Re: [Assp-test] Block .exe inside .zip

2013-12-20 Thread Paul Whelan
tachement blocking look inside archives? > How can i block this kind of exploit? > > I scanned the .exe with clamscan but it detected no virus otherwise clam > would have blocked the attachment. Use the Sanesecurity signatures - specifically the Foxhole ones which can block exec

Re: [Assp-test] Block spoofed addresses

2012-08-17 Thread Paul Farrow
what about taking it out of your white listed domains and find the ip range of the efax mailservers from http://www.senderbase.org/senderbase_queries/detaildomain?search_string=efax.com and put those ranges in your ipnp.txt then try other things to block the spoofing mails like regex etc, but t

Re: [Assp-test] Antwort: Re: Antwort: Re: Antwort: Re: Bayesian database empty

2012-08-06 Thread Paul Houlbrooke
ot working correct). > If you have a service contract for MySQL - open a support ticket. > > Or post your system (OS) configuration - possibly there is anyone in the > list who could tell you the right MySQL version to use. > > > Thomas > > > > > Von:Paul Ho

Re: [Assp-test] Antwort: Re: Antwort: Re: Bayesian database empty

2012-08-02 Thread Paul Houlbrooke
, "SELECT COUNT(*) from spamdb" returns 0. The database is working, there are plenty of records for whitelist for instance. On 8/2/2012 9:08 AM, Thomas Eckardt wrote: > Paul, > > I need to know: > > - was the import not OK > Aug-02-12 08:46:58 [init] Successfully add

Re: [Assp-test] Antwort: Bayesian database empty

2012-08-02 Thread Paul Houlbrooke
n 8/1/2012 9:27 AM, Thomas Eckardt wrote: > Paul, > > is the MySQL table 'spamdb' empty or not (use the MySQL admin or similar > for this check) after a rebuild (don't restart assp at this time). > > Analyze one corpus spam email in the GUI after that rebuild - is the

Re: [Assp-test] Antwort: Re: Bayesian database empty

2012-08-02 Thread Paul Houlbrooke
[init] Using table in mysql Database instead of file c:/assp/ldaplist Aug-02-12 08:46:58 [init] Warning: Bayesian spam database has only 0 records On 8/1/2012 9:32 AM, Thomas Eckardt wrote: > Paul, > > set 'DataBaseDebug' to ON - do it again. > > is there a messa

Re: [Assp-test] Bayesian database empty

2012-08-01 Thread Paul Houlbrooke
table in mysql Database instead of file c:/assp/ldaplist Aug-01-12 09:17:58 [init] Warning: Bayesian spam database has only 0 records On 7/31/2012 9:55 AM, Paul Houlbrooke wrote: > From the attached config, can anyone tell why I'm getting the following > > Jul-30-12 10:2

Re: [Assp-test] Antwort: Bayesian database empty

2012-08-01 Thread Paul Houlbrooke
- this should never happen ? > > Thomas > > > > > Von:Paul Houlbrooke > An: ASSP development mailing list , > Datum: 31.07.2012 16:09 > Betreff:[Assp-test] Bayesian database empty > > > > From the attached config, can anyone tell why I

[Assp-test] Bayesian database empty

2012-07-31 Thread Paul Houlbrooke
From the attached config, can anyone tell why I'm getting the following Jul-30-12 10:28:53 [init] Warning: Bayesian spam database has only 0 records I must have changed something at some point to mess this up, but I can't figure out what. Rebuildrun still shows spam/ham. Jul-30-12 09:11:14

[Assp-test] rebuilddb removing spam which is in block report

2012-07-13 Thread Paul Farrow
Paul -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint sec

[Assp-test] bare lf's in reporting spam confirmation email

2012-05-24 Thread Paul Farrow
t fix my reporting confirmation message or something. I haven't changed any thing except for taking 2.2.1 recently. Thanks Paul -- Live Security Virtual Conference Exclusive live event will cover all the ways tod

Re: [Assp-test] Antwort: rebuildspamdb.pm owned by root

2012-04-10 Thread Paul Farrow
Sorry, what I should have said was I changed the owner on the file and away it went (for now I guess) The files in lib are -rw-r--r-- to nobody and group nobody The lib directory is drwxr-sr-x to nobody and group nobody Thanks Paul On Tue, 10 Apr 2012 08:38:08 +0200, Thomas Eckardt wrote

[Assp-test] rebuildspamdb.pm owned by root

2012-04-09 Thread Paul Farrow
as it couldn't run as nobody. Not a big problem as I just changed the permissions but not sure if this is a feature or stupid user setup on the directory structure. Looking at the directories though the lib and ASSP root directory are all owned by nobody. Thought I would note it. Cheers

Re: [Assp-test] Still not catching falsified sender domain

2012-03-30 Thread Paul Farrow
Have you tried the mail analyzer provided by ASSP, it might give you a clue as to why it is accepting it? On Fri, 30 Mar 2012 09:30:53 -0400, Michelle Dupuis wrote: > I'm still trying to get settings right (and I think I'm close), but > ASSP is failing to catch really obviously faked domains! > >

[Assp-test] Proposed UTF-8 mail standards

2012-02-18 Thread Paul Whelan
Four new UTF-8 rfcs have been published: RFC 6530 on Overview and Framework for Internationalized Email RFC 6531 on SMTP Extension for Internationalized Email RFC 6532 on Internationalized Email Headers RFC 6533 on Internationalized Delivery Status and Disposition Notifications See http://tools.

[Assp-test] To: Email added to blacklistdomains rather than From

2012-02-07 Thread Paul Farrow
Hi When I forward the attached email header to EmailBlackAdd I get the To address added to the blacklistdomain rather than sender (From) address. This has worked in the past but doesn't appear to work for this particular email any ideas? I am running ASSP 2.1.1(11364) Thanks

Re: [Assp-test] It was June 2004...

2012-02-03 Thread Paul Whelan
> http://www.linuxjournal.com/article/7450#mpart3 Magic - and still doing a great job! paul -- Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft develop

Re: [Assp-test] Antwort: Re: Antwort: virus reports

2012-01-19 Thread Paul Farrow
Changed so that it works as your recommendation. Cheers Paul On Thu, 19 Jan 2012 15:54:39 +0100, Thomas Eckardt wrote: >>report to an address > > use EmailVirusReportsTo > >>and the recipient > > use the ASSP_AFC plugin to send the orig. desinfected mail to

Re: [Assp-test] Antwort: virus reports

2012-01-19 Thread Paul Farrow
Sorry Thomas that is what I meant the email reports. Is it possible to have the email report sent to an address and the recipient? Thanks Paul On Thu, 19 Jan 2012 08:33:08 +0100, Thomas Eckardt wrote: >>copy of the email or not? > > ASSP will never send an infected mail for secu

Re: [Assp-test] virus reports

2012-01-18 Thread Paul Farrow
Actually when I say virus emails, I actually mean virus email reports. That is one way Doug, thanks. Paul On Wed, 18 Jan 2012 11:22:47 -0500, Doug Lytle wrote: > Paul Farrow wrote: >> so I can keep an eye on whats coming in. > > > As an alternative, I have mine setup to q

[Assp-test] virus reports

2012-01-18 Thread Paul Farrow
virus emails as well as the recipient, so I can keep an eye on whats coming in. Thanks Paul -- Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers

[Assp-test] since upgrading to ASSP version 2.1.1(11364)

2012-01-04 Thread Paul Farrow
ip in Kuwait) still connected or is it stuck? Any ideas ? Do I need to limit connection time etc and if so how do I do that? Thanks in advance. Paul -- Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't

Re: [Assp-test] Antwort: Re: Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
disco. Had openssl installed but had some of the OpenSSL perl modules missing. Installed them via CPAN and now its working. Thanks again Thomas Paul On Thu, 29 Dec 2011 16:40:24 +0100, Thomas Eckardt wrote: > Install OpenSSL > Install the Perl modules > > Crypt::CBC > Cry

Re: [Assp-test] Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
I saw that also Doug but didn't think it was my problem. Thanks Paul On Thu, 29 Dec 2011 10:35:17 -0500, Doug Lytle wrote: > Paul Farrow wrote: >> Can't locate Crypt/OpenSSL/RSA.pm in @INC (@INC contains > > Google says: > > "This looks like a missing depend

Re: [Assp-test] Antwort: Re: Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
ing a perl expert - how can I fix this please? Paul On Thu, 29 Dec 2011 16:17:00 +0100, Thomas Eckardt wrote: > run > >>perl -e "use Mail::DKIM::Verifier;" >>perl -e "use Mail::DKIM;" > > this should show you the reason > > Thomas > > >

Re: [Assp-test] Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
installed? I am running assp version ASSP version 2.1.1(11355) on Fedora Core 16. Thanks Paul On Thu, 29 Dec 2011 15:09:34 +0100, Thomas Eckardt wrote: >>What does the plugin... > > Install it and read the GUI for the plugin. > > - scannes the complete mail not only maxBytes &g

Re: [Assp-test] Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
Ok thanks. Paul On Thu, 29 Dec 2011 15:09:34 +0100, Thomas Eckardt wrote: >>What does the plugin... > > Install it and read the GUI for the plugin. > > - scannes the complete mail not only maxBytes > - delivers cleaned up mails if you want > - scores mails because o

Re: [Assp-test] Are You using ASSP_AFC Plugin ( attachment- and ClamAV- engine of ASSP) ? Re: ClamAV

2011-12-29 Thread Paul Farrow
What does the plugin give you that the standard ASSP V2 and ClamAV give you? Thanks Paul On Thu, 29 Dec 2011 09:33:46 +0300, Victor Miasnikov wrote: > Hi! > >> How can I confirm that ASSP version 2 is using the ClamAV daemon. >> I send in an email with an attachm

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Ah thanks very much will deffo look at those. Paul On Wed, 28 Dec 2011 16:49:09 -0500, Doug Lytle wrote: > Paul Farrow wrote: >> nteresting, currently ASSP and ClamAV has detected one viral email > > > You may want to look into the SaneSecurity signatures for ClamAV. >

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
Interesting, currently ASSP and ClamAV has detected one viral email from GFI, the rest of the mails are currently being delayed. Is so nice to see software just work. Thanks to Thomas and the rest of the ASSP gang that made it so great. Paul On Wed, 28 Dec 2011 15:45:23 -0400, Tim Jacob

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
pleased I have that working now. Cheers Paul On Wed, 28 Dec 2011 15:09:39 -0500, Doug Lytle wrote: > Paul Farrow wrote: >> I guess I must have something wrong as I don't have that line in the >> log file. > > > Under my /etc/clamav/clamd.conf: > > LocalSocke

Re: [Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
the clamd scanner to store that file also. I reckon I haven't got the scanner working correctly, will play with the configuration file now I know I should see a scanned log line as you have shown Doug. Thanks Paul I have set the useClamAV On Wed, 28 Dec 2011 14:39:46 -0500, Doug Lytl

[Assp-test] ClamAV

2011-12-28 Thread Paul Farrow
in an email with an attachment I don't see any logging that its scanning the file. I looked in the clamav logfile and I don't see anything in there except successfully running messages. What should I see / how can I confirm that its scanning the attachments? Thanks in adva

Re: [Assp-test] fixes in assp 2.1.2 build 11358

2011-12-24 Thread Paul Whelan
Merry Christmas to you as well Thomas. Thank you for all the work and have a good 2012! paul On 24 Dec 2011 at 8:33, Thomas Eckardt wrote: > Hi all, > > fixed in assp 2.1.2 build 11358: > > - It was possible that assp has removed some bytes from the original mail > heade

Re: [Assp-test] Antwort: block reports

2011-12-08 Thread Paul Farrow
sent directly to you. Thanks On Thu, 8 Dec 2011 17:13:41 +0100, Thomas Eckardt wrote: > Paul, please could you repost the report text in an attachment (zip > if > possible) - SF and mail clients are breaking lines. So I'm unable to > see > what you mean. > > Thomas &

Re: [Assp-test] block reports

2011-12-08 Thread Paul Farrow
Sure I can do that. I guess that's a trait of the very old version 1 ASSP that I came from originally. On Thu, 08 Dec 2011 17:10:23 +0100, Fritz Borgstedt wrote: > Try to set webAdminPort to 5. ( remove |2|3|4) > > > > ---

[Assp-test] block reports

2011-12-08 Thread Paul Farrow
.com for fedo...@farrowcomputing.com It can make it quite hard to look to see which mails I need to get back or not. Thanks in advance. Paul -- Cloud Services Checklist: Pricing and Packaging Optimization This white paper is int

Re: [Assp-test] Antwort: mail rejected because of BCC not local

2011-12-05 Thread Paul Farrow
I should have worded my question better. What I was after was the non production builds so that I could get the removeForeignBCC to work. Thanks for replying though Paul On Mon, 5 Dec 2011 09:53:31 +0100, Matti Haack wrote: > Just download it from Sourceforge: >

Re: [Assp-test] Antwort: Re: Antwort: mail rejected because of BCC not local

2011-12-05 Thread Paul Farrow
Thank you. I appreciate it. Paul On Mon, 5 Dec 2011 10:01:11 +0100, Thomas Eckardt wrote: >>I have looked at the GUI can't see it > > 'Info and Stats' -> 'Server Information' -> ASSP version -> release + > beta > > Thomas > > >

Re: [Assp-test] Antwort: mail rejected because of BCC not local

2011-12-04 Thread Paul Farrow
Apologies but how do I get ASSP to subscribe to the assp-test builds. I have looked at the GUI can't see it and looked in the ASSP cfg and cant see anything that might be relevant either. Thanks again Paul On Sun, 4 Dec 2011 06:09:02 +0100, Thomas Eckardt wrote: >>ASSP 2.1.1(1

[Assp-test] mail rejected because of BCC not local

2011-12-03 Thread Paul Farrow
Hi Thomas/Guys Sometime ago you told me that the removeForeignBCC on the command line was put into a later version than that of what I was running at the time. I have just upgraded to ASSP 2.1.1(11278) and I am still eeing these warnings. Is it a problem of ASSP or just how I have called (th

Re: [Assp-test] clamav windows

2011-11-10 Thread Paul Whelan
On 10 Nov 2011 at 11:49, GrayHat wrote: > > > That one still requires srvany, NTwrapper or similar to work as a > > service. > > Right, not a big issue btw, but having native support eases things :) > > I just wonder what happened to "tBB" time ago he was active on > some lists/forums, but no

Re: [Assp-test] clamav windows

2011-11-10 Thread Paul Whelan
ial' version at http://sourceforge.net/projects/clamav/files/clamav/win32/ That one still requires srvany, NTwrapper or similar to work as a service. paul -- RSA(R) Conf

Re: [Assp-test] clamav windows

2011-11-09 Thread Paul Whelan
scan. However, one of the Clamwin team releases his own complete port at http://oss.netfarm.it/clamav/ which is now up to 0.97.3 and has 32- and 64- bit versions. paul -- RSA(R) Conference 2012 Save $700 by Nov 18 Reg

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-21 Thread Paul Farrow
AH woops, not got the correct version *embarrassed face* will download later versions. Sorry and thanks Paul On Fri, 21 Oct 2011 18:22:36 +0200, Thomas Eckardt wrote: > the error message should be: > > "relay attempt blocked for non local BCC > re

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-21 Thread Paul Farrow
0 Byte what am I doing wrong? Thanks Paul On Thu, 20 Oct 2011 09:21:16 -0400, Paul Farrow wrote: > Ah so I cant get the original message back for that one? > > No big deal, I did it the old school way and wrote the order number > down any way :) > > Thanks > > Paul

Re: [Assp-test] Antwort: Re: Antwort: general question about dnsbl

2011-10-20 Thread Paul Farrow
55 or what ever is > needed > > Thomas > > > > Von:Paul Farrow > An: ASSP development mailing list > > Datum: 20.10.2011 16:54 > Betreff:Re: [Assp-test] Antwort: general question about > dnsbl > > > > > > I put the i

Re: [Assp-test] Antwort: general question about dnsbl

2011-10-20 Thread Paul Farrow
I put the ip in noRBL although they are dynamic addresses so likely to have a whole bunch eventually in there. Will see how it goes. Thanks again Paul On Thu, 20 Oct 2011 16:33:54 +0200, Thomas Eckardt wrote: > All routing IP's are checked like regular IP's. > > In bloc

[Assp-test] general question about dnsbl

2011-10-20 Thread Paul Farrow
is wrong. Does one simply try to contact comcast? Horror that would be. Interested to know others strategies on this kind of email problem Thanks Paul -- The demand for IT networking professionals continues to grow, and

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
Ah so I cant get the original message back for that one? No big deal, I did it the old school way and wrote the order number down any way :) Thanks Paul On Thu, 20 Oct 2011 15:17:43 +0200, Thomas Eckardt wrote: > BCC is part of the header -> header check (BCC) -> message was

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
Got that going but when I wanted to get the email back I noticed the mail had gone in the discarded folder and it doesn't appear to have a message body. Is this because of the checking or is it likely that Epson didn't send me a body to my order confirmation? Thanks Paul On T

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
Ok I understand. Probably just want it in the code rather than configurable. Thank you Paul On Thu, 20 Oct 2011 14:51:33 +0200, Thomas Eckardt wrote: >>Any plans to make this a regular configuration item? > > Possibly yes - depends on: if this feature will remain in the code or

Re: [Assp-test] Antwort: Re: Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
Super. Any plans to make this a regular configuration item? Apologies if this has been discussed before. Paul On Thu, 20 Oct 2011 14:15:32 +0200, Thomas Eckardt wrote: > For example > > /usr/local/bin/perl /opt/assp/assp.pl /opt/assp > --removeForeignBCC:=1 > > or shor

Re: [Assp-test] Antwort: Re: Mail rejected because of BCC not local

2011-10-20 Thread Paul Farrow
Can I be a dummy today as well? If you want to do it with a startup switch how do you do that ? Thanks Paul On Thu, 20 Oct 2011 11:28:19 +, Steve Moffat wrote: > Sorry for being a bit of a dummy, I have downloaded CorrectASSPcfg.pm > and put it in the lib dir. > How do I o

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
) (192.168.240.18) by 0 with SMTP; 19 Oct 2011 20:21:41 - From: epsonstoreord...@ea.epson.com To: x...@thefabfarrows.com Subject: Epson Order Confirmation bcc: earch...@ea.epson.com MIME-Version: 1.0 Content-Type: multipart/a thanks Paul On Wed, 19 Oct 2011 22:45:55 +0200, Anders Westin

Re: [Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
Thanks Anders. That is what I am seeing. Is there a way to stop it marking it as a "relayattempt"? I probably wouldn't care but as this is a high profile blue chip (EPSON printers) sending a BCC its probably the first of many that I am likely to receive. Any ideas? Thank

[Assp-test] Mail rejected because of BCC not local

2011-10-19 Thread Paul Farrow
BCC not local check for all? Thanks Paul -- The demand for IT networking professionals continues to grow, and the demand for specialized networking skills is growing even more rapidly. Take a complimentary Learning

Re: [Assp-test] Antwort: Re: Antwort: Re: Antwort: notspam file names

2011-10-05 Thread Paul Farrow
I hear ya. Thanks again for a great product. Paul On Wed, 5 Oct 2011 23:01:06 +0200, Thomas Eckardt wrote: >>its a free world > > Yes - do what you want. > > BUT > >>but sometimes I just want to >>change a file. > > There are some major things, that cou

Re: [Assp-test] Antwort: Re: Antwort: notspam file names

2011-10-05 Thread Paul Farrow
and it has improved greatly since ASSP first started but sometimes I just want to change a file. Personal preference - its a free world, although from what I have seen on the version 1 group I am in a minority :( Thanks Paul On Wed, 05 Oct 2011 22:15:14 +0200, Fritz Borgstedt wrote: > ASS

Re: [Assp-test] Antwort: notspam file names

2011-10-05 Thread Paul Farrow
Oh yes that's the trick, if I use the directory before the * it works. Thanks Todd. Cheers Paul On Wed, 5 Oct 2011 14:47:32 -0400, Todd Goodman wrote: > Can't you grep the directory without quoting all the filenames with: > > grep whatever -- dir/* > > ? > > Tod

Re: [Assp-test] Antwort: Re: Antwort: notspam file names

2011-10-05 Thread Paul Farrow
I guess I am just old school, like to do things on the command line :) Thanks again Paul On Wed, 5 Oct 2011 20:26:14 +0200, Thomas Eckardt wrote: >>look to see if something has been > blocked in Version 2 > > MaillogTail I think > > I don't find any reason to access

Re: [Assp-test] Antwort: notspam file names

2011-10-05 Thread Paul Farrow
ah shame. Whats the desired way to look to see if something has been blocked in Version 2? The block reports I guess. Was there a reason it was changed from underbar to hyphens when switching to Version 2? Thanks Paul On Wed, 5 Oct 2011 20:10:00 +0200, Thomas Eckardt wrote: >>I

[Assp-test] notspam file names

2011-10-05 Thread Paul Farrow
notspam looking for email content without having to escape all the file names. Thanks Paul -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-04 Thread Paul Farrow
I didn't realise that. Learn something everyday. Changed my firewall, clients and config to adhere to to that. Thanks Paul On Tue, 04 Oct 2011 06:51:05 -0400, Charles Marcus wrote: > On 2011-10-03 11:20 PM, Paul Farrow wrote: >> If I telnet'd to port 25 it would immedia

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-04 Thread Paul Farrow
right from the beginning and the ssl timeout problem was really bugging me so will be interested to see how Version 2 works in the coming months. Great job guys. Thank you Paul On Tue, 4 Oct 2011 15:07:37 +1030, Peter W Bowey wrote: > Hi Paul, > > ASSP 2.0.2_3.3.01 > > Not so ha

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
looks like by putting 465 in the listenportssl it has sorted the problem. Any ideas / try to explain to me what I was doing wrong. Thanks again for your help Paul ps: it might also be good if you can explain where or how I can download your dev updates. :) On Mon, 3 Oct 2011 14:42:32 +0200, T

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
the early talker message happens before it does any other logging etc etc. Your help is appreciated. Thanks Paul On Mon, 3 Oct 2011 14:42:32 +0200, Thomas Eckardt wrote: > ASSP acts transparent in the greeting - what you see comes from your > MTA. > > Paul download and tr

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
Ah I think that perhaps that is the trick that its likely my patched QMAIL rather than Thunderbird. I will download the new version tonight as I am currently at work and let you know. Thanks again for quick replies. Paul On Mon, 3 Oct 2011 14:42:32 +0200, Thomas Eckardt wrote: > ASSP a

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
ng of the problem or that it isn't a problem with my setup if no one else is seeing this. I don't want to feel a lemon in the face of the mighty Mozilla !! Thanks again Paul On Mon, 03 Oct 2011 08:14:19 -0400, Charles Marcus wrote: > On 2011-10-03 8:08 AM, Paul Farrow wrote: >&g

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-03 Thread Paul Farrow
I take it other fokes can reproduce this problem I am seeing? If you definately think its a problem with TB will you raise a ticket with Mozilla? As I am kinda stuck with my TB clients using ASSP since I have updated to version 2. Thanks again Paul On Mon, 3 Oct 2011 11:50:03 +0200, Thomas

Re: [Assp-test] Antwort: Re: Thunderbird SSL/TLS with ASSP Version 2

2011-10-02 Thread Paul Farrow
appear to have this problem with ASSP Version 2 which is why I question is it something to do with my setup. Thanks Paul On Sun, 2 Oct 2011 18:51:03 +0200, Thomas Eckardt wrote: >>that ASSP Version 2 has this issue > > This is not an ASSP issue - your client is doing bad SMTP. &

Re: [Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-02 Thread Paul Farrow
Thunderbird clients working again without having to switch off SSL? Thanks for your quick reply and all you do for the ASSP project. Paul On Sun, 2 Oct 2011 11:21:06 +0200, Thomas Eckardt wrote: > Your client '10.1.10.149' is talking before the MTA has sent the '220 > ...' &

[Assp-test] Thunderbird SSL/TLS with ASSP Version 2

2011-10-01 Thread Paul Farrow
d list was 'n/a' - used 1 SocketCalls I have QMail as the MTA behind ASSP if that is a clue and my android phone authenticates over SSL/TLS no problem. It all worked fine over ASSP Version 1 except for the known odd SSL timeout error with attachments.

Re: [Assp-test] This is now becoming a joke....

2011-08-04 Thread Paul Whelan
headers as an ip address? In that case it was "(ecelerity 2.2.3.46 r())" and Thomas suggested: > putting '2.2.3.46' in to 'noDelay' is the better way (not > 'noBlockingIPs' and 'noRBL')! paul -

Re: [Assp-test] public version 2.0.1_1.1.23 and dev version 2.0.2_1.1.23 released

2010-08-06 Thread Paul Schutte
Thanks for the warning. Already been noticed and fixed. On Fri, 2010-08-06 at 16:17 +0200, GrayHat wrote: > > > It look like this introduced a bug. > [...] > > I roled back to 2.0.2_1.1.22 and VRFY is working great again. > > Yup, noticed the same issue; a bit of warning; ensure to > wipe your

Re: [Assp-test] public version 2.0.1_1.1.23 and dev version 2.0.2_1.1.23 released

2010-08-06 Thread Paul Schutte
t;yoda.up.ac.za ... ASSP restarts at 3:00 every day and the VRFY for these domains stopped working at 2010-08-03 03:00 We had AutoUpdateASSP:=2 in the config (changed it to 1 for now) I roled back to 2.0.2_1.1.22 and VRFY is working great again. Regards Paul On Mon, 2010-08-02 at 09:37 +0200,

Re: [Assp-test] A better way to skip delaying...

2010-07-26 Thread Paul Schutte
little, but maybe it does deter some spam. On Mon, 2010-07-26 at 09:37 +0200, GrayHat wrote: > > Is there a way to turn this off ? > > Paul... sounds like you're willing to delay legit MTAs > I wonder why you're willing to do that even knowing > it will NOT give y

Re: [Assp-test] A better way to skip delaying...

2010-07-25 Thread Paul Schutte
Is there a way to turn this off ? On Sun, 2010-07-25 at 09:32 +0200, Thomas Eckardt wrote: > V2 is doing this for SPF - for SenderBase I'll implement this. But > the > complete SPF-Cache is somehow not working as expected - this will be > improved. > > Thomas > > >

Re: [Assp-test] Versions .13 and .15

2010-07-20 Thread Paul Schutte
nd load balance across them with a load balancer (F5 BigIP or even haproxy) ? We can live with the response times as it is, but I am worried that it might get worse as the mail load increase over time. Regards Paul -- Th

Re: [Assp-test] Versions .13 and .15

2010-07-19 Thread Paul Schutte
this (once every minute). The backend servers are fast enough (always 3ms response time ) and the DNS is 0-1 ms response across 4 servers. It is not using a lot of CPU. About 80% of 1 core. There are 8 cores available. Might spike to 200% for very short bursts. Are there any thing in particula

Re: [Assp-test] Strange SMTP synchronization problem

2010-07-04 Thread Paul Schutte
- please upgrade to a > newer version (5.010001 [5.10.1]) if possible! > > Is any newer version (5.12.x) good ? > What version do you use to develop on and what OS/distribution ? > > > Regards > Paul > > > > -

Re: [Assp-test] Strange SMTP synchronization problem

2010-07-04 Thread Paul Schutte
ny newer version (5.12.x) good ? What version do you use to develop on and what OS/distribution ? Regards Paul -- This SF.net email is sponsored by Sprint What will you do first with EVO,

Re: [Assp-test] Strange SMTP synchronization problem

2010-07-04 Thread Paul Schutte
I'll stick with grep. Thank you for taking the time to help and answer my questions. Regards Paul On Sun, 2010-07-04 at 10:58 +0200, Thomas Eckardt wrote: > >Is there a way to log only messages of this nature (warning/errors of > >assp self - not the content it's handeli

Re: [Assp-test] Strange SMTP synchronization problem

2010-07-04 Thread Paul Schutte
x27;s handeling) to a seperate file. Is this where the syslog facility comes in or will the same info as in (logfile) just be repeated there ? Regards Paul On Sun, 2010-07-04 at 09:27 +0200, Thomas Eckardt wrote: > >Can this be a tcp setting ? > > No. The only reason could be, that your M

Re: [Assp-test] Strange SMTP synchronization problem

2010-07-03 Thread Paul Schutte
p.cfg denySMTPstrictEarly:= mail:...local/assp#grep -i talk assp.cfg Regards Paul On Sat, 2010-07-03 at 16:52 +0200, Fritz Borgstedt wrote: > ASSP development mailing list writes: > >Misbehaved SMTP session > > > You should disable this sett

[Assp-test] Strange SMTP synchronization problem

2010-07-03 Thread Paul Schutte
t does not cause any problems, but the behaviour does not seem right. Regards Paul -- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/

Re: [Assp-test] changes in 2.0.2_1.1.14

2010-07-02 Thread Paul Schutte
Thanks Thomas ! It is working great ! Regards Paul On Fri, 2010-07-02 at 12:35 +0200, Thomas Eckardt wrote: > Hi all, > > changed in 2.0.2_1.1.14 > > - if a mail had a Bayes - lowconfidence, it has been passed, even if the > messagescore was above the limit - this is cha

Re: [Assp-test] Feature request

2010-06-30 Thread Paul Schutte
Thanks Thomas ! On Wed, 2010-06-30 at 07:25 +0200, Thomas Eckardt wrote: > Paul, > > for now set 'baysConf' to 0 . > > This is a general logical mistake inside ASSP V2 - if the Bayes check has > switched on the '[lowconfidence]' flag, there is no reason to

Re: [Assp-test] Feature request

2010-06-29 Thread Paul Schutte
would have been able to block 1450 messages for today (until 18:00 South African time) instead of letting them pass as tagged spam. Regards Paul On Tue, 2010-06-29 at 17:07 +0200, Paul Schutte wrote: > Hi. > > I see messages in the maillog.txt that look like this: > 2010-06-29 1

Re: [Assp-test] Feature request

2010-06-29 Thread Paul Schutte
using Western Union] It seems like we could use a switch like: "Block messages with Low confidence but High Score" This is just a wish. It is already doing a great job and thank you very much for that. Regards Paul On Sat, 2010-06-26 at 20:34 +0200, Paul Schutte wrote: > Hello agai

Re: [Assp-test] Feature request

2010-06-26 Thread Paul Schutte
ES (Probably) X-Assp-Block: NO (testmode) X-Assp-Spam-Reason: Bayesian X-Assp-Message-Totalscore: 89 X-Assp-Spam-Prob: 1.0 X-Assp-Spam-Level: * X-Assp-Tag: MessageLimit X-Assp-Envelope-From: n...@ccnet.up.ac.za X-Assp-Spam-Reason: MessageScore 89, limit 80 Regards Paul On Tue, 201

Re: [Assp-test] Subject line missing

2010-06-16 Thread Paul K. Dickson
I've had continual issues with their servers as well. A month or so back I stopped getting mail from -users completely and the mail from -test was sparse. I removed and re-added my self to the lists and I started getting mail as expected. * shrug * > From: "Hill, Brett" > Reply-To: ASSP dev

Re: [Assp-test] Further issues with v2

2010-06-10 Thread Paul K. Dickson
ement ritual is having a lobotomy. > From: Charles Marcus > Reply-To: ASSP development mailing list > Date: Thu, 10 Jun 2010 14:36:54 -0400 > To: ASSP development mailing list > Subject: Re: [Assp-test] Further issues with v2 > > On 2010-06-10 2:25 PM, Paul K. Dicks

Re: [Assp-test] Further issues with v2

2010-06-10 Thread Paul K. Dickson
Sounds like my old boss. Me: "I have the exchange 2003 test server cluster up. I'm trying to test it out. Does anyone want to have their mailbox moved there to help me out? I put mine there a week ago and have not had any problems" My boss: Sure! 1 week later... Boss: "Why isn't webmail wor

Re: [Assp-test] Feature request

2010-06-08 Thread Paul Schutte
switchTestToScoring is off On Tue, 2010-06-08 at 21:12 +0200, Fritz Borgstedt wrote: > ASSP development mailing list > schreibt: > >The easiest to explain this is that had I turned Bayesian off, the > >score > >would have been 110 and the message blocked. > >Now with Bayesian on, the score is 129

Re: [Assp-test] Feature request

2010-06-08 Thread Paul Schutte
I am running ASSP version 2.0.2(1.1.09) On Tue, 2010-06-08 at 21:12 +0200, Fritz Borgstedt wrote: > ASSP development mailing list > schreibt: > >The easiest to explain this is that had I turned Bayesian off, the > >score > >would have been 110 and the message blocked. > >Now with Bayesian on, the

[Assp-test] Feature request

2010-06-08 Thread Paul Schutte
eat software even better. Regards Paul X-Assp-Version: 2.0.2(1.1.09) on spamcontrol.up.ac.za X-Assp-Message/IP-Score: 5 (Suspicious HELO - contains IP: '111-255-183-207.dynamic.hinet.net') X-Assp-Message/IP-Score: 25 (Blocked Country TW (CHTD, Chunghwa Telecom Co., Ltd.)) X-Assp-Me

Re: [Assp-test] ASSP 1.7.5.4, and cPanel/WHM and ASSP DeLuxe issues

2010-06-08 Thread Paul K. Dickson
The way your OS identifies the perl binary process has nothing to do with assp AFAIK. Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701 pdick...@frederickcountymd.gov 301-600-2399/x12399 > From: Hilario Fochi Silve

Re: [Assp-test] Way to ignore spamloverre via another regex?

2010-05-26 Thread Dickson, Paul
No cpu hogging? Weird. Perhaps a v1 vs v2 issue. Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701 pdick...@frederickcountymd.gov 301-600-2399/x12399 > From: Thomas Eckardt > Reply-To: ASSP development mailin

Re: [Assp-test] Way to ignore spamloverre via another regex?

2010-05-26 Thread Paul K. Dickson
I'm still not having any luck with it. It recognizes '' as spamlover and the .*? Hammers the cpu to the point of bringing assp to its knees. Thanks anyway :) Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick,

  1   2   3   4   5   6   7   >