Re: [Assp-test] Antwort: Problems with Forward The Blockreportrequest to other ASSP

2011-12-28 Thread Michael M Galapchuk
Hi Thomas, The sending IP has to be in acceptAllMail We added sending IP (10.0.0.10) on the slave ASSP in acceptAllMail. BlockReportRequests and requests to resend blocked mail are processed now, but something still seems to be wrong here. Let's see the maillog. BlockReportRequest on the

Re: [Assp-test] memory leak on v1

2011-12-28 Thread marrco
Running 1.9.2.0(1.0.05) and assp as a daemon for 8+ days on a Debian squeeze. No more memory leaks. Problem seems fixed or at least reduced a lot. Anyone can confirm that? Looking at my munin stats I see an underlying problem. Sometimes my server max out Maximum Sessions (I set that to 60) and in

[Assp-test] changes in assp 2.1.2 build 11362

2011-12-28 Thread Thomas Eckardt
Hi all, changed in assp 2.1.2 build 11362: - New ASSP_OCR.pm plugin version 2.01 is available - better MSWin32 support - selectable maximum OCR tasks - enhancedOriginIPDetect is moved from hidden variables to the GUI 'enhancedOriginIPDetect','Do an Enhanced Origin IP Address Detection in

Re: [Assp-test] memory leak on v1

2011-12-28 Thread Fritz Borgstedt
ASSP development mailing list assp-test@lists.sourceforge.net schreibt: established connections that stay for 5 days (default for Debian and other *nix systems Connections must be kept open for 5 days? I do not believe that.

Re: [Assp-test] memory leak on v1

2011-12-28 Thread Fritz Borgstedt
ASSP development mailing list assp-test@lists.sourceforge.net schreibt: Lowering that limit, not keeping track or other tweaks not solve the issue that assp should properly manage and close estabilished connections. Maybe I do not understand correctly what you are saying. ASSP does not close

Re: [Assp-test] ClamAV

2011-12-28 Thread Doug Lytle
Paul Farrow wrote: How can I confirm that ASSP version 2 is using the ClamAV daemon. I Under Linux: Dec-28-11 14:38:39 m1-01119-09488 [Worker_1] 10.0.0.12 emailaddresshere to: jus...@somedomain.com ClamAV: scanned 27673 bytes in local message - OK Doug -- Ben Franklin quote: Those

Re: [Assp-test] ClamAV

2011-12-28 Thread Tim Jacob
Or go to some site like http://www.gfi.com/emailsecuritytest/ and send test email(s) On 12/28/2011 3:33 PM, Paul Farrow wrote: Hi How can I confirm that ASSP version 2 is using the ClamAV daemon. I have set up the clamavd to use socket 3310 and I have made sure the socket file is created.

Re: [Assp-test] ClamAV

2011-12-28 Thread Doug Lytle
Paul Farrow wrote: I guess I must have something wrong as I don't have that line in the log file. Under my /etc/clamav/clamd.conf: LocalSocket /var/run/clamav/clamd.ctl In ASSP: Logging, Enable ClamAV logging (ScanLog) I have set to verbose Port or file socket for ClamAV

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Ah that's the kitty. I didn't have the scanLog configuration set so it was actually scanning but not logging it. I did look for a variable to log AV scanning but my eyes were looking for something called AV... so that's why I didn't catch it. Thanks again Doug, I am pleased I have that

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Interesting, currently ASSP and ClamAV has detected one viral email from GFI, the rest of the mails are currently being delayed. Is so nice to see software just work. Thanks to Thomas and the rest of the ASSP gang that made it so great. Paul On Wed, 28 Dec 2011 15:45:23 -0400, Tim Jacob

Re: [Assp-test] ClamAV

2011-12-28 Thread Doug Lytle
Paul Farrow wrote: nteresting, currently ASSP and ClamAV has detected one viral email You may want to look into the SaneSecurity signatures for ClamAV. They pull out a ton of garbage. http://www.sanesecurity.com/ Doug -- Ben Franklin quote: Those who would give up Essential Liberty to

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Ah thanks very much will deffo look at those. Paul On Wed, 28 Dec 2011 16:49:09 -0500, Doug Lytle wrote: Paul Farrow wrote: nteresting, currently ASSP and ClamAV has detected one viral email You may want to look into the SaneSecurity signatures for ClamAV. They pull out a ton of

[Assp-test] SMTP Port attack

2011-12-28 Thread Gary Sunderland
1.9.2.2(1.0.01) (Perl 5.008008) Had a port attack today that virtually shut down assp. I was able to block the IP on the firewall to stop for now. Could assp do an autoblock? Did anyone else see this today? Gary Dec-28-11 12:03:48 Connected: 217.35.84.82:4410; Dec-28-11 12:03:48 Limiting total

[Assp-test] Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-28 Thread Victor Miasnikov
Hi! How can I confirm that ASSP version 2 is using the ClamAV daemon. I send in an email with an attachment attachment ^ ! Are You using ASSP_AFC Plugin? This plugin is an addon to the default attachment- and ClamAV- engine of ASSP . . . \Plugins\ASSP_ARC.pm exist? Last

Re: [Assp-test] SMTP Port attack

2011-12-28 Thread Fritz Borgstedt
ASSP development mailing list assp-test@lists.sourceforge.net schreibt: 1.9.2.2(1.0.01) (Perl 5.008008) Had a port attack today that virtually shut down assp. I was able to block the IP on the firewall to stop for now. Could assp do an autoblock? Did anyone else see this today? Gary Dec-28-11