Re: [Assp-test] Block spoofed addresses

2012-08-17 Thread Paul Farrow
what about taking it out of your white listed domains and find the ip range of the efax mailservers from http://www.senderbase.org/senderbase_queries/detaildomain?search_string=efax.com and put those ranges in your ipnp.txt then try other things to block the spoofing mails like regex etc, but

[Assp-test] rebuilddb removing spam which is in block report

2012-07-13 Thread Paul Farrow
Hi I seem to have spam that is removed from rebuilddb but which is shown in the block report but it is no longer on the machine hence links to get back fail because its no longer on the machine. DoMove2Num is not set and I am running 2.2.1(12176). Do I have a configuration problem? Thanks

[Assp-test] bare lf's in reporting spam confirmation email

2012-05-24 Thread Paul Farrow
Hi Just tried to report some spam (which I rarely ever have to do) to ASSP and I got this in the log and no confirmation of spam reported like I used to get. May-24-12 11:16:05 [Worker_1] Info: report message written to - /usr/local/ASSP_V2/errors/spam/Abiquo_introduction_June_7th -

Re: [Assp-test] Antwort: rebuildspamdb.pm owned by root

2012-04-10 Thread Paul Farrow
as I just changed the permissions Paul, what permission have you changed to make nobody able to run the rebuild? Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test@lists.sourceforge.net Datum: 09.04.2012 17:44 Betreff:[Assp-test] rebuildspamdb.pm owned by root

[Assp-test] rebuildspamdb.pm owned by root

2012-04-09 Thread Paul Farrow
Hi All While I was away on vacation I noticed that ASSP production upgraded to ASSP version 2.1.1(12090) - March 30th and the rebuildspamdb.pm was updated automatically. Now I have ASSP running as nobody and the new perl module owner was root which then caused rebuildspamdb.pm to then crash

Re: [Assp-test] Still not catching falsified sender domain

2012-03-30 Thread Paul Farrow
Have you tried the mail analyzer provided by ASSP, it might give you a clue as to why it is accepting it? On Fri, 30 Mar 2012 09:30:53 -0400, Michelle Dupuis wrote: I'm still trying to get settings right (and I think I'm close), but ASSP is failing to catch really obviously faked domains! I

[Assp-test] To: Email added to blacklistdomains rather than From

2012-02-07 Thread Paul Farrow
Hi When I forward the attached email header to EmailBlackAdd I get the To address added to the blacklistdomain rather than sender (From) address. This has worked in the past but doesn't appear to work for this particular email any ideas? I am running ASSP 2.1.1(11364) Thanks

Re: [Assp-test] Antwort: virus reports

2012-01-19 Thread Paul Farrow
- only a report is sent. You can use the ASSP_AFC plugin to clean the mail from a virus and replace infected parts with a text hint. Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test@lists.sourceforge.net Datum: 18.01.2012 16:45 Betreff:[Assp-test] virus

Re: [Assp-test] Antwort: Re: Antwort: virus reports

2012-01-19 Thread Paul Farrow
infected parts with a text hint. Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test@lists.sourceforge.net Datum: 18.01.2012 16:45 Betreff:[Assp-test] virus reports Can any one tell me if I have EmailVirusReportsTo set and have EmailVirusReportsToRCPT set whether

[Assp-test] virus reports

2012-01-18 Thread Paul Farrow
Can any one tell me if I have EmailVirusReportsTo set and have EmailVirusReportsToRCPT set whether EmailVirusReportsTo actually gets a copy of the email or not? It doesn't seem to on my version of ASSP 2.1.1(11364). If that is correct it would be nice to get a copy of all virus emails as

Re: [Assp-test] virus reports

2012-01-18 Thread Paul Farrow
Actually when I say virus emails, I actually mean virus email reports. That is one way Doug, thanks. Paul On Wed, 18 Jan 2012 11:22:47 -0500, Doug Lytle wrote: Paul Farrow wrote: so I can keep an eye on whats coming in. As an alternative, I have mine setup to quarantine and then created

[Assp-test] since upgrading to ASSP version 2.1.1(11364)

2012-01-04 Thread Paul Farrow
I have logging continually going to the maillog.txt. Jan-04-12 08:07:00 [Worker_1] Message-Score: added 5 for limiting 62.215.228.66 connections to 5, total score for this message is now 5 Jan-04-12 08:07:00 [Worker_1] Limiting 62.215.228.66 connections to 5 Jan-04-12 08:07:00 [Worker_1]

Re: [Assp-test] Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
I saw that also Doug but didn't think it was my problem. Thanks Paul On Thu, 29 Dec 2011 10:35:17 -0500, Doug Lytle wrote: Paul Farrow wrote: Can't locate Crypt/OpenSSL/RSA.pm in @INC (@INC contains Google says: This looks like a missing dependency on libcrypt-openssl-bignum-perl when

Re: [Assp-test] Antwort: Re: Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
::AES Crypt::OpenSSL::RSA Crypt::OpenSSL::Random via cpan Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 29.12.2011 16:30 Betreff:Re: [Assp-test] Antwort: Re: Are You using ASSP_AFC Plugin

Re: [Assp-test] Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
a perl expert - how can I fix this please? Paul On Thu, 29 Dec 2011 16:17:00 +0100, Thomas Eckardt wrote: run perl -e use Mail::DKIM::Verifier; perl -e use Mail::DKIM; this should show you the reason Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list

Re: [Assp-test] Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
What does the plugin give you that the standard ASSP V2 and ClamAV give you? Thanks Paul On Thu, 29 Dec 2011 09:33:46 +0300, Victor Miasnikov wrote: Hi! How can I confirm that ASSP version 2 is using the ClamAV daemon. I send in an email with an attachment attachment ^ !

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
that working now. Cheers Paul On Wed, 28 Dec 2011 15:09:39 -0500, Doug Lytle wrote: Paul Farrow wrote: I guess I must have something wrong as I don't have that line in the log file. Under my /etc/clamav/clamd.conf: LocalSocket /var/run/clamav/clamd.ctl In ASSP: Logging, Enable ClamAV

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
wrote: Or go to some site like http://www.gfi.com/emailsecuritytest/ and send test email(s) On 12/28/2011 3:33 PM, Paul Farrow wrote: Hi How can I confirm that ASSP version 2 is using the ClamAV daemon. I have set up the clamavd to use socket 3310 and I have made sure the socket file

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Ah thanks very much will deffo look at those. Paul On Wed, 28 Dec 2011 16:49:09 -0500, Doug Lytle wrote: Paul Farrow wrote: nteresting, currently ASSP and ClamAV has detected one viral email You may want to look into the SaneSecurity signatures for ClamAV. They pull out a ton

Re: [Assp-test] block reports

2011-12-08 Thread Paul Farrow
Sure I can do that. I guess that's a trait of the very old version 1 ASSP that I came from originally. On Thu, 08 Dec 2011 17:10:23 +0100, Fritz Borgstedt wrote: Try to set webAdminPort to 5. ( remove |2|3|4)

Re: [Assp-test] Antwort: block reports

2011-12-08 Thread Paul Farrow
sent directly to you. Thanks On Thu, 8 Dec 2011 17:13:41 +0100, Thomas Eckardt wrote: Paul, please could you repost the report text in an attachment (zip if possible) - SF and mail clients are breaking lines. So I'm unable to see what you mean. Thomas Von:Paul Farrow

Re: [Assp-test] Antwort: Re: Antwort: mail rejected because of BCC not local

2011-12-05 Thread Paul Farrow
Thank you. I appreciate it. Paul On Mon, 5 Dec 2011 10:01:11 +0100, Thomas Eckardt wrote: I have looked at the GUI can't see it 'Info and Stats' - 'Server Information' - ASSP version - release + beta Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test

Re: [Assp-test] Antwort: mail rejected because of BCC not local

2011-12-04 Thread Paul Farrow
.) This is a 'production' version - this is the 'test' list! 2.) build 11278 don't has this feature. Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test@lists.sourceforge.net Datum: 04.12.2011 00:06 Betreff:[Assp-test] mail rejected because of BCC not local Hi

[Assp-test] mail rejected because of BCC not local

2011-12-03 Thread Paul Farrow
Hi Thomas/Guys Sometime ago you told me that the removeForeignBCC on the command line was put into a later version than that of what I was running at the time. I have just upgraded to ASSP 2.1.1(11278) and I am still eeing these warnings. Is it a problem of ASSP or just how I have called

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-21 Thread Paul Farrow
to: x...@thefabfarrows.com finished message - received DATA size: 899 Byte - sent DATA size: 0 Byte what am I doing wrong? Thanks Paul On Thu, 20 Oct 2011 09:21:16 -0400, Paul Farrow wrote: Ah so I cant get the original message back for that one? No big deal, I did it the old school way

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-21 Thread Paul Farrow
version is a bit too old check the output of an interactive start - is there a line ? info: internal variable 'removeForeignBCC' was set to '1' or anything like warning: unknown parameter '$k' used at command line '$_' Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
with the startup switch 'removeForeignBCC:=1' or add the following line to sub 'set' in 'lib/CorrectASSPcfg.pm' $main::removeForeignBCC:=1; Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 19.10.2011 22:53

Re: [Assp-test] Antwort: Re: Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
--removeForeignBCC:=1 The definition of the base folder (/opt/assp) is required if any other command line parameter is defined! or use : perl assp.pl --usage and follow the instructions (latest builds only) Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
release. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 20.10.2011 14:24 Betreff:Re: [Assp-test] Antwort: Re: Antwort: Re: Mail rejected because of BCC not local Super. Any plans to make

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
and some others - leads in changes of the SNMP-MIB file (OID's). If someone uses SNMP to control/watch/configure/stats assp - it is horror, if the MIB's are changed in every release. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
in discarded - at max. header only, because blocked before body could be sent. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 20.10.2011 15:14 Betreff:Re: [Assp-test] Mail rejected because of BCC

[Assp-test] general question about dnsbl

2011-10-20 Thread Paul Farrow
Ok so its my day today. Got an email that got blocked by dnsbl. Basically the email is on routing ip's and it is a valid email. How do you guys generally deal with this problem? Do you remove the dnsbl site that is blocking most of them from coming in or what do you do? Since moving to

Re: [Assp-test] Antwort: general question about dnsbl

2011-10-20 Thread Paul Farrow
and message-score will be increased by the valence value. in monitoring mode: same like scoring mode without changing the IP-score and message-score Put an IP that you don't want to be checked in 'noRBL'. Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test

Re: [Assp-test] Antwort: Re: Antwort: general question about dnsbl

2011-10-20 Thread Paul Farrow
Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 20.10.2011 16:54 Betreff:Re: [Assp-test] Antwort: general question about dnsbl I put the ip in noRBL although they are dynamic addresses so likely

[Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
Hi Guys I just bought some ink from the Epson store and their email has a BCC to themselves !! Now I have the email that they send from in my whitedomains but the BCC not being local gets it sent to the discard folder. Is there a way to allow this for just one sender rather than stop the

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
or whitelist settings. Thomas snip -- /Anders From: Paul Farrow a...@thefabfarrows.com To: assp-test@lists.sourceforge.net Date: 2011-10-19 22:40 Subject:[Assp-test] Mail rejected because of BCC not local Hi Guys I just bought some ink from

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
snip -- /Anders From: Paul Farrow a...@thefabfarrows.com To: assp-test@lists.sourceforge.net Date: 2011-10-19 22:40 Subject:[Assp-test] Mail rejected because of BCC not local Hi Guys I just bought some ink from the Epson store and their email has a BCC

[Assp-test] notspam file names

2011-10-05 Thread Paul Farrow
Hi guys Since switching from ASSP Version 1 to ASSP Version 2 I noticed that the notspam file names have hyphens at the end rather than underbar like in Version 1 ie --116.eml not __116.eml. Is this configurable? The reason I ask is because you can no longer grep the directory of spam or

Re: [Assp-test] Antwort: Re: Antwort: Re: Antwort: notspam file names

2011-10-05 Thread Paul Farrow
with assp. 1. type before think 2. don't read 3. edit an assp file externaly 4 Keep in mind, all assp files are UTF-8 files without a BOM (byte order mark). No problem if all characters are 7-bit clean. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-04 Thread Paul Farrow
I didn't realise that. Learn something everyday. Changed my firewall, clients and config to adhere to to that. Thanks Paul On Tue, 04 Oct 2011 06:51:05 -0400, Charles Marcus wrote: On 2011-10-03 11:20 PM, Paul Farrow a...@thefabfarrows.com wrote: If I telnet'd to port 25 it would

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
revert my currently done code changes. ASSP should not allow any SMTP misbehave - how ever, this check could be disabled in the next release by setting 'etValencePB' to zero. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
of the problem or that it isn't a problem with my setup if no one else is seeing this. I don't want to feel a lemon in the face of the mighty Mozilla !! Thanks again Paul On Mon, 03 Oct 2011 08:14:19 -0400, Charles Marcus wrote: On 2011-10-03 8:08 AM, Paul Farrow a...@thefabfarrows.com wrote: I

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
transparent in the greeting - what you see comes from your MTA. Paul download and try 2.0.2_3.3.01 and set 'etValencePB' to zero. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 03.10.2011 14:09 Betreff

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
' to zero. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 03.10.2011 14:09 Betreff:Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2 I take it other fokes can reproduce this problem I am

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
Eckardt wrote: ASSP acts transparent in the greeting - what you see comes from your MTA. Paul download and try 2.0.2_3.3.01 and set 'etValencePB' to zero. Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-02 Thread Paul Farrow
misbehave. The next release will ignore this mistake, if the mail is outgoing or the sending IP matches accepAllMail. Thomas Von:Paul Farrow a...@thefabfarrows.com An: assp-test@lists.sourceforge.net Datum: 02.10.2011 03:09 Betreff:[Assp-test] Thunderbird SSL/TLS with ASSP

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-02 Thread Paul Farrow
possibly tomorrow Thomas Von:Paul Farrow a...@thefabfarrows.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 02.10.2011 13:43 Betreff:Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2 Hi Thomas I kinda find it hard to believe

[Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-01 Thread Paul Farrow
Hi Guys I have just switched from ASSP Version 1 to ASSP Version 2 and can't get my Thunderbird (Mac or PC) clients to authenticate over SSL/TLS. The error I see is Oct-01-11 20:58:06 [Worker_1] Connected: 10.1.10.149:49514 70.88.29.81:465 70.88.29.81:45014 70.88.29.81:125 , 7-16