Well, you sure do have a whole bunch of these kinds of warnings:

Mar-11-10 16:38:16 [init] Warning: RWLCache contains 255631 records
(allocating at least 59.6MB) - it is highly recommeded to use a database for
'pbdb'

Maybe this is the problem?

Thomas: 'recommeded' is mis-spelled - it should be recommended...
                                                          ^

On 2010-03-12 3:46 PM, Masood Rahim wrote:
> Hi,
> 
> I have answered your questions below regarding the assp process dying
> constantly.  It seems like it is now dying more frequently (several times
> per day) after upgrading to perl 5.10.1 vs using the perl 5.8.8 I used to be
> using which would die maybe once or twice a day.
> ----------------------------------------------------------------------------
> ------------------- 
> Date: Fri, 12 Mar 2010 20:28:42 +0100
> From: Thomas Eckardt <thomas.ecka...@thockar.com>
> Subject: Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>       
> <titc.8687d3e3c9.ofb1b8fe16.d171ebab-onc12576e4.006a1ad6-c12576e4.006b0...@t
> hockar.com>
>       
> Content-Type: text/plain; charset="us-ascii"
> 
>> I don't have any other debugging information.
> 
>> is there a file exception.log in the assp dir ?
> 
> Nope.
> 
>> are there any errors or warnings logged in mallog.txt ?
> Nope, nothing there.  When I look at the end of the maillog.txt file after
> the assp process has died it just has a log entry of the last connection it
> processed.
>> Do you use any DB for the hashes. Has you configured assp to use BerkeleyDB
> for internal hashes, rebuildspamdb hashes and griplist?
> I don't use the DB for anything.  Also I'm not using the BerkeleyDB for
> internal caches, nor am I using it for rebuildspamdb, nor am I using it for
> griplist.
>> How is the memory usage of assp?
> System has 512 MB of memory, I just restarted the ASSP process and 5 minutes
> later it is currently utilizing 51.2% of memory and over 100% of CPU.  (This
> server does nothing else but ASSP).
> 
>> How many SMTP workers are running?
> 10
>> How many connection per day?
> Approximately 275,000 connections per day.
> 
>> Do you use any Plugin?
> Here are the modules loaded at start:
> Mar-11-10 16:38:08 [init] Threads module 1.76 installed 
> Mar-11-10 16:38:08 [init] Threads::shared module 1.33 installed 
> Mar-11-10 16:38:08 [init] Thread::Queue module 2.11 installed 
> Mar-11-10 16:38:08 [init] IO::Poll module 0.07 installed 
> Mar-11-10 16:38:08 [init] IO::Select module 1.17 installed 
> Mar-11-10 16:38:08 [init] ASSP is using IOEngine - Poll
> Mar-11-10 16:38:08 [init] Thread::State module version 0.09 installed and
> available
> Mar-11-10 16:38:08 [init] Net::DNS module version 0.66 installed and
> available
> Mar-11-10 16:38:08 [init] Email::Valid module version 0.182 installed and
> available
> Mar-11-10 16:38:08 [init] Net::SMTP module version 2.31 installed and
> available
> Mar-11-10 16:38:08 [init] Mail::SPF::Query module is not installed.
> Mar-11-10 16:38:08 [init] Mail::SPF module version 2.007 installed and
> available
> Mar-11-10 16:38:08 [init] Compress::Zlib module version 2.02 installed -
> HTTP compression available
> Mar-11-10 16:38:08 [init] Digest::MD5 module version 2.39 installed -
> delaying can use MD5 keys for hashes
> Mar-11-10 16:38:08 [init] Digest::SHA1 module version 2.12 installed - BATV
> and FBMTV check available
> Mar-11-10 16:38:08 [init] File::ReadBackwards module version 1.04 installed
> - searching of log files enabled
> Mar-11-10 16:38:08 [init] Time::HiRes module version 1.9719 installed - CPU
> usage statistics available
> Mar-11-10 16:38:08 [init] Sys::Syslog module version 0.27 installed - Unix
> centralized logging enabled
> Mar-11-10 16:38:08 [init] Tie::RDBM module is not installed - database usage
> not available
> Mar-11-10 16:38:08 [init] DB_File module version 1.82 installed - DB_File
> (Berkeley V1) database usage available
> Mar-11-10 16:38:08 [init] Warning: BerkeleyDB database version 4.3 /
> Sleepycat Software: Berkeley DB 4.3.29: (September 12, 2006) installed - but
> at least version 4.5 is required - Berkeley database usage not available
> Mar-11-10 16:38:08 [init] Info: griplist is using basic 'orderedtie' in file
> /usr/share/assp/griplist
> Mar-11-10 16:38:08 [init] Net::IP::Match::Regexp module version 1.01
> installed - CIDR notation for IP range available
> Mar-11-10 16:38:08 [init] Net::CIDR::Lite module version 0.20 installed -
> hyphenated IP address range available
> Mar-11-10 16:38:08 [init] Net::SenderBase module version 1.01 installed -
> Query the senderbase service available
> Mar-11-10 16:38:08 [init] LWP::Simple module version 5.827 installed -
> procedural LWP interface available
> Mar-11-10 16:38:08 [init] Email::MIME::Modifier module version 1.903
> installed - MIME charset decoding and conversion interface and attachment
> detection available
> Mar-11-10 16:38:08 [init] MIME::Types module version 1.28 installed - TNEF
> conversion may possible
> Mar-11-10 16:38:08 [init] Email::Send module version 2.198 installed -
> sending .eml files available
> Mar-11-10 16:38:08 [init] Convert::TNEF module version 0.17 installed - TNEF
> conversion is available
> Mar-11-10 16:38:08 [init] Mail::DKIM::Verifier module is not installed -
> DKIM verification not available
> Mar-11-10 16:38:08 [init] Schedule::Cron module version 0.99 installed -
> RebuildSpamdb Scheduler is available
> Mar-11-10 16:38:08 [init] Sys::MemInfo module version 0.91 installed -
> memory calculation is available
> Mar-11-10 16:38:08 [init] IO::Socket::SSL module version 1.32 installed -
> https and TLS/SSL is possible
> Mar-11-10 16:38:08 [init] Info: openssl is installed - try to create basic
> SSL-certificates
> Mar-11-10 16:38:08 [init] Warning: server certificate
> ae3b2c498de5850f24f10d15325a390af53e312c46fb735bf387abad0aa032331d3eb1c4b019
> 2e5d0025240e12 not found
> Mar-11-10 16:38:08 [init] Warning: server public-key
> ae3b2c498de5850f24f10d15325a390af53e312c46fb735b245bcc8d6faf28ec8363650082a1
> 80e30024530dad not found
> Mar-11-10 16:38:08 [init] Warning: https and TLS/SSL is disabled
> Mar-11-10 16:38:08 [init] Listening for SMTP connections on 0.0.0.0:25
> Mar-11-10 16:38:08 [init] Listening for admin HTTP connections on 55555
> Mar-11-10 16:38:08 [init] Listening for stat HTTP connections on 55553
> Mar-11-10 16:38:08 [init] Switched effective gid to 500 (assp)
> Mar-11-10 16:38:08 [init] Switched real gid to 500 (assp)
> Mar-11-10 16:38:08 [init] Switched effective uid to 500 (assp)
> Mar-11-10 16:38:08 [init] Switched real uid to 500 (assp)
> Mar-11-10 16:38:08 [init] Warning: unclean shutdown of ASSP detected
> Mar-11-10 16:38:08 [init] Saving config
> Mar-11-10 16:38:08 [init] Finished saving config
> Mar-11-10 16:38:08 [init] Info: Whitelist loaded from
> /usr/share/assp/whitelist with 0 records
> Mar-11-10 16:38:08 [init] Info: Redlist loaded from /usr/share/assp/redlist
> with 0 records
> Mar-11-10 16:38:08 [init] Info: Delay loaded from /usr/share/assp/delaydb
> with 0 records
> Mar-11-10 16:38:08 [init] Info: DelayWhite loaded from
> /usr/share/assp/delaydb.white with 0 records
> Mar-11-10 16:38:08 [init] Info: PBWhite loaded from
> /usr/share/assp/pb/pbdb.white.db with 1146 records
> Mar-11-10 16:38:08 [init] Info: PBWhite contains 1146 records - it is
> recommeded to use a database for 'pbdb'
> Mar-11-10 16:38:11 [init] Info: PBBlack loaded from
> /usr/share/assp/pb/pbdb.black.db with 176079 records
> Mar-11-10 16:38:11 [init] Warning: PBBlack contains 176079 records
> (allocating at least 63.9MB) - it is highly recommeded to use a database for
> 'pbdb'
> Mar-11-10 16:38:12 [init] Info: RBLCache loaded from
> /usr/share/assp/pb/pbdb.rbl.db with 71582 records
> Mar-11-10 16:38:12 [init] Warning: RBLCache contains 71582 records
> (allocating at least 30.5MB) - it is highly recommeded to use a database for
> 'pbdb'
> Mar-11-10 16:38:12 [init] Info: URIBLCache loaded from
> /usr/share/assp/pb/pbdb.uribl.db with 1236 records
> Mar-11-10 16:38:12 [init] Info: URIBLCache contains 1236 records - it is
> recommeded to use a database for 'pbdb'
> Mar-11-10 16:38:12 [init] Info: PTRCache loaded from
> /usr/share/assp/pb/pbdb.ptr.db with 2201 records
> Mar-11-10 16:38:12 [init] Info: PTRCache contains 2201 records - it is
> recommeded to use a database for 'pbdb'
> Mar-11-10 16:38:12 [init] Info: MXACache loaded from
> /usr/share/assp/pb/pbdb.mxa.db with 0 records
> Mar-11-10 16:38:16 [init] Info: RWLCache loaded from
> /usr/share/assp/pb/pbdb.rwl.db with 255631 records
> Mar-11-10 16:38:16 [init] Warning: RWLCache contains 255631 records
> (allocating at least 59.6MB) - it is highly recommeded to use a database for
> 'pbdb'
> Mar-11-10 16:38:16 [init] Info: SPFCache loaded from
> /usr/share/assp/pb/pbdb.spf.db with 1854 records
> Mar-11-10 16:38:16 [init] Info: SPFCache contains 1854 records - it is
> recommeded to use a database for 'pbdb'
> Mar-11-10 16:38:19 [init] Info: SBCache loaded from
> /usr/share/assp/pb/pbdb.sb.db with 170393 records
> Mar-11-10 16:38:19 [init] Warning: SBCache contains 170393 records
> (allocating at least 62.0MB) - it is highly recommeded to use a database for
> 'pbdb'
> Mar-11-10 16:38:19 [init] Info: PBTrap loaded from
> /usr/share/assp/pb/pbdb.trap.db with 0 records
> Mar-11-10 16:38:19 [init] Info: DKIMCache loaded from
> /usr/share/assp/pb/pbdb.dkim.db with 169 records
> Mar-11-10 16:38:19 [init] Info: BATVTag loaded from
> /usr/share/assp/pb/pbdb.batv.db with 0 records
> Mar-11-10 16:38:19 [init] Info: BackDNS loaded from
> /usr/share/assp/pb/pbdb.back.db with 206 records
> Mar-11-10 16:38:23 [init] Info: Spamdb loaded from /usr/share/assp/spamdb
> with 218772 records
> Mar-11-10 16:38:23 [init] Warning: Spamdb contains 218772 records
> (allocating at least 57.6MB) - it is highly recommeded to use a database for
> 'spamdb'
> Mar-11-10 16:38:23 [init] Info: HeloBlack loaded from
> /usr/share/assp/spamdb.helo with 210 records
> Mar-11-10 16:38:23 [init] Info: LDAPlist loaded from
> /usr/share/assp/ldaplist with 0 records
> Mar-11-10 16:38:23 [init] Starting maintenance worker thread [10000] -
> ThreadCylcleTime is set to 3000 microseconds
> Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 127.0.0.1: ResponseTime
> = 1 ms
> Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 129.250.35.250:
> ResponseTime = 14 ms
> Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 209.75.26.5:
> ResponseTime = 1 ms
> Mar-11-10 16:38:23 [Worker_10000] Worker_10000 started
> Mar-11-10 16:38:24 [init] Starting rebuild SpamDB worker thread [10001] -
> ThreadCylcleTime is set to 30 microseconds
> Mar-11-10 16:38:25 [Worker_10001] Worker_10001 started
> Mar-11-10 16:38:26 [init] Starting SMTP-worker-threads with ThreadCycleTime
> set to 3000 microseconds
> Mar-11-10 16:38:26 [init] Starting communication worker threads [1 to 10]
> Mar-11-10 16:38:28 [Worker_10000] Uploading stats via direct connection
> Mar-11-10 16:38:29 [Worker_1] Worker_1 started
> Mar-11-10 16:38:30 [Worker_2] Worker_2 started
> Mar-11-10 16:38:46 [Worker_6] Worker_6 started
> Mar-11-10 16:38:46 [Worker_4] Worker_4 started
> Mar-11-10 16:38:46 [Worker_5] Worker_5 started
> Mar-11-10 16:38:47 [Worker_3] Worker_3 started
> Mar-11-10 16:38:48 [Worker_7] Worker_7 started
> Mar-11-10 16:38:49 [Worker_8] Worker_8 started
> Mar-11-10 16:39:11 [Worker_10] Worker_10 started
> Mar-11-10 16:39:11 [Worker_9] Worker_9 started
> Mar-11-10 16:39:29 [Worker_10000] Info: Name Server 127.0.0.1: ResponseTime
> = 13579 ms
> Mar-11-10 16:39:30 [Worker_10000] Info: Name Server 129.250.35.250:
> ResponseTime = 33 ms
> Mar-11-10 16:39:30 [Worker_10000] Info: Name Server 209.75.26.5:
> ResponseTime = 14 ms
> Mar-11-10 16:39:30 [Worker_10000] Warning: Name Server 127.0.0.1: does not
> respond or timed out 
> Mar-11-10 16:39:30 [init] All Threads are started
> Mar-11-10 16:39:34 [init] Warning: whitelist has only 0 records: (ignore if
> this is a new install)
> Mar-11-10 16:39:34 [init] Starting PID: 2654
> Mar-11-10 16:39:34 [init] Info: command queue released
> Mar-11-10 16:39:34 [Main_Thread] MainThread started
>> ASSP is monitoring it self by default - so there should be some more
> informations available.
> I haven't been able to find any information beyond what I had sent when it
> crashed under perl 5.8.8.
> 
> Thomas
> 
> -----Original Message-----
> From: assp-test-requ...@lists.sourceforge.net
> [mailto:assp-test-requ...@lists.sourceforge.net] 
> Sent: Friday, March 12, 2010 11:40 AM
> To: assp-test@lists.sourceforge.net
> Subject: Assp-test Digest, Vol 32, Issue 12
> 
> Send Assp-test mailing list submissions to
>       assp-test@lists.sourceforge.net
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>       https://lists.sourceforge.net/lists/listinfo/assp-test
> or, via email, send a message with subject or body 'help' to
>       assp-test-requ...@lists.sourceforge.net
> 
> You can reach the person managing the list at
>       assp-test-ow...@lists.sourceforge.net
> 
> When replying, please edit your Subject line so it is more specific than
> "Re: Contents of Assp-test digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: important change in assp.pl 2.0.2 1.0.01 ! (Trevor Jacques)
>    2. Re: Assp-test Digest, Vol 32, Issue 8 (Thomas Eckardt)
>    3. Re: important change in assp.pl 2.0.2 1.0.01 ! (Thomas Eckardt)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Fri, 12 Mar 2010 14:21:54 -0500
> From: Trevor Jacques <tre...@videlicet.com>
> Subject: Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 !
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>       
> <sigth.1687243bfc.5b196c1e-3350-4b84-99f5-3484ef3db...@videlicet.com>
> Content-Type: text/plain; charset=us-ascii
> 
>> This version and all subsequent versions require a Perl version 5.10.0
> (5.010000) or higher !
> 
> That just killed using it on Macintosh OS X Leopard (10.5.x). :-(
> 
>> If someone uses Perl 5.8.8 and is unable to upgrade Perl to 5.10 the 
>> line
>> 3059 of assp.pl could[/should] be changed or commented out.
> 
> Commenting this out for every automatic update is not really going to work
> well in the real world. Is there a way for the installer to comment it out
> if 5.8.8 is the installed version of perl? 
> 
>> How ever, I'll no more support ASSP V2 running on a unsupported Perl
> version! 
> 
> Again, that just killed assp for Leopard users. :-(
> 
> T.
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Fri, 12 Mar 2010 20:28:42 +0100
> From: Thomas Eckardt <thomas.ecka...@thockar.com>
> Subject: Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>       
> <titc.8687d3e3c9.ofb1b8fe16.d171ebab-onc12576e4.006a1ad6-c12576e4.006b0...@t
> hockar.com>
>       
> Content-Type: text/plain; charset="us-ascii"
> 
>> I don't have any other debugging information.
> 
> is there a file exception.log in the assp dir ?
> are there any errors or warnings logged in mallog.txt ?
> 
> Do you use any DB for the hashes. Has you configured assp to use BerkeleyDB
> for internal hashes, rebuildspamdb hashes and griplist?
> How is the memory usage of assp?
> How many SMTP workers are running?
> How many connection per day?
> Do you use any Plugin?
> 
> ASSP is monitoring it self by default - so there should be some more
> informations available.
> 
> Thomas
> 
> 
> 
> 
> 
> Von:    "Masood Rahim" <mas...@intertune.com>
> An:     <assp-test@lists.sourceforge.net>
> Datum:  12.03.2010 19:55
> Betreff:        Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8
> 
> 
> 
> As a follow up to my email regarding assp crashing below, I updated perl to
> 5.10.1.  I downloaded the latest v2 assp.pl file last night.  After a few
> hours assp died again.  I don't have any other debugging information.
> 
> 
> -----Original Message-----
> From: Masood Rahim [mailto:mas...@intertune.com] 
> Sent: Wednesday, March 10, 2010 3:25 PM
> To: 'assp-test@lists.sourceforge.net'
> Subject: RE: Assp-test Digest, Vol 32, Issue 8
> 
>  
> I have the most recent versions of v2 installed on several servers and
> randomly assp crashes.  This has happened with at least 2 different 
> versions
> of assp most recently 2.0.2 0.0.01.  There is never any message in the log
> file.  I know that it has crashed because when I restart assp it tries to
> stop assp and shows that no process was found to stop.  Anyway this 
> happened
> again today and I restarted it, a few minutes later on the console window 
> I
> saw the following error when assp crashed again.  I am using Red Hat
> Enterprise Linux Server release 5.2.
> 
> *** glibc detected *** perl: double free or corruption (fasttop): 
> 0x98f3e938
> *** ======= Backtrace: ========= /lib/libc.so.6[0x6acb16]
> /lib/libc.so.6(cfree+0x90)[0x6b0030]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newCONSTSU
> B+0x154)[0x150354]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x15f19c]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_anoncod
> e+0x8c)[0x1aee6c]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta
> ndard+0x1f)[0x18298f]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x
> 5e6)[0x127906]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_list+
> 0x20b)[0x127c2b]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newATTRSUB
> +0x1152)[0x15b482]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_utilize+0x
> 331)[0x1596e1]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_yyparse+0x
> 1b22)[0x14a8c2]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x1b6300]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_require
> +0xd52)[0x1b81b2]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta
> ndard+0x1f)[0x18298f]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x
> 5e6)[0x127906]
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so[0x2647c
> a]
> /lib/libpthread.so.0[0x7bd45b]
> /lib/libc.so.6(clone+0x5e)[0x714c4e]
> ======= Memory map: ========
> 00101000-0022c000 r-xp 00000000 09:00 490322
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so
> 0022c000-00231000 rwxp 0012a000 09:00 490322
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so
> 00231000-00233000 rwxp 00231000 00:00 0 
> 00233000-0023c000 r-xp 00000000 09:00 491083
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so
> 0023c000-0023d000 rwxp 00008000 09:00 491083
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so
> 0023d000-00245000 r-xp 00000000 09:00 491053
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so
> 00245000-00246000 rwxp 00007000 09:00 491053
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so
> 00246000-0024b000 r-xp 00000000 09:00 492010
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so
> 0024b000-0024c000 rwxp 00005000 09:00 492010
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so
> 0024c000-00256000 r-xp 00000000 09:00 522999
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa
> rser.so
> 00256000-00257000 rwxp 0000a000 09:00 522999
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa
> rser.so
> 00257000-0025b000 r-xp 00000000 09:00 689969
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta
> te.so
> 0025b000-0025c000 rwxp 00003000 09:00 689969
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta
> te.so
> 0025d000-00267000 r-xp 00000000 09:00 490610
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so
> 00267000-00268000 rwxp 00009000 09:00 490610
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so
> 00268000-002b8000 r-xp 00000000 09:00 689996
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke
> leyDB.so
> 002b8000-002b9000 rwxp 00050000 09:00 689996
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke
> leyDB.so
> 002b9000-002c0000 r-xp 00000000 09:00 2711777
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/
> Util.so
> 002c0000-002c1000 rwxp 00006000 09:00 2711777
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/
> Util.so
> 002c1000-002c5000 r-xp 00000000 09:00 1110851
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1
> .so
> 002c5000-002c6000 rwxp 00003000 09:00 1110851
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1
> .so
> 002c6000-002c8000 r-xp 00000000 09:00 491247
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so
> 002c8000-002c9000 rwxp 00001000 09:00 491247
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so
> 002c9000-002d6000 r-xp 00000000 09:00 491023
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so
> 002d6000-002d7000 rwxp 0000c000 09:00 491023
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so
> 002d7000-002da000 r-xp 00000000 09:00 492004
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so
> 002da000-002db000 rwxp 00002000 09:00 492004
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so
> 002db000-00308000 r-xp 00000000 09:00 433824
> /usr/lib/libgssapi_krb5.so.2.2
> 00308000-00309000 rwxp 0002d000 09:00 433824
> /usr/lib/libgssapi_krb5.so.2.2
> 00309000-0030c000 r-xp 00000000 09:00 689987
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI
> nfo.so
> 0030c000-0030d000 rwxp 00002000 09:00 689987
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI
> nfo.so
> 0030f000-00318000 r-xp 00000000 09:00 490680
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so
> 00318000-00319000 rwxp 00009000 09:00 490680
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so
> 00319000-0040d000 r-xp 00000000 09:00 2483164    /lib/libdb-4.3.so
> 0040d000-00410000 rwxp 000f4000 09:00 2483164    /lib/libdb-4.3.so
> 00410000-
> 
> 
> -----Original Message-----
> From: assp-test-requ...@lists.sourceforge.net
> [mailto:assp-test-requ...@lists.sourceforge.net]
> Sent: Saturday, March 06, 2010 4:29 AM
> To: assp-test@lists.sourceforge.net
> Subject: Assp-test Digest, Vol 32, Issue 8
> 
> Send Assp-test mailing list submissions to
>                  assp-test@lists.sourceforge.net
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>                  https://lists.sourceforge.net/lists/listinfo/assp-test
> or, via email, send a message with subject or body 'help' to
>                  assp-test-requ...@lists.sourceforge.net
> 
> You can reach the person managing the list at
>                  assp-test-ow...@lists.sourceforge.net
> 
> When replying, please edit your Subject line so it is more specific than
> "Re: Contents of Assp-test digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: Whitelist check ignored?? (Fritz Borgstedt)
>    2. SpamHaus DBL now online (GrayHat)
>    3. OT: Alan Ralsky jailed (GrayHat)
>    4. Re: SpamHaus DBL now online (Trevor Jacques)
>    5. Re: SpamHaus DBL now online (GrayHat)
>    6. Re: SpamHaus DBL now online (GrayHat)
>    7. Re: SpamHaus DBL now online (Thomas Eckardt/eck)
>    8. v1 new assp.pl version notification request. (Paul K. Dickson)
>    9. fixes and changes in 2.0.2 0.0.03 (Thomas Eckardt)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Thu, 04 Mar 2010 14:48:55 +0100
> From: "Fritz Borgstedt" <f...@iworld.de>
> Subject: Re: [Assp-test] Whitelist check ignored??
> To: "ASSP development mailing list" <assp-test@lists.sourceforge.net>
> Message-ID:
>  
> <sig.1679b1c3ac.fc.000f455506dd1d8c3b9aca0052e17798.6dd1...@iworld.de>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> 
>> I have not checked the code handling delaying, so I was not aware when 
>> exactly it is done.
> 
> 
> At the earlist time possible, after envelope.
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Thu, 4 Mar 2010 16:11:56 +0100
> From: "GrayHat" <gray...@gmx.net>
> Subject: [Assp-test] SpamHaus DBL now online
> To: <assp-test@lists.sourceforge.net>
> Message-ID: <00ef01cabbad$0826d760$1400a...@apra.it>
> Content-Type: text/plain;                charset="utf-8"
> 
> Informations and usage can be found here
> 
> http://www.spamhaus.org/dbl/
> 
> 
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Thu, 4 Mar 2010 16:13:53 +0100
> From: "GrayHat" <gray...@gmx.net>
> Subject: [Assp-test] OT: Alan Ralsky jailed
> To: <assp-test@lists.sourceforge.net>
> Message-ID: <00f401cabbad$4de39fe0$1400a...@apra.it>
> Content-Type: text/plain;                charset="utf-8"
> 
> 
> Not that this will stop other spammers, but at least one of the *real
> criminals* got jailed
> 
> http://www.spamhaus.org/news.lasso?article=658
> 
> feel free to snail-mail him, all in all he spammed the whole world, so 
> maybe
> he deserves some spam as well
> 
> 
> 
> 
> ------------------------------
> 
> Message: 4
> Date: Thu, 4 Mar 2010 10:26:04 -0500
> From: Trevor Jacques <tre...@videlicet.com>
> Subject: Re: [Assp-test] SpamHaus DBL now online
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>  
> <sigth.1679d34e73.e207c4a0-220d-440c-bf92-01636d3ce...@videlicet.com>
> Content-Type: text/plain; charset=us-ascii
> 
>> http://www.spamhaus.org/dbl/
> 
> It would be really useful for us to know if there are recommended places 
> to
> include the DBL in our assp set ups. For example, can we simply add the 
> DBL
> to our list in URIBLServiceProvider, etc.?
> 
> T.
> 
> 
> ------------------------------
> 
> Message: 5
> Date: Thu, 4 Mar 2010 16:27:40 +0100
> From: "GrayHat" <gray...@gmx.net>
> Subject: Re: [Assp-test] SpamHaus DBL now online
> To: "ASSP development mailing list" <assp-test@lists.sourceforge.net>
> Message-ID: <00fb01cabbaf$3b279080$1400a...@apra.it>
> Content-Type: text/plain;                charset="Windows-1252"
> 
>> Informations and usage can be found here
>>
>> http://www.spamhaus.org/dbl/
> 
> Just in case, the list can be used as a regular URIBL one (as long as the
> query is NOT an IP) but will also allow queries related to 
> 
> HELO strings 
> 
> Reverse IP zones
> 
> Envelope sender domain
> 
> which may extend quite a lot its usage and help improving the rejection of
> bad senders
> 
> 
> 
> 
> 
> 
> ------------------------------
> 
> Message: 6
> Date: Thu, 4 Mar 2010 18:05:41 +0100
> From: "GrayHat" <gray...@gmx.net>
> Subject: Re: [Assp-test] SpamHaus DBL now online
> To: "ASSP development mailing list" <assp-test@lists.sourceforge.net>
> Message-ID: <012401cabbbc$ebe85c80$1400a...@apra.it>
> Content-Type: text/plain;                charset="Windows-1252"
> 
>>> http://www.spamhaus.org/dbl/
>  
>> It would be really useful for us to know if there are recommended 
>> places to include the DBL in our assp set ups. For example, can we 
>> simply add the DBL to our list in URIBLServiceProvider, etc.?
> 
> I'm currently testing it on a "low traffic" ASSP box to see if there are 
> any
> counter indications; as far as I can tell, ASSP shouldn't have issues with
> that since it will only (please, Fritz, Thomas confirm or deny it) pass
> domains to the URIBLs so there won't be issues due to IPs being checked
> against it (the list doesn't handle IPs at all); as for the other features
> (e.g. using it to check the HELO and the other stuff) I think Fritz and
> Thomas may give you a better answer; for sure ASSP is checking URIs
> contained in the mail body against the defined URIBLs not sure if it also
> checks the HELO string/domain, reverse IP zone or envelope sender domain
> against the URIBLs
> 
> 
> 
> 
> ------------------------------
> 
> Message: 7
> Date: Thu, 4 Mar 2010 18:57:28 +0100
> From: Thomas Eckardt/eck <thomas.ecka...@thockar.com>
> Subject: Re: [Assp-test] SpamHaus DBL now online
> To: GrayHat <gray...@gmx.net>, ASSP development mailing list
>                  <assp-test@lists.sourceforge.net>
> Message-ID:
>  
> <titc.9679e6701a.of6d549e3a.2ce7ef00-onc12576dc.0061b844-c12576dc.0062a...@t
> hockar.com>
>  
> Content-Type: text/plain; charset="US-ASCII"
> 
> ASSP is checking any found URI. IP's are not sent to the URIBL providers 
> but
> checked if they are obfuscated.
> 
> Checked are the MIME decoded mail body and the complete mail header
> except:
> 
>         received:
>         Message-ID:
>         References:;
>         In-Reply-To:;
>         X-Assp-.+?:;
>         cc:;
>         bcc:
> 
> lines.
> 
> Thomas
> 
> 
> 
> Von:    "GrayHat" <gray...@gmx.net>
> An:     "ASSP development mailing list" <assp-test@lists.sourceforge.net>
> Datum:  04.03.2010 18:07
> Betreff:        Re: [Assp-test] SpamHaus DBL now online
> 
> 
> 
>>> http://www.spamhaus.org/dbl/
>  
>> It would be really useful for us to know if there are recommended 
>> places to include the DBL in our assp set ups. For example, can we 
>> simply add the DBL to our list in URIBLServiceProvider, etc.?
> 
> I'm currently testing it on a "low traffic" ASSP box to see if there are 
> any
> counter indications; as far as I can tell, ASSP shouldn't have issues with
> that since it will only (please, Fritz, Thomas confirm or deny it) pass
> domains to the URIBLs so there won't be issues due to IPs being checked
> against it (the list doesn't handle IPs at all); as for the other features
> (e.g. using it to check the HELO and the other stuff) I think Fritz and
> Thomas may give you a better answer; for sure ASSP is checking URIs
> contained in the mail body against the defined URIBLs not sure if it also
> checks the HELO string/domain, reverse IP zone or envelope sender domain
> against the URIBLs
> 
> 
> ----------------------------------------------------------------------------
> --
> Download Intel&#174; Parallel Studio Eval Try the new software tools for
> yourself. Speed compiling, find bugs proactively, and fine-tune 
> applications
> for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> 
> 
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the 
> 
> 
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no 
> known
> virus in this email!
> *******************************************************
> 
> 
> 
> 
> ------------------------------
> 
> Message: 8
> Date: Thu, 04 Mar 2010 13:45:14 -0500
> From: "Paul K. Dickson" <pdick...@frederickcountymd.gov>
> Subject: [Assp-test] v1 new assp.pl version notification request.
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>  <gov.0679a1149d.c7b569ea.5de43%pdick...@frederickcountymd.gov>
> Content-Type: text/plain;                charset="US-ASCII"
> 
> 
> At the top of the web interface, can it specify the release status?  Beta,
> RC, Stable?
> 
> 
> Paul K. Dickson
> Systems Administrator
> Frederick County Government, IIT
> pdick...@frederickcountymd.gov
> 301-600-2399/x12399
> 
> 
> 
> ------ End of Forwarded Message
> 
> 
> 
> ------------------------------
> 
> Message: 9
> Date: Sat, 6 Mar 2010 13:28:40 +0100
> From: Thomas Eckardt <thomas.ecka...@thockar.com>
> Subject: [Assp-test] fixes and changes in 2.0.2 0.0.03
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>  
> <titc.36814d4c15.ofdf3401e5.93c146a3-onc12576de.0040af40-c12576de.00448...@t
> hockar.com>
>  
> Content-Type: text/plain; charset="us-ascii"
> 
> Hi all,
> 
> fixed in 2.0.2 0.0.03   (also fixed in public version 2.0.1 1.0.03)
> 
> - security fix: a workstation behind a NAT network is able to adopt the 
> user
> credentials from an other (GUI) logged in workstation in the same network
>   ASSP now uses HTTP-Session-ID's to prevent this. Browser cookies must be
> enabled for the GUI-URL to make sure, that assp generates absolute unique
> session ID's 
> 
> - if any bomb regular expression contains a regex  '^$'  to check for an
> empty string (eg. bombSubjectRe), no result is found
> 
> - if a wrong search query is used in MaillogTail and the option 'show 
> .....
> results' is set to 'all matches', it is possible that the MainThread needs 
> a
> very long time (30 min or more) to process the query. 
> For this reason the option 'all matches' is changed to '2000'. There are
> also two search timeout values used: 30s for the search in the log files 
> and
> 30s for rendering the HTML for the output.
> 
> - if in MaillogTail a selection for a list of file to search in was made, 
> it
> was possible, that the timeline of the output was broken, because of a 
> wrong
> sort of the filenames (numbers).
> 
> changed:
> 
> - the default value for 'LogRollDays' is changed from 7 to 1.
> - if FBMTV is used and an incoming not-bounce message is received, which
> contains a valid FBMTV-tag, the message is considered 'whitelisted' if it 
> is
> not taged otherwise (red,contentonly, noprocessing...) by assp
> 
> 
> added:
> 
> - 'httpRequireCookies','HTTP and HTTPS require enabled browser
> cookies',0,\&checkbox,'1','(.*)',undef,
>  'Cookie based http session ID\'s are used by assp to handle different
> requests from the same IP (eg behind NAT). Switch this off, if you are
> unable to use cookies in your browser. If switched off, a security hole is
> opened for connection that are using NAT - it could be possible that a
> second workstation (behind NAT) is able to login to the GUI, without user
> credentials if the same OS and browser version is used.'
> 
> 
> Thomas
> 
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the 
> 
> 
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no 
> known
> virus in this email!
> *******************************************************
> 
> 
> 
> ------------------------------
> 
> ----------------------------------------------------------------------------
> --
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> 
> ------------------------------
> 
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> End of Assp-test Digest, Vol 32, Issue 8
> ****************************************
> 
> 
> ----------------------------------------------------------------------------
> --
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> 
> 
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally 
> privileged and protected in law and are intended solely for the use of the 
> 
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no 
> known virus in this email!
> *******************************************************
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Fri, 12 Mar 2010 20:39:22 +0100
> From: Thomas Eckardt <thomas.ecka...@thockar.com>
> Subject: Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 !
> To: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Message-ID:
>       
> <titc.7687e3c53c.of1e43ac0a.8d5954f2-onc12576e4.006ba4ed-c12576e4.006bf...@t
> hockar.com>
>       
> Content-Type: text/plain; charset="us-ascii"
> 
> Trevor,
> 
> please run:
> 
>> perl -e "print  $^O;"
> 
> tell me the output. I'll enable 5.8.8 for your OS - but only in the dev 
> version 2.0.2 - never in the public 2.0.1 !
> 
> Thomas
> 
> 
> 
> 
> Von:    Trevor Jacques <tre...@videlicet.com>
> An:     ASSP development mailing list <assp-test@lists.sourceforge.net>
> Datum:  12.03.2010 20:22
> Betreff:        Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 !
> 
> 
> 
>> This version and all subsequent versions require a Perl version 5.10.0 
> (5.010000) or higher !
> 
> That just killed using it on Macintosh OS X Leopard (10.5.x). :-(
> 
>> If someone uses Perl 5.8.8 and is unable to upgrade Perl to 5.10 the 
> line 
>> 3059 of assp.pl could[/should] be changed or commented out.
> 
> Commenting this out for every automatic update is not really going to work 
> well in the real world. Is there a way for the installer to comment it out 
> if 5.8.8 is the installed version of perl? 
> 
>> How ever, I'll no more support ASSP V2 running on a unsupported Perl 
> version! 
> 
> Again, that just killed assp for Leopard users. :-(
> 
> T.
> ----------------------------------------------------------------------------
> --
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> 
> 
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally 
> privileged and protected in law and are intended solely for the use of the 
> 
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no 
> known virus in this email!
> *******************************************************
> 
> 
> 
> ------------------------------
> 
> ----------------------------------------------------------------------------
> --
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> 
> ------------------------------
> 
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> End of Assp-test Digest, Vol 32, Issue 12
> *****************************************
> 
> 
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test


-- 

Best regards,

Charles Marcus
I.T. Director
Media Brokers International, Inc.
678.514.6200 x224
678.514.6299 fax

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to