Thierry B | 1 Feb 2006 11:22

Re: problem with a rule

Thorsten Haude a écrit :
> Hi,
> 
> * Thierry B wrote (2006-01-27 14:20):
>> I'd like to make a rule so that mail for xx <at> xx.xx are put in a
>> subfolder, but I'd like to make the rule so it matches if the field "to"
>> is xxx <at> xxx.xx or if there is multiples mails in "to" like that: to:
>> yy <at> yy.yy,xx <at> xx.xx, he puts that in my subfolder.
> 
> Untested:
> 
> foreach /^(To|Cc): .*/
> {
>     foreach (getaddr($MATCH)) =~ /.+/
>     {
>         if (tolower($MATCH) == xx <at> xx.xx)
>         {
>             exception
>             {
>                 to "$HOME/$DEFAULT/.Teil/"
>             }
>         }
>     }
> }
> 
> 
> Thorsten

Hello,
I tested your rule, but I have an error, so postfix deffered the mail
(Continue reading)

Thorsten Haude | 1 Feb 2006 12:17
Picon

Re: problem with a rule

Hi,

* Thierry B wrote (2006-02-01 11:22):
>I tested your rule, but I have an error, so postfix deffered the mail
>until I remove this rule of maildrop.
>I don't find where is the error.

No log entry? No error message?

Thorsten
--

-- 
Just because you do not take an interest in politics
doesn't mean politics won't take an interest in you.
    - Pericles
Thierry B | 1 Feb 2006 18:45

Re: problem with a rule

Thorsten Haude a écrit :
> Hi,
> 
> * Thierry B wrote (2006-02-01 11:22):
>> I tested your rule, but I have an error, so postfix deffered the mail
>> until I remove this rule of maildrop.
>> I don't find where is the error.
> 
> No log entry? No error message?
> 
> 
> Thorsten

I haven't any log :-(.

Just postfix logs which tells me that the mail was deferred, so I try to
del that rule, and I flush postfix, and it works.

But nothing in my maildrop.log:

I've that in my maildroprc:

logfile "/var/log/maildrop.log"
VERBOSE = "5"

I have to increase the verbose to have more details about the error? or
do you see where is the problem with that rule?

Thanks :-)

(Continue reading)

Pollywog | 1 Feb 2006 18:51

deleting cyrillic alphabet spam

I don't read Russian, so I don't normally receive mail in Cyrillic.  I am 
getting lots of spam with Cyrillic characters.  Is there a way to have 
Maildrop delete such messages?  I do not see any headers that indicate 
Cyrillic characters.

Is this header something that indicates probable spam?
Content-Type: text/plain;charset="windows-1251"

8)

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
Pollywog | 1 Feb 2006 19:32

deleting cyrillic alphabet spam

I don't read Russian, so I don't normally receive mail in Cyrillic.  I am 
getting lots of spam with Cyrillic characters.  Is there a way to have 
Maildrop delete such messages?  I do not see any headers that indicate 
Cyrillic characters.

Is this header something that indicates probable spam?
Content-Type: text/plain;charset="windows-1251"

8)

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
Jay Lee | 1 Feb 2006 19:55
Favicon

Re: deleting cyrillic alphabet spam


On Wed, February 1, 2006 12:51 pm, Pollywog wrote:
> I don't read Russian, so I don't normally receive mail in Cyrillic.  I am
>  getting lots of spam with Cyrillic characters.  Is there a way to have
> Maildrop delete such messages?  I do not see any headers that indicate
> Cyrillic characters.
>
>
> Is this header something that indicates probable spam?
> Content-Type: text/plain;charset="windows-1251"

In general no, windows-1251 is a valid charset as far as I know but if you
don't read russian than yes, Russian emails are likely spam and can be
discarded.  I'd first write a rule that autofilters messages with that
header to a subdirectory to make sure it works like you expect, after a
few days/weeks of checking the rule out you could set it to just exit rule
processing instead of delivering it to the subfolder.

Jay
--

-- 
Jay Lee
Network / Systems Administrator
Information Technology Dept.
Philadelphia Biblical University
--

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
(Continue reading)

Thorsten Haude | 2 Feb 2006 00:46
Picon

Re: problem with a rule

Hi,

* Thierry B wrote (2006-02-01 18:45):
>logfile "/var/log/maildrop.log"
>VERBOSE = "5"
>
>I have to increase the verbose to have more details about the error?

You may try that, but only after we found the syntax error.

Try it in two pieces. Insert this:
foreach /^(To|Cc): .*/
{
    log "foreach: $MATCH"
    foreach (getaddr($MATCH)) =~ /.+/
    {
        log "getaddr: $MATCH"
    }
}

Again, untested, and I'm not sure about the syntax of the log
statements. If this doesn't work, use simply 'log $MATCH'.

Thorsten
--

-- 
Next to the originator of a good sentence is the first quoter of it.
    - Ralph Waldo Emerson
mouss | 2 Feb 2006 01:41
Favicon

Re: problem with a rule

Thierry B a écrit :

>Thorsten Haude a écrit :
>  
>
>>Hi,
>>
>>* Thierry B wrote (2006-01-27 14:20):
>>    
>>
>>>I'd like to make a rule so that mail for xx <at> xx.xx are put in a
>>>subfolder, but I'd like to make the rule so it matches if the field "to"
>>>is xxx <at> xxx.xx or if there is multiples mails in "to" like that: to:
>>>yy <at> yy.yy,xx <at> xx.xx, he puts that in my subfolder.
>>>      
>>>
>>Untested:
>>
>>foreach /^(To|Cc): .*/
>>{
>>    foreach (getaddr($MATCH)) =~ /.+/
>>    {
>>        if (tolower($MATCH) == xx <at> xx.xx)
>>        {
>>            exception
>>            {
>>                to "$HOME/$DEFAULT/.Teil/"
>>            }
>>        }
>>    }
(Continue reading)

mouss | 2 Feb 2006 01:47
Favicon

Re: deleting cyrillic alphabet spam

Pollywog a écrit :

>I don't read Russian, so I don't normally receive mail in Cyrillic.  I am 
>getting lots of spam with Cyrillic characters.  Is there a way to have 
>Maildrop delete such messages?  I do not see any headers that indicate 
>Cyrillic characters.
>
>Is this header something that indicates probable spam?
>Content-Type: text/plain;charset="windows-1251"
>
>  
>
http://en.wikipedia.org/wiki/Windows-1251

I once had

if (/charset="windows-1251"/:b)
{
        to "$DEFAULT/.Junk.charset/"
}

to cope with a backscatter attack, but removed it just after the storm.

you may theoritically see this in legit mail sent to some mailing lists,
so be careful... If you really need it, put it after all other processings.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
(Continue reading)

Nicolas Ecarnot | 2 Feb 2006 09:49

quotas and warning

Hi,

here's my config :
openbsd+postfix+mysql+courier-maildrop 1.7.0_with_mysql+quotas

Everything is working fine and the mail are removed when my quotas are over.
But I don't understand if there's a way to send a mail to warn the user 
when this happens?
In /etc/postfix/master.cf, I use maildrop this way :

maildrop  unix  -       n       n       -       -       pipe
   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}

and I observe the quotas are applied.
I read the doc three millions times, and the part I read concerning 
quotaswarnmsg only deal with deliverquota.
I haven't understood if deliverquota was called by maildrop, or never 
called in my config?
If I must call deliverquota instead of maildrop from master.cf, *how* 
must I call it?

--

-- 
Nicolas Ecarnot

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
(Continue reading)


Gmane