Re: [Assp-user] assp, the end

[Lee Howard]

On 06/17/2016 06:27 AM, Michelle Dupuis wrote:
> Just another opinion - but I too have been stuck on ASSP problems, posted 
> questions, and never got answers.  I've learned to live with the problems and 
> just have to weigh the benefits of a broken ASSP installation vs no ASSp 
> installation.

Like many of you, I suspect, I have been using open-source software for 
many, many years now.  When I have problems and need support I sometimes 
am able to get that help from the software project's mailing lists or 
other support forums.  However, sometimes I have had to hire someone to 
provide me support.  Yet, at other times I have simply had to dig into 
the software code, myself, and provide my own support.

I think that all three of those support methods are normal and expected 
for open-source software.  Users should not be surprised when the free 
support methods fail to provide the desired results. There are two more 
support methods available to them.

To be honest, commercial software also has plenty of former-users who 
eventually stop using the software because they feel like they weren't 
getting the level of support that they needed.  Really, the only 
difference between the two software development methods from the 
user-support perspective is that with commercial software the "dig into 
the software code, myself" option is not available.

It is a mistake for users to rely solely on the free support forums... 
because eventually you will have some kind of problem that will not get 
addressed properly in those places.  Sure, you can learn to live with 
the problem or abandon the software - or you can do what you would have 
had to do with commercial software (hire someone to help you) or you can 
dig into the code, yourself.

It is also a mistake for users to believe that by abandoning the 
open-source software it somehow is a form of retaliation against the 
lack of support.  It will be hardly noticed - if at all.  If the desire 
is to make a real difference and change the way that things are being 
done, then you have to catalyze that change, yourself.

Thanks,

Lee.

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] assp, the end

[Michelle Dupuis]

Just another opinion - but I too have been stuck on ASSP problems, posted 
questions, and never got answers.  I've learned to live with the problems and 
just have to weigh the benefits of a broken ASSP installation vs no ASSp 
installation.

I understand the OP's concerns, and understand why he would pull the plug on 
his ASSP installations...

-Original Message-
From: Andrew Porter [mailto:a...@defsdoor.org] 
Sent: Friday, June 17, 2016 4:45 AM
To: ASSP User list
Subject: Re: [Assp-user] assp, the end

Sounds like your problems are elsewhere.  I've never had to reconfirm my 
subscription, never had any complaints about the help people here give - 
out of their own good will - and I've ran multiple ASSP instances for 
donkeys years now without any but minor concerns.

At least no one tied you down and forced you to use this completely free 
software.






--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] SAN ssl suport

[Ethical Host - John MacKenzie]

Thanks for the reply!

Q: you installed a SAN certificate in ASSP so that now ASSP is able to
secure connections using such a certificate, ok till now ? 
>I was using a regular wild card cert until now and yes it was fine (still
is as I went back to it)

Q: If so, what do you mean by "pull the first domain", that is, "who"
complains about the certificate ?
> the new cert worked fine as well BUT not on the other domains in the SAN,
only the first domain listed in the SAN worked without an SSL mismatch
error.
> Who complains? the email program gives a certificate warning about the
hostname not matching.

There is nothing wrong with the actual ssl connection, just the recognition
of the OTHER hostnames on the SSl certificate but ill give those commands a
try when I can retest the other cert (cant do it during the day)

Thanks!
John


-Original Message-
From: Grayhat [mailto:gray...@gmx.net] 
Sent: June-17-16 3:07 AM
To: assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] SAN ssl suport

:: On Thu, 16 Jun 2016 08:52:09 -0400
:: <072801d1c7cd$e522a0d0$af67e270$@ca>
:: "Ethical Host - John MacKenzie"  wrote:

> Have support for SAN wildcard ssl certificates?  I tried using it but 
> assp seemed to only pull the  first domain listed on the certificate 
> for validation which doesn't work for me

Hm... not sure I understood; you installed a SAN certificate in ASSP so that
now ASSP is able to secure connections using such a certificate, ok till now
? If so, what do you mean by "pull the first domain", that is, "who"
complains about the certificate ? Also, when it comes to SSL it's always a
good idea to install OpenSSL and then check things using for example a
command like

openssl s_client -starttls smtp -connect mail.server.name.or.ip:25

and check the results for warnings or errors or, willing to fetch and dump
the certificate details, you may use 

openssl s_client -showcerts -starttls smtp -connect server:25|openssl x509
-text

the above will show you all the details of the certificate returned by the
server (ASSP in your case)









--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] assp, the end

[Robert K Coffman Jr. -Info From Data Corp.]

 > On 6/17/2016 4:26 AM, Spyros Tsiolis wrote:


His last question was about 1.9.9.  Is v1 still a thing?

- Bob


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] assp, the end

[Andrew Porter]

Sounds like your problems are elsewhere.  I've never had to reconfirm my 
subscription, never had any complaints about the help people here give - 
out of their own good will - and I've ran multiple ASSP instances for 
donkeys years now without any but minor concerns.

At least no one tied you down and forced you to use this completely free 
software.






--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

[Assp-user] assp, the end

[Spyros Tsiolis]

Hello all,

Just to let you know that my last assp installation has been put out 
of service the other day.

I used to have three rock-solid assp installations.

However, feedback on this list is, at _least_ , selective so I had to 
stand down and decommision the mail server along with the last
assp installation I had since the mail server was getting hit badly
and this is a production environment, so we were forced to 
outsource the clients' mail services to a third party.

This comes to me not as a surprise since time and again I've asked for
help on assp and very rerely  would I get a reply.
This has been going for at least the last four to five years now.

I am not pointing any fingers, nor do I demand any kind of explanation.

I am posting this in good faith and I really am hoping that the people
behind the project can get a bit more helpful with the rest of us.

As an end-note, I would also like to say that I found myself many times
automatically unsubscribed from the list, since there's some function
on it that if you don't acknowledge your subscription, it kicks you out
of the list.
To me this is unacceptable.

Anyway. Keep up the good work. It was great while it lasted.

Wishing a good summer to everyone,

Spyros Tsiolis signing off.


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] SAN ssl suport

[Thomas Eckardt]

For SMTPS this will IMHO never work per default, because there is no known 
domain at the moment of ->accept_SSL

SSL:
The SSL socket is listening. Nobody knows for which domain (if multiple 
are hosted) the next connection is for.
V2 has an option to chose the used certificate for different listeners - 
Perl skills are required to do this..

STARTTLS:
Even here the SMTP protocol does not provide to know the target domain.
for example:
-> 220 here I am
<- EHLO my.domain
-> 250-STARTTLS
-> 250-
-> 250 HELP
<- STARTTLS
-> 220 go on

For both SSL and TLS, SNI may be possible, if the SMTP client sends the 
SNI TLS extension in its SSL client hello message. Such an environment is 
not commonly used fro SMTP.
The multidomain setup can become very complex - see RFC6698).
The latest Perl modules IO::Socket::SSL and Net::SSLeay are required.


HTTPS (configuration interface):
Here the right certificate will be use, if the latest IO::Socket::SSL and 
Net::SSLeay(compiled with the latest openssl lib) are used (SNI support) - 
and the domain/host in the URL is valid (matches a certificate).
V2 has an option to chose/verify the used certificate for different 
listeners - Perl skills are required to do this.

Thomas



Von:"Ethical Host - John MacKenzie" 
An: "'For Users of ASSP'" 
Datum:  16.06.2016 15:22
Betreff:[Assp-user] SAN ssl suport



Hi All

 

Does either version of assp (currently im on 1.x but going to be upgrading
to 2.x soon) 

 Have support for SAN wildcard ssl certificates?  I tried using it but 
assp
seemed to only pull the  first domain listed on the certificate for
validation which doesn't work for me

 

Thanks

 

John

 

 

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and 
traffic
patterns at an interface-level. Reveals which users, apps, and protocols 
are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning
reports. 
http://pubads.g.doubleclick.net/gampad/clk?id=1444514421=/41014381
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
***
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
***

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Re: [Assp-user] SAN ssl suport

[Grayhat]

:: On Thu, 16 Jun 2016 08:52:09 -0400
:: <072801d1c7cd$e522a0d0$af67e270$@ca>
:: "Ethical Host - John MacKenzie"  wrote:

> Have support for SAN wildcard ssl certificates?  I tried using it but
> assp seemed to only pull the  first domain listed on the certificate
> for validation which doesn't work for me

Hm... not sure I understood; you installed a SAN certificate in ASSP so
that now ASSP is able to secure connections using such a certificate,
ok till now ? If so, what do you mean by "pull the first domain", that
is, "who" complains about the certificate ? Also, when it comes to SSL
it's always a good idea to install OpenSSL and then check things using
for example a command like

openssl s_client -starttls smtp -connect mail.server.name.or.ip:25

and check the results for warnings or errors or, willing to fetch and
dump the certificate details, you may use 

openssl s_client -showcerts -starttls smtp -connect server:25|openssl x509 -text

the above will show you all the details of the certificate returned by
the server (ASSP in your case)








--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user