Masood, Is this the first time you use ASSP ? It looks like. How ever, ASSP V2 is called : Auxilary Service and Support for Professionals.
>Mar-11-10 16:38:26 [init] Starting communication worker threads [1 to 10] >........ >Mar-11-10 16:39:11 [Worker_9] Worker_9 started It takes assp nearly one minute to start 10 Workers - this is much much too long! What is the physical specification of the server (CPU / Cores / Memory / FSB speed / Harddrive speed)? >System has 512 MB of memory, This is much too less for ASSP V2! (btw. How would you design a real Mail-Server (Exchange,Lotus Domino,GroupWise,Postfix ...) that has to handle 275.000 connections/mails a day?) >After a few hours assp died again. 'some hours' is much more than I expect. On a system with 512MB RAM , 10 SMTP-Workers , (maybe) a single core CPU and 275,000 connection per day - I expect that assp V2 should die within some minutes. To build your physical system, assume that every thread (SMTP-Workers + 3)-> 13, will use at least 100MB of RAM if flat files are used (70MB with DB). Every thread will need 1/3 to 1/2 of a CPU core on high workload system likes yours. >Mar-11-10 16:39:30 [Worker_10000] Warning: Name Server 127.0.0.1: does not respond or timed out If you run a DNS-server on the same system calculate 1/2 CPU core for this process - 275,000 connections per day , at minimum ~ 5-6 DNS-querys per connection => 1.500.000 DNS querys per day or ~16 per second . If you run a DB-server on the same system calculate 1.5 CPU cores for this engine and depending on the used engine 300-600 MB RAM. 275,000 * 100 DB requests per connection are 27.500.000 DB requests per day or ~320 per second If you want to use ClamAV - try it, but I think it will use too much CPU in any case on your system ! >Approximately 275,000 connections per day. "275,000" -> I recommend you to use a quadcore or better a dual quadcore 64-Bit system with at least 2GB free RAM (better more - (eg) 4GB physical). >Mar-11-10 16:38:08 [init] Warning: BerkeleyDB database version 4.3 / >Sleepycat Software: Berkeley DB 4.3.29: (September 12, 2006) installed - but >at least version 4.5 is required - Berkeley database usage not available >Mar-11-10 16:38:16 [init] Warning: RWLCache contains 255631 records (allocating at least 59.6MB) - it is highly recommeded to use a database for 'pbdb' Build a physical system that is able to do the job! It could be better to use two systems in your case. One for ASSP (and ClamAV) and one for DNS and MySQL/oracle...! Just start with one system - you'll see if you need a second one. Install at least BerkeleyDB 4.7 engine and reinstall BerkeleyDB.pm 0.41 via CPAN. Install MySQL 5.x , create a DB (eg) 'assp' , use the InnoDB engine. , configure MySQL to enable at least 1000 connections configure assp to use BerkeleyDB for Griplist, internal hashes and rebuildspamdb hashes configure assp to use MySQL for all Main-Hashes (whitelistdb, redlistdb ....... pbdb) Import your flat files in to the MySQL DB. To minimize the workload of your system (DNS, DB), try to block connections as early as possible (helo, IP, PTR, MX...) - content based blocking (bayes, bombs ...) should be minimized. If all is running well -> open the GUI and reconfigure 'SSLCertFile' and 'SSLKeyFile' to the default values (click on the value name - link) to correct the wrong values. Reserve at least one SMTP-Worker for outgoing mails. Do not use the ASSP_OCR.pm plugin! Is there anybody in the list, who has a similar workload on his V2 system? Maybe you can give Masood some more informations. Thomas Von: "Masood Rahim" <mas...@intertune.com> An: <assp-test@lists.sourceforge.net> Datum: 12.03.2010 21:47 Betreff: Re: [Assp-test] Assp dying Hi, I have answered your questions below regarding the assp process dying constantly. It seems like it is now dying more frequently (several times per day) after upgrading to perl 5.10.1 vs using the perl 5.8.8 I used to be using which would die maybe once or twice a day. ---------------------------------------------------------------------------- ------------------- Date: Fri, 12 Mar 2010 20:28:42 +0100 From: Thomas Eckardt <thomas.ecka...@thockar.com> Subject: Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8 To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.8687d3e3c9.ofb1b8fe16.d171ebab-onc12576e4.006a1ad6-c12576e4.006b0...@t hockar.com> Content-Type: text/plain; charset="us-ascii" >I don't have any other debugging information. >is there a file exception.log in the assp dir ? Nope. >are there any errors or warnings logged in mallog.txt ? Nope, nothing there. When I look at the end of the maillog.txt file after the assp process has died it just has a log entry of the last connection it processed. >Do you use any DB for the hashes. Has you configured assp to use BerkeleyDB for internal hashes, rebuildspamdb hashes and griplist? I don't use the DB for anything. Also I'm not using the BerkeleyDB for internal caches, nor am I using it for rebuildspamdb, nor am I using it for griplist. >How is the memory usage of assp? System has 512 MB of memory, I just restarted the ASSP process and 5 minutes later it is currently utilizing 51.2% of memory and over 100% of CPU. (This server does nothing else but ASSP). >How many SMTP workers are running? 10 >How many connection per day? Approximately 275,000 connections per day. >Do you use any Plugin? Here are the modules loaded at start: Mar-11-10 16:38:08 [init] Threads module 1.76 installed Mar-11-10 16:38:08 [init] Threads::shared module 1.33 installed Mar-11-10 16:38:08 [init] Thread::Queue module 2.11 installed Mar-11-10 16:38:08 [init] IO::Poll module 0.07 installed Mar-11-10 16:38:08 [init] IO::Select module 1.17 installed Mar-11-10 16:38:08 [init] ASSP is using IOEngine - Poll Mar-11-10 16:38:08 [init] Thread::State module version 0.09 installed and available Mar-11-10 16:38:08 [init] Net::DNS module version 0.66 installed and available Mar-11-10 16:38:08 [init] Email::Valid module version 0.182 installed and available Mar-11-10 16:38:08 [init] Net::SMTP module version 2.31 installed and available Mar-11-10 16:38:08 [init] Mail::SPF::Query module is not installed. Mar-11-10 16:38:08 [init] Mail::SPF module version 2.007 installed and available Mar-11-10 16:38:08 [init] Compress::Zlib module version 2.02 installed - HTTP compression available Mar-11-10 16:38:08 [init] Digest::MD5 module version 2.39 installed - delaying can use MD5 keys for hashes Mar-11-10 16:38:08 [init] Digest::SHA1 module version 2.12 installed - BATV and FBMTV check available Mar-11-10 16:38:08 [init] File::ReadBackwards module version 1.04 installed - searching of log files enabled Mar-11-10 16:38:08 [init] Time::HiRes module version 1.9719 installed - CPU usage statistics available Mar-11-10 16:38:08 [init] Sys::Syslog module version 0.27 installed - Unix centralized logging enabled Mar-11-10 16:38:08 [init] Tie::RDBM module is not installed - database usage not available Mar-11-10 16:38:08 [init] DB_File module version 1.82 installed - DB_File (Berkeley V1) database usage available Mar-11-10 16:38:08 [init] Warning: BerkeleyDB database version 4.3 / Sleepycat Software: Berkeley DB 4.3.29: (September 12, 2006) installed - but at least version 4.5 is required - Berkeley database usage not available Mar-11-10 16:38:08 [init] Info: griplist is using basic 'orderedtie' in file /usr/share/assp/griplist Mar-11-10 16:38:08 [init] Net::IP::Match::Regexp module version 1.01 installed - CIDR notation for IP range available Mar-11-10 16:38:08 [init] Net::CIDR::Lite module version 0.20 installed - hyphenated IP address range available Mar-11-10 16:38:08 [init] Net::SenderBase module version 1.01 installed - Query the senderbase service available Mar-11-10 16:38:08 [init] LWP::Simple module version 5.827 installed - procedural LWP interface available Mar-11-10 16:38:08 [init] Email::MIME::Modifier module version 1.903 installed - MIME charset decoding and conversion interface and attachment detection available Mar-11-10 16:38:08 [init] MIME::Types module version 1.28 installed - TNEF conversion may possible Mar-11-10 16:38:08 [init] Email::Send module version 2.198 installed - sending .eml files available Mar-11-10 16:38:08 [init] Convert::TNEF module version 0.17 installed - TNEF conversion is available Mar-11-10 16:38:08 [init] Mail::DKIM::Verifier module is not installed - DKIM verification not available Mar-11-10 16:38:08 [init] Schedule::Cron module version 0.99 installed - RebuildSpamdb Scheduler is available Mar-11-10 16:38:08 [init] Sys::MemInfo module version 0.91 installed - memory calculation is available Mar-11-10 16:38:08 [init] IO::Socket::SSL module version 1.32 installed - https and TLS/SSL is possible Mar-11-10 16:38:08 [init] Info: openssl is installed - try to create basic SSL-certificates Mar-11-10 16:38:08 [init] Warning: server certificate ae3b2c498de5850f24f10d15325a390af53e312c46fb735bf387abad0aa032331d3eb1c4b019 2e5d0025240e12 not found Mar-11-10 16:38:08 [init] Warning: server public-key ae3b2c498de5850f24f10d15325a390af53e312c46fb735b245bcc8d6faf28ec8363650082a1 80e30024530dad not found Mar-11-10 16:38:08 [init] Warning: https and TLS/SSL is disabled Mar-11-10 16:38:08 [init] Listening for SMTP connections on 0.0.0.0:25 Mar-11-10 16:38:08 [init] Listening for admin HTTP connections on 55555 Mar-11-10 16:38:08 [init] Listening for stat HTTP connections on 55553 Mar-11-10 16:38:08 [init] Switched effective gid to 500 (assp) Mar-11-10 16:38:08 [init] Switched real gid to 500 (assp) Mar-11-10 16:38:08 [init] Switched effective uid to 500 (assp) Mar-11-10 16:38:08 [init] Switched real uid to 500 (assp) Mar-11-10 16:38:08 [init] Warning: unclean shutdown of ASSP detected Mar-11-10 16:38:08 [init] Saving config Mar-11-10 16:38:08 [init] Finished saving config Mar-11-10 16:38:08 [init] Info: Whitelist loaded from /usr/share/assp/whitelist with 0 records Mar-11-10 16:38:08 [init] Info: Redlist loaded from /usr/share/assp/redlist with 0 records Mar-11-10 16:38:08 [init] Info: Delay loaded from /usr/share/assp/delaydb with 0 records Mar-11-10 16:38:08 [init] Info: DelayWhite loaded from /usr/share/assp/delaydb.white with 0 records Mar-11-10 16:38:08 [init] Info: PBWhite loaded from /usr/share/assp/pb/pbdb.white.db with 1146 records Mar-11-10 16:38:08 [init] Info: PBWhite contains 1146 records - it is recommeded to use a database for 'pbdb' Mar-11-10 16:38:11 [init] Info: PBBlack loaded from /usr/share/assp/pb/pbdb.black.db with 176079 records Mar-11-10 16:38:11 [init] Warning: PBBlack contains 176079 records (allocating at least 63.9MB) - it is highly recommeded to use a database for 'pbdb' Mar-11-10 16:38:12 [init] Info: RBLCache loaded from /usr/share/assp/pb/pbdb.rbl.db with 71582 records Mar-11-10 16:38:12 [init] Warning: RBLCache contains 71582 records (allocating at least 30.5MB) - it is highly recommeded to use a database for 'pbdb' Mar-11-10 16:38:12 [init] Info: URIBLCache loaded from /usr/share/assp/pb/pbdb.uribl.db with 1236 records Mar-11-10 16:38:12 [init] Info: URIBLCache contains 1236 records - it is recommeded to use a database for 'pbdb' Mar-11-10 16:38:12 [init] Info: PTRCache loaded from /usr/share/assp/pb/pbdb.ptr.db with 2201 records Mar-11-10 16:38:12 [init] Info: PTRCache contains 2201 records - it is recommeded to use a database for 'pbdb' Mar-11-10 16:38:12 [init] Info: MXACache loaded from /usr/share/assp/pb/pbdb.mxa.db with 0 records Mar-11-10 16:38:16 [init] Info: RWLCache loaded from /usr/share/assp/pb/pbdb.rwl.db with 255631 records Mar-11-10 16:38:16 [init] Warning: RWLCache contains 255631 records (allocating at least 59.6MB) - it is highly recommeded to use a database for 'pbdb' Mar-11-10 16:38:16 [init] Info: SPFCache loaded from /usr/share/assp/pb/pbdb.spf.db with 1854 records Mar-11-10 16:38:16 [init] Info: SPFCache contains 1854 records - it is recommeded to use a database for 'pbdb' Mar-11-10 16:38:19 [init] Info: SBCache loaded from /usr/share/assp/pb/pbdb.sb.db with 170393 records Mar-11-10 16:38:19 [init] Warning: SBCache contains 170393 records (allocating at least 62.0MB) - it is highly recommeded to use a database for 'pbdb' Mar-11-10 16:38:19 [init] Info: PBTrap loaded from /usr/share/assp/pb/pbdb.trap.db with 0 records Mar-11-10 16:38:19 [init] Info: DKIMCache loaded from /usr/share/assp/pb/pbdb.dkim.db with 169 records Mar-11-10 16:38:19 [init] Info: BATVTag loaded from /usr/share/assp/pb/pbdb.batv.db with 0 records Mar-11-10 16:38:19 [init] Info: BackDNS loaded from /usr/share/assp/pb/pbdb.back.db with 206 records Mar-11-10 16:38:23 [init] Info: Spamdb loaded from /usr/share/assp/spamdb with 218772 records Mar-11-10 16:38:23 [init] Warning: Spamdb contains 218772 records (allocating at least 57.6MB) - it is highly recommeded to use a database for 'spamdb' Mar-11-10 16:38:23 [init] Info: HeloBlack loaded from /usr/share/assp/spamdb.helo with 210 records Mar-11-10 16:38:23 [init] Info: LDAPlist loaded from /usr/share/assp/ldaplist with 0 records Mar-11-10 16:38:23 [init] Starting maintenance worker thread [10000] - ThreadCylcleTime is set to 3000 microseconds Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 127.0.0.1: ResponseTime = 1 ms Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 129.250.35.250: ResponseTime = 14 ms Mar-11-10 16:38:23 [Worker_10000] Info: Name Server 209.75.26.5: ResponseTime = 1 ms Mar-11-10 16:38:23 [Worker_10000] Worker_10000 started Mar-11-10 16:38:24 [init] Starting rebuild SpamDB worker thread [10001] - ThreadCylcleTime is set to 30 microseconds Mar-11-10 16:38:25 [Worker_10001] Worker_10001 started Mar-11-10 16:38:26 [init] Starting SMTP-worker-threads with ThreadCycleTime set to 3000 microseconds Mar-11-10 16:38:26 [init] Starting communication worker threads [1 to 10] Mar-11-10 16:38:28 [Worker_10000] Uploading stats via direct connection Mar-11-10 16:38:29 [Worker_1] Worker_1 started Mar-11-10 16:38:30 [Worker_2] Worker_2 started Mar-11-10 16:38:46 [Worker_6] Worker_6 started Mar-11-10 16:38:46 [Worker_4] Worker_4 started Mar-11-10 16:38:46 [Worker_5] Worker_5 started Mar-11-10 16:38:47 [Worker_3] Worker_3 started Mar-11-10 16:38:48 [Worker_7] Worker_7 started Mar-11-10 16:38:49 [Worker_8] Worker_8 started Mar-11-10 16:39:11 [Worker_10] Worker_10 started Mar-11-10 16:39:11 [Worker_9] Worker_9 started Mar-11-10 16:39:29 [Worker_10000] Info: Name Server 127.0.0.1: ResponseTime = 13579 ms Mar-11-10 16:39:30 [Worker_10000] Info: Name Server 129.250.35.250: ResponseTime = 33 ms Mar-11-10 16:39:30 [Worker_10000] Info: Name Server 209.75.26.5: ResponseTime = 14 ms Mar-11-10 16:39:30 [Worker_10000] Warning: Name Server 127.0.0.1: does not respond or timed out Mar-11-10 16:39:30 [init] All Threads are started Mar-11-10 16:39:34 [init] Warning: whitelist has only 0 records: (ignore if this is a new install) Mar-11-10 16:39:34 [init] Starting PID: 2654 Mar-11-10 16:39:34 [init] Info: command queue released Mar-11-10 16:39:34 [Main_Thread] MainThread started >ASSP is monitoring it self by default - so there should be some more informations available. I haven't been able to find any information beyond what I had sent when it crashed under perl 5.8.8. Thomas -----Original Message----- From: assp-test-requ...@lists.sourceforge.net [mailto:assp-test-requ...@lists.sourceforge.net] Sent: Friday, March 12, 2010 11:40 AM To: assp-test@lists.sourceforge.net Subject: Assp-test Digest, Vol 32, Issue 12 Send Assp-test mailing list submissions to assp-test@lists.sourceforge.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/assp-test or, via email, send a message with subject or body 'help' to assp-test-requ...@lists.sourceforge.net You can reach the person managing the list at assp-test-ow...@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Assp-test digest..." Today's Topics: 1. Re: important change in assp.pl 2.0.2 1.0.01 ! (Trevor Jacques) 2. Re: Assp-test Digest, Vol 32, Issue 8 (Thomas Eckardt) 3. Re: important change in assp.pl 2.0.2 1.0.01 ! (Thomas Eckardt) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Mar 2010 14:21:54 -0500 From: Trevor Jacques <tre...@videlicet.com> Subject: Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 ! To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <sigth.1687243bfc.5b196c1e-3350-4b84-99f5-3484ef3db...@videlicet.com> Content-Type: text/plain; charset=us-ascii > This version and all subsequent versions require a Perl version 5.10.0 (5.010000) or higher ! That just killed using it on Macintosh OS X Leopard (10.5.x). :-( > If someone uses Perl 5.8.8 and is unable to upgrade Perl to 5.10 the > line > 3059 of assp.pl could[/should] be changed or commented out. Commenting this out for every automatic update is not really going to work well in the real world. Is there a way for the installer to comment it out if 5.8.8 is the installed version of perl? > How ever, I'll no more support ASSP V2 running on a unsupported Perl version! Again, that just killed assp for Leopard users. :-( T. ------------------------------ Message: 2 Date: Fri, 12 Mar 2010 20:28:42 +0100 From: Thomas Eckardt <thomas.ecka...@thockar.com> Subject: Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8 To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.8687d3e3c9.ofb1b8fe16.d171ebab-onc12576e4.006a1ad6-c12576e4.006b0...@t hockar.com> Content-Type: text/plain; charset="us-ascii" >I don't have any other debugging information. is there a file exception.log in the assp dir ? are there any errors or warnings logged in mallog.txt ? Do you use any DB for the hashes. Has you configured assp to use BerkeleyDB for internal hashes, rebuildspamdb hashes and griplist? How is the memory usage of assp? How many SMTP workers are running? How many connection per day? Do you use any Plugin? ASSP is monitoring it self by default - so there should be some more informations available. Thomas Von: "Masood Rahim" <mas...@intertune.com> An: <assp-test@lists.sourceforge.net> Datum: 12.03.2010 19:55 Betreff: Re: [Assp-test] Assp-test Digest, Vol 32, Issue 8 As a follow up to my email regarding assp crashing below, I updated perl to 5.10.1. I downloaded the latest v2 assp.pl file last night. After a few hours assp died again. I don't have any other debugging information. -----Original Message----- From: Masood Rahim [mailto:mas...@intertune.com] Sent: Wednesday, March 10, 2010 3:25 PM To: 'assp-test@lists.sourceforge.net' Subject: RE: Assp-test Digest, Vol 32, Issue 8 I have the most recent versions of v2 installed on several servers and randomly assp crashes. This has happened with at least 2 different versions of assp most recently 2.0.2 0.0.01. There is never any message in the log file. I know that it has crashed because when I restart assp it tries to stop assp and shows that no process was found to stop. Anyway this happened again today and I restarted it, a few minutes later on the console window I saw the following error when assp crashed again. I am using Red Hat Enterprise Linux Server release 5.2. *** glibc detected *** perl: double free or corruption (fasttop): 0x98f3e938 *** ======= Backtrace: ========= /lib/libc.so.6[0x6acb16] /lib/libc.so.6(cfree+0x90)[0x6b0030] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newCONSTSU B+0x154)[0x150354] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x15f19c] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_anoncod e+0x8c)[0x1aee6c] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta ndard+0x1f)[0x18298f] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x 5e6)[0x127906] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_list+ 0x20b)[0x127c2b] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newATTRSUB +0x1152)[0x15b482] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_utilize+0x 331)[0x1596e1] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_yyparse+0x 1b22)[0x14a8c2] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x1b6300] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_require +0xd52)[0x1b81b2] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta ndard+0x1f)[0x18298f] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x 5e6)[0x127906] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so[0x2647c a] /lib/libpthread.so.0[0x7bd45b] /lib/libc.so.6(clone+0x5e)[0x714c4e] ======= Memory map: ======== 00101000-0022c000 r-xp 00000000 09:00 490322 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so 0022c000-00231000 rwxp 0012a000 09:00 490322 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so 00231000-00233000 rwxp 00231000 00:00 0 00233000-0023c000 r-xp 00000000 09:00 491083 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so 0023c000-0023d000 rwxp 00008000 09:00 491083 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so 0023d000-00245000 r-xp 00000000 09:00 491053 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so 00245000-00246000 rwxp 00007000 09:00 491053 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so 00246000-0024b000 r-xp 00000000 09:00 492010 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 0024b000-0024c000 rwxp 00005000 09:00 492010 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 0024c000-00256000 r-xp 00000000 09:00 522999 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa rser.so 00256000-00257000 rwxp 0000a000 09:00 522999 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa rser.so 00257000-0025b000 r-xp 00000000 09:00 689969 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta te.so 0025b000-0025c000 rwxp 00003000 09:00 689969 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta te.so 0025d000-00267000 r-xp 00000000 09:00 490610 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so 00267000-00268000 rwxp 00009000 09:00 490610 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so 00268000-002b8000 r-xp 00000000 09:00 689996 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke leyDB.so 002b8000-002b9000 rwxp 00050000 09:00 689996 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke leyDB.so 002b9000-002c0000 r-xp 00000000 09:00 2711777 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/ Util.so 002c0000-002c1000 rwxp 00006000 09:00 2711777 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/ Util.so 002c1000-002c5000 r-xp 00000000 09:00 1110851 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1 .so 002c5000-002c6000 rwxp 00003000 09:00 1110851 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1 .so 002c6000-002c8000 r-xp 00000000 09:00 491247 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so 002c8000-002c9000 rwxp 00001000 09:00 491247 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so 002c9000-002d6000 r-xp 00000000 09:00 491023 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so 002d6000-002d7000 rwxp 0000c000 09:00 491023 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so 002d7000-002da000 r-xp 00000000 09:00 492004 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 002da000-002db000 rwxp 00002000 09:00 492004 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 002db000-00308000 r-xp 00000000 09:00 433824 /usr/lib/libgssapi_krb5.so.2.2 00308000-00309000 rwxp 0002d000 09:00 433824 /usr/lib/libgssapi_krb5.so.2.2 00309000-0030c000 r-xp 00000000 09:00 689987 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI nfo.so 0030c000-0030d000 rwxp 00002000 09:00 689987 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI nfo.so 0030f000-00318000 r-xp 00000000 09:00 490680 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so 00318000-00319000 rwxp 00009000 09:00 490680 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so 00319000-0040d000 r-xp 00000000 09:00 2483164 /lib/libdb-4.3.so 0040d000-00410000 rwxp 000f4000 09:00 2483164 /lib/libdb-4.3.so 00410000- -----Original Message----- From: assp-test-requ...@lists.sourceforge.net [mailto:assp-test-requ...@lists.sourceforge.net] Sent: Saturday, March 06, 2010 4:29 AM To: assp-test@lists.sourceforge.net Subject: Assp-test Digest, Vol 32, Issue 8 Send Assp-test mailing list submissions to assp-test@lists.sourceforge.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/assp-test or, via email, send a message with subject or body 'help' to assp-test-requ...@lists.sourceforge.net You can reach the person managing the list at assp-test-ow...@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Assp-test digest..." Today's Topics: 1. Re: Whitelist check ignored?? (Fritz Borgstedt) 2. SpamHaus DBL now online (GrayHat) 3. OT: Alan Ralsky jailed (GrayHat) 4. Re: SpamHaus DBL now online (Trevor Jacques) 5. Re: SpamHaus DBL now online (GrayHat) 6. Re: SpamHaus DBL now online (GrayHat) 7. Re: SpamHaus DBL now online (Thomas Eckardt/eck) 8. v1 new assp.pl version notification request. (Paul K. Dickson) 9. fixes and changes in 2.0.2 0.0.03 (Thomas Eckardt) ---------------------------------------------------------------------- Message: 1 Date: Thu, 04 Mar 2010 14:48:55 +0100 From: "Fritz Borgstedt" <f...@iworld.de> Subject: Re: [Assp-test] Whitelist check ignored?? To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <sig.1679b1c3ac.fc.000f455506dd1d8c3b9aca0052e17798.6dd1...@iworld.de> Content-Type: text/plain; charset=ISO-8859-1 >I have not checked the code handling delaying, so I was not aware when >exactly it is done. At the earlist time possible, after envelope. ------------------------------ Message: 2 Date: Thu, 4 Mar 2010 16:11:56 +0100 From: "GrayHat" <gray...@gmx.net> Subject: [Assp-test] SpamHaus DBL now online To: <assp-test@lists.sourceforge.net> Message-ID: <00ef01cabbad$0826d760$1400a...@apra.it> Content-Type: text/plain; charset="utf-8" Informations and usage can be found here http://www.spamhaus.org/dbl/ ------------------------------ Message: 3 Date: Thu, 4 Mar 2010 16:13:53 +0100 From: "GrayHat" <gray...@gmx.net> Subject: [Assp-test] OT: Alan Ralsky jailed To: <assp-test@lists.sourceforge.net> Message-ID: <00f401cabbad$4de39fe0$1400a...@apra.it> Content-Type: text/plain; charset="utf-8" Not that this will stop other spammers, but at least one of the *real criminals* got jailed http://www.spamhaus.org/news.lasso?article=658 feel free to snail-mail him, all in all he spammed the whole world, so maybe he deserves some spam as well ------------------------------ Message: 4 Date: Thu, 4 Mar 2010 10:26:04 -0500 From: Trevor Jacques <tre...@videlicet.com> Subject: Re: [Assp-test] SpamHaus DBL now online To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <sigth.1679d34e73.e207c4a0-220d-440c-bf92-01636d3ce...@videlicet.com> Content-Type: text/plain; charset=us-ascii > http://www.spamhaus.org/dbl/ It would be really useful for us to know if there are recommended places to include the DBL in our assp set ups. For example, can we simply add the DBL to our list in URIBLServiceProvider, etc.? T. ------------------------------ Message: 5 Date: Thu, 4 Mar 2010 16:27:40 +0100 From: "GrayHat" <gray...@gmx.net> Subject: Re: [Assp-test] SpamHaus DBL now online To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <00fb01cabbaf$3b279080$1400a...@apra.it> Content-Type: text/plain; charset="Windows-1252" > Informations and usage can be found here > > http://www.spamhaus.org/dbl/ Just in case, the list can be used as a regular URIBL one (as long as the query is NOT an IP) but will also allow queries related to HELO strings Reverse IP zones Envelope sender domain which may extend quite a lot its usage and help improving the rejection of bad senders ------------------------------ Message: 6 Date: Thu, 4 Mar 2010 18:05:41 +0100 From: "GrayHat" <gray...@gmx.net> Subject: Re: [Assp-test] SpamHaus DBL now online To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <012401cabbbc$ebe85c80$1400a...@apra.it> Content-Type: text/plain; charset="Windows-1252" >> http://www.spamhaus.org/dbl/ > It would be really useful for us to know if there are recommended > places to include the DBL in our assp set ups. For example, can we > simply add the DBL to our list in URIBLServiceProvider, etc.? I'm currently testing it on a "low traffic" ASSP box to see if there are any counter indications; as far as I can tell, ASSP shouldn't have issues with that since it will only (please, Fritz, Thomas confirm or deny it) pass domains to the URIBLs so there won't be issues due to IPs being checked against it (the list doesn't handle IPs at all); as for the other features (e.g. using it to check the HELO and the other stuff) I think Fritz and Thomas may give you a better answer; for sure ASSP is checking URIs contained in the mail body against the defined URIBLs not sure if it also checks the HELO string/domain, reverse IP zone or envelope sender domain against the URIBLs ------------------------------ Message: 7 Date: Thu, 4 Mar 2010 18:57:28 +0100 From: Thomas Eckardt/eck <thomas.ecka...@thockar.com> Subject: Re: [Assp-test] SpamHaus DBL now online To: GrayHat <gray...@gmx.net>, ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.9679e6701a.of6d549e3a.2ce7ef00-onc12576dc.0061b844-c12576dc.0062a...@t hockar.com> Content-Type: text/plain; charset="US-ASCII" ASSP is checking any found URI. IP's are not sent to the URIBL providers but checked if they are obfuscated. Checked are the MIME decoded mail body and the complete mail header except: received: Message-ID: References:; In-Reply-To:; X-Assp-.+?:; cc:; bcc: lines. Thomas Von: "GrayHat" <gray...@gmx.net> An: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Datum: 04.03.2010 18:07 Betreff: Re: [Assp-test] SpamHaus DBL now online >> http://www.spamhaus.org/dbl/ > It would be really useful for us to know if there are recommended > places to include the DBL in our assp set ups. For example, can we > simply add the DBL to our list in URIBLServiceProvider, etc.? I'm currently testing it on a "low traffic" ASSP box to see if there are any counter indications; as far as I can tell, ASSP shouldn't have issues with that since it will only (please, Fritz, Thomas confirm or deny it) pass domains to the URIBLs so there won't be issues due to IPs being checked against it (the list doesn't handle IPs at all); as for the other features (e.g. using it to check the HELO and the other stuff) I think Fritz and Thomas may give you a better answer; for sure ASSP is checking URIs contained in the mail body against the defined URIBLs not sure if it also checks the HELO string/domain, reverse IP zone or envelope sender domain against the URIBLs ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 8 Date: Thu, 04 Mar 2010 13:45:14 -0500 From: "Paul K. Dickson" <pdick...@frederickcountymd.gov> Subject: [Assp-test] v1 new assp.pl version notification request. To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <gov.0679a1149d.c7b569ea.5de43%pdick...@frederickcountymd.gov> Content-Type: text/plain; charset="US-ASCII" At the top of the web interface, can it specify the release status? Beta, RC, Stable? Paul K. Dickson Systems Administrator Frederick County Government, IIT pdick...@frederickcountymd.gov 301-600-2399/x12399 ------ End of Forwarded Message ------------------------------ Message: 9 Date: Sat, 6 Mar 2010 13:28:40 +0100 From: Thomas Eckardt <thomas.ecka...@thockar.com> Subject: [Assp-test] fixes and changes in 2.0.2 0.0.03 To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.36814d4c15.ofdf3401e5.93c146a3-onc12576de.0040af40-c12576de.00448...@t hockar.com> Content-Type: text/plain; charset="us-ascii" Hi all, fixed in 2.0.2 0.0.03 (also fixed in public version 2.0.1 1.0.03) - security fix: a workstation behind a NAT network is able to adopt the user credentials from an other (GUI) logged in workstation in the same network ASSP now uses HTTP-Session-ID's to prevent this. Browser cookies must be enabled for the GUI-URL to make sure, that assp generates absolute unique session ID's - if any bomb regular expression contains a regex '^$' to check for an empty string (eg. bombSubjectRe), no result is found - if a wrong search query is used in MaillogTail and the option 'show ..... results' is set to 'all matches', it is possible that the MainThread needs a very long time (30 min or more) to process the query. For this reason the option 'all matches' is changed to '2000'. There are also two search timeout values used: 30s for the search in the log files and 30s for rendering the HTML for the output. - if in MaillogTail a selection for a list of file to search in was made, it was possible, that the timeline of the output was broken, because of a wrong sort of the filenames (numbers). changed: - the default value for 'LogRollDays' is changed from 7 to 1. - if FBMTV is used and an incoming not-bounce message is received, which contains a valid FBMTV-tag, the message is considered 'whitelisted' if it is not taged otherwise (red,contentonly, noprocessing...) by assp added: - 'httpRequireCookies','HTTP and HTTPS require enabled browser cookies',0,\&checkbox,'1','(.*)',undef, 'Cookie based http session ID\'s are used by assp to handle different requests from the same IP (eg behind NAT). Switch this off, if you are unable to use cookies in your browser. If switched off, a security hole is opened for connection that are using NAT - it could be possible that a second workstation (behind NAT) is able to login to the GUI, without user credentials if the same OS and browser version is used.' Thomas DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test End of Assp-test Digest, Vol 32, Issue 8 **************************************** ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 3 Date: Fri, 12 Mar 2010 20:39:22 +0100 From: Thomas Eckardt <thomas.ecka...@thockar.com> Subject: Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 ! To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.7687e3c53c.of1e43ac0a.8d5954f2-onc12576e4.006ba4ed-c12576e4.006bf...@t hockar.com> Content-Type: text/plain; charset="us-ascii" Trevor, please run: >perl -e "print $^O;" tell me the output. I'll enable 5.8.8 for your OS - but only in the dev version 2.0.2 - never in the public 2.0.1 ! Thomas Von: Trevor Jacques <tre...@videlicet.com> An: ASSP development mailing list <assp-test@lists.sourceforge.net> Datum: 12.03.2010 20:22 Betreff: Re: [Assp-test] important change in assp.pl 2.0.2 1.0.01 ! > This version and all subsequent versions require a Perl version 5.10.0 (5.010000) or higher ! That just killed using it on Macintosh OS X Leopard (10.5.x). :-( > If someone uses Perl 5.8.8 and is unable to upgrade Perl to 5.10 the line > 3059 of assp.pl could[/should] be changed or commented out. Commenting this out for every automatic update is not really going to work well in the real world. Is there a way for the installer to comment it out if 5.8.8 is the installed version of perl? > How ever, I'll no more support ASSP V2 running on a unsupported Perl version! Again, that just killed assp for Leopard users. :-( T. ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test End of Assp-test Digest, Vol 32, Issue 12 ***************************************** ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
