Hi all,

changed in 2.0.2_3.3.01:

- The EarlyTalker check could now be disabled by setting 'etValencePB' to 
zero

- The AUTHError counters are no longer related to 'PenaltyUseNetblocks' - 
a /24 IP-mask is used in every case

- If a network /24 has reached the value of 'MaxAUTHErrors' , assp will 
drop the connection on the next AUTH request
and will send '521 $myName does not accept mail - closing transmission - 
too many previouse AUTH errors from network $ip' to the client.
The AUTHError counter for this network will be increased by 1 and 
'autValencePB' will be added to the IP score.

to remember:

The AUTHError counter for every network is decreased by one every 5 
minutes.
So, after 'MaxAUTHErrors' is reached by a network, the AUTH lookup 
(harvest) frequency is limited to one every 5 minutes.
How ever, 'autValencePB' should be set high enough, to block such 
harvesters early.

----------------------------------------------------

This code revision is planned to be released as a new major release

stabil version: ASSP 2.1.1_11276

dev version   : ASSP 2.1.2_11277 

or similar (release date dependend). 
I have currently no major bug- or feature requests opened. Possibly some 
still more or less hidden configuration values will be moved in to the GUI 
and the SNMP MIBS.

Here are some statistic data about 2.0:

- The major development release 2.0 is alive since 04-01-2008. 
- The sourcecode (only assp.pl) was increased by 1,4MB in that time frame. 

- The major production release 2.0 is alive since 05-31-2009. 
- The sourcecode (only assp.pl) was increased by 770KB in that time frame. 

- currently ~1600 V2.0 installations are using the autoupdate
- currently there are five free and one non-free plugins available for 
V2.0


Thomas




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to