Re: [Assp-user] Latest Clam for Windows Install Process?

2007-01-29 Thread Fritz Borgstedt
TreeWalk [EMAIL PROTECTED] schreibt: I'm seeing phishing notices and *also* worms notices; as a matter of fact I've set my buffer to 100.000 and now the ClamAV is picking each and every worm; about the clamwin setup; here are my clamd config file (clamd.conf) contents 4 is sufficient.

[Assp-user] Check Prob and Confidence

2007-01-29 Thread Ethan Albone
Hello when assp rejects a message due to spam on log file I read this Jan-26-07 07:57:32 202.72.105.82 [EMAIL PROTECTED] to: [EMAIL PROTECTED] Bayesian Check Prob: 1.0 / Confidence: 0.5 Jan-26-07 07:57:32 202.72.105.82 [EMAIL PROTECTED] to: [EMAIL PROTECTED] Bayesian spam please can you

Re: [Assp-user] Defaultwerte und Webinterface ASSP 2.0

2007-01-29 Thread Dickson, Paul
No idea then. I tried again just now, but the site is down. Fritz must be crashing things again:-P -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Sent: Friday, January 26, 2007 10:07 PM To: Questions and Answers for users of ASSP Anti-Spam SMTP

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Jérôme PHILIPPE
Jan-26-07 11:57:37 Connected: 127.0.0.1:3490 - 127.0.0.1:25 - IMSS:25 Jan-26-07 11:57:38 127.0.0.1 [EMAIL PROTECTED] invalid address rejected: [EMAIL PROTECTED] Jan-26-07 11:57:38 FSabort: data Expected 250, got: 550 5.1.1 User unknown I did not meant, that you send the mail to a machine, which

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Fritz Borgstedt
ASSP_ip:1137 - ASSP_ip:225 - IWSS:25 You have IWSS:25 in your smtp destination field. I bet your delaying/greylisting is not working. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Wim Borghs
In the webinterface in Network Setup SMTP Destination you have set IMSS:25? You should not have a host name there but as the description says: The address:port of your message handling system's smtp server(s). Secondary servers possible, will try the next if the first doesn't respond. If only

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Jérôme PHILIPPE
You have IWSS:25 in your smtp destination field. I bet your delaying/greylisting is not working. helo Fritz, I am confused, I have not IWSS:25 in my smtp destination field but really the ip address 192.168.x.x:25, I modified my log for easy reader, sorry :( Remember : some messages are not

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Jérôme PHILIPPE
Helo Wim, thanks for your reply ! Sorry but i have the ip destination not hostname 192.168.x.x:25 (IMSS) Bye Jérôme - Original Message - From: Wim Borghs To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Sent: Monday, January 29, 2007 8:51 PM Subject: Re:

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Wim Borghs
Jérôme, which version of assp are you running? - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-29 Thread Jérôme PHILIPPE
Jérôme, which version of assp are you running? Now, ASSP version 1.2.7.1(68) - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on

[Assp-user] 3 days to go..

2007-01-29 Thread Fritz Borgstedt
May I ask everybody to run the latest built, it is stable and has some nice additional enhancements: SRS is finally working and URIBLs deobfuscating is catching everything )). ClamAV should have a buffersize of 100k to catch everything of the newest virus. My old advice of 40k is obsolet. A last

Re: [Assp-user] 3 days to go..

2007-01-29 Thread Steve Woods
Are the latest config default posted for this version? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Monday, January 29, 2007 3:50 PM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: [Assp-user] 3 days to

Re: [Assp-user] 3 days to go..

2007-01-29 Thread Nick Kelly
From: Fritz Borgstedt [EMAIL PROTECTED] May I ask everybody to run the latest built, it is stable and has some nice additional enhancements: SRS is finally working and URIBLs deobfuscating is catching everything )). ClamAV should have a buffersize of 100k to catch everything of the newest

Re: [Assp-user] regex to catch ebay phishing

2007-01-29 Thread Wim Borghs
improved version: a\s+href\s*=\s*http://(?![^/]+ebay)[^]+(\s*(?!/a)[^]+){0,5}\s*img\s+[^]*src\s*=\s*?http://pics.ebaystatic.com/ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and

Re: [Assp-user] 3 days to go..

2007-01-29 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy assp-user@lists.sourceforge.net schreibt: It seems that testmode for URIBLs at least is not working. yep, but should work now. - Take Surveys. Earn Cash.

Re: [Assp-user] regex to catch ebay phishing

2007-01-29 Thread Micheal Espinola Jr
Andrew Macpherson wrote: Turn on SPF and set softfail to block -- that cleared ebay and paypal for me Ditto. eBay and PayPal are two of the principal reasons that I added that functionality. Softfail blocking works wonders - and anyone that has improper softfail SPF records can simply

[Assp-user] serious looping problem in assp 1.2.7.x

2007-01-29 Thread Steve Woods
This has been going on for several nights now and is a major problem in assp 1.2.7.x. It has occurred in 1.2.7.1, 1.2.7.6 and 1.2.7.7. Every night, when assp rotates the log file, assp.pl goes into a loop and consumes more than 50% CPU: Tasks: 127 total, 2 running, 123 sleeping, 1

Re: [Assp-user] regex to catch ebay phishing

2007-01-29 Thread Wim Borghs
2007/1/30, Micheal Espinola Jr [EMAIL PROTECTED]: Andrew Macpherson wrote: Turn on SPF and set softfail to block -- that cleared ebay and paypal for me Ditto. eBay and PayPal are two of the principal reasons that I added that functionality. Softfail blocking works wonders - and anyone