hMailServer forum

Tooms

That sound good

it is because the Spamdloaderservice will start the spamd.exe with the same account as it self and it seem that the spamd.exe your are using dont like to run under the local system account.

Tooms

the information you have posted seem good and there is no clear hint to why the spamd.exe is crashing. One idea is that it is maybe what user account the spamd is running with, as when you start it from commandline the it is started with your user account and when the spamdloaderservice is starting ...

Tooms

Hi have now check up on the jam-software version of spamd and found that it will not start the right way and can not find it config files if it is not started from the folder that it is installed in. so i have now update the spamdloader so it allways set the working folder to be the folder where the...

Tooms

Hi guys I have only used my Spamdloaderservice app with the sawin build, so i have not tryed it with the aother build your taking about here... sorry but time is limit. my spamdloaderservice is simply running a commandline and monitor that the app started is up and running, so there is no black magi...

Tooms

try look at my app SpamDloaderService there is design to run spamd and reload when there is errors.

http://www.tooms.dk/software/spamdloade ... efault.asp

Tooms

yes, as you can see there is a big diff. between the RBL's So if some of the slow ones are used in SA that is will slow down the mail process as it has to wait for the slow response or in the end do a timeout, so with this information you can compare this with the RBLs that SA use and if it is to sl...

Tooms

If you close the GUI app and wait 10 minute, then look at the eventlog has there then been log a "config has changed" ? What is your OS ? Those events show up every minute regardless of the GUI app being open or closed. If I reboot and come check the server an hour later, I'll have 60 of those entr...

Tooms

to verify the speed of the RBL servers, i have a tool for that call IPrblBenchmark there can benchmark the lookup speed for each RBL server you like.

http://www.tooms.dk/software/iprblbenchmark/default.asp

Tooms

Did you also install mswspamc.1.2007.03.15.zip? Nope, can't say I even know what that is. In a nutshell, I searched the "Tips & Tricks" forum topic, and found this thread: http://www.hmailserver.com/forum/viewtopic.php?f=12&t=15746 From there, I pieced together what I needed as the thread isn't rea...

Tooms

In SpamDloaderConfig SpamD tab - where is SpamD.exe application: C:\SpamAssassin\spamd.exe - what commandline: -i 127.0.0.1 -p 783 -m 10 --round-robin --max-conn-per-child=5000 --min-children=5 --syslog="c:\spamd.log" - process name to monitor: spamd SpamC tab - IP: 127.0.0.1 - port: 783 I did noti...

Tooms

about the SpamDloader and logfile, i have put this into my todo list for it so this maybe get fixed later on. Thanks, when I'm done testing I'll start using SpamDloader again. I need to know If I can change to the "-L" switch and have it work? I think it will work just fine with the "-L" commandlin...

Tooms

I'm finally done with testing. I descoverd the reason with SpamAssassin taking all that time. I desabled the network features and I get less the 2 seconds to scan an email. My conclusion: There is nothing wrong with SpamAssassin being slow! SA is waiting for the network to respond. So network conge...

Tooms

Log from HMS is only displaying the HMS side of things and as you can see it only log that it sent a mail to SA and got a response after 24 sec., this dont tell much about what SA has done and what errors there was. Log from SpamDloader is only display a log from the internal logic of SpamDloader an...

Tooms

I guess that using the Windows port will be slow. After thinking about it (or rather trying to remember), it is slower, but not that slow. 20 sec. is long, at least if doesn't run on the oldest hardware. I have seen SpamD taking that long on a 433 Mhz Celeron but if I remember right the processing ...

Tooms

How did you port ClamAv to Windows? Do you think You could make a better SA port than already exists using the same method? After all there hasn't been an update in ages. It appears this windows port is now abandonware. I am sure that Nico allready has made the port the best way he can and there is...

Tooms

I've also noticed that it takes SA over 20 seconds to run by it's self. I'll have more observations soon. wow that was slow, i have a VM with a linux and SA and when i send a mail to it via a SpamC client then it scan in 1 sec and some times 2 sec. I think you better try to debug your SA setup and ...

Tooms

Accidentally I came across this thread http://www.hmailserver.com/forum/viewtopic.php?f=10&t=16635 which is about AV scanner timeouts in hMS. Now I'm somewhat confused if there is a hardcoded 30 sec. timeout or not. Could someone who knows for sure maybe shed some light? Best regards, Nico will be ...

Tooms

Basically I will write a rule the looks for the "X" header for clamAV I thought clamav produced an X header but it doesn't. Also there is a limitation with HMS rules that would limit any email moving after rescanning. This would have to be done with a script instead. The best option to overcome thi...

Tooms

All the information about the commandline and exitcode can be found in the docs of mswclamdscan. mswclamdscan.exe /mail:FullPath2MailFile.eml Exitcode 0 = no bad things found Exitcode 1 = Virus found Exitcode 2 = Some error happen. Thanks for that. But I need this for MSWSpamDScan. also how would I...

Tooms

SpamD ...But i understand that you like to scan incoming mails and reject the bad ones before they get in, I think can easly be don as i have seen other scripts on the forum where there is run a .exe and then use it exitcode to do the action. I have a script VBScript to run an *.exe or *.bat file. ...

Tooms

I just had a "Gregory House" moment! The biggest problem is ClamAV occasionally times out while reloading it's DB Not sure what "Gregory House moment" means but let me quote myself: However, it might happen that ClamD is reloading it's databases if there was a update at the time a connection comes ...

Tooms

Your right about this being slightly of topic but seeing as how you and Tooms probably get email notifications a new thread would not be desirable at this time. I guess Tooms and me would quickly monitor the new thread as well ;) However, as Martin stated that the feature will be integrated this po...

Tooms

It does, but the upcoming hMS interaction with ClamAV probably won't and that's what I was referring to (and what this thread is about). Your right about this being slightly of topic but seeing as how you and Tooms probably get email notifications a new thread would not be desirable at this time. I...

Tooms

However, it might happen that ClamD is reloading it's databases if there was a update at the time a connection comes in and during this time it doesn't scan anything (of course). Depending on the hardware it might also take way more than 30 sec. to load and unpack databases, specially if there are ...

Tooms

So the "load sharing" is simply that it pick a random server from the server list and if that fails to give a good respone back then it will pick another server from the list until it get a good response or it hit the max retry limit, but all limits and timeout value can be config from the GUI Ther...

Tooms

"ClamDscan" is the client there is using the "clamD" server over the network When using the ClamDscan client you then have to tell it where the server is on the network. My app MSWclamdscan is a clone of "clamDscan" but it is design to be used in highload mailscanner and can use multi clamd server ...

Tooms

"ClamDscan" is the client there is using the "clamD" server over the network When using the ClamDscan client you then have to tell it where the server is on the network. My app MSWclamdscan is a clone of "clamDscan" but it is design to be used in highload mailscanner and can use multi clamd server ...

Tooms

mattg wrote:
Tooms wrote:
tBB wrote:I think what he was asking for is if there's a way to pass the name of a found malware back to hMS so that the sender or admin can be notified.

Best regards

Nico
Yes that what i was looking for
That's what I expected.

I don't believe that this is NOT currently possible.

Matt

Thanks

Tooms

tBB wrote:I think what he was asking for is if there's a way to pass the name of a found malware back to hMS so that the sender or admin can be notified.

Best regards

Nico

Yes that what i was looking for

Tooms

the mswclamdscan plugin can return a logfile with one log line with the status and virus name, do you know how to return this information back to hmailserver and use it in hmailserver like in a reply mail to sender or/and as information to the mailadmin. http://www.hmailserver.com/documentation/lat...

Tooms

3. In the textbox "scanner executable" inset "d:\mswclamdscan\mswclamdscan.exe /mail:"%FILE%"" note the qwote around the %file% must be there as the mail path has space in it. I got mswclamdscan working. Nice job! The only bug was your step three. It didn't work with the two sets of double quotes. ...

Tooms

For now the database can only be a Mircosoft database like msde, mssql 20xx My web site uses Apache, php, and MySQL on Windows and I have years invested in knowing and working with these applications. When you include code for MySQL I'll give the dynamic web page a try. I'll try mswclamdscan right ...

Tooms

Is this a ready made script/web page or do I have to incorporate the code into an existing web page? What I meant to ask was: Can this be made in a non *.ASPX page such as php or HTML? The data is simple stored in a standard MS database so you can make a page in any format you like as long as it ca...

Tooms

Webpage with virus found. If you download my mswclamdscan and set it up then you in the config gui will see a part to setup a database for the logging and when the mswclamdscan detect a virus when scanning then it will read the config from the reg and if it is config to log the information then it w...

Tooms

Hello all, I'm missing something on how to implement HMS to use ClamAV using tcp/ip. What do you use in the Scanner executable field? How would do this when ClamAV is on a different network server? Do I need Tooms's tool on the HMS server to accomplish this? Thanks my tool MSWclamDscan is only the ...

Tooms

If the 'TCPSocket' and 'TCPAddr' are changed to direct to a different ClamAV server does the localhost clamD need to be running and data base need to be updated? Can the localhost 'clamDscan' successfully work with a LAN Linux install of ClamAV? Is there a third party signature program for ClamAV L...

Tooms

I downloaded the file (mswclamdscan.1.2009.11.09.2000_RC1.zip) from tooms web site: http://www.tooms.dk and read the doc file. How-to Install the MSWClamDscan plug-in for Mailsweeper 5.x Single server This looks pretty slick. I'm just curious if it's ready for production? I'm also curious if the "c...

Tooms

it looks like your code is just calling the clamscan.exe what about make editable so you just can enter the commandline and maybe use my exe. Is there any benefit in using your tool compared to ClamDScan? Best regards, Nico the Clamdscan.exe is just trying to send the file to the server and if this...

Tooms

Officially supported means, after version 0.96 the ClamAV developers plan to provide Win32 executables again (also by using Gianluigi's Win32 compatibility patches). This because pages like Virustotal (which was btw. using my version as well) are since a while obliged to only use 'official' version...

Tooms

I like the idea of integrating a ClamAV client into hMailServer. Not having to start processes to do the scanning would improve performance. I know very little about the interface between the ClamAV client and server though. I have some vague memory of having read some source code on how to do it, ...

Tooms

The default commandline options is for "high load" mail scanner so it is maybe a good idea to fine tune them to better fit your needs and so it only use the memory on your system there is need. Any suggestions? I don't have a high load Mail server. not sure about this settings so you have to monito...

Tooms

I just installed your spamdloaderservice. Very nice program! No problems at all. Spamd is using 293MB of memory. using the default command line parameters. Thanks again. The default commandline options is for "high load" mail scanner so it is maybe a good idea to fine tune them to better fit your n...

Tooms

okey and thanks for the nice word, just glad to help

Tooms

How much memory SpamD is using is depending alot on what commandline options you have started it with and how many child-threads it has running. my spamd.exe on high-load mailscanner is using 380mb to control your spamd.exe then try look at my app there is design to help with this http://www.tooms.d...

Tooms

Maybe a crlf between RECEIVED: and MAIL FROM so Hmailserver see it as a empty line ?

Tooms

try look at this thread
http://hmailserver.com/forum/viewtopic.php?f=8&t=15553

Tooms

Sorry about that, the web server is online now.

Tooms

Tooms

if it is to run the SpamD.exe then try look at my app there is design to run the spamd.exe and check it is good

http://www.tooms.dk/software/spamdloade ... efault.asp

Tooms

Tooms: I would love it if the core ClamAV development would absorb that code so this feature could be implemented. Unfortunately, the current ClamAV code (without this mod) does not allow for this. That would be a terrific improvement for ClamAV. I have a quick question, though. Does the MSWclamDsc...

Tooms

May be this tutorial is helpful to install Spamd as Service on Windows: 0. Get srvany.exe (follow http://www.iopus.com/guides/srvany.htm) 1. Create a new Windows User: a. Right click the My Computer icon on the desktop and press Manage b. Go to local users and groups and create a new user named Spa...

Tooms

Technically, you cannot do that the same way that it is done with SpamD. The client code for ClamAV passes the file path as a string to ClamD. It does not pass the entire file like SpamC does to SpamD. So you cannot offload ClamAV the same way to another machine. I wish you could, but you can't. Th...

Tooms

I have made a service there is design to make sure that a SpamD.exe is running and working well. Maybe you can use that to control your SpamD.exe Link to the service http://www.tooms.dk/software/spamdloaderservice/default.asp The app was one that i made when i was making this guide there is telling ...

Search found 52 matches