[Assp-test] Antwort: Interesting attachment blocking problem

2008-08-07 Thread Thomas Eckardt/eck
>1.3.5 and 2.0.x: These two version a totaly different in attachment handling - do you have realy checked this with 2.0.0 ? Thomas Trevor Jacques <[EMAIL PROTECTED]> Gesendet von: [EMAIL PROTECTED] 07.08.2008 21:27 Bitte antworten an ASSP development mailing list An assp development ma

Re: [Assp-test] dnsbl defaults

2008-08-07 Thread James Brown
On 07/08/2008, at 4:45 PM, _larsneo_ wrote: talking about the dnsbl default settings i'd recommend to remove blackholes.five-ten-sg.com from the defaults due to it's accurancy - see http://www.dnsbl.com/2007/10/fiveten-blacklist-not-accurate.html Yes, I can't send email to Thomas Eckard b

Re: [Assp-test] ASSP 2 integrates rebuildspamdb.pl

2008-08-07 Thread Trevor Jacques
>There are no separate apps and cron jobs necessary anymore. :-) T. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes

[Assp-test] ASSP 2 integrates rebuildspamdb.pl

2008-08-07 Thread Fritz Borgstedt
- rebuildspamdb.pl and move2num.pl are now integrated into assp.pl There are no separate apps and cron jobs necessary anymore. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest

Re: [Assp-test] Bacscatter options in assp 1.4.1

2008-08-07 Thread Fritz Borgstedt
>No one knows what these options do? They do the same as in 20 other features. It is standard in ASSP to have this options. block = block the mail monitor = show the event, do not block score = add the scoring value of this event in penaltybox to the total score of message and/or IP, do not block

Re: [Assp-test] Bacscatter options in assp 1.4.1

2008-08-07 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/05/08 01:52 pm, James Moe wrote: > Hello, > Besides "Disable" the function of the other options for "Backscatter > Detection (FBMTV)" are not obvious. > What do "block," "monitor" and "score" do? > No one knows what these options do? - --

[Assp-test] Interesting attachment blocking problem

2008-08-07 Thread Trevor Jacques
1.3.5 and 2.0.x: A user contacted me that he had had a problem getting a pdf into another user. The bounce cites that assp had blocked an executable, but there was no executable attached to the e-mail, it was a pdf file. On further inspection, and file renaming, we found the problem. The origi

Re: [Assp-test] Antwort: Re: Antwort: Re: Antwort: Re: ASSP 1.4.1 goingto be closed

2008-08-07 Thread Michel
Thomas, for testing purposes MaxBytes and ClamAVBytes are set to 1.000.000 I checked 9460.eml (321 kB) for the other attachment without success, but the message was delivered including the 'test.xxx' if sent in HTML. Where is the test.xxx? The embedded .png in my signature wasn´t listed in that .

Re: [Assp-test] dnsbl defaults

2008-08-07 Thread marrco
>> I see actual (1.3.9.1) dnsbl defaults include UCEPROTECT >> >> I think it's not a good idea because on their site they ask NOT to use dns >> query but rsync for servers with more than 1000 queries per day ( >> http://www.uceprotect.net/en/index.php?m=6&s=11 ) or at least a note could >> be adde

Re: [Assp-test] Antwort: Re: Antwort: Re: Antwort: Re: ASSP 1.4.1 goingto be closed

2008-08-07 Thread Michel
No, 'send250OK' is not set. Otherwise there wouldn´t be the correct 554 error message as below. Regards Michel _ Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Thomas Eckardt/eck Gesendet: Donnerstag, 7. August 2008 18:40 An: ASSP development mailing list Betreff: [As

[Assp-test] Antwort: Re: Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Thomas Eckardt/eck
>The transmission is still in progress when ASSP/Postfix suddenly drops the connection. I think ASSP drops the connection! But this could only be the case if 'send250OK' (in any case) is set to on or it is an outgoing mail and 'send250OKISP' is set to on. The '250 OK' will never be logged by ASS

[Assp-test] Antwort: Re: Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Thomas Eckardt/eck
Michel, If the header + body + the first attachment is larger than MaxBytes/ClamAVBytes a second (or more) attachment will not be detected! Just look in to the file ./notspam/9460.eml - is there any other attachment than the winmail.dat to see? I think it's not. Only the parts that are written

Re: [Assp-test] Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Michel
Thomas, .dat is allowed, .xxx is not. I tried to send the same message (with the attached, not allowed 'test.xxx') twice via an external account to an inbound account: first in HTML : Aug-7-08 18:02:06 Connected: 212.227.126.188:50430 -> xx.xx.xx:25 -> 127.0.0.1:24 Aug-7-08 18:02:06 [EMAIL P

Re: [Assp-test] Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Michel
No, send250OKISP is not set. As you can see here: "07.08.2008 15:36:52 Action: Message Delivery Attempt Failed Client: 196.0.0.161 From: To: Subject: WG: Morgenmuffel... SMTP ID: M2008080711282022438 Connection ID: 34449 Last Command: DATA Last Response: 354 End data with . The transmi

[Assp-test] Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Thomas Eckardt/eck
It looks like you've set 'send250OKISP' to on - is this true? Thomas "Michel" <[EMAIL PROTECTED]> Gesendet von: [EMAIL PROTECTED] 07.08.2008 17:18 Bitte antworten an ASSP development mailing list An "'ASSP development mailing list'" Kopie Thema Re: [Assp-test] Antwort: Re: ASSP 1.4.1 go

[Assp-test] Antwort: Re: Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Thomas Eckardt/eck
>In addition to that I found, HTML-Mails (winmail.dat included) with not allowed attachments (in this case 'test.xxx') are not blocked. Are .dat files not allowed in Level 4 ? Because "info: attachment 'winmail.dat' found for Level-4" shows that the engine has found it !? Thomas "Michel"

Re: [Assp-test] Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Michel
Replylogging was already turned on. Further testing shows that this behaviour only comes up when mails are sended from inbound (exchange) to outbound (ASSP with postfix). In this case the connection is just dropped. That´s the reason for the missing SMTP error although 'replyLogging' is on. All oth

[Assp-test] Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Thomas Eckardt/eck
please switch on 'replyLogging' and try again! I've just made a test for outgoing mail with blocked attachment. I've got the attachment error back from my mail gateway! Aug-7-08 16:09:46 [Worker_5] Connected: :42968 -> :625 -> :25 Aug-7-08 16:09:46 M1-18186-04936 [Worker_5] <..

Re: [Assp-test] ASSP 1.4.1 going to be closed

2008-08-07 Thread Fritz Borgstedt
ASSP development mailing list schreibt: >But the sender does not get a non-delivery report. ASSP never sends a NDR. It replies with the message you set in AttachmentError. To see what is going on set the logging option: SMTP Status Code Reply Logging (replyLogging). ---

Re: [Assp-test] ASSP 1.4.1 going to be closed

2008-08-07 Thread Michel
Hello @all! Unfortunately maybe I found a misbehaviour handling blocked attachments: Blocked or not allowed attachments are found and CC as wanted to my Spambox. But the sender does not get a non-delivery report. The postfix log on my ASSP machine says that the connection is lost: "postfix/smt

Re: [Assp-test] Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread _larsneo_
Matti Haack wrote: > Try to add these additonal repositories to ppm > (Edit/Preferences/repositories):[...] see also http://www.asspsmtp.org/wiki/Perl_Modules#Windows - missed the 'University of Winnipeg' repository also and found out that 'rtfm' is sometimes not *that* bad... regards from germ

Re: [Assp-test] dnsbl defaults

2008-08-07 Thread Charles Marcus
On 8/6/2008, marrco ([EMAIL PROTECTED]) wrote: > I see actual (1.3.9.1) dnsbl defaults include UCEPROTECT > > I think it's not a good idea because on their site they ask NOT to use dns > query but rsync for servers with more than 1000 queries per day ( > http://www.uceprotect.net/en/index.php?m=6&

Re: [Assp-test] dnsbl defaults

2008-08-07 Thread Fritz Borgstedt
>blackholes.five-ten-sg.com is quite successful if you use RBLmaxhits=2. With RBLmaxhits=1 it is not recommended. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based

Re: [Assp-test] dnsbl defaults

2008-08-07 Thread GrayHat
> my defaults are: > > zen.spamhaus.org > bl.spamcop.net > dul.dnsbl.sorbs.net > combined.njabl.org > > with RBLmaxits set to 1 I think you may add ix.dnsbl.manitu.net bhnc.njabl.org the second one won't add so much, but having it won't hurt; the first one (manitu) is often useful, especially fo

Re: [Assp-test] Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread GrayHat
> Try to add these additonal repositories to ppm > (Edit/Preferences/repositories): > http://trouchelle.com/ppm/package.xml > and > http://theory5.uwinnipeg.ca/ppms/package.lst That did the trick; as a note the trouchelle repo also allowed me to install the latest Mail::SPF and enable SPF 2 chec

Re: [Assp-test] Antwort: Re: ASSP 1.4.1 going to be closed

2008-08-07 Thread Matti Haack
I just installed it with active perl on my windows server. Try to add these additonal repositories to ppm (Edit/Preferences/repositories): http://trouchelle.com/ppm/package.xml and http://theory5.uwinnipeg.ca/ppms/package.lst Matti >> What you need to install is 'Email::MIME::Modifier'. I thin