p3scan-main Mailing List for P3Scan

..Life is definitely getting better!  http://news-trial.com/friends.page.php?jdshowtopic=34gi0

.Hi. My brother told me about your situation. I’m here to help you.  http://igaudi.net/com.friend.php?ewjgoogle=08i0

.Do you need help?  http://ger.org.br/com.friend.php?aid_hotmail=34ix2

...Hello! Thanks to this site I’m succeed in bed!  http://audacesidea.com.br/com.friend.php?culucky=97iz3

Hello,

I have a machine with CentOS5.5 running squid, dansguardian and iptables. I am trying to put P3scan for POP and SMTP proxying. But the redirect rules are just not working. 
This the rule I am using ( from README file )

iptables -t nat -A PREROUTING -p tcp --dport pop3 -j REDIRECT --to-ports 8110

Also, I would like to mention that the system is behind ADSL modem and wireless d-link router. 
Right now I am using MASQUERADE'ing rule in POSTROUTING chain. But this is not what I am looking at. 
Anyone who has had this issue?

Cheers,
Chaitanya.

I found that this error is usually if p3scan is already running or the port on which p3scan is configured is already in use.




________________________________
From: wyrd <wy...@ho...>
To: p3s...@li...
Sent: Wed, 23 June, 2010 2:47:21 AM
Subject: [p3scan-main] Err: can't bind to socket!

Hi

I am trying to use v3 p3scan with Ubuntu 10.04 and clamav 0.96, but I'm 
getting an "Err: Can't bind to Socket!" message.

I'd be grateful for any help.

Thanks

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
p3scan-main mailing list
p3s...@li...
https://lists.sourceforge.net/lists/listinfo/p3scan-main

On Tue, Jun 22, 2010 at 5:17 PM, wyrd <wy...@ho...> wrote:

> Hi
>
> I am trying to use v3 p3scan with Ubuntu 10.04 and clamav 0.96, but I'm
> getting an "Err: Can't bind to Socket!" message.
>
> I'd be grateful for any help.
>
> Thanks
>

try this as root to see if something is already attached to port 8110 (if
that is the port your using per default)

netstat -tap | grep 8110

-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

On Tue, 22 Jun 2010 22:17:21 +0100
 wyrd wrote:

> Hi
> 
> I am trying to use v3 p3scan with Ubuntu 10.04 and clamav 0.96, but I'm 
> getting an "Err: Can't bind to Socket!" message.
> 
> I'd be grateful for any help.

Check permissions on folder.
Please check/look clamd options too:
LocalSocket, LocalSocketGroup, LocalSocketMode, AllowSupplementaryGroups.


-- 
Maxim Britov

GnuPG KeyID 0x4580A6D66F3DB1FB              xmpp:ma...@mo...

Hi

I am trying to use v3 p3scan with Ubuntu 10.04 and clamav 0.96, but I'm 
getting an "Err: Can't bind to Socket!" message.

I'd be grateful for any help.

Thanks

how can i receive emails via tls?
my provider says that they only support tls, not ssl connection.

and when i want to receive emails over port 110 with TLS, p3scans log says:


root@proxyfuck:/# p3scan -d
10:07:49 p3scan[5863]: P3Scan Version 2.3.2
10:07:49 p3scan[5863]: Selected scannertype: basic (Basic file 
invocation scanner)
10:07:49 p3scan[5863]: Listen now on 0.0.0.0:8110
10:07:49 p3scan[5863]: Changing uid (we are root)
10:07:49 p3scan[5863]: Running as user: mail
10:07:49 p3scan[5863]: RX compiled succesfully
10:07:49 p3scan[5863]: p3scan.conf:
10:07:49 p3scan[5863]: pidfile: /var/run/p3scan/p3scan.pid
10:07:49 p3scan[5863]: maxchilds: 10
10:07:49 p3scan[5863]: ip: Any
10:07:49 p3scan[5863]: port: 8110
10:07:49 p3scan[5863]: targetip/port disabled
10:07:49 p3scan[5863]: user: mail
10:07:49 p3scan[5863]: notifydir: /var/spool/p3scan/notify
10:07:49 p3scan[5863]: virusdir: /var/spool/p3scan
10:07:49 p3scan[5863]: justdelete: disabled
10:07:49 p3scan[5863]: bytesfree: 10000
10:07:49 p3scan[5863]: demime: enabled
10:07:49 p3scan[5863]: scanner: /usr/local/bin/fpscan --archive=5
10:07:49 p3scan[5863]: virusregexp: (?=infected\:)[[:space:]]*(.*)$
10:07:49 p3scan[5863]: broken: disabled
10:07:49 p3scan[5863]: checkspam: disabled
10:07:49 p3scan[5863]: spamcheck: /usr/bin/spamc
10:07:49 p3scan[5863]: debug: enabled
10:07:49 p3scan[5863]: quiet: disabled
10:07:49 p3scan[5863]: template: /etc/p3scan/p3scan-ge.mail
10:07:49 p3scan[5863]: subject: [Virus] found in a mail to you:
10:07:49 p3scan[5863]: notify: Per instruction, the message has been 
deleted.
10:07:49 p3scan[5863]: extra: xx...@xy... <mailto:xx...@xy...>
10:07:49 p3scan[5863]: emailport: 8110
10:07:49 p3scan[5863]: smtprset: Virus detected! P3scan rejected message!
10:07:49 p3scan[5863]: smtpsize: not checking.
10:07:49 p3scan[5863]: sslport: 995
10:07:49 p3scan[5863]: mail: /bin/mail
10:07:49 p3scan[5863]: timeout: 30
10:07:49 p3scan[5863]: altvnmsg: disabled
10:07:49 p3scan[5863]: useurl: disabled
10:07:49 p3scan[5863]: emergcon: xy@z.de <mailto:xy@z.de>
10:07:49 p3scan[5863]: TOP processing disabled
10:07:49 p3scan[5863]: PIPELINING processing disabled
10:07:49 p3scan[5863]: STLS processing disabled
10:07:49 p3scan[5863]: Waiting for connections.....
10:07:56 p3scan[5863]: Forked, pid=5865, numprocs=1
10:07:56 p3scan[5865]: setting the virusdir to 
/var/spool/p3scan/children/5865/
10:07:56 p3scan[5865]: Initialize Context
10:07:56 p3scan[5865]: starting proxy
10:07:56 p3scan[5865]: POP3 Connection from 192.168.10.25:2119
10:07:56 p3scan[5865]: Real-server address is 212.227.15.162:110
10:07:56 p3scan[5865]: starting mainloop
10:07:56 p3scan[5865]: <-- +OK POP server ready H mimap4
10:07:56 p3scan[5865]: --> CAPA
10:07:56 p3scan[5865]: Client checking server CAPABILITIES...
10:07:56 p3scan[5865]: <-- +OK Capability list follows
10:07:56 p3scan[5865]: <-- TOP
10:07:56 p3scan[5865]: Ignoring servers TOP capability...
10:07:56 p3scan[5865]: <-- USER
10:07:56 p3scan[5865]: <-- UIDL
10:07:56 p3scan[5865]: <-- STLS
10:07:56 p3scan[5865]: Ignoring servers STLS capability...
10:07:56 p3scan[5865]: <-- IMPLEMENTATION trinity
10:07:56 p3scan[5865]: <-- .
10:08:01 p3scan[5865]: Closing connection (no more input from client)
10:08:01 p3scan[5865]: Session done (Clean Exit). Mails: 0 Bytes: 0
10:08:01 p3scan[5865]: do_sigterm_proxy, signal -1
10:08:01 p3scan[5865]: Uninit context
10:08:01 p3scan[5865]: context_uninit done, exiting now
10:08:01 p3scan[5863]: waitpid: child 5865 died with status 0, numprocs 
is now 0
10:08:01 p3scan[5863]: Erasing /var/spool/p3scan/children/5865/ contents
10:08:01 p3scan[5863]: Removing directory /var/spool/p3scan/children/5865/

On Fri, 18 Jun 2010 17:37:53 +0200
 da...@la... wrote:

> Maxim Britov schrieb:
> > On Fri, 18 Jun 2010 16:12:08 +0200
> >  da...@la... wrote:
> >
> >   
> >> how can i configure pop3s ssl ?
> >>
> >> port 995 for pop3s
> >> my iptables direkt from 995 to 8110
> >>
> >> in thunderbird i have configure ssl to use over pop3
> >>     
> >
> > port 995, no ssl (p3scan will connect over ssl if port 995)
> >
> >   
> no, i have configured in p3scan.conf ssl with standart port! (995)
> and in my iptables i have write prerouting to port 8110
> where p3scan is listing on ;)
> 
> but error in p3scan log, with pop3 normal i access recieve mails but not 
> with ssl
> 
> what have i to do?
> 
> you mean.....i have to configure p3scan ssl port to another?

MUA shouldn't use SSL. Port 995 and "No SSL" on your Thunderbird.
p3scan look at destination port and it it == 995 p3scan will use ssl.
Connection between p3scan and MUA always plain text.

-- 
Maxim Britov

GnuPG KeyID 0x4580A6D66F3DB1FB              xmpp:ma...@mo...

Maxim Britov schrieb:
> On Fri, 18 Jun 2010 16:12:08 +0200
>  da...@la... wrote:
>
>   
>> how can i configure pop3s ssl ?
>>
>> port 995 for pop3s
>> my iptables direkt from 995 to 8110
>>
>> in thunderbird i have configure ssl to use over pop3
>>     
>
> port 995, no ssl (p3scan will connect over ssl if port 995)
>
>   
no, i have configured in p3scan.conf ssl with standart port! (995)
and in my iptables i have write prerouting to port 8110
where p3scan is listing on ;)

but error in p3scan log, with pop3 normal i access recieve mails but not 
with ssl

what have i to do?

you mean.....i have to configure p3scan ssl port to another?

thanks to regard
dave

On Fri, 18 Jun 2010 16:12:08 +0200
 da...@la... wrote:

> how can i configure pop3s ssl ?
> 
> port 995 for pop3s
> my iptables direkt from 995 to 8110
> 
> in thunderbird i have configure ssl to use over pop3

port 995, no ssl (p3scan will connect over ssl if port 995)

-- 
Maxim Britov

GnuPG KeyID 0x4580A6D66F3DB1FB              xmpp:ma...@mo...

how can i configure pop3s ssl ?

port 995 for pop3s
my iptables direkt from 995 to 8110

in thunderbird i have configure ssl to use over pop3

but p3scan says in log:
-ERR unknown command

can someone help me please?

thanks
greets dave

On Tue, May 25, 2010 at 1:38 PM, Jason Price <jpr...@gm...> wrote:

> compatible with ClamAV .96?  Any ideas on the issue here, or possible
> resolutions?
>
Yes, I need to release another version that incorporates the new clamav
library (that I'm using now). However, if you do not use ClamAV, then it
should work fine. Will try and get that out soon as I can. Thank you.
-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

Not sure if this list is still active, but figured I'd give it a shot...

I'm new to p3scan, and am attempting to install it onto RedHat RHEL4,
using ClamAV 0.96.  I am unable to successfully run "make", and am
getting errors that would seem to indicate incompatibility with Clam.
Here is the error output:

p3scan.c: In function `init_clamav':
p3scan.c:538: warning: passing arg 2 of `cl_load' from incompatible pointer type
p3scan.c:555: error: invalid application of `sizeof' to incomplete
type `cl_limits'
p3scan.c:556: error: invalid use of undefined type `struct cl_limits'
p3scan.c:557: error: invalid use of undefined type `struct cl_limits'
p3scan.c:558: error: invalid use of undefined type `struct cl_limits'
p3scan.c:559: error: invalid use of undefined type `struct cl_limits'
p3scan.c:560: error: invalid use of undefined type `struct cl_limits'
p3scan.c: In function `scan_directory':
p3scan.c:717: warning: passing arg 5 of `cl_scandesc' makes integer
from pointer without a cast
p3scan.c:717: error: too many arguments to function `cl_scandesc'
p3scan.c: In function `scan_mailfile':
p3scan.c:1125: warning: passing arg 5 of `cl_scandesc' makes integer
from pointer without a cast
p3scan.c:1125: error: too many arguments to function `cl_scandesc'
p3scan.c: At top level:
p3scan.c:185: error: storage size of `limits' isn't known


I get this same issue with 2.9.0d, but not with 2.3.2.  Is 3.0
compatible with ClamAV .96?  Any ideas on the issue here, or possible
resolutions?

Thanks.

Jason

Actually i try to do it on smoothwall, i found p3scan.conf and p3scan have
to configure to bash scan mode to capture mail with bash script like ipcop
and smoothwall use basic scan mode. I tryied to change p3scan configuration
for adding footer,sending information mail to me on smoothwall system but it
didn't work. I looked into error logs it said it scaned mail and thare was
no error but it didnt include footer in mail and it didnt send an
information mail. I think i should make an aford about p3scan and try it on
ipcop.

On Tue, Dec 8, 2009 at 4:42 AM, Jack S. Lai <la...@gm...> wrote:

> On Sun, Dec 6, 2009 at 11:31 AM, Volkan ALTUNTAS <val...@gm...>
> wrote:
> > Are there any way to make a copy of all incoming and outgoing mails on
> the
> > network.
> If you have not figured it out already, see the recommended debug
> procedure in p3scan.conf.
> --
> When you want a computer system that works, just choose Linux.
> When you want a computer system that works, just, choose Microsoft.
>
>
> ------------------------------------------------------------------------------
> Return on Information:
> Google Enterprise Search pays you back
> Get the facts.
> http://p.sf.net/sfu/google-dev2dev
> _______________________________________________
> p3scan-main mailing list
> p3s...@li...
> https://lists.sourceforge.net/lists/listinfo/p3scan-main
>



-- 
Sincerely
Volkan ALTUNTAŞ

On Sun, Dec 6, 2009 at 11:31 AM, Volkan ALTUNTAS <val...@gm...> wrote:
> Are there any way to make a copy of all incoming and outgoing mails on the
> network.
If you have not figured it out already, see the recommended debug
procedure in p3scan.conf.
-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

Are there any way to make a copy of all incoming and outgoing mails on the
network.

-- 
Sincerely

Jack S. Lai wrote:

> It is now: http://tinyurl.com/9m4v7n

Erm, the patch results in undefined behaviour, the gcc warnings say so.
AFAIK, neither C nor C++ require string constant interning, gcc just
happens to do it.

Francis

On Sat, Dec 27, 2008 at 9:31 AM, Francis Russell
<fra...@ya...> wrote:
> Jack S. Lai wrote:
>
>> Thank you. Fixed.
>
> Is the fix publicly accessible anywhere? I'd like to point Debian at it.

It is now: http://tinyurl.com/9m4v7n
-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

Jack S. Lai wrote:

> Thank you. Fixed.

Is the fix publicly accessible anywhere? I'd like to point Debian at it.

Francis

On Sat, Dec 27, 2008 at 1:37 AM, Francis Russell
<fra...@ya...> wrote:
> What on earth is going on with this line in p3scan.c? It's present in
> both the latest stable and release candidate.
>
> if (((config->scanner->name="bash")) &&
> !strncasecmp(p->serverbuf->line,"Subject:",8))
> p->serverbuf->line=strreplace(p->serverbuf->line,"'"," ");
Thank you. Fixed.
-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

What on earth is going on with this line in p3scan.c? It's present in
both the latest stable and release candidate.

if (((config->scanner->name="bash")) &&
!strncasecmp(p->serverbuf->line,"Subject:",8))
p->serverbuf->line=strreplace(p->serverbuf->line,"'"," ");

It looks like it should be doing a string comparison, but instead it
does a pointer assignment. The result is that all apostrophes in all
Subject header lines are removed, regardless of the scanner. I don't
even dare speculate why it's needed for any scanner...

Francis

Startup diagnostic is below:

[root@hede ~]# p3scan -d
Attempting to override internal clamav libraries with scannertype: basic
10:20:55 p3scan[26849]: Checking scannerlist...
10:20:55 p3scan[26849]: P3Scan Version 3.0_rc1
10:20:55 p3scan[26849]: Selected scannertype: basic (Basic file invocation scanner)
10:20:55 p3scan[26849]: Listening on 0.0.0.0:8110
10:20:55 p3scan[26849]: Changing uid (we are root)
10:20:55 p3scan[26849]: Running as user: clamav group: clamav
10:20:55 p3scan[26849]: No Regular Expression given! Virusnames can't be extracted
10:20:55 p3scan[26849]: p3scan.conf: /etc/p3scan/p3scan.conf
10:20:55 p3scan[26849]: logopt: 3
10:20:55 p3scan[26849]: logfac: 24
10:20:55 p3scan[26849]: debug: enabled
10:20:55 p3scan[26849]: debug-imap: enabled
10:20:55 p3scan[26849]: debug-memory: disabled
10:20:55 p3scan[26849]: debug-message: disabled
10:20:55 p3scan[26849]: debug-scanning: disabled
10:20:55 p3scan[26849]: debug-smtp: disabled
10:20:55 p3scan[26849]: Internal ClamAV: disabled
10:20:55 p3scan[26849]: DEMIME - Not in use.
10:20:55 p3scan[26849]: ip: Any
10:20:55 p3scan[26849]: maxchilds: 10
10:20:55 p3scan[26849]: port: 8110
10:20:55 p3scan[26849]: quiet: disabled
10:20:55 p3scan[26849]: Target ip/port not enabled
10:20:55 p3scan[26849]: pidfile: /var/run/p3scan/p3scan.pid
10:20:55 p3scan[26849]: user: clamav
10:20:55 p3scan[26849]: notifydir: /var/spool/p3scan/notify
10:20:55 p3scan[26849]: virusdir: /var/spool/p3scan
10:20:55 p3scan[26849]: delete: disabled
10:20:55 p3scan[26849]: freespace: 10000
10:20:55 p3scan[26849]: scanner: /usr/bin/clamdscan --no-summary
10:20:55 p3scan[26849]: broken: disabled
10:20:55 p3scan[26849]: checkspam: /tmp/asd.sh
10:20:55 p3scan[26849]: template: /etc/p3scan/p3scan-en.mail
10:20:55 p3scan[26849]: subject: [Virus] found in a mail to you:
10:20:55 p3scan[26849]: blacklist subject: [Blacklisted] mail to you: 
10:20:55 p3scan[26849]: blackshort: disabled
10:20:55 p3scan[26849]: notify: Per instruction, the message has been deleted.
10:20:55 p3scan[26849]: emailport: 25
10:20:55 p3scan[26849]: smtprset: Virus detected! P3scan rejected message!
10:20:55 p3scan[26849]: password: disabled
10:20:55 p3scan[26849]: sslport: 995
10:20:55 p3scan[26849]: imapport: 143
10:20:55 p3scan[26849]: imapsport: 993
10:20:55 p3scan[26849]: mail: /bin/mail
10:20:55 p3scan[26849]: timeout: 30
10:20:55 p3scan[26849]: altvnmsg: disabled
10:20:55 p3scan[26849]: useurl: disabled
10:20:55 p3scan[26849]: authuser: disabled
10:20:55 p3scan[26849]: cleankill: disabled
10:20:55 p3scan[26849]: noeom: disabled
10:20:55 p3scan[26849]: nospampipe: disabled
10:20:55 p3scan[26849]: PIPELINING processing disabled
10:20:55 p3scan[26849]: STLS processing disabled
10:20:55 p3scan[26849]: Waiting for connections.....
 
-- burak()
(ps: bf)
METU CENG '06



----- Original Message ----
From: Jack S. Lai <la...@gm...>
To: Main support for p3scan <p3s...@li...>
Sent: Thursday, October 30, 2008 8:51:08 PM
Subject: Re: [p3scan-main] Scanner abnormal exit

On Thu, Oct 30, 2008 at 12:30 PM, Burak OGUZ <bur...@ya...> wrote:
> I am using basic scanner with clamav with user clamav.
Please post the top part of your diagnostic session (where it starts
up and displays all your parameters).
Thanks.
-- 
When you want a computer system that works, just choose Linux.
When you want a computer system that works, just, choose Microsoft.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
p3scan-main mailing list
p3s...@li...
https://lists.sourceforge.net/lists/listinfo/p3scan-main