regards, Martins ----- Original Message ----- From: "Julian Field" To: Sent: Monday, April 11, 2005 10:10 AM Subject: Re: Cannot allocate memory > What is your "Restart Every" setting? > How much RAM do you have? > What did you set "Max Children" to be? > What else is the machine running apart from MailScanner? > > Martins Smilga wrote: > >> Hello, >> >> What could couse this error? Mailscanner was running more then month >> without >> any problem. >> >> MailScanner[15034]: fork: Cannot allocate memory > > > -- > Julian Field > www.MailScanner.info > MailScanner thanks transtec Computers for their support > Buy the MailScanner book at www.MailScanner.info/store > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Danny_Beland at PCH.GC.CA Mon Apr 11 16:24:18 2005 From: Danny_Beland at PCH.GC.CA (Danny Beland) Date: Thu Jan 12 21:29:18 2006 Subject: Emails are getting stuck in the mqueue.in directory Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I'm running Linux with sendmail v8.12.10, MailScanner v4.40.11, ClamAV and McAfee command line scanner. The problem we have is that emails get stuck in the mqueue.in folder. When there is new messages, we can see that there is some getting stuck . In the log below we can see that it only gets 4 messages out but there is still 34 left, but after it is done scanning, it doesn't go to grab the 34 messages left. The content of the mqueue.in folder is listed after the mailscanner log. I was using flock as the lock type before, but the same problem occurs. There is also nothing in the incoming folders. I am not sure if it is a setting that is causing this or it is a bug. Thanks!! Apr 11 11:04:24 hound2 MailScanner[13081]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13628]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13349]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13185]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13532]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[12896]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13745]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13869]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[12930]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13044]: MailScanner child caught a SIGHUP Apr 11 11:04:30 hound2 MailScanner[14192]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:30 hound2 MailScanner[14192]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:31 hound2 MailScanner[14192]: Using locktype = posix Apr 11 11:04:31 hound2 MailScanner[14192]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:04:31 hound2 MailScanner[14192]: New Batch: Found 34 messages waiting Apr 11 11:04:31 hound2 MailScanner[14192]: New Batch: Scanning 4 messages, 26463 bytes Apr 11 11:04:31 hound2 MailScanner[14192]: Spam Checks: Starting Apr 11 11:04:32 hound2 MailScanner[14192]: Message j3BF4No5014108 from 142.195.251.129 (julie.meloche@desjardins.com) to pch.gc.ca is not spam, SpamAssassin (score=-1.49, required 3.8, AWL 0.01, BAYES_00 -2.60, NO_REAL_NAME 0.01, PRIORITY_NO_NAME 1.10) Apr 11 11:04:34 hound2 MailScanner[14192]: Message j3BF4Oo4014130 from 24.201.245.36 (stephane.01@videotron.ca) to pc.gc.cais not spam, SpamAssassin (score=-2.514, required 3.8, autolearn=not spam, AWL 0.09, BAYES_00 -2.60) Apr 11 11:04:35 hound2 MailScanner[14192]: Message j3BF4Mo4014096 from 129.33.92.44 (christine@thedavisfamily.ca) to pch.gc.ca is not spam, SpamAssassin (score=-2.292, required 3.8, BAYES_00 -2.60, NO_REAL_NAME 0.01, SARE_WEOFFER 0.30) Apr 11 11:04:35 hound2 MailScanner[14192]: Message j3BF4Mo4014099 from 64.254.157.135 (louise.danjou@cossette.com) to pch.gc.ca is not spam, SpamAssassin (score=-2.461, required 3.8, AWL 0.02, BAYES_00 -2.60, HTML_MESSAGE 0.00, HTML_TAG_EXIST_TBODY 0.11) Apr 11 11:04:36 hound2 MailScanner[14192]: Virus and Content Scanning: Starting Apr 11 11:04:37 hound2 MailScanner[14192]: tag found in message j3BF4Mo4014099 from louise.danjou@cossette.com Apr 11 11:04:37 hound2 MailScanner[14192]: Uninfected: Delivered 4 messages Apr 11 11:04:41 hound2 MailScanner[14219]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:41 hound2 MailScanner[14219]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:42 hound2 MailScanner[14219]: Using locktype = posix Apr 11 11:04:42 hound2 MailScanner[14219]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:04:52 hound2 MailScanner[14220]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:52 hound2 MailScanner[14220]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:53 hound2 MailScanner[14220]: Using locktype = posix Apr 11 11:04:53 hound2 MailScanner[14220]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:03 hound2 MailScanner[14221]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:03 hound2 MailScanner[14221]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:04 hound2 MailScanner[14221]: Using locktype = posix Apr 11 11:05:04 hound2 MailScanner[14221]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:14 hound2 MailScanner[14224]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:14 hound2 MailScanner[14224]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:15 hound2 MailScanner[14224]: Using locktype = posix Apr 11 11:05:15 hound2 MailScanner[14224]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:25 hound2 MailScanner[14227]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:25 hound2 MailScanner[14227]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:27 hound2 MailScanner[14227]: Using locktype = posix Apr 11 11:05:27 hound2 MailScanner[14227]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:36 hound2 MailScanner[14231]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:36 hound2 MailScanner[14231]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:37 hound2 MailScanner[14231]: Using locktype = posix Apr 11 11:05:37 hound2 MailScanner[14231]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:47 hound2 MailScanner[14232]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:47 hound2 MailScanner[14232]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:49 hound2 MailScanner[14232]: Using locktype = posix Apr 11 11:05:49 hound2 MailScanner[14232]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:58 hound2 MailScanner[14235]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:58 hound2 MailScanner[14235]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:59 hound2 MailScanner[14235]: Using locktype = posix Apr 11 11:05:59 hound2 MailScanner[14235]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:06:09 hound2 MailScanner[14236]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:06:09 hound2 MailScanner[14236]: Read 0 hostnames from the phishing whitelist Apr 11 11:06:10 hound2 MailScanner[14236]: Using locktype = posix Apr 11 11:06:10 hound2 MailScanner[14236]: Creating hardcoded struct_flock subroutine for linux (Linux-type) hound2:/var/spool/mqueue.in # date Mon Apr 11 11:09:24 EDT 2005 hound2:/var/spool/mqueue.in # ls -la total 8847 drwx------ 3 root root 2448 Apr 11 11:04 . drwxr-xr-x 14 root root 392 Mar 7 07:08 .. drwx------ 2 root root 48 Apr 1 11:37 .hoststat -rw------- 1 root mail 0 Mar 23 11:18 dfj2NEI6xL013577 -rw------- 1 root mail 28672 Mar 23 10:00 dfj2NEiZxL000663 -rw------- 1 root mail 49152 Mar 23 10:30 dfj2NFNDxL027390 -rw------- 1 root mail 8192 Mar 23 10:27 dfj2NFNRxL027535 -rw------- 1 root mail 933888 Mar 23 11:27 dfj2NGR3xL009916 -rw------- 1 root mail 45056 Mar 23 11:38 dfj2NGZbhN013223 -rw------- 1 root mail 36864 Mar 23 11:52 dfj2NGiFhN018441 -rw------- 1 root mail 16384 Mar 23 11:54 dfj2NGnNhN021755 -rw------- 1 root mail 12288 Mar 23 12:19 dfj2NHG4hN005200 -rw------- 1 root mail 36864 Mar 23 12:33 dfj2NHRChN011805 -rw------- 1 root mail 32768 Mar 23 12:34 dfj2NHTAhN012967 -rw------- 1 root mail 12288 Mar 23 12:37 dfj2NHY3hN016085 -rw------- 1 root mail 20480 Mar 23 12:45 dfj2NHiPhN022029 -rw------- 1 root mail 28672 Mar 23 12:55 dfj2NHpkhN026568 -rw------- 1 root mail 49152 Mar 23 13:10 dfj2NHsnhN028287 -rw------- 1 root mail 1294336 Mar 23 13:11 dfj2NHv6hN029541 -rw------- 1 root mail 2375680 Mar 23 13:11 dfj2NHv6hN029542 -rw------- 1 root mail 24576 Mar 23 13:10 dfj2NI1vhN032534 -rw------- 1 root mail 368640 Mar 23 13:47 dfj2NIlL9h026163 -rw------- 1 root mail 8192 Mar 24 10:55 dfj2OFsFmq028118 -rw------- 1 root mail 16384 Mar 24 10:55 dfj2OFslmq028381 -rw------- 1 root mail 28672 Mar 24 10:56 dfj2OFtpmq028984 -rw------- 1 root mail 139264 Mar 24 10:56 dfj2OFummq029645 -rw------- 1 root mail 541 Apr 1 11:35 dfj31EZ1q7006497 -rw------- 1 root mail 16384 Apr 1 10:19 dfj31FIwq7010985 -rw------- 1 root mail 20480 Apr 1 10:24 dfj31FM9q7013458 -rw------- 1 root mail 16384 Apr 1 11:44 dfj31Gikq7017302 -rw------- 1 root mail 872 Apr 4 10:08 dfj34C8nOj011677 -rw------- 1 root mail 61440 Apr 4 08:53 dfj34ClhOj026253 -rw------- 1 root mail 16384 Apr 4 09:08 dfj34D6YOj020610 -rw------- 1 root mail 155648 Apr 4 09:53 dfj34DaiOj000798 -rw------- 1 root mail 421888 Apr 4 09:44 dfj34Dd0Oj004396 -rw------- 1 root mail 368640 Apr 4 10:05 dfj34E2pOj009876 -rw------- 1 root mail 708608 Apr 4 10:14 dfj34E8UOj017604 -rw------- 1 root mail 28672 Apr 11 09:12 dfj3BDAsWg029242 -rw------- 1 root mail 32768 Apr 11 09:26 dfj3BDJiWg003720 -rw------- 1 root mail 49152 Apr 11 09:33 dfj3BDVOWh011659 -rw------- 1 root mail 61440 Apr 11 09:33 dfj3BDVPWh011695 -rw------- 1 root mail 8192 Apr 11 09:33 dfj3BDVWWh011768 -rw------- 1 root mail 20480 Apr 11 09:34 dfj3BDVXWh011771 -rw------- 1 root mail 32768 Apr 11 09:43 dfj3BDduWg017597 -rw------- 1 root mail 32768 Apr 11 09:48 dfj3BDjOWg021883 -rw------- 1 root mail 831488 Apr 11 10:41 dfj3BEdFWg027932 -rw------- 1 root mail 638976 Apr 11 10:52 dfj3BElWWg001619 -rw------- 1 root mail 923 Apr 5 00:56 qfj352riWh022594 -rw------- 1 root mail 967 Apr 5 09:28 qfj35BSMWh013958 -rw------- 1 root mail 925 Apr 5 14:18 qfj35GHhWh004468 -rw------- 1 root mail 949 Apr 5 16:05 qfj35I5kWh013983 -rw------- 1 root mail 977 Apr 5 16:09 qfj35I60Wh014078 -rw------- 1 root mail 940 Apr 5 19:08 qfj35L7sWh004843 -rw------- 1 root mail 953 Apr 6 01:40 qfj363aaWh008242 -rw------- 1 root mail 1711 Apr 6 00:20 qfj364J3Wo022047 -rw------- 1 root mail 1001 Apr 6 04:52 qfj366q0Wh003389 -rw------- 1 root mail 1046 Apr 6 23:23 qfj371NVWh010276 -rw------- 1 root mail 961 Apr 7 00:54 qfj372qWWh006615 -rw------- 1 root mail 928 Apr 7 02:15 qfj374CoWi031202 -rw------- 1 root mail 971 Apr 7 17:01 qfj37IwpWh004066 -rw------- 1 root mail 924 Apr 8 03:00 qfj38404Wh003283 -rw------- 1 root mail 924 Apr 8 03:35 qfj384YMWh013402 -rw------- 1 root mail 925 Apr 8 04:05 qfj3863tWh006263 -rw------- 1 root mail 916 Apr 8 10:20 qfj38CHnWh000714 -rw------- 1 root mail 965 Apr 8 15:57 qfj38HsLWh004420 -rw------- 1 root mail 915 Apr 8 20:13 qfj38MC0Wh007466 -rw------- 1 root mail 944 Apr 8 23:42 qfj391dvWh009561 -rw------- 1 root mail 915 Apr 9 01:07 qfj39260Wh016687 -rw------- 1 root mail 914 Apr 9 21:58 qfj39MvdWh023748 -rw------- 1 root mail 916 Apr 10 04:46 qfj3A6ebWh030427 -rw------- 1 root mail 916 Apr 10 09:43 qfj3ABWdWh030461 -rw------- 1 root mail 996 Apr 10 11:40 qfj3ADduWh027873 -rw------- 1 root mail 1008 Apr 10 16:23 qfj3AILcWh007512 -rw------- 1 root mail 950 Apr 10 23:05 qfj3B0vZWo005462 -rw------- 1 root mail 1007 Apr 11 00:19 qfj3B4JMWg020843 -rw------- 1 root mail 920 Apr 11 03:50 qfj3B5n2Wh013589 -rw------- 1 root mail 950 Apr 11 10:14 qfj3BCDgWh028342 hound2:/var/spool/mqueue.in # ls -1|wc -l 77 hound2:/var/spool/mqueue.in # ... hound2:/var/spool/MailScanner/incoming # ls * 14192: . .. 14219: . .. 14220: . .. 14221: . .. 14224: . .. 14227: . .. 14231: . .. 14232: . .. 14235: . .. 14236: . .. hound2:/var/spool/MailScanner/incoming # cd ../quarantine/ hound2:/var/spool/MailScanner/quarantine # ls . .. Danny Béland ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Danny_Beland at PCH.GC.CA Mon Apr 11 19:57:55 2005 From: Danny_Beland at PCH.GC.CA (Danny Beland) Date: Thu Jan 12 21:29:18 2006 Subject: Emails are getting stuck in the mqueue.in directory Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] That is what I was using before trying posix and I had the same problem. Danny -----"Chris Picciotto" wrote: ----- To: From: "Chris Picciotto" Date: 04/11/2005 01:56PM Subject: Re: Emails are getting stuck in the mqueue.in directory Hi Danny, Sorry - I did not reply to the list. But it appears you have the incorrect file locking type. MailScanner should be set to "flock" not "posix" to clear the files. Try that? Hope it helps, Chris ----- Original Message ----- From: Danny Beland Newsgroups: gmane.mail.virus.mailscanner Sent: Monday, April 11, 2005 5:24 AM Subject: Emails are getting stuck in the mqueue.in directory I'm running Linux with sendmail v8.12.10, MailScanner v4.40.11, ClamAV and McAfee command line scanner. The problem we have is that emails get stuck in the mqueue.in folder. When there is new messages, we can see that there is some getting stuck . In the log below we can see that it only gets 4 messages out but there is still 34 left, but after it is done scanning, it doesn't go to grab the 34 messages left. The content of the mqueue.in folder is listed after the mailscanner log. I was using flock as the lock type before, but the same problem occurs. There is also nothing in the incoming folders. I am not sure if it is a setting that is causing this or it is a bug. Thanks!! Apr 11 11:04:24 hound2 MailScanner[13081]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13628]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13349]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13185]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13532]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[12896]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13745]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13869]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[12930]: MailScanner child caught a SIGHUP Apr 11 11:04:24 hound2 MailScanner[13044]: MailScanner child caught a SIGHUP Apr 11 11:04:30 hound2 MailScanner[14192]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:30 hound2 MailScanner[14192]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:31 hound2 MailScanner[14192]: Using locktype = posix Apr 11 11:04:31 hound2 MailScanner[14192]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:04:31 hound2 MailScanner[14192]: New Batch: Found 34 messages waiting Apr 11 11:04:31 hound2 MailScanner[14192]: New Batch: Scanning 4 messages, 26463 bytes Apr 11 11:04:31 hound2 MailScanner[14192]: Spam Checks: Starting Apr 11 11:04:32 hound2 MailScanner[14192]: Message j3BF4No5014108 from 142.195.251.129 (julie.meloche@desjardins.com) to pch.gc.ca is not spam, SpamAssassin (score=-1.49, required 3.8, AWL 0.01, BAYES_00 -2.60, NO_REAL_NAME 0.01, PRIORITY_NO_NAME 1.10) Apr 11 11:04:34 hound2 MailScanner[14192]: Message j3BF4Oo4014130 from 24.201.245.36 (stephane.01@videotron.ca) to pc.gc.cais not spam, SpamAssassin (score=-2.514, required 3.8, autolearn=not spam, AWL 0.09, BAYES_00 -2.60) Apr 11 11:04:35 hound2 MailScanner[14192]: Message j3BF4Mo4014096 from 129.33.92.44 (christine@thedavisfamily.ca) to pch.gc.ca is not spam, SpamAssassin (score=-2.292, required 3.8, BAYES_00 -2.60, NO_REAL_NAME 0.01, SARE_WEOFFER 0.30) Apr 11 11:04:35 hound2 MailScanner[14192]: Message j3BF4Mo4014099 from 64.254.157.135 (louise.danjou@cossette.com) to pch.gc.ca is not spam, SpamAssassin (score=-2.461, required 3.8, AWL 0.02, BAYES_00 -2.60, HTML_MESSAGE 0.00, HTML_TAG_EXIST_TBODY 0.11) Apr 11 11:04:36 hound2 MailScanner[14192]: Virus and Content Scanning: Starting Apr 11 11:04:37 hound2 MailScanner[14192]: tag found in message j3BF4Mo4014099 from louise.danjou@cossette.com Apr 11 11:04:37 hound2 MailScanner[14192]: Uninfected: Delivered 4 messages Apr 11 11:04:41 hound2 MailScanner[14219]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:41 hound2 MailScanner[14219]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:42 hound2 MailScanner[14219]: Using locktype = posix Apr 11 11:04:42 hound2 MailScanner[14219]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:04:52 hound2 MailScanner[14220]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:04:52 hound2 MailScanner[14220]: Read 0 hostnames from the phishing whitelist Apr 11 11:04:53 hound2 MailScanner[14220]: Using locktype = posix Apr 11 11:04:53 hound2 MailScanner[14220]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:03 hound2 MailScanner[14221]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:03 hound2 MailScanner[14221]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:04 hound2 MailScanner[14221]: Using locktype = posix Apr 11 11:05:04 hound2 MailScanner[14221]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:14 hound2 MailScanner[14224]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:14 hound2 MailScanner[14224]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:15 hound2 MailScanner[14224]: Using locktype = posix Apr 11 11:05:15 hound2 MailScanner[14224]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:25 hound2 MailScanner[14227]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:25 hound2 MailScanner[14227]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:27 hound2 MailScanner[14227]: Using locktype = posix Apr 11 11:05:27 hound2 MailScanner[14227]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:36 hound2 MailScanner[14231]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:36 hound2 MailScanner[14231]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:37 hound2 MailScanner[14231]: Using locktype = posix Apr 11 11:05:37 hound2 MailScanner[14231]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:47 hound2 MailScanner[14232]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:47 hound2 MailScanner[14232]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:49 hound2 MailScanner[14232]: Using locktype = posix Apr 11 11:05:49 hound2 MailScanner[14232]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:05:58 hound2 MailScanner[14235]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:05:58 hound2 MailScanner[14235]: Read 0 hostnames from the phishing whitelist Apr 11 11:05:59 hound2 MailScanner[14235]: Using locktype = posix Apr 11 11:05:59 hound2 MailScanner[14235]: Creating hardcoded struct_flock subroutine for linux (Linux-type) Apr 11 11:06:09 hound2 MailScanner[14236]: MailScanner E-Mail Virus Scanner version 4.40.11 starting... Apr 11 11:06:09 hound2 MailScanner[14236]: Read 0 hostnames from the phishing whitelist Apr 11 11:06:10 hound2 MailScanner[14236]: Using locktype = posix Apr 11 11:06:10 hound2 MailScanner[14236]: Creating hardcoded struct_flock subroutine for linux (Linux-type) hound2:/var/spool/mqueue.in # date Mon Apr 11 11:09:24 EDT 2005 hound2:/var/spool/mqueue.in # ls -la total 8847 drwx------ 3 root root 2448 Apr 11 11:04 . drwxr-xr-x 14 root root 392 Mar 7 07:08 .. drwx------ 2 root root 48 Apr 1 11:37 .hoststat -rw------- 1 root mail 0 Mar 23 11:18 dfj2NEI6xL013577 -rw------- 1 root mail 28672 Mar 23 10:00 dfj2NEiZxL000663 -rw------- 1 root mail 49152 Mar 23 10:30 dfj2NFNDxL027390 -rw------- 1 root mail 8192 Mar 23 10:27 dfj2NFNRxL027535 -rw------- 1 root mail 933888 Mar 23 11:27 dfj2NGR3xL009916 -rw------- 1 root mail 45056 Mar 23 11:38 dfj2NGZbhN013223 -rw------- 1 root mail 36864 Mar 23 11:52 dfj2NGiFhN018441 -rw------- 1 root mail 16384 Mar 23 11:54 dfj2NGnNhN021755 -rw------- 1 root mail 12288 Mar 23 12:19 dfj2NHG4hN005200 -rw------- 1 root mail 36864 Mar 23 12:33 dfj2NHRChN011805 -rw------- 1 root mail 32768 Mar 23 12:34 dfj2NHTAhN012967 -rw------- 1 root mail 12288 Mar 23 12:37 dfj2NHY3hN016085 -rw------- 1 root mail 20480 Mar 23 12:45 dfj2NHiPhN022029 -rw------- 1 root mail 28672 Mar 23 12:55 dfj2NHpkhN026568 -rw------- 1 root mail 49152 Mar 23 13:10 dfj2NHsnhN028287 -rw------- 1 root mail 1294336 Mar 23 13:11 dfj2NHv6hN029541 -rw------- 1 root mail 2375680 Mar 23 13:11 dfj2NHv6hN029542 -rw------- 1 root mail 24576 Mar 23 13:10 dfj2NI1vhN032534 -rw------- 1 root mail 368640 Mar 23 13:47 dfj2NIlL9h026163 -rw------- 1 root mail 8192 Mar 24 10:55 dfj2OFsFmq028118 -rw------- 1 root mail 16384 Mar 24 10:55 dfj2OFslmq028381 -rw------- 1 root mail 28672 Mar 24 10:56 dfj2OFtpmq028984 -rw------- 1 root mail 139264 Mar 24 10:56 dfj2OFummq029645 -rw------- 1 root mail 541 Apr 1 11:35 dfj31EZ1q7006497 -rw------- 1 root mail 16384 Apr 1 10:19 dfj31FIwq7010985 -rw------- 1 root mail 20480 Apr 1 10:24 dfj31FM9q7013458 -rw------- 1 root mail 16384 Apr 1 11:44 dfj31Gikq7017302 -rw------- 1 root mail 872 Apr 4 10:08 dfj34C8nOj011677 -rw------- 1 root mail 61440 Apr 4 08:53 dfj34ClhOj026253 -rw------- 1 root mail 16384 Apr 4 09:08 dfj34D6YOj020610 -rw------- 1 root mail 155648 Apr 4 09:53 dfj34DaiOj000798 -rw------- 1 root mail 421888 Apr 4 09:44 dfj34Dd0Oj004396 -rw------- 1 root mail 368640 Apr 4 10:05 dfj34E2pOj009876 -rw------- 1 root mail 708608 Apr 4 10:14 dfj34E8UOj017604 -rw------- 1 root mail 28672 Apr 11 09:12 dfj3BDAsWg029242 -rw------- 1 root mail 32768 Apr 11 09:26 dfj3BDJiWg003720 -rw------- 1 root mail 49152 Apr 11 09:33 dfj3BDVOWh011659 -rw------- 1 root mail 61440 Apr 11 09:33 dfj3BDVPWh011695 -rw------- 1 root mail 8192 Apr 11 09:33 dfj3BDVWWh011768 -rw------- 1 root mail 20480 Apr 11 09:34 dfj3BDVXWh011771 -rw------- 1 root mail 32768 Apr 11 09:43 dfj3BDduWg017597 -rw------- 1 root mail 32768 Apr 11 09:48 dfj3BDjOWg021883 -rw------- 1 root mail 831488 Apr 11 10:41 dfj3BEdFWg027932 -rw------- 1 root mail 638976 Apr 11 10:52 dfj3BElWWg001619 -rw------- 1 root mail 923 Apr 5 00:56 qfj352riWh022594 -rw------- 1 root mail 967 Apr 5 09:28 qfj35BSMWh013958 -rw------- 1 root mail 925 Apr 5 14:18 qfj35GHhWh004468 -rw------- 1 root mail 949 Apr 5 16:05 qfj35I5kWh013983 -rw------- 1 root mail 977 Apr 5 16:09 qfj35I60Wh014078 -rw------- 1 root mail 940 Apr 5 19:08 qfj35L7sWh004843 -rw------- 1 root mail 953 Apr 6 01:40 qfj363aaWh008242 -rw------- 1 root mail 1711 Apr 6 00:20 qfj364J3Wo022047 -rw------- 1 root mail 1001 Apr 6 04:52 qfj366q0Wh003389 -rw------- 1 root mail 1046 Apr 6 23:23 qfj371NVWh010276 -rw------- 1 root mail 961 Apr 7 00:54 qfj372qWWh006615 -rw------- 1 root mail 928 Apr 7 02:15 qfj374CoWi031202 -rw------- 1 root mail 971 Apr 7 17:01 qfj37IwpWh004066 -rw------- 1 root mail 924 Apr 8 03:00 qfj38404Wh003283 -rw------- 1 root mail 924 Apr 8 03:35 qfj384YMWh013402 -rw------- 1 root mail 925 Apr 8 04:05 qfj3863tWh006263 -rw------- 1 root mail 916 Apr 8 10:20 qfj38CHnWh000714 -rw------- 1 root mail 965 Apr 8 15:57 qfj38HsLWh004420 -rw------- 1 root mail 915 Apr 8 20:13 qfj38MC0Wh007466 -rw------- 1 root mail 944 Apr 8 23:42 qfj391dvWh009561 -rw------- 1 root mail 915 Apr 9 01:07 qfj39260Wh016687 -rw------- 1 root mail 914 Apr 9 21:58 qfj39MvdWh023748 -rw------- 1 root mail 916 Apr 10 04:46 qfj3A6ebWh030427 -rw------- 1 root mail 916 Apr 10 09:43 qfj3ABWdWh030461 -rw------- 1 root mail 996 Apr 10 11:40 qfj3ADduWh027873 -rw------- 1 root mail 1008 Apr 10 16:23 qfj3AILcWh007512 -rw------- 1 root mail 950 Apr 10 23:05 qfj3B0vZWo005462 -rw------- 1 root mail 1007 Apr 11 00:19 qfj3B4JMWg020843 -rw------- 1 root mail 920 Apr 11 03:50 qfj3B5n2Wh013589 -rw------- 1 root mail 950 Apr 11 10:14 qfj3BCDgWh028342 hound2:/var/spool/mqueue.in # ls -1|wc -l 77 hound2:/var/spool/mqueue.in # ... hound2:/var/spool/MailScanner/incoming # ls * 14192: . .. 14219: . .. 14220: . .. 14221: . .. 14224: . .. 14227: . .. 14231: . .. 14232: . .. 14235: . .. 14236: . .. hound2:/var/spool/MailScanner/incoming # cd ../quarantine/ hound2:/var/spool/MailScanner/quarantine # ls . .. Danny Béland ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ ( http://www.mailscanner.biz/maq/ ) and the archives ( http://www.jiscmail.ac.uk/lists/mailscanner.html ). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USHERBROOKE.CA Mon Apr 11 21:23:31 2005 From: Denis.Beauchemin at USHERBROOKE.CA (Denis Beauchemin) Date: Thu Jan 12 21:29:18 2006 Subject: Emails are getting stuck in the mqueue.in directory Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Danny Beland wrote: > I'm running Linux with sendmail v8.12.10, MailScanner v4.40.11, ClamAV > and McAfee command line scanner. The problem we have is that emails > get stuck in the mqueue.in folder. When there is new messages, we can > see that there is some getting stuck . In the log below we can see > that it only gets 4 messages out but there is still 34 left, but after > it is done scanning, it doesn't go to grab the 34 messages left. The > content of the mqueue.in folder is listed after the mailscanner log. I > was using flock as the lock type before, but the same problem occurs. > There is also nothing in the incoming folders. I am not sure if it is > a setting that is causing this or it is a bug. Thanks!! > > ... > hound2:/var/spool/mqueue.in # date > Mon Apr 11 11:09:24 EDT 2005 > hound2:/var/spool/mqueue.in # ls -la > total 8847 > drwx------ 3 root root 2448 Apr 11 11:04 . > drwxr-xr-x 14 root root 392 Mar 7 07:08 .. > drwx------ 2 root root 48 Apr 1 11:37 .hoststat > -rw------- 1 root mail 0 Mar 23 11:18 dfj2NEI6xL013577 > -rw------- 1 root mail 28672 Mar 23 10:00 dfj2NEiZxL000663 > -rw------- 1 root mail 49152 Mar 23 10:30 dfj2NFNDxL027390 > -rw------- 1 root mail 8192 Mar 23 10:27 dfj2NFNRxL027535 > -rw------- 1 root mail 933888 Mar 23 11:27 dfj2NGR3xL009916 > -rw------- 1 root mail 45056 Mar 23 11:38 dfj2NGZbhN013223 > -rw------- 1 root mail 36864 Mar 23 11:52 dfj2NGiFhN018441 > -rw------- 1 root mail 16384 Mar 23 11:54 dfj2NGnNhN021755 > -rw------- 1 root mail 12288 Mar 23 12:19 dfj2NHG4hN005200 > -rw------- 1 root mail 36864 Mar 23 12:33 dfj2NHRChN011805 > -rw------- 1 root mail 32768 Mar 23 12:34 dfj2NHTAhN012967 > -rw------- 1 root mail 12288 Mar 23 12:37 dfj2NHY3hN016085 > -rw------- 1 root mail 20480 Mar 23 12:45 dfj2NHiPhN022029 > -rw------- 1 root mail 28672 Mar 23 12:55 dfj2NHpkhN026568 > -rw------- 1 root mail 49152 Mar 23 13:10 dfj2NHsnhN028287 > -rw------- 1 root mail 1294336 Mar 23 13:11 dfj2NHv6hN029541 > -rw------- 1 root mail 2375680 Mar 23 13:11 dfj2NHv6hN029542 > -rw------- 1 root mail 24576 Mar 23 13:10 dfj2NI1vhN032534 > -rw------- 1 root mail 368640 Mar 23 13:47 dfj2NIlL9h026163 > -rw------- 1 root mail 8192 Mar 24 10:55 dfj2OFsFmq028118 > -rw------- 1 root mail 16384 Mar 24 10:55 dfj2OFslmq028381 > -rw------- 1 root mail 28672 Mar 24 10:56 dfj2OFtpmq028984 > -rw------- 1 root mail 139264 Mar 24 10:56 dfj2OFummq029645 > -rw------- 1 root mail 541 Apr 1 11:35 dfj31EZ1q7006497 > -rw------- 1 root mail 16384 Apr 1 10:19 dfj31FIwq7010985 > -rw------- 1 root mail 20480 Apr 1 10:24 dfj31FM9q7013458 > -rw------- 1 root mail 16384 Apr 1 11:44 dfj31Gikq7017302 > -rw------- 1 root mail 872 Apr 4 10:08 dfj34C8nOj011677 > -rw------- 1 root mail 61440 Apr 4 08:53 dfj34ClhOj026253 > -rw------- 1 root mail 16384 Apr 4 09:08 dfj34D6YOj020610 > -rw------- 1 root mail 155648 Apr 4 09:53 dfj34DaiOj000798 > -rw------- 1 root mail 421888 Apr 4 09:44 dfj34Dd0Oj004396 > -rw------- 1 root mail 368640 Apr 4 10:05 dfj34E2pOj009876 > -rw------- 1 root mail 708608 Apr 4 10:14 dfj34E8UOj017604 > -rw------- 1 root mail 28672 Apr 11 09:12 dfj3BDAsWg029242 > -rw------- 1 root mail 32768 Apr 11 09:26 dfj3BDJiWg003720 > -rw------- 1 root mail 49152 Apr 11 09:33 dfj3BDVOWh011659 > -rw------- 1 root mail 61440 Apr 11 09:33 dfj3BDVPWh011695 > -rw------- 1 root mail 8192 Apr 11 09:33 dfj3BDVWWh011768 > -rw------- 1 root mail 20480 Apr 11 09:34 dfj3BDVXWh011771 > -rw------- 1 root mail 32768 Apr 11 09:43 dfj3BDduWg017597 > -rw------- 1 root mail 32768 Apr 11 09:48 dfj3BDjOWg021883 > -rw------- 1 root mail 831488 Apr 11 10:41 dfj3BEdFWg027932 > -rw------- 1 root mail 638976 Apr 11 10:52 dfj3BElWWg001619 > -rw------- 1 root mail 923 Apr 5 00:56 qfj352riWh022594 > -rw------- 1 root mail 967 Apr 5 09:28 qfj35BSMWh013958 > -rw------- 1 root mail 925 Apr 5 14:18 qfj35GHhWh004468 > -rw------- 1 root mail 949 Apr 5 16:05 qfj35I5kWh013983 > -rw------- 1 root mail 977 Apr 5 16:09 qfj35I60Wh014078 > -rw------- 1 root mail 940 Apr 5 19:08 qfj35L7sWh004843 > -rw------- 1 root mail 953 Apr 6 01:40 qfj363aaWh008242 > -rw------- 1 root mail 1711 Apr 6 00:20 qfj364J3Wo022047 > -rw------- 1 root mail 1001 Apr 6 04:52 qfj366q0Wh003389 > -rw------- 1 root mail 1046 Apr 6 23:23 qfj371NVWh010276 > -rw------- 1 root mail 961 Apr 7 00:54 qfj372qWWh006615 > -rw------- 1 root mail 928 Apr 7 02:15 qfj374CoWi031202 > -rw------- 1 root mail 971 Apr 7 17:01 qfj37IwpWh004066 > -rw------- 1 root mail 924 Apr 8 03:00 qfj38404Wh003283 > -rw------- 1 root mail 924 Apr 8 03:35 qfj384YMWh013402 > -rw------- 1 root mail 925 Apr 8 04:05 qfj3863tWh006263 > -rw------- 1 root mail 916 Apr 8 10:20 qfj38CHnWh000714 > -rw------- 1 root mail 965 Apr 8 15:57 qfj38HsLWh004420 > -rw------- 1 root mail 915 Apr 8 20:13 qfj38MC0Wh007466 > -rw------- 1 root mail 944 Apr 8 23:42 qfj391dvWh009561 > -rw------- 1 root mail 915 Apr 9 01:07 qfj39260Wh016687 > -rw------- 1 root mail 914 Apr 9 21:58 qfj39MvdWh023748 > -rw------- 1 root mail 916 Apr 10 04:46 qfj3A6ebWh030427 > -rw------- 1 root mail 916 Apr 10 09:43 qfj3ABWdWh030461 > -rw------- 1 root mail 996 Apr 10 11:40 qfj3ADduWh027873 > -rw------- 1 root mail 1008 Apr 10 16:23 qfj3AILcWh007512 > -rw------- 1 root mail 950 Apr 10 23:05 qfj3B0vZWo005462 > -rw------- 1 root mail 1007 Apr 11 00:19 qfj3B4JMWg020843 > -rw------- 1 root mail 920 Apr 11 03:50 qfj3B5n2Wh013589 > -rw------- 1 root mail 950 Apr 11 10:14 qfj3BCDgWh028342 > hound2:/var/spool/mqueue.in # ls -1|wc -l > 77 Danny, All those files are leftovers (probably from MS restarts). They have been processed but were partially left behind because of the restarts. You can see they are not complete emails because you don't have q* and d* files for the same email. I've ran your listing through "cat -|awk '{print substr($NF,2)}'|sort|uniq -c" and all filenames were unique (count=1). I use the following command when I want to clean up those files: cd /var/spool/mqueue.in; rm -f $(ls -l|grep -v "$(date '+%b %e')"|awk '$1 ~ /^-/{print $NF}') It removes all files that don't have the current date. Denis -- _ °v° Denis Beauchemin, analyste /(_)\ Université de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x2252 F: 819.821.8045 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! [ Part 2, "S/MIME Cryptographic Signature" ] [ Application/X-PKCS7-SIGNATURE 4.4KB. ] [ Unable to print this part. ] From diego.fabara at ALEGROPCS.COM Mon Apr 11 23:25:09 2005 From: diego.fabara at ALEGROPCS.COM (Diego Fabara) Date: Thu Jan 12 21:29:18 2006 Subject: No subject Message-ID: I’ve a Server AntiSpam in MailRelay format. (mailertable to redirect emails for my domain) But, I need autoresponse a lot of mails arrived to user1@mydomain.com with a message like “Thanks for your email. We will contact to you !” Without this email arrived to my internal Email Server. In what file I need a rule ?? ________________________________________________________________________________ INFORMACION CONFIDENCIAL: SE PROHIBE LA DIFUSION O PUBLICACION DE ESTA INFORMACION A TERCEROS SIN LA AUTORIZACION EXPRESA Y POR ESCRITO DE TELECSA. ESTA INFORMACION DEBE SER GUARDADA CON SEGURIDADES CUANDO NO SE LA ESTE UTILIZANDO. SI USTED NO ES EL DESTINATARIO DE ESTE EMAIL, USTED DEBERA DEVOLVERLO AL EMISOR Y NO PODRA LEER, COPIAR O DISTRIBUIR SUS ANEXOS. CUALQUIER OPINION EXPRESADA EN ESTE MENSAJE, CORRESPONDE A SU AUTOR Y NO NECESARIAMENTE A TELECSA - ALEGRO PCS. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mikes at HARTWELLCORP.COM Tue Apr 12 00:24:35 2005 From: mikes at HARTWELLCORP.COM (Michael St. Laurent) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: Hello, I'm having trouble with (a very, very few) truncated emails. Currently we're using 4.40.11 but noticed this same problem with the previous stable release as well. Is there a known issue with this or am I reporting something new? -- Michael St. Laurent Hartwell Corporation ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Tue Apr 12 06:19:37 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:18 2006 Subject: Cannot allocate memory Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Martins Smilga wrote: > Hello, > >> What is your "Restart Every" setting? > > Restart Every = 14400 > >> How much RAM do you have? > > 776856k > >> What did you set "Max Children" to be? > > Max Children = 5 > >> What else is the machine running apart from MailScanner? > > Exim and Mailscanner-mrtg > > Thanks in advance. > > Best Regards, > Martins First check 'free -m' (linux specific) to check if your system is swapping.. Next you might want to try using valgrind (http://valgrind.org/, again linux x86 specific) to find memory leaks (if any). When last used i found a couple of memory leaks with the perl core libraries (libperl.so v5.8.4, centos 3.3), quite minor though.. and the MailScanner 'Restart Every' seems to do the trick of resolving these leaks. valgrind --tool=memcheck --trace-children=yes --leak-check=yes /path/to/check_mailscanner - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Tue Apr 12 08:59:20 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Let's start by asking what MTA you are running? And what does "MailScanner -v" produce? Michael St. Laurent wrote: >Hello, > >I'm having trouble with (a very, very few) truncated emails. Currently >we're using 4.40.11 but noticed this same problem with the previous stable >release as well. > >Is there a known issue with this or am I reporting something new? > >-- >Michael St. Laurent >Hartwell Corporation > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mikes at HARTWELLCORP.COM Tue Apr 12 18:58:34 2005 From: mikes at HARTWELLCORP.COM (Michael St. Laurent) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: Hi Julian! Thanks for the reply. ;-D The MTA is sendmail. [root@guardian root]# MailScanner -v Running on Linux guardian.hartwellcorp.com 2.4.20-31.9 #1 Tue Apr 13 18:04:23 EDT 2004 i686 i686 i386 GNU/Linux This is Red Hat Linux release 9 (Shrike) This is Perl version 5.008000 (5.8.0) This is MailScanner version 4.40.11 Module versions are: 1.00 AnyDBM_File 1.09 Archive::Zip 1.01 Carp 1.119 Convert::BinHex 1.00 DirHandle 1.04 Fcntl 2.71 File::Basename 2.05 File::Copy 2.01 FileHandle 1.05 File::Path 1.29 HTML::Entities 3.45 HTML::Parser 2.30 HTML::TokeParser 1.20 IO 1.09 IO::File 1.122 IO::Pipe 1.58 Mail::Header 3.05 MIME::Base64 5.417 MIME::Decoder 5.417 MIME::Decoder::UU 5.417 MIME::Head 5.417 MIME::Parser 3.03 MIME::QuotedPrint 5.417 MIME::Tools 0.10 Net::CIDR 1.05 POSIX 1.75 Socket 0.03 Sys::Syslog 1.02 Time::localtime Optional module versions are: 1.808 DB_File 1.05 Digest 1.01 Digest::HMAC 2.33 Digest::MD5 2.01 Digest::SHA1 0.44 Inline 0.13 Mail::ClamAV 2.63 Mail::SpamAssassin missing Mail::SPF::Query missing Net::CIDR::Lite 0.31 Net::DNS missing Net::LDAP 1.94 Parse::RecDescent missing SAVI missing Sys::Hostname::Long 2.26 Test::Harness 0.47 Test::Simple 1.89 Text::Balanced 1.35 URI Julian Field <> wrote: > Let's start by asking what MTA you are running? And what does > "MailScanner -v" produce? > > Michael St. Laurent wrote: > >> Hello, >> >> I'm having trouble with (a very, very few) truncated emails. >> Currently we're using 4.40.11 but noticed this same problem with the >> previous stable release as well. >> >> Is there a known issue with this or am I reporting something new? -- Michael St. Laurent Hartwell Corporation ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Tue Apr 12 19:09:56 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] In which case my bet is that you are using sendmail 8.13, in which case you need to set "Lock Type = posix" in MailScanner.conf. Michael St. Laurent wrote: >Hi Julian! Thanks for the reply. ;-D > >The MTA is sendmail. > >[root@guardian root]# MailScanner -v >Running on >Linux guardian.hartwellcorp.com 2.4.20-31.9 #1 Tue Apr 13 18:04:23 EDT 2004 >i686 > i686 i386 GNU/Linux >This is Red Hat Linux release 9 (Shrike) >This is Perl version 5.008000 (5.8.0) > >This is MailScanner version 4.40.11 >Module versions are: >1.00 AnyDBM_File >1.09 Archive::Zip >1.01 Carp >1.119 Convert::BinHex >1.00 DirHandle >1.04 Fcntl >2.71 File::Basename >2.05 File::Copy >2.01 FileHandle >1.05 File::Path >1.29 HTML::Entities >3.45 HTML::Parser >2.30 HTML::TokeParser >1.20 IO >1.09 IO::File >1.122 IO::Pipe >1.58 Mail::Header >3.05 MIME::Base64 >5.417 MIME::Decoder >5.417 MIME::Decoder::UU >5.417 MIME::Head >5.417 MIME::Parser >3.03 MIME::QuotedPrint >5.417 MIME::Tools >0.10 Net::CIDR >1.05 POSIX >1.75 Socket >0.03 Sys::Syslog >1.02 Time::localtime > >Optional module versions are: >1.808 DB_File >1.05 Digest >1.01 Digest::HMAC >2.33 Digest::MD5 >2.01 Digest::SHA1 >0.44 Inline >0.13 Mail::ClamAV >2.63 Mail::SpamAssassin >missing Mail::SPF::Query >missing Net::CIDR::Lite >0.31 Net::DNS >missing Net::LDAP >1.94 Parse::RecDescent >missing SAVI >missing Sys::Hostname::Long >2.26 Test::Harness >0.47 Test::Simple >1.89 Text::Balanced >1.35 URI > >Julian Field <> wrote: > > >>Let's start by asking what MTA you are running? And what does >>"MailScanner -v" produce? >> >>Michael St. Laurent wrote: >> >> >> >>>Hello, >>> >>>I'm having trouble with (a very, very few) truncated emails. >>>Currently we're using 4.40.11 but noticed this same problem with the >>>previous stable release as well. >>> >>>Is there a known issue with this or am I reporting something new? >>> >>> > >-- >Michael St. Laurent >Hartwell Corporation > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mikes at HARTWELLCORP.COM Tue Apr 12 20:53:36 2005 From: mikes at HARTWELLCORP.COM (Michael St. Laurent) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [root@guardian Bastille]# rpm -q sendmail sendmail-8.12.8-9.90 [root@guardian Bastille]# Same thing? Julian Field <> wrote: > In which case my bet is that you are using sendmail 8.13, in which > case you need to set "Lock Type = posix" in MailScanner.conf. > > Michael St. Laurent wrote: > >> Hi Julian! Thanks for the reply. ;-D >> >> The MTA is sendmail. -- Michael St. Laurent Hartwell Corporation ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Tue Apr 12 21:00:20 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] No usually, no. But give it a try anyway. It could depend on which Linux distro you are using and where your sendmail rpm came from. Michael St. Laurent wrote: >[root@guardian Bastille]# rpm -q sendmail >sendmail-8.12.8-9.90 >[root@guardian Bastille]# > >Same thing? > >Julian Field <> wrote: > > >>In which case my bet is that you are using sendmail 8.13, in which >>case you need to set "Lock Type = posix" in MailScanner.conf. >> >>Michael St. Laurent wrote: >> >> >> >>>Hi Julian! Thanks for the reply. ;-D >>> >>>The MTA is sendmail. >>> >>> > > >-- >Michael St. Laurent >Hartwell Corporation > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From satya at BAINSDIGITAL.COM Tue Apr 12 21:18:13 2005 From: satya at BAINSDIGITAL.COM (SatyaDev) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello, I am using MailScanner with postfix-2.0.18 with single instance, storing quarantine as Queue files => Quarantine Whole Messages As Queue Files = yes But when I try to release files from queue by postdrop, it gives error... --------- #/usr/sbin/postdrop < 436A07F4B8 queue_id49F8B7F70Dpostdrop: fatal: uid=0: unexpected record type: 67 -------- I checked sendmail and posfix versions also, both are right and belong to same build. I also tried with postfix version 2.0.16, but got same status. Can any one help me ? -Satya www.bainsdigital.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Tue Apr 12 21:28:47 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] SatyaDev wrote: Hello, I am using MailScanner with postfix-2.0.18 with single instance, storing quarantine as Queue files => Quarantine Whole Messages As Queue Files = yes But when I try to release files from queue by postdrop, it gives error... --------- #/usr/sbin/postdrop < 436A07F4B8 queue_id49F8B7F70Dpostdrop: fatal: uid=0: unexpected record type: 67 -------- I checked sendmail and posfix versions also, both are right and belong to same build. I also tried with postfix version 2.0.16, but got same status. Can any one help me ? -Satya www.bainsdigital.com Try this from Joshua Hirsh last year: When I release a file into quarantine, I copy it directly into the incoming folder for the sending process of Postfix (make sure it's executable). So for example: [root B710F4D00F4]# chmod +x B710F4D00F4 [root B710F4D00F4]# cp -p B710F4D00F4 /var/spool/postfix/incoming/B/ Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TristanRhodes at WEBER.EDU Tue Apr 12 23:44:09 2005 From: TristanRhodes at WEBER.EDU (Tristan RHODES) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: I have gotten Mailscanner to work on Ubuntu, but I am getting an error message. root@ubuntu:/home/tristan # tail /var/log/mail.log Apr 12 08:13:40 localhost MailScanner[25367]: Messages found but no hashed queue directories. Please enable hashed queues for incoming and deferred with a depth of 1 or 2. See the Postfix documentation for hash_queue_names and hash_queue_depth Also this error when I restart postfix. root@ubuntu:/home/tristan # /etc/init.d/postfix restart * Stopping Postfix Mail Transport Agent... [ ok ] * Starting Postfix Mail Transport Agent... postsuper: warning: bogus file name: hold/razor-agent.log [ ok ] root@ubuntu:/home/tristan # Does "/etc/init.d/mailscanner restart" also restart Postfix? Should I use that instead? Thanks, Tristan Rhodes Weber State University ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Wed Apr 13 01:12:54 2005 From: pete at ENITECH.COM.AU (Peter Russell) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] You need to install razor properly. Its a buggar. But temporarily make your postfix account so you can log in with it, switch to it and then create razor, then change the conf file to log to dev/null I am sure there is an easier way but i dont know it :) Tristan RHODES wrote: > I have gotten Mailscanner to work on Ubuntu, but I am getting an error > message. > > root@ubuntu:/home/tristan # tail /var/log/mail.log > > Apr 12 08:13:40 localhost MailScanner[25367]: Messages found but no > hashed queue directories. Please enable hashed queues for incoming and > deferred with a depth of 1 or 2. See the Postfix documentation for > hash_queue_names and hash_queue_depth > > Also this error when I restart postfix. > > root@ubuntu:/home/tristan # /etc/init.d/postfix restart > * Stopping Postfix Mail Transport Agent... [ ok ] > * Starting Postfix Mail Transport Agent... > postsuper: warning: bogus file name: hold/razor-agent.log [ ok ] > root@ubuntu:/home/tristan # > > Does "/etc/init.d/mailscanner restart" also restart Postfix? Should I > use that instead? > > Thanks, > > Tristan Rhodes > Weber State University > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Wed Apr 13 07:29:07 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Peter Russell wrote: > You need to install razor properly. Its a buggar. > > But temporarily make your postfix account so you can log in with it, > switch to it and then create razor, then change the conf file to log to > dev/null > > I am sure there is an easier way but i dont know it :) In spam.assassin.prefs.conf just add razor_config /var/spool/MailScanner/spamassassin and that will set razor to log to .razor in that directory (Or indeed where ever you wish it to set it's home directory to). It's only because MS runs as the user postfix, who happens to have it's home directory as /var/spool/postfix so drops it's log file in the queue directory, which Postfix doesn't like. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From danielk at AVALONPUB.COM Wed Apr 13 07:47:42 2005 From: danielk at AVALONPUB.COM (Daniel Kleinsinger) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Do the truncated emails have an html part with few/no tags and a fully intact plain text part? If so, there's been an issue like this reported before, possibly having to do with the phishing net. Daniel Michael St. Laurent wrote: >Hello, > >I'm having trouble with (a very, very few) truncated emails. Currently >we're using 4.40.11 but noticed this same problem with the previous stable >release as well. > >Is there a known issue with this or am I reporting something new? > >-- >Michael St. Laurent >Hartwell Corporation > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From lhaig at HAIGMAIL.COM Wed Apr 13 08:30:55 2005 From: lhaig at HAIGMAIL.COM (Lance Haig) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I have built a SUSE 9.2 system and want to start installing MailScanner. What is the recommended order? I want to start with MailScanner and test to see if it works Then add SpamAssassin and test Then DCC Rayzor Pyzor. Would you agree with this? Lance ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Wed Apr 13 08:42:02 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: Lance Spamassassin first along with DCC etc. then MailScanner once everything else is OK. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Lance Haig wrote: > I have built a SUSE 9.2 system and want to start installing MailScanner. > > What is the recommended order? > > I want to start with MailScanner and test to see if it works > Then add SpamAssassin and test > Then DCC > Rayzor > Pyzor. > > Would you agree with this? > > Lance > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Wed Apr 13 08:45:52 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Yeah, make sure everything is running before installing MS. Including bitdefender and clam, Dcc etc, MTA. Pete Martin Hepworth wrote: > Lance > > Spamassassin first along with DCC etc. > > then MailScanner once everything else is OK. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > Lance Haig wrote: > >> I have built a SUSE 9.2 system and want to start installing MailScanner. >> >> What is the recommended order? >> >> I want to start with MailScanner and test to see if it works >> Then add SpamAssassin and test >> Then DCC >> Rayzor >> Pyzor. >> >> Would you agree with this? >> >> Lance >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! > > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 10:14:11 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Everyone else has taken the others, I'll take the first problem. Tristan RHODES wrote: >I have gotten Mailscanner to work on Ubuntu, but I am getting an error >message. > >root@ubuntu:/home/tristan # tail /var/log/mail.log > >Apr 12 08:13:40 localhost MailScanner[25367]: Messages found but no >hashed queue directories. Please enable hashed queues for incoming and >deferred with a depth of 1 or 2. See the Postfix documentation for >hash_queue_names and hash_queue_depth > >Also this error when I restart postfix. > > Upgrade to MailScanner-4.40. This has Postfix 2.2(?) support. >root@ubuntu:/home/tristan # /etc/init.d/postfix restart > * Stopping Postfix Mail Transport Agent... [ ok ] > * Starting Postfix Mail Transport Agent... >postsuper: warning: bogus file name: hold/razor-agent.log [ ok ] >root@ubuntu:/home/tristan # > >Does "/etc/init.d/mailscanner restart" also restart Postfix? Should I >use that instead? > > Yes it does, and yes you should. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Wed Apr 13 11:44:25 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field said: > Everyone else has taken the others, I'll take the first problem. > > Tristan RHODES wrote: > >>I have gotten Mailscanner to work on Ubuntu, but I am getting an error >>message. >> >>root@ubuntu:/home/tristan # tail /var/log/mail.log >> >>Apr 12 08:13:40 localhost MailScanner[25367]: Messages found but no >>hashed queue directories. Please enable hashed queues for incoming and >>deferred with a depth of 1 or 2. See the Postfix documentation for >>hash_queue_names and hash_queue_depth >> >>Also this error when I restart postfix. >> >> > Upgrade to MailScanner-4.40. This has Postfix 2.2(?) support. Except I think this is Razor logging related not Postfix 2.2.x related from this line >>postsuper: warning: bogus file name: hold/razor-agent.log [ ok ] which I have seen upset MS when it's looked for hashed queues (However that's not an excuse for not upgrading :-) ). Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rabie at CT.DDSECURITY.CO.ZA Wed Apr 13 13:16:26 2005 From: rabie at CT.DDSECURITY.CO.ZA (Rabie van der Merwe) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: I had the same issue, for whatever reason postdrop just doesn't seem to work, either look at using something like MailWatch (nice frontend) or use sendmail (I went for both :) ) Regards Rabie -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of SatyaDev Sent: 12 April 2005 22:18 PM To: MAILSCANNER@JISCMAIL.AC.UK Subject: postfix question ! Hello, I am using MailScanner with postfix-2.0.18 with single instance, storing quarantine as Queue files => Quarantine Whole Messages As Queue Files = yes But when I try to release files from queue by postdrop, it gives error... --------- #/usr/sbin/postdrop < 436A07F4B8 queue_id49F8B7F70Dpostdrop: fatal: uid=0: unexpected record type: 67 -------- I checked sendmail and posfix versions also, both are right and belong to same build. I also tried with postfix version 2.0.16, but got same status. Can any one help me ? -Satya www.bainsdigital.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From joshua.hirsh at PARTNERSOLUTIONS.CA Wed Apr 13 13:57:12 2005 From: joshua.hirsh at PARTNERSOLUTIONS.CA (Hirsh, Joshua) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] You guys are both overlooking one important fact. The files are raw queue files. Postdrop isn't meant to work with raw queue files. To release the messages, you have to make them executable (and owned by the postfix user) and copy them into the outgoing postfix queue. In both of these examples, I use the split postfix queue structure, so my "/var/spool/postfix/incoming/" is the outgoing queue. You'll have to adjust as necessary to use the right queue directory. Example 1: [root@pslinmf01 1E2711377DC]# pwd /var/spool/MailScanner/quarantine/20050413/1E2711377DC [root@pslinmf01 1E2711377DC]# ls -lra total 5640 -rw-r----- 1 postfix root 2425165 Apr 13 07:33 GetOutofMyCar.wmv -rw-r----- 1 postfix root 3326421 Apr 13 07:33 1E2711377DC drwxr-x--- 7 postfix root 4096 Apr 13 08:38 .. drwxr-x--- 2 postfix root 4096 Apr 13 07:33 . [root@pslinmf01 1E2711377DC]# chmod +x 1E2711377DC [root@pslinmf01 1E2711377DC]# cp -p 1E2711377DC /var/spool/postfix/incoming/1/ Example 2: [root@pslinmf01 6CB9C1377DB]# pwd /var/spool/MailScanner/quarantine/20050413/6CB9C1377DB [root@pslinmf01 6CB9C1377DB]# ls -lra total 3292 -rw-r----- 1 postfix root 1413222 Apr 13 07:28 Short and Curly_1.wmv -rw-r----- 1 postfix root 1936897 Apr 13 07:28 6CB9C1377DB drwxr-x--- 7 postfix root 4096 Apr 13 08:38 .. drwxr-x--- 2 postfix root 4096 Apr 13 07:28 . [root@pslinmf01 6CB9C1377DB]# chmod +x 6CB9C1377DB [root@pslinmf01 6CB9C1377DB]# cp -p 6CB9C1377DB /var/spool/postfix/incoming/6/ Regards, -Joshua ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From joshua.hirsh at PARTNERSOLUTIONS.CA Wed Apr 13 13:59:11 2005 From: joshua.hirsh at PARTNERSOLUTIONS.CA (Hirsh, Joshua) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > Try this from Joshua Hirsh last year: > > When I release a file into quarantine, I copy it directly into the incoming folder for the sending process of Postfix (make > sure it's executable). > So for example: > > [root B710F4D00F4]# chmod +x B710F4D00F4 > [root B710F4D00F4]# cp -p B710F4D00F4 /var/spool/postfix/incoming/B/ > Drew heh. I missed this post before I replied... How fitting that it's my own quote! ;-) -Joshua ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From stef at L5NET.NET Wed Apr 13 14:16:51 2005 From: stef at L5NET.NET (Stef Morrell) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: This is a popular question. I've added a procedure onto the faq-o-matic. Stef > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of SatyaDev > Sent: 12 April 2005 21:18 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: postfix question ! > > Hello, > > I am using MailScanner with postfix-2.0.18 with single > instance, storing quarantine as Queue files => Quarantine > Whole Messages As Queue Files = yes But when I try to release > files from queue by postdrop, it gives error... > --------- > #/usr/sbin/postdrop < 436A07F4B8 > queue_id49F8B7F70Dpostdrop: fatal: uid=0: unexpected record type: 67 > -------- > I checked sendmail and posfix versions also, both are right > and belong to same build. > I also tried with postfix version 2.0.16, but got same status. > > Can any one help me ? > > -Satya > www.bainsdigital.com > > ------------------------ MailScanner list > ------------------------ To unsubscribe, email > jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ > (http://www.mailscanner.biz/maq/) and the archives > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > -- > This email has been scanned by the Level 5 Internet > MailCrusader for viruses, spam and dangerous content. > For more information please visit http://www.l5net.net > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mkettler at EVI-INC.COM Wed Apr 13 14:54:18 2005 From: mkettler at EVI-INC.COM (Matt Kettler) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Martin Hepworth wrote: > Lance > > Spamassassin first along with DCC etc. > > then MailScanner once everything else is OK. Personally, I'd favor installing MailScanner first, and get it up and running the mail queue with no virus or spam scanning. However, I would suggest testing spamassassin with DCC, pyzor, etc. before enabling "Use SpamAssassin" in mailscanner.conf. Really, I suppose you could do the install order whatever way you want, whether you install SA first, or last is probably not very important. What is important is testing your tools with their command-line interfaces before you tell MS to start using them and get a whole pile of mail mismarked as spam because the SA configuration is confused, etc.. Same concept goes for adding virus scanners. Test them with the CLI before telling MS to use them. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Wed Apr 13 15:07:20 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Stef Morrell > Sent: den 13 april 2005 15:17 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: postfix question ! > > > This is a popular question. I've added a procedure onto the > faq-o-matic. Consider putting it in the dokuwiki too (since the faq-o-matic is to be replaced by that). I'd do it, but I don't have time (today ... might have tomorrow). -- Glenn > > Stef > > > -----Original Message----- > > From: MailScanner mailing list > > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of SatyaDev > > Sent: 12 April 2005 21:18 > > To: MAILSCANNER@JISCMAIL.AC.UK > > Subject: postfix question ! > > > > Hello, > > > > I am using MailScanner with postfix-2.0.18 with single > > instance, storing quarantine as Queue files => Quarantine > > Whole Messages As Queue Files = yes But when I try to release > > files from queue by postdrop, it gives error... > > --------- > > #/usr/sbin/postdrop < 436A07F4B8 > > queue_id49F8B7F70Dpostdrop: fatal: uid=0: unexpected record type: 67 > > -------- > > I checked sendmail and posfix versions also, both are right > > and belong to same build. > > I also tried with postfix version 2.0.16, but got same status. > > > > Can any one help me ? > > > > -Satya > > www.bainsdigital.com > > > > ------------------------ MailScanner list > > ------------------------ To unsubscribe, email > > jiscmail@jiscmail.ac.uk with the words: > > 'leave mailscanner' in the body of the email. > > Before posting, read the MAQ > > (http://www.mailscanner.biz/maq/) and the archives > > (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > > > Support MailScanner development - buy the book off the website! > > > > -- > > This email has been scanned by the Level 5 Internet > > MailCrusader for viruses, spam and dangerous content. > > For more information please visit http://www.l5net.net > > > > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jhiggins at KENNESAW.EDU Wed Apr 13 15:24:43 2005 From: jhiggins at KENNESAW.EDU (Jonathan Higgins) Date: Thu Jan 12 21:29:18 2006 Subject: adding renattach to MailScanner+Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I need to implement renaming extensions instead of just modifying the subject, or blocking certain extensions(filenames) or filetypes. software build: RHEL AS 3.0 postfix-2.0.16-14.RHEL3 MailScanner 4.39.5 spamassassin-3.0.2-1 clamav-0.83-1.1.el3.rf renattach-1.2.2 First thing I did was disable filename and filetype checking in MailScanner.conf by adding a "#" infront of the rules. #Filename Rules = %etc-dir%/filename.rules.conf #Filetype Rules = %etc-dir%/filetype.rules.conf Second thing, I installed renattach using the instructions for Postfix Integration at http://www.pc-tools.net/unix/renattach/INSTALL which, in short tells you to modify the master.cf postfix config file. add: filter unix - n n - - pipe flags=q user=filter argv=renattach -p sendmail -i -f ${sender} -- ${recipient} modify: smtp inet n - n - - smtpd -o content_filter=filter This works for the most part, but here is where the problem starts to creep up. The postfix+MailScanner instructions at http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml tell me to add header_checks = regexp:/etc/postfix/header_checks to /etc/postfix/main.cf and create the file /etc/postfix/header_checks with the following contents: /^Received:/ HOLD Here is the problem: When I send an email: 1. Postfix puts the email into HOLD. 2. MailScanner picks it up and does its thing. 3. The content filter sends the email to renattach 4. Renattach finishes with the email and reinjects it 5. Reinjected email goes into HOLD. 6. MailScanner picks it up and does its thing. 7. Message is delivered. Ok, if you don't see it, The email message is processed through MailScanner 2x. I took a look at http://www.postfix.org/FILTER_README.html#simple_filter which shows how email moves around between all the processes that make up postfix. There is a nice pretty picture that shows the content filter after the qmgr. I guess that's why they call it "After-Queue Content Filter" The point being that after the queue, and after the content filter, the email is reinjected using pickup and then eventually passed to cleanup, which does another "header_check" and stuffs the email into the HOLD queue again. Some things I tried to fix this. First fix attempt: I tried to tell postfix to knock it off by modifying the master.cf as follows: smtp inet n - n - - smtpd -o content_filter=filter -o receive_override_options=no_header_body_checks This didn't solve the problem, and to be honest, im not sure if its effecting anything. I did some more research under the advanced filter options for postfix, with no help there. Second fix attempt: I had the thought that I could just modify the generic virus scanner and fit renattach into MailScanner. After creating a renattach-wrapper, modifying MailScanner.conf, and SweepViruses.pm, I started running into weird errors, including the debug message "can't find EOCD signature". I had chopped up a few too many files, because after I cleaned out what I thought I had just done, it was still fairly broken. Im sure that was my fault, so I cleaned everything out and rebuilt my MailScanner install fresh, and got back to square one. Ok, so what Im looking for is a solution to this problem. It would be beneficial to have the solution be part of MailScanner. Im not married to renattach, but it was one of the first programs out there that does what I need. Thanks Jonathan Higgins IT R&D Project Manager Kennesaw State University jhiggins@kennesaw.edu ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Wed Apr 13 15:53:18 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Steen, Glenn said: >> This is a popular question. I've added a procedure onto the >> faq-o-matic. > Consider putting it in the dokuwiki too (since the faq-o-matic is > to be replaced by that). I'd do it, but I don't have time (today ... > might have tomorrow). I'll see if I can drop it in a bit later. Looks like a nice sub-section on one of my pages anyway (That I should have included...) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From KGoods at AIAINSURANCE.COM Wed Apr 13 15:57:28 2005 From: KGoods at AIAINSURANCE.COM (Ken Goods) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Greets all, I downloaded and installed the latest versions of MailScanner and install-ClamAV-SA as I've done in the past and used the install scripts as usual (thanks Julian!). I didn't notice any major errors in the output. After all was done MailScanner -V reports the correct MailScanner version but for some reason only reports V3.00000 for spamassassin. Also I notice that clamAV is not used. I re-ran the ClamAV-SA install (INSTALL-tar.sh) and it reports at the end, Oh good Spamassassin V3.02 is already installed. However when I run spamassassin -D --lint it also shows version 3.0.0 and produces no errors. which clamav returns: /usr/bin/which: no clamav in (/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin :/root/bin) Seems like the install put SA and ClamAV in different paths than last time. I'm a novice at *nix and would appreciate any clues as to how I can make things right. I don't mind removing all traces of everything and reinstalling if that would be the easiest route but I haven't got a clue how to start. Running RH 9.0 TIA Ken Goods Network Administrator AIA Insurance, Inc. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ugob at CAMO-ROUTE.COM Wed Apr 13 15:46:47 2005 From: ugob at CAMO-ROUTE.COM (Ugo Bellavance) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Lance Haig wrote: > I have built a SUSE 9.2 system and want to start installing MailScanner. > > What is the recommended order? > See the MAQ page for my recommendation. > I want to start with MailScanner and test to see if it works > Then add SpamAssassin and test > Then DCC > Rayzor > Pyzor. > > Would you agree with this? > > Lance > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From jhiggins at KENNESAW.EDU Wed Apr 13 16:08:05 2005 From: jhiggins at KENNESAW.EDU (Jonathan Higgins) Date: Thu Jan 12 21:29:18 2006 Subject: adding renattach to MailScanner+Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] It figures I would stumble across a solution after I took the time to put together this email.. So I will provide the solution. It is all postfix based.. so sorta off topic, but just to complete the thought... modify master.cf to: smtp inet n - n - - smtpd -o content_filter=filter -o cleanup_service_name=cleanup2 #from here down is different cleanup2 unix n - n - 0 cleanup #add a separate cleanup -o body_checks= -o mime_header_checks= -o nested_header_checks= -o header_checks=pcre:/etc/postfix/header_checks2 #this file is empty enjoy Jonathan Higgins IT R&D Project Manager Kennesaw State University jhiggins@kennesaw.edu >>> jhiggins@KENNESAW.EDU 4/13/2005 10:24:43 AM >>> I need to implement renaming extensions instead of just modifying the subject, or blocking certain extensions(filenames) or filetypes. software build: RHEL AS 3.0 postfix-2.0.16-14.RHEL3 MailScanner 4.39.5 spamassassin-3.0.2-1 clamav-0.83-1.1.el3.rf renattach-1.2.2 First thing I did was disable filename and filetype checking in MailScanner.conf by adding a "#" infront of the rules. #Filename Rules = %etc-dir%/filename.rules.conf #Filetype Rules = %etc-dir%/filetype.rules.conf Second thing, I installed renattach using the instructions for Postfix Integration at http://www.pc-tools.net/unix/renattach/INSTALL which, in short tells you to modify the master.cf postfix config file. add: filter unix - n n - - pipe flags=q user=filter argv=renattach -p sendmail -i -f ${sender} -- ${recipient} modify: smtp inet n - n - - smtpd -o content_filter=filter This works for the most part, but here is where the problem starts to creep up. The postfix+MailScanner instructions at http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml tell me to add header_checks = regexp:/etc/postfix/header_checks to /etc/postfix/main.cf and create the file /etc/postfix/header_checks with the following contents: /^Received:/ HOLD Here is the problem: When I send an email: 1. Postfix puts the email into HOLD. 2. MailScanner picks it up and does its thing. 3. The content filter sends the email to renattach 4. Renattach finishes with the email and reinjects it 5. Reinjected email goes into HOLD. 6. MailScanner picks it up and does its thing. 7. Message is delivered. Ok, if you don't see it, The email message is processed through MailScanner 2x. I took a look at http://www.postfix.org/FILTER_README.html#simple_filter which shows how email moves around between all the processes that make up postfix. There is a nice pretty picture that shows the content filter after the qmgr. I guess that's why they call it "After-Queue Content Filter" The point being that after the queue, and after the content filter, the email is reinjected using pickup and then eventually passed to cleanup, which does another "header_check" and stuffs the email into the HOLD queue again. Some things I tried to fix this. First fix attempt: I tried to tell postfix to knock it off by modifying the master.cf as follows: smtp inet n - n - - smtpd -o content_filter=filter -o receive_override_options=no_header_body_checks This didn't solve the problem, and to be honest, im not sure if its effecting anything. I did some more research under the advanced filter options for postfix, with no help there. Second fix attempt: I had the thought that I could just modify the generic virus scanner and fit renattach into MailScanner. After creating a renattach-wrapper, modifying MailScanner.conf, and SweepViruses.pm, I started running into weird errors, including the debug message "can't find EOCD signature". I had chopped up a few too many files, because after I cleaned out what I thought I had just done, it was still fairly broken. Im sure that was my fault, so I cleaned everything out and rebuilt my MailScanner install fresh, and got back to square one. Ok, so what Im looking for is a solution to this problem. It would be beneficial to have the solution be part of MailScanner. Im not married to renattach, but it was one of the first programs out there that does what I need. Thanks Jonathan Higgins IT R&D Project Manager Kennesaw State University jhiggins@kennesaw.edu ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From drew at THEMARSHALLS.CO.UK Wed Apr 13 16:19:33 2005 From: drew at THEMARSHALLS.CO.UK (Drew Marshall) Date: Thu Jan 12 21:29:18 2006 Subject: postfix question ! Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hirsh, Joshua said: >> Try this from Joshua Hirsh last year: >> >> When I release a file into quarantine, I copy it directly into the > incoming folder for the sending process of Postfix (make > sure it's > executable). >> So for example: >> >> [root B710F4D00F4]# chmod +x B710F4D00F4 >> [root B710F4D00F4]# cp -p B710F4D00F4 /var/spool/postfix/incoming/B/ >> Drew > > > > heh. I missed this post before I replied... How fitting that it's my own > quote! ;-) Made me smile though. :-) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. www.themarshalls.co.uk/policy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Kevin_Miller at CI.JUNEAU.AK.US Wed Apr 13 17:54:18 2005 From: Kevin_Miller at CI.JUNEAU.AK.US (Kevin Miller) Date: Thu Jan 12 21:29:18 2006 Subject: Building a Server from scratch Message-ID: Lance Haig wrote: > I have built a SUSE 9.2 system and want to start installing > MailScanner. > > What is the recommended order? > > I want to start with MailScanner and test to see if it works > Then add SpamAssassin and test > Then DCC > Rayzor > Pyzor. > > Would you agree with this? > > Lance Per Martin's response on Dec 10, 2004: > 2. a better order is... > sendmail > clamav > bitdefender > razor2 > dcc > pyzor > spamassassin > mailscanner > mailwatch HTH... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 18:19:40 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: adding renattach to MailScanner+Postfix Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Don't worry about the EOCD signature warnings. They are just the Zip unpacker failing to find a zip archive in an executable. Totally harmless. Jonathan Higgins wrote: > It figures I would stumble across a solution after I took the time to > put together this email.. > So I will provide the solution. It is all postfix based.. so sorta > off topic, but just to complete the thought... > modify master.cf to: > smtp inet n - n - - smtpd > -o content_filter=filter > -o cleanup_service_name=cleanup2 #from here down is > different > cleanup2 unix n - n - 0 cleanup #add a separate > cleanup > -o body_checks= > -o mime_header_checks= > -o nested_header_checks= > -o header_checks=pcre:/etc/postfix/header_checks2 #this file is empty > enjoy > > > Jonathan Higgins > IT R&D Project Manager > Kennesaw State University > jhiggins@kennesaw.edu > > >>> jhiggins@KENNESAW.EDU 4/13/2005 10:24:43 AM >>> > I need to implement renaming extensions instead of just modifying the > subject, or blocking certain extensions(filenames) or filetypes. > > software build: > RHEL AS 3.0 > postfix-2.0.16-14.RHEL3 > MailScanner 4.39.5 > spamassassin-3.0.2-1 > clamav-0.83-1.1.el3.rf > renattach-1.2.2 > > First thing I did was disable filename and filetype checking in > MailScanner.conf by adding a "#" infront of the rules. > #Filename Rules = %etc-dir%/filename.rules.conf > #Filetype Rules = %etc-dir%/filetype.rules.conf > > Second thing, I installed renattach using the instructions for Postfix > Integration at http://www.pc-tools.net/unix/renattach/INSTALL > which, in short tells you to modify the master.cf postfix config file. > add: > filter unix - n n - - pipe > flags=q user=filter argv=renattach -p sendmail -i -f ${sender} > -- ${recipient} > modify: > smtp inet n - n - - smtpd > -o content_filter=filter > > This works for the most part, but here is where the problem starts to > creep up. > > The postfix+MailScanner instructions at > http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml > tell me to add > header_checks = regexp:/etc/postfix/header_checks > to /etc/postfix/main.cf > and create the file /etc/postfix/header_checks with the following > contents: > /^Received:/ HOLD > Here is the problem: > When I send an email: > 1. Postfix puts the email into HOLD. > 2. MailScanner picks it up and does its thing. > 3. The content filter sends the email to renattach > 4. Renattach finishes with the email and reinjects it > 5. Reinjected email goes into HOLD. > 6. MailScanner picks it up and does its thing. > 7. Message is delivered. > > Ok, if you don't see it, The email message is processed through > MailScanner 2x. > > I took a look at http://www.postfix.org/FILTER_README.html#simple_filter > which shows how email moves around between all the processes that make > up postfix. > There is a nice pretty picture that shows the content filter after the > qmgr. I guess that's why they call it "After-Queue Content Filter" > > The point being that after the queue, and after the content filter, > the email is reinjected using pickup and then eventually passed to > cleanup, which does another "header_check" and stuffs the email into > the HOLD queue again. > > Some things I tried to fix this. > First fix attempt: > I tried to tell postfix to knock it off by modifying the master.cf as > follows: > smtp inet n - n - - smtpd > -o content_filter=filter > -o receive_override_options=no_header_body_checks > > This didn't solve the problem, and to be honest, im not sure if its > effecting anything. > I did some more research under the advanced filter options for > postfix, with no help there. > > Second fix attempt: > I had the thought that I could just modify the generic virus scanner > and fit renattach into MailScanner. > After creating a renattach-wrapper, modifying MailScanner.conf, and > SweepViruses.pm, I started running into weird errors, including the > debug message "can't find EOCD signature". > > I had chopped up a few too many files, because after I cleaned out > what I thought I had just done, it was still fairly broken. Im sure > that was my fault, so I cleaned everything out and rebuilt my > MailScanner install fresh, and got back to square one. > > Ok, so what Im looking for is a solution to this problem. It would be > beneficial to have the solution be part of MailScanner. Im not > married to renattach, but it was one of the first programs out there > that does what I need. > > Thanks > > > > > > > > > > > > > Jonathan Higgins > IT R&D Project Manager > Kennesaw State University > jhiggins@kennesaw.edu > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) > and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > *Support MailScanner development - buy the book off the website!* -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 18:23:01 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ken Goods wrote: >Greets all, >I downloaded and installed the latest versions of MailScanner and >install-ClamAV-SA as I've done in the past and used the install scripts as >usual (thanks Julian!). I didn't notice any major errors in the output. >After all was done MailScanner -V reports the correct MailScanner version >but for some reason only reports V3.00000 for spamassassin. Also I notice >that clamAV is not used. I re-ran the ClamAV-SA install (INSTALL-tar.sh) and >it reports at the end, Oh good Spamassassin V3.02 is already installed. >However when I run spamassassin -D --lint it also shows version 3.0.0 and >produces no errors. > > Look for the file SpamAssassin.pm in your /usr/lib/perl5 directories, find /usr/lib/perl5 -name SpamAssassin.pm -print as it's possible that MailScanner is finding a different version of SpamAssassin from where other scripts find it. Do you have an RPM of SpamAssassin installed? If so, then remove it with "rpm -e spamassassin". >which clamav returns: /usr/bin/which: no clamav in >(/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin >:/root/bin) > > You want "which clamscan". >Seems like the install put SA and ClamAV in different paths than last time. > >I'm a novice at *nix and would appreciate any clues as to how I can make >things right. I don't mind removing all traces of everything and >reinstalling if that would be the easiest route but I haven't got a clue how >to start. > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From diego.fabara at ALEGROPCS.COM Wed Apr 13 18:35:22 2005 From: diego.fabara at ALEGROPCS.COM (Diego Fabara) Date: Thu Jan 12 21:29:18 2006 Subject: An Autoresponse Message-ID: I’ve a Server AntiSpam in MailRelay format. (mailertable to redirect emails for my domain) But, I need autoresponse a lot of mails arrived to user1@mydomain.com with a message like “Thanks for your email. We will contact to you !” Without this email arrived to my internal Email Server. In what file I need a rule ?? ________________________________________________________________________________ INFORMACION CONFIDENCIAL: SE PROHIBE LA DIFUSION O PUBLICACION DE ESTA INFORMACION A TERCEROS SIN LA AUTORIZACION EXPRESA Y POR ESCRITO DE TELECSA. ESTA INFORMACION DEBE SER GUARDADA CON SEGURIDADES CUANDO NO SE LA ESTE UTILIZANDO. SI USTED NO ES EL DESTINATARIO DE ESTE EMAIL, USTED DEBERA DEVOLVERLO AL EMISOR Y NO PODRA LEER, COPIAR O DISTRIBUIR SUS ANEXOS. CUALQUIER OPINION EXPRESADA EN ESTE MENSAJE, CORRESPONDE A SU AUTOR Y NO NECESARIAMENTE A TELECSA - ALEGRO PCS. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mikes at HARTWELLCORP.COM Wed Apr 13 18:38:08 2005 From: mikes at HARTWELLCORP.COM (Michael St. Laurent) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: Yes, I think this is the case. I will try turning off phishing detection to see if the behavior changes. Thank you. Daniel Kleinsinger <> wrote: > Do the truncated emails have an html part with few/no tags and a fully > intact plain text part? If so, there's been an issue like this > reported before, possibly having to do with the phishing net. > > Daniel > > Michael St. Laurent wrote: > >> Hello, >> >> I'm having trouble with (a very, very few) truncated emails. >> Currently we're using 4.40.11 but noticed this same problem with the >> previous stable release as well. >> >> Is there a known issue with this or am I reporting something new? -- Michael St. Laurent Hartwell Corporation ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 18:46:59 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Truncated emails with 4.40.11 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] And I've already fixed this one, or so I thought. Let us know how you get on. Michael St. Laurent wrote: >Yes, I think this is the case. I will try turning off phishing detection to >see if the behavior changes. > >Thank you. > >Daniel Kleinsinger <> wrote: > > >>Do the truncated emails have an html part with few/no tags and a fully >>intact plain text part? If so, there's been an issue like this >>reported before, possibly having to do with the phishing net. >> >>Daniel >> >>Michael St. Laurent wrote: >> >> >> >>>Hello, >>> >>>I'm having trouble with (a very, very few) truncated emails. >>>Currently we're using 4.40.11 but noticed this same problem with the >>>previous stable release as well. >>> >>>Is there a known issue with this or am I reporting something new? >>> >>> > >-- >Michael St. Laurent >Hartwell Corporation > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From William.Burns at AEROFLEX.COM Wed Apr 13 19:03:01 2005 From: William.Burns at AEROFLEX.COM (William Burns) Date: Thu Jan 12 21:29:18 2006 Subject: netiquette on "wiki" website Message-ID: What is proper netiquette for this site? For example, is it ok to do this? http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:rbls:infinite_monkeys Would it be appropriate to add another page for questions that we feel are not answered by the FAQ/MAQ? How 'bout a "desired features" list? I noticed that the "upgrade" section is blank. What kind of info belongs here? Should there be a list of MailScanner.conf variables that got added at each version, so that people can see what new configs they might have to deal with when they upgrade through multiple new versions? Should there be a procedure for archiving/removing all old mailscanner files in preparation for a new mailscanner version? Both? -Bill Julian Field wrote: > Currently it is in need of some more content, so I would really > appreciate it if you could take a look around and fill in the gaps > wherever you have something useful to contribute. > ... > *** The Wiki is at http://wiki.mailscanner.info/ > > Many thanks to Ugo in particular for making this happen. > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 19:14:24 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I see the wiki as somewhere to answer questions, not to ask them. Feel free to add a "desired features" list page. If there is a section that is blank, that is because no-one has volunteered to write content to fill it. As I said in the announcement, please contribute information which would be useful to others. It is not a replacement for the mailing list. Don't expect to pose questions there and have them answered, that's what the list is for. However, if you get a useful response to a good question from the list, please add the response to the wiki in a helpful place where others can find it. The "upgrade_MailScanner_conf" script tells you what has been added since you last upgraded. You should read the relevant comments in the MailScanner.conf file for each of these new settings. Why would you want to archive or delete an old MailScanner version when installing a new one? William Burns wrote: > What is proper netiquette for this site? > > For example, is it ok to do this? > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:rbls:infinite_monkeys > > > Would it be appropriate to add another page for questions that we feel > are not answered by the FAQ/MAQ? > How 'bout a "desired features" list? > > I noticed that the "upgrade" section is blank. > What kind of info belongs here? > > Should there be a list of MailScanner.conf variables that got added at > each version, so that people can see what new configs they might have to > deal with when they upgrade through multiple new versions? > Should there be a procedure for archiving/removing all old mailscanner > files in preparation for a new mailscanner version? > Both? > > -Bill > > Julian Field wrote: > >> Currently it is in need of some more content, so I would really >> appreciate it if you could take a look around and fill in the gaps >> wherever you have something useful to contribute. >> > ... > >> *** The Wiki is at http://wiki.mailscanner.info/ >> >> Many thanks to Ugo in particular for making this happen. >> > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From wright at CYBERVALE.COM Wed Apr 13 18:16:12 2005 From: wright at CYBERVALE.COM (Terran Wright) Date: Thu Jan 12 21:29:18 2006 Subject: OT: Bitdefender on CentOS4 Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Guys, Pardon the off topic post however, I tried installing Bitdefender today however I get errors the following errors after the install: #bdc --update BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. Error: can't find update dll # bdc --info BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. Error: core initialization failed: Libfn initialization failed I'm using CentOS 4, BitDefender-Console-Antivirus-7.0.1-3.linux-gcc3x.i586, I read in the Wiki "Since it is a binary distribution, you might be needing some compatibility libraries (ex: FC3/RHEL4 need a compatibility-libstd++ package to run bdc)." Can anybody tell where I can get this? as anybody seen and resolved this issue? ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From cgibbons at TAHC.STATE.TX.US Wed Apr 13 19:00:25 2005 From: cgibbons at TAHC.STATE.TX.US (Carol Gibbons) Date: Thu Jan 12 21:29:18 2006 Subject: Sendmail not moving files to mqueue.in Message-ID: Hi there, We've been running mailscanner with sendmail on a Mac OS X 10.2.8 server for quite awhile. I had to rebuild the server using an image this past week. But, now mailscanner won't interact with sendmail. I reset the permissions and owner for various directories that sendmail needs root as owner. I made sure mqueue.in has same perms as mqueue. But, ever since the rebuild, sendmail will not place incoming mail into the mqueue.in directory. I checked the sendmail.cf file (/System/Library/StartupItems/Sendmail/sendmail) and the mailscanner settings are there to correctly route to mqueue.in. And, mailscanner is running and sendmail is running. Any ideas? Any help is appreciated. Carol ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From steve.swaney at FSL.COM Wed Apr 13 19:26:03 2005 From: steve.swaney at FSL.COM (Stephen Swaney) Date: Thu Jan 12 21:29:18 2006 Subject: An Autoresponse Message-ID: > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On > Behalf Of Diego Fabara > Sent: Wednesday, April 13, 2005 1:35 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: An Autoresponse > > I've a Server AntiSpam in MailRelay format. (mailertable to redirect > emails for my domain) > > > > But, I need autoresponse a lot of mails arrived to user1@mydomain.com with > a message like "Thanks for your email. We will contact to you !" > > Without this email arrived to my internal Email Server. > > > > In what file I need a rule ?? This is not a job for MailScanner. You want to install (if needed) and configure procmail. General information: http://laku19.adsl.netsonic.fi/era/procmail/links.html Some autoresponder examples: http://gunnar.cc/hosting/procmail.html Steve Swaney President Fortress Systems Ltd. www.fsl.com steve.swaney@fsl.com ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ugob at CAMO-ROUTE.COM Wed Apr 13 19:15:48 2005 From: ugob at CAMO-ROUTE.COM (Ugo Bellavance) Date: Thu Jan 12 21:29:18 2006 Subject: MailScanner ANNOUNCE: Documentation "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > > *** The Wiki is at http://wiki.mailscanner.info/ > > Many thanks to Ugo in particular for making this happen. :). If you want to know how to proceed to help, you can go to http://wiki.mailscanner.info/doku.php?id=documentation:volunteers If you have any question on the wiki, please feel free to write me directly. What is needed now is to make sure all the content from the old FAQ is migrated to the wiki and if you just feel like proofreading, that is fine as well. The goal is to shut down the old FAQ quickly. Many thanks to all of you. Regards, Ugo ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dhawal at NETMAGICSOLUTIONS.COM Wed Apr 13 19:31:06 2005 From: dhawal at NETMAGICSOLUTIONS.COM (Dhawal Doshy) Date: Thu Jan 12 21:29:18 2006 Subject: OT: Bitdefender on CentOS4 Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Terran Wright wrote: > Guys, > > Pardon the off topic post however, I tried installing Bitdefender today > however I get errors the following errors after the install: > > #bdc --update > BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) > Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. > > Error: can't find update dll > > # bdc --info > BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) > Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. > > Error: core initialization failed: Libfn initialization failed > > > I'm using CentOS 4, BitDefender-Console-Antivirus-7.0.1-3.linux-gcc3x.i586, > I read in the Wiki "Since it is a binary distribution, you might be needing > some compatibility libraries (ex: FC3/RHEL4 need a compatibility-libstd++ > package to run bdc)." Can anybody tell where I can get this? > > as anybody seen and resolved this issue? > yum -y install compat-libstdc++-296.i386 compat-libstdc++-33.i386 you use yum (or apt) to update your servers.. right? - dhawal ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 19:38:54 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Sendmail not moving files to mqueue.in Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Check to see there aren't any sendmail -bd -q15m processes running. I suspect sendmail/Exim/Postfix are running outside of MailScanner, processing incoming messages directly avoiding MailScanner. Carol Gibbons wrote: > Hi there, > > We've been running mailscanner with sendmail on a Mac OS X 10.2.8 server > for quite awhile. I had to rebuild the server using an image this past > week. But, now mailscanner won't interact with sendmail. I reset the > permissions and owner for various directories that sendmail needs root as > owner. I made sure mqueue.in has same perms as mqueue. But, ever since > the > rebuild, sendmail will not place incoming mail into the mqueue.in > directory. I checked the sendmail.cf file > (/System/Library/StartupItems/Sendmail/sendmail) and the mailscanner > settings are there to correctly route to mqueue.in. And, mailscanner is > running and sendmail is running. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ebruce at HPMICH.COM Wed Apr 13 19:39:55 2005 From: ebruce at HPMICH.COM (Ed Bruce) Date: Thu Jan 12 21:29:18 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I got the same problem. This was scored 9.4 AWL thru my system also. Why? William Burns wrote: > Our MailScanner believes that the attachment to this message sent to you > > From: owner-mailscanner@jiscmail.ac.uk > Subject: netiquette on "wiki" website > > is Unsolicited Commercial Email (spam). Unless you are sure that this > message > is incorrectly thought to be spam, please delete this message without > opening > it. Opening spam messages might allow the spammer to verify your email > address. > > If you believe that this message has been incorrectly marked as spam, > please > forward this email to postmaster@webshowhost.com > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > -0.0 SPF_HELO_PASS SPF: HELO matches SPF record > -0.0 SPF_PASS SPF: sender matches SPF record > -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% > [score: 0.0005] > 9.4 AWL AWL: From: address is in the auto white-list > > > > > -- > This message has been scanned for viruses and > dangerous content by Secure Resource, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 20:13:17 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Take a look in your ~root/.spamassassin directory. Remove any files with whitelist in their name. And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the auto-whitelist functionality. "man Mail::SpamAssassin::Conf" for more help on what the setting is called. Ed Bruce wrote: > I got the same problem. This was scored 9.4 AWL thru my system also. Why? > > William Burns wrote: > >> Our MailScanner believes that the attachment to this message sent to you >> >> From: owner-mailscanner@jiscmail.ac.uk >> Subject: netiquette on "wiki" website >> >> is Unsolicited Commercial Email (spam). Unless you are sure that this >> message >> is incorrectly thought to be spam, please delete this message without >> opening >> it. Opening spam messages might allow the spammer to verify your email >> address. >> >> If you believe that this message has been incorrectly marked as spam, >> please >> forward this email to postmaster@webshowhost.com >> >> pts rule name description >> ---- ---------------------- >> -------------------------------------------------- >> -0.0 SPF_HELO_PASS SPF: HELO matches SPF record >> -0.0 SPF_PASS SPF: sender matches SPF record >> -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% >> [score: 0.0005] >> 9.4 AWL AWL: From: address is in the auto white-list >> >> >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by Secure Resource, and is >> believed to be clean. >> MailScanner thanks transtec Computers for their support. >> > > > -- > This message has been scanned for viruses and > dangerous content by Secure Resource, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TristanRhodes at WEBER.EDU Wed Apr 13 20:22:52 2005 From: TristanRhodes at WEBER.EDU (Tristan RHODES) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix Message-ID: Thank you Peter, Drew, and Julian for your help. As Drew said, this was caused by Razor placing a file in the queue directory. I needed to edit the "/etc/MailScanner/spam.assassin.prefs.conf" file and add a line that says... razor_config /var/lib/Mailscanner (Ubuntu 5.04 does not have a "/var/spool/MailScanner/spamassassin" directory, but it does have "/var/lib/Mailscanner" directory that contains the Bayes database.) Everything appears to be working correctly without any errors. Great to have such a talented and friendly mailing list. Tristan Rhodes P.S. Installing Razor is as easy as typing "apt-get install razor". No sweat. >>> drew@THEMARSHALLS.CO.UK 04/13/05 12:29 AM >>> Peter Russell wrote: > You need to install razor properly. Its a buggar. > > But temporarily make your postfix account so you can log in with it, > switch to it and then create razor, then change the conf file to log to > dev/null > > I am sure there is an easier way but i dont know it :) In spam.assassin.prefs.conf just add razor_config /var/spool/MailScanner/spamassassin and that will set razor to log to .razor in that directory (Or indeed where ever you wish it to set it's home directory to). It's only because MS runs as the user postfix, who happens to have it's home directory as /var/spool/postfix so drops it's log file in the queue directory, which Postfix doesn't like. Drew ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TristanRhodes at WEBER.EDU Wed Apr 13 20:59:19 2005 From: TristanRhodes at WEBER.EDU (Tristan RHODES) Date: Thu Jan 12 21:29:18 2006 Subject: Ubuntu (debian-unstable) + Mailscanner + Postfix (fixed typo) Message-ID: (I have updated the name of the setting below. "/var/lib/Mailscanner" should be "/var/lib/MailScanner" ) >>> TristanRhodes@WEBER.EDU 04/13/05 1:22 PM >>> Thank you Peter, Drew, and Julian for your help. As Drew said, this was caused by Razor placing a file in the queue directory. I needed to edit the "/etc/MailScanner/spam.assassin.prefs.conf" file and add a line that says... razor_config /var/lib/MailScanner (Ubuntu 5.04 does not have a "/var/spool/MailScanner/spamassassin" directory, but it does have "/var/lib/MailScanner" directory that contains the Bayes database.) Everything appears to be working correctly without any errors. Great to have such a talented and friendly mailing list. Tristan Rhodes P.S. Installing Razor is as easy as typing "apt-get install razor". No sweat. >>> drew@THEMARSHALLS.CO.UK 04/13/05 12:29 AM >>> Peter Russell wrote: > You need to install razor properly. Its a buggar. > > But temporarily make your postfix account so you can log in with it, > switch to it and then create razor, then change the conf file to log to > dev/null > > I am sure there is an easier way but i dont know it :) In spam.assassin.prefs.conf just add razor_config /var/spool/MailScanner/spamassassin and that will set razor to log to .razor in that directory (Or indeed where ever you wish it to set it's home directory to). It's only because MS runs as the user postfix, who happens to have it's home directory as /var/spool/postfix so drops it's log file in the queue directory, which Postfix doesn't like. Drew ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From KGoods at AIAINSURANCE.COM Wed Apr 13 21:41:41 2005 From: KGoods at AIAINSURANCE.COM (Ken Goods) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > Ken Goods wrote: > >>.... However when I run >> spamassassin -D --lint it also shows version 3.0.0 and produces no >> errors. >> >> > Look for the file SpamAssassin.pm in your /usr/lib/perl5 directories, > find /usr/lib/perl5 -name SpamAssassin.pm -print > as it's possible that MailScanner is finding a different version of > SpamAssassin from where other scripts find it. Do you have an RPM of > SpamAssassin installed? If so, then remove it with "rpm -e > spamassassin". > Julian... I've always thought you were a genius but now I know for sure. ;) I did have an errant old V2.63 rpm out there. Don't understand why it waited until now to rear it's ugly head. shrug... Fixed that, now it seems to be calling the correct (and only, as far as I can tell) spamassassin. Now I have a new problem. Spams that were normally caught are not. Looking at the headers it doesn't even appear that most rules are being checked. i.e. X-AIAInsurance-MailScanner-Information: Please contact MIS for more information X-AIAInsurance-MailScanner: Found to be clean X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=0, required 5, autolearn=not spam) but to confuse things a little more it does appear that the SPF rule is working... X-AIAInsurance-MailScanner-Information: Please contact MIS for more information X-AIAInsurance-MailScanner: Found to be clean X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=0.001, required 5, SPF_HELO_FAIL 0.00) and X-AIAInsurance-MailScanner-Information: Please contact MIS for more information X-AIAInsurance-MailScanner: Found to be clean X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=3.14, required 5, SPF_HELO_SOFTFAIL 3.14) These are all definitely spam/male enhancement type emails and should have hit on several rules including SURBL's. DNS is fine. I went through MailScanner.conf with a fine toothed comb and looked at spam.assassin.prefs.cf, local.cf, etc... etc.. and don't see anything out of the ordinary. Running spamassassin -D --lint shows the correct version and the rules being loaded. It finishes with no errors. Is there something else I can do to troubleshoot this? I also sent myself a GTUBE from another domain and it slipped right through.... could really use a couple ideas before the masses come down here to the dungeon with torches and wooden pitchforks... :) >> which clamav returns: /usr/bin/which: no clamav in >> (/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin >> :/root/bin) >> >> > You want "which clamscan". > That also got me going in the right direction and fixed me up, Thanks! I'm learning... :) I ended up installing it from YUM using Dag's site... worked like a champ I may stick to rpms as they have not hurt anything (so far). Thanks for all your help, you're a Saint! Ken Goods Network Administrator AIA Insurance, Inc. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 21:52:13 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ken Goods wrote: >Julian Field wrote: > > >>Ken Goods wrote: >> >> >> >>>.... However when I run >>>spamassassin -D --lint it also shows version 3.0.0 and produces no >>>errors. >>> >>> >>> >>> >>Look for the file SpamAssassin.pm in your /usr/lib/perl5 directories, >>find /usr/lib/perl5 -name SpamAssassin.pm -print >>as it's possible that MailScanner is finding a different version of >>SpamAssassin from where other scripts find it. Do you have an RPM of >>SpamAssassin installed? If so, then remove it with "rpm -e >>spamassassin". >> >> >> > >Julian... I've always thought you were a genius but now I know for sure. ;) >I did have an errant old V2.63 rpm out there. Don't understand why it waited >until now to rear it's ugly head. shrug... Fixed that, now it seems to be >calling the correct (and only, as far as I can tell) spamassassin. Now I >have a new problem. Spams that were normally caught are not. Looking at the >headers it doesn't even appear that most rules are being checked. i.e. > >X-AIAInsurance-MailScanner-Information: Please contact MIS for more >information >X-AIAInsurance-MailScanner: Found to be clean >X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=0, > required 5, autolearn=not spam) > >but to confuse things a little more it does appear that the SPF rule is >working... > >X-AIAInsurance-MailScanner-Information: Please contact MIS for more >information >X-AIAInsurance-MailScanner: Found to be clean >X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=0.001, > required 5, SPF_HELO_FAIL 0.00) > >and > >X-AIAInsurance-MailScanner-Information: Please contact MIS for more >information >X-AIAInsurance-MailScanner: Found to be clean >X-AIAInsurance-MailScanner-SpamCheck: not spam, SpamAssassin (score=3.14, > required 5, SPF_HELO_SOFTFAIL 3.14) > >These are all definitely spam/male enhancement type emails and should have >hit on several rules including SURBL's. DNS is fine. I went through >MailScanner.conf with a fine toothed comb and looked at >spam.assassin.prefs.cf, local.cf, etc... etc.. and don't see anything out of >the ordinary. Running spamassassin -D --lint shows the correct version and >the rules being loaded. It finishes with no errors. Is there something else >I can do to troubleshoot this? I also sent myself a GTUBE from another >domain and it slipped right through.... could really use a couple ideas >before the masses come down here to the dungeon with torches and wooden >pitchforks... :) > > In MailScanner.conf set "Debug = yes" and "Debug SpamAssassin = yes" then stop MailScanner, then run check_MailScanner. It will spew out a load of stuff from SpamAssassin. Page back up it (Shift+PageUp) and go through the output carefully to make sure it is searching the directories where all your SpamAssassin *.cf files are stored. You should be able to find "50_scores.cf" for example in one of the directories it is searching. Also do a "MailScanner -v" and check it is finding all the modules (and their versions) that you think it should be finding, paying particular attention to things like MIME-Base64 version 3.something and your SpamAssassin version. > > >>>which clamav returns: /usr/bin/which: no clamav in >>> >>> >>> >(/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin > > >>>:/root/bin) >>> >>> >>You want "which clamscan". >> >> > >That also got me going in the right direction and fixed me up, Thanks! I'm >learning... :) I ended up installing it from YUM using Dag's site... worked >like a champ I may stick to rpms as they have not hurt anything (so far). > > Just whichever place you start using these RPMs from (Dag's is just fine) make sure you stick to it. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From P.G.M.Peters at UTWENTE.NL Wed Apr 13 22:09:36 2005 From: P.G.M.Peters at UTWENTE.NL (Peter Peters) Date: Thu Jan 12 21:29:18 2006 Subject: Version 4.40.11-1 not honoring rules? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Since the upgrade to 4.40.11-1 MS seems to scan everything for virusses and spam. Default in rules-files is no. Only some domains are scanned according to the rules. After upgrading MS scans all e-mail. Before the upgrade the log contained lines showing "unscanned" messages. After the upgrade no more "unscanned" messages are logged and users are complaining about their messages beeing scanned. -- Peter Peters, senior beheerder (Security) Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE) Universiteit Twente, Postbus 217, 7500 AE Enschede telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/itbe ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 22:23:00 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Version 4.40.11-1 not honoring rules? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] There was a bug in previous versions where it would do a "first matches" rule check on the ruleset for "Virus Scanning", which meant it would scan the message if the "first" recipient in the message requested scanning. It now scans a message if any of the recipients asked for it to be scanned. Well that's what I intended to happen... Peter Peters wrote: > Since the upgrade to 4.40.11-1 MS seems to scan everything for virusses > and spam. Default in rules-files is no. Only some domains are scanned > according to the rules. After upgrading MS scans all e-mail. > > Before the upgrade the log contained lines showing "unscanned" messages. > After the upgrade no more "unscanned" messages are logged and users are > complaining about their messages beeing scanned. > > -- > Peter Peters, senior beheerder (Security) > Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE) > Universiteit Twente, Postbus 217, 7500 AE Enschede > telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/itbe > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From KGoods at AIAINSURANCE.COM Wed Apr 13 22:26:35 2005 From: KGoods at AIAINSURANCE.COM (Ken Goods) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: >> > In MailScanner.conf set "Debug = yes" and "Debug SpamAssassin = yes" > then stop MailScanner, then run check_MailScanner. It will spew out a > load of stuff from SpamAssassin. Page back up it (Shift+PageUp) and go > through the output carefully to make sure it is searching the > directories where all your SpamAssassin *.cf files are stored. You > should be able to find "50_scores.cf" for example in one of the > directories it is searching. > > Also do a "MailScanner -v" and check it is finding all the modules > (and their versions) that you think it should be finding, paying > particular attention to things like MIME-Base64 version 3.something > and your SpamAssassin version. > It looks as though MailScanner is still thinking I have SA V3.0? From cgibbons at TAHC.STATE.TX.US Wed Apr 13 22:27:42 2005 From: cgibbons at TAHC.STATE.TX.US (Carol Gibbons) Date: Thu Jan 12 21:29:18 2006 Subject: Sendmail not moving files to mqueue.in Message-ID: You're absolutely right. I need to remove the "-bd" part in the sendmail config file and see how it goes. Thanks, Carol At 01:38 PM 4/13/05, you wrote: >Check to see there aren't any > sendmail -bd -q15m >processes running. I suspect sendmail/Exim/Postfix are running outside >of MailScanner, processing incoming messages directly avoiding MailScanner. > >Carol Gibbons wrote: > >>Hi there, >> >>We've been running mailscanner with sendmail on a Mac OS X 10.2.8 server >>for quite awhile. I had to rebuild the server using an image this past >>week. But, now mailscanner won't interact with sendmail. I reset the >>permissions and owner for various directories that sendmail needs root as >>owner. I made sure mqueue.in has same perms as mqueue. But, ever since >>the >>rebuild, sendmail will not place incoming mail into the mqueue.in >>directory. I checked the sendmail.cf file >>(/System/Library/StartupItems/Sendmail/sendmail) and the mailscanner >>settings are there to correctly route to mqueue.in. And, mailscanner is >>running and sendmail is running. > >-- >Julian Field >www.MailScanner.info >Buy the MailScanner book at www.MailScanner.info/store >Professional Support Services at www.MailScanner.biz >MailScanner thanks transtec Computers for their support > >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Apr 13 22:43:32 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ken Goods wrote: >Julian Field wrote: > > >>In MailScanner.conf set "Debug = yes" and "Debug SpamAssassin = yes" >>then stop MailScanner, then run check_MailScanner. It will spew out a >>load of stuff from SpamAssassin. Page back up it (Shift+PageUp) and go >>through the output carefully to make sure it is searching the >>directories where all your SpamAssassin *.cf files are stored. You >>should be able to find "50_scores.cf" for example in one of the >>directories it is searching. >> >>Also do a "MailScanner -v" and check it is finding all the modules >>(and their versions) that you think it should be finding, paying >>particular attention to things like MIME-Base64 version 3.something >>and your SpamAssassin version. >> >> >> > >It looks as though MailScanner is still thinking I have SA V3.0? > >From Debug: > >configuration file "/usr/share/spamassassin/20_body_tests.cf" requires >version 3.000002 of SpamAssassin, but this is code version 3.000000. Maybe >you need to use the -C switch, or remove the old config files? Skipping this >file at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf/Parser.pm line >329. > >(several of those) > >Then later I see several of these... > >debug: config: SpamAssassin failed to parse line, skipping: >uridnsbl_skip_domain yahoo.com w3.org msn.com com.com yimg.com >debug: config: SpamAssassin failed to parse line, skipping: >uridnsbl_skip_domain hotmail.com doubleclick.net flowgo.com ebaystatic.com >aol.com > >If I do a which spamassassin I get... > >/usr/bin/spamassassin > >If I find /usr/lib/perl5 -name SpamAssassin.pm -print, I get... > >/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm >/usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin.pm > >So there still are two? I guess I don't understand... help please? > > rpm -e spamassassin (or whatever name is required to make it remove DAG's rpm). Then search /usr/lib/perl5 for any files called *.cf with find /usr/lib/perl5 -name '*.cf' -print then delete them all. And then find /usr/lib/perl5 -name 'SpamAssassin.pm' -print and delete it, and any files in subdirectories of it that look like they are SpamAssassin-related (e.g. called "SpamAssassin" :-) Then reinstall the rpm again. Now you should only have 1 version installed, hopefully. >>Just whichever place you start using these RPMs from (Dag's is just >>fine) make sure you stick to it. >> >> > >Good tip... I'll add it to my notes. > >I know you're busy, but if you could maybe give me a short explanation of >how I screwed this up I'd appreciate it. I've upgraded 2-3 times using your >scripts before without any problems and followed my notes this time with >less then successful results. If I knew why/how this happened maybe I keep >from doing it again in the future. I do and have read everything I can get >my hands on including the list everyday and all the FAQ's MAQ's and now >wiki's. But I still seem to get myself into a mess every now and again. :) > >Many thanks again. > >k > >Output from MailScanner -v (just in case) > >[root@gw-mail /]# MailScanner -v >Running on >Linux gw-mail.aiainsurance.com 2.4.20-30.9 #1 Wed Feb 4 20:44:26 EST 2004 >i686 i686 i386 GNU/Linux >This is Red Hat Linux release 9 (Shrike) >This is Perl version 5.008000 (5.8.0) > >This is MailScanner version 4.40.11 >Module versions are: >1.00 AnyDBM_File >1.14 Archive::Zip >1.01 Carp >1.119 Convert::BinHex >1.00 DirHandle >1.04 Fcntl >2.71 File::Basename >2.05 File::Copy >2.01 FileHandle >1.05 File::Path >0.13 File::Temp >1.29 HTML::Entities >3.45 HTML::Parser >2.30 HTML::TokeParser >1.20 IO >1.09 IO::File >1.122 IO::Pipe >1.50 Mail::Header >3.05 MIME::Base64 >5.417 MIME::Decoder >5.417 MIME::Decoder::UU >5.417 MIME::Head >5.417 MIME::Parser >3.03 MIME::QuotedPrint >5.417 MIME::Tools >0.10 Net::CIDR >1.05 POSIX >1.75 Socket >0.03 Sys::Syslog >1.02 Time::localtime > >Optional module versions are: >1.806 DB_File >1.08 Digest >1.01 Digest::HMAC >2.33 Digest::MD5 >2.10 Digest::SHA1 >0.44 Inline >0.13 Mail::ClamAV >3.000000 Mail::SpamAssassin >1.997 Mail::SPF::Query >0.15 Net::CIDR::Lite >0.48 Net::DNS >missing Net::LDAP >1.94 Parse::RecDescent >missing SAVI >1.2 Sys::Hostname::Long >2.42 Test::Harness >0.47 Test::Simple >1.89 Text::Balanced >1.35 URI > > > >Ken Goods >Network Administrator >AIA Insurance, Inc. > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From KGoods at AIAINSURANCE.COM Wed Apr 13 23:14:19 2005 From: KGoods at AIAINSURANCE.COM (Ken Goods) Date: Thu Jan 12 21:29:18 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: >> > rpm -e spamassassin > (or whatever name is required to make it remove DAG's rpm). > Then search /usr/lib/perl5 for any files called *.cf with > find /usr/lib/perl5 -name '*.cf' -print > then delete them all. > And then > find /usr/lib/perl5 -name 'SpamAssassin.pm' -print > and delete it, and any files in subdirectories of it that look like > they are SpamAssassin-related (e.g. called "SpamAssassin" :-) > > Then reinstall the rpm again. > > Now you should only have 1 version installed, hopefully. > Got it! Thanks a million Julian. I took notes and think I have my head half way around what happened. Kind regards... Ken Goods Network Administrator AIA Insurance, Inc. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ml at NETGROUPES.CA Thu Apr 14 01:41:23 2005 From: ml at NETGROUPES.CA (Mailing List) Date: Thu Jan 12 21:29:19 2006 Subject: Possible BUG with the Script FileType Message-ID: Tested against: MailScaner 4.38.10 and MailScanner 4.40.11 Sending an EPS file thru when the filetype check denies script files blocks the file. My rough guess is that MailScanner parses the output of the file command and finds the letters "script" and interprets it as such. # file Friends\ Fr.eps Friends Fr.eps: DOS EPS Binary File Postscript starts at byte 32 length 73761 TIFF starts at byte 73793 length 10437 Can anyone reproduce this problem? Thanks Guy ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ugob at CAMO-ROUTE.COM Thu Apr 14 01:46:06 2005 From: ugob at CAMO-ROUTE.COM (Ugo Bellavance) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] William Burns wrote: > What is proper netiquette for this site? > > For example, is it ok to do this? > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:rbls:infinite_monkeys > Bear in mind that the wiki is still a work in progress. If you feel you can improve the page either in apperance or content, feel free to do so :). > > Would it be appropriate to add another page for questions that we feel > are not answered by the FAQ/MAQ? You can send them to the list, or to me if you feel it should be added to the MAQ. While the MAQ page of the wiki can be edited by anyone, I'd appreciate if I could keep the control over it. > How 'bout a "desired features" list? Julian won't read all the wiki pages, so better to send them to the list. > > I noticed that the "upgrade" section is blank. > What kind of info belongs here? > This is one of my unfinished part :(. What kind of info? Something in line with the 'install' part. > Should there be a list of MailScanner.conf variables that got added at > each version, so that people can see what new configs they might have to > deal with when they upgrade through multiple new versions? See Julian's post. > Should there be a procedure for archiving/removing all old mailscanner > files in preparation for a new mailscanner version? There is something on this on the MAQ page. > Both? > > -Bill > > Julian Field wrote: > >> Currently it is in need of some more content, so I would really >> appreciate it if you could take a look around and fill in the gaps >> wherever you have something useful to contribute. >> > ... > >> *** The Wiki is at http://wiki.mailscanner.info/ >> >> Many thanks to Ugo in particular for making this happen. >> > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ugob at CAMO-ROUTE.COM Thu Apr 14 01:54:57 2005 From: ugob at CAMO-ROUTE.COM (Ugo Bellavance) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > Feel free to add a "desired features" list page. Oups... just said the opposite on another post. Please disregard my comment. > > If there is a section that is blank, that is because no-one has > volunteered to write content to fill it. > Or I didn't have time to work on it... It will eventually be more complete, but I don't have much spare time. However, if you feel like helping, drop me a line and I'll gladly guide you. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From William.Burns at AEROFLEX.COM Thu Apr 14 03:01:19 2005 From: William.Burns at AEROFLEX.COM (William Burns) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ugo Bellavance wrote: > William Burns wrote: > >> What is proper netiquette for this site? >> >> For example, is it ok to do this? >> http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:rbls:infinite_monkeys >> >> > > Bear in mind that the wiki is still a work in progress. If you feel you > can improve the page either in apperance or content, feel free to do > so :). Hmm... I already did the "bad" thing, by posting a question there, but someone already corrected/answered it. >> >> Would it be appropriate to add another page for questions that we feel >> are not answered by the FAQ/MAQ? > > > You can send them to the list, or to me if you feel it should be added > to the MAQ. While the MAQ page of the wiki can be edited by anyone, I'd > appreciate if I could keep the control over it. > Ok... Would you prefer a separate "staging" page w/ suggestions for the MAQ? That way you could move them over to the official "blessed" MAQ page when you were comfortable w/ them. >> I noticed that the "upgrade" section is blank. >> What kind of info belongs here? >> > > This is one of my unfinished part :(. What kind of info? Something in > line with the 'install' part. Note: I dropped in a link to what looked like the appropriate section of the MAQ, and one external link. > >> Should there be a procedure for archiving/removing all old mailscanner >> files in preparation for a new mailscanner version? > > > There is something on this on the MAQ page. As opposed to what's on the MAQ page (possibly due to paranoia) I did this: > tar --no-recursion -cvf mailscanner.old.tar `rpm -ql mailscanner` I figured that this would preserve any weird tweaks that I made to files under the "report" directory. In a pinch, I could recover any old file quickly and easily. I also did a pre-install/upgrade "diff" on my current "MailScanner.conf" vs. a "MailScanner.conf.orig" I'm not sure that has a place in an upgrade procedure... -Bill ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mike at CAMAROSS.NET Thu Apr 14 03:11:36 2005 From: mike at CAMAROSS.NET (Mike Kercher) Date: Thu Jan 12 21:29:19 2006 Subject: Bayes & MySQL Message-ID: I've got my bayes running with mysql on a few machines and seems to be working great. MY question is does the bayes rebuild still need to be done or is it even effective with bayes residing in mysql? TIA Mike ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From satya at BAINSDIGITAL.COM Thu Apr 14 06:50:55 2005 From: satya at BAINSDIGITAL.COM (SatyaDev) Date: Thu Jan 12 21:29:19 2006 Subject: postfix question ! Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Thanx Drew and Joshua, Its working for me. I found one more tricky way to use "postdrop". I tried with "postdrop" from many different versions of postfix and "postdrop" from postfix-1.1.7-2 is working fine. Now i m using postfix-2.0.18 as SMTP and "postdrop" from postfix-1.1.7-2. (It shows that threre is problem in postdrop, in new postfix releases ! is it ? ) - SatyaDev www.bainsdigital.com Drew Marshall wrote: Hirsh, Joshua said: Try this from Joshua Hirsh last year: When I release a file into quarantine, I copy it directly into the incoming folder for the sending process of Postfix (make > sure it's executable). So for example: [root B710F4D00F4]# chmod +x B710F4D00F4 [root B710F4D00F4]# cp -p B710F4D00F4 /var/spool/postfix/incoming/B/ Drew heh. I missed this post before I replied... How fitting that it's my own quote! ;-) Made me smile though. :-) Drew ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From lhaig at HAIGMAIL.COM Thu Apr 14 07:20:51 2005 From: lhaig at HAIGMAIL.COM (Lance Haig) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi, During our opensource evaluation project on of the issues with MailScanner that was raised by someone else is that it does not play well with postfix. Is this the case? I am not sure if Julian has fixed the problems completely yet I just want to know if this is the case. I did suggest sendmail as an alternative but was shot down due to sendmail's "security issues" not sure what those are. Thanks Lance ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From pete at ENITECH.COM.AU Thu Apr 14 07:33:27 2005 From: pete at ENITECH.COM.AU (Pete Russell) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Using postfix without any postfix related problems, for years. Currently MailScanner using postfix's own built in features, which was the point of contention from the POstfix devs, Julian improvised whihc they didnt approve of, even though it worked perfectly. Now that Postfix is used by MailScanner using the Postfix recommended methods, without issue, there si no reason for any of the postfix folks to complain, that i can see. I think there maybe be a faq entry on this? Pete Lance Haig wrote: > Hi, > > During our opensource evaluation project on of the issues with > MailScanner that was raised by someone else is that it does not play > well with postfix. > > Is this the case? I am not sure if Julian has fixed the problems > completely yet I just want to know if this is the case. I did suggest > sendmail as an alternative but was shot down due to sendmail's "security > issues" not sure what those are. > > Thanks > > Lance > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From lhaig at HAIGMAIL.COM Thu Apr 14 08:10:46 2005 From: lhaig at HAIGMAIL.COM (Lance Haig) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Pete, Thanks for this I will make them aware Lance Pete Russell wrote: > Using postfix without any postfix related problems, for years. > > Currently MailScanner using postfix's own built in features, which was > the point of contention from the POstfix devs, Julian improvised whihc > they didnt approve of, even though it worked perfectly. > > Now that Postfix is used by MailScanner using the Postfix recommended > methods, without issue, there si no reason for any of the postfix folks > to complain, that i can see. > > I think there maybe be a faq entry on this? > > Pete > > Lance Haig wrote: > >> Hi, >> >> During our opensource evaluation project on of the issues with >> MailScanner that was raised by someone else is that it does not play >> well with postfix. >> >> Is this the case? I am not sure if Julian has fixed the problems >> completely yet I just want to know if this is the case. I did suggest >> sendmail as an alternative but was shot down due to sendmail's "security >> issues" not sure what those are. >> >> Thanks >> >> Lance >> >> ------------------------ MailScanner list ------------------------ >> To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >> 'leave mailscanner' in the body of the email. >> Before posting, read the Wiki (http://wiki.mailscanner.info/) and >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). >> >> Support MailScanner development - buy the book off the website! >> >> >> > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From rakesh at NETCORE.CO.IN Thu Apr 14 08:44:47 2005 From: rakesh at NETCORE.CO.IN (Rakesh) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Lance Haig wrote: > Hi, > > During our opensource evaluation project on of the issues with > MailScanner that was raised by someone else is that it does not play > well with postfix. > > Is this the case? I am not sure if Julian has fixed the problems > completely yet I just want to know if this is the case. I did suggest > sendmail as an alternative but was shot down due to sendmail's "security > issues" not sure what those are. My company would simply run out of business if the problems projected by postfix maintainers regarding using MailScanner with Postfix was that serious. We have been happily using the combination without any issues since a long time. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From martinh at SOLID-STATE-LOGIC.COM Thu Apr 14 09:15:32 2005 From: martinh at SOLID-STATE-LOGIC.COM (Martin Hepworth) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: Lance There is a 'difference of ideas' between how Weitse and Julian want thingsto work. Weitse objects to MS's major design of simply moving messages from one queue to another. Other than that Julian keeps well up to date with Postfixs changes and MS works very nicely with Postfix AS for Sendmail - quote me security issue in last 3 years with modern versions. I'm no fan of sendmail myself (yucky 1980's config file syntax mainly) so I'm not particulary defending it, just trying to dispell myths when taling about old and new versions of sendmail. If you want an alternative to sendmail/Postfix, have a look at exim. Plays very well with MailScanner and support from the two maintainers at Cambridge Uni is excellant. (like Julian's support of MS is ) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Lance Haig wrote: > Hi, > > During our opensource evaluation project on of the issues with > MailScanner that was raised by someone else is that it does not play > well with postfix. > > Is this the case? I am not sure if Julian has fixed the problems > completely yet I just want to know if this is the case. I did suggest > sendmail as an alternative but was shot down due to sendmail's "security > issues" not sure what those are. > > Thanks > > Lance > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From dh at UPTIME.AT Thu Apr 14 09:28:14 2005 From: dh at UPTIME.AT (David H.) Date: Thu Jan 12 21:29:19 2006 Subject: Postfix problems? Message-ID: [ The following text is in the "UTF-8" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Martin Hepworth wrote: > Lance > AS for Sendmail - quote me security issue in last 3 years with modern > versions. I'm no fan of sendmail myself (yucky 1980's config file syntax > mainly) so I'm not particulary defending it, just trying to dispell > myths when taling about old and new versions of sendmail. > > If you want an alternative to sendmail/Postfix, have a look at exim. > Plays very well with MailScanner and support from the two maintainers at > Cambridge Uni is excellant. (like Julian's support of MS is ) As someone who is a Sendmail fan, I can agree as well. Exim is an excellent choice when you do not wish to use Sendmail. Personally i _hate_ postfix and I do not understand why it has become to be so popular. But that is a personal preference. The Versions of Sendmail starting from 8.12.8 up are pretty clean and rather secure. Of course there are always tiny issues found since the codebase is simply huge. Sendmail X seems to show that there will be a paradigm change, as it will be more modular and m4 as configuration language will probably die. - -d -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.3.6 (Darwin) iD8DBQFCXimePMoaMn4kKR4RApZ6AJsGspXlJa2r+R+NFrG1B2caJjXtcQCdGHIT W+uSzLR+ye5fLBAGKLVSFts= =bvpG -----END PGP SIGNATURE----- ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 14 09:30:57 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Ugo Bellavance > Sent: den 14 april 2005 02:46 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: netiquette on "wiki" website > > > William Burns wrote: > > What is proper netiquette for this site? > > > > For example, is it ok to do this? > > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_sp > am:rbls:infinite_monkeys > > > > Bear in mind that the wiki is still a work in progress. If > you feel you > can improve the page either in apperance or content, feel > free to do so :). > > > > > Would it be appropriate to add another page for questions > that we feel > > are not answered by the FAQ/MAQ? > > You can send them to the list, or to me if you feel it should be added > to the MAQ. While the MAQ page of the wiki can be edited by > anyone, I'd > appreciate if I could keep the control over it. Couldn't that be done by Jules in the acl.conf file? Shouldn't be too difficult, by the looks of it:-). Rgrds -- Glenn > > How 'bout a "desired features" list? > > Julian won't read all the wiki pages, so better to send them > to the list. > > > > > I noticed that the "upgrade" section is blank. > > What kind of info belongs here? > > > > This is one of my unfinished part :(. What kind of info? > Something in > line with the 'install' part. > > > Should there be a list of MailScanner.conf variables that > got added at > > each version, so that people can see what new configs they > might have to > > deal with when they upgrade through multiple new versions? > > See Julian's post. > > > Should there be a procedure for archiving/removing all old > mailscanner > > files in preparation for a new mailscanner version? > > There is something on this on the MAQ page. > > > Both? > > > > -Bill > > > > Julian Field wrote: > > > >> Currently it is in need of some more content, so I would really > >> appreciate it if you could take a look around and fill in the gaps > >> wherever you have something useful to contribute. > >> > > ... > > > >> *** The Wiki is at http://wiki.mailscanner.info/ > >> > >> Many thanks to Ugo in particular for making this happen. > >> > > > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 09:42:42 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Upgrade Problems Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] In which case, please can you write it up in the wiki? Clearing out old SpamAssassin installations is definitely useful to other people. Ken Goods wrote: >Julian Field wrote: > > > >>rpm -e spamassassin >>(or whatever name is required to make it remove DAG's rpm). >>Then search /usr/lib/perl5 for any files called *.cf with >>find /usr/lib/perl5 -name '*.cf' -print >>then delete them all. >>And then >>find /usr/lib/perl5 -name 'SpamAssassin.pm' -print >>and delete it, and any files in subdirectories of it that look like >>they are SpamAssassin-related (e.g. called "SpamAssassin" :-) >> >>Then reinstall the rpm again. >> >>Now you should only have 1 version installed, hopefully. >> >> >> > >Got it! Thanks a million Julian. I took notes and think I have my head half >way around what happened. > >Kind regards... > > >Ken Goods >Network Administrator >AIA Insurance, Inc. > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 09:43:28 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Possible BUG with the Script FileType Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Please feel free to edit filetype.rules.conf to say whatever you want. Mailing List wrote: >Tested against: >MailScaner 4.38.10 and MailScanner 4.40.11 > >Sending an EPS file thru when the filetype check denies script files >blocks the file. > >My rough guess is that MailScanner parses the output of the file command >and finds the letters "script" and interprets it as such. > ># file Friends\ Fr.eps Friends Fr.eps: DOS EPS Binary File Postscript >starts at byte 32 length 73761 TIFF starts at byte 73793 length 10437 > >Can anyone reproduce this problem? > >Thanks >Guy > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 09:45:51 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Bayes & MySQL Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] The expiry will still need to be done, it's to do with clearing out old expired tokens that haven't been used in a long time, it's not to do with database implementation. Mike Kercher wrote: >I've got my bayes running with mysql on a few machines and seems to be >working great. MY question is does the bayes rebuild still need to be done >or is it even effective with bayes residing in mysql? > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 14 10:22:32 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:19 2006 Subject: OT: Bitdefender on CentOS4 Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Dhawal Doshy > Sent: den 13 april 2005 20:31 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: OT: Bitdefender on CentOS4 > > > Terran Wright wrote: > > Guys, > > > > Pardon the off topic post however, I tried installing > Bitdefender today > > however I get errors the following errors after the install: > > > > #bdc --update > > BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) > > Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. > > > > Error: can't find update dll > > > > # bdc --info > > BDC/Linux-Console v7.0 (build 2490) (i386) (Dec 10 2003 16:11:35) > > Copyright (C) 1996-2003 SOFTWIN SRL. All rights reserved. > > > > Error: core initialization failed: Libfn initialization failed > > > > > > I'm using CentOS 4, > BitDefender-Console-Antivirus-7.0.1-3.linux-gcc3x.i586, > > I read in the Wiki "Since it is a binary distribution, you > might be needing > > some compatibility libraries (ex: FC3/RHEL4 need a > compatibility-libstd++ > > package to run bdc)." Can anybody tell where I can get this? > > > > as anybody seen and resolved this issue? > > > > yum -y install compat-libstdc++-296.i386 compat-libstdc++-33.i386 > > you use yum (or apt) to update your servers.. right? > > - dhawal I've clarified the wiki a bit and added a link to the bdc knowledgebase article (for FC3). Also fixed the bum link to the kb:-). -- Glenn > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ml at NETGROUPES.CA Thu Apr 14 11:35:50 2005 From: ml at NETGROUPES.CA (Mailing List) Date: Thu Jan 12 21:29:19 2006 Subject: Possible BUG with the Script FileType Message-ID: Thanks Julian, I taught you were doing more magic than simply parsing the output, so I added allow postscript - - before the deny script - - and all I now fine Kind regards Guy -----Original Message----- From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Julian Field Sent: April 14, 2005 04:43 To: MAILSCANNER@JISCMAIL.AC.UK Subject: Re: Possible BUG with the Script FileType Please feel free to edit filetype.rules.conf to say whatever you want. Mailing List wrote: >Tested against: >MailScaner 4.38.10 and MailScanner 4.40.11 > >Sending an EPS file thru when the filetype check denies script files >blocks the file. > >My rough guess is that MailScanner parses the output of the file command >and finds the letters "script" and interprets it as such. > ># file Friends\ Fr.eps Friends Fr.eps: DOS EPS Binary File Postscript >starts at byte 32 length 73761 TIFF starts at byte 73793 length 10437 > >Can anyone reproduce this problem? > >Thanks >Guy > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 11:48:35 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Possible BUG with the Script FileType Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Good idea. I have added this to the distribution. Thanks for the contribution! (Have you considered buying the book yet?) Mailing List wrote: >Thanks Julian, > >I taught you were doing more magic than simply parsing the output, so I >added >allow postscript - - >before the >deny script - - > >and all I now fine > >Kind regards >Guy > >-----Original Message----- >From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK] On >Behalf Of Julian Field >Sent: April 14, 2005 04:43 >To: MAILSCANNER@JISCMAIL.AC.UK >Subject: Re: Possible BUG with the Script FileType > >Please feel free to edit filetype.rules.conf to say whatever you want. > >Mailing List wrote: > > > >>Tested against: >>MailScaner 4.38.10 and MailScanner 4.40.11 >> >>Sending an EPS file thru when the filetype check denies script files >>blocks the file. >> >>My rough guess is that MailScanner parses the output of the file >> >> >command > > >>and finds the letters "script" and interprets it as such. >> >># file Friends\ Fr.eps Friends Fr.eps: DOS EPS Binary File Postscript >>starts at byte 32 length 73761 TIFF starts at byte 73793 length 10437 >> >>Can anyone reproduce this problem? >> >>Thanks >>Guy >> >> >> > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From marcel-ml at IRC-ADDICTS.DE Thu Apr 14 12:43:52 2005 From: marcel-ml at IRC-ADDICTS.DE (Marcel Blenkers) Date: Thu Jan 12 21:29:19 2006 Subject: Question regarding Blocked Content Message-ID: Hi there, upgraded yesterday to the latest version. But, i do have the following settings for Virus Scanning: Virus Scanning = %rules-dir%/virus.scanner.rules and within this ruleset, there is a setting for mails to one person with no marcel:/etc/MailScanner # cat rules/virus.scanner.rules # This is where you can build a Spam WhiteList # Addresses matching in here, with the value # "yes" will never be marked as spam. #From: 152.78. yes #From: 130.246. yes To: someuser@someuser.de no FromOrTo: default yes but..suddently the mails to the user got there with blocked content: At Thu Apr 14 12:34:53 2005 the content filters said: MailScanner: Found a form in HTML message how could i stop this behaviour?? The user would like to receive those mails.. Thanks in advance Marcel ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From joshua.hirsh at PARTNERSOLUTIONS.CA Thu Apr 14 13:07:09 2005 From: joshua.hirsh at PARTNERSOLUTIONS.CA (Hirsh, Joshua) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Here's a very good wiki netiquette to follow: Comment your changes! ;-) I've noticed that not too many people have commented changes that they've made (these comments show up if you look at previous revisions of the page). Happy editing.. -Joshua ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 14 13:17:34 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: > -----Original Message----- > From: MailScanner mailing list > [mailto:MAILSCANNER@JISCMAIL.AC.UK] On Behalf Of Hirsh, Joshua > Sent: den 14 april 2005 14:07 > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: netiquette on "wiki" website > > > Here's a very good wiki netiquette to follow: Comment your > changes! ;-) > > I've noticed that not too many people have commented changes > that they've > made (these comments show up if you look at previous > revisions of the page). On a tangent note Joshue: In the postfix install where you've added a note, could you either make that a footnote or a separate notes section at the end? And your note looks like it'd endorse the old deferred method for a dual postfix setup... That's perhaps not so good. Could you change that or note the possible downside with that approach? I think it'd be best to have this type of thing as a separate section with a bullet list at the bottom. -- Glenn > > > Happy editing.. > > -Joshua > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 13:47:01 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Question regarding Blocked Content Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] The Found a Form message is from the dangerous content filtering, not the virus scanning. Marcel Blenkers wrote: >Hi there, > >upgraded yesterday to the latest version. > >But, i do have the following settings for Virus Scanning: > >Virus Scanning = %rules-dir%/virus.scanner.rules > >and within this ruleset, there is a setting for mails to one person with >no > >marcel:/etc/MailScanner # cat rules/virus.scanner.rules ># This is where you can build a Spam WhiteList ># Addresses matching in here, with the value ># "yes" will never be marked as spam. >#From: 152.78. yes >#From: 130.246. yes >To: someuser@someuser.de no >FromOrTo: default yes > > >but..suddently the mails to the user got there with blocked content: > >At Thu Apr 14 12:34:53 2005 the content filters said: > MailScanner: Found a form in HTML message > > >how could i stop this behaviour?? > >The user would like to receive those mails.. > >Thanks in advance > >Marcel > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From joshua.hirsh at PARTNERSOLUTIONS.CA Thu Apr 14 13:54:28 2005 From: joshua.hirsh at PARTNERSOLUTIONS.CA (Hirsh, Joshua) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] > On a tangent note Joshue: > In the postfix install where you've added a note, could you either > make that a footnote or a separate notes section at the end? > And your note looks like it'd endorse the old deferred method for > a dual postfix setup... That's perhaps not so good. Could you change > that or note the possible downside with that approach? > > I think it'd be best to have this type of thing as a separate section > with a bullet list at the bottom. > > -- Glenn I never really liked the old deferred method, but rather a hybrid of a dual postfix using the hold method =p I'm moving it now. ;-) -Joshua ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ggiants81 at gmail.com Thu Apr 14 13:50:58 2005 From: ggiants81 at gmail.com (Joel Andersson) Date: Thu Jan 12 21:29:19 2006 Subject: Newbie Mailscanner / Spamassassin question. Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hi there. I recently got Mailscanner and Mailwatch running on my freebsd box. It works fairly well but I have two issues. 1. I have the mailq.php script in cron running every 5 minutes. I recevice a php.core everytime I run the script but in mailwatch the mailq is correct , what can I do to fix this.??? 2. The other thing is that I get this message when running the Spamassassin test from mailwatch (or the comman prompt) "lint: 9 issues detected. please rerun with debug enabled for more information." Where can I find information about what's going wrong ???? Oh, I'm running Mailcanner 4.38 spamassassin 3.02 dcc pyzor razor agent 2.61 Tell me what more info you need and i'll provide it. //Regards Joel ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 14:12:52 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Newbie Mailscanner / Spamassassin question. Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Joel Andersson wrote: >Hi there. >I recently got Mailscanner and Mailwatch running on my freebsd box. >It works fairly well but I have two issues. > >1. I have the mailq.php script in cron running every 5 minutes. I >recevice a php.core everytime I run the script but in mailwatch the >mailq is correct , what can I do to fix this.??? > > This is a MailWatch issue, please ask on the MailWatch list. >2. The other thing is that I get this message when running the >Spamassassin test from mailwatch (or the comman prompt) >"lint: 9 issues detected. please rerun with debug enabled for more information." >Where can I find information about what's going wrong ???? > > When you do the lint, add a "-D" to the command line and it will produce loads of debug output. Check through that to see what's wrong. >Oh, I'm running Mailcanner 4.38 >spamassassin 3.02 >dcc >pyzor >razor agent 2.61 > >Tell me what more info you need and i'll provide it. > >//Regards Joel > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 14:16:45 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Wiki request: spam bounces Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Can someone please put a page on the Wiki about why bouncing spam is a bad idea and is not the solution to their problem when they are getting a few false alarms from the spam filters. What are the better solutions to this problem, when they think a few of their customers' emails are being flagged as spam? Thanks folks. I've got a particularly awkward case at the moment, and I really don't have the energy to go through the whole thing yet again. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From nlauver at AS.ARIZONA.EDU Thu Apr 14 17:26:47 2005 From: nlauver at AS.ARIZONA.EDU (Neal Lauver) Date: Thu Jan 12 21:29:19 2006 Subject: userpref and white/blacklists in sql database Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Hello all, I just read the excellent wiki article about using MailScanner and mysql to store the SpamAssassin bayes database. From previous mailing list discussions I was under the (mis?)impression that this required running spamd. Since this is evidently not the case, does this mean that it's also possible to specify something like: user_scores_dsn DBI:mysql:spamassassin:localhost in the /etc/MailScanner/spam.assassin.prefs.conf file to allow per-user spamassassin preferences? If so, is anyone doing this already? Thanks very much, Neal Lauver ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ebruce at HPMICH.COM Thu Apr 14 18:26:29 2005 From: ebruce at HPMICH.COM (Ed Bruce) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > Take a look in your ~root/.spamassassin directory. Remove any files with > whitelist in their name. > And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the > auto-whitelist functionality. > "man Mail::SpamAssassin::Conf" for more help on what the setting is > called. > When I did the last upgrade seems my spam.assassin.prefs.conf was changed more then I thought. First the path I used for bayes was changed (and lots of spam started getting through, CEO was pissed) and also AWL functionality was turned on. I need to slow down a little when upgrading and really notice the differences. -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 18:35:03 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ed Bruce wrote: > Julian Field wrote: > >> Take a look in your ~root/.spamassassin directory. Remove any files with >> whitelist in their name. >> And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the >> auto-whitelist functionality. >> "man Mail::SpamAssassin::Conf" for more help on what the setting is >> called. >> > When I did the last upgrade seems my spam.assassin.prefs.conf was > changed more then I thought. First the path I used for bayes was changed > (and lots of spam started getting through, CEO was pissed) and also AWL > functionality was turned on. I need to slow down a little when upgrading > and really notice the differences. Something is wrong in that case. The spam.assassin.prefs.conf file should not be overwritten if you have modified it, you should just get a .rpmnew version of it as well. -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From ebruce at HPMICH.COM Thu Apr 14 18:45:48 2005 From: ebruce at HPMICH.COM (Ed Bruce) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > Ed Bruce wrote: > > > Julian Field wrote: > > > >> Take a look in your ~root/.spamassassin directory. Remove any files > with > >> whitelist in their name. > >> And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the > >> auto-whitelist functionality. > >> "man Mail::SpamAssassin::Conf" for more help on what the setting is > >> called. > >> > > When I did the last upgrade seems my spam.assassin.prefs.conf was > > changed more then I thought. First the path I used for bayes was changed > > (and lots of spam started getting through, CEO was pissed) and also AWL > > functionality was turned on. I need to slow down a little when upgrading > > and really notice the differences. > > Something is wrong in that case. The spam.assassin.prefs.conf file > should not be overwritten if you have modified it, you should just get a > .rpmnew version of it as well. > I did get the .rpmnew and did a quick diff between it and my file. I didn't notice any great difference, because I was in a hurry, so used the rpmnew, my mistake. Like I said, I need to slow down a little when changing my files. Somewhat offtopic, there was a great gui diff tool with SGI IRIX. Does anybody know of a good GUI based diff for Linux. What I liked about the IRIX one was I could go through the differences and choose from which file to keep. Then when I was done it would save out a new file with all my choices. I tried to get the IRIX version working once, but it didn't use OpenGL. -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From mkettler at EVI-INC.COM Thu Apr 14 18:54:16 2005 From: mkettler at EVI-INC.COM (Matt Kettler) Date: Thu Jan 12 21:29:19 2006 Subject: Wiki request: spam bounces Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Julian Field wrote: > Can someone please put a page on the Wiki about why bouncing spam is a > bad idea and is not the solution to their problem when they are getting > a few false alarms from the spam filters. What are the better solutions > to this problem, when they think a few of their customers' emails are > being flagged as spam? > > Thanks folks. I've got a particularly awkward case at the moment, and I > really don't have the energy to go through the whole thing yet again. Julian, ordinarily I'd jump right on this, being a vocal advocate against the bounce feature. However, I'm currently a bit busy with work matters, and I don't expect that to clear up until next week. Some of the information on this page may be of value: http://kmself.home.netcom.com/Rants/avspam.html Most arguments in favor of bouncing spam stem from some idea about "reliable mail". These arguments are of the same sort that argue the need for an open relay because it's necessary so they can mail through their server while traveling, and thus a "reliable mail" necessity. While post-delivery bouncing of spam does offer a reliable recovery from FP, it turns your mailserver into malware that anyone in the world can use as a DDoS client. Just like a wide open mail relay may allow you to send mail while you're traveling, but also allows every spammer in the world to abuse it. Most sensible network admins regard post-delivery bounces of spam, viruses, etc. as a network attack. I personally take this stance, and I handle it the same way I would handle any network attack or intrusion attempt incident. First, try to advise the admin of the problem. If it continues, I blacklist the server and/or domain. If it continues gets bad enough to noticeably effect service here despite the blockade, I've got no reason to ever hesitate to pick up the phone and file a network abuse complaint with the upstream provider. Intentional misconfiguration despite warnings gets handled as an intentional malicious attack, and malicious attacks that degrade service cause incident reports. Thus far I've never had to do that for spam bouncing, however a few domains that are permanently in my 550 list due to spewing malformed bounce garbage on a persistent but small volume basis. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 14 18:55:10 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:19 2006 Subject: netiquette on "wiki" website Message-ID: [ The following text is in the "Windows-1252" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] See your point (actually thought about doing something like that, but... I'm to lazy to change it now:-). Very much better looking now... Thanks. -- Glenn -----Original Message----- From: MailScanner mailing list on behalf of Hirsh, Joshua Sent: to 2005-04-14 14:54 To: MAILSCANNER@JISCMAIL.AC.UK Cc: Subject: Re: netiquette on "wiki" website > On a tangent note Joshue: > In the postfix install where you've added a note, could you either > make that a footnote or a separate notes section at the end? > And your note looks like it'd endorse the old deferred method for > a dual postfix setup... That's perhaps not so good. Could you change > that or note the possible downside with that approach? > > I think it'd be best to have this type of thing as a separate section > with a bullet list at the bottom. > > -- Glenn I never really liked the old deferred method, but rather a hybrid of a dual postfix using the hold method =p I'm moving it now. ;-) -Joshua ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 18:57:54 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: Wiki request: spam bounces Message-ID: [ The following text is in the "ISO-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Matt, Many thanks for that. I have cc-ed Steve Swaney on this who may be prepared to write some docs for me about this problem. Matt Kettler wrote: >Julian Field wrote: > > > >>Can someone please put a page on the Wiki about why bouncing spam is a >>bad idea and is not the solution to their problem when they are getting >>a few false alarms from the spam filters. What are the better solutions >>to this problem, when they think a few of their customers' emails are >>being flagged as spam? >> >>Thanks folks. I've got a particularly awkward case at the moment, and I >>really don't have the energy to go through the whole thing yet again. >> >> > > >Julian, ordinarily I'd jump right on this, being a vocal advocate >against the bounce feature. > >However, I'm currently a bit busy with work matters, and I don't expect >that to clear up until next week. > >Some of the information on this page may be of value: >http://kmself.home.netcom.com/Rants/avspam.html > >Most arguments in favor of bouncing spam stem from some idea about >"reliable mail". These arguments are of the same sort that argue the >need for an open relay because it's necessary so they can mail through >their server while traveling, and thus a "reliable mail" necessity. > >While post-delivery bouncing of spam does offer a reliable recovery from >FP, it turns your mailserver into malware that anyone in the world can >use as a DDoS client. Just like a wide open mail relay may allow you to >send mail while you're traveling, but also allows every spammer in the >world to abuse it. > >Most sensible network admins regard post-delivery bounces of spam, >viruses, etc. as a network attack. I personally take this stance, and I >handle it the same way I would handle any network attack or intrusion >attempt incident. First, try to advise the admin of the problem. If it >continues, I blacklist the server and/or domain. If it continues gets >bad enough to noticeably effect service here despite the blockade, I've >got no reason to ever hesitate to pick up the phone and file a network >abuse complaint with the upstream provider. Intentional misconfiguration >despite warnings gets handled as an intentional malicious attack, and >malicious attacks that degrade service cause incident reports. > >Thus far I've never had to do that for spam bouncing, however a few >domains that are permanently in my 550 list due to spewing malformed >bounce garbage on a persistent but small volume basis. > >------------------------ MailScanner list ------------------------ >To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: >'leave mailscanner' in the body of the email. >Before posting, read the Wiki (http://wiki.mailscanner.info/) and >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > >Support MailScanner development - buy the book off the website! > > > -- Julian Field www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Professional Support Services at www.MailScanner.biz MailScanner thanks transtec Computers for their support PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From Glenn.Steen at AP1.SE Thu Apr 14 19:15:49 2005 From: Glenn.Steen at AP1.SE (Steen, Glenn) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "Windows-1252" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Mandrake... er.... Mandriva (Oh how silly that feels to type) has/had some tool like that specifically for fixing up rpmnew/rpmold files... Seems to be a part of MandrakeUpdate (gtkperl script... perhaps one can borrow:-). Nah. Better look at kdiff3 or xxdiff. At least kdiff3 seems to do what you want. -- Glenn (who oc course don't use these.... The terminal is my first love:-) -----Original Message----- From: MailScanner mailing list on behalf of Ed Bruce Sent: to 2005-04-14 19:45 To: MAILSCANNER@JISCMAIL.AC.UK Cc: Subject: Re: {Spam?} netiquette on "wiki" website Julian Field wrote: > Ed Bruce wrote: > > > Julian Field wrote: > > > >> Take a look in your ~root/.spamassassin directory. Remove any files > with > >> whitelist in their name. > >> And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the > >> auto-whitelist functionality. > >> "man Mail::SpamAssassin::Conf" for more help on what the setting is > >> called. > >> > > When I did the last upgrade seems my spam.assassin.prefs.conf was > > changed more then I thought. First the path I used for bayes was changed > > (and lots of spam started getting through, CEO was pissed) and also AWL > > functionality was turned on. I need to slow down a little when upgrading > > and really notice the differences. > > Something is wrong in that case. The spam.assassin.prefs.conf file > should not be overwritten if you have modified it, you should just get a > .rpmnew version of it as well. > I did get the .rpmnew and did a quick diff between it and my file. I didn't notice any great difference, because I was in a hurry, so used the rpmnew, my mistake. Like I said, I need to slow down a little when changing my files. Somewhat offtopic, there was a great gui diff tool with SGI IRIX. Does anybody know of a good GUI based diff for Linux. What I liked about the IRIX one was I could go through the differences and choose from which file to keep. Then when I was done it would save out a new file with all my choices. I tried to get the IRIX version working once, but it didn't use OpenGL. -- This message has been scanned for viruses and dangerous content by Secure Resource, and is believed to be clean. MailScanner thanks transtec Computers for their support. ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From TGFurnish at HERFFJONES.COM Thu Apr 14 19:21:28 2005 From: TGFurnish at HERFFJONES.COM (Furnish, Trever G) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "Windows-1252" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] vimdiff? > -----Original Message----- > From: MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]On > Behalf Of Steen, Glenn > Sent: Thursday, April 14, 2005 1:16 PM > To: MAILSCANNER@JISCMAIL.AC.UK > Subject: Re: {Spam?} netiquette on "wiki" website > > > Mandrake... er.... Mandriva (Oh how silly that feels to type) > has/had some tool like that specifically for fixing up > rpmnew/rpmold files... Seems to be a part of MandrakeUpdate > (gtkperl script... perhaps one can borrow:-). Nah. > > Better look at kdiff3 or xxdiff. At least kdiff3 seems to do > what you want. > > -- Glenn (who oc course don't use these.... The terminal is > my first love:-) > > > -----Original Message----- > From: MailScanner mailing list on behalf of Ed Bruce > Sent: to 2005-04-14 19:45 > To: MAILSCANNER@JISCMAIL.AC.UK > Cc: > Subject: Re: {Spam?} netiquette on "wiki" website > Julian Field wrote: > > > Ed Bruce wrote: > > > > > Julian Field wrote: > > > > > >> Take a look in your ~root/.spamassassin directory. > Remove any files > > with > > >> whitelist in their name. > > >> And go into /etc/MailScanner/spam.assassin.prefs.conf > and disable the > > >> auto-whitelist functionality. > > >> "man Mail::SpamAssassin::Conf" for more help on what the > setting is > > >> called. > > >> > > > When I did the last upgrade seems my spam.assassin.prefs.conf was > > > changed more then I thought. First the path I used for > bayes was changed > > > (and lots of spam started getting through, CEO was > pissed) and also AWL > > > functionality was turned on. I need to slow down a little > when upgrading > > > and really notice the differences. > > > > Something is wrong in that case. The spam.assassin.prefs.conf file > > should not be overwritten if you have modified it, you > should just get a > > .rpmnew version of it as well. > > > I did get the .rpmnew and did a quick diff between it and my file. I > didn't notice any great difference, because I was in a hurry, so used > the rpmnew, my mistake. Like I said, I need to slow down a little when > changing my files. > > Somewhat offtopic, there was a great gui diff tool with SGI IRIX. Does > anybody know of a good GUI based diff for Linux. What I liked > about the > IRIX one was I could go through the differences and choose from which > file to keep. Then when I was done it would save out a new > file with all > my choices. I tried to get the IRIX version working once, but > it didn't > use OpenGL. > > -- > This message has been scanned for viruses and > dangerous content by Secure Resource, and is > believed to be clean. > MailScanner thanks transtec Computers for their support. > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > > ------------------------ MailScanner list ------------------------ > To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: > 'leave mailscanner' in the body of the email. > Before posting, read the Wiki (http://wiki.mailscanner.info/) and > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). > > Support MailScanner development - buy the book off the website! > ------------------------ MailScanner list ------------------------ To unsubscribe, email jiscmail@jiscmail.ac.uk with the words: 'leave mailscanner' in the body of the email. Before posting, read the Wiki (http://wiki.mailscanner.info/) and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html). Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Thu Apr 14 19:23:43 2005 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Jan 12 21:29:19 2006 Subject: {Spam?} netiquette on "wiki" website Message-ID: [ The following text is in the "windows-1252" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Ah, give me a nice IRIX box any day. Finding all the new versions of configuration files for the packages you have just installed by just typing versions and it lists them all. No hunting .rpmnew files all over the place. No problems with silly little filesystems that have list-based directory structures instead of adaptive tree-based systems. Dynamic relinking so you rarely need to reboot even after library upgrades. Now there's a decent OS. Oh, and you remember the program they used in Jurassic Park where they flew through the filesystem with lots of pillars representing files and directories on different planes and all that? Well it was real, we used to run it. It wasn't fake at all. Ah, now *there's* an OS that rocks. Steen, Glenn wrote: >Mandrake... er.... Mandriva (Oh how silly that feels to type) has/had some tool like that specifically for fixing up rpmnew/rpmold files... Seems to be a part of MandrakeUpdate (gtkperl script... perhaps one can borrow:-). Nah. > >Better look at kdiff3 or xxdiff. At least kdiff3 seems to do what you want. > >-- Glenn (who oc course don't use these.... The terminal is my first love:-) > > >-----Original Message----- >From: MailScanner mailing list on behalf of Ed Bruce >Sent: to 2005-04-14 19:45 >To: MAILSCANNER@JISCMAIL.AC.UK >Cc: >Subject: Re: {Spam?} netiquette on "wiki" website >Julian Field wrote: > > > >>Ed Bruce wrote: >> >> >> >>>Julian Field wrote: >>> >>> >>> >>>>Take a look in your ~root/.spamassassin directory. Remove any files >>>> >>>> >>with >> >> >>>>whitelist in their name. >>>>And go into /etc/MailScanner/spam.assassin.prefs.conf and disable the >>>>auto-whitelist functionality. >>>>"man Mail::SpamAssassin::Conf" for more help on what the setting is >>>>called. >>>> >>>> >>>> >>>When I did the last upgrade seems my spam.assassin.prefs.conf was >>>changed more then I thought. First the path I used for bayes was changed >>>(and lots of spam started getting through, CEO was pissed) and also AWL >>>functionality was turned on. I need to slow down a little when upgrading >>>and really notice the differences. >>> >>> >>Something is wrong in that case. The spam.assassin.prefs.conf file >>should not be overwritten if you have modified it, you should just get a >>.rpmnew version of it as well. >> >> >> >I did get the .rpmnew and did a quick diff between it and my file. I >didn't notice any great difference, because I was in a hurry, so used >the rpmnew, my mistake. Like I said, I need to slow down a little when >changing my files. > >S