Re: [Assp-test] Logs not rolling
Scott, check that a possibly installed online filesystem virusscanner ignores the log folder. Thomas Von:Scott MacLean An: ASSP Development Mailing List Datum: 07.10.2015 18:11 Betreff:[Assp-test] Logs not rolling I've noticed lately that my logs are not rolling - I will often have logs containing 3, sometimes 4 days of logs. This is something new. I have no other applications (backup, etc) accessing the log files, but ASSP is having difficulty rolling the log file - perhaps because it is writing to the file? Here is what I see: Oct-06-15 00:00:00: Rolling log file -- archive will be saved as 'logs/15-10-05.maillog.txt' Oct-06-15 00:00:00 Main_Thread new log file -- old log file renamed to 'logs/15-10-05.maillog.txt' error: unable to rename file D:/ASSP/logs/maillog.txt to D:/ASSP/logs/15-10-05.maillog.txt - Permission denied Oct-07-15 00:00:00 [Worker_10001] Worker_10001 finished reloading configuration Oct-07-15 00:00:00: Rolling log file -- archive will be saved as 'logs/15-10-06.maillog.txt' Oct-07-15 00:00:00 Main_Thread new log file -- old log file renamed to 'logs/15-10-06.maillog.txt' error: unable to rename file D:/ASSP/logs/maillog.txt to D:/ASSP/logs/15-10-06.maillog.txt - Permission denied -- Full-scale, agent-less Infrastructure Monitoring from a single dashboard Integrate with 40+ ManageEngine ITSM Solutions for complete visibility Physical-Virtual-Cloud Infrastructure monitoring from one console Real user monitoring with APM Insights and performance trend reports Learn More http://pubads.g.doubleclick.net/gampad/clk?id=247754911&iu=/4140 ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: *** This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *** -- ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
[Assp-test] Don't to DNSBL for a from domain
I feel like this has to have been discussed before, but I can't find any reference to it. Is there a way to skip DNSBL checking based on the envelope from / from line? I want the message to contribute to the corpus, just not be scored based on DNSBL. -- ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] Don't to DNSBL for a from domain
and for clarification, it looks like the organization sends from something like 98 different IP's that I know about - I'm sure there are others - and some of them are blacklisted. If I could skip dnsbl either using a wildcard reverse dns match for the server, say *.thesenderdomain.com or matching the domain of the from line, that would allow me to easily let these through without constantly updating norbl. thanks On Thu, Oct 8, 2015 at 11:15 AM, K Post wrote: > I feel like this has to have been discussed before, but I can't find any > reference to it. > > Is there a way to skip DNSBL checking based on the envelope from / from > line? I want the message to contribute to the corpus, just not be scored > based on DNSBL. > -- ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] Don't to DNSBL for a from domain
:: On Thu, 8 Oct 2015 11:23:49 -0400 :: :: K Post wrote: > and for clarification, it looks like the organization sends from > something like 98 different IP's that I know about - I'm sure there > are others - and some of them are blacklisted. > > If I could skip dnsbl either using a wildcard reverse dns match for > the server, say *.thesenderdomain.com or matching the domain of the > from line, that would allow me to easily let these through without > constantly updating norbl. you may use the senderbase/whois query to retrieve the IP owner and then whitelist it using the name (or a matching regexp) -- ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] Don't to DNSBL for a from domain
Thanks Greyhat. I'm already doing that. The domain that's listed in senderbase is in the white sender file, preceded with a \b with the dots escaped \. I do have ForceRBL enabled for early DNSBL checks. Is >THAT< the problem? ValidateRBL is set to score with 50 as a threshold (the same score that rejects for us). I don't even see that senderbase is running for these. (this isn't urgent, it's just an annoyance) On Thu, Oct 8, 2015 at 11:32 AM, Grayhat wrote: > :: On Thu, 8 Oct 2015 11:23:49 -0400 > :: > :: K Post wrote: > > > and for clarification, it looks like the organization sends from > > something like 98 different IP's that I know about - I'm sure there > > are others - and some of them are blacklisted. > > > > If I could skip dnsbl either using a wildcard reverse dns match for > > the server, say *.thesenderdomain.com or matching the domain of the > > from line, that would allow me to easily let these through without > > constantly updating norbl. > > you may use the senderbase/whois query to retrieve the IP owner and > then whitelist it using the name (or a matching regexp) > > > -- > ___ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > -- ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
