[Assp-test] Despite DB: setting still writing files to spam folder

2014-04-11 Thread Michelle Dupuis
I'm running ASSP version 2.4.1(14097)? and have DB: set for all files/caches. I see the assp database is created, as well as other tables. However, while ASSP is running I still see new message files being created in the spam folder. Why? ASSP has been restarted many times and I startup I se

[Assp-test] crash on max files limit (when using DB)

2014-04-11 Thread Michelle Dupuis
I'm running ASSP 2.4.1 (14097), and once a week I find my assp crashed due to too many files open. I have the system limit set to 30 files. At the tail of the assp log I see the following errors: rker_2] Error: Worker_2 accept to client failed IO::Socket::INET=GLOB(0x7f762ec3d060) (timeou

[Assp-test] Constant crashes

2014-01-25 Thread Michelle Dupuis
About a month ago I moved to the latest ASSP 2 code, and also switched to MySQL databases for all records. About a week ago ASSP started crashing once a day, now it's a few times a day. I've included the perl dump below in case that helps...but can someone help me resolve this? I have no idea

Re: [Assp-test] fixes in assp 2.3.4 build 14025

2014-01-25 Thread Michelle Dupuis
Where can we download the new version? The latest version on the website is: ASSP_2.3.3_13335_install.zip (Which is crashing multiple times per day and driving me crazy) From: Thomas Eckardt [thomas.ecka...@thockar.com] Sent: Saturday, January 25, 2014

[Assp-test] 2.3.3 keeps crashing

2014-01-22 Thread Michelle Dupuis
I saw yesterday that someone else had the same problem. I managed to capture a traceback (below) - hopefully that helps diagnose the problems. # *** stack smashing detected ***: /usr/bin/perl /usr/local/assp/assp.pl MainLoop - next: Tue Jan 21 18:23:15 2014 terminated === Backtrace: ===

[Assp-test] stack smashing detected

2013-12-27 Thread Michelle Dupuis
I recently upgraded to the latest version of assp, and upgraded my perl as well (due to assp shutting down at night). Now I seem to get a more sever crash - coinciding with running the rebuildspamdb. Can someone help with how to fix? I downloaded only the latest assp.pl (do I need to downloa

Re: [Assp-test] Does ASSP generate a 550 response?

2013-12-23 Thread Michelle Dupuis
My paste chopped off a few chars, the error in the log is mailbox is unavailable. (in case that helps) From: Michelle Dupuis Sent: Monday, December 23, 2013 5:05 PM To: assp-test@lists.sourceforge.net Subject: Does ASSP generate a 550 response? Does ASSP ever

[Assp-test] Does ASSP generate a 550 response?

2013-12-23 Thread Michelle Dupuis
Does ASSP ever generate 550 responses to foreign mail systems sending in mail? Or only the mail host behind ASSP? (I have exchange 2007 sitting behind ASSP in case it matters) The reason I'm asking is that I see the occasional 550's in my ASSP log as shown below. I've disguised the domain a

[Assp-test] ASSP mistakenly returning 5.1.1 user unknown ?

2013-05-23 Thread Michelle Dupuis
I'm running ASSP version 2.2.1(13020) and when my mail server (box behind assp) is rebooting, ASSP is supposedly responding with a 5.1.1. user unknown (according to the MTA upstream). I checked the assp maillog for the time in question and I see this line: May-21-13 20:20:53 m1-82053-139071 [

[Assp-test] Why is spam prob score 0

2013-03-08 Thread Michelle Dupuis
My ASSP uses test mode. causing the subject to be prefixed with [SPAM] which I catch downstream. (in case that matters). The problem I'm having is that mail with a faked from address (different from MAIL FROM) is getting through unmarked. Below is an analysis of such a message. As you can se

[Assp-test] Becoming too complicated!

2012-10-20 Thread Michelle Dupuis
Based on my own experience and that of others (looking at the postings including the current MSGID discussion), I can help but wonder if ASSP configuration has gotten too complex. I'm not suggesting we drop features, but maybe the who way it is configured needs to be rethought!? Instead of hun

[Assp-test] Why is the message getting through

2012-10-06 Thread Michelle Dupuis
I'm running assp 2.2.1(12259), and thought I have everything configured right. The message below has several problems that should have caused ASSP to block it...but it didn't! Can someone help me figure out what is wrong? 1. The sender is forging an internal from address (mdup...@mydomain.co

[Assp-test] ASSP 2 installation question: moduleLoadErrors.txt

2012-09-21 Thread Michelle Dupuis
I'm installing ASSP 2 on a fresh new Centos 6 x64 system and am getting pretty far along. However, there are 4 errors (in the moduleLoadErrors.txt file) I can resolve - see below. Here's what i've done: 1. I install perl-Net-SNMP using yum, so why is error #1 there? 2. This module is not avail

[Assp-test] ASSP not trapping obvious forged signatures

2012-08-15 Thread Michelle Dupuis
A month ago I upgraded ASSP 2.2.1(12137) (and also moved to a new partition). Since then, my volume of spam getting through ASSP has increased considerably. Attached below is an example - clearly forged sender. Why isn't ASSP trapping this? I attached the analysis of the header below. Stra

Re: [Assp-test] Antwort: Missing DB_File wrong

2012-08-14 Thread Michelle Dupuis
- unzip it in the folder assp - change with CMD in to assp/assp.mod/install - edit the install.cmd if required and run it. Thomas Von:Michelle Dupuis An: "assp-test@lists.sourceforge.net" , Datum: 14.08.2012 15:32 Betreff:[Assp-test] Missing DB_File wrong I see this m

[Assp-test] Missing DB_File wrong

2012-08-14 Thread Michelle Dupuis
I see this message during rebuild: Aug-14-12 06:11:33 warning: 'useDB4Rebuild' is set to on, but 'BerkeleyDB' nor 'DB_File' are available - the rebuild spamdb process uses the internal 'orderedtie' and will possibly require more time and a large amount of memory - check 'OrderedTieHashTableSiz

Re: [Assp-test] Antwort: Still not catching falsified sender domain

2012-03-30 Thread Michelle Dupuis
ied sender domain >Why is ASSP not throwing out this message based on the obviously faked sender domain/ip possibly because you use an outdated version ? I think there was fix for this in the last months. Thomas Von:Michelle Dupuis An: "assp-test@lists.sourceforge.net" D

Re: [Assp-test] Still not catching falsified sender domain

2012-03-30 Thread Michelle Dupuis
I already had spfsoftfail set to on, but have added the domain to blockstricgSPFRE now. I think my confusion is - shouldn't ASSP be catching the obviously forged source domain not matching usps.com ? And since I already had spfsoftfail on, shouldn't assp have prepended the fail warning to t

[Assp-test] Assp bug spftestmode (was: Still not catching falsified sender domain)

2012-03-30 Thread Michelle Dupuis
alsified sender domain Have you tried the mail analyzer provided by ASSP, it might give you a clue as to why it is accepting it? On Fri, 30 Mar 2012 09:30:53 -0400, Michelle Dupuis wrote: > I'm still trying to get settings right (and I think I'm close), but > ASSP is failing to

[Assp-test] Still not catching falsified sender domain

2012-03-30 Thread Michelle Dupuis
I'm still trying to get settings right (and I think I'm close), but ASSP is failing to catch really obviously faked domains! I put the header below, and you can see that 168-226-66-116.speedy.com.ar is pretending to be usps.com. I run my mail through netdorm (and have setup netdorm correctly

[Assp-test] Strict SPF not working as expected? Why getting through?

2012-03-29 Thread Michelle Dupuis
The scam of the day seems to be fake billing notices from USPS. I have usps.com added to the strict SPF list. Still they are getting through. I'm slowly getting ASSP setup right, but I'm still missing something. I ran the header through the ASSP analyzer, and it didn't find a reason to blo

[Assp-test] Trying to block fake linkedin messages

2012-03-21 Thread Michelle Dupuis
My users are getting flooded with fake linkedin messages. I ran the message and header through the analyzer and got the info below. Can someone advise on what I need to adjust to trap these? Some notes, netdorm.com is a mail host I use to buffer incoming mail (so I trust it) - but there is no

[Assp-test] Remove last SMTP hop in list

2012-03-19 Thread Michelle Dupuis
(* apologizes - I sent same message to assp user list, but I'm using v2 so should have been sent here *) I'm setting up ASSP in an environment with an SMTP gateway at the network edge. So, all mail must flow through that SMTP gateway (relay) before hitting ASSP. This messes up a lot of ASSP fe

[Assp-test] Block mail forging own domain

2011-12-27 Thread Michelle Dupuis
I'm seeing mail coming in forging my own domain name. I've been through the settings twice but can't see an appropriate setting to block this. If my domain is bob.com how would I block any incoming mail appearing to originate from bob.com ? Thanks ---

[Assp-test] Strip out last MTA IP/host for checks?

2011-05-20 Thread Michelle Dupuis
We have an MTA on the edge through which all mail flows (and ASSP is behind it). Is there a way for Assp to strip off the last MTA IP/Hostname for bad host checks, etc? (I posted this a month ago to the -test list but got no response...sorry to bump)

[Assp-test] Regex causes 100% CPU?

2011-04-19 Thread Michelle Dupuis
I had a discussion going yesterday about the right regex to catch a certain URL. Here's the expression http\:\/\/[A-Za-z\.\/]+?\.(?:ru|ly|nl|ec|cc)(?:\s|\/|\n|\r) This works fine. Now I wanted to change the expression to catch a slash (/) as well as a backslash, so I changed the expression to

Re: [Assp-test] Antwort: Bombre not matching in v2

2011-04-19 Thread Michelle Dupuis
/\/[A-Za-z\.\/]+?\.(?:ru|ly|nl)\/? - or http\:\/\/[A-Za-z\.\/]+?\.(?:ru|ly|nl)(?:\s|\/|\n|\r) - are better read: http://perldoc.perl.org/perlretut.html Thomas Von:Michelle Dupuis An: "assp-test@lists.sourceforge.net" Datum: 19.04.2011 04:11 Betreff:[Assp-test]

[Assp-test] Bombre not matching in v2

2011-04-18 Thread Michelle Dupuis
I get a lot of spam which I'm trying to identify by a regex to match the URL in the body. I have the regex below entered into my bombre file, and the sample message below is NOT being caught by ASSP 2.0 Any idea why? The regex tester online suggest this should match...but assp isn't matching

[Assp-test] Missing x-assp-to

2011-04-18 Thread Michelle Dupuis
I (think) that assp 1.x added an x-assp-to in the header, so I could check who the message was intended for. Is there a way to turn this back on in assp v 2.x ? -- Benefiting from Server Virtualization: Beyond Initial Wo

Re: [Assp-test] FW: Name server errors - bug?

2011-04-17 Thread Michelle Dupuis
DNS is running fine and host is setup fine. So I hard coded the IP's into ASSP and now it seems happy. This is 64 bit activeperl. Many of the packages I needed were available through PPM so I grabbed source from CPAN and compile them in. Not a perl expert, so maybe that's an issue... ___

Re: [Assp-test] FW: Name server errors - bug?

2011-04-17 Thread Michelle Dupuis
Nope...IPv4. (IPv6 not even installed).. From: Grayhat [gray...@gmx.net] Sent: Saturday, April 16, 2011 1:06 PM To: ASSP development mailing list Subject: Re: [Assp-test] FW: Name server errors - bug? > That is a strange DNS => "Name Server p�" > It shoul

Re: [Assp-test] FW: Name server errors - bug?

2011-04-15 Thread Michelle Dupuis
ts, but can still be overridden by the other arguments to new().- Original Message - From: "Michelle Dupuis" To: "ASSP development mailing list" Sent: Saturday, April 16, 2011 9:42 AM Subject: Re: [Assp-test] FW: Name server errors - bug? > Yes I run my own DNS serve

Re: [Assp-test] FW: Name server errors - bug?

2011-04-15 Thread Michelle Dupuis
om a custom > configuration file override the the system's defaults, but can still be > overridden by the other arguments to new().- Original Message - > From: "Michelle Dupuis" > To: "ASSP development mailing list" > Sent: Saturday, April 16, 2011 9

Re: [Assp-test] FW: Name server errors - bug?

2011-04-15 Thread Michelle Dupuis
UseLocalDNS): Do you entries in ASSP's DNSServers (DNS Name Servers* (DNSServers))? I do NOT (it is blank)! I am on Linux. I too run an MTA (Postfix) as a 'front end' -before- ASSP. I have everything from the 'outside' sent through a gateway / forewall. I run my own DNS S

Re: [Assp-test] FW: Name server errors - bug?

2011-04-15 Thread Michelle Dupuis
S is not responding then you do see the "no answering DNS-SERVER found " The ASSP "ERROR: no answering DNS-SERVER found " is what I see when there is no access to external DNS (root-servers). Peter Peter Bowey Computer Solutions - Original Message - From: &quo

[Assp-test] Strip out last MTA IP/host for checks?

2011-04-15 Thread Michelle Dupuis
We have an MTA on the edge through which all mail flows (and ASSP is behind it). Is there a way for Assp to strip off the last MTA IP/Hostname for bad host checks, etc? -- Benefiting from Server Virtualization: Beyond Ini

[Assp-test] FW: Name server errors - bug?

2011-04-15 Thread Michelle Dupuis
I just switched to ver 2 of ASSP...feeling a bit bleeding edge. I'm running ASSP 2.0.1(2.0.19) on ActivePerl (win x64). Although my system's DNS entries are right, the assp log fills with these errors. Any idea how to fix? Apr-15-11 16:42:17 [Worker_1] Warning: Name Server p�: does no