Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Fritz Borgstedt
An example on *nix would be the /etc/passwd file. http://127.0.0.1:5/get?file=/etc/passwd; Please test version 1.2.5 - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly

[Assp-user] Installing ASSP on new system - perl modules

2006-08-17 Thread James Brown
I'm about to install ASSP on a new server. (Mac OS X 10.4.7). I recently upgraded Perl on my current server, and spent ages downloading and installing all the required modules. Of course, lots of those required other modules to be downloaded and installed first. And so on. Took a whole day,

Re: [Assp-user] Installing ASSP on new system - perl modules

2006-08-17 Thread Fritz Borgstedt
Like Fink or DarwinPorts, but for Perl modules? I installed my modules in less than an hour using the standard procedure for mac osx: sudo perl -MCPAN -e shell install Net::LDAP install ... - Using Tomcat but need to do

[Assp-user] Sounds good

2006-08-17 Thread Travis Forghani
Micheal, Sounds good about the wiki. Did you ever get a chance to think about what I said in my previous email? I have pasted the content of the email I am referring to below: Also, I am starting to think that how ASSP handles incoming mail needs to be changed. At the moment, ASSP saves

Re: [Assp-user] Installing ASSP on new system - perl modules

2006-08-17 Thread James Brown
That is just what I wanted! Thanks Fritz. James. On 17/08/2006, at 10:28 PM, Fritz Borgstedt wrote: Like Fink or DarwinPorts, but for Perl modules? I installed my modules in less than an hour using the standard procedure for mac osx: sudo perl -MCPAN -e shell install Net::LDAP install

Re: [Assp-user] Installing ASSP on new system - perl modules

2006-08-17 Thread Roger Stevenson
http://www.rcbowen.com/imho/perl/modules.html#Installing_Perl_Modules is where I learned. Roger -Original Message- From: James Brown [mailto:[EMAIL PROTECTED] Sent: Thursday, August 17, 2006 6:09 AM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: [Assp-user]

Re: [Assp-user] ASSP Header

2006-08-17 Thread Micheal Espinola Jr
Aaron Allen wrote: Is there a way to have ASSP rewrite the header for the mail server it is proxying for? IE: My server cacweb is running ASSP and forwards the mail on to cacexch. But when someone connects to ASSP at cacweb, it answers as cacexch, even though the server really

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Javier Albinarrate
Hi there, Not only assp.pl but the database files, an the configuration lists, etc I think that it should be locked at the images folder without any RE for extensions and so on. So you know that anything in images can be downloaded. In the future if more folders are needed they

Re: [Assp-user] ASSP Header

2006-08-17 Thread Micheal Espinola Jr
Micheal Espinola Jr wrote: They parent "hitting" cacweb. cacweb (running ASSP) is acting as a transparent proxy. They are indeed "hitting" cacexch. ASSP, acting as a proxy, is listening to the traffic. They aren't "hitting" cacweb. cacweb (running ASSP) is acting as a transparent proxy...

Re: [Assp-user] Return Receipts

2006-08-17 Thread Roger Stevenson
Yeah, my Hotmail account doesn't have that feature. My Exchange server is supposed to suppress automatic responses to the internet but my Outlook has the response settings greyed out. I'll have to get outside help I suppose Roger -Original Message- From: Fritz Borgstedt

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Micheal Espinola Jr
Javier Albinarrate wrote: Not only assp.pl but the database files, an the configuration lists, etc I think that it should be locked at the images folder without any RE for extensions and so on. So you know that anything in images can be downloaded. I like your way of thinking,

Re: [Assp-user] Return Receipts

2006-08-17 Thread Micheal Espinola Jr
Roger Stevenson wrote: Yeah, my Hotmail account doesn't have that feature. My Exchange server is supposed to suppress automatic responses to the internet but my Outlook has the response settings greyed out. I'll have to get outside help I suppose In MS products, a grayed-out feature

Re: [Assp-user] Return Receipts

2006-08-17 Thread Roger Stevenson
It's configured on the Exchange 5.5 box under the Internet Mail Service Connection. I just tested it and neither the original email or the copy sent the requested read receipt. Roger -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 17, 2006

Re: [Assp-user] Return Receipts

2006-08-17 Thread Micheal Espinola Jr
Roger Stevenson wrote: It's configured on the Exchange 5.5 box under the Internet Mail Service Connection. I just tested it and neither the original email or the copy sent the requested read receipt. That setting only means that Exchange will let the automated response go through. Its still

Re: [Assp-user] ASSP Header

2006-08-17 Thread Aaron Allen
The problem is that someone sending mail to our organization looks at the MX record and sees cacweb, so they initiate a connection to cacweb. But instead of cacweb answering (since it is acting as a transparent proxy), the server cacexch answers and identifies itself as cacexch. Perhaps

Re: [Assp-user] ASSP Header

2006-08-17 Thread Micheal Espinola Jr
Aaron Allen wrote: The problem is that someone sending mail to our organization looks at the MX record and sees cacweb, so they initiate a connection to cacweb. But instead of cacweb answering (since it is acting as a transparent proxy), the server cacexch answers and

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Javier Albinarrate
Hi Michael, I see, I didn't think about that. So I downloaded the latest 1.2.5(5) and gave a look. I saw that GetFile (/get?) is NOT used for editing lists, res files etc. Instead, ConfigEdit (/edit?) is used, which of course has the same problem. So, IMHO, GetFile should be

Re: [Assp-user] ASSP Header

2006-08-17 Thread Fritz Borgstedt
The problem is that someone sending mail to our organization looks at the MX record and sees cacweb The mx record should not point to the proxy, but to the mailserver. - Using Tomcat but need to do more? Need to support

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Micheal Espinola Jr
Javier Albinarrate wrote: That would make it really secure and it would only mean 3 changes, in 3 very clear places. But of course, it is just an opinion :) If you like the idea, I can make the changes on 1.2.5(5) and pass it to you so you give a look at it. Regards!

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Fritz Borgstedt
But of course, it is just an opinion :) If you like the idea, I can make the changes on 1.2.5(5) and pass it to you so you give a look at it. Regards! Javier Albinarrate Would it be to much to ask you to pass the changes to me?

Re: [Assp-user] ASSP Header

2006-08-17 Thread Aaron Allen
Then how does the mail get to the proxy? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Borgstedt Sent: Thursday, August 17, 2006 12:40 PM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [Assp-user] ASSP Header The

Re: [Assp-user] ASSP Header

2006-08-17 Thread Micheal Espinola Jr
Aaron Allen wrote: Then how does the mail get to the proxy? IP routing. Manipulate the A record in DNS or redirect at your firewall. - Using Tomcat but need to do more? Need to support web services, security? Get stuff

Re: [Assp-user] Its official - we are on Secunia...

2006-08-17 Thread Javier Albinarrate
Hi Fritz Certainly no problem! I am at work now, but later today I will email you the changes! It's a pleasure to contribute Regards! Javier Albinarrate - Original Message - From: Fritz Borgstedt [EMAIL PROTECTED] To: Questions and Answers for users of ASSP Anti-Spam

[Assp-user] [SPAM] Re: [SPAM] Re: Its official - we are on Secunia...

2006-08-17 Thread Matti Haack
You can mitigate/fix the Problem if you run ASSP in a proper security context. If you run it in Windows, create an speacial User which could only access the ASSP directories. Start the service under the context of this special user and everything is fine. I validated it with NT Filemon and it

Re: [Assp-user] something really odd

2006-08-17 Thread Micheal Espinola Jr
[EMAIL PROTECTED] wrote: On 16 Aug 2006 at 21:35, Evans Martin wrote: Anyone know what this means? Not really Aug-16-06 21:34:46 Something really odd is going on with this incomming connection at 0.0.0.0:25 If what ASSP believes is your local IP

Re: [Assp-user] 1.2.5(4) Interface Bug?

2006-08-17 Thread Micheal Espinola Jr
[EMAIL PROTECTED] wrote: Can't duplicate that here. 1.2.4(4) using FF latest. Me neither on FF or IE, with (2) or (4). - Using Tomcat but need to do more? Need to support web services, security? Get stuff done

Re: [Assp-user] Segmentation fault - bombRe (confirmed)

2006-08-17 Thread James Brown
Thanks Fritz. Good to know that it is not just me! I'll also go back to using Apple's install of Perl (5.8.6) rather than the 5.8.8 that I installed, as it would not let me install Net::CIDR::Lite, which is needed for Email::SPF::Query.OK. I'll uncomment the bombRe statements and see what

Re: [Assp-user] Virus Scanning not working

2006-08-17 Thread paul+as
On 16 Aug 2006 at 21:31, Lars Troen wrote: Late on this thread, but I support what Fritz has done to remove the a/v from the gui. Wasnt John Hanna going to look into this db file format issue? It's been mentioned before, but the .db format is now only one of several sig formats that Clamav

[Assp-user] TLS/SSL with ASSP

2006-08-17 Thread James L. Brown
I have just set up a new mail server, using Postfix. I configured it to use SSL for POP/IMAP and SMTP. Everything works fine. Users can send and receive mail securely. I then installed ASSP on it (actually just copied my ASSP folder from our current mail server). Once I did this, I could