Search found 11 matches

by dieter
16 Feb 2016, 12:58
Forum: MailScanner
Topic: Viruses not being blocked.
Replies: 2
Views: 2646

Re: Viruses not being blocked.

Just an update for somebody that would have the same problem:

In your mailscanner config, look for:
Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* *Phish*

Remove Sane*UNOFFICIAL if you want to block all spam-virus hits if you have the Sanesecurity signatures loaded.

Regards,

Dieter
by dieter
16 Feb 2016, 11:03
Forum: MailScanner
Topic: Viruses not being blocked.
Replies: 2
Views: 2646

Viruses not being blocked.

Hi all, Mailscanner is not blocking viruses. I have checked the virus.delivery.rules (all set to no) and virus.scanning.rules (all set to yes) Example: MailScanner: Found spam-virus Sanesecurity.Jurlbl.0a6339.UNOFFICIAL in 1aVcxq-0004ft-J6 2016-02-16 12:34:39 1aVcxq-0004ft-J6 <= hello@neonnexus.com ...
by dieter
05 Jun 2014, 15:33
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 7937

Re: SMTPAUTH_RESTRICT

Working!! Thank you very much.
by dieter
05 Jun 2014, 14:13
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 7937

Re: SMTPAUTH_RESTRICT

When I look at the log when sending via webmail, there is no host IP, but it authenticates, so I think that would be the problem: 2014-06-05 15:05:16 1WsXM4-0006TY-JI <= test@xyz.com H=(http://www.xyz.com) [::1]:50615 P=esmtpa A=dovecot_login:test@xyz.com S=753 id=1a66167ab980730eb88bdc7434ab2ff9.sq...
by dieter
05 Jun 2014, 13:16
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 7937

Re: SMTPAUTH_RESTRICT

Hi, I checked all you listed. Same error on 2 different servers. On your Nr. 1, it not an return message that the person gets, but a page error at the top of squirrelmail. So all I get in the exim_mainlog is : 2014-06-05 14:14:16 SMTP connection from [::1]:43096 (TCP/IP connection count = 6) 2014-06...
by dieter
05 Jun 2014, 11:31
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 7937

Re: SMTPAUTH_RESTRICT

Just tried it, still giving the same error.
by dieter
05 Jun 2014, 10:00
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 7937

SMTPAUTH_RESTRICT

Hi all, I enabled SMTPAUTH_RESTRICT and followed the instructions as per the readme. All was working fine, and the amount of SMTP brute force attacks went to zero, and the countries I specified could relay. But then clients phoned and said they cannot email via webmail. I tested and it gives me the ...
by dieter
24 Apr 2014, 06:43
Forum: General Discussion (cxs)
Topic: STICKY rules for CXS.XTRA regs.
Replies: 67
Views: 64190

Re: STICKY rules for CXS.XTRA regs.

Hi Sergio,

I will remember in the future. Thank you it works, found a couple of sites infected with this, all Joomla sites.

Thank you,

Dieter
by dieter
23 Apr 2014, 11:25
Forum: General Discussion (cxs)
Topic: STICKY rules for CXS.XTRA regs.
Replies: 67
Views: 64190

Re: STICKY rules for CXS.XTRA regs.

Hi all, Could somebody please help me create a regex for this. I have found it in a couple of sites, and they use it to alter .js files. if(!empty($_COOKIE['__utma']) and substr($_COOKIE['__utma'],0,16)=='3469825000034634'){if (!empty($_POST['msg']) and $msg=@gzinflate(@base64_decode(@str_replace(' ...
by dieter
22 Mar 2011, 06:04
Forum: MailScanner
Topic: Long Subject spam
Replies: 10
Views: 9401

Re: Long Subject spam

Here are a few examples, some of them score high, and other low or 0: 1 low score : Received: from col0-omc4-s15.col0.hotmail.com ([65.55.34.217]) by xxxxxx with esmtp (Exim 4.69) (envelope-from <ivonnejysjqyrm@hotmail.com>) id 1Q1pTS-0005Y4-70 for xxxxxx ; Tue, 22 Mar 2011 02:29:26 +0200 Received: ...