Tim, James, Did you guys check the percentage of spam VS legitimate mail using TLS?
I had an issue with ASSP and TLS when I originally launched ASSP about a month ago, so I deactivated it to investigate the TLS necessity. I was quite surprised to find out that about 90% (if not 95%) of the SMTP over TLS connection to my mail server was used by spammers.... Since then, I disabled TLS and reactivated ASSP. For me SMTP over TLS is TOTALLY useless.... I suggested to my users to use something like PGP or the likes if they want their emails encrypted. My .02 gd -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Young Sent: October 25, 2006 11:45 AM To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy Subject: Re: [Assp-user] SSL/TLS proxy At this time we do not have it working. I will try to post something if I do get it working. Basically we have a home made smtpguard thing (google will bring up a couple) that does ssl/tls. The home-made smtpguard takes the originating IP and drops it into the header. If I can add a configuration option to ASSP so that it takes the IP from the added smtp-header entry, instead of from the tcp/ip connection, then I should get it to work. For it to work for everyone else, I would have to convince the author of the smtpguard to release it open-source... Or leave it to you all to find a smtpguard version that does ssl/tls. - Tim James Brown wrote: > On 25/10/2006, at 11:35 AM, Tim Young wrote: > > >> We have a home-made ssl/tls smtp filter that we have been using. Our >> filter adds the originating IP address as a part of the header. Can >> ASSP be configured to grab the IP address from a tag in the header >> instead of from the tcp/ip connection itself? >> >> Our desired result is to have ASSP and ssl/tls. >> > > Tim, please let me know how you go with this. > > We are also trying to get ASSP to work with SSL/TLS. > > I've set up stunnel, but can't get Apple's Mail to connect to it. > Keep getting this error: > > 2006.10.23 22:43:25 LOG7[29925:25182208]: SSL alert (write): fatal: > handshake failure > 2006.10.23 22:43:25 LOG3[29925:25182208]: SSL_connect: 1408F10B: > error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > > So I'd be interested in any way of getting SSL to work with ASSP. > > Regards, > > James. > > > ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
