I just switched to ver 2 of ASSP...feeling a bit bleeding edge. I'm running
ASSP 2.0.1(2.0.19) on ActivePerl (win x64).
Although my system's DNS entries are right, the assp log fills with these
errors. Any idea how to fix?
Apr-15-11 16:42:17 [Worker_1] Warning: Name Server p�: does
found
The ASSP ERROR: no answering DNS-SERVER found is what I see when
there is no access to external DNS (root-servers).
Peter
Peter Bowey Computer Solutions
- Original Message -
From: Michelle Dupuis mdup...@ocg.ca
To: assp-test@lists.sourceforge.net
Sent: Saturday, April 16
on Linux. I too run an MTA (Postfix) as a 'front end' -before- ASSP.
I have everything from the 'outside' sent through a gateway / forewall.
I run my own DNS Server, as I suspect you do..
Pete
Peter Bowey Computer Solutions
- Original Message -
From: Michelle Dupuis mdup...@ocg.ca
To: ASSP
Message
-
From: Michelle Dupuis
To: ASSP development mailing list
Sent: Saturday, April 16, 2011 9:42 AM
Subject: Re: [Assp-test] FW:
Name server errors - bug?
Yes I run my own DNS servers too. I left
something in the DNSServers field so I will erase those. Although I'm
not a perl programmer
by the other arguments to new().- Original Message -
From: Michelle Dupuis mdup...@ocg.ca
To: ASSP development mailing list assp-test@lists.sourceforge.net
Sent: Saturday, April 16, 2011 9:42 AM
Subject: Re: [Assp-test] FW: Name server errors - bug?
Yes I run my own DNS servers too. I left
Nope...IPv4. (IPv6 not even installed)..
From: Grayhat [gray...@gmx.net]
Sent: Saturday, April 16, 2011 1:06 PM
To: ASSP development mailing list
Subject: Re: [Assp-test] FW: Name server errors - bug?
That is a strange DNS = Name Server p�
It should
DNS is running fine and host is setup fine. So I hard coded the IP's into ASSP
and now it seems happy.
This is 64 bit activeperl. Many of the packages I needed were available
through PPM so I grabbed source from CPAN and compile them in. Not a perl
expert, so maybe that's an issue...
I get a lot of spam which I'm trying to identify by a regex to match the URL in
the body. I have the regex below entered into my bombre file, and the sample
message below is NOT being caught by ASSP 2.0
Any idea why? The regex tester online suggest this should match...but assp
isn't matching
)\/? - or
http\:\/\/[A-Za-z\.\/]+?\.(?:ru|ly|nl)(?:\s|\/|\n|\r) - are better
read: http://perldoc.perl.org/perlretut.html
Thomas
Von:Michelle Dupuis mdup...@ocg.ca
An: assp-test@lists.sourceforge.net
assp-test@lists.sourceforge.net
Datum: 19.04.2011 04:11
Betreff:[Assp-test] Bombre
I had a discussion going yesterday about the right regex to catch a certain
URL. Here's the expression
http\:\/\/[A-Za-z\.\/]+?\.(?:ru|ly|nl|ec|cc)(?:\s|\/|\n|\r)
This works fine. Now I wanted to change the expression to catch a slash (/) as
well as a backslash, so I changed the expression
We have an MTA on the edge through which all mail flows (and ASSP is behind it).
Is there a way for Assp to strip off the last MTA IP/Hostname for bad host
checks, etc?
(I posted this a month ago to the -test list but got no response...sorry to
bump)
(* apologizes - I sent same message to assp user list, but I'm using v2 so
should have been sent here *)
I'm setting up ASSP in an environment with an SMTP gateway at the network edge.
So, all mail must flow through that SMTP gateway (relay) before hitting ASSP.
This messes up a lot of ASSP
My users are getting flooded with fake linkedin messages. I ran the message
and header through the analyzer and got the info below. Can someone advise on
what I need to adjust to trap these?
Some notes, netdorm.com is a mail host I use to buffer incoming mail (so I
trust it) - but there is
The scam of the day seems to be fake billing notices from USPS. I have
usps.com added to the strict SPF list. Still they are getting through. I'm
slowly getting ASSP setup right, but I'm still missing something.
I ran the header through the ASSP analyzer, and it didn't find a reason to
I'm still trying to get settings right (and I think I'm close), but ASSP is
failing to catch really obviously faked domains!
I put the header below, and you can see that 168-226-66-116.speedy.com.ar is
pretending to be usps.com. I run my mail through netdorm (and have setup
netdorm correctly
you a
clue as to why it is accepting it?
On Fri, 30 Mar 2012 09:30:53 -0400, Michelle Dupuis wrote:
I'm still trying to get settings right (and I think I'm close), but
ASSP is failing to catch really obviously faked domains!
I put the header below, and you can see that
168-226-66-116
I already had spfsoftfail set to on, but have added the domain to
blockstricgSPFRE now.
I think my confusion is - shouldn't ASSP be catching the obviously forged
source domain not matching usps.com ?
And since I already had spfsoftfail on, shouldn't assp have prepended the fail
warning to
domain
Why is ASSP not throwing out this message based on the obviously faked
sender domain/ip
possibly because you use an outdated version ? I think there was fix for
this in the last months.
Thomas
Von:Michelle Dupuis mdup...@ocg.ca
An: assp-test@lists.sourceforge.net
assp-test
I see this message during rebuild:
Aug-14-12 06:11:33 warning: 'useDB4Rebuild' is set to on, but 'BerkeleyDB' nor
'DB_File' are available - the rebuild spamdb process uses the internal
'orderedtie' and will possibly require more time and a large amount of memory -
check
it.
Thomas
Von:Michelle Dupuis mdup...@ocg.ca
An: assp-test@lists.sourceforge.net
assp-test@lists.sourceforge.net,
Datum: 14.08.2012 15:32
Betreff:[Assp-test] Missing DB_File wrong
I see this message during rebuild:
Aug-14-12 06:11:33 warning: 'useDB4Rebuild' is set
A month ago I upgraded ASSP 2.2.1(12137) (and also moved to a new partition).
Since then, my volume of spam getting through ASSP has increased considerably.
Attached below is an example - clearly forged sender. Why isn't ASSP trapping
this?
I attached the analysis of the header below.
I'm installing ASSP 2 on a fresh new Centos 6 x64 system and am getting pretty
far along. However, there are 4 errors (in the moduleLoadErrors.txt file) I
can resolve - see below. Here's what i've done:
1. I install perl-Net-SNMP using yum, so why is error #1 there?
2. This module is not
Based on my own experience and that of others (looking at the postings
including the current MSGID discussion), I can help but wonder if ASSP
configuration has gotten too complex.
I'm not suggesting we drop features, but maybe the who way it is configured
needs to be rethought!? Instead of
My ASSP uses test mode. causing the subject to be prefixed with [SPAM] which I
catch downstream. (in case that matters). The problem I'm having is that mail
with a faked from address (different from MAIL FROM) is getting through
unmarked.
Below is an analysis of such a message. As you can
I'm running ASSP version 2.2.1(13020) and when my mail server (box behind assp)
is rebooting, ASSP is supposedly responding with a 5.1.1. user unknown
(according to the MTA upstream).
I checked the assp maillog for the time in question and I see this line:
May-21-13 20:20:53 m1-82053-139071
Does ASSP ever generate 550 responses to foreign mail systems sending in mail?
Or only the mail host behind ASSP? (I have exchange 2007 sitting behind ASSP
in case it matters)
The reason I'm asking is that I see the occasional 550's in my ASSP log as
shown below. I've disguised the domain
My paste chopped off a few chars, the error in the log is mailbox is
unavailable. (in case that helps)
From: Michelle Dupuis
Sent: Monday, December 23, 2013 5:05 PM
To: assp-test@lists.sourceforge.net
Subject: Does ASSP generate a 550 response?
Does ASSP ever
I recently upgraded to the latest version of assp, and upgraded my perl as well
(due to assp shutting down at night). Now I seem to get a more sever crash -
coinciding with running the rebuildspamdb.
Can someone help with how to fix? I downloaded only the latest assp.pl (do I
need to
I saw yesterday that someone else had the same problem. I managed to capture a
traceback (below) - hopefully that helps diagnose the problems.
# *** stack smashing detected ***: /usr/bin/perl /usr/local/assp/assp.pl
MainLoop - next: Tue Jan 21 18:23:15 2014 terminated
=== Backtrace:
Where can we download the new version? The latest version on the website is:
ASSP_2.3.3_13335_install.zip
(Which is crashing multiple times per day and driving me crazy)
From: Thomas Eckardt [thomas.ecka...@thockar.com]
Sent: Saturday, January 25,
About a month ago I moved to the latest ASSP 2 code, and also switched to MySQL
databases for all records. About a week ago ASSP started crashing once a day,
now it's a few times a day.
I've included the perl dump below in case that helps...but can someone help me
resolve this? I have no
I'm running ASSP 2.4.1 (14097), and once a week I find my assp crashed due to
too many files open. I have the system limit set to 30 files. At the tail
of the assp log I see the following errors:
rker_2] Error: Worker_2 accept to client failed
IO::Socket::INET=GLOB(0x7f762ec3d060)
I'm running ASSP version 2.4.1(14097)? and have DB: set for all files/caches.
I see the assp database is created, as well as other tables.
However, while ASSP is running I still see new message files being created in
the spam folder. Why? ASSP has been restarted many times and I startup I
33 matches
Mail list logo
