Re: [Assp-user] Multiple SSL certs

Hi Thomas That is interesting would this also work with multi domain certificates where there is only 1 certificate file but multiple domains allowed by the certificate? Thanks John From: Thomas Eckardt [mailto:thomas.ecka...@thockar.com] Sent: June-21-17 9:27 AM To: For Users of

[Assp-user] spambox, roundcube and dovecot

Hi All Ok so I have an issue now where users that try to view the spambox in roundcube, they see an empty box, this seems to happen on most accounts nut not all. I have been working with cpanel support to try to find the cause and it seems related to this Version: assp 1.9.9 (13345)

[Assp-user] incorrect scoring from bombheaderre

Hi All Recently I notice most message are getting scored with this Feb-23-1709:07:40 198.61.254.45 sen...@email.com to: recipi...@mail.com [scoring:16] -- bombHeaderRe: 's.com (16)' -- [Reminder: subject]; I don't have anything remotely close to s.com in the

Re: [Assp-user] question about setting up backup mx server

Anyone? -Original Message- From: Ethical Host - John MacKenzie [mailto:j...@ethicalhost.ca] Sent: July-13-16 9:40 AM To: 'For Users of ASSP' Subject: [Assp-user] question about setting up backup mx server I am working to setup a backup mx server for my hosting, I am currently running

[Assp-user] question about setting up backup mx server

I am working to setup a backup mx server for my hosting, I am currently running 1.9.9 (13345) And I need to know if there are any issues or considerations that need to be looked at in terms of spam filtering since the way I understand it when mail comes from the backup MX server it will look to

Re: [Assp-user] SAN ssl suport

-- From: Grayhat [mailto:gray...@gmx.net] Sent: June-17-16 3:07 AM To: assp-user@lists.sourceforge.net Subject: Re: [Assp-user] SAN ssl suport :: On Thu, 16 Jun 2016 08:52:09 -0400 :: <072801d1c7cd$e522a0d0$af67e270$@ca> :: "Ethical Host - John MacKenzie" <j...@ethicalhost

Re: [Assp-user] SAN ssl suport

slowness. I wonder if it's the certificate... On Thu, Jun 16, 2016 at 8:52 AM, Ethical Host - John MacKenzie < j...@ethicalhost.ca> wrote: > Hi All > > > > Does either version of assp (currently im on 1.x but going to be > upgrading to 2.x soon) > > Have support for SAN

[Assp-user] SAN ssl suport

Hi All Does either version of assp (currently im on 1.x but going to be upgrading to 2.x soon) Have support for SAN wildcard ssl certificates? I tried using it but assp seemed to only pull the first domain listed on the certificate for validation which doesn't work for me Thanks

[Assp-user] bounce spam message not logged anywhere?

Ok so I have a user who is not getting messages from a certain sender at his email address (if he sends to me I get them fine) The bounce message contains this 554 5.7.1 Mail (id-42894-11675) appears to be unsolicited, please resend with the code yjehu3ap appended to email subject and ask

Re: [Assp-user] whitesenderbase error

with results of outdated versions Thomas Von:Ethical Host - John MacKenzie j...@ethicalhost.ca An: 'For Users of ASSP' assp-user@lists.sourceforge.net Datum: 07.08.2015 22:46 Betreff:Re: [Assp-user] whitesenderbase error Anyone have any thoughts, this is still happening. Many domains

Re: [Assp-user] whitesenderbase error

Anyone have any thoughts, this is still happening. Many domains are scoring as whitesenderbase but they don't exist in the file? Thanks John -Original Message- From: Ethical Host - John MacKenzie [mailto:j...@ethicalhost.ca] Sent: July-08-15 2:16 PM To: 'For Users of ASSP' Subject

[Assp-user] whitesenderbase error

Hi all I see this in some emails, you will see -16 whitesenderbase for 126.com so there are 2 problems with this 1) 126.com does not exist in my white senderbase 2) My scoring for whitesenderbase was changed to .13 a few days ago. X-Assp-Version: 1.9.9(13345) on my.server

[Assp-user] FW: Please update your billing information

From: My Rogers | Mon Rogers [mailto:serv...@rci.rogers.com] Sent: February-18-15 4:33 PM To: undisclosed-recipients: Subject: Please update your billing information It has came to our attention that your billing information is out of date. To ensure that your service will not be

Re: [Assp-user] FW: Please update your billing information

Oops sorry! -Original Message- From: Ethical Host - John MacKenzie [mailto:j...@ethicalhost.ca] Sent: February-18-15 8:05 PM To: 'For Users of ASSP' Subject: [Assp-user] FW: Please update your billing information From: My Rogers | Mon Rogers [mailto:serv...@rci.rogers.com] Sent

Re: [Assp-user] ASSP resendmail problem after switching to TLS only

Thomas Thanks for your replies on this but I don't totally understand why its not actually an issue. I understand that the connection between EXIM and ASSP doesn't matter at all. Doesn't the connection between the Sender and then server use SSLv3? And this connection presumable traverses a few

[Assp-user] new spam coming through with different characters in subject

Hi all Not sure how to add entries into bombsubject etc for emails that do this Here is one such subject: iոtеrոеt servісe cоսlԁ be ѕusρеոԁed They use different character sets (looks like some greek letter fonts in there as the n and u and p letters) for certain letters and it all

Re: [Assp-user] trouble adding records to bombsubjectre

to bombsubjectre Hi John, I'm no regex expert, but I think you should test that one: ((re|fw):\s?)?(lol|wow|hi|hello|heh|h[ea]\s*h[ea])?\s*((:|=)\))? BTW, you can use tools like Kodos or Visual-Regexp to help you build/test your patterns. Eric On 08/11/2014 10:01 AM, Ethical Host - John MacKenzie

[Assp-user] trouble adding records to bombsubjectre

Hi all I have been trying to add some entries in the bombsubject re for emails that have these in the subject I know the bracket is a special character and ive tried escaping that out removing it etc.. to no avail plus the : ive tried escaping it and not and it still doesn't seem to want to score

Re: [Assp-user] how to change the SSL cipher to mitigate beast

Thomas This is still an issue, did it ever get fixed for v 1.9X? I cant use 2.0 until assp deluxe upgrades their offering later in the year to support v2 Thanks! John -Original Message- From: Ethical Host - John MacKenzie [mailto:j...@ethicalhost.ca] Sent: November-17-13 2:26 PM

Re: [Assp-user] noprocessing not being listened to?

No one knows? From: Ethical Host - John MacKenzie [mailto:j...@ethicalhost.ca] Sent: April-11-14 2:20 PM To: 'For Users of ASSP' Subject: noprocessing not being listened to? Hi all I see this with a lot of messages Quick question seems like assp it scoring bayes on messages

[Assp-user] noSpoofingCheckDomain not working?

Using 14079 The domain is listed in noSpoofingCheckDomain yet is still getting a spoofing score?? ggroups+bncbc5mfavvuejbbwfk4snakgqereo6...@googlegroups.com to: off...@domain.ca Message-Score: added 18 for No Spoofing Allowed 'fina...@domain.ca' in 'from', total score for this message is

[Assp-user] noprocessing not being listened to?

Hi all I see this with a lot of messages Quick question seems like assp it scoring bayes on messages that are from IPS in No processing and I DO NOT have it checked to scan no processing? Is this a bug? X-Assp-Version: 1.9.9(14079) on host.myserver.com X-Assp-noProcessingIPs:

[Assp-user] msgid problem?

Hi all I am seeing an issue as follows X-Assp-Score: 40 (MSGID-sig check failed for bouncing sender boun...@bounce2.zulily.com) And also they are being scored for mailer-daemon emails too even though I have this set in file:files/bouncesenders.txt postmaster mailer-daemon

Re: [Assp-user] logfiles get wiped out when rolling over

Fritz Hmm looks like not Mar-22-14 09:48:02 new log file -- old log file renamed to '14-03-22.maillog.txt' Log info in between Mar-22-14 09:50:20: Rolling log file -- archive saved as '14-03-22.maillog.txt' So again its wiped out all the log data... it seems like its assp doing both items,

[Assp-user] logfiles get wiped out when rolling over

Ok this has been plaguing me for a while now and need a solution When the maillog rolls over it wipes out most of the data! See here the log rolled at 14:27 and printed that at the top Dec-05-13 14:27:27 new log file -- old log file renamed to '13-12-05.maillog.txt' However it

Re: [Assp-user] logfiles get wiped out when rolling over

Hi Fritz Hmmm so why would it create a new file and then shortly thereafter sorry am using 14072 I said that wrong before. This is what is in the file called 14-03-19.maillog.txt Mar-19-14 22:20:03 new log file -- old log file renamed to '14-03-19.maillog.txt' Various log entries

Re: [Assp-user] outgoing email validate sender not working?

Fritz Thanks! But I did set that to blocked, and I can still send out email as my own gmail account when I test it so your saying that setting SHOULD work? Any ideas why its not? Thanks John -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: March-08-14 11:40 AM

[Assp-user] problem with noprocessing IPs and whitesenderbase

Hi Fritz Ok so I have IPs automatically added to my ipnp.txt (noprocessingips list) and I don't know why this is happening. I cant find any setting stating that this should happen or why. Looking in the logs I see this and then the IP gets added to the noprocessing ips after getting the

Re: [Assp-user] problem with noprocessing IPs and whitesenderbase

Fritz Ok thanks so I should not use a noprocessing IP list anymore? I should do both of the below one or the other? Thanks John -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: January-22-14 10:13 AM To: For Users of ASSP Subject: Re: [Assp-user] problem with

Re: [Assp-user] whitesenderbase issue and negative scoring in bombsenderre

Thomas Good point I used to have them in the bombHeaderRe but they stopped working in that file so I tried a different one from someone elses suggestion. I will try it again back in the header file. Thanks John -Original Message- From: Thomas Eckardt [mailto:thomas.ecka...@thockar.com]

Re: [Assp-user] whitesenderbase issue and negative scoring in bombsenderre

Fritz Ok hmm ok thanks! I updated that, what about the bombsenderre question? Thanks John -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: December-16-13 3:59 PM To: For Users of ASSP Subject: Re: [Assp-user] whitesenderbase issue and negative scoring in

[Assp-user] whitesenderbase issue and negative scoring in bombsenderre

Fritz sorry for the delay I was waiting to see if the latest updates solved the issues, and it seems like it may have solved the whitedomains issue, but I still have a couple issues 1) Whitesenderbase not scoring emails correctly example below. @wordpress.com is listed in

Re: [Assp-user] Whitelisted domains being ignored

Sorry I didn't mean to hijack this users thread, so I will start my own with the various issues I see. Thanks John -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: December-04-13 4:31 PM To: For Users of ASSP Subject: Re: [Assp-user] Whitelisted domains being

Re: [Assp-user] Whitelisted domains being ignored

I confirm I also have this issue with 13300 and 13337 As well whiteorg.txt domains do not get processed correctly either. (whitesenderbase) J -Original Message- From: James Moe [mailto:ji...@sohnen-moe.com] Sent: December-04-13 3:02 PM To: For Users of ASSP Subject: [Assp-user]

[Assp-user] SSL handshake error from Yahoo emails

Hi All I have an error that I see and it only appears to be from Yahoo/Rogers connections, no others, SSL negotiation with client failed: SSL connect accept failed because of handshake problems error::lib(0):func(0):reason(0); Does anyone have any idea how to solve this as I

Re: [Assp-user] pbwhite adding Positive scoring?

Ok thanks I think I get it now How do I set or score pbwhite results? John -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: November-17-13 11:02 PM To: For Users of ASSP Subject: Re: [Assp-user] pbwhite adding Positive scoring? For Users of ASSP

[Assp-user] pbwhite adding Positive scoring?

Hi All I have a few odd things happening. Am using v 1.9 because assp deluxe for cpanel does not support 2.X 1) Any IP that is listed in the pbwhite is getting scored with a Positive score taken from the sbnValencePB this seems wrong as a white list should be giving a negative score

[Assp-user] how to change the SSL cipher to mitigate beast

Thomas Never heard back could we get this solved in V1.9 as well please? Thanks John -- DreamFactory - Open Source REST JSON Services for HTML5 Native Apps OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and

Re: [Assp-user] pbwhite adding Positive scoring?

Fritz Thanks for your reply. Ok But what if I want to at least do country code blocking?? I get the no result scoring even if I turn off org blocking. OR how can I turn off noresult scoring? And it may not be supposed to be governed by that value but when I change it, it changes to exactly the

Re: [Assp-user] help with smtp attack

: September-05-13 2:09 PM To: For Users of ASSP Subject: Re: [Assp-user] help with smtp attack -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/05/2013 06:47 AM, Ethical Host - John MacKenzie wrote: Just a quick question as my SMTP is getting hit with tons of bogus requests (1 or 2 per second) Do

Re: [Assp-user] help with smtp attack

Hi Doug Thanks so much for your reply! I've installed it and configured it according to this http://www.fail2ban.org/wiki/index.php/ASSP but I added in the regex failregex = .*? \d{5}-\d{5} HOST .*? got \'non printable hex data\' from the client before the (.*) nothing gets logged so far.

[Assp-user] help with smtp attack

Just a quick question as my SMTP is getting hit with tons of bogus requests (1 or 2 per second) Basically I need to know how to adapt this script to work with asps logs? http://forums.cpanel.net/f185/sustained-exim-attack-syntax-errors-mitigation -measures-338792.html#post1456572 in

Re: [Assp-user] help with smtp attack

Doug Thanks for that help. Ok I updated the date format then added in this in the assp.conf file: failregex = HOST \[EarlyTalker\] got \'non printable hex data\' and that seems to work when I run the test Thanks a lot! So these entries just get added to the iptables firewall, but would they

[Assp-user] how to change the SSL cipher to mitigate beast

Thomas Ok thanks! Seems like I am attracted bugs! I always seem to find them. My server is using cpanel and assp deluxe which is still on 1.9X so would appreciate an update to that as well if its not too much trouble. Thanks! John I confirm that this is a BUG in the

[Assp-user] Antwort: how to change the SSL cipher to mitigate beast

Thomas Ok thanks! Seems like I am attracted bugs! I always seem to find them. My server is using cpanel and assp deluxe which is still on 1.9X so would appreciate an update to that as well if its not too much trouble. Thanks! John I confirm that this is a BUG in the

[Assp-user] how to change the SSL cipher to mitigate beast

Sorry for the delay, I wanted to update the status of this issue, as I did set the ssl_cipher_list in ASSP, I thought it worked for setting the cipher on SMTP (see below appears not now), but it does not appear to affect the https: connections on port 5 and 3 for the web interface? I

Re: [Assp-user] how to change the SSL cipher to mitigate beast

not used in assp Thomas Von:Ethical Host - John MacKenzie j...@ethicalhost.ca An: assp-user@lists.sourceforge.net, Datum: 11.06.2013 17:55 Betreff:[Assp-user] how to change the SSL cipher to mitigate beast Well I posted this some time ago with no response so will try

[Assp-user] how to change the SSL cipher to mitigate beast

Well I posted this some time ago with no response so will try the mail list http://minimalcms.sourceforge.net/demo/proxy/apps/phpbb/assp/viewtopic.php?f =7 http://minimalcms.sourceforge.net/demo/proxy/apps/phpbb/assp/viewtopic.php? f=7t=1994sid=cde5a1fbacd7f67c926a2741e964106a