Re: [Assp-user] Odd behavior since upgrading to 1.2.7.7(x)

2007-01-31 Thread Wim Borghs
What is the name of the queue they are stuck in? What is the state of that queue? Do you have SessionLog enabled in ASSP? In your ASSP log do you see connections coming in from your Exchange server and how do they end? -

Re: [Assp-user] Invalid Sender Spam-Lover spamlover not working on 1.2.6 to 1.

2007-01-31 Thread Ethan Albone
I tested 1.2.7.8 (0) Thank you ! ; good idea to separate them (ptr and mx/a spamlovers) ! Unluckly the 2 new spamlovers still does not work . PTR is still blocking domain names (i.e. @domain.com.br) also if on ptr and mx/a spamlovers . Same happening for MX/A Thank you On 1/30/07, Fritz

Re: [Assp-user] Questions regarding code-quality and (in)securityof ASSP...

2007-01-31 Thread billc
At 9:48 AM +1000 1/28/07, Joseph Armstrong wrote: - Original Message - From: Charles Marcus [EMAIL PROTECTED] To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy assp-user@lists.sourceforge.net Sent: Sunday, January 28, 2007 8:41 AM Subject: Re: [Assp-user] Questions regarding

[Assp-user] ASSP crashing on UNIX servers

2007-01-31 Thread M. Waseem Sindhu
Hello, We're using ASSP (1.2.6) on our Windows hosting servers without any issues. We tried it on UNIX servers and noted that it crashes once or twice in 24 hours, without logging any reason. Our UNIX administrator also tried creating a cron job to restart ASSP service, but it did not work. Are

Re: [Assp-user] Invalid Sender Spam-Lover spamlover not working on 1.2.6 to 1.2.7.7

2007-01-31 Thread Wim Borghs
2007/1/30, Ethan Albone [EMAIL PROTECTED]: and on plug/ptr I have @domain1.com @domain2.com Well , I continue to receive PTR missing for domain1.com and domain2.com which should be on spamlover. just making sure... those domains are your local domains? the domains receiving the mails, not

Re: [Assp-user] relay errors for Mac users

2007-01-31 Thread Charles Marcus
Steve Woods wrote: So, I take it that these Mac users are not authenticating and should be. I'll check with them tomorrow. Wow... I would never allow unauthenticated access to my smtp server, even from inside the network - and never allow unencrypted connections from outside the network.

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-31 Thread Jérôme PHILIPPE
Hi After many tests, it's not an IMSS problem. I tried with IIS SMTP and Hmailserver and I have the same things (SMTP on assp server or a remote server) Logs from HmailServer : Good CCallspam : TCPIP 524 2007-01-31 10:30:46.968 Created accept socket 1236 on listening socket 1192 SMTPD 524 19

Re: [Assp-user] Questions regarding code-quality and (in)securityof ASSP...

2007-01-31 Thread Charles Marcus
Ok, I was done with this thread, but want to make this clear, since I started it... And unless there's a specific reason not to provide a failover mechanism, if I were the programmer I'd probably say thanks for pointing that out. Yep - but his point wasn't just that these 2 or 3

Re: [Assp-user] Invalid Sender Spam-Lover spamlover not working on 1.2.6 to 1.2.7.7

2007-01-31 Thread Ethan Albone
local domains . On 1/31/07, Wim Borghs [EMAIL PROTECTED] wrote: 2007/1/30, Ethan Albone [EMAIL PROTECTED]: and on plug/ptr I have @domain1.com @domain2.com Well , I continue to receive PTR missing for domain1.com and domain2.com which should be on spamlover. just making sure...

Re: [Assp-user] Invalid Sender Spam-Lover spamlover not working on 1.2.6 to 1.

2007-01-31 Thread Ethan Albone
Thank you , some hour ago I tested it and it didn't work . I will do other tests right now. On 1/31/07, Fritz Borgstedt [EMAIL PROTECTED] wrote: Unluckly the 2 new spamlovers still does not work . They work: Jan-31-07 08:42:06 151.47.123.128 [EMAIL PROTECTED] to: [EMAIL PROTECTED] passing

Re: [Assp-user] Questions regarding code-quality and (in)securityof ASSP...

2007-01-31 Thread Matti Haack
I think, we should audit ASSP for security gaps. Iwill examine the code closer in the next days - but on the first glance, I could only find this read commands, which are not evaluated - and which would not lead to any security breach, if the open fails... But I will have a

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-31 Thread Jérôme PHILIPPE
It's set 4000, if I put 10, What happens when you put it to 1. thanks for your reply Fritz, I test it with 1 and I have mail errors, if I look at my spam folders, I find these spams and theirs size is10ko So if the spam's size is bigger than this value CCallspam doesn't works,

Re: [Assp-user] URIBL failed mails

2007-01-31 Thread Jérôme PHILIPPE
What is your setting for Collecting/File Paths Max Bytes ? Hi, I only have problems with URIBL failed mails. Bayesian works fine. Nicole - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's

Re: [Assp-user] Invalid Sender Spam-Lover spamlover not working on 1.2.6 to 1.

2007-01-31 Thread Ethan Albone
it's working now , SORRY. I don't know why when I tested it some hours ago it didn't work. Probably I forgotten to stop and restart assp after the upgrade . I think you should now only remove Invalid Sender Spam-Lover* This includes missing/invalid PTR, missing MX/A. since you have added these

Re: [Assp-user] ASSP crashing on UNIX servers

2007-01-31 Thread Rance Hall
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 M. Waseem Sindhu wrote: Hello, We're using ASSP (1.2.6) on our Windows hosting servers without any issues. We tried it on UNIX servers and noted that it crashes once or twice in 24 hours, without logging any reason. Our UNIX administrator

[Assp-user] 2 cosmetic Problems, 1 question/problem (?)

2007-01-31 Thread Rainer Traut
Hi, using ASSP v1.2.7.8(0): 1) Relay Port example states in webinterface 127.0.0.2. This is not possible, you need to add a port to the ip address like 127.0.0.2:25: Jan-31-07 14:01:01 Couldn't create server socket on port '127.0.0.2' -- maybe another service is running or I'm not root

Re: [Assp-user] 2 cosmetic Problems, 1 question/problem (?)

2007-01-31 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy assp-user@lists.sourceforge.net schreibt: 1) Relay Port example states in webinterface 127.0.0.2. This is not possible, you need to add a port to the ip address like 127.0.0.2:25: Jan-31-07 14:01:01 Couldn't create server socket on port

Re: [Assp-user] 2 cosmetic Problems, 1 question/problem (?)

2007-01-31 Thread Fritz Borgstedt
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy assp-user@lists.sourceforge.net schreibt: 2) Changing Listen Port gives wrong log output. It states two times the old value: Request to listen on new mail port xxx:25,127.0.0.1:25 (changed from xxx:25,127.0.0.1:25) -- restart required;

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-31 Thread Fritz Borgstedt
thanks for your reply Fritz, try the newest built please. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics

[Assp-user] Killer message?

2007-01-31 Thread Evan
This morning my ASSP service is terminating every time AOL tries to send (and resend, etc.) a certain spam message. This occurred with both 1.2.7.7 and 1.2.7.8 and I've never seen the behavior before. (Also interestingly, the Windows service manager doesn't restart ASSP upon failure... even

Re: [Assp-user] ASSP crashing on UNIX servers

2007-01-31 Thread Wim Borghs
2007/1/31, M. Waseem Sindhu [EMAIL PROTECTED]: We're using ASSP (1.2.6) on our Windows hosting servers without any issues. We tried it on UNIX servers and noted that it crashes once or twice in 24 hours, without logging any reason. possibly not related with unix but just a coincidence...

Re: [Assp-user] Killer message?

2007-01-31 Thread Wim Borghs
Actually it's the dns-module that crashes and takes down assp with it... - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT

Re: [Assp-user] Killer message?

2007-01-31 Thread Evan
Wim Borghs said: I 'll send something I hope fixes this to Fritz... Thanks very much! Evan - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your

Re: [Assp-user] relay errors for Mac users

2007-01-31 Thread Doug Traylor
in testmode, is ASSP still preventing spam from coming through? Where has all my email gone? 1st - tests in testmode do not reject the spam. 2nd - there are lots of tests, are you sure you are in testmode? 3rd - check your logs. If the ASSP log shows an email coming in to that user and

Re: [Assp-user] relay errors for Mac users

2007-01-31 Thread Steve Woods
Thanks for the tips. I'll try 3 and research 4. Steve in testmode, is ASSP still preventing spam from coming through? Where has all my email gone? 1st - tests in testmode do not reject the spam. 2nd - there are lots of tests, are you sure you are in testmode? 3rd - check your logs. If

Re: [Assp-user] Killer message?

2007-01-31 Thread Fritz Borgstedt
There is a new built which catches the killer. ))) - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through

Re: [Assp-user] Killer message?

2007-01-31 Thread Evan
Wim Borghs said: could switch off uribl check until fix is in place... Wim, you're right. After I turned off URIBL checks, my killer message no longer crashed ASSP. If you or Fritz could drop a note to me, or on list, when you think the problem is fixed in a new build, that would be terrific.

Re: [Assp-user] Killer message?

2007-01-31 Thread Evan
Fritz Borgstedt said: There is a new built which catches the killer. ))) Thanks for the speedy fix. Vielen Dank. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the

Re: [Assp-user] 3 days to go..

2007-01-31 Thread Marrco
or, you you feel the urge to release it soon, call it 1.99 so it's clear to everybody that's just a temporary 'technological preview' version and you're going to realease a major new 2.0 in a month or so... I will release it as a production version to Ged, a I always did. He can name it as he

[Assp-user] BombHeaderRe question

2007-01-31 Thread Ethan Albone
Hello On Expression to Identify Spam in Header (logged as BombHeaderRe) I have the default suggested from assp web interface. \d+\s+(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s+\d\d\d\d\s+\d\d:\d\d(:\d\d)?\s+[+\-]\d\d(?!00|30|45)\d\d Exactly what does do this regex ? And may I lose

[Assp-user] Strange ASSP crash

2007-01-31 Thread Geoff Varney
Hello, I have experienced 3 spontaneous crashes of ASSP in about 17 hours. Windows Event Log shows nothing but the service just stops. Here is the interesting part; the last entry in the ASSP maillog is in each case almost identical as follows: Jan-30-07 16:35:41 72.35.72.2 [EMAIL

Re: [Assp-user] Killer message?

2007-01-31 Thread Matti Haack
Hello, with 1.2.7.8(2) (and before) I have the problem that assp stalls completely. I got a lot of error messages in my relay server: Jan 31 18:11:56 mx2 postfix/qmgr[14228]: 4153E113C39D: to=[EMAIL PROTECTED], relay=none, delay=0.07, delays=0.05/0.02/0/0, dsn=4.4.2, status=deferred (delivery

Re: [Assp-user] CCallspam and TrendMirco IMSS

2007-01-31 Thread Fritz Borgstedt
we made a new try. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash

Re: [Assp-user] Strange ASSP crash

2007-01-31 Thread Geoff Varney
OK, so it's not just the one sender, it has happened again, this time: Jan-31-07 09:54:03 63.251.135.74 [EMAIL PROTECTED] to: email user ClamAV: scanning 37303 bytes done OK Jan-31-07 09:54:03 63.251.135.74 [EMAIL PROTECTED] to: email user Bomb:logging: BombRegEx: 'much lower' I'm going

Re: [Assp-user] Questions regarding code-quality and (in)securityof ASSP...

2007-01-31 Thread Ged West
In my opinion, all his comments show is his arrogance. This argument again comes down to programming style. Look if he is really anal and feels the need to define error/fail states for every system call, even ones that call defined functions, stated variables, or static files, then he can go

Re: [Assp-user] relay errors for Mac users

2007-01-31 Thread James Brown
On 01/02/2007, at 3:25 AM, Steve Woods wrote: Thanks for the tips. I'll try 3 and research 4. Steve in testmode, is ASSP still preventing spam from coming through? Where has all my email gone? For newsletters, get them to add the sending address to the whitelist using the email

Re: [Assp-user] Questions regarding code-quality and (in)security of ASSP...

2007-01-31 Thread Micheal Espinola Jr
Charles Marcus wrote: So, Fritz, Michael, anyone else who knows Perl and is familiar with the code - how would you respond to this comment and these concerns? Since I am not a programmer, I am not qualified to respond to these concerns, but I'd love to pass on some quotes from one or more

[Assp-user] Invalid HELO format: info.4d.com

2007-01-31 Thread James Brown
Just had an email from the database makers 4D that got blocked: Validate Sender: Invalid HELO Format 'info.4d.com I'm just using the default regex: ^\d+\.\d+\.\d+\.\d+$|^[^\.]+\.?$ I can't read regex, but does this mean that it needs to be altered? I presume that there is nothing wrong with

Re: [Assp-user] Invalid HELO format: info.4d.com

2007-01-31 Thread Kevin
James Brown wrote: Just had an email from the database makers 4D that got blocked: Validate Sender: Invalid HELO Format 'info.4d.com I'm just using the default regex: ^\d+\.\d+\.\d+\.\d+$|^[^\.]+\.?$ I can't read regex, but does this mean that it needs to be altered? I presume that

Re: [Assp-user] Invalid HELO format: info.4d.com

2007-01-31 Thread James Brown
On 01/02/2007, at 1:48 PM, Kevin wrote: James Brown wrote: Just had an email from the database makers 4D that got blocked: Validate Sender: Invalid HELO Format 'info.4d.com I'm just using the default regex: ^\d+\.\d+\.\d+\.\d+$|^[^\.]+\.?$ I can't read regex, but does this mean that it

Re: [Assp-user] Invalid HELO format: info.4d.com

2007-01-31 Thread Kevin
James Brown wrote: What is in your 'validFormatHeloRe' field? ^[a-z]([a-z\d\-]*[a-z\d])?(\.[a-z]([a-z\d\-]*[a-z\d])?)+\.?$|^\[[12]? \d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\]$ This is different to the default. Must have been posted by someone to this list. Thats the problem.

Re: [Assp-user] Invalid HELO format: info.4d.com

2007-01-31 Thread James Brown
OK. Will do. Thanks. James. On 01/02/2007, at 2:07 PM, Kevin wrote: James Brown wrote: What is in your 'validFormatHeloRe' field? ^[a-z]([a-z\d\-]*[a-z\d])?(\.[a-z]([a-z\d\-]*[a-z\d])?)+\.?$|^\[[12]? \d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\]$ This is different to the default.

[Assp-user] Logfile rotation definitely has a bug...

2007-01-31 Thread Steve Woods
Well, there still seems to be a serious problem with the logfile rotation. I have it setup to rotate every 7 days, and tonight when it rotated, my cpu went to 45% and the logfile got overwritten. (read: All logfile data was lost!) Notice the size of my logfiles. The maillog.txt file was several

Re: [Assp-user] Logfile rotation definitely has a bug...

2007-01-31 Thread Steve Woods
Note: My logfile is in $base/logs/maillog.txt. I am running assp 1.2.7.8, perl 5.8.8 on RH Fedora C5. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Woods Sent: Thursday, February 01, 2007 12:14 AM To: 'Questions and Answers for users of ASSP Anti-Spam SMTP

Re: [Assp-user] [v1.2.7.1(final)] prob with Threshold for Combined Scores per Me

2007-01-31 Thread larsneo
as a follow-up in [v1.2.7.8(2)]: as long as no bayesian spam is detected the penalty box works as expected and blocks if score 50 Feb-1-07 08:19:08 .y.xxx.yyy [EMAIL PROTECTED] to: [EMAIL PROTECTED] PB:LV1 blocked - score:Single Message Mode: 85 50 Subject_of_Mail if bayesian spam is