???
ASSP is a proxy for SMTP.
It knows nothing about POP and why should it?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT
Got it working sooner than I expected.
http://www.asspsmtp.org/scripts/stats/
It is now at the bottom of the webadmin besides docs.
I worked on the ClamAV scanner with a different approach.
I concentrated on the phishing virii and got quite nice results.
I thinks ASSP is catching now 100% of
Perhaps that date should be updated to today? Thanks Fritz for your
hard work getting the script working again.
No, that Kudo goes to Kevin.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's
I have not found
good documentation on the two entries.
I really hate this remarks meanwhile. Always blame it on someone else.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel
I understand what PB is now, but I'd still like to be able weight
test and give each e-mail a final spam score. I envision it working
like PB. The user weights each test. After each test, its score is
added to a total, and if the total ever surpasses a user-defined
limit, testing stops and
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
I want to know that (1) what is the rule of marking domains/hosts as
Forged
HELO
a local domain is usually a forged helo
and (2) how can I fix it?
there is an exclusion list in section Sender
Actually, I sorta figured out the score only after I built the
spamdb
earlier this evening and finally got spam-prob to show something other
than 0, .5, and 1. However, I still don't see any way to specify
weight
or adjust the 0.6 limit. And I'd really like to see more tests with
scoring,
(8) seems fine
Please look for ClamAV performance, I am actually quite proud, that
the rework of the ClamAV integration works so nicely. It is fast and
it is catching 100%.
-
Take Surveys. Earn Cash. Influence the Future
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
For example, user sets a limit of 100, and weights HELO at 90 and
spam bomb at 15. If a server fails HELO, the e-mail isn't rejected,
but if it also fails spam bomb (90+15100), then it's spam.
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Is saw also that the stream setting was lost from the gui, do we only
need to set the AV Bytes now ?
Yes, and I made a new default: 100k
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
I think that the difference (from my understanding at least) that
Bennett is
asking for is a weighting for individual tests for individual emails.
Yes, I understand and that can be
So then the lack of understanding is with what POP before SMTP is,
and/or how it works. I don't know what you mean by fileformats
here.
Sometimes.. No, ASSP does not use a different approach to
POPb4SMTP and it states clearly, that it will use the file the
mailserver maintains. Somebody
Is there (or could there) be a way to enable ClamAV for whitelisted
users?
It is coming, also for Nonprocessing.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get
I thought--a score that applies to the server.
I'm still interested in the individual e-mail score--it just makes
sense
to me.
Would you believe me, that you are wrong. I described the possibility
of using scoring to combine tests very early. There is a reason, that
I put in the *score only*
Agreed, however, like I said, that kind of kills the concept of using
the
PenaltyBox in that case for the actual purpose for which it was
intended.
How can you say that? My purpose was absolutely to have both functions
in it - why would the *score only* option exist anyway?
Look into the
want to do this because daily I get hundreds (or more)
non-deliverable
emails delivered from servers all across the internet to email
addresses
here that don't exist.
As everybody does. That was the reason to have the flat_list and /or
ldap.
I do not get it, why you cannot use it as we all
pls don't. If it's the biggest update since 1.2.0 don't put it in the
open
at the end of this week.
No problem for me.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll
Furthers, what is a forged helo?
An invalid HELO greeting messsage used by SMTP servers.
ASSP has an option to check connecting servers helo messages against
the
rfcs and optionally penalize them for having an invalid one.
Personally
I find this blocks more spambots.
A forged helo is
A mailbox without Spam is like a private restroom, with Spam it looks
like a public one.
It is quality of life, what is here at stake.
Fritz Borgstedt
-
Take Surveys. Earn Cash. Influence the Future of IT
Join
Does this option prepend the spamsubject to ccspam AND ccham ?
Wouldn't it be logical to do this only for ccspam ?
yes, that was a bug. fixed.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's
The ip address is retrieved when the data is uploaded, though not
part
of the data upload itself, but rather retrieved from the connection
using '$ENV{REMOTE_ADDR}' in the script that receives the upload.
I'm asking this question precisely because I am wondering if any
admins
are running
this is a bug, deactivate rbl value for PB
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
What do these errors mean (no reason after RBL-Failed ?)
I am getting a lott of them lately!
It means, that there is a bug slipping in lately.
It is fixed in last built.
3) rename Local Host Names* to HELO BLACKLIST* and move into
validate
sender
Helo Blacklist is already there and is something different.
4) move Spam Collect Addresses* close to spam trap addresses. They
both
feed PB for spamtraps, but you can weight them differently, and i use
it
even if i
I don't want to push my luck, but it seems that instead of a checkbox
(or may in addition to) there should be an E-mail Threshold.
There is a message threshhold.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join
That's so cool. I ask about e-mail scoring, there's a discussion
about
it, and 2 days later Fritz has implemented changes to incorporate it.
Fritz, you rock.
Actually as I mentioned, it was already there. Instead of modus3 for
PB I put now an additionally checkbox in. modus 3 was single
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
(actual checkbox for 'helo blacklist' , uses a feature automagically
mantained by assp, for them who believe in bayes.. and i suppose that
checkbox should be moved to bayes Options or at
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
i've currently updated my stable 1.2.6 to the dev release 1.2.7.1(15)
and a
strange problem occurs when delivering the mails to my mailserver
(hmail):
may be I found something, try the last
OK, I've got 1.2.7.1 (19) and I'm not seeing that anywhere, so I
looked
through the code. DoPenaltyMessage compares the total message score
to
PenaltyLimit, which is the IP threshold. If that threshold is low
enough to reject an individual e-mail, then the IP gets PB, doesn't
it?
I mean, the
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Fritz, the latest (22) release won't start as a service in Windows
2000.
I know, try again please.
-
Take Surveys. Earn
Is this how it works, or am I missing something here?
It works this way.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
1.2.7.1(22) still makes a problem when running in testmode for
delivering
spam mails to hmailserver:
SENT: 250 Hello
RECEIVED: From: sender not supplied
SENT: 502 Unimplemented command.
sorry, don't know what you mean with smtpdestination
In your configuration in network is a field smtpdestination.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get
sorry, don't know what you mean with smtpdestination - the logentries
for
the specific mail start with
SENT: 220 post..de ESMTP
RECEIVED: NOOP
Do you have the field Send NOOP Info checked in Logging? Uncheck
it.
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
smtp-listen port in hmailserver is 125 - as already mentioned the
delivery
of ham works fine, only spam mails don't pass through with 1.2.7.1
Sory, but i cannot reproduce it and I have no other
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Sory, but i cannot reproduce it
Ok, now I can reproduce it, fix is coming.
-
Take Surveys. Earn Cash. Influence the
Ok, now I can reproduce it, fix is coming.
Ok, fix is in built(25)
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT
Would it be possible to add to ASSP a way to set a different SMTP
destination for the cc all spam or ham addresses?
SMTP Reporting Destination
Port to connect to when Email Interface reports are generated and
send. If blank all internal mail will go to the main SMTP Destination.
SMTP Reporting Destination
Port to connect to when Email Interface reports are generated and
send. If blank all internal mail will go to the main SMTP Destination.
After second thought I made a second one.
So look into CCALL section. )))
I think it is not worth to put so much effort in it. Just shut it
off. ASSP is built to grap the resources you free by that. If it goes
blind it will better hear ))).
fritz
-
Take Surveys. Earn Cash. Influence the Future
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Fritz i am loosing you here. Problem is that the attachements are
filtered and mail is blocked! Is this working like it should do ?
I am loosing you.
I said, there are options for whitelisted,
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Excellent! Is that just a port, or will it take an IP:Port pair?
what do you think?
-
Take Surveys. Earn Cash.
What about the saving of the attachments ?
Did you really filled out the *separate* collecting options for
external attachments ?
Virii will be collected also since built (28)
-
Take Surveys. Earn Cash. Influence the
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
When there is a virus detected is the smtp connection with the
sending
host dropped ?
They got the smtp error defined in viruserror
I am asking this because i got repeating virusses this
Similar symptoms here. An E-mail with an Eicar signature has been
bouncing
back and forth for four days.
ASSP does not bounce. ASSP returns the error you define. So what do
think should ASSP do , to prevent the virus from coming again?
Should ASSP drop the connection without proper error
a small detail in the recent releases: the reason for a failed helo
is no
longer shown in the log files
it would be nice to have this back
?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's
I am missing the line telling me the (usually faked) sender and
Invalid Helo
Format.
Your logging is turned off for sender validation, turn it on.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Any suggestions ?
Reduce Maxbytes to 5 k.
Delete the oldest 5000 in Spam/Notspam.
-
Take Surveys. Earn Cash. Influence
Perhaps my memory is failing me. I though I remembered being able to
customize the SPF error message in the past.
No. But now.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Any solution on this October problem, Markus? My processing time is
similar
- nearly finished, finally, after 14 hours. I have 14,000 files in
the spam
and 28,000 in the notspam files to
I've sent an email to fritz so this should find it's way into the
beta
site and eventually SourceForge with the next version.
repair repairs (if necessary) whitedb, reddb, pbdb, rblcache,
uriblcache.
it is now also part of the rebuildspamdb.pl
but I don?t want
email to these addresses contributing to the corpus
put them in redlist too.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
I found a small snip of code at
(http://www.regular-expressions.info/dates.html) that looks like it
could be the basis of a new sub. As written, this code only matches
the
date as 1999-01-01, but I am looking into how it could be modified to
fit our needs - if this is even a useful idea.
I
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
This is in 1.2.7.1(51).
Sorry, I tried something new (radio buttons) and failed. Should be ok
in (52).
fritz
-
Take
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Hi,
seems it's not working here.
Was the virus in an attachment?
We do not catch the test virus in the body of a mail.
Is this possible to do with ASSP? Any help would be greatly
appreciated.
It would be possible to use the ClamAV viruschecker inside ASSP and
skip your extra viruschecker altogether.
You can define in ASSP if it should skip local mails.
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Before this latest
run, very few Uuencoded virus attachments made it through ASSP, but
anyone
relying on ASSP/ClamAV to protect then from this latest 'Storm Worm
virus
run will be hosed.
I
Maximum Connections/IP in Timeframe
The maximum number of SMTP connections to handle per IP address in a
timeframe.
Limit this to prevent DOS attacks, 10 connections is typically enough.
Expiration Time for Maximum Connections/IP
The connection counter will be reset after this time.
600 seconds
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
p.s. Any suggestions for making this a little less error prone,
especially for new users. A FAQ or wiki entry detailing this
particular scenario, or perhaps coding enhancements to
If you read your clamd.log file, do you see any entries for
Trojan.Downloader-647 or Trojan.Downloader-648? Those are from the
recent
Storm Worm which should be called the Recent News Worm since it
has a
subject line from recent news items, or false news items.
yes. The problem here for the
Please tell me, what was in the field smtpdestination in your
installation?
fritz
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
delayok()
I do not get it, what _INBOUND_ has to do with it. The call to the
subroutine just makes sure that there is a smtpdestination. Did you
have a empty smtpdestination field or what was
[EMAIL PROTECTED] schreibt:
I am curious, does the RBL/URIBL function make a lookup to the lists
with the ip address of the client connected or the ip address of the
domain which is given in the mail from command?
RBL does a lookup with the real incoming ip-connection.
URIBL looks in the body of
Not limiting smtpDestination to just ip addresses opens up all sorts
of possible benefits (e.g. DNS based round-robin server
load-balancing). Besides, DNS is a much nicer way to deal with ip
address changes than going to each ASSP installation and manually
changing the smtpDestination (imho).
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Validation:scoring
Penalty Box is running in learn modus (2).
-
Take Surveys. Earn Cash. Influence the Future of IT
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
note: as you can see bayesian spam is running in testmode but imho
the mail
should be blocked due to the PB results, shouldn't it?
I see no logging from PB activity besides scoring drom the
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Messages from local containing bad attachments appear duplicated in
info-stats adding to both Messages Passed (via 'local') and
Messages
Blocked.
Regards,
I do not get that.
I put an option against these types of crashes in.
Is it activated ? - Header MaxBytes -section message verification
Maximum allowed header length. Set to 0 to deactivate.
Put it to 50 k or so.
-
Take Surveys. Earn Cash.
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
In assp.pl I have changed $base to $base=/etc/assp;
I think it is enough to change to this:
foreach
I have the same problem...
nothing in the log?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Is it possible to maintain a changelog between every build like:
22/01/2007 Version 1.2.7.1(66)
Write change herebug resolution, change, new features...
21/01/2007 Version 1.2.7.1(65)
Write
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
but for me it's seem that is only for outgoing mail... wrong ?
wrong.
It is for mails with a SIZE parm.
fb
-
Take
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
well, maybe i'm not logging everything, so maybe there have been more
connections in the meantime.
look for the counters in smtp connection- By IP Frequency Limits
we send one entry to the
Allways zero and the logs and stats. Am i missing anything ?
mo. I missed something.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Message Skipped: Size 1740518 10
for outgoing messages nothing for incoming...
May be no incoming mail is telling your server the size. (ESMTP not
supported)
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Fair call, but I was rather more interested in the list of what the
'other
things!' might be.
You are surely joking but...
it is Open Source, you can read it.
fritz
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
it looks to me that cpu use has rised a little in the last few
builds, and
delaying triplests have doubled.
i think that's due to a change in processing order (maybe you put
delaying
before
May be no incoming mail is telling your server the size. (ESMTP not
supported)
perhaps... but all ?
If your server anounce that he it is not esmtp supporting?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join
(btw, i have have zero Invalid PTR: in my stats, so i can't tell if
that
works)
try the latest built (69)
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
now i can't tell if that feature is broken 1.2.7.1(68), or i'm not
receiving
spam triggering that check, or i did something in my config to
disable that
filter.
The feature was broken and is
Does somebody have a list of Character Sets ?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
would it be possible to give me *one* list?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
See attached.
What should that be?
fritz
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Hi,
It is not meant to be all-inclusive.
Ok, I asked for a list, because I am thinking about a feature, where
you can define in ASSP what charactersets you ALLOW.
fritz
what version are you running?
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief surveys - and
ETA of 1.2.7 is now 1.2.2007.
There is only one report with an unresolved problem. This user has
everything in testmode and does not block anything with sender
validation but rather scores only. He sees a lot of sessions left open
in ASSP. Is there asimilar behaviour at somebody, I cannot produce
Please do not be pi**ed.
Amy
ki**es
fritz
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business topics through brief
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
ETA of 1.2.7 is now 1.2.2007.
I'm guessing this is February 1st? ;) Those european dates are
confusing
to us yanks...
yes . but it does not look so nice, in case you did not get it:
1.2.7
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
If I had to choose I would say 'Which charsets should be blocked'.
Rational being it is too easy to forget to add a charset but fairly
easy
to block some should you choose to do so.
I see it
I would prefer accept all except those i specifically choose to block.
Very helpful for making a default proposal in the webadmin.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Can't we already do this with one of the regexps? I know I did
something
similar with our previous anti-spam proxy.
you can, but you cannot *allow* some charactersets.
[EMAIL PROTECTED] schreibt:
LocalAddresses_Flat:=data/settings/emails
I think it is simple a matter of not doing the right entries into the
fields as stated right on the front:
Note: Items marked with an asterisk (*) accept a list separated by |
or you can specify a file to read the list from -
[EMAIL PROTECTED] schreibt:
In hindsight, the suggestion
made a few weeks ago to delay release until more extensive testing was
completed seems to have been wise. We've had about 40 (50?) versions
in the
meantime
Yep, but I did not freeze the functions so the change is now even
bigger )).
We
I am thinking of a major change in the GUI:
removing the extra sections for collection, spamlover and testmode
and putting that into the check section directly, eg. Testmode for
Bayesian goes into Bayesian Option, RBL-spamlover goes to RBL.
What do you think?
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Is it a bug?
no
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll
Is there currently a way to capture all mail for a particular address?
Thank for your input!
I thought, it was only ok to copy a mail when all adresses are on the
watchlist, but...
try the last built (71).
-
Take Surveys.
TreeWalk [EMAIL PROTECTED] schreibt:
also.. a question; currently ASSP can fail SFP softfail I wonder
if it may be possible to use softfail failures to just score the
incoming message; that is; if the messages fails on softfail
adding a spam score to it; all in all it's how softfail is supposed
to
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Check out this log entry::
I am sorry, but it is impossible to debug older versions.
The ciurrent version is 1.2.6 .
The public beta is 1.2.7.1
fritz
[EMAIL PROTECTED] schreibt:
Well I fixed all the file: syntax problem and upgraded to 1.2.7 and
can send
to anyone locally, and receive mail fine, but sending mail to
external mail
servers, I get relay not allowed.
I had to back off ASSP as my proxy to send this email out... :-)
Steve
http://www.magicvillage.de/~Fritz_Borgstedt/assp/0001CD85-801C/
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT business
401 - 500 of 2408 matches
Mail list logo