I'm trying to configure a remote iDRAC to be able to send me error messages in
case of a failure. So I entered the IP address of my ASSP installation as an
SMTP server for iDRAC. But testing fails...
I added the public IP address to my whiteListedIPs but it's still getting
rejected like this:
J
gt;as it added "[MessageLimit]" to the subject
>
> The message reason was 'MessageScore passed low limit' - which is not spam
> - custome header was not added - it was egular delivered.
>
> Thomas.
>
>
>
>
>
> Von:"
s not added, it was not detected as SPAM and regular
> delivered.
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 12.05.2017 17:53
> Betreff:Re: [Assp-user] Spam_messages_to_spam_folder_
there been any
changes that could fix this issue?
Thanks
- Original Message -
From: Andy Knuts [mailto:a...@knuts.be]
To:
For Users of ASSP [mailto:assp-user@lists.sourceforge.net]
Sent: Thu, 11 May
2017 00:42:16 +0100
Subject: Re:
[Assp-user] Spam_messages_to_spam_folder_instead_o f_re
report at the end of
the day?
Thanks
- Original Message -
From: Andy Knuts [mailto:a...@knuts.be]
To:
For Users of ASSP [mailto:assp-user@lists.sourceforge.net]
Sent: Thu, 11 May
2017 00:25:22 +0100
Subject: Re:
[Assp-user] Spam_messages_to_spam_folder_instead_o f_reports?
>
ome domains?
>
> The 'spamlover' in the GUI section may help. Spamlovers will get all mails
> - tagged.
>
> Thomas
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 10.05.2017 12:41
> Betreff:Re: [Assp-user]
tives, but not allow ALL spam to get to
> the users mailbox would be to increase the "High MessageLimit
> (PenaltyMessageLimit)" so that really spammy messages are blocked, but
> others are flagged and allowed through for the user to decide.
>
> There may be others on the list that ha
Right now ASSP rejects most of our spam messages, but sometimes there's a false
positive.
I only know about those a day later when I check the assp spam reports (which
get automatically generated at the end of the day).
Now I want to stop using those reports and get these spam messages delivered
You can switch back to desktop version by visiting the '/?mobile=0' url.
Kind regards,
Andy
- Original Message -
From: James Moe
[mailto:ji...@sohnen-moe.com]
To: For Users of ASSP
[mailto:assp-user@lists.sourceforge.net]
Sent: Sun, 08 Jan 2017 20:26:45
+0100
Subject: [Assp-user] How to g
any DB directly
> pkey: '176.62.160.58 gmail.com'
> pvalue: '89 pass mailing.plopsafun.be'
>
> both without the quotes
>
> 89 is the 2255-03-14,16:59:59
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: "For
Look at the message below:
Aug-24-16 12:15:32 m1-33732-13084 [Worker_3] 176.62.160.58
info: found message size announcement: 19.47
kByte
Aug-24-16 12:15:33 m1-33732-13084 [Worker_3] 176.62.160.58
to: s...@snip.be Whitelisted sender Domain:
bounce.plopsa.email...@gmail.com
Aug-24-16 12:15:33
'errors/spam' are synced every 5 minutes the same one way.
>
> Thomas
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 18.08.2016 22:31
> Betreff:Re: [Assp-user] spamdb & multi server
>
>
>
&
ht gestattet. This e-mail may contain
> confidential and/or privileged information.If you are not the intended
> recipient (or have received this e-mail in error) please notify the sender
> immediately and destroy this e-mail. Any unauthorised copying, disclosure or
> distribution of the
e all sent from random *@ups.com addresses using a lot of
> different IP's.
>
> SPF will catch it.
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 18.08.2016 16:42
> Betreff:
ps.com
> leads me to believe that you do.
>
> On Thu, Aug 18, 2016 at 7:44 AM, Andy Knuts wrote:
>
> > I do have "DoOrgWhiting" set to "Score" instead of "Whiting".
> > Shouldn't it just decrease the score because
I do have "DoOrgWhiting" set to "Score" instead of "Whiting".
Shouldn't it just decrease the score because ups.com is whitelisted and still
continue with other other checks (hmm/bayes) as normal?
- Original Message -
From: Andy Knuts [
Today we have a lot of spam getting through. They are all sent from random
*@ups.com addresses using a lot of different IP's. Here's an example:
Aug-18-16 12:46:15 [Worker_3] Connected: session:7EFE8B4366C0
83.110.218.163:56196 > :25 > 127.0.0.1:125
Aug-18-16 12:46:17 m1-17176-01346 [Worker_3]
I need to add gmail to blockstrictSPFRe, isn't it?
- Original Message -
From: Andy Knuts [mailto:a...@knuts.be]
To:
For Users of ASSP [mailto:assp-user@lists.sourceforge.net]
Sent: Wed, 03 Aug
2016 09:28:44 +0100
Subject: Re: [Assp-user]Whitelistdb + Spam from gmail
addr
5.78
to: my.n...@mydomain.com message ok - (whitelistdb) - [RE
Still chained to your day job] ->
/var/db/assp/notspam/RE_Still_chained_to_your_day_job--21377.eml
- Original Message -
From: Andy Knuts [mailto:a...@knuts.be]
To:
assp-user@lists.sourceforge.net
Sent: Wed, 27 Jul 2
d no database maintenance will be done by this one!
> Maintenance should only be done by the first assp - the master!
> Maintenance for file based caches and lists will always be done!
>
> Thomas
>
>
>
>
> Von:"Andy Knuts"
> An: assp-user@list
I need to setup ASSP on multiple servers. Is there a way to sync. the spamdb on
all servers?
I can use MySQL for the spamdb database and maybe use mysql replication
(master-master).
But I'm not sure ASSP supports such a setup at all?
If it doesn't support such a setup it means every ASSP instal
imtz
> +Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913"
>
> protection.outlook.com nameserver = ns2-gtm.glbdns.o365filtering.com
> protection.outlook.com nameserver = ns1-gtm.glbdns.o365filtering.com
>
>
> Currentyl I don't know if this is a mistake made by as
I have a gmail account myu...@gmail.com and my email address protected by ASSP
is myuser@mydomain. I have sent emails from myuser@mydomain to myu...@gmail.com
so it got whitelisted by ASSP. Now, there are spammers sending spam faking it
to come from myu...@gmail.com to myuser@mydomain. It's clea
How do you guys manage the spam / notspam folders?
Do you do this manually by inspecting the folders from a command line and move
the items from spam->notspam and visa versa?
Or is there an easy way to do this?
the spam/notspam folders are growing rapidly so I will need to write a script
to wip
e.com=>127.0.4.4=>xxx
> score.senderscore.com=>127.0.4.5=>xxx
> score.senderscore.com=>127.0.4.6=>xxx
> score.senderscore.com=>127.0.4.7=>xxx
> score.senderscore.com=>127.0.4.8=>xxx
> score.senderscore.com=>127.0.4.9=>xxx
> score.senderscore.com=&
2627113,1468351913"
>
>
> For what ever reason, Mail::DKIM is unable to fetch() the public key.
> There is nothing you can do.
>
> Thomas
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 20.07.2016 00:35
> B
at ever reason, Mail::DKIM is unable to fetch() the public key.
> There is nothing you can do.
>
> Thomas
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 20.07.2016 00:35
> Betreff:Re: [Assp-user] SPF_temperror,_why?
&
nvalid) - public key: not available
The DNS servers also seem to work fine for every other services but as you can
see, sometimes ASSP is unable to find the public key for hotmail.com ?
I'm using Net::DNS 1.06. This version is okay, right?
Regards
- Original Message -
From: Andy Kn
Re: [Assp-user] SPF_temperror,_why?
> http://cpansearch.perl.org/src/JMEHNLE/Mail-SPF-v2.9.0/CHANGES
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 18.07.2016 19:56
> Betreff:Re: [Ass
GES
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: "For Users of ASSP"
> Datum: 18.07.2016 19:56
> Betreff:Re: [Assp-user] SPF_temperror,_why?
>
>
>
> I'm using 2.008 while ASSP says "2.007" is r
e RRs. This may be overridden by setting the
> B
> option.
>
> See RFC 4408, 3.1.1, for a discussion of the topic, as well as the
> description
> of the L method.
> --
>
> Seems your Mail::SPF module i
Thomas Eckardt
[mailto:thomas.ecka...@thockar.com]
To: For Users of ASSP
[mailto:assp-user@lists.sourceforge.net]
Sent: Mon, 18 Jul 2016 12:52:29
+0100
Subject: Re: [Assp-user] SPF_temperror,_why?
> >But why is this a temperror?
>
> assp was unable to get a qualified result for the query u
roblem
>
> Thomas
>
>
>
>
>
> Von:"Andy Knuts"
> An: assp-user@lists.sourceforge.net
> Datum: 18.07.2016 13:53
> Betreff:[Assp-user] (no subject)
>
>
>
> The following spam mail passed ASSP:
>
>
> Jul-18-16 1
;xxx
> score.senderscore.com=>127.0.4.6=>xxx
> score.senderscore.com=>127.0.4.7=>xxx
> score.senderscore.com=>127.0.4.8=>xxx
> score.senderscore.com=>127.0.4.9=>xxx
> score.senderscore.com=>127.0.4.1?=>xxx
> score.senderscore.com=>127.0.4.2?=>
unction against the domain holder - or let the domain put
>
> down.
> There is nothing more easy than this - DKIM is made to support this. If a
> spammer is so stupid to sign his mails with DKIM/DomainKey or SMIME, he is
>
> on very thin ice!
>
> Thomas
>
>
>
>
The following spam mail passed ASSP:
Jul-18-16 13:30:01 m1-41401-04606 [Worker_4] [TLS-in] 65.54.61.91
info: found message size announcement: 13.15 kByte
Jul-18-16 13:30:01 m1-41401-04606 [Worker_4] [TLS-in] 65.54.61.91
Message-Score: added -10 (tlsValencePB) for
SSL-TLS-connection-OK, total
The RBL score.senderscore.com returns 127.0.4.X where X is a score from 0 to
100.
I want to block scores 0->30.
So 127.0.4.0 -> 127.0.4.30.
Does ASSP support some regexp or something to match for these return values? Or
how am I supposed to configure this correctly.
+0100
Subject: Re: [Assp-user] SPF_temperror,_why?
> >But why is this a temperror?
>
> assp was unable to get a qualified result for the query using Mail::SPF -
> that's all
> most times this is caused by a DNS timeout
>
> Thomas
>
>
> Von:"Andy K
Many of the emails that passed ASSP have headers like this:
X-Assp-Received-SPF: temperror ip=217.148.21.174
mailfrom=rkvc...@stratics.addemar.com helo=vmta12.addemar.com
But why is this a temperror?
If I use 'spfquery' command line I get:
# spfquery --mail-from rkvc...@stratics.addemar.com -
s.
- Original Message -
From: Grayhat [mailto:gray...@gmx.net]
To:
assp-user@lists.sourceforge.net
Sent: Mon, 18 Jul 2016 11:30:36
+0100
Subject: Re: [Assp-user] RBL_not_checked_for_some_ema ils?
> :: On Mon, 18 Jul 2016 11:20:51 +0200
> :: <20160718092051.830ff...@mx02.sygmanet.be
+0100
Subject: Re: [Assp-user] RBL_not_checked_for_some_ema ils?
> It makes no sense to block a mail by RBL (IP) if it passed the DKIM check.
> Other domains may use the same sending IP. In this case it is better to
> block the domain.
>
> Thomas
>
>
>
>
>
I noticed ASSP blocks emails from microsoft because of the default bombRe
filter.
It was a password reset email from microsoft:
Jul-17-16 17:26:50 m1-69207-08649 [Worker_3] [TLS-in] [bombRe] 65.54.190.96
to: [spam found]
(Regex: bombRe 'PB 20: for dRUg$' bombRe: 'dRUg$') [Microsoft account
gt; - noRBL
> - outgoing or local mail
> - contentonly
>
>
> Thomas
>
>
>
>
>
>
> Von:"Andy Knuts"
> An: assp-user@lists.sourceforge.net
> Datum: 14.07.2016 11:45
> Betreff:[Assp-user] RBL_not_checked_for_some_emails
I noticed something strange with ASSP. I have configured it to forward messages
to localhost:125. On port 125 there's a postfix installation without any
filtering. It's just used for routing messages to the right server.
So ASSP is forwarding every non-spam message to postfix and it's working as
My ASSP is filtering a lot of spam, so far so good.
But most of the spam that still gets in my mailbox is sent from IP's listed on
b.barracudacentral.org.
For some reason ASSP is not checking the RBL lists for those emails while it
does check RBL's for many other mails.
I enabled verbose logging
45 matches
Mail list logo
