It would be cool if there was a regex tester in ASSP, where
you can enter a list of regexes and a test string and ASSP
echos back, which regex was positive.
So these kind of errors could be detected very fast...
Matti
--
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
Remove '\d+[_.-]\d+[_.-]|' or put the name in 'don't block these helos' -
but the first is the
better option.
Hmm Intresting. I'm using a reg-ex from an older version.
Mine is ^\d+\.\d+\.\d+\.\d+$|^[^\.]+\.?$ it looks like it was changed
between 1.2.6 (35) and 1.2.6 (46) (I don't have
- Original Message -
From: Micheal Espinola Jr (mobile) [EMAIL PROTECTED]
To: assp-user@lists.sourceforge.net
Sent: Thursday, January 11, 2007 3:06 AM
Subject: Re: [Assp-user] Do you have multiple ASSP installs on same
publicIP?
PS. Someone tried to unlock the asspsmtp.org domain.
2007/1/11, Marrco [EMAIL PROTECTED]:
2) rename stats total to Project Stats
how about Global Stats...
... or yes, Projects Stats is fine also...
4) move Spam Collect Addresses* close to spam trap addresses. They both
feed PB for spamtraps, but you can weight them differently, and i use it
Jan-11-07 11:07:17 PB: xx.xxx.xxx.xx score: 0+40 = 40
reason:xx.xxx.xxx.xx:RBL-Failed:
What do these errors mean (no reason after RBL-Failed ?)
I am getting a lott of them lately!
--
Met vriendelijke groet / Best regards,
Pascal Dreissen
Matti Haack wrote:
It would be cool if there was a regex tester in ASSP, where
you can enter a list of regexes and a test string and ASSP
echos back, which regex was positive.
So these kind of errors could be detected very fast...
Something like this?
http://weitz.de/regex-coach/
kevin
Eric B. wrote:
I don't expect you will find several (if any) installations of ASSP on the
same IP. I would expect any multiple installations all to be running on
separate to be using multi-homed adapters. Would you be retrieving the IP
from the packet upload, or are you expecting to have
Pascal Dreissen wrote:
Jan-11-07 11:07:17 PB: xx.xxx.xxx.xx score: 0+40 = 40
reason:xx.xxx.xxx.xx:RBL-Failed:
What do these errors mean (no reason after RBL-Failed ?)
It means the Penalty Box assigned a score of 40 to that ip because it
failed the RBL test.
If you were to enable RBL
Pascal Dreissen wrote:
Jan-11-07 11:07:17 PB: xx.xxx.xxx.xx score: 0+40 = 40
reason:xx.xxx.xxx.xx:RBL-Failed:
What do these errors mean (no reason after RBL-Failed ?)
It means the Penalty Box assigned a score of 40 to that ip because it
failed the RBL test.
If you were to enable RBL
The ip address is retrieved when the data is uploaded, though not
part
of the data upload itself, but rather retrieved from the connection
using '$ENV{REMOTE_ADDR}' in the script that receives the upload.
I'm asking this question precisely because I am wondering if any
admins
are running
this is a bug, deactivate rbl value for PB
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
What do these errors mean (no reason after RBL-Failed ?)
I am getting a lott of them lately!
It means, that there is a bug slipping in lately.
It is fixed in last built.
Regardless, I really don't see any reason to continue to use Popb4smtp.
If you are using an SMTP server that doesn't support smtp auth, UPGRADE
OR MIGRATE to one that does.
Anything else is simple laziness/complacency (or stupidity, if doing so
is forbidden by some brain dead upper level
3) rename Local Host Names* to HELO BLACKLIST* and move into
validate
sender
Helo Blacklist is already there and is something different.
4) move Spam Collect Addresses* close to spam trap addresses. They
both
feed PB for spamtraps, but you can weight them differently, and i use
it
even if i
I don't want to push my luck, but it seems that instead of a checkbox
(or may in addition to) there should be an E-mail Threshold.
There is a message threshhold.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join
That's so cool. I ask about e-mail scoring, there's a discussion
about
it, and 2 days later Fritz has implemented changes to incorporate it.
Fritz, you rock.
Actually as I mentioned, it was already there. Instead of modus3 for
PB I put now an additionally checkbox in. modus 3 was single
I am not sure i understand this correct. If my server has a local
domain/hostname of etc. domain.com, then helo domain.com would be
forged or what?
on 10-01-2007 22:24 Fritz Borgstedt wrote:
Furthers, what is a forged helo?
An invalid HELO greeting messsage used by SMTP servers.
ASSP has an
From: Fritz Borgstedt [EMAIL PROTECTED]
3) rename Local Host Names* to HELO BLACKLIST* and move into
validate
sender
Helo Blacklist is already there and is something different.
uh ? ok, a 'manual' helo blacklist. I mean a place where i can manually put
bad HELOs (that's what i do, since 2
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
(actual checkbox for 'helo blacklist' , uses a feature automagically
mantained by assp, for them who believe in bayes.. and i suppose that
checkbox should be moved to bayes Options or at
Now mine has evolved in
^\d+\.\d+\.\d+\.\d+$|^[^\.]+\.?$|\d{1,3}(\.|-|x)\d{1,3}(\.|-|x)\d{1,3}|dynamic|ddns|dns\.org$
In the flat file, for easier reading, could this line become:
^\d+\.\d+\.\d+\.\d+$
^[^\.]+\.?$
\d{1,3}(\.|-|x)\d{1,3}(\.|-|x)\d{1,3}
dynamic
ddns
dns\.org$
From: Andreas Krüger [EMAIL PROTECTED]
I am not sure i understand this correct. If my server has a local
domain/hostname of etc. domain.com, then helo domain.com would be
forged or what?
short answer : yes, that's forged.
But if my server hosts several domain names for email accounts, wouldn't
they be local domains?
Etc, kruger.nu is my domain, which i use for my email address, my server
hosts this domain, so aren't this a local domain name?
on 11-01-2007 15:30 Fritz Borgstedt wrote:
[EMAIL PROTECTED] schreibt:
PS. Someone tried to unlock the asspsmtp.org domain. We might be due for
an attack.
Quick. Install Shorewall ;)
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get
But if my server hosts several domain names for email
accounts, wouldn't
they be local domains?
Etc, kruger.nu is my domain, which i use for my email
address, my server
hosts this domain, so aren't this a local domain name?
Yes. And if someone else's server identifies itself as
But if my server hosts several domain names for email accounts, wouldn't
they be local domains?
Etc, kruger.nu is my domain, which i use for my email address, my server
hosts this domain, so aren't this a local domain name?
on 11-01-2007 15:36 Marrco wrote:
From: Andreas Krüger [EMAIL
What, merak provide any help? Surely you jest.. wink
I had to figure it out on my own. It was by accident that I figured out
the byte before the IP is the IP's length.
Glad it helps. Merak is a great mail server but expensive and support
(at least from my experience) asn't been that great.
In case anyone was wondering, I blurted that out to add to the
discussion about the stats - because its the only interactive thing that
any of our ASSP installations does with a central source.
Bob Coffman Jr - Info From Data wrote:
PS. Someone tried to unlock the asspsmtp.org domain. We
all I have to do is find a good, reliable, inexpensive backend to handle
my mail. Luckily, it shouldn't be too complex to switch - am not using
any of their groupware stuff - just basic webmail, Pop, Imap mailing
lists.
Try hMailserver for Windows with the custom SquirrelMail for
i've currently updated my stable 1.2.6 to the dev release 1.2.7.1(15) and a
strange problem occurs when delivering the mails to my mailserver (hmail):
RECEIVED: NOOP
SENT: 250 OK
RECEIVED: HELO static-xxx-xx-xx-x.yy.yy.yy.yy
SENT: 250 Hello.
RECEIVED:
I don't want to push my luck, but it seems that instead of a checkbox
(or may in addition to) there should be an E-mail Threshold.
There is a message threshhold.
OK, I've got 1.2.7.1 (19) and I'm not seeing that anywhere, so I looked
through the code. DoPenaltyMessage compares the total
under Delaying/Greylisting - Don't Delay these IP's*
email through a Griplisting server because
and
available at cvs.puremagic.com/viewcvs/Griplisting/schema/whitelist_ip.txt.
both should be graylisting and not griplisting
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
i've currently updated my stable 1.2.6 to the dev release 1.2.7.1(15)
and a
strange problem occurs when delivering the mails to my mailserver
(hmail):
may be I found something, try the last
OK, I've got 1.2.7.1 (19) and I'm not seeing that anywhere, so I
looked
through the code. DoPenaltyMessage compares the total message score
to
PenaltyLimit, which is the IP threshold. If that threshold is low
enough to reject an individual e-mail, then the IP gets PB, doesn't
it?
I mean, the
From: Fritz Borgstedt [EMAIL PROTECTED]
may be I found something, try the last one.
(22) not starting.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to
Fritz, the latest (22) release won't start as a service in Windows 2000.
Fritz Borgstedt wrote:
The update to 1.2.7 became the biggest since introducing 1.2.0.
So everybody stop talking new features and test this beast.
It should be in the open end of week.
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Fritz, the latest (22) release won't start as a service in Windows
2000.
I know, try again please.
-
Take Surveys. Earn
Thanks a lot! Works again now.
Fritz Borgstedt wrote:
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Fritz, the latest (22) release won't start as a service in Windows
2000.
I know, try again please.
From: Fritz Borgstedt [EMAIL PROTECTED]
may be I found something, try the last one.
(22) not starting.
ok now. Thx
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll
On 9 Jan 2007 at 10:09, Fritz Borgstedt wrote:
I understand what PB is now, but I'd still like to be able weight
test and give each e-mail a final spam score. I envision it working
like PB. The user weights each test. After each test, its score is
added to a total, and if the total
Is this how it works, or am I missing something here?
It works this way.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT
Well I can close out my own mystery on this one. Failed to realize that ASSP
only stores part of the failed message in the spam folder smacks self in
head. So, the offending URL did, indeed, occur in the email message... but
in the part that ASSP had discarded which is why I didn't see it in
Evan wrote:
Well I can close out my own mystery on this one. Failed to realize that ASSP
only stores part of the failed message in the spam folder smacks self in
head. So, the offending URL did, indeed, occur in the email message... but
in the part that ASSP had discarded which is why I
Kevin wrote:
Interesting. I didn't even think of that!
I'll have to add that to the URIBL FAQ as I'm sure someone else will
have this issue in the future.
I think this should go into the generic FAQ. This can be applicable to
most any form of blocking by ASSP where the spam is added to the
OK, I've got 1.2.7.1 (19) and I'm not seeing that anywhere, so I
looked
through the code. DoPenaltyMessage compares the total message score
to
PenaltyLimit, which is the IP threshold. If that threshold is low
enough to reject an individual e-mail, then the IP gets PB, doesn't
it?
I mean, the
I know it was discussed a while back, but I don't recall seeing a
determination regarding the use of Syslog from Windows. I know its
not yet possible, but is there any intention to implement this?
Thanks.
Greg.
-
Take
1.2.7.1(22) still makes a problem when running in testmode for delivering
spam mails to hmailserver:
SENT: 250 Hello
RECEIVED: From: sender not supplied
SENT: 502 Unimplemented command.
RECEIVED: Subject: [SPAM]
SENT: 502 Unimplemented command.
RECEIVED: X-Assp-Spam-Prob: 1.0
SENT: 502
46 matches
Mail list logo
