Hi all,

fixed in assp 2.4.6 build 15194:

- If 'DoPrivatSpamdb' was used, the analyzer has shown more bad and good 
Bayesian and HMM word combinations, than
  both engines have used for the spam probability and confidence 
calculation.

changed:

- If 'AUTHrequireTLS' is set and a server tries to use AUTH without using 
SSL/STARTTLS, the connection is
  damped for 5 seconds to prevent DDoS attacks. The value for the seconds 
can be configured using the
  hidden variable 'AUTHrequireTLSDelay'
 
our $AUTHrequireTLSDelay = 5; # (number) seconds to damp connections that 
used AUTH without using SSL 
   (to prevent DoS)
 
 
- ASSP has used the port defined in the hidden configuration variable 
'IPv6TestPort' to test the posibility
  of an IPv6 listener at startup. ASSP now first tries to use the first 
free highport (provided by the OS).
  Only if this attempt failes, the fixed 'IPv6TestPort' is used.

- In addition to the literals 'SESSIONID', 'NOTSPAMTAG' and 'MYNAME', it 
is now possible to use the literals
  'IPCONNECTED' and 'IPORIGIN' in any configurable SMTP reply text.
 
The literal 'SESSIONID' will be replaced by the unique message logging ID 
in every SMTP error reply.
The literal 'IPCONNECTED' will be replaced by the connected IP address in 
every SMTP error reply.
The literal 'IPORIGIN' will be replaced by the origin IP address in every 
SMTP error reply.
The literal 'NOTSPAMTAG' will be replaced by a random calculated TAG 
using, in every SMTP permanent (5xx) error reply.
The literal 'MYNAME' will be replaced by the configuration value defined 
in 'myName' in every SMTP error reply.
 
- The math to calculate the spam/ham probability and confidence is 
improved. It prevents now the usage of too
  small numbers.

- The spam/ham confidence graph calculation is improved by switching from 
the natural logarithm to the base 10 log

- ASSP_AFC version 3.17: spam is detected, if an attachment or a 
compressed file has an extension, but
  the extemsion does not match the real file type (content based)

Thomas


DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to