Re: [Assp-user] No body, only headers

2007-08-11 Thread Hill, Brett
Graziano said: > What version are you running ? 1.3.3.2 (what was final) - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration file

[Assp-user] 1.3.3.2(15) pbextreme.txt question

2007-08-11 Thread Dave Emory
I have exportExtremeFileDeny checked, but nothing is getting denied because the exported file has only 1 line in it right now. It should have over 7000 addresses in it. The log has lines like this: Aug-11-07 16:49:36 [PBextreme][monitoring] 66.97.166.187 <[EMAIL PROTECTED]

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Kevin
Doug Lytle wrote: > Micheal Espinola Jr wrote: >> A new set of forums are in the works for just such a separation. >> > Forums or mailing lists? Forums. Mainly to replace the sf.net forums already in use that are seriously lacking in features. There are a good chuck of people who don't like to

Re: [Assp-user] Upgrade from 1.1.3 to 1.3.1?

2007-08-11 Thread Kevin
Bruce wrote: > I am upgrading from 1.1.3 to 1.3.1. > Mac OS X 10.4.10 > PPC > > the install/upgrade instructions are somewhat unclear. > "If you unzip it in the parent folder of ASSP it should automatically > extract to the right folder." > > the parent folder of assp is local > when i try to unz

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Fritz Borgstedt
>> Be careful what you wish, you may get it. >> > >Great :) There is a new mailing list available: https://lists.sourceforge.net/lists/listinfo/assp-test There is also an email-based interface for users you can get info about using it by sending a message with just the word `help' as sub

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Katip
On 11 Aug 2007 at 18:00, Fritz Borgstedt wrote: [snipped] > > May be recently. Not so recently I answered a lot to new users and > others did here too. The current situation is an emergency we did not > have before. Yes, indeed. We're aware of it. Thanks. I doubt that it is very useful to have

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy schreibt: >since recent there is almost nothing for an [Average-Assp-user] and >*definitely* nothing for a [New-Assp-User]. May be recently. Not so recently I answered a lot to new users and others did here too. The current situation

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Doug Lytle
Micheal Espinola Jr wrote: > A new set of forums are in the works for just such a separation. > Forums or mailing lists? Forums require the subscribed user to go to them, mailing lists come to the subscribed user. Doug -- Ben Franklin quote: "Those who would give up Essential Liberty to

Re: [Assp-user] bounced spam postmaster reports...

2007-08-11 Thread Marrco
> we do not scan the header, we scan the data for "forged bounce check". Good to know. Now i'm curious to test if your scan is different from what I'm already checking in data (and headers) to block generic backscatter... -

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Micheal Espinola Jr
Katip wrote: > IMHO rename this group to something like "ASSP-Test-User" whatever. > since recent there is almost nothing for an [Average-Assp-user] and > *definitely* nothing for a [New-Assp-User]. > > it's a good idea to open various mailing lists with different > concerns like Assp-Power, Ass

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Katip
Fritz, all, IMHO rename this group to something like "ASSP-Test-User" whatever. since recent there is almost nothing for an [Average-Assp-user] and *definitely* nothing for a [New-Assp-User]. it's a good idea to open various mailing lists with different concerns like Assp-Power, Assp-Beta, Ass

Re: [Assp-user] bounced spam postmaster reports...

2007-08-11 Thread Fritz Borgstedt
>It's not always easy to use header regex to identify *just* the >connecting >helo. And I could decide to block ie. localhost.domain from >connecting my >MTA, but accept mail that in a previous stage (up in the received >lines) had >a localhost.localdomain we do not scan the header, we scan the

Re: [Assp-user] bounced spam postmaster reports...

2007-08-11 Thread Marrco
> In trying to built a better 1.3.3.2 a feature slipped into it which > was planned for 1.3.4 at a later time. > But so can test it anyway. > > The feature is called "Identify Forged Bounces" and uses your > "MyServerRe" list in section Sender Validation to identify regular / > forged bounces. > Th

[Assp-user] Upgrade from 1.1.3 to 1.3.1?

2007-08-11 Thread Bruce
I am upgrading from 1.1.3 to 1.3.1. Mac OS X 10.4.10 PPC the install/upgrade instructions are somewhat unclear. "If you unzip it in the parent folder of ASSP it should automatically extract to the right folder." the parent folder of assp is local when i try to unzip in there, it says the folder i

Re: [Assp-user] bounced spam postmaster reports...

2007-08-11 Thread Fritz Borgstedt
In trying to built a better 1.3.3.2 a feature slipped into it which was planned for 1.3.4 at a later time. But so can test it anyway. The feature is called "Identify Forged Bounces" and uses your "MyServerRe" list in section Sender Validation to identify regular / forged bounces. There are option

Re: [Assp-user] 1.3.3.2

2007-08-11 Thread Fritz Borgstedt
>Would you also try the last 1.3.3.2 please. I forgot to mention that by mixing my versions to built a better 1.3.3.2 a new feature slipped into 1.3.3.2 which was planned later on for 1.3.4. It is working inside the Analyze Tool and helps to identify the regular expression match in bomb rege

Re: [Assp-user] 1.3.3.2 - 100% CPU

2007-08-11 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy schreibt: >100% CPU Usage is not the problem Be aware that the basic for the assp cpu % number is the the slice of total cpu ASSP got. Means: If ASSP (PID number can be seen on left side of the GUI) uses 30% of total CPU (measured w

Re: [Assp-user] No body, only headers

2007-08-11 Thread Graziano
What version are you running ? > I don't think this is the same thing Graziano. You said that "all the > spam saved on /spam has only the header". I was just comparing the > amounts. For me, about 1/4 of these kinds of emails are without body > and 3/4 contain bodies. I started to get these kin