Just an update for somebody that would have the same problem:
In your mailscanner config, look for:
Virus Names Which Are Spam = Sane*UNOFFICIAL HTML/* *Phish*
Remove Sane*UNOFFICIAL if you want to block all spam-virus hits if you have the Sanesecurity signatures loaded.
Regards,
Dieter
Search found 11 matches
- 16 Feb 2016, 12:58
- Forum: MailScanner
- Topic: Viruses not being blocked.
- Replies: 2
- Views: 4612
- 16 Feb 2016, 11:03
- Forum: MailScanner
- Topic: Viruses not being blocked.
- Replies: 2
- Views: 4612
Viruses not being blocked.
Hi all, Mailscanner is not blocking viruses. I have checked the virus.delivery.rules (all set to no) and virus.scanning.rules (all set to yes) Example: MailScanner: Found spam-virus Sanesecurity.Jurlbl.0a6339.UNOFFICIAL in 1aVcxq-0004ft-J6 2016-02-16 12:34:39 1aVcxq-0004ft-J6 <= hello@neonnexus.com ...
- 05 Jun 2014, 15:33
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT
- Replies: 13
- Views: 13201
Re: SMTPAUTH_RESTRICT
Working!! Thank you very much.
- 05 Jun 2014, 14:13
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT
- Replies: 13
- Views: 13201
Re: SMTPAUTH_RESTRICT
When I look at the log when sending via webmail, there is no host IP, but it authenticates, so I think that would be the problem: 2014-06-05 15:05:16 1WsXM4-0006TY-JI <= test@xyz.com H=(http://www.xyz.com) [::1]:50615 P=esmtpa A=dovecot_login:test@xyz.com S=753 id=1a66167ab980730eb88bdc7434ab2ff9.sq...
- 05 Jun 2014, 13:16
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT
- Replies: 13
- Views: 13201
Re: SMTPAUTH_RESTRICT
Hi, I checked all you listed. Same error on 2 different servers. On your Nr. 1, it not an return message that the person gets, but a page error at the top of squirrelmail. So all I get in the exim_mainlog is : 2014-06-05 14:14:16 SMTP connection from [::1]:43096 (TCP/IP connection count = 6) 2014-06...
- 05 Jun 2014, 11:31
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT
- Replies: 13
- Views: 13201
Re: SMTPAUTH_RESTRICT
Just tried it, still giving the same error.
- 05 Jun 2014, 10:00
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT
- Replies: 13
- Views: 13201
SMTPAUTH_RESTRICT
Hi all, I enabled SMTPAUTH_RESTRICT and followed the instructions as per the readme. All was working fine, and the amount of SMTP brute force attacks went to zero, and the countries I specified could relay. But then clients phoned and said they cannot email via webmail. I tested and it gives me the ...
- 24 Apr 2014, 06:43
- Forum: General Discussion (cxs)
- Topic: STICKY rules for CXS.XTRA regs.
- Replies: 71
- Views: 211831
Re: STICKY rules for CXS.XTRA regs.
Hi Sergio,
I will remember in the future. Thank you it works, found a couple of sites infected with this, all Joomla sites.
Thank you,
Dieter
I will remember in the future. Thank you it works, found a couple of sites infected with this, all Joomla sites.
Thank you,
Dieter
- 23 Apr 2014, 11:25
- Forum: General Discussion (cxs)
- Topic: STICKY rules for CXS.XTRA regs.
- Replies: 71
- Views: 211831
Re: STICKY rules for CXS.XTRA regs.
Hi all, Could somebody please help me create a regex for this. I have found it in a couple of sites, and they use it to alter .js files. if(!empty($_COOKIE['__utma']) and substr($_COOKIE['__utma'],0,16)=='3469825000034634'){if (!empty($_POST['msg']) and $msg=@gzinflate(@base64_decode(@str_replace(' ...
- 22 Mar 2011, 06:04
- Forum: MailScanner
- Topic: Long Subject spam
- Replies: 10
- Views: 13509
Re: Long Subject spam
Here are a few examples, some of them score high, and other low or 0: 1 low score : Received: from col0-omc4-s15.col0.hotmail.com ([65.55.34.217]) by xxxxxx with esmtp (Exim 4.69) (envelope-from <ivonnejysjqyrm@hotmail.com>) id 1Q1pTS-0005Y4-70 for xxxxxx ; Tue, 22 Mar 2011 02:29:26 +0200 Received: ...