[Assp-user] whitelisting common domains sub domains

2013-09-05 Thread PlusPlus Internet Solutions LLC
Hi there, Wondering which one is the best way to whitelist common domains like twitter or linkedin...latelly they are falling into spam, cause most emails from there are coming from things like spring-chicken-bd.twitter.com or things like that...from subdomains...is a good idea to add to

Re: [Assp-user] help with smtp attack

2013-09-05 Thread Ethical Host - John MacKenzie
James Thanks for the tip, well I had turned it off because too many real messages were getting hung up by the greylisting and this was frustrating my customers. I wll see about doing it again Thanks John -Original Message- From: James Moe [mailto:ji...@sohnen-moe.com] Sent:

[Assp-user] 100% CPU usage after Update to 1.9.9(13245)

2013-09-05 Thread wwl
Hello, i have update today to the version 1.9.9(13245) and have trouble. 15 minutes after start, assp suddenly used 100% of the CPU and then freezes. No Web interface work, no Email is processed. Also the logfile freezes. No new entry's are written. The Server is ok, Postfix and Dovecot worked

Re: [Assp-user] help with smtp attack

2013-09-05 Thread Doug Lytle
Sep-04-13 20:29:12 82.152.113.229 got 'non printable hex data' from the I'd use Fail2Ban on the ASSP server. Doug -- Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more! Discover the easy way to

Re: [Assp-user] help with smtp attack

2013-09-05 Thread Ethical Host - John MacKenzie
Hi Doug Thanks so much for your reply! I've installed it and configured it according to this http://www.fail2ban.org/wiki/index.php/ASSP but I added in the regex failregex = .*? \d{5}-\d{5} HOST .*? got \'non printable hex data\' from the client before the (.*) nothing gets logged so far.

Re: [Assp-user] help with smtp attack

2013-09-05 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/05/2013 06:47 AM, Ethical Host - John MacKenzie wrote: Just a quick question as my SMTP is getting hit with tons of bogus requests (1 or 2 per second) Do you have greylisting enabled? Turning this on reduced the number of bogus messages by

[Assp-user] help with smtp attack

2013-09-05 Thread Ethical Host - John MacKenzie
Just a quick question as my SMTP is getting hit with tons of bogus requests (1 or 2 per second) Basically I need to know how to adapt this script to work with asps logs? http://forums.cpanel.net/f185/sustained-exim-attack-syntax-errors-mitigation -measures-338792.html#post1456572 in

Re: [Assp-user] help with smtp attack

2013-09-05 Thread Ethical Host - John MacKenzie
Doug Thanks for that help. Ok I updated the date format then added in this in the assp.conf file: failregex = HOST \[EarlyTalker\] got \'non printable hex data\' and that seems to work when I run the test Thanks a lot! So these entries just get added to the iptables firewall, but would they