Re: [Assp-user] assp, the end

2016-06-17 Thread Michelle Dupuis
Just another opinion - but I too have been stuck on ASSP problems, posted 
questions, and never got answers.  I've learned to live with the problems and 
just have to weigh the benefits of a broken ASSP installation vs no ASSp 
installation.

I understand the OP's concerns, and understand why he would pull the plug on 
his ASSP installations...

-Original Message-
From: Andrew Porter [mailto:a...@defsdoor.org] 
Sent: Friday, June 17, 2016 4:45 AM
To: ASSP User list
Subject: Re: [Assp-user] assp, the end

Sounds like your problems are elsewhere.  I've never had to reconfirm my 
subscription, never had any complaints about the help people here give - 
out of their own good will - and I've ran multiple ASSP instances for 
donkeys years now without any but minor concerns.

At least no one tied you down and forced you to use this completely free 
software.






--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Remove last SMTP hop before processing

2012-03-19 Thread Michelle Dupuis
I'm setting up ASSP in an environment with an SMTP gateway at the network edge. 
 So, all mail must flow through that SMTP gateway (relay) before hitting ASSP.

This messes up a lot of ASSP features like SPF, since everything is arriving at 
ASSP from an approved SMTP host, but prior hosts may fail SPF.

Is there a way to make ASSP ignore the last SMTP hop in the header?  (peel it 
off) and then process based on prior SMTP hops?

Thanks
--
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Where are the ASSP headers?

2011-05-11 Thread Michelle Dupuis
I upgraded from 1.2.x to version 2 of ASSP.  And WOW are there a lot more 
settings (not wow in a good way).  I'm trying to tune ASSP to behave as well as 
my old ver 1.x but I'm missing info.  In particular, many messages have hardle 
any x-assp-* in the header (see example below).  Why?  Some messages have lots 
of x-assp info, some little.  This is an example of a message that got through 
and I'm hoping to see what assp thought of it (I've already used the mail 
analyzer for the body)

Thanks


Received: from smtp2.netdorm.com (192.168.254.35) by mail.mydomain.com
 (192.168.254.35) with Microsoft SMTP Server id 8.1.436.0; Wed, 11 May 2011
 03:56:51 -0400
Received: from smtp2.netdorm.com ([67.214.175.76] helo=smtp2.netdorm.com)   
by
 spamfilter.mydomain.com with ESMTP (2.0.1); 11 May 2011 03:56:43 -0400
Received: from 07C44B438BAE4B6 ([188.191.194.3])by smtp2.netdorm.com
 (8.13.8/8.13.8) with SMTP id p4B7v7Vm010328;   Wed, 11 May 2011 03:57:09 -0400
From: Tanya ja...@radiocubelles.net
To: nsupp...@mydomain.com nsupp...@mydomain.com
Date: Wed, 11 May 2011 04:56:41 -0400
Subject: What's up?.Dictionary for italian luxury watches
Thread-Topic: What's up?.Dictionary for italian luxury watches
Thread-Index: AcwPsP2pYdnQpVaBSxOyWTOhoJ4o2w==
Message-ID: 629190416.20110511101...@asbestos.redwebhouse.com
Accept-Language: en-US, en-CA
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: mail.mydomain.com
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-assp-envelope-from: ja...@radiocubelles.net
x-assp-version: 2.0.1(2.0.19) on spamfilter.mydomain.com
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


--
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Regex help - or am I misunderstanding function?

2011-04-20 Thread Michelle Dupuis
I'm still getting emails containing links to sites in russia.  I have this 
regex in my BombRe file:
http\:\/\/[A-Za-z\.]+?\.(?:ru|ly|nl|ec|cc|vc|ua|in|am)[\s\/\n\r\\]

Which according to my (web based) regex testers SHOULD catch the email message 
below.  So, I put it into the mail tester in ASSP and got the analysis below.  
(I have test mode turned on by the way)

Even though the ASSP tester shows 1.000 probability that it's spam, it is NOT 
getting flagged as spam in the subject line (test mode).  As well, should the 
bobre regex show up as a cause somewhere?

I'm confused


---MESSAGE
Quench your thirst for thrills - Play at King Spin

http://www.net-multi-cazino.ru

---MESSAGE HEADERS---
x-assp-envelope-from: yauu...@alfnucifora.org
x-assp-received-spf: none ip=64.182.102.193 mailfrom=yauu...@alfnucifora.org
helo=smtp1.netdorm.com
x-assp-version: 2.0.1(2.0.19) on spamfilter.mydomain.comm

---ASSP 
ANALYSIS
Bayesian Analysis: • Bayesian Check is disabled

Bad Words   Bad ProbGood Words  Good Prob
spin href   0.9998
at king 0.9996
play at 0.9987
href multi  0.9931
king spin   0.9810
href ru 0.9775
href cazino 0.9626
href www0.2390

Totals: 0.9998 0.9996 0.9987 0.9931 0.9810 0.9775 0.9626 0.2390

--
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Catchall email account

2008-02-13 Thread Michelle Dupuis
Because of our MTA's limitations (Exchange 2007 all-in-one setup), I am
unable to implement a catchall account in Exchange.  Does ASSP offer the
ability to rewrite the TO address of an email that the MTA refuses (or ASSP
determines does not exist), sending it instead to a catchall account?  (I'm
still on version 1.3.3.1 of ASSP)?
 
Thanks
MD


-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] How to upgrade

2007-09-05 Thread Michelle Dupuis
I'm running ASSP 1.2.6 and am thinking about upgrading.  Can I find a list
of features somewhere to help me decide whether or not to upgrade?
 
As well, is upgrading a complex process? (Or is it a simple install and all
settings move over)
 
MD
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now   http://get.splunk.com/___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Only bad words showing, and wrong ones!

2007-08-18 Thread Michelle Dupuis
We have encountered an ASSP install in which all mail is being flagged as
spam unless it's on the whitelist.  To find out why, we took an spam message
and run it through the ASSP analyzer.
 
1. We found the it match many words to bad words, however, the good
words column was empty!  Why is it not using any good words?
 
2.  We found that the bad words list contained things like data 550 which
I assume would be seen in every mail transaction.  Why are these appearing?
 
Thanks,
MD
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now   http://get.splunk.com/___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Feature request: catch-all account if validate local address fails

2007-06-01 Thread Michelle Dupuis
I'm not using the Validate Local Addresses feature - because I didn't want
to block valid messages to users with mistyped addresses. (We have two
employees with French names, and it's amazing how often senders get it
wrong).

Unfortunately, upgrading to Exchange 2007 caused us to lose the
sink/catchall ability.  This sounds like a great feature request...if the
Validate Local Addresses feature is turned on, add the option of rewriting
the TO address to a catchall account instead of just killing the connection.

Thanks,
Michelle

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Morris, Nate
Sent: Friday, June 01, 2007 10:25 AM
To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
Subject: Re: [Assp-user] Creating a catch-all account

If you are not using the Validate Local Addresses feature of ASSP, you could
get a copy of EVERY message going through ASSP to a single mailbox, but this
would be very difficult to manage and is probably a privacy issue.

If you are validating local addresses with ASSP, I believe ASSP checks the
recipient before it receives the body of the message. If the recipient is
not found, it terminates the connection without ever receiving the mail. In
other words, messages to invalid recipients can not be redirected because
they are never received.

Nate

-
This SF.net email is sponsored by DB2 Express Download DB2 Express C - the
FREE version of DB2 express and take control of your XML. No limits. Just
data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Creating a catch-all account

2007-06-01 Thread Michelle Dupuis
That  KB article is for Exchange 2003 only.  Exchange 2007 works very
differently. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mirko Scholz
Sent: Friday, June 01, 2007 3:17 PM
To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
Subject: Re: [Assp-user] Creating a catch-all account

Exchange should support catch-alls:

http://support.microsoft.com/kb/324021

Mirko



-
This SF.net email is sponsored by DB2 Express Download DB2 Express C - the
FREE version of DB2 express and take control of your XML. No limits. Just
data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Creating a catch-all account

2007-05-31 Thread Michelle Dupuis
My mail server does not support a catch all account, so I'm hoping that ASSP
can help out.  My mail server is exchange 2007, and cannot support a catch
all without a separate edge server (we have a single server).
 
I'm running ASSP 1.2.6 successfully; can I use it to rewrite
invalid/non-existent destination accounts to create a catch all ?  (Also
called account sink)?
 
Thanks,
Michelle
-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] ClamAV on Windows w/ASSP on Windows

2007-05-08 Thread Michelle Dupuis
Can NOD32 be integrated with ASSP (on a Windows machine)?

MD 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Charles Marcus
Sent: Tuesday, May 08, 2007 10:16 AM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] ClamAV on Windows w/ASSP on Windows

On 5/8/2007 William Stucke ([EMAIL PROTECTED]) wrote:
 NOD32 is good. AVG is good (disclaimer: I'm an AVG reseller) for the 
 same reasons, plus centralised downloading, monitoring and control on  
 networks.

You say this as if NOD32 didn't have the RAS or RAC...

NOD32 rocks - and is much more effective than AVG... and no, I am not a
reseller of either one.

--

Best regards,

Charles

-
This SF.net email is sponsored by DB2 Express Download DB2 Express C - the
FREE version of DB2 express and take control of your XML. No limits. Just
data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] ClamAV on Windows w/ASSP on Windows

2007-05-04 Thread Michelle Dupuis
We've been running ASSP on Windows with great success - actually on the same
box as our Exchange 2007.  We'd like to get away from Symantec, and hope to
experiment with ClamAV on this same windows box.  
 
We see that ASSP can integrate with ClamAV, and we found a www.clamwin.com
site offering ClamAV for Windows.  Has ANYONE here integrates ASSP/win with
ClamAV/win ?
 
Can you offer any insights / directions?
 
Thanks,
MD
-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Need smarthost for outbound?

2007-03-26 Thread Michelle Dupuis
We struggled on a recent installation of ASSP - which lead to a couple of
questions.  Hopefully some can shed some light on:
 
1.  Does one need a smarthost for outbound mail?  (Or can ASSP handle
sending direct to destination MTA)
 
2.  If ASSP listens on only 1 port , how can it distinguish between incoming
and outgoing SMTP actions?  (Or does relay have to be set)
 
Thanks,
MD
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Need smarthost for outbound?

2007-03-26 Thread Michelle Dupuis
We recently setup a client using exchange as follows

Internet--ASSP--Exchange
 
And Exchange--ASSP--Internet

We put ASSP in the outbound path to allow for the mail interface to work.
For some reason, we could not get outbound to work unless we specified a
smarthost in ASSP.  Then all worked great.  We can't figure out why!  Ideas?

MD

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack
Sent: Monday, March 26, 2007 12:18 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Need smarthost for outbound?

ASSP is not a mailserver it is only a proxy, which should be positioned
before your server
MD 1.  Does one  need a smarthost for outbound mail?  (Or can ASSP 
MD handle sending direct to  destination MTA)
Your Server will send them  directly. There is no need to pass them through
ASSP.

MD 2.  If ASSP  listens on only 1 port , how can it distinguish between 
MD incoming and outgoing  SMTP actions?  (Or does relay have to be set)
ASSP listens only on the incomming. Normally even your users email will be
subbmitted by SMTP. So the mailflow is like this:

Incomming Mail:
internet-assp-YourMailserver-UserMailbox

Outgoing
Client-assp-YourMailServer-Destination

Matti

--
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de


-
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT 
business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] How to upgrade from 1.2.6 to 1.3.0?

2007-03-22 Thread Michelle Dupuis
What about the config file?  Are missing entries automatically created with
default values (upon installation)? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fritz
Borgstedt
Sent: Thursday, March 22, 2007 5:14 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] How to upgrade from 1.2.6 to 1.3.0?


I would like to upgrade to 1.3.0 (the latest beta), but how is this 
done?

The latest beta is always found at
http://www.magicvillage.de/~Fritz_Borgstedt/assp/

Current latest is 1.3.1
http://www.magicvillage.de/~Fritz_Borgstedt/assp/ASSP_1.3.1pb


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] FW: pwlib compile error

2007-02-20 Thread Michelle Dupuis
I'm trying to compile pwlib, and have followed instructions to the letter.
Can anyone help me get past the error below?
(I did have the latest openh323 and pwlib on my system before, but did a
make clean, removed them, and then downloaded the mimas patch versions)
 
I looks like contain.cxx contains a function defintion for psprintf, but it
is not exported in the header files.  I don't see how this would ever
compile.
 
Thanks
MD
 
-
 
set -e; make -C src/ptlib/unix opt;
make[1]: Entering directory `/usr/src/pwlib_Mimas_patch2/src/ptlib/unix'
g++ -D_REENTRANT -Wall  -fPIC -I/usr/src/pwlib_Mimas_patch2/include -Os
-felide-constructors -x c++ -c ../../ptclib/asner.cxx -o
/usr/src/pwlib_Mimas_patch2/lib/obj_linux_x86_r/asner.o
../../ptclib/asner.cxx: In member function 'PString
PASN_Choice::GetTagName() const':
../../ptclib/asner.cxx:2112: error: 'psprintf' was not declared in this
scope
make[1]: *** [/usr/src/pwlib_Mimas_patch2/lib/obj_linux_x86_r/asner.o] Error
1
make[1]: Leaving directory `/usr/src/pwlib_Mimas_patch2/src/ptlib/unix'
make: *** [opt] Error 2
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Prefix ????????: in subject

2007-02-19 Thread Michelle Dupuis
I've gotten a couple of emails with the prefix :  in the subject.
What does this mean?  Is it being added by ASSP?
 
Thanks,
MD
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Prefix ????????: in subject

2007-02-19 Thread Michelle Dupuis
These are emails from a client - so they are not spam.  My header shows (I
X'd out some stuff) below.  The Thread-Topic is the right subject text,
but the Subject has the strange subject text.  I'm guessing ASSP added
this...but I don't know why.  Ideas?

Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Importance: normal
Priority: normal
Subject: : Locking in Business Strategy
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
Date: Mon, 19 Feb 2007 15:30:02 -0500
Message-ID: [EMAIL PROTECTED]
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Locking in Business Strategy
thread-index: AcdUODgtXWGl80BRSGK1JkQ0kSMVYAAKJxFQAAD50ec=
From: XX
To: 
X-Assp-Spam-Prob: 0.0
X-Assp-Whitelisted: Yes
X-Assp-Envelope-From: 
X-Assp-Intended-For: 
Return-Path: XXX
X-OriginalArrivalTime: 19 Feb 2007 20:40:26.0315 (UTC)
FILETIME=[2F7829B0:01C75466]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Woods
Sent: Monday, February 19, 2007 5:07 PM
To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
Subject: Re: [Assp-user] Prefix : in subject

It's a common spam subject line from Russian spam mail. 

-Original Message-

Michelle Dupuis wrote:
 I've gotten a couple of emails with the prefix :  in the subject.
 What does this mean?  Is it being added by ASSP?

Check the ASSP maillog and the email headers to see if it was processed by
ASSP.

My first thought it that no, it is not being added by ASSP.

Kevin


-
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT 
business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Prefix ????????: in subject

2007-02-19 Thread Michelle Dupuis
My log shows:

Feb-19-07 15:40:26 66.231.184.40 [EMAIL PROTECTED] to: [EMAIL PROTECTED] 
local or
whitelisted - (attachments unchecked) _Locking_in_Business_Strategy_  -
c:\assp/notspam/149.eml

So the questions marks aren't in the subject line at that point.  I am in
testmode, and using the prefix [SPAM]...so again no question mark.

MD

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of James Brown
Sent: Monday, February 19, 2007 5:39 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Prefix : in subject

You've definitely not got anything in the Bayesian Test mode subject suffix?

In ASSP's logs, does the subject for the mail have the question marks?

James.


On 20/02/2007, at 9:30 AM, Michelle Dupuis wrote:

 These are emails from a client - so they are not spam.  My header 
 shows (I X'd out some stuff) below.  The Thread-Topic is the right 
 subject text, but the Subject has the strange subject text.  I'm 
 guessing ASSP added this...but I don't know why.  Ideas?

 Content-Class: urn:content-classes:message
 MIME-Version: 1.0
 Content-Type: text/html;
   charset=iso-8859-1
 Content-Transfer-Encoding: quoted-printable
 Importance: normal
 Priority: normal
 Subject: : Locking in Business Strategy
 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
 Date: Mon, 19 Feb 2007 15:30:02 -0500
 Message-ID:  
 [EMAIL PROTECTED]
 X-MS-Has-Attach:
 X-MS-TNEF-Correlator:
 Thread-Topic: Locking in Business Strategy
 thread-index: AcdUODgtXWGl80BRSGK1JkQ0kSMVYAAKJxFQAAD50ec=
 From: XX
 To: 
 X-Assp-Spam-Prob: 0.0
 X-Assp-Whitelisted: Yes
 X-Assp-Envelope-From: 
 X-Assp-Intended-For: 
 Return-Path: XXX
 X-OriginalArrivalTime: 19 Feb 2007 20:40:26.0315 (UTC) 
 FILETIME=[2F7829B0:01C75466]


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Steve 
 Woods
 Sent: Monday, February 19, 2007 5:07 PM
 To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
 Subject: Re: [Assp-user] Prefix : in subject

 It's a common spam subject line from Russian spam mail.

 -Original Message-

 Michelle Dupuis wrote:
 I've gotten a couple of emails with the prefix :  in the 
 subject.
 What does this mean?  Is it being added by ASSP?

 Check the ASSP maillog and the email headers to see if it was 
 processed by ASSP.

 My first thought it that no, it is not being added by ASSP.

 Kevin


 --
 ---
 Take Surveys. Earn Cash. Influence the Future of IT Join 
 SourceForge.net's Techsay panel and you'll get the chance to share 
 your opinions on IT  business topics through brief surveys-and earn 
 cash http://www.techsay.com/default.php?
 page=join.phpp=sourceforgeCID=DEVDEV
 ___
 Assp-user mailing list
 Assp-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/assp-user



 --
 ---
 Take Surveys. Earn Cash. Influence the Future of IT Join 
 SourceForge.net's Techsay panel and you'll get the chance to share 
 your opinions on IT  business topics through brief surveys-and earn 
 cash http://www.techsay.com/default.php?
 page=join.phpp=sourceforgeCID=DEVDEV
 ___
 Assp-user mailing list
 Assp-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/assp-user


-
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT 
business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Prefix ????????: in subject

2007-02-19 Thread Michelle Dupuis
That files shows:

Subject: : Locking in Business Strategy

But does that mean it ARRIVED that way, or ASSP added it?

MD 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Monday, February 19, 2007 8:52 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Prefix : in subject

Michelle Dupuis wrote:
 My log shows:
 
 Feb-19-07 15:40:26 66.231.184.40 [EMAIL PROTECTED] to: [EMAIL PROTECTED] 
 local or 
 whitelisted - (attachments unchecked) _Locking_in_Business_Strategy_  
 - c:\assp/notspam/149.eml
 
 So the questions marks aren't in the subject line at that point.  I am 
 in testmode, and using the prefix [SPAM]...so again no question mark.
 

Check the file that it saved into the notspam directory and see if the
question marks show up there.

Kevin

-
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT 
business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Do we need a blacklist feature?

2007-02-15 Thread Michelle Dupuis
I've been working with ASSP, and I've wondered if a blacklist feature
would be usefull.
 
Whereas the whitelist confirms VALID senders that one wishes to accept,
would it be usefull to have a blacklist for VALID senders you wish to
refuse?  (but later may wish to re-enable)
 
This is based on my assumption that forwarding a message to assp-spam@ tells
assp that this TYPE of message is bad, while sending to assp-notspam@ tells
assp that this TYPE of message is ok.
 
I would hate to teach ASSP that a certain sender is bad sometimes, but ok
other times.
 
Thoughts?
 
MD
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Do we need a blacklist feature?

2007-02-15 Thread Michelle Dupuis
Can't the same be said for the whitelist? If we want the contents, just send
it to assp-notspam@ and let ASSP learn this is good email?

Then why have a whitelist?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Micheal
Espinola Jr
Sent: Thursday, February 15, 2007 4:43 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Do we need a blacklist feature?

Michelle Dupuis wrote:
 I've been working with ASSP, and I've wondered if a blacklist
 feature would be usefull.
  
 Whereas the whitelist confirms VALID senders that one wishes to 
 accept, would it be usefull to have a blacklist for VALID senders you 
 wish to refuse?  (but later may wish to re-enable)

What is it you think you would like to accomplish?  Either its ham or it
spam (or perhaps worthy of no-processing).

 This is based on my assumption that forwarding a message to assp-spam@ 
 tells assp that this TYPE of message is bad, while sending to 
 assp-notspam@ tells assp that this TYPE of message is ok.

  Either you want it or you dont.  How can a source be valid yet you wish
to block them?

 I would hate to teach ASSP that a certain sender is bad sometimes, but 
 ok other times.

If there are certain things that come in that you dont want to get into your
ham corpus, then perhaps you should look into the no-processing features.


-
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT 
business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Regex help - false positive

2007-02-12 Thread Michelle Dupuis
This isn't purely an ASSP question...but hopefully someone can help.  I
grabbed the Bomb regex samples from the ASSP web site, to improve my
filtering.  One group of regex's trap for bank fraud spam, as follows:

(bank|credit|ebay|pal|security|union|YOUR_ORG) (antivirus|support|team)#
phishing
(bank|credit|ebay|pal|security|union).*?(account|) ?activity ((in|on|with)
your (account|identity|record))# phishing
(bank|credit|ebay|pal|security|union).*?(activate|authorize|confirm|verify)
(the|your) (account|authenticity|identity|information|records)# phishing
(bank|credit|ebay|pal|security|union).*?(close|update) (and verify |)your
(account|information)#phishing
(bank|credit|ebay|pal|security|union).*?(could be|has|info(rmation|)is|may
have|was|will be) (be|been|) ?(temporar(ily|ly|y)|used for|will|)
?(be|been|) ?(accessed|deactivated|deleted
(bank|credit|ebay|pal|security|union).*?(flagged|limit(ed|)|suspend(ed|)|unv
erified) (your |).*?account(?!s| executive)#phishing
(bank|credit|ebay|pal|security|union).*?confirm(ation|) (now|on|of)
(customer(s|)|your) (data|information)#
phishing
(bank|credit|ebay|pal|security|union).*?result in account
(deletion|erasure|removal|suspension)#
phishing

 
These regex's appear to have incorrectly trapped a user with name
bank.lavika.se  - obviously the workd bank.  From what I've learned of
RegEx, none of the above SHOULD trap this:
 
X-Assp-Spam-Reason: BombRe: 'bank.lavika.se (skar'
 
Can someone see which regex is catching the above and why?
 
Thanks,
MD
 
 
 
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Feature request: Strip first received line of header

2007-02-12 Thread Michelle Dupuis
I would like to throw out a feature request - which sounds (based on my
little knowledge) like and easy fix/implementation.

Users like me have all inbound mail route through an ISP.  This adds one
received line to the top of the header file.

The problem is, that this line makes it impossible to use the great RTBL
feature.  How about adding a pre-processing option to strip the first
received line?

Thanks,
MD



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Feature request: Strip first received line of header

2007-02-12 Thread Michelle Dupuis
A lot of companies are using 3rd part services as a backup MX (queuing) for
disaster recovery etc; so mail is routed through that ISP.

You're right about stripping off the first received line can be handled
differently - perhaps the RTBL processing can match all IP addresses within
the header?

MD

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Monday, February 12, 2007 12:42 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Feature request: Strip first received line of
header

Michelle Dupuis wrote:
 I would like to throw out a feature request - which sounds (based on 
 my little knowledge) like and easy fix/implementation.
 
 Users like me have all inbound mail route through an ISP.  This adds 
 one received line to the top of the header file.
 
 The problem is, that this line makes it impossible to use the great 
 RTBL feature.  How about adding a pre-processing option to strip the 
 first received line?
 

Ok, first off ASSP does not use the headers for the DNSBL scanning, it uses
the connecting IP address.

Second, thats a very very bad idea to try to strip connection headers, not
only does it pretty much make troubleshooting impossible it's improper
behavior for something like ASSP much less an MTA.

If you really want to use the DNSBL blocking I suggest you change your
incoming mail configuration. Why would you route incoming mail through the
ISP anyways?

Kevin

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] 1.2.7(final) ASSP Perl process hanging w/ 100% CPUfor about 1-

2007-02-12 Thread Michelle Dupuis
Sorry - clumsy fingers.  Back to ASSP Perl process hanging w/ 100% CPUfor
about 1-

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Monday, February 12, 2007 12:44 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] 1.2.7(final) ASSP Perl process hanging w/ 100%
CPUfor about 1-

Michelle Dupuis wrote:
 Ok - my lack of knowledge here
 
 My ISP adds one received line to the header.  Perhaps and option for 
 home many received's to strip off the top?
 
 As for ASSP, could it be an option to use the connection IP or the 
 header IP?
 
 MD
 

Please don't thread-jack.
Start a new topic.

Kevin

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] In test mode but no subject changes?

2007-02-11 Thread Michelle Dupuis
I have checked off every test mode button (and applied changes), but none of
my incoming email has anything prepended to the subject line.  Am I
misunderstanding the purpose of test mode?  What should this do?
 
Thanks,
MD
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Is my blocked mail missing?

2007-02-11 Thread Michelle Dupuis
I have a new ASSP installation, mostly at defaults.  After 1/2 day of
running, my stats show (see below) 17.6% non-local mail blocked.  However,
the \spam folder is empty.  Where are these blocked messages going?  I want
to confirm they are truly spam!
 
(I'm running in test mode - all boxes checked - in case that matters)
 
Thanks,
MD
 
 
ASSP Proxy Uptime:   0.460 days  0.775 days 
Messages Processed:  130 (282.4 per day) 201 (259.3 per day)
Non-Local Mail Blocked:  17.6%   16.8%  
CPU Usage:   0.00% (0.10% avg)   0.08% avg  
Concurrent SMTP Sessions:0 (3 max)   3 max  
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] In test mode but no subject changes?

2007-02-11 Thread Michelle Dupuis
Sorry for that confusion, I meant ENABLED/CHECKED.   

I tried adding the word [SPAM] to the Prepend spam subject field, and
message which are obviously spam are having their subjects prepended with
this word.  However, isn't test mode supposed to prepend something on its
own?

Thanks,
MD

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Charles Marcus
Sent: Sunday, February 11, 2007 11:22 AM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] In test mode but no subject changes?

Michelle Dupuis wrote:
 I have checked off every test mode button (and applied changes), but 
 none of my incoming email has anything prepended to the subject line.
 Am I misunderstanding the purpose of test mode?  What should this do?

When you say 'checked off' - do you mean ENABLED/CHECKED, or
DISABLED/UNCHECKED?

It sounds like you mean DISABLED - so, in that case, the messages that get
through are considered ham (not spam), and so are not tagged. The purpose of
test mode is to not block ANY mail, but to simply tag it...

-- 

Best regards,

Charles

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Should rebuildspamdb.pl clear out directories?

2007-02-11 Thread Michelle Dupuis
After a day of testing, I have a reasonable sample of message in the
\notspam and \error\spam directories.  I ran the rebuildspamdb.pl script (I
think it was succesfull), but I see my directories still contain the .eml
and .rpt files.
 
Are these directories going to grow indefinately?  Do I have to clear them
out manually?
 
Thanks,
MD
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] How us RTBL if inbound mail via ISP MX

2007-02-11 Thread Michelle Dupuis
Our company's email arrives at our SMTP server from a single host (our ISP's
backup mail server).  Since they don't offer RTBL filtering, I would like to
try to do the same.  For this reason, all inbound SMTP connections come from
1 IP addresses.
 
Is there a way to apply the RBL to IP addresses in the header - any step
along the SMTP chain?  (As opposed to just checking the remote IP at time of
SMTP connection)?
 
Thanks,
MD
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] Understanding log entries

2007-02-11 Thread Michelle Dupuis
I have a couple of log entries that I need help with.  The first is:
 
66.231.184.40 [EMAIL PROTECTED] to:
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
   Regex:Red 'Unsubscribe'
 
What does the Regex:Red 'Unsubscribe' mean?  Which regex is matching this
message?  The next is:

Feb-11-07 19:43:40 66.231.184.40 [EMAIL PROTECTED]
to: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
   passing if safe because testmode, otherwise Bayesian spam

Again from the same list source;  I assume in this case I would just forward
the message to [EMAIL PROTECTED] domain and it will no longer be trapper?  
 
Thanks,
Michelle



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


[Assp-user] FW: Why is this ASSP bouncing this message to a fake sender?

2007-02-11 Thread Michelle Dupuis
My assp setup (running in test mode) received a message which is confusing
mesee below.  It was FROM revenuemanagement.com, showing that a message
with the subject [SPAM] deign out-of-bounds was rejected and bounced back
to me.

My ASSP is setup to prefix [SPAM] on the subject line of spam messages, so
it appears that my system added [SPAM] to the subject line when the
message first arrived, and THEN sent it back to the (fake) sender, who then
bounced it back to me.

Why would ASSP add [SPAM] and then bounce it to the fake sender (who
bounced it back to me)?

I'm confused

MD
 

-Original Message-
From: System Administrator [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 11, 2007 7:43 PM
To: Postmaster
Subject: Undeliverable: [SPAM] deign out-of-bounds

Your message

  To:  [EMAIL PROTECTED]
  Subject: [SPAM] deign out-of-bounds
  Sent:Sun, 11 Feb 2007 19:21:39 -0500

did not reach the following recipient(s):

[EMAIL PROTECTED] on Sun, 11 Feb 2007 19:21:39 -0500
The e-mail account does not exist at the organization this message was
sent to.  Check the e-mail address, or contact the recipient directly to
find out the correct address.
mail.revenuemanagement.com #5.1.1



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


Re: [Assp-user] Understanding log entries

2007-02-11 Thread Michelle Dupuis
Its getting clearer - but I'm still a bit confused.  According to the docs
(and the ASSP web interface), the redlist is a list of email addresses which
cannot add to the spam/nospam list.  But, looking at the redre.txt file it
is clearly a bunch of regex expressions.  So my questions are:

1.  Does a match from the redre.txt file cause the message to be
blocked/accepted?  If neither, why is it even showing up in the log?  (Or is
this just an FYI)

2.  What should I put in the redlist?  Should I be trying to match text in
the headers of the various usenet groups/lists I subscribe too?  And/or,
should I add email addresses of users who should not add to the spam/nospam
list?

Thanks,
MD

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Wright
Sent: Sunday, February 11, 2007 8:32 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Understanding log entries

1. Regex:Red means that the message was matched against the Regular
Expression (RegEx) you have in your Expression to Identify Redlisted Mail*
section.

2. Its considered Bayesian spam, so your system needs to be taught that it
incorrectly analysed the message by sending it to your Not Spam email
interface. So yes, sending to your assp-notspam would be the right thing to
do. 

Others may suggest you configure your mailing lists to be checked
differently (or not checked at all) from 'normal' email. I don't have a
problem with my users/mail lists so I haven't had reason to look into that
yet.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:assp-user- 
 [EMAIL PROTECTED] On Behalf Of Michelle Dupuis
 Sent: Monday, 12 February 2007 11:58 AM
 To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
 Subject: [Assp-user] Understanding log entries
 
 I have a couple of log entries that I need help with.  The first is:
 
 66.231.184.40 [EMAIL PROTECTED] to:
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
Regex:Red 'Unsubscribe'
 
 What does the Regex:Red 'Unsubscribe' mean?  Which regex is matching 
 this message?  The next is:
 
 Feb-11-07 19:43:40 66.231.184.40 asterisk-users- 
 [EMAIL PROTECTED]
 to: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
passing if safe because testmode, otherwise
Bayesian
 spam
 
 Again from the same list source;  I assume in this case I would just 
 forward the message to [EMAIL PROTECTED] domain and it will no longer be 
 trapper?
 
 Thanks,
 Michelle
 
 
 

---
 --
 Using Tomcat but need to do more? Need to support web services, 
 security?
 Get stuff done quickly with pre-integrated technology to make your job 
 easier.
 Download IBM WebSphere Application Server v.1.0.1 based on Apache 
 Geronimo
 http://sel.as-
 us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
 ___
 Assp-user mailing list
 Assp-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/assp-user

-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user