So even though assp should know with out a doubt that the helo is forged because ASSP is told that it IS that domain, it still groups that helo w/ all others? That logic seems flawed to me.
Paul K. Dickson Systems Administrator Frederick County Government, IIT pdick...@frederickcountymd.gov 301-600-2399/x12399 > From: Alex Frunza <ad...@ascomex.ro> > Reply-To: For Users of ASSP <assp-user@lists.sourceforge.net> > Date: Wed, 28 Oct 2009 17:30:43 +0200 > To: For Users of ASSP <assp-user@lists.sourceforge.net> > Subject: Re: [Assp-user] Local domain forgery not blocked? > > Of course not, that's what test mode means!You're testing what would > happen if forged helo was set to block, or score. Same thing (different > message in the logs probably) would happen if you set forgedhelo to > monitor, even if testmode was disabled. > > In my opinion, you don't really need testmode, just one-two days to see > how things work. But ASSP should work fine out of the box, except for > bayesian that you have to train (well, it can be automated but you have > to help) and bomb regexes and others you have to help fill up yourself > for obvious reasons. > > > > > > On 10/28/2009 3:54 PM, Paul Dickson wrote: >> Shouldn¹t it be blocked outright since @fredco-md.net IS assp¹s local >> domain? Even if it is in testmode for external domains? >> >> Oct-23-09 06:04:09 id-92248-25051 [ForgedHELO][testmode] 222.252.237.138 >> <mailer-dae...@fredco-md.net> to: fbal...@fredco-md.net [spam found] and >> passing because testmode, otherwise blocked (ForgedHELO:'fredco-md.net') >> >> >> >> >> Paul K. Dickson >> Systems Administrator >> Frederick County Government, IIT >> pdick...@fredco-md.net >> 301-600-2399/x12399 >> >> >> >> ----------------------------------------------------------------------------->> - >> Come build with us! The BlackBerry(R) Developer Conference in SF, CA >> is the only developer event you need to attend this year. Jumpstart your >> developing skills, take BlackBerry mobile applications to market and stay >> ahead of the curve. Join us from November 9 - 12, 2009. Register now! >> http://p.sf.net/sfu/devconference >> _______________________________________________ >> Assp-user mailing list >> Assp-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-user >> >> >> > > > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry(R) Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart your > developing skills, take BlackBerry mobile applications to market and stay > ahead of the curve. Join us from November 9 - 12, 2009. Register now! > http://p.sf.net/sfu/devconference > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
