Fritz Borgstedt wrote:
> There is nothing wrong in the example, it shows the result of the new
> additional "scoring regex" for suspicious words.
thx, must have missed this option :shame:
since i use 'Use BombRaw and BombData Regular Expression' in scoring mode it
doesn't matter anyway.
--
View
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
schreibt:
>spamfoder => Internal Name: spamlog, i.e. where all spam
>is copied (that's defined in sendAllSpam).
Just to make clear that we both discuss the same:
sendAllSpam defines the email-address where to send the copied spam.
Thes
If it works so, "Restricts Copy Spam to MaxBytes" is a
misleading description. Because it's not checked but
spam is truncated anyway.
Why I would like it to work as described is that I had
to go into spamfolder and look for an email which I have
deleted by mistake from my local spamfolder. Ye
Daniel L. Miller wrote:
> What does it take to kill this [EMAIL PROTECTED] thing?!?! I have
> "64.118.89."
> contained in my denysmtp.txt file, referenced by
> denySMTPConnectionsFrom. I'm not using the "Always" field, on the
> off-off chance I need to whitelist somebody on a blacklisted serv
What does it take to kill this [EMAIL PROTECTED] thing?!?! I have "64.118.89."
contained in my denysmtp.txt file, referenced by
denySMTPConnectionsFrom. I'm not using the "Always" field, on the
off-off chance I need to whitelist somebody on a blacklisted server. I
don't see how this is getti
BlackHelo scoring tags on a message from this forum:
Jul-24-07 15:30:19 66.35.250.225 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED]
recipient accepted: [EMAIL PROTECTED]
Jul-24-07 15:30:20 66.35.250.225 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED]
Regex:Redlist '[E
Paul wrote:
>
> On 24 Jul 2007 at 16:27, Michael Parker wrote:
>
>> Well, thanks for the help on this, I got clam running no bother! (Just a
>> bit of googling and thinking needed!!)
>>
>> Quick question - moving on a bit - re sanesecurity...
>>
>> 1. where do you put the sigs on a debian system?
Graziano wrote:
> Hello
>
> I have some doubt to setup some PB setting at the best.
> How do you have set these PB values on your assp please and why ?
>
> Use IP Netblocks in Deny Connections (I have unchecked it)
> Append Exported Extreme File (I have unchecked it)
> Append Exported Extreme F
Travis Forghani wrote:
> There is a folder /etc/clamav. clamav.conf is not on my system. It has
> not been created. Since it doesn't exist, Perl can't parse it.
>
Change the socket in ASSP to "/var/run/clamav/clamd.ctl" then it should
work.
I forgot that part when i posted the install comma
MaxBytes:
How many bytes of the message will ASSP look at? Mails stored in the collecting
folders will be truncated to this size. For example: 4000
Internal Name: MaxBytes (Controls the size of email stored in the
"spamfolder", etc..)
ccMaxBytes
CCMail will cut off Spam mails, thereby reducing
There is a folder /etc/clamav. clamav.conf is not on my system. It has
not been created. Since it doesn't exist, Perl can't parse it.
sincerely,
Travis Forghani
IT Administrator
Bowman Enterprises, Inc.
Cell: 919-795-9298
Office: 919-894-3662, Ext. 34
[EMAIL PROTECTED]
This message is inte
There isn't a clamav folder under /etc?? if not
Type 'sudo apt-get remove clamav'
'sudo apt-get update'
sudo apt-get install clamav
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Travis
Forghani
Sent: Tuesday, July 24, 2007 2:55 PM
To: Questions an
On 24 Jul 2007 at 19:59, Fritz Borgstedt wrote:
>
> >does ccMaxBytes work? here no. checked or unchecked all
> >spam arrives in spamfolder truncated to maxBytes.
>
> what do you mean with "spamfolder" ?
spamfoder => Internal Name: spamlog, i.e. where all spam
is copied (that's defined in se
Hello,
I've tried installing clamav over and over again via Synaptic and it
just doesn't seem to be installing correctly. The reason I can't
install File::Scan::ClamAV is because clamav.conf does not exist on my
system. I've use find and locate and it isn't anywhere. I figured
installing cl
>does ccMaxBytes work? here no. checked or unchecked all
>spam arrives in spamfolder truncated to maxBytes.
what do you mean with "spamfolder" ?
ccMaxBytes does not influence the size of the mails in spam/nospam
folder.
The log entries show [SPF][scoring] for lines that have nothing to do with
SPF:
Jul-24-07 10:11:51 [SPF][scoring] 91.96.82.84 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED]
Received-SPF: error (mail.chewtoy.com: local policy)
client-ip=91.96.82.84;
[EMAIL PROTEC
v. 1.3.3.
does ccMaxBytes work? here no. checked or unchecked all
spam arrives in spamfolder truncated to maxBytes.
TIA.
Katip
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find prob
> It looks kind of interesting. It seems like it's a sort of
"aggregator"
> for rbl/uribl/spf information, to remove the guesswork of picking and
> choosing which ones are reliable and trustworthy.
Yes, at a bare minimum, using the DNS interface you'll be able to
perform standard RBL queries, the
> while I used
> the ASSP built-in DNSBL/DNSWL features to
> test KarmaSphere,
> Exactly how can you test it , what does you enter on
> DNSBL and URIBL to use karmasphere ?
Well I only used (and I'm still using/testing) the DNSBL
to use it you'll need to add
karmasphere.email-sender.dnsbl.karma
Nope:(
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fritz
Borgstedt
Sent: Tuesday, July 24, 2007 9:48 AM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] new log feature request?
Questions and Answers for users
On 24 Jul 2007 at 16:27, Michael Parker wrote:
>
> Well, thanks for the help on this, I got clam running no bother! (Just a
> bit of googling and thinking needed!!)
>
> Quick question - moving on a bit - re sanesecurity...
>
> 1. where do you put the sigs on a debian system?
Same as the othe
Well, thanks for the help on this, I got clam running no bother! (Just a
bit of googling and thinking needed!!)
Quick question - moving on a bit - re sanesecurity...
1. where do you put the sigs on a debian system?
2. are they reliable?
3. is it generally considered a good idea to use them?
Tha
Fritz Borgstedt wrote:
> You commented on an example of an other user, which was not a bug. You
> think, that is helpful?
> What built are you running?
It sounded similar, and I was hoping to corroborate an issue.
This has been happening with ASSP v1.3.2(33-45), and ASSP v1.3.3().
--
Just one detail in ccallspam header :
with msTestMode unchecked : ok
X-Assp-Version: 1.3.3()
X-Assp-Spam: YES
X-Assp-ID: id-9337c11983
X-Assp-Spam-Reason: PB:Message Limit: 55 >= 50
X-Assp-Totalscore: 55
with msTestMode checked : nok
X-Assp-Version: 1.3.3()
X-Assp-Spam: YES
X-Assp-Block: NO (l
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
schreibt:
>Please look at my example below. There is absolutely *nothing* in my
>scriptRe that would match what is show in the logs. It is only a
>*redRe* match.
You commented on an example of an other user, which was not a bug. You
Fritz Borgstedt wrote:
> There is nothing wrong in the example, it shows the result of the new
> additional "scoring regex" for suspicious words. The default of that
> is "unsubscribe". "unsubscribe" is also in default redre. It is
> described as an addition in the changelog: "-suspicios bomb regu
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
schreibt:
>As well as scriptre. I've been saying this for a couple of weeks now.
There is nothing wrong in the example, it shows the result of the new
additional "scoring regex" for suspicious words. The default of that
is "unsubscr
while I used
the ASSP built-in DNSBL/DNSWL features to
test KarmaSphere,
>
Exactly how can you test it , what does you enter on
DNSBL and URIBL to use karmasphere ?
Thank you
Graziano
-
This SF.net email is sponsored by:
Hello
I have some doubt to setup some PB setting at the best.
How do you have set these PB values on your assp please and why ?
Use IP Netblocks in Deny Connections (I have unchecked it)
Append Exported Extreme File (I have unchecked it)
Append Exported Extreme File (no overwrite). (I have un
As well as scriptre. I've been saying this for a couple of weeks now.
--
ME2 (mobile)
-Original Message-
From: larsneo <[EMAIL PROTECTED]>
Date: Tuesday, Jul 24, 2007 5:29 am
Subject: [Assp-user] [v1.3.4(11)] problem with regex:red in message scoring
To: [EMAIL PROTECTED]: Questions and
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
schreibt:
> Unwhitelisting in the email interface and delay is disabled. Is
>there any other way it could be happening?
are you doing the combined report with adding/deleting whitelist
entries?
--
And if you were actually successful in installing, link the clamav.conf
into /etc
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Travis
Forghani
Sent: Tuesday, July 24, 2007 9:16 AM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subjec
Have you tried installing clam from the apt repository?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Travis
Forghani
Sent: Tuesday, July 24, 2007 9:16 AM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: [Assp-user] This is what
Hello,
I have not installed the ClamAV package from the Ubuntu repository as it
is old. I've tried installing ClamAV from source; I keep on getting
make errors. I've installed the buildessentials script/package to
install libs needed for installing from source and all the libs that
ClamAV ne
For instance I have an address that has continually been removed from
the whitelist about every 30 days.. very odd. Unwhitelisting in the
email interface and delay is disabled. Is there any other way it could
be happening?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dickso
Is it possible that logging could be done to show when someone has been
removed from a whitelist? I continue to get occasional reports of
previously whitelisted addresses getting tagged as spam, and have
confirmed the whitelisting, then further tagging a couple months later.
My whitelist exp is se
it seems to me that there is a problem with regex:red recognized as bombre in
message scoring - can someone confirm this?
Jul-24-07 11:12:58 id-8376c5878 205.183.255.164
<[EMAIL PROTECTED]> to: someone [AT]
mydomain Regex:Red 'unsubscribe'
> Jul-24-07 11:12:58 id-8376c5878 205.183.255.164
> <[E
Replace the erroneous line 865 in sub loadConfig
$this->{myheader}.="X-Assp-Re-$regextype: $subre\r\n" if $AddRegexHeader;
with
[AddRegexHeader,'Add Black/White RegEx
Header',0,checkbox,0,'([01]?)',undef,'
Notes On Bayesian'],
and it will start again.
Thilo
-Ursprüngliche Nachricht---
Fritz Borgstedt wrote:
> Hmmm, the possibility to catch pdf-spams and similar type of spam is
> multiplied by this approach. But ok, everybody as he wants.
don't get me wrong - as already mentioned this is only due to the fact that
*we* receive lots of ham-pdf (and the stock-spam is filtered ou
Hello
the file in the subject (latest 1.3.3 09:57) does not start on my linux
server (probably it was uploaded binary ?)
Thank you
Graziano
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files
>(i don't think pdf is suspicous anyway)...
Hmmm, the possibility to catch pdf-spams and similar type of spam is
multiplied by this approach. But ok, everybody as he wants.
-
This SF.net email is sponsored by: Splunk Inc.
41 matches
Mail list logo
