Re: [Assp-test] NoProcessing - Some addresses cant be added

Device Name: s.toole@orcawireless Network Mode: Router Wireless Mode: Station AirView Status: SSID: bdc-cl-nap58 Security: none Version: v5.3 Uptime: 00:36:30 Date: 2011-01-14 15:18:27 Channel/Frequency: 153 / 5765 MHz Channel Width: Auto 20 MHz ACK/Distance: 57 / 2.8 miles (4.5 km) TX/RX Chains:

Re: [Assp-test] ASSP SMTP headers wrapped in HTML - ignore

Sorry I was trying to reply just to Thomas and messed up, please ignore David A. Lee d...@calldei.com http://www.xmlsh.org On 10/5/2010 7:21 AM, David wrote: > Here you go, thanks. > > > David A. Lee > d...@calldei.com > http://www.xmlsh.org > > > On 10/4/2010 11:

Re: [Assp-test] ASSP SMTP headers wrapped in HTML

Here you go, thanks. David A. Lee d...@calldei.com http://www.xmlsh.org On 10/4/2010 11:55 PM, Thomas Eckardt wrote: David, please send me the file from the spam folder as zip. MIME-Version: 1.0^M Content-Type: text/html; charset=utf-8;^M X-S67c: whL4LGzlYn5tjFBYR6BZvrBeV^M ^M ^M ^M ^M

[Assp-test] ASSP SMTP headers wrapped in HTML

ive bras- X-SMSMSE-SCL: 9 X-Assp-Spam-Reason: Bayesian X-Assp-Message-Totalscore: 25 ^M ^M -- David A. Lee d...@calldei.com http://www.xmlsh.org -- Virtualization is moving to the mainstream and o

Re: [Assp-test] Running ASSP2

Thanks yes I set the max_connections to 500, works no problem. I was just surprised to see > 150 connections used by 7 threads, why would 1 thread need more then 1 connection ? David A. Lee d...@calldei.com http://www.xmlsh.org On 9/28/2010 5:11 AM, Matti Haack wrote: > Hello David, &

Re: [Assp-test] assp-notspam not working on assp2

I got this working, sorry for the 'spam'. I had not copied over the local-host-names file ... David A. Lee d...@calldei.com http://www.xmlsh.org On 9/27/2010 8:13 PM, David wrote: > One more tiny issue. > I'm getting bounces to assp-notspam which worked on assp1.x >

[Assp-test] assp-notspam not working on assp2

ilSpam:=assp-spam EmailHam:=assp-notspam And the user was authenticated So why the bounce ? -- David A. Lee d...@calldei.com http://www.xmlsh.org -- Start uncovering the many advantages of virtual appliances

Re: [Assp-test] Running ASSP2

OK GOt *most* things working, but now I had to bump my mysql connections to 500. ASSP is eating 167 connections. Is that normal ? I cant find a setting for the mysql connection pool limit. Is there one ? Thanks for any suggestions. David A. Lee d...@calldei.com http://www.xmlsh.org On 9

Re: [Assp-test] Running ASSP2

Working ! Up and running and merrily importing my old spam and DB's David A. Lee d...@calldei.com http://www.xmlsh.org On 9/27/2010 6:47 PM, Steve Moffat wrote: > root/youroldpassword > > Sent from my iPad > > On Sep 27, 2010, at 6:39 PM, "David" wrote: &g

Re: [Assp-test] Running ASSP2

Thanks for the suggestion. Unfortunately root/nospam4me is not letting me in. Any suggestions on where to look for the default username or how to change it ? David A. Lee d...@calldei.com http://www.xmlsh.org On 9/27/2010 4:46 PM, Scott MacLean wrote: > V2 has been stable and working w

[Assp-test] Running ASSP2

g too ambitious. Thank you -- David A. Lee d...@calldei.com http://www.xmlsh.org -- Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shi

[Assp-test] User can receive replied mail, but not new mail from one person

This is a strange one for me. I have a user who is trying to send email back and forth with an external user. My user can send messages to the external recipient just fine. That external user can reply back and the message is received just fine, as well. If the recipient tries to compose a new

[Assp-test] Problem with SPF1/2 in 1.5.1(RC 11.05-07 at least)

I'm seeing a lot of issues in my logs here. It looks like ASSP might be dropping email connections after an SPF error. I have every logging option turned on. Here's an example of an email that gets "dropped", the blank line is original from the web gui, the last few lines are from a new connect

[Assp-test] ASSP 1.5.1 (0.11.00) doesn't start

On Centos4.6 Starting ASSP via: /usr/local/assp/start /usr/local/assp /etc/init.d/assp: line 28: 11383 User defined signal 1 $start >/dev/null 2>&1 http://p.sf.net/sfu/XcvMzF8H ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.

Re: [Assp-test] New 1.5.2 Beta

The point is to let those who use the v1 line to have better performance from multiple threads. I, for one, will never be able to run v2. I run ASSP on a VPS with the rest of the server software (pop, imap, smtp, http, ftp, rsync, etc) and the cost of renting more ram for the VPS just for a new

Re: [Assp-test] ASSP on IDisk ?

It isn't so much Fritz being a hardcore Apple user as much as it is him being petulant and childish. He's often suggested that people not use ASSP because he didn't appreciate their tone of voice. Things are often very personal with him. Honestly, it is concerning to see the reins of ASSP in th

Re: [Assp-test] small bug in 1.4.31.12032)

Hill, Brett wrote: > Fritz Borgstedt wrote: > >> As always, different opions. >> >> But ok: >> >> Analyze = new window ? >> Log = new window? >> > > Hehe, you read my mind. I can see reasons why opening the log in a > different window would be nice and possibly the analyze window. There >

Re: [Assp-test] ASSP 1.4.1 going to be closed

Is this only for attachment blocking or is this going to affect the email interface as well? Can we forward multiple messages to the email interface now instead of one at a time? Fritz Borgstedt wrote: > With this last fix ASSP 1.4.1 will become the current stable and > closed version (if succes

Re: [Assp-test] Antwort: Re: Global PenaltyBox support - ASSP 2.0 - Paid service required ?

Thomas Eckardt/eck wrote: > Sorry, but I'll not handout the code of the PB-builder - so you have > to trust Fritz and me or do not use the global PB! > We have to keep the rules on which the global-PB is build as secret as > possible, to prevent hacker attacks against the lists! > And you'll agre

Re: [Assp-test] ASSP 2.0 requires 500mb ram by default?

Here are my ASSP stats. I figure that I'm on the low end of the spectrum, so I think I might be able to get away with only one or two worker threads. The 64 days figure is misleading, since a recent update accidentally overwrote the stats sav file. It's closer to the turn of 1.5 years. ASSP P

[Assp-test] ASSP 2.0 requires 500mb ram by default?

It looks that with the new multithreading options in ASSP 2.0, it will require much more memory than it currently does. I've been running ASSP on my VPS (384mb ram guaranteed) for more than a year with amazing results. The new default config states that you need ~100mb of ram per worker thread,

[Assp-test] bombHeaderRe question (score vs block)

Fritz, What does the default bombHeaderRe setting protect against? On first glance it protects against invalid time zones, (i.e. Time zones such as '+0960'), but why? Is this common? I ask because I'm considering setting bomb headers to 'block' instead of score to enforce the charset bombre.

Re: [Assp-test] Domainname translation

> On 5/6/2008 10:24 AM, David le Blanc wrote: > >>> BTW, I find recipient validation is not as important as you would > >>> imagine. Certainly mail to unknown users is normally bounced > >>> immediately, but that merely assists in harvesting attacks.

Re: [Assp-test] Domainname translation

Hi Fritz, As I mentioned elsewhere, the 'accept all mail' was specifically in reference to recipient validation at the perimeter (aka, by ASSP). I prefer to "allow all email" (which is not otherwise rejected by ASSP) to be forward to the appropriate server. If that server returns an NDR then so

Re: [Assp-test] Domainname translation

> -Original Message- > From: [EMAIL PROTECTED] [mailto:assp-test- > [EMAIL PROTECTED] On Behalf Of Charles Marcus > Sent: Tuesday, 6 May 2008 9:46 PM > To: ASSP development mailing list > Subject: Re: [Assp-test] Domainname translation > > On 5/6/2008, David le

Re: [Assp-test] Domainname translation

s. Why would a catch all address bounce? And What would the problem be? (Unless you are referring to the automatic whitelisting of the outgoing bounce message..., but I would hope enabling ' Do Not Collect Bounced Mails (DoNotCollectBounces)' would cover that scenario.. Cheers.

Re: [Assp-test] Domainname translation

I have been using sendmail's 'virtualusertable' to map domains, so my setup looks like -- internet --> ASSP --> Sendmail --> Exchange. Having the ability to map domains AND users would allow be to drop that step entirely. eg.. mail for '[EMAIL PROTECTED]' delivered as '[EMAIL PROTECTED]' and

Re: [Assp-test] Karmasphere removed in ASSP as default in 19.18

Fritz Borgstedt wrote: >> But Fritz, which tests are you talking about? >> > > my tests. > Oh hey, look, Fritz is being unnecessarily coy about Karmasphere and default settings... just like last time http://www.nabble.com/Karmasphere-to13428008.html#a13428008 -

Re: [Assp-test] Please no penalty on SMTP AUTH

> -Original Message- > From: [EMAIL PROTECTED] [mailto:assp-test- > [EMAIL PROTECTED] On Behalf Of Jean-Pierre van Melis > Sent: Thursday, 3 April 2008 8:16 AM > To: 'ASSP development mailing list' > Subject: Re: [Assp-test] Please no penalty on SMTP AUTH > > Hi Fritz, > > I saw this pie

Re: [Assp-test] Error starting DEV 2.0.0 (02)

> > > > >syntax error at assp_exchange.pl line 14172, at EOF > > file was damaged, uploaded it again. > Have you considered hosting via sourceforge? or using SVN or some such? The manual upload by yourself, and downloads by individuals seems to be particularly error prone, not to mention time

Re: [Assp-test] Penalizing for incorrect time and normalizing time on incoming mail

Well, I notice that the only mail that comes in with the incorrect time is spam, and about 5 or so emails from servers that are misconfigured and use the beginning of the epoch as their time. While probably not necessary due to the incredibly low volume of false positive (1:5000?), perhaps a "W

Re: [Assp-test] DoPenaltyMakeTraps

Hi Fritz, DoDomainIP seems built to notice if the sender dodges around alot (as in a bot network all sending as if from the same domain), my particular scanner is coming for a single IP (which I have subsequently blocked on the firewall) DoFrequencyIP seems to be the go, I've enabled 'monitor' f

[Assp-test] DoPenaltyMakeTraps

Hi all, The 'DoPenaltyMakeTraps' feature is described as converting 'invalid addresses' into spam traps. What is 'invalid' in this definition? And what happens to the trapped emails? I am specifically looking to defeat repeated dictionary harvests, and have been thinking along the following

Re: [Assp-test] Penalizing for incorrect time and normalizing time on incoming mail

Charles Marcus wrote: > On 4/1/2008, David ([EMAIL PROTECTED]) wrote: > >> I switched from Outlook to Thunderbird a little while ago, and one >> thing I really miss is that Outlook would either normalize the >> received time or just sort by a different header to refl

[Assp-test] Penalizing for incorrect time and normalizing time on incoming mail

Another lightweight test you might want to consider is scoring a message for how much the Date: header deviates from Delivery-date or Received date. I get a lot of spam that is dated a few days/weeks in the future, and also a few years in the past. This almost never happens with legitimate email

Re: [Assp-test] error in 19.6 (1.3.5)

Kevin wrote: > David wrote: > >> Same here. Of course, this happens as soon as I decide to upgrade >> >> > > It's beta, what did you expect? > > Kevin > I didn't expect much, I had just been holding off for a while to upgrade, then when

Re: [Assp-test] error in 19.6 (1.3.5)

I seems to only happen for one message/user that keeps on getting retried Mar-30-08 16:17:41 Connected: 147.14.10.165:41388 -> 206.123.116.200:25 -> 127.0.0.1:125 Mar-30-08 16:17:42 [EMAIL PROTECTED] matches [EMAIL PROTECTED] in LocalAddresse

Re: [Assp-test] error in 19.6 (1.3.5)

Same here. Of course, this happens as soon as I decide to upgrade Pascal Dreissen wrote: > main exception: Modification of a read-only value attempted at /usr/ > local/assp/assp.pl line 5494. > > > - > Check out the new Sourc

[Assp-test] Is 1.3.5 ok now?

I'm running 1.3.5(14.32) and have been reluctant to upgrade because of all the problems that ~16 was having. Are people running 19 and beyond successfully now? Granted, it's not all fixed, but is the major weirdness gone? -

Re: [Assp-test] rebuild 'norm' odd jump.

Where did you get the '0.6' from? Don't confuse it with the 'confidence factor' which is 0.6 in the default settings. > -Original Message- > From: [EMAIL PROTECTED] [mailto:assp-test- > [EMAIL PROTECTED] On Behalf Of Kevin > Sent: Friday, 28 March 2008 9:01 AM > To: ASSP development mai

[Assp-test] Help text

FYI, bad sentence in the description for ispip. ISP/Secondary MX Servers* (ispip) Enter any addresses that are your ISP or backup MX servers, separated by pipes (|). These addresses will (necessarily) bypass Griplist, IP Limiting, Delaying, Penalty Box, SPF, DNSBL & SRS checks useless

Re: [Assp-test] Spam Bucket

Just an FYI I downloaded the latest 'assp 1.3.5 zip' as a fresh install, and while testing I noted 1) The 'terminate now' panic button appears twice, once misspelt. 2) The 'files/nodelay.txt' lists a number of networks, but requires the trailing '.' on each subnet for it to actually work. T

Re: [Assp-test] New in 1.3.6

I removed spamassassin to install ASSP.. Then when ASSP didn't work for me, I removed it and put SpamAssassin back. Now *WHY* would I want to install both, and have ASSP call SA ?? That would be like installing Linux so you could run all your apps in WINE.. Give me one really go

Re: [Assp-test] typo in 1.3.5 (14.30)

You know what would be great? Some way for anyone to check what specifically what changed from version to version... Some sort of a log of changes, or perhaps a sort of version control system that would allow developers and non-developers alike to check each other's code. One might call it a co

[Assp-test] Web Interface security.

r them, and to release their own mail as well as adding addresses to personal white-lists and black-lists. Are any of these features a possiblility for Assp? Regards David - This SF.net email is sponsored by: Microsoft De

Re: [Assp-test] Attachment name issue

Or at least only match extension which are at the end of the string. The easiest way is to assume a pattern of '\.$'. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Katip Sent: Friday, 8 February 2008 2:33 PM To: ASSP development mailing list Subject:

Re: [Assp-test] Email interface; assp-analyze

Thanks for that. I've saved a blank template, and will see how that goes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Tuesday, 5 February 2008 6:56 PM To: ASSP development mailing list Subject: Re: [Assp-test] Email interface;

[Assp-test] Email interface; assp-analyze

Hello Fritz, I've started trying to use the analyse capability of the web interface, and I get the following error assp.pl[24730]: Couldn't open './reports/analyzereport.txt' for mail report Do you have a sample 'analyzereport.txt' whic

Re: [Assp-test] PenaltyBox in mysql

Hi Fritz, I am happy with the virus report for now. I can always fish the original out of the quarantine folder for later examination. Thanks, and great work. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Monday, 4

[Assp-test] PenaltyBox in mysql

I missing something? On an unrelated note, would it be difficult to add an 'X-Assp-Virus: ' tag for emails which are found to be infected? I've set up for infected emails to be cc'd to 'postmaster' but there doesn't see

Re: [Assp-test] Problem with rebuildspamdb.pl

Thanks Much appreciated. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Monday, 4 February 2008 6:23 PM To: ASSP development mailing list Subject: Re: [Assp-test] Problem with rebuildspamdb.pl There is a new version of rebuildsp

Re: [Assp-test] Problem with rebuildspamdb.pl

BTW, I didn't realise that mysql support for PenaltyBox wasn't actually implemented.. It might be worth noting in the config section that choosing 'mysql' for the penaltybox will currently disable PB processing.. Cheers. David From: [EMAIL PROTE

[Assp-test] Problem with rebuildspamdb.pl

e) now calls the repair function which results in empty files called mysql. Cheers. David - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http

[Assp-test] FW: virus detected: 'HTML.Phishing.Pay-37'

presume this is an error? I'm currently running 1.3.5.13.6 Thanks David -Original Message- From: SPAM Master [mailto:[EMAIL PROTECTED] Sent: Monday, 4 February 2008 2:39 AM To: Administrator Subject: virus detected: 'HTML.Phishing.Pay-37' Message ID: 53122-00450 R

Re: [Assp-test] localdomains

keSLRe function into ConfigMakeRe (where processing 'localDomains') thus emulating the ability to use '*' for a wildcard. Wildcard domains (such as *mydomain.com and *.mydomain.com) are now dealt with cleanly and easily. Regards David -Original Message- From: [EMAIL PROT

[Assp-test] localdomains

wn problems, least of all 'localdomainre' is built from an unescaped RE, the consequences of which I've avoided thinking through, and the localdomains RE is now completely unescaped, meaning that '.'s have special meaning. nasty all around. My Question, Ca

Re: [Assp-test] Latest Download ..

My apologies for asking something to obviously in a FAQ somewhere .. Where can I download the latest development code for ASSP ? Thanks. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Tuesday, 22 January 2008 4:58 AM To

Re: [Assp-test] Winmail.dat decoding - WAS: Re: 1.3.6

Charles Marcus wrote: > Don't be an ass. Context is everything. It is irrelevant for a user to > complain about the number of lines of code that an application they are > using consists of. > Well, given the number of simple code errors that crop up with every new iteration: changed variable

Re: [Assp-test] Winmail.dat decoding - WAS: Re: 1.3.6

Charles Marcus wrote: > Don't be an ass. Context is everything. It is irrelevant for a user to > complain about the number of lines of code that an application they are > using consists of. > Well, given the number of simple code errors that crop up with every new iteration: changed variable

Re: [Assp-test] 1.3.6

Although it's a neat idea, I can't see how it's ASSP's job to do winmail.dat conversion instead of, say, support SSL connections. If SSL connections are "outside the scope of ASSP", then how is this inside the scope? bytehd wrote: > is this something a spam filter should be doing? > and why? >