headers
David Shaw | 1 Apr 2004 01:00
Picon

Re: Memory Usage {Scanned}

I thought the same thing, but Ricks comment are correct.

Here is my output. Look at the 2nd line under free. I have 781256 free.
12-9-14-103 rules]# free
             total       used       free     shared    buffers     cached
Mem:       1030908     977196      53712          0     215396     512148
-/+ buffers/cache:     249652     781256
Swap:      2040244      23628    2016616

David
--
Open WebMail Project (http://openwebmail.org)

---------- Original Message -----------
From: Kai Schaetzl <maillists <at> CONACTIVE.COM>
To: MAILSCANNER <at> JISCMAIL.AC.UK
Sent: Thu, 1 Apr 2004 00:36:59 +0200
Subject: Re: Memory Usage {Scanned}

> Rob Burtelow wrote on         Wed, 31 Mar 2004 10:58:02 -0600:
> 
> > I'm running MailScanner on a RedHat ES 3 box and having problems with
> > really high memory usage, almost to the point of running out.
> >
> 
> Apart from Ricks comment, even if you *had* a memory problem there's
> nothing in your posted data which would indicate that Mailscanner causes
> the problem.
> 
> Kai
(Continue reading)

Permalink | Reply | 1 comment |
headers
Mike Kercher | 1 Apr 2004 01:30

Re: Logging recipient?

You might suggest this to the developers of MailWatch as a feature request.
They already have quite a few nice reports.

Mike

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER <at> JISCMAIL.AC.UK] On Behalf Of Jørn-Morten Innselset
> Sent: Wednesday, March 31, 2004 4:41 PM
> To: MAILSCANNER <at> JISCMAIL.AC.UK
> Subject: Re: Logging recipient?
> 
> That's already in there, and all it gives is the recipient 
> _domain_, not the user part:
> 
> Message 9366 from 194.19.1.186 (ramarshall <at> voyager.net) to 
> kjentfolk.no is spam, SpamAssassin (score=28.018, required 6, 
> autolearn=spam, BANG_EXERCISE 2.94, BANG_GUARANTEE 1.00, 
> BAYES_99 5.40, CLICK_BELOW_CAPS 0.50, GUARANTEED_STUFF 2.30
> 
> 
> And the virus scanners (f-prot and clamav) doesn't log the 
> recipient at all.
> 
> jmi
> 
> 
> ----- Original Message -----
> From: "Ugo Bellavance" <ugob <at> CAMO-ROUTE.COM>
> To: <MAILSCANNER <at> JISCMAIL.AC.UK>
(Continue reading)

Permalink | Reply | 1 comment |
headers
Pete | 1 Apr 2004 01:46
Picon

Caching DNS

HI there, slightly OT, but i want to use a caching name server on Free
BSD. In Red Hat this was simple as apt-getting the caching name server
package.

In FreeBSD there are heaps of options in ports, one of them being
rbldnsd - name server designed for RBLs - since this server is a
Scanning gateway only - is there any point going for somethign specific
like this, or just use named and put my old caching config in there ?

Is there any other RBL/DNS kit worth looking into ?

Thanks
Pete
Permalink | Reply | 1 comment |
headers
David Shaw | 1 Apr 2004 01:54
Picon

Re: Caching DNS {Scanned}

Do want to cache or do a zone transfer? If you just want to cache then your
dns server should cache the return until the TTL has beed reached.

David
--
Open WebMail Project (http://openwebmail.org)

---------- Original Message -----------
From: Pete <pete <at> eatathome.com.au>
To: MAILSCANNER <at> JISCMAIL.AC.UK
Sent: Thu, 1 Apr 2004 09:46:17 +1000
Subject: Caching DNS {Scanned}

> HI there, slightly OT, but i want to use a caching name server on
> Free BSD. In Red Hat this was simple as apt-getting the caching name
> server package.
>
> In FreeBSD there are heaps of options in ports, one of them being
> rbldnsd - name server designed for RBLs - since this server is a
> Scanning gateway only - is there any point going for somethign specific
> like this, or just use named and put my old caching config in there ?
>
> Is there any other RBL/DNS kit worth looking into ?
>
> Thanks
> Pete
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
(Continue reading)

Permalink | Reply | 0 comments |
headers
Mark Steudel | 1 Apr 2004 02:05

Looking for sample log of MailScanner filtering spam

Hi All,

I was wondering if someone could post a sample log of theirs showing
MailScannr filtering a spa message. I've enabled spam checking and it
doesn't seem to be filtering any spam. But I'm expecting different results
than what happen ...

Thanks, Mark
Permalink | Reply | 1 comment |
headers
Mark Steudel | 1 Apr 2004 02:22

Re: Looking for sample log of MailScanner filtering spam

Ok that was a very poorly worded email ... I apologize. I've actually
checked some of our accounts that get tons of spam, and they are being
flagged correctly! You don't know how exciting this is :)

A different question. I tried at one point to make it so that emails flagged
as virus weren't delivered, but it seemed that the mail scanner kept dying
... Any known gotchas?

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER <at> JISCMAIL.AC.UK] On Behalf
Of Mark Steudel
Sent: Wednesday, March 31, 2004 4:06 PM
To: MAILSCANNER <at> JISCMAIL.AC.UK
Subject: Looking for sample log of MailScanner filtering spam

Hi All,

I was wondering if someone could post a sample log of theirs showing
MailScannr filtering a spa message. I've enabled spam checking and it
doesn't seem to be filtering any spam. But I'm expecting different results
than what happen ...

Thanks, Mark
Permalink | Reply | 0 comments |
headers
shanna leonard | 1 Apr 2004 02:35
Picon

Re: Check SpamAssassin If On Spam List -RBL setup.

Thanks!

Julian Field wrote:

> At 19:26 26/03/2004, you wrote:
>
>>
>>
>> I am confused about the following comments in MailScanner.conf:
>>
>> # If a message appears in at least this number of "Spam Lists" (as
>> defined
>> # above), then the message will be treated as "High Scoring Spam" and so
>> # the "High Scoring Spam Actions" will happen....
>> Spam Lists To Reach High Score = 2
>>
>> # If the message sender is on any of the Spam Lists, do you still want
>> # to do the SpamAssassin checks? Setting this to "no" will reduce the
>> load
>> # on your server, but will stop the High Scoring Spam Actions from ever
>> # happening.
>> # This can also be the filename of a ruleset.
>> Check SpamAssassin If On Spam List = yes
>>
>>
>> the two coments seem to contradict each other.
>
>
> Oops, my mistake. The first comment is correct, the 2nd one isn't.
>
(Continue reading)

Permalink | Reply | 0 comments |
headers
Gerry Doris | 1 Apr 2004 03:20
Favicon

Re: Sendmail Sender Verification

On Tue, 30 Mar 2004, Rose, Bobby wrote:

> I've been using milter-sender with sendmail for quite awhile to do this
> with good success.
>
> http://www.snert.com/Software/milter-sender/
>
> But it still won't stop a spammer or virus from using a valid email
> address but will stop bogus ones.  It also can do some other checks on
> the sending system.

I've been having trouble getting this work.  Specifically I'm having
problems with how to define the milter-socket.  I assume I need to
add Milter-Socket=/var/lib/milter-sender/socket in sendmail.mc somehow?

I've copied the sample milter-sender.mc into sendmail.mc and rebuilt
sendmail.cf.  The default INPUT_MAIL_FILTER macro specifies
/var/lib/milter-sender/socket.  Do I create an empty file called socket in
/var/lib/milter-sender?  If so, who should own it and what should be the
permissions?

--
Gerry

"The lyfe so short, the craft so long to learne"  Chaucer
Permalink | Reply | 6 comments |
headers
Mike Kercher | 1 Apr 2004 03:36

Re: Sendmail Sender Verification

I had some difficulty too, but got it figured out:

In milter-sender.cf (next to last line):

MilterSocket=unix:/var/lib/milter-sender/socket
#   (REQUIRED) the sendmail/milter socket type & name; see INPUT_MAIL_FILTER

I also changed this line:

MailLogDetail=4

so I could see it working.

service start milter-sender
service MailScanner restart
tail -f /var/log/maillog

Mike

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER <at> JISCMAIL.AC.UK] On Behalf Of Gerry Doris
> Sent: Wednesday, March 31, 2004 7:20 PM
> To: MAILSCANNER <at> JISCMAIL.AC.UK
> Subject: Re: Sendmail Sender Verification
>
> On Tue, 30 Mar 2004, Rose, Bobby wrote:
>
> > I've been using milter-sender with sendmail for quite awhile to do
> > this with good success.
(Continue reading)

Permalink | Reply | 5 comments |
headers
Pete | 1 Apr 2004 03:42
Picon

MailScanner load testing advice

My colleague has written a small PHP script that will send a bunch of
messages to my mailscanner machine. I was going to try and see how many
i can send it before it starts complaining (eg 1000s, 10000s 1000000s
etc) since my mailscanner machine and other test machine are both on the
same lan.

I have used the details from this test - but i wonder how stressful it
is on MailScanner recieving the same email over and over ? as long as it
triggers spam ruiles then its providing some stress?
http://hyvatti.iki.fi/~jaakko/spam/unkillable.txt

BUT i need to set up the output to go nowhere - how do i send a legit
email/spam, let it get scanned and placed back in the postfix incoming
queue, but not delivered, just deleted? I am using the single postfix
and freebsd. If there a way, if i specificied an alias pointed at
dev/null in the aliases file and emailed alias <at> localhost ? What is the
best way to do this?

Thanks
Pete
Permalink | Reply | 4 comments |

Gmane