headers
Rick Cooper | 1 Dec 2003 01:57

Re: f-prot eicar test

Add -dumb to the options. Without that option it knows the eicar
signatures are not an actual virus

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER <at> JISCMAIL.AC.UK]On
> Behalf Of Noel Vargas
> Sent: Sunday, November 30, 2003 5:45 PM
> To: MAILSCANNER <at> JISCMAIL.AC.UK
> Subject: f-prot eicar test
>
>
> Hi:
>
> I've installed MailScanner on a Linux box with Postfix and
> f-prot, and I've been trying to test the system.  It delivers
> and sends messages fine. I built the EICAR.COM test file from
> windows and sent it to this box, but it keeps showing me the
> eicar file and the logs don't show any attempt of disinfection.
>
> I just edited the f-prot wrapper to add the -auto -disinf
> options to no avail.
>
> Any help will be greatly appreciated.
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
(Continue reading)

Permalink | Reply | 0 comments |
headers
Mike Zanker | 1 Dec 2003 07:33
Favicon

Re: New Batch message appearing twice

On 30 November 2003 22:33 +0000 Julian Field
<mailscanner <at> ECS.SOTON.AC.UK> wrote:

> I have just posted 4.25-12 which solves this. The only difference is
> in Log.pm.

Thanks, that has indeed fixed it.

Mike.
Permalink | Reply | 0 comments |
headers
Martin Sapsed | 1 Dec 2003 12:16
Picon
Favicon

Re: icheckd vs. SAVI-Perl

Robin M. wrote:
> I am testing sophos and initially I set it up to run as a daemon with the
> icheckd interface, but after reading the mailscanner docs it appears to
> suggest that not installing icheckd and compiling the Savi-Perl module
> instead. Are there any benefits to running sophos with SAVI-Perl rather
> than running icheckd.

 From my experience, all I get from icheckd is reporting of stuff from
windows clients. I don't really see it fitting into the MailScanner
equation at all?

As far as I can see, the only question with Sophos is whether to use
sweep or savi-perl?

Cheers,

Martin

--
Martin Sapsed
Information Services               "Who do you say I am?"
University of Wales, Bangor             Jesus of Nazareth
Permalink | Reply | 1 comment |
headers
Martins Smilga | 1 Dec 2003 13:02
Favicon

Mailscanner with Debian 3 testing

Hello,

May be somone have expierence with mailscanner how to install on Debian
testing version.

I have Spammassin + Sendmail.

I installed mailscanner from apitude,
I can not find any detailed documentation how to install mailscanner on
Debina with sendmail.
(http://www.sng.ecs.soton.ac.uk/mailscanner/install/sendmail.shtml)
I can find where I can change these senttings (script).

May be there is other way how to put mailscanner + Debian+ sendmail

Martins
Permalink | Reply | 5 comments |
headers
Robin M. | 1 Dec 2003 14:31
Picon
Favicon

Re: icheckd vs. SAVI-Perl

On Mon, 1 Dec 2003, Martin Sapsed wrote:
>  From my experience, all I get from icheckd is reporting of stuff from
> windows clients. I don't really see it fitting into the MailScanner
> equation at all?
>
> As far as I can see, the only question with Sophos is whether to use
> sweep or savi-perl?
>
Hi I realize now the purpose of icheckd. I had misunderstood the purpose
of it. I did assume that it was part of the sophos virus checking scenario
when in fact it was just using the command line sweep. I have since
started using the SaVi interface. Thanks for this clarification.

cheers.
Permalink | Reply | 0 comments |
headers
Jim Levie | 1 Dec 2003 14:47

Re: [OT] MS + Trend InterScan Virus Wall

On Fri, 2003-11-28 at 17:03, Robert A. Thompson wrote:
> or the appropriate redhat/fedora release that RHEL is built from.
>
> --rat
>
>
> On Fri, 2003-11-28 at 16:17, Michele Neylon :: Blacknight Solutions
> wrote:
> > Can't you simply grab it from MySQL.com ?
> >

I believe a better solution is to build the server components from the
RHEL SRPMS, which is what I did before they relented and placed those
components in the "Extras".
--
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
The instructions said to use Windows 98 or better, so I installed RedHat
   Jim Levie                                 email:jim <at> entrophy-free.net
Permalink | Reply | 0 comments |
headers
Ron Campbell | 1 Dec 2003 15:13
Picon

maps-rbl+

This is probably not of interest  to those who are not in ac.uk

The MAPS-RBL+ list is actually the union of 4 separate lists (RBL, DUL,
RSS and OPS).

For details, see

http://www.ja.net/CERT/JANET-CERT/mail/mail-abuse/rbl-plus-guide.html#available

  One of these - the "dial-up list" is probably our
main reason for SPAM "false positives" at the moment. This is usually
  down to people working from home via an ISP.   Is it possible
to configure MS to use only some of the individual MAPS-RBL+ lists ?

Or should we just give up on these lists and rely on SpamAssassin - all
the "false positives" which I have seen, have negative SA scores so it
is clearly getting these right. Of course, there will be other cases
which the lists get right and SA misses ?

             Thanks ...  Ron
Permalink | Reply | 2 comments |
headers
Errol Neal | 1 Dec 2003 15:39

Re: Mailscanner with Debian 3 testing

At 07:02 AM 12/1/2003, Martins Smilga wrote:
>Hello,
>
>May be somone have expierence with mailscanner how to install on Debian
>testing version.
>
>I have Spammassin + Sendmail.
>
>I installed mailscanner from apitude,
>I can not find any detailed documentation how to install mailscanner on
>Debina with sendmail.
>(http://www.sng.ecs.soton.ac.uk/mailscanner/install/sendmail.shtml)
>I can find where I can change these senttings (script).
>
>May be there is other way how to put mailscanner + Debian+ sendmail
>
>
>Martins

Exactly what are you having problems with?

Errol Neal
Permalink | Reply | 2 comments |
headers
Szemerédy Gábor | 1 Dec 2003 15:33
Picon

MailScanner and RedHat 6.0

Hello!
We are using RH 6.0 , perl-5.00503-2 , and sendmail 8.9.3 and would like
to
use Mailscanner with clamav.
We tryed MailScanner-3.27-1.i386.rpm and 4.24-5.rpm.tar.gz without any
success.
There are to many depependencie errors during the installation.
Is somebody running MailScanner on RH 6.0 and which release?
Thanks
Permalink | Reply | 12 comments |
headers
Rose, Bobby | 1 Dec 2003 15:44

Re: maps-rbl+

DULs don't effect people sending emails from home unless they are
running their own smtp server at home.  If people are relaying their
mail thru their ISP like they're supposed to then it's not a problem.
The only issue with DULs is businesses with their own mail servers and
using dialup or broadband for their internet connection.  But then again
ISPs tend not to want people using the cheaper residential services to
run a business and want them pay a extra for static IPs and such which
usually are not in the DULs.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER <at> JISCMAIL.AC.UK] On
Behalf Of Ron Campbell
Sent: Monday, December 01, 2003 9:14 AM
To: MAILSCANNER <at> JISCMAIL.AC.UK
Subject: maps-rbl+

This is probably not of interest  to those who are not in ac.uk

The MAPS-RBL+ list is actually the union of 4 separate lists (RBL, DUL,
RSS and OPS).

For details, see

http://www.ja.net/CERT/JANET-CERT/mail/mail-abuse/rbl-plus-guide.html#av
ailable

  One of these - the "dial-up list" is probably our main reason for SPAM
"false positives" at the moment. This is usually
  down to people working from home via an ISP.   Is it possible
to configure MS to use only some of the individual MAPS-RBL+ lists ?
(Continue reading)

Permalink | Reply | 0 comments |

Gmane