Ok - got the log entry from assp/log for my connection to that server this morning.
May-05-14 05:25:15 [Main_Thread] Admin connection from user root on host 67.206.183.180:1208; page:/; session-ID:58e51a579353b5e8f9 May-05-14 05:28:28 [Worker_10000] Info: saving Stats in file asspstats.sav As I mentioned last week - the GUI works fine when connecting from an Ubuntu Desktop w/Firefox.... Can't get it to work w/XP with either IE or Firefox..... Thom -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Saturday, May 03, 2014 5:42 AM To: [email protected] Subject: Assp-test Digest, Vol 82, Issue 3 Send Assp-test mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/assp-test or, via email, send a message with subject or body 'help' to [email protected] You can reach the person managing the list at [email protected] When replying, please edit your Subject line so it is more specific than "Re: Contents of Assp-test digest..." Today's Topics: 1. Re: SSLFailed Cache (Thomas Eckardt) 2. Antwort: Assp V2 GUI issue (Thomas Eckardt) 3. fixes in assp 2.4.2 build 14123 (Thomas Eckardt) 4. Whitelist Prob with Berkeley DB (Andrew Macpherson) 5. BombHeader Regex Matching Date Lines (Mr. Courtney Creighton) 6. Re: 'Resend' button not working on iOS block reports (James Brown) ---------------------------------------------------------------------- Message: 1 Date: Fri, 2 May 2014 18:18:53 +0200 From: Thomas Eckardt <[email protected]> Subject: Re: [Assp-test] SSLFailed Cache To: ASSP development mailing list <[email protected]> Message-ID: <tITC.2199f4cf4a.OFD61087A4.62DDE14C-ONC1257CCC.0058F0C4-C1257CCC.00599F04@t hockar.com> Content-Type: text/plain; charset="us-ascii" >1) A setting that defines the number of failures required before an IP >gets added to SSLFailed >2) The option to exclude certain IPs from being added to the SSLFailed >cache altogether Option 1 makes no sense to me. In 99,99% of a failed SSL connection, all other SSL connections from this host will also fail. Option 2 will be available in the next release - how ever it is better fix the SSL problem instead using such hacks. If such a host goes crazy - it is the same like a SSL DoS attack to assp, Thomas Von: "Colin Waring" <[email protected]> An: "'ASSP development mailing list'" <[email protected]>, Datum: 02.05.2014 00:01 Betreff: [Assp-test] SSLFailed Cache Hi there, Back in March last year I had an issue rear its head. The thread concerning it was titled "TLS fail cache". Unfortunately it has come back. This issue is that a particular server seems to occasionally have a hiccup when negotiating the SSL connection and as a result gets itself blocked from SSL. This server is configured to only use SSL so that emails are sent out encrypted leaving it unable to send mail. My request back then was to have settings to control how entries get into the cache as follows: 1) A setting that defines the number of failures required before an IP gets added to SSLFailed 2) The option to exclude certain IPs from being added to the SSLFailed cache altogether I am aware that I can add the IP to acceptallmail so that the server will need to fail twice before being blocked but I'd rather not bypass all the checks for it. I could really do with option 2) being available so that I don't have to keep going in and removing the entry from the cache. All the best, Colin Waring. ---------------------------------------------------------------------------- -- "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available. Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 2 Date: Fri, 2 May 2014 18:27:31 +0200 From: Thomas Eckardt <[email protected]> Subject: [Assp-test] Antwort: Assp V2 GUI issue To: [email protected], ASSP development mailing list <[email protected]> Message-ID: <tITC.4199d536df.OF5B42FA7B.EA6A6147-ONC1257CCC.0059F137-C1257CCC.005A6935@t hockar.com> Content-Type: text/plain; charset="us-ascii" I can't reproduce this. Using Windows 2003 SP2 (don't have XP any longer) and IE8. Also Firefox 28.0 and 29.0 is running well on this system. Thomas Von: "Thom Lawless" <[email protected]> An: <[email protected]>, Datum: 01.05.2014 16:34 Betreff: [Assp-test] Assp V2 GUI issue Fist time I've dropped a line to you guys. I've been able to ferret out my issues since v1.38..... Today however I have an issue with getting the GUI to come up on an XP / IE machine. I get through the UN/PW screen. And then IE says it is done with loading the page, but all I have is a light grey screen and nothing else. Looking at the 'source' code for the page, I get anywhere from 1400'ish to 1700'ish lines of source code. Seems to me that I have not received all the code for the GUI page. I have tried this on two XP machines and IE 8, along with Firefox on an XP machine - all give the same indications. Now the kicker.... I have an Ubuntu laptop w/Firefox. Works fine..... Anyone have any ideas? Thom ---------------------------------------------------------------------------- -- "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available. Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 3 Date: Sat, 3 May 2014 08:23:25 +0200 From: Thomas Eckardt <[email protected]> Subject: [Assp-test] fixes in assp 2.4.2 build 14123 To: "ASSP development mailing list" <[email protected]> Message-ID: <tITC.320095216c.OFA31D588A.66A5147A-ONC1257CCD.00226732-C1257CCD.00231ACD@t hockar.com> Content-Type: text/plain; charset="us-ascii" Hi all, fixed in assp 2.4.2 build 14123: changed: - some result log lines for Plugins are changed to be more informational added: 'noBanFailedSSLIP','Exclude these IP's from SSLfailed Cache*' 'Enter IP's that you want to exclude from being added to the SSLfailed-Cache, separated by pipes (|).' Thomas DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 4 Date: Sat, 3 May 2014 09:29:44 +0100 From: Andrew Macpherson <[email protected]> Subject: [Assp-test] Whitelist Prob with Berkeley DB To: ASSP development mailing list <[email protected]> Message-ID: <[email protected]> Content-Type: text/plain; charset=us-ascii cat tmpDB/Whitelist/BDB-error.txt Use of each() on hash after insertion without resetting hash iterator results in undefined behavior, Perl interpreter: 0x1bf1a20. ... Not quite sure where this is happening $version='2.4.1'; $build = '14097'; Andrew Macpherson [email protected] (Twitter @OA5dotCom) The Red Lion #5. Much Hadham. Herts SG10 6DD. GB Phone +44 1279 843147 GSM +44 78999 61797 ------------------------------ Message: 5 Date: Sat, 03 May 2014 02:32:39 -0700 From: "Mr. Courtney Creighton" <[email protected]> Subject: [Assp-test] BombHeader Regex Matching Date Lines To: [email protected] Message-ID: <[email protected]> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Hi All, Just noticed this come up when examining a not-spam mail that was flagged as spam and passed via the Low Spam Score limit. A default regex in bombheaderre.txt will match many Date: lines in mail headers. I don't know exactly what spammy identifier the original regex was meant to match, but, since this is an "expression to identify spam", I am assuming that the regex was not meant to match every Date: line on practically every mail. So: \%RND(?:DIGIT|[LU]CCHAR)\[?\d+\-*\d*\]? will match something like this: Date: Sat, 3 May 2014 08:24:01 +0000 And add to the mail's overall blocking score, increasingly the chance of a false positive and blocking a good mail. I went back through previous emails, and it looks like this regex hasn't matched previous to my upgrade to b14097, so I suspect the switch to Regexp::Optimizer might have introduced some subtle changes in how regexes are matched, since I was using the removed module, Regex::Optimizer before the upgrade. For now, I've commented out that regex line. -C ------------------------------ Message: 6 Date: Sat, 3 May 2014 22:41:14 +1000 From: James Brown <[email protected]> Subject: Re: [Assp-test] 'Resend' button not working on iOS block reports To: ASSP development mailing list <[email protected]> Message-ID: <[email protected]> Content-Type: text/plain; charset=us-ascii Yes, works perfectly. Thanks heaps Thomas. James. On 3 May 2014, at 1:07 am, Thomas Eckardt <[email protected]> wrote: > James, > > download the latest modify.pm > change the line > > our $convert2Base64 = 0; > > to > > our $convert2Base64 = 1; > > tell me if this works > > Thomas > > > > > Von: James Brown <[email protected]> > An: ASSP development mailing list <[email protected]>, > Datum: 21.04.2014 09:55 > Betreff: Re: [Assp-test] 'Resend' button not working on iOS block > reports > > > > Thanks Thomas. > > I changed it to: > > sub modify { > my $bl = shift; > > my %toReplace = ( # define what is to be replaced > # &makeRe('powered by ASSP') => 'Powered by Synergy', > # &makeRe("request ASSP on $main::myName to resend") > => 'Request Synergy Spam Filtering to resend', > ); > > while (my ($k,$v) = each %toReplace) { > $bl =~ s/$k/$v=\n/g; > } > > # uncommend the following two lines to remove the 'toggle view' button > from all BlockReports > # $bl =~ s/\<script type[^f]+function changeview[^\/]+\/script\>//gios; > # removes the java script > # $bl =~ s/\<input type\=\"button\" name=\"toggle\"[^>]+\>//gios; # > removes the toggle button > > $bl =~ s/=3D/=/goi; > return $bl; > } > > > It didn't change anything. Do I need to restart assp first? > > James. > > On 21 Apr 2014, at 4:54 pm, Thomas Eckardt <[email protected]> > wrote: > >> James, your mail client does not decode the MIME transfer 'quoted >> printable' encoding (the '=3D'). >> >> There are two decodings to do for the client. >> >> 1. the MIME transfer decoding + MIME charset decoding >> 2. the decoding of the HTML charset >> >> how ever, the first part is not done for the block report. >> >> as a quick fix you can change the modify.pm like this: >> >> sub modify { >> my $bl = shift; >> ...... >> return $bl; >> } >> >> to >> >> sub modify { >> my $bl = shift; >> ...... >> $bl =~ s/=3D/=/goi; >> return $bl; >> } >> >> >> it may happen, that those modified reports are not correctly shown on >> other devices than APPLE. >> >> Thomas >> >> >> >> >> Von: James Brown <[email protected]> >> An: ASSP development mailing list <[email protected]>, > >> Datum: 19.04.2014 06:20 >> Betreff: Re: [Assp-test] 'Resend' button not working on iOS block > >> reports >> >> >> >> >> On 18 Apr 2014, at 1:10 am, Thomas Eckardt <[email protected]> >> wrote: >> >>> There is a module 'lib/BlockReports/modify.pm'. This module is called >> for >>> every BlockReport: >>> >>> input: the original BlockReport content >>> output: the modified BlockReport content >>> >>> You should use it to modify the link to the needs of iOS - I hope there > >> is >>> a working function in it. >>> >>> The resend link is nothing else than a HTML link to 'mailto:' - which >>> works in every mail client I know (I don't use Apple - why should I, if > >> it >>> does'nt work!). >>> >>> If you found a way to open a 'new-mail' window with submitted address, >>> subject and body - let me know. >>> >>> Thomas >> >> Thanks Thomas. >> >> Had a look at BlockReport/modify.pm - beyond my level I'm afraid. >> >> I don't think I can attach a screenshot to an email sent to the list, > but >> on iOS the Block Report has: 3D"powered at the top, after the 'Toggle >> View' button and two equals signs. >> >> The actual resend buttons are displayed like this: >> >> 3D"request >> Resend >> >> Hope that helps. >> >> I can also see: >> >> <= /centre> >> >> after ASSP-Block-Report for the last 1 day(s) on host hostname >> >> and there is no @SSP logo >> >> Thanks, >> >> James. >> > ---------------------------------------------------------------------------- -- >> Learn Graph Databases - Download FREE O'Reilly Book >> "Graph Databases" is the definitive new guide to graph databases and > their >> applications. Written by three acclaimed leaders in the field, >> this first edition is now available. Download your free book today! >> http://p.sf.net/sfu/NeoTech >> _______________________________________________ >> Assp-test mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-test >> >> >> >> >> DISCLAIMER: >> ******************************************************* >> This email and any files transmitted with it may be confidential, > legally >> privileged and protected in law and are intended solely for the use of > the >> >> individual to whom it is addressed. >> This email was multiple times scanned for viruses. There should be no >> known virus in this email! >> ******************************************************* >> >> >> > ---------------------------------------------------------------------------- -- >> Start Your Social Network Today - Download eXo Platform >> Build your Enterprise Intranet with eXo Platform Software >> Java Based Open Source Intranet - Social, Extensible, Cloud Ready >> Get Started Now And Turn Your Intranet Into A Collaboration Platform >> > http://p.sf.net/sfu/ExoPlatform_____________________________________________ __ > >> Assp-test mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-test > > > ---------------------------------------------------------------------------- -- > Start Your Social Network Today - Download eXo Platform > Build your Enterprise Intranet with eXo Platform Software > Java Based Open Source Intranet - Social, Extensible, Cloud Ready > Get Started Now And Turn Your Intranet Into A Collaboration Platform > http://p.sf.net/sfu/ExoPlatform > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ---------------------------------------------------------------------------- -- > "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE > Instantly run your Selenium tests across 300+ browser/OS combos. Get > unparalleled scalability from the best Selenium testing platform available. > Simple to use. Nothing to install. Get started now for free." > http://p.sf.net/sfu/SauceLabs_______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------ ---------------------------------------------------------------------------- -- "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available. Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs ------------------------------ _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test End of Assp-test Digest, Vol 82, Issue 3 **************************************** ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
