[Assp-test] Unexpected SEGV - v16036, Line 38599

My 16036 installation, windows, all modules up to date is throwing this warning over and over: Warning: got unexpected signal SEGV in Worker_2: package - main, file - c:\ASSP\assp.pl, line - 38599! (many of them) followed by a Warning: try to terminate inactive/stucking Worker_2 [ fyi,

Re: [Assp-test] Opposite of Block Report

The reason I want it is the bonehead users who complain about spam but won't report - you know, the ones who can fire you...This way, I can get a list of subjects that they got and then report on their behalf. On Sat, Feb 20, 2016 at 3:39 PM, Robert K Coffman Jr. -Info From Data Corp.

Re: [Assp-test] Opposite of Block Report

Thank you both for adding your thoughts and really starting this discussion. I know how to do what you're both suggesting (though in our case, mail goes to several different end servers so parsing them would be a pain). The simple grep of the maillog is what I've been doing, and that's fine, but

[Assp-test] Opposite of Block Report

I'm getting some verbal reports of people getting spam, from some of my more difficult users (despite clear instructions on how to report them). Question: How difficult would it be to have either a daily or on demand report that's essentially the opposite of the block report? Show me everything

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

I added a bit. Confirm that this is correct? (see bold) This feature replaces the above level definitions. If at least one valid regular (not zip:...) attachment blocking rule is defined here, all level definitions are ignored for all emails, *regardless of direction! This means that if, for

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

t, but it exactly points out all required facts. > > If anybody is not able to understand > > "If the user name matches for a sender or recipient and a (in/out) regex > definition is found in this file" > and > "all level definition are overwritten for this mai

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

ule - no check. > > > If I define a zip: line for a specific user but not a non-zip: line, will > the level 1,2,3,4 blocks still be effective? > > yes - zip: (as written in the doc) is an extension provided by AFC. > > Thomas > > > > Von:K Post <nntp.p...@gmail.c

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

s have to be made explicite. > If you want to act AFC the same way for regular attachments and zip file > content, you'll need two identical definitions - one without and one with > the leading zip: > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > A

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

is inside a zip? I'm not talking encrypted, just a regular zip. On Wed, Feb 17, 2016 at 9:55 AM, K Post <nntp.p...@gmail.com> wrote: > sorry, hit send by mistake > > If I put a line like > > zip: theuser@ourdomain => => good-out => crypt\-zip > > 1) that

Re: [Assp-test] AFC Plugin, UserAttach. Encrypted zip

ttachment handling for a person and different zip handling for that same person, am I correct in saying that I'd use 2 lines in userattach, one normal, and one prefixed with zip? THANK YOU On Wed, Feb 17, 2016 at 9:49 AM, K Post <nntp.p...@gmail.com> wrote: > > I've read and reread

[Assp-test] AFC Plugin, UserAttach. Encrypted zip

I've read and reread the gui, but still am not completely clear. Attachment blocking works well. We don't allow, in or out, the standard stuff: exe, etc. I've got ASSP_AFCblockEncryptedZIP checked, and that works well too. My problem is that I've got 2 users who need to be able to send

[Assp-test] (Maybe urgent) help needed - bdb-env rebuild

Everything looks fine, but I got this warning seconds after doing a resend mail from the admin UI. Alert came via email (log alert) BerkeleyDB-ERROR: in building BerkeleyDB ENV - can't create BDB-ENV for rebuild - see c:/assp/tmpDB/rebuildDB/BDB-error.txt - BDB:BDB0087 DB_RUNRECOVERY: Fatal

Re: [Assp-test] notifyRE

ize 3700 bytes (size)! > > full line in log is: > > Feb-02-16 14:44:45 msg42285-06711 [[ip] <sen...@domain.coml> error: > message exceeds maxSize 3700 bytes (size)! > ------ > > Thomas > > > > Von:K Post <nn

Re: [Assp-test] MaxSize exceeded - keeps retrying...

r a temp error the server may try again. > So there are three possible reasons. > > 1. the sending server works bad and sends again after a 5xx reply > 2. you've set maxSizeError to 4xx > 3. the origin sender sends the mail again and again and > > Thomas > >

[Assp-test] notifyRE

Is there a way of including the FULL line when a notifyRE matches. For example, instead of the body of the notification email being something like: log event on host assp.domain.org: error: message exceeds maxSize 3700 bytes (size)! Have it be something like log event on host

[Assp-test] Warning: Main_Thread found socket without SocketCalls - please report!

I just got Warning: Main_Thread found socket without SocketCalls - please report! This was right after getting a notice that a sender's trying to send a message that exceeds max size. It said to report, so I am. ASSP version 2.4.8(16013) Windows

[Assp-test] MaxSize exceeded - keeps retrying...

message exceeds maxSize 3700 bytes (size)! I've seen it several times know where maxsize is exceeded but the sender keeps sending and sending and sending. ASSP is sending a NDR right and not a retry later code to the sending server right? It's definitely possible that the person sending

Re: [Assp-test] Warning: Main_Thread found socket without SocketCalls - please report!

. > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 02.02.2016 17:57 > Betreff:[Assp-test] Warning: Main_Thread found socket without > SocketCalls

Re: [Assp-test] can't find a name server registration

<ji...@sohnen-moe.com> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 01/29/2016 11:10 AM, K Post wrote: > > I see this on occasion: > > > ASSP version 2.4.5(15334) > I have the same problem. > > > 2016-02-01 08:32:24 Warning:

Re: [Assp-test] Error runlevel errors

l plugins to there defaults. > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 01.02.2016 03:51 > Betreff:[Assp-test] Error runlevel errors > >

[Assp-test] Error runlevel errors

I periodically see errors like this: ERROR: runlevel 'complete mail' - priority 34, requested by Plugin 'ASSP_AFC' (located at c:/ASSP/Plugins/ASSP_AFC.pm), is already occupied by Plugin 'ASSP_AFC' (located at c:/ASSP/Plugins/ASSP_AFC.pm) Not always with this plugin, just complaining about

[Assp-test] can't find a name server registration

I see this on occasion: warning: can't find a name server registration for the sender domain ' ci.wilsonville.or.us' - all DNS queries will be skipped! And it's not just a single host, I see this about once a week with various domain names often cities co.geauga.oh.us and co.delaware.pa.us.

Re: [Assp-test] OpenSSL

included in the > Perl distro available at > > http://sourceforge.net/projects/assp/files/ASSP%20V2%20multithreading/ASSP%20V2%20module%20installation/ > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-

Re: [Assp-test] OpenSSL

on > 1.72 uses OpenSSL 1.0.2c 12 Jun 2015 > > >I have NOT installed OpenSSL exe's. > > This is a fault. > > Thomas > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Dat

Re: [Assp-test] OpenSSL

UPDATE I removed Net:SSLeay and reinstalled. I now see OpenSSL-lib 1.0.2c 12 Jun 2015 1.0.2c / 1.0.1h in the info. GREAT. I did NOT install OpenSSL exe's though. I guess that's my last question for now, are you saying I need to? On Thu, Jan 14, 2016 at 11:16 AM, K Post <nntp.p...@gmail.

[Assp-test] OpenSSL

Just upgraded to 16013 on WINDOWS. Thanks for the continuous updates and fixes. I updated all perl modules that I could through PPM and the rest from CPAN (buy unzipping) All seems well, however the info screen shows: OpenSSL-lib 1.0.1l 15 Jan 2015 1.0.1l / 1.0.1h I had asked about

Re: [Assp-test] Multiple languages / charactersets

rly the same like \p{Hebrew}+ > > [אבגדהוזחטיכךלמםנןסעפףצץקרשת]+ > > Thomas > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 11.01.2016 02:24 > Betreff:Re: [Assp-test] Multiple languages / charac

Re: [Assp-test] Multiple languages / charactersets

that's needed? On Fri, Jan 8, 2016 at 11:54 AM, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > Unicode will help > > the regular expression: > > \p{Hebrew} > > for example, will detect a singe hebrew character > > Thomas > > > > Von:

[Assp-test] Multiple languages / charactersets

One of our users is bilingual and apparently switches between English and Hebrew character set frequently This is the only user like this that I know of. I worry about not having enough HM / Bayes statistics on hebrew and I'd hate to reduce the amount of English data if we were to start

Re: [Assp-test] fixes in assp 2.4.6 build 15365

Thank you Thomas for this and a 2015 filled with less spam for all of us and our users. Here's to a healthy and happy new year, and maybe one with even less spam! On Thu, Dec 31, 2015 at 7:22 AM, Thomas Eckardt wrote: > Hi all, > > fixed in assp 2.4.6 build 15365: >

Re: [Assp-test] An existing connection was forcibly closed by the remote host.

anyone have any thoughts on this? thanks On Fri, Dec 4, 2015 at 9:04 AM, K Post <nntp.p...@gmail.com> wrote: > On a windows box. I see the error "An existing connection was forcibly > closed by the remote host" on occasion in the log, seemingly with spam > a

[Assp-test] An existing connection was forcibly closed by the remote host.

On a windows box. I see the error "An existing connection was forcibly closed by the remote host" on occasion in the log, seemingly with spam addresses. Now I'm seeing it with some email from Capital One (a US bank). See below Dec-04-15 08:52:28 msg17822-13065 216.33.63.62 <

Re: [Assp-test] Don't to DNSBL for a from domain

ecks! > These options can be used to prevent system overloads in case of a > spam-attack over a short time. They should be disabled as soon as > possible, followed by a cache cleaning for this option. > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP developme

[Assp-test] Don't to DNSBL for a from domain

I feel like this has to have been discussed before, but I can't find any reference to it. Is there a way to skip DNSBL checking based on the envelope from / from line? I want the message to contribute to the corpus, just not be scored based on DNSBL.

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

To close this thread and for the sake of those who might see it later. 15261 was released which addresses a bug that incorrectly set dns server values if NONE responded. (this points to a problem with my dns servers which have yet to be determined) On Wed, Sep 16, 2015 at 9:59 AM, K Post

Re: [Assp-test] BUG? DNS Server Rotation 15255

"0" instead of the 2 > servers that are being used. > > If this is the case - assp has not got any answer from any DNS-server. > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sour

Re: [Assp-test] BUG? DNS Server Rotation 15255

Thanks Greyhat. They're windows DNS servers (I know, I know. No choice). This is getting outside of the scope of ASSP now for SURE. I think I have narrowed down the problem, and it IS something with our DNS resolution. DNS seems really fast except when doing a PTR lookup for an IP that has

[Assp-test] BUG? DNS Server Rotation 15255

Following up / correcting my RWL check failed thread from earlier in the week. Here's what I'm seeing: With version 15255 if I have 3 dns servers entered into DNSServers (all local servers without forwarders) but have 2 for DNSServerLimit after several hours, the server starts having DNS issues

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

DNSReuseSocket being unticked didn't help. Another 4 hours after restarting and the RWL/RBL errors are back. On Tue, Sep 15, 2015 at 5:18 PM, K Post <nntp.p...@gmail.com> wrote: > Seems like if I let ASSP 15255 run long enough, the RWL/RBL errors also > come back. This was nev

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

Also in the logs: can't get DNS-server answer for MX - (NO_NAME_SERVER_GIVEN) But I see no messages about unresponsive DNS servers, the periodic tests of the 3 show 0-3ms responses for sourceforge.net On Wed, Sep 16, 2015 at 9:04 AM, K Post <nntp.p...@gmail.com> wrote: > DNSReuseSoc

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

Thanks Greyhat for chiming in and sorry for so many emails all! I'm using our 3 internal DNS servers. The ports are wide open between the servers. There isn't a firewall issue. Nothing's changed on the DNS servers or the firewall (I run them too). Notes (to summarize my many posts - sorry

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

More information: In the gui, under infostats, I see used DNS Servers: 0 *<--- ZERO!?! * defined DNS Servers: x.x.x.51 x.x.x.52 x.x.x.53 (there's my 3) DNS Servers query time: min: 0.000 , avg: 0.062 , max: 3.014 (good response times) On Wed, Sep 16, 2015 at 9:22 AM, K Post <nntp.p...@gma

Re: [Assp-test] fixes in assp 2.4.6 build 15257

ble conditions > > >How would ASSP know how to decrypt an included file? > > simple answer: because assp has encypted the file - it knows how to > decrypt the file. > > Thomas > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

servers have always been operating the same but now ASSP is more picky? Or could something have changed where DNS is queried differently? I've got DNStimeout set to 3 seconds. I've never seen my dns servers take that long! I also have DNSReuseSocket checked. On Mon, Sep 14, 2015 at 5:52 PM, K Post

Re: [Assp-test] Main_Thread found socket without SocketCalls

Got this error again when opening the web interface but closing it immediately (I went to the wrong site by mistake) On Sun, Sep 13, 2015 at 10:36 AM, K Post <nntp.p...@gmail.com> wrote: > I was searching my logs using the GUI, and mistakenly put the last 100 > files instead of

Re: [Assp-test] Main_Thread found socket without SocketCalls

, Sep 15, 2015 at 1:47 PM, K Post <nntp.p...@gmail.com> wrote: > Got this error again when opening the web interface but closing it > immediately (I went to the wrong site by mistake) > > On Sun, Sep 13, 2015 at 10:36 AM, K Post <nntp.p...@gmail.com> wrote: > >> I wa

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

a problem with previous versions. Any other ideas? On Tue, Sep 15, 2015 at 1:01 PM, K Post <nntp.p...@gmail.com> wrote: > I've restarted several more times. I haven't changed any settings, but > the RWL/RBL errors seem to have gone away. Bad cache or something? I am > getting occa

[Assp-test] Unknown user reply from SMTP server instead of ASSP

Curious about this one. .35 is our SMTP server. If unkn...@ourcharity.org isn't in LocalAddresses_Flat (which is what we use), shoudln't it be ASSP that's rejecting the user, not the real SMTP server? (have I lost my mind?) Sep-15-15 17:15:58 msg52358-04911 61.xx.xx.xx

Re: [Assp-test] MainThread stuck occasionally calling external script

updates. If the cron job changes the include file, assp will reload all > groups. > > I found an issue for encrypted include-files. With the current release, > one restart after making this changes may be required. An updated dev > version will be released today. > >

Re: [Assp-test] MainThread stuck occasionally calling external script

gt; In any case - assp has absolutely no control to an externaly started > program. > See it the same way like clamd and freshclam are working together. > freshclam is running totaly independend, it only tells the clamd that it > has done something. clamd than reloads the pattern database

Re: [Assp-test] Block Report Filter

le one - nice, you'll get one report line with the count of all > honeypot attempts > do not log the final log line, which has [spam found] and the honeypot > domain in it > use 'BlockReport/modify.pm' to remove unwanted content fron the report > (could be very complex) >

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

or no DNS-server is > available. > > Thomas > > > > > > Von:K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 14.09.2015 17:12 > Betreff:[Assp-test] error: RWL check failed :

[Assp-test] error: RWL check failed : send: Bad file descriptor

I'm suddenly getting a lot of these lines: error: RWL check failed : send: Bad file descriptor Tried restarting ASSP, also tried restarting the machine. Goes away for a bit, but comes back after a short while. --

Re: [Assp-test] Block Report Filter

nevermind, figured it out. The group wants *@ourcharity.org I was missing the asterisk. Works well. Thanks On Mon, Sep 14, 2015 at 12:21 PM, K Post <nntp.p...@gmail.com> wrote: > Thanks. I think I'll go the way of a group. > > The gui says: > > It is possible to de

Re: [Assp-test] error: RWL check failed : send: Bad file descriptor

fine for a while, and then start throwing these errors? Is there some kind of cache that could be getting full or corrupted? thanks On Mon, Sep 14, 2015 at 11:23 AM, K Post <nntp.p...@gmail.com> wrote: > I need to dig deeper. There are 3 fast local dns servers that seem to be >

Re: [Assp-test] fixes in assp 2.4.6 build 15257

What do you mean by "encrypted?" How would ASSP know how to decrypt an included file? I did notice an oddity when I changed my group definition file from executing a perl script to having that perl script run externally and then using an include instead. If those include files were in the cfg

[Assp-test] Block Report Filter

One of the unfortunate parts of my job is analyzing the block report on a nightly basis. Yes, you should feel sorry for me. I recently implemented some honeypots, which are working great along with your new method of having the database rebuild immediately with them. GREAT STUFF. I've got a

[Assp-test] MainThread stuck occasionally calling external script

I wrote a scrpt to populate ASSP config files with IP address ranges based on SPF values. For example, I call my GetDomainIPSfromSPF.pl script to get all of the IP's that ConstantContact.com says they can send from. It works well. HOWEVER, on rare occasion, maybe once every 2-3 weeks,

[Assp-test] Main_Thread found socket without SocketCalls

I was searching my logs using the GUI, and mistakenly put the last 100 files instead of the last 10 and had 1000 matches lists. The search went on and on, until I realized my mistake. I closed Chrome and reopened since there doesn't seem to be a way to cancel the search. I got a notification in

Re: [Assp-test] fixes in assp 2.4.6 build 15232

Can't wait to carve out some time to play with $reportBadDetectedSpam. THANKS!! On Thu, Aug 20, 2015 at 10:37 AM, Thomas Eckardt thomas.ecka...@thockar.com wrote: Hi all, fixed in assp 2.4.6 build 15232: - IP addresses from 'Received:' headerlines were not detected, if the connecting port

Re: [Assp-test] Fwd: Honeypot addresses, any way to bypass extremepb?

users) The problem is that the volume of spam is causing the sender Ip to goto the extremePB. you should disable this - it is in montor mode (early is disabled) on my prod system Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test

[Assp-test] Fwd: Honeypot addresses, any way to bypass extremepb?

I sent this in early June to the user list, but it got no play, so I figured that I'd give here a go. Thanks -- Forwarded message -- From: K Post nntp.p...@gmail.com Date: Thu, Jun 4, 2015 at 9:34 AM Subject: Honeypot addresses, any way to bypass extremepb? To: For Users of ASSP

Re: [Assp-test] Logging of Failed SMTP Auth?

Outstanding. thanks Doug. On Wed, Jul 22, 2015 at 1:26 PM, Doug Lytle supp...@drdos.info wrote: On Jul 22, 2015, at 1:00 PM, K Post nntp.p...@gmail.com wrote: Would it be possible to have Log RE email the full line in the log which I just turned this on the other day. Edit the /assp/lib

[Assp-test] Logging of Failed SMTP Auth?

I've got a LogRE set for warning: SMTP authentication failed That way I get an email when SMTP auth fails. The Log itself shows the offender's IP address, but not the attempted username. The email notification shows neither the IP address or the username. Would it be possible to have Log RE

[Assp-test] Warnings about runlevel priorities

I've seen this a couple of times. Any reason for concern? WARNING: runlevel 'complete mail' - priority 6 is already occupied by plugin ASSP_AFC -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud

Re: [Assp-test] Priority 1 already occupied by plugin ASSP_AFC

. Reset the priority values of all used runlevel 2 Plugins to there default. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 04.06.2015 19:42 Betreff:[Assp-test] Priority 1 already occupied by plugin ASSP_AFC

Re: [Assp-test] NO_NAME_SERVER_GIVEN

at 2:12 AM, Thomas Eckardt thomas.ecka...@thockar.com wrote: I'm testing DNSServerLimit is set to ONE. Set this value at least to TWO. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 14.06.2015 16:11 Betreff

Re: [Assp-test] OpenSSL update?

/linked 'static' against the openssl version 1.0.2a and does not require an openssl installation. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 14.06.2015 15:57 Betreff:Re: [Assp-test] OpenSSL update

Re: [Assp-test] Priority 1 already occupied by plugin ASSP_AFC

is already occupied by plugin ASSP_AFC at least two plugins must be registered to assp! Notice: assp will try load any file in the 'assp/Plugins' folder, that name starts with 'ASSP_' and has the extension .pm, as a Plugin. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development

Re: [Assp-test] OpenSSL update?

I also see ssleay32.dll with a April 2015 date in your assp.mod disty. On Mon, Jun 15, 2015 at 10:14 AM, K Post nntp.p...@gmail.com wrote: ssleay32.dll (note the 32) is generally included with windows OpenSSL distros. I misunderstood what you were saying about the .dll in the distro

[Assp-test] NO_NAME_SERVER_GIVEN

We've got 3 local (relatively fast, very stable) windows dns servers. In an effort to reduce network traffic internally and externally by limiting DNS queries where reasonable, I'm testing DNSServerLimit is set to ONE. I feel like this will generally be sufficient, if for some reason a DNS

Re: [Assp-test] OpenSSL update?

with your (for example) OpenSSL source and header files, Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 12.06.2015 22:48 Betreff:[Assp-test] OpenSSL update? Thomas- Back at the end of February you

[Assp-test] OpenSSL update?

Thomas- Back at the end of February you published a complete X86 Perl 5.20 installation. It's working wonderfully, but since then there's been a bunch of OpenSSL updates, the most recent being published yesterday to 1.0.2b. PPM shows that I have version 1.68 of Net-SSLeay installed in SITE (for

[Assp-test] Priority 1 already occupied by plugin ASSP_AFC

I'm seeing this every once in a while. Any reason for concern? WARNING: runlevel 'complete mail' - priority 1 is already occupied by plugin ASSP_AFC -- ___ Assp-test mailing

[Assp-test] No processing. Option to not contribute to whitelist without maintaining duplicate in NoAutoWhiteAddresses?

Things seem to be are working fine, but I started to wonder if there's any logic in having mail that is sent to no processing local addresses by whitelisted senders ever add to the whitelist. For example, I came across a scenario where a local no process address (one that external volunteers use

Re: [Assp-test] Not fixed in 15148 Analyze rport Outlook msg attached mails

is. Could it be my version of the Outlook perl module? On Sat, May 30, 2015 at 12:20 PM, Thomas Eckardt thomas.ecka...@thockar.com wrote: I can't reproduce this. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 29.05.2015

Re: [Assp-test] Minor bug. Comments in Group definition

query will NOT return comments - so a script should also not return such garbage. Following the description, a comment can never be a part of a group! Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 29.05.2015 16:54

Re: [Assp-test] fixes in assp 2.4.6 build 15148

report' : 'NOT-SPAM report'; On Fri, May 29, 2015 at 1:41 AM, Thomas Eckardt thomas.ecka...@thockar.com wrote: Is that addressed at all in this new version? Yes. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum

[Assp-test] Minor bug. Comments in Group definition

The group definition gui says: Lines starting with a # OR ; are consider a comment. Empty lines will be ignored. A group definition stops, if a new group definition starts or at the end of the file. Comments are not allowed inside a definition line. I've got a little script (posted here) that

[Assp-test] 15148 DNSServerLimit issues

Tried 15148. Changed UseLocalDNS to unchecked. Entered 3 my local DNS servers separated by | upon applying, I see in green that my 3 dns servers are used. Looks fine. However, when I change DNSServerLimit to 1 I get a javascript possibly invalid popup and this under DNSServerLimit ***

Re: [Assp-test] 15148 DNSServerLimit issues

Also, in the log, I get: error: there is NO DNS-server specified - at least TWO DNS-servers are required! ERROR: no answering DNS-SERVER found On Fri, May 29, 2015 at 11:27 AM, K Post nntp.p...@gmail.com wrote: Tried 15148. Changed UseLocalDNS to unchecked. Entered 3 my local

[Assp-test] Not fixed in 15148 Analyze rport Outlook msg attached mails

fixed in assp 2.4.6 build 15148: - analyzing outlook *.msg attached mails faíled I do now see the name of the reporter, but missing is: 1) whether it is a spam or not-spam report 2) The subject 3) The ip information 4) any useful bayesian info It's as if the bayesian and hmm analysis part is

Re: [Assp-test] fixes in assp 2.4.6 build 15148

Terrific! Thanks again for listening!! Love how responsive you are I assume you saw my message about the DoSPF errors I was seeing when implementing the new feature that limits the number of DNS servers in use? Is that addressed at all in this new version? On Thu, May 28, 2015 at 4:29 PM,

[Assp-test] DNS Erros after 15147. Error, invalid argument at line 27188

After installing 15147 yesterday, everything seemed fine. I unchecked UseLocalDNS I put in our 3 local dns servers separated by | into DNSServers DNSReuseSocket is checked DNSServerLimit was first set to 2, then down to just 1 All seemed fine. Then I went to bed - after around 6 hours of

Re: [Assp-test] New Problem Request: Spam/NotSpam Reports CC'ed to Admins now missing details

at 5:52 AM, Thomas Eckardt thomas.ecka...@thockar.com wrote: Ken, have you installed the Perl module 'Email::Outlook::Message' ? Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 27.05.2015 22:44 Betreff:[Assp

[Assp-test] edit White-Org-List button?

In the GUI, under the whiteSenderBase section, there appears to be a button that says edit White-Org-List I'm guessing this was something done during debugging, but was meant to be removed. It brings up the internal cache, which I wouldn't think most people want to regularly be editing. If

Re: [Assp-test] edit White-Org-List button?

The button is there for over 5 years now!? WOW - I must be getting old. With as much looking as I do at the GUI, I'd think that I would have seen that button there! I figured that people who want to edit caches would use the left menu. If it's getting use, leave it! I guess I just never

[Assp-test] PTRCache disabled, analyze doesn't agree

I set PTRCacheInterval to 0 a couple weeks back during testing, and never re-enabled it. I will, but I noticed a minor issue. When looking at a message with no PTR for the sending IP, the Analyze GUI seems to show: xxx.xxx.xxx.xxx is in PTRCache: status= There's nothing after the equal

Re: [Assp-test] fixes in assp 2.4.6 build 15147

GREAT STUFF. Can't wait to try it out. And we got a change from 2.4.4 to 2.4.6!! (because of the dns and plotting differences?) Thank you On Wed, May 27, 2015 at 12:19 PM, Thomas Eckardt thomas.ecka...@thockar.com wrote: Hi all, fixed in assp 2.4.6 build 15147: released, changed and

Re: [Assp-test] DoNoSpoofing score

I believe you've misunderstood what I am asking. Surely with the way you describe it, I've asked a stupid question, but that's not the case. Please give me a chance to clarify: Invalid senders, ie: doesnotex...@ourcharity.org will always be blocked, not scored (to do otherwise is crazy as you

[Assp-test] New Problem Request: Spam/NotSpam Reports CC'ed to Admins now missing details

Thanks for fixing the analyze reports being sent to the admin after a user sends in a spam/not-spam report. They're finally readable which really helps. Problem- the analyze reports that are emailed don't seem to to have any useful info. I do see who the report is from, but below that it has

Re: [Assp-test] Do NOT ever add aol, gmail, hotmail, etc to Known Good Helos?

interested in feedback. Feel free to use it however you see fit. Hope this helps someone. On Mon, May 4, 2015 at 11:58 AM, K Post nntp.p...@gmail.com wrote: So a helo matching say *.aol.com would also also stop a helo from from getting a bonus because it matches a known good helo? If so, GREAT

Re: [Assp-test] CC to admin of spam/not-spam reports coming through malformed

) On Tue, May 26, 2015 at 2:30 PM, Robert K Coffman Jr. -Info From Data Corp. bcoff...@infofromdata.com wrote: On 5/26/2015 12:45 PM, K Post wrote: Thanks Bob. I use a ported grep on Windows. I could also just search the Sorry, misunderstood your issue. I thought all your responses from SPAM

Re: [Assp-test] CC to admin of spam/not-spam reports coming through malformed

to search, I could see reports in real time and correct if necessary. On Tue, May 26, 2015 at 12:01 PM, Robert K Coffman Jr. -Info From Data Corp. bcoff...@infofromdata.com wrote: On 5/26/2015 11:34 AM, K Post wrote: For the time being I need to be able to monitor these as our users learn what

Re: [Assp-test] CC to admin of spam/not-spam reports coming through malformed

what should and should not be reported. On Tue, May 12, 2015 at 3:31 PM, K Post nntp.p...@gmail.com wrote: When users send in spam or not-spam reports, they get a nicely formatted thanks for the report email. It has the subject of the reported email in the subject name. Perfect! I now have

Re: [Assp-test] More MX and A record lookup issues

worker, that detects a DNS problem, will force the recheck and reordering of the all defined nameserver. Per default, assp checks all defined nameservers once in a minute. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum

Re: [Assp-test] fixes in assp 2.4.4 build 15141

' = 'password2', .., .. }; the admins will need to write there password anywhere in a BlockReport request mail at the start of any body line. Keep the email addresses in lower case ! Passwords are case sensitive and should not look like emailaddresses.. Thomas Von:K Post nntp.p

Re: [Assp-test] More MX and A record lookup issues

seconds - I think the numbers are selfexplaining. Thomas Von:K Post nntp.p...@gmail.com An: ASSP development mailing list assp-test@lists.sourceforge.net Datum: 21.05.2015 06:05 Betreff:Re: [Assp-test] More MX and A record lookup issues I ask if it's normal because I

Re: [Assp-test] fixes in assp 2.4.4 build 15140

I can read it. Sorry, I have no idea what you mean. On Thu, May 21, 2015 at 3:51 AM, Thomas Eckardt thomas.ecka...@thockar.com wrote: Does BlockReportAdmins honor rules in EmailDomainAdmins? If so, it might be good to indicate that in the GUI. I can read it. Thomas Von:K Post

Re: [Assp-test] More MX and A record lookup issues

I see no point in causing extra traffic if isn't not necessary, but this is NOT a point that's important enough to argue about. I'm done. On Thu, May 21, 2015 at 4:16 PM, Robert K Coffman Jr. -Info From Data Corp. bcoff...@infofromdata.com wrote: On 5/21/2015 3:27 PM, K Post wrote: network

<    2   3   4   5   6   7   8   9   10   11   >