Kenneth Porter | 1 Jun 2005 01:05

Re: RE: Stripping Selected Headers

--On Tuesday, May 31, 2005 12:34 PM -0400 Dirk the Daring 
<dirk <at> psicorps.org> wrote:

>   In our peculiar case, it does. And, perhaps more importantly, the
> "Security" people and PHBs *think* it does.

Could you post the reasons they're pushing? That information would still be 
useful to all the mail admins here and if it's indeed bogus we can work 
towards white papers that address the issues. It might even be good fodder 
for the wiki.

Kevin A. McGrail | 1 Jun 2005 03:45
Favicon
Gravatar

[way off-topic] Email Cartoon

Perhaps you've seen, perhaps you haven't but here is some SPAM humor to pass
the time.  Sorry if you aren't interested but as my office has taken to
referring to me as a SPAM junkie, I totally related to this cartoon and
thought some of the others would too.

WARNING: This cartoon could be considered offensive and should not be viewed
by anyone.

http://www.pccc.com/downloads/junk/cool/email_cartoon.mpg

<shun>flames</shun>

Regards,
KAM

Dirk the Daring | 1 Jun 2005 18:50

[off-topic] Stripping Headers - answers to questions

>From: Rob MacGregor <rob.macgregor <at> gmail.com>
>
>On 31/05/05, Dirk the Daring <dirk <at> psicorps.org> wrote:
>>    Hello, I would like to get some help on a specific task in MD. I've
>> searched the mailing list archives, and I've not found what I want to do
>> in there.
>
>You may want to look into the actual value of "security through
>obscurity".  I suspect you'll find it doesn't buy you anything like
>what you're thinking it does.

  Yes and no. See my other response on this topic below.

>From: "Kevin A. McGrail" <kmcgrail <at> pccc.com>
>
>However, more to the point, Dirk: What is your end-goal in modifying the
>headers because it's a setup for a nightmare in debugging a lost email.  The
>strength of email and sendmail especially is the culpability and tracking.
>You will be removing a cornerstone of that culpability.

  True, but as I mentioned in an earlier E-Mail, this system does not
talk directly to the 'Net, is very restricted in the hosts to which it
does talk (in practical terms, less than a dozen total), and the
necessary tracking can be handled via logging.

>From: Rob MacGregor <rob.macgregor <at> gmail.com>
>
>I agree - if you're using obscurity as part as you're overall
>strategy, and you've really thought it through and identified what
>it's buying you (as hopefully you've done for all your other security
(Continue reading)

David F. Skoll | 1 Jun 2005 19:03
Favicon

MIMEDefang 2.52 is released


Hi,

MIMEDefang 2.52 is available at the download page:

	   http://www.mimedefang.org/node.php?id=1

This is primarily a bug-fix release, but Dave O'Neill found something
in the code that would cause a significant performance hit to all
Perl regexp matching.  You probably should upgrade if you run a busy
mail server.

Detailed changelog follows.

Regards,

David.

WARNING: Before upgrading MIMEDefang, please search this file for
*** NOTE INCOMPATIBILITY ** to see if anything has changed that might
affect your filter.

2005-06-01  David F. Skoll  <dfs <at> roaringpenguin.com>

	* VERSION 2.52 RELEASED

	* mimedefang.pl.in (item_contains_virus_fprotd): Remove all
	references to $` and $', which can SIGNIFICANTLY slow down
	Perl regexp matching.

(Continue reading)

Kelson | 1 Jun 2005 20:51
Favicon

Re: MIMEDefang 2.52 is released

Has something been changed about File::Scan support?  I can't find 
anything in the changelog, and even after adding 
detect_and_load_perl_modules() *and* setting $Features{'File::Scan'}=1, 
we're getting messages that it's "not installed."

Dropping back to 2.51 on the same machine solves the problem.

--

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>
Fred Bacon | 1 Jun 2005 19:53
Favicon

Invoking multiple virus scanners

When you have more than one virus scanner installed and used by
mimedefang, is there a way to specify the order in which they are
invoked.  For "political" reasons, I would like to have TrendMicro's
virus scanner invoked before ClamAV.

--

-- 
=============================================================================
 Fred Bacon                                     email: bacon <at> aerodyne.com
 Aerodyne Research, Inc.                         http://www.aerodyne.com
 45 Manning Rd                                  Phone: (978) 663-9500 ext 273
 Billerica, MA 01821-3976                         FAX: (978) 663-4918
=============================================================================
                        Me spill chukker woks grate, I needle gramma chicken!

David F. Skoll | 1 Jun 2005 21:20
Favicon

Re: MIMEDefang 2.52 is released

Kelson wrote:

> Has something been changed about File::Scan support?

Not that I recall.

You need to call detect_and_load_perl_modules() *without* defining
$Features{'File::Scan'} in your filter.

Does that fix it?

Regards,

David.
David F. Skoll | 1 Jun 2005 21:20
Favicon

Re: Invoking multiple virus scanners

Fred Bacon wrote:

> When you have more than one virus scanner installed and used by
> mimedefang, is there a way to specify the order in which they are
> invoked.

Only by editing mimedefang.pl

> For "political" reasons, I would like to have TrendMicro's
> virus scanner invoked before ClamAV.

Who's going to know?

Regards,

David.
Matt Cuttitta | 1 Jun 2005 21:28
Picon

RE: Invoking multiple virus scanners

Call message_contains_virus_trend() and then
message_contains_virus_clamav().

-Matt

-----Original Message-----
From: mimedefang-bounces <at> lists.roaringpenguin.com
[mailto:mimedefang-bounces <at> lists.roaringpenguin.com] On Behalf Of Fred Bacon
Sent: Wednesday, June 01, 2005 1:54 PM
To: mimedefang <at> lists.roaringpenguin.com
Subject: [Mimedefang] Invoking multiple virus scanners

When you have more than one virus scanner installed and used by
mimedefang, is there a way to specify the order in which they are
invoked.  For "political" reasons, I would like to have TrendMicro's
virus scanner invoked before ClamAV.

Kelson | 1 Jun 2005 21:47
Favicon

Re: MIMEDefang 2.52 is released

David F. Skoll wrote:
> You need to call detect_and_load_perl_modules() *without* defining
> $Features{'File::Scan'} in your filter.
> 
> Does that fix it?

No, I added $Features{'File::Scan'} because I was getting the error with 
just detect_and_load_perl_modules().

--

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>

Gmane