[Assp-test] URIBL: neutral

2010-05-21 Thread Graziano
Hello

I receive this for all URIBL: neutral hits
May-21-10 06:29:28 208.75.123.3 sc@in.com to: e...@w.org added 4 
(URIBL: neutral,  listed in ), total score for IP '208.75.123.3' is now 8;

note this   (URIBL: neutral,  listed in )  are empty

I am using following settings

URIBLServiceProvider:=dbl.spamhaus.org|multi.surbl.org|black.uribl.com|dob.sibl.support-intelligence.net|uribl.swinog.ch
URIBLmaxreplies:=5
URIBLmaxhits:=2
URIBLmaxtime:=6
URIBLsocktime:=2

Graziano


--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test


Re: [Assp-test] BomgHeaderRE catch, but I don't understand why

2010-05-21 Thread K Post
bump

On Tue, May 18, 2010 at 11:56 AM, K Post nntp.p...@gmail.com wrote:
 Here's our very simple BombHeaderRe

 # Header will be checked against the Regular Expression.
 Notice of Underreported Income
 \d\d% 0FF on Pfizer
 \d\d% OFF on Pfizer
 dear.*\d\d% OFF
 dear.*\d\d% oFF
 \nfrom:.*pfizer
 \nfrom:.*viagra
 newslet...@adobe-pdf-pro2009.com
 # one.ourdomain.org / two.ourdomain.org no mail from sender.com (but
 main ourdomain.org can get them)
 \nfrom:[^\r\n]...@sender\.com.+?\nto:[^\r\n]+?\@(one\.ourdomain\.org|two\.ourdomain\.org)
 \nto:[^\r\n]+?\@(one\.ourdomain\.org|two\.ourdomain\.org).+?\nfrom:[^\r\n]...@sender\.com

 THe block report has an email to one of our users from:
 From: Elisa Evans elisa.a.ev...@somedomain.com

 When I pull up that file I see:
 X-ASSP-Message/IP-Score: 20 (BombHeaderRe ' From: Elisa Evans elisa.a.evan')

 What in our BombHeaderRE would have triggered this?

 Thanks


--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test


Re: [Assp-test] Newest stable ASSP 1.x crashing.

2010-05-21 Thread Paul K. Dickson
That seemed to take care of it.  For some reason a bunch of the scores were
1.x, rather than just 1, 2, 3, etc etc.  Not sure if that had anything to do
with it.

Thanks all for your feedback.


Paul K. Dickson
Systems Administrator
Interagency Information Technologies
Frederick County Government
Frederick, MD 21701
pdick...@frederickcountymd.gov
301-600-2399/x12399



 From: Fritz Borgstedt f...@iworld.de
 Reply-To: ASSP development mailing list assp-test@lists.sourceforge.net
 Date: Tue, 18 May 2010 18:05:08 +0200
 To: ASSP development mailing list assp-test@lists.sourceforge.net
 Subject: Re: [Assp-test] Newest stable ASSP 1.x crashing.
 
 ASSP development mailing list assp-test@lists.sourceforge.net
 schreibt:
 I did notice the log say scoring when the
 config is set to block and 1hit.. Not sure if that is normal.
 
 If you use classes in serviceprovider, the score must be =
 rblvalencePB to block.
 so set bb.barracudacentral.org to 1
 
 --
 
 ___
 Assp-test mailing list
 Assp-test@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/assp-test


--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test


[Assp-test] AutoUpdate possibly related to short smtp outages??

2010-05-21 Thread K Post
How often does AutoUpdate run?

I'm having 1-2 minute smtp outages at approximately 8:45am, 11:45am,
2:45pm, 5:45pm, 8:45pm  (and other times, but I don't get notified of
those the monitoring threshold is higher during off hours).  I had
thought that this related to rebuilds, but I've changed the schedule
on that.

I have AutoUpdate set to download only.  Could the download be
stopping SMTP from responding for a bit?

I'm going to turn off autoupdate as a test.

--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test


Re: [Assp-test] AutoUpdate possibly related to short smtp outages??

2010-05-21 Thread K Post
oh, and clearly there could be something outside of ASSP that's
scheduled every 3 hours, I'm just not seeting anything that is...

--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test


Re: [Assp-test] AutoUpdate possibly related to short smtp outages??

2010-05-21 Thread Paul K. Dickson
Define outage?  Slow delivery, no response when telnetting to the smtp or
relay ports on your assp box at all, etc etc?

Did you check your back end mta's queue?




Paul K. Dickson
Systems Administrator
Interagency Information Technologies
Frederick County Government
Frederick, MD 21701
pdick...@frederickcountymd.gov
301-600-2399/x12399



 From: K Post nntp.p...@gmail.com
 Reply-To: ASSP development mailing list assp-test@lists.sourceforge.net
 Date: Fri, 21 May 2010 14:55:21 -0400
 To: ASSP development mailing list assp-test@lists.sourceforge.net
 Subject: Re: [Assp-test] AutoUpdate possibly related to short smtp outages??
 
 oh, and clearly there could be something outside of ASSP that's
 scheduled every 3 hours, I'm just not seeting anything that is...
 
 --
 
 ___
 Assp-test mailing list
 Assp-test@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/assp-test


--

___
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test