Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Jufri
Thanks kevin, micheal,n paul for your best suggest. - Original Message - From: "Micheal Espinola Jr" <[EMAIL PROTECTED]> To: "Questions and Answers for users of ASSP Anti-Spam SMTP Proxy" Sent: Friday, August 03, 2007 12:09 AM Subject: Re: [Assp-user] SPAM with You've received a greet

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Micheal Espinola Jr
Jeroen van Aart wrote: > I suggest that employing a large workforce of human beings, scanning > each email, is the most effective anti spam solution. Maybe this is a > good business set up for a new startup? I have never failed to identify > spam, neither had any false positives. I suggest an a

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Jeroen van Aart
Dickson, Paul wrote: > I tend to think that would be detrimental to the server load, and way > overkill. Not to mention, email is a broad enough target as it is to > classify correctly.. I can't imagine trying to intelligently classify > something with exponentially greater variances. I suggest

[Assp-user] Bug: HELO processing in 1.3.3 and 1.3.4

2007-08-02 Thread Micheal Espinola Jr
There appears to be a condition in which ASSP neglects to process for HELO and attachments. The condition even effects the Analyzer (not performing any HELO checking). Kevin confirmed the condition with example headers I provided him. The problem does not appear to exist in 1.3.1. Fritz: Let m

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Kevin
Fritz Borgstedt wrote: >> How are you doing btw? Still in that sexy gown, or are you back home? > > Thanks for the question. I will leave the hospital tomorrow ( after I > got a serious bloodpressure problem by reading messages from some > people in this list ))). Always the comedian. :) If the

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Micheal Espinola Jr
Kevin wrote: > Add these lines to your BombRE, should take care of them. > > -- > you\'ve.received.a.(postcard|greeting|ecard).from.a.(colleague|your.partner|family.member|neighbor|mate|school-mate|school.friend|worshipper|friend|partner) > (colleague|your.partner|family.member|neighbor|mat

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Micheal Espinola Jr
Fritz Borgstedt wrote: > Thanks for the question. I will leave the hospital tomorrow ( after I > got a serious bloodpressure problem by reading messages from some > people in this list ))). LOL! I figured you had to have been home! Please try to avoid our shenanigans until you are recovered! I

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Kevin
Jufri wrote: > hello all, I need to help > how to setting ASSP to block SPAM with specific subject like "You've > received a greeting card from a Neighbor!' > Add these lines to your BombRE, should take care of them. -- you\'ve.received.a.(postcard|greeting|ecard).from.a.(colleague|your

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Kevin
Dickson, Paul wrote: > Although I should mention that our Bayesian analysis has caught every > one of those after the first couple days... you might want to submit > them a few times over to the spam email interface to speed up the > process. Not everyone can run the Bayesian in non-testmode sadly

Re: [Assp-user] Fritz

2007-08-02 Thread Doug Traylor
Fritz Borgstedt wrote: How are you doing btw? Still in that sexy gown, or are you back home? Thanks for the question. I will leave the hospital tomorrow ( after I got a serious bloodpressure problem by reading messages from some people in this list ))). Bet you will be g

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Charles Marcus
> I thought already and will do as usual the opposite ))). > > even numbers development. > odd numbers stable. I know this is probably an obvious/dumb question, but since ASSP has been on the 1.3.4(x) series for a while, and 1.3.3 was only just now officially released... 1.3.3 does *not* conta

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Fritz Borgstedt
>1.3.3 does *not* contain any of the features/enhancements that have >been >implemented in the 1.3.4(x) series, correct? I kept them both in the same stage for at least 1.3.4 (20) Please look for yourself. Correct. The nest stable release will be 1.3.5. -

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Charles Marcus
Fritz Borgstedt, on 8/2/2007 8:47 AM, said the following: > I thought already and will do as usual the opposite ))). > > even numbers development. > odd numbers stable. > > I will leave the hospital tomorrow ( after I > got a serious bloodpressure problem by reading messages from some > people i

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Fritz Borgstedt
>How are you doing btw? Still in that sexy gown, or are you back home? Thanks for the question. I will leave the hospital tomorrow ( after I got a serious bloodpressure problem by reading messages from some people in this list ))). -

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Fritz Borgstedt
>Since it's a streaming check, I don't think it >would have to read the whole file attachment in order to know it's a >virus, spam or whatever, since it's just looking for known signatures. >Correct me if I'm wrong. ASSP passes AVBYTES to clamd.

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy schreibt: >even numbers = stable version, odd numbers = a development release. > >Something to think about. I thought already and will do as usual the opposite ))). even numbers development. odd numbers stable. --

[Assp-user] Script to extract users and domains from hmailserver

2007-08-02 Thread Matti Haack
Hello, for all of you, who uses Hmailserver: I created a script to export users (including Aliases, Lists, Catchall) & domains (including Aliases) in text files to use with hmailserver. http://www.hmailserver.com/forum/viewtopic.php?t=10064 With best regards Matti Haack - Matti Ha

Re: [Assp-user] [v1.3.4(11)] problem with regex:redin message scoring

2007-08-02 Thread Micheal Espinola Jr
Kevin wrote: > http://www.makelovenotspam.com/ http://www.espinola.net/wiki/Make_love_not_spam - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events a

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Micheal Espinola Jr
Dickson, Paul wrote: > Although I should mention that our Bayesian analysis has caught every > one of those after the first couple days... you might want to submit > them a few times over to the spam email interface to speed up the > process. And don't forget to run rebuildspamdb.pl soon afterward

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Dickson, Paul
Although I should mention that our Bayesian analysis has caught every one of those after the first couple days... you might want to submit them a few times over to the spam email interface to speed up the process. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beha

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Dickson, Paul
Also there is a nice way of thinking in the unix world, that windows apps tend to fail to embrace, which causes these monsterously complex applications that have bugs all over and always lack some particular functionality you want. One tool for one job. Then integrate the tools you want in the wa

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Dickson, Paul
Use a matching regex in your bombre and make sure bombre is not in test mode. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jufri Sent: Thursday, August 02, 2007 8:11 AM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [Assp-

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Dickson, Paul
I tend to think that would be detrimental to the server load, and way overkill. Not to mention, email is a broad enough target as it is to classify correctly.. I can't imagine trying to intelligently classify something with exponentially greater variances. -Original Message- From: [EMAIL

Re: [Assp-user] SPAM with You've received a greeting card subject

2007-08-02 Thread Jufri
hello all, I need to help how to setting ASSP to block SPAM with specific subject like "You've received a greeting card from a Neighbor!' regards - Original Message - From: "Fritz Borgstedt" <[EMAIL PROTECTED]> To: "Questions and Answers for users of ASSP Anti-Spam SMTP Proxy" Sent:

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Dickson, Paul
How are you doing btw? Still in that sexy gown, or are you back home? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Thursday, August 02, 2007 5:58 AM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [As

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Kevin
Hill, Brett wrote: >> But I think the virusscanning just do this: scan the whole message > and them forward it. So why not handle an "Atachment content > scan" like virusscanning? Maybe we can use the same data passed to clamd > and do a content scan. > > Doesn't Virus Scanning only sca

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Hill, Brett
> But I think the virusscanning just do this: scan the whole message and them forward it. So why not handle an "Atachment content scan" like virusscanning? Maybe we can use the same data passed to clamd and do a content scan. Doesn't Virus Scanning only scan the first ?% of a file (not

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Kevin
Ged West wrote: > I apologize to the community for it taking so long to get this > published. I was on vacation in the beautiful -yet remote- (read: > poorly connected) state of Idaho. > Just an FYI the stat.pl file has a known bug. It doesn't display the bad attachment percentage correctly. K

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Kevin
Matti Haack wrote: >> If it had to stop and save each message to disk, extract the pdf, >> analyze it, then deliver it if it passes.it would just be slower >> than a snail stuck in molasses in the arctic, and it would'nt work. > But I think the virusscanning just do this: scan the whole mes

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Kevin
Fritz Borgstedt wrote: > Questions and Answers for users of ASSP Anti-Spam SMTP Proxy > schreibt: >> I hope your vacation was relaxing! But back to painful reality, I see >> there is no official statement in the changelog.txt as to why 1.3.2 >> is a >> skipped version. Is there something I can p

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Matti Haack
I thing it was just an evil version: (whatever I tried I got an evil number...) 1.3.2 -> 1+3+2=6 1*3*2=6 13/2=nearly 6 so it means 1.3.2=666 -> evil Version 1.3.3 -> 7 -> magic anti spam solution Matti > Fritz Borgstedt wrote: >> But I would not explain it. It is as it is. Fritz is the bad gu

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Micheal Espinola Jr
Fritz Borgstedt wrote: > But I would not explain it. It is as it is. Fritz is the bad guy who > decided that. ))) Don't be silly! I was only curious if something needed to be formally noted or explained. - This SF.net email

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Matti Haack
> If it had to stop and save each message to disk, extract the pdf, > analyze it, then deliver it if it passes.it would just be slower > than a snail stuck in molasses in the arctic, and it would'nt work. But I think the virusscanning just do this: scan the whole message and them forward i

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy schreibt: >I hope your vacation was relaxing! But back to painful reality, I see >there is no official statement in the changelog.txt as to why 1.3.2 >is a >skipped version. Is there something I can put in the wiki to answer >any >ques

Re: [Assp-user] Feature-Request: full headers in AV reports

2007-08-02 Thread Kevin
GrayHat wrote: > I don't know how many here use the ASSP > "infected email report" feature, I do (at least > on some servers) now, from time to time it > may be interesting having the full original > email message headers in such reports > this may be useful to find out the "path" of > the message

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Kevin
Micheal Espinola Jr wrote: > Doug Lytle wrote: >> I'm seeing a large number of those PDF spams now coming across zipped. > > There is a new rash of PDF spams going around that are (AFAIK) > incomplete attachments. i.e., they attachment is there, but the > messages are missing the header informati

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Kevin
Matti Haack wrote: > Would it be possible to use File::Extract::PDF to analyze pdf > attachments with the basian and bombre filters? > > Additionatly there are more File::Extract filters which could be > usefull: > http://cpan.uwinnipeg.ca/htdocs/File-Extract/ ASSP doesn't deal wit

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Kevin
Micheal Espinola Jr wrote: > Ged West wrote: >> I apologize to the community for it taking so long to get this >> published. I was on vacation in the beautiful -yet remote- (read: >> poorly connected) state of Idaho. > > I hope your vacation was relaxing! But back to painful reality, I see > the

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Matti Haack
Would it be possible to use File::Extract::PDF to analyze pdf attachments with the basian and bombre filters? Additionatly there are more File::Extract filters which could be usefull: http://cpan.uwinnipeg.ca/htdocs/File-Extract/ Matti > Doug Lytle wrote: >> I'm seeing a large num

Re: [Assp-user] ASSP 1.3.3 is ready for download from Sourceforge

2007-08-02 Thread Micheal Espinola Jr
Ged West wrote: > I apologize to the community for it taking so long to get this > published. I was on vacation in the beautiful -yet remote- (read: > poorly connected) state of Idaho. I hope your vacation was relaxing! But back to painful reality, I see there is no official statement in the cha

Re: [Assp-user] Sys::Syslog will never work on Windows

2007-08-02 Thread Micheal Espinola Jr
Matti Haack wrote: > FB> Net::Syslog is already built in ASSP. > And syslog with assp and windows runs fine for some month... Craziness. I'm gonna guess it was during my recent downtime some months back. I only came across the reference when searching with Google for ASSP problems in various alt

Re: [Assp-user] PDF SPAM

2007-08-02 Thread Micheal Espinola Jr
Doug Lytle wrote: > I'm seeing a large number of those PDF spams now coming across zipped. There is a new rash of PDF spams going around that are (AFAIK) incomplete attachments. i.e., they attachment is there, but the messages are missing the header information pointing to the attachment. And as