... What I often do is something like tail -f mainlog | sed '/.* H=[^[]*[[]\([^]]*\).*/!d;s//ping -c 1 \1/' | sh Tony. -- f.a.n.finch <dot@...>...
Tony Finch
dot@...
Jul 28, 2004 9:07 am
69829
... You should be able to set this during dpkg configuration. from the command prompt type dpkg-reconfigure exim4-config One of the questions it asks is about...
Patrick Beard
patrick@...
Jul 28, 2004 8:32 am
69828
... We are blocking based upon a number of issues, some of which were being done before the outbreak. o helo check on our domain.name A ton of them present...
Kevin W. Reed
hostmaster@...
Jul 28, 2004 8:02 am
69827
This is a multi-part message in MIME format. -- [ Picked text/plain from multipart/alternative ] To Whom It May Concern: I am trying to configure exim4 so that...
Fazzina, Angelo
angelo.fazzina@...
Jul 28, 2004 7:58 am
69826
... we do this as well. ... replyto doesn't exist, bounces to mailer-daemon are blocked, but we allow postmaster. I'm not too worried about my own mailbox...
Kjetil Torgrim Homme
kjetilho@...
Jul 28, 2004 4:25 am
69825
... I should point out that I did get a response from Sophos yesterday, and they told me that these "executables" were just random noise, and harmless. I'm...
Kjetil Torgrim Homme
kjetilho@...
Jul 28, 2004 4:12 am
69824
... I just tested it under FC2 as a normal user. No problems using PAM here :) Nathan. -- Nathan Ollerenshaw - Unix Systems Engineer ValueCommerce -...
Nathan Ollerenshaw
nathan@...
Jul 28, 2004 2:31 am
69823
... How did you test it? Did you try running exim -d+expand -be to test the expansion? Using exim's debugging can really help when you're trying to figure out...
Nathan Ollerenshaw
nathan@...
Jul 28, 2004 2:30 am
69822
[Try it again with the subscribe user this time] ... time (UTC-6). ClamAv probably had it shortly also, but I don't know. I haven't been hit with it yet. I...
Kevin Reed
listaccount@...
Jul 27, 2004 9:20 pm
69821
I am getting them as Mydoom.M so far. I had to update my clamav since I was on a older version and the main.cvd was not updating correctly. Now that I am on...
lists
lists@...
Jul 27, 2004 9:12 pm
69820
... ClamAV is calling it Mydoom.M, I think, rather than .o - we've been catching huge numbers of them with it since yesterday, but maybe you're not using a...
Stephen Gran
steve@...
Jul 27, 2004 9:04 pm
69819
... Well, I know Mcafee's dailydats had it when we got hit at 10:00am local time (UTC-6). ClamAv probably had it shortly also, but I don't know. I haven't been...
Dan Egli
dan@...
Jul 27, 2004 9:00 pm
69818
... If you mean what I think you mean then the shellscript answer would be something like: mangle_ip() { while read ip do my_command "$ip" done } tail -f...
Julian King
jpk28@...
Jul 27, 2004 8:28 pm
69817
... I believe if you pipe the output (stream of IPs) to: xargs -n 1 COMMAND where COMMAND is your command that takes one IP as a parameter; you'll get what you...
Michael F. Sprague
mfs@...
Jul 27, 2004 8:26 pm
69816
OK - I'm running tail on exim logs and extracting IP addresses that match a specific criteria. So I have a stream of raw IP addresses coming in that I want to...
Marc Perkel
marc@...
Jul 27, 2004 8:21 pm
69815
Well, the problem is it doesn't work. the sql query works fine with a {no}{yes} and the header check works fine with {yes}{no} separately. ... -- -- ## List...
jmab@...
Jul 27, 2004 5:08 pm
69814
... In fact you don't need the verify_only accept router as I originally suggested, so long as you only have address_data for the system_aliases router. The...
Tony Finch
dot@...
Jul 27, 2004 4:18 pm
69813
... Interesting idea. Maybe I can even use this to find out if the recipient is a system alias or not. That would solve my dilemma as well. Thanks! -tor -- ##...
Tor Slettnes
tor@...
Jul 27, 2004 4:12 pm
69812
hello i am using exim4.41 and i meet the following problem when defining a condition: condition = ${if and { \ {eq {'1'} \ {${lookup mysql{SELECT...
jmab@...
Jul 27, 2004 3:59 pm
69811
... Is it actually spamd chomping your CPU? What does "top" say? Is there anything in the logs? (I'm just wondering whether you are actually receiving enough...
Tim Jackson
lists@...
Jul 27, 2004 11:56 am
69810
... I now worked out that the bug I was dimly remembering was in 4.31, fixed in 4.32. ... Hmmm, we've got just one example of that symptom, in all the last ~...
Alan J. Flavell
a.flavell@...
Jul 27, 2004 11:39 am
69809
Tom, I only check for message_size < 50K as can be seen from the config file: exiscan_spamd_condition=${if or{\ {eq...
Sujit Choudhury
S.Choudhury@...
Jul 27, 2004 10:59 am
69808
... Do you already limit spam scanning to "small" messages, i.e. smaller than ~100-200k? /tom -- ## List details at...
Tom Kistner
tom@...
Jul 27, 2004 10:58 am
69807
... If Exim is not running as root, then, when using PAM, it is not able to read /etc/shadow, and so it cannot authenticate users. One work-around is to run...
Anand Buddhdev
arb@...
Jul 27, 2004 10:57 am
69806
I am running exim which calls spamd from within exiscan. The spamd configuration is as follows: spamd -a -d -x -m 10. It is setup to scan only external mail....
Sujit Choudhury
S.Choudhury@...
Jul 27, 2004 10:57 am
69805
... I have tried this and it does not work. I am using fedora core 2 and the latest exim. I am unclear as to how exim pam and /etc/shadow interact. Basically...
Ron McKeating
R.J.Mckeating@...
Jul 27, 2004 10:34 am
69804
-- ... Not all. There are some with Message-ID header but the forged Outlook header is in all Messages. ... Greetings Michelle -- Linux-User #280138 with the...
Michelle Konzack
linux4michelle@...
Jul 27, 2004 8:58 am
69803
... Hmm, interesting! Your users are certainly well looked-after! ... No, not at all...what you're doing sounds perfectly reasonable. Well, except that you...
Tim Jackson
lists@...
Jul 27, 2004 8:56 am
69802
... <snip> ... Right. So when you said ... you actually meant that all messages with a forged Outlook header are found. A bit different? I believe they all...
Peter Bowyer
peter@...
Jul 27, 2004 8:43 am
69801
-- ... OK, I was looking in some of the Messages... ____ ( 'stdin' ) _____________________________________________________ / ... ...
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
