Hi, I'm thinking some default settings should be changed, especially 
since most people probably use ASSP "as is" and they can cause false 
positives/negatives.

NoProcessingIps - the ipnp file has the Gmail server IP's in it, and 
alot of spam comes from gmail and it will just go through ASSP without a 
hitch...
DNSBLs - I see APEWS, Uceprotect levels 2 and 3 are present by default. 
- well APEWS is well known for being completely inaccurate, listing 
about 42% of IPV4 IPs (or more by now...) and would help generate alot 
of false positives. I know it's set to level 3 but it's still too 
dangerous IMHO.

The uceprotect levels 2 and 3 list AS numbers (lvl2) and whole ISP's 
(lvl3 - including mine for instance) based on escalations coming from 
single IP's.

In my opinion these lists are not for most people to use safely, and 
only people that know what they are and what listing criteria they use 
(or misuse) can make an informed decision to use them.


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to