Re: F-Prot and Amavis, exim

["Mark Maas" <mark@menem.mine.nu>]

Hi,

Thanks for your answer, I rechecked to see if Amavis was sending any
responses outside my domain. As far as I can see it does not.

I also tried to telnet to 10204 but it was rejected. Actually F-Prot tries
several ports, I just limited the log entries I sent to one instance, the
whole log looks something like this:

Nov  6 22:04:08 menem amavis[8531]: (08531-08) FRISK F-Prot Daemon: Can't
connect to INET socket 127.0.0.1:10201: Connection refused, retrying (2)
Nov  6 22:04:08 menem amavis[8531]: (08531-08) FRISK F-Prot Daemon: Can't
connect to INET socket 127.0.0.1:10202: Connection refused, retrying (3)
Nov  6 22:04:08 menem amavis[8531]: (08531-08) FRISK F-Prot Daemon: Can't
connect to INET socket 127.0.0.1:10203: Connection refused, retrying (4)
Nov  6 22:04:08 menem amavis[8531]: (08531-08) FRISK F-Prot Daemon: Can't
connect to INET socket 127.0.0.1:10204: Connection refused, retrying (5)

Those are the only ports f-prot tries to connect to.

I'm missing something, what deamon are you referring to?

Thanks again,
Mark

----- Original Message ----- 
From: "Karsten M. Self" <kmself@ix.netcom.com>
To: <debian-user@lists.debian.org>
Sent: Friday, November 07, 2003 6:04 AM
Subject: Re: F-Prot and Amavis, exim

on Thu, Nov 06, 2003 at 11:31:38AM +0100, Mark Maas (mark@menem.mine.nu)
wrote:
> Hello all,
>
> I have the following system running smoothly for some tim enow:
> Exim3, Amavis, spamassassin and Clamav-antivirus.
>
> I just wanted to add F-prot to the list, so Installed it and uncommented
the
> appropriate lines in amavis.conf (so the scanner is actually used)

Please ensure that you *DON'T* enable the autoresponder option of any of
these virus filters.

With the amount of spoofed virus headers out and about these days, such
responses are more often than not spam, and dilute the significance of
legitimate messages.  You may find your site blacklisted as a spam
source.

Major AV vendors have been uncooperative in modifying their
configuration settings on this matter.

> But now i'm getting these is the syslog:
>
> Nov  6 10:31:45 menem amavis[441]: (00441-08) FRISK F-Prot Daemon: Can't
> connect to INET socket 127.0.0.1:10204: Connection refused, retrying (15)

Is the daemon open?

Can you telnet to the port?


Peace.

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
    "The ships hung in the sky in much the same way that bricks don't"
    -- HHGTG