cool Thomas, thanks for this!
i'm working right now on building a docker image of assp-stable.
it seems that the old "get mad installing everything from scratch again"
days are gone :-)
On Tue, Nov 29, 2016 at 2:26 PM, Thomas Eckardt
wrote:
> Hi all,
>
> an ASSP
Up! Anyone?
Il ven 12 ago 2016, 09:20 aquilinux <aquili...@gmail.com> ha scritto:
> Hi all, since about a month all scheduled block report are sent to users
> with an empty "From:" header. Block reports requested via email interface
> comes with the sender itself a
Hi all, since about a month all scheduled block report are sent to users
with an empty "From:" header. Block reports requested via email interface
comes with the sender itself as "From:" address instead.
The value of EmailFrom in config is antis...@mydomain.tld .
Any clue?
Running ASSP version
On Wed, May 11, 2016 at 2:35 PM, Thomas Eckardt
wrote:
> for example
[...]
I suppose there is a misunderstanding, sir.
I know how AFC works, and i think the latest AFC release is working as
expected.
my UserAttach is like: zip:domain=>block=>exe|js|bla|blabla|...
May-09-16 13:39:56 [Worker_1] Warning: fatal - libarchive extract
> >'/opt/assp/tmp/zip_1_1462793996/File_di_input' - <-25> -
>
> here '.../File_di_input' should be '.../File_di_input.xlsx' in every case
> - I can't find a code which removes the extension from the ar
filehandles. This caused in some cases
>
> SPAM FOUND bad attachment 'filename.ext' cause: 'possibly virus infected
> file (can't extract archive)'
>
> even the archive was successfully decompressed.
>
> Thomas
>
>
>
> Von:aquilinux <aquili...@gmail.com>
ly supports to use the
> 'Archive::Libarchive::XS' module as decompression engine. See the GUI
> update and the startup log.
>
> On linux, IMHO a libarchive installation is required before this module
> can be installed via CPAN.
> On windows with ActivePerl the 'Alien::Libarchive'
The issue showed up after LATEST modification of 4.27
On Tue, May 3, 2016 at 5:46 PM, aquilinux <aquili...@gmail.com> wrote:
> Huston, we have a problem!
> It seems that new AFC plugin is treating .csv files as archive.
>
> *May-03-16 17:29:16 [Worker_4] Info: analyzi
' does not match the content based detected file type '''*
obviously csv is not a forbidden extention as attachment
On Tue, May 3, 2016 at 1:59 PM, aquilinux <aquili...@gmail.com> wrote:
> 1) xz, lrz, lzma and 7z they all work:
>
> *May-03-16 13:47:40 [Worker_1] Warning: possibl
ue, May 3, 2016 at 1:32 PM, Thomas Eckardt <thomas.ecka...@thockar.com>
wrote:
> 7z - was my mistake - forgot it the regex
>
> File::Type does not know several formats - I'll have to fix them one by
> one - the lz formats should be fixed
>
> please download the plugin agai
not to be a compressed file*
On Tue, May 3, 2016 at 12:03 PM, Thomas Eckardt <thomas.ecka...@thockar.com>
wrote:
> >It works as expected.
>
> What have you tested?
>
> which executable?
> which compression formats?
>
> Thomas
>
>
>
>
>
> Von:aquilinux <aquili
It works as expected.
Thanks.
On Tue, May 3, 2016 at 11:53 AM, aquilinux <aquili...@gmail.com> wrote:
> Hi Thomas, thanks for the release.
> I'm testing it right now.
>
> On Tue, May 3, 2016 at 10:37 AM, Thomas Eckardt <
> thomas.ecka...@thockar.com> wrote:
>
&
t; For windows the required executables are included in the ppm installer for
> Archive::Rar at the ASSP2 repo.
>
> Thomas
>
>
>
>
>
> Von:aquilinux <aquili...@gmail.com>
> An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> D
>
> in practice, I don't know if it may be worth
i bet this will be the next virus packaging trend in a very close future :)
--
"Madness, like small fish, runs in hosts, in vast numbers of instances."
Nessuno mi pettina bene come il vento.
Hi Thomas, any chance in having assp processing rar archives?
regards,
aqx
--
"Madness, like small fish, runs in hosts, in vast numbers of instances."
Nessuno mi pettina bene come il vento.
--
Find and fix application
stop-start again solved the issue...
thanks.
On Fri, Apr 15, 2016 at 10:49 AM, Thomas Eckardt <thomas.ecka...@thockar.com
> wrote:
> I see the ASSP_AFC version reported right. Check the downloaded Plugin
> again.
>
> Thomas
>
>
>
>
>
> Von:aquilinux
my fault, sorry.
On Thu, Mar 31, 2016 at 10:22 AM, Thomas Eckardt <thomas.ecka...@thockar.com
> wrote:
> >Too many open files
>
> This is an error of the OS - - ulimit?
>
> Thomas
>
>
>
>
> Von:aquilinux <aquili...@gmail.com>
>
On Thu, Mar 31, 2016 at 12:17 PM, Thomas Eckardt wrote:
> >And by "regular flow" i mean the full route of the email, from sender to
> recipient inbox.
>
> Simply configure assp this way.
>
> >run ALL the checks/plugins even if the MessageLimit is reached
>
>
On Tue, Mar 29, 2016 at 11:52 AM, Thomas Eckardt wrote:
> At this time, there is no way to call a plugin from inside the resend
> function. Extracting the missing runtime data from the 'X-ASSP-' headers
> would be possible and ok for a simple regular resend. But
This is happening rather frequently (once a day):
Mar-31-16 09:21:18 [Worker_7] Error: Worker_7 accept to client failed
IO::Socket::INET=GLOB(0x7efbf7c4ba50) (timeout: 2 s) : Too many open files
Mar-31-16 09:21:20 [Worker_7] Error: Worker_7 accept to client failed
Hi James,
with build 16081files were unexpected moved from 'spam' to
'discarded' if 'MaxAllowedDups' was set to zero.
Move them back.
Il mer 30 mar 2016, 02:27 James Brown ha scritto:
> I’ve set autoCorrectCorpus to: 0.99-1.01-4000-14 and this used to work to
> bring
Hi there, just a question on assp logic:
If a mail gets blocked by MessageLimit before it reaches the AFC plugin,
will the resend of this mail trigger the AFC plugin? i'm asking because
behind 98% of my AFC blocks there is a malware/script that is still not
catch by ClamAV.
My concern is that (as
e files again at restart!
>
> Thomas
>
>
>
> Von:aquilinux <aquili...@gmail.com>
> An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Datum: 23.03.2016 14:23
> Betreff:Re: [Assp-test] urgent: after assp 16081 all mails older
&
On Wed, Mar 23, 2016 at 2:23 PM, Doug Lytle wrote:
> no blocked email found in the last 2 day(s)
this is weird, since my blockreports have always worked.
the only issue was the missing resend link (since the mail could not be
found on disk)...
--
"Madness, like small
ay use grep (for /assp/spam/eml) running over the
> ...maillog.txt files - replace 'spam' with 'discarded' and move the
> file(s)
>
> Thomas
>
>
>
>
>
> Von:aquilinux <aquili...@gmail.com>
> An: ASSP development mailing list <assp-te
'discarded'
> folder.
>
> You may move the files back - but don't restart assp or if you need to
> restart - set 'MaxAllowedDups' before to one million or so
>
> Thomas
>
>
>
>
>
> Von:aquilinux <aquili...@gmail.com>
> An: ASSP development mailing li
UseSubjectsAsMaillogNames is checked
MaxAllowedDups set to 0
always been this way
On Wed, Mar 23, 2016 at 10:40 AM, Thomas Eckardt <thomas.ecka...@thockar.com
> wrote:
> are
>
> UseSubjectsAsMaillogNames
> and
> MaxAllowedDups
>
> configured (enabled)?
>
>
it seems that only spam folder is affected.
notspam folder is ok.
On Wed, Mar 23, 2016 at 10:21 AM, Thomas Eckardt <thomas.ecka...@thockar.com
> wrote:
> this happens to all folders or only to 'spam' ?
>
> Thomas
>
>
>
>
>
> Von:aquilinux <aquili...@g
Hi Thomas, this is a major issue i think.
Today the blockreport mail reported all blocked mails without the resend
link.
Investigating on the server, all the mail stored yesterday (and days
before) have been deleted... :(
In the spamlog folder there are ony mails from today on, except those
On Thu, Feb 18, 2016 at 5:01 PM, Thomas Eckardt
wrote:
> - install openssl from source first
i did download openssl-1.0.1r.tar.gz and usual .config/make/checkinstall
but i lost the binary openssl...
ASSP was reporting openssl-lib updated, but was missing openssl
Hi Thomas, hi all, i have the usual questions about upgrading ASSP.
Sorry but i have to double-check everything just to be sure i will have no
regression or troubles.
I'll be taking a VM snapshot before the update but i really don't want to
be doing a rollback.
Here is my checklist, mostly from
Dumb question: are your helo checks configured not to score/block
whitelisted?
Regards,
aqx
Il giorno dom 7 dic 2014 08:15 krz...@gmail.com krz...@gmail.com ha
scritto:
ASSP version 2.4.1(14132)
whiteListedDomains contains sen...@domain.com = *@mydomain.com
# cat maillog.txt |grep
Hi.
I'm testing this feature in my test environment.
no sure what i should see but when i set SessionLog to verbose in addition
to normal log I see only a lot of:
Dec-01-14 12:35:50 m1-33747-02917 [Worker_1] [TLS-out] [PTRinvalid]
199.103.5.118 sen...@out.com to: m...@mydomain.com info: Maillog -
On Mon, Dec 1, 2014 at 1:05 PM, Thomas Eckardt thomas.ecka...@thockar.com
wrote:
This means, that you don't collect all files - for this type of files
'nocollect' is set.
On my production servers i have no collect only for:
*NonSpamLog *
*baysNonSpamLog*
*noProcessingLog*
all the others
One thing i suggest is setting spfpValencePB to 0.
Since SPF is very easily deployable negative bonuses on spf=pass can do
more harm than good.
The only SPF check that makes sense for me is BlockSPFStrict. I will also
intentionally fail SPF softfails since softfail is logically unacceptable
on
There's more.
The IP appears on barracuda DNSBL list (http://www.dnsbl.info).
So you can consider adding this resource to your DNSBL lists file (but
beware that barracuda list is quite coarse).
That's all for now.
Regards,
aqx
Il giorno mer 26 nov 2014 06:50 aquilinux aquili...@gmail.com ha
to be
involved:
SNMPLog:=0
SNMP:=0
useNetSNMPagent:=0
Now ASSP is starting and hopefully working as it always used to.
Regards
Dirk
-Ursprüngliche Nachricht-
Von: aquilinux [mailto:aquili...@gmail.com]
Gesendet: Mittwoch, 5. November 2014 05:54
An: ASSP development mailing list
try setting a higher open files limit.
you can see actual value with *ulimit -n* and set new value with *ulimit -n
value*.
2048 should be reasonably high to allow your assp to start (*ulimit -n 2048*
)
regards,
On Tue, Nov 4, 2014 at 10:29 PM, Dirk Kulmsee d.kulm...@netgroup.de wrote:
Hi
the message is bypassing the
virus scan (clamAV in this case).
if i'm missing something, please tell me how can i achieve a full virus
scan for all emails.
using ASSP version 2.4.2(14190)
ScanWL, ScanNP, ScanLocal and ScanCC are ON.
regards,
aquilinux
--
Madness, like small fish, runs in hosts
Hi there, thanks for the fix.
Will these fixes be released as a stable build 2.4.1?
Will I need module updates or additional files (others than assp.pl and
version.txt) if i'll be switching from 2.4.1 (14132) to 2.4.2 (14188)?
The blockreport issue is really a pain.
Regards,
aqx
On Mon, Jun 16,
sorry i hijacked an old post (it was for build 14167).
my questions about when will this fixes will be released to stable assp it
was meant for this build 14188.
can you confirm it will be in the next days?
thanks.
regards,
aqx
On Mon, Jul 7, 2014 at 6:21 PM, Thomas Eckardt
, Grayhat gray...@gmx.net wrote:
:: On Tue, 8 Jul 2014 16:09:42 +0200
:: calxbza9ccstpgcbsvz2demmnduodgptlejv-4uoemfvssrx...@mail.gmail.com
:: aquilinux aquili...@gmail.com wrote:
sorry i hijacked an old post (it was for build 14167).
my questions about when will this fixes will be released
often) a major bug comes in like in build 14177. But even if
this happens (I'm sorry guys) - the previouse dev version is still better
than the latest 'stabil' version.
Thomas
Von:aquilinux aquili...@gmail.com
An: ASSP development mailing list assp-test@lists.sourceforge.net
,
aquilinux
--
Madness, like small fish, runs in hosts, in vast numbers of instances.
Nessuno mi pettina bene come il vento.
--
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet
Hi all,
i'm having an issue dealing with BATV and DSN, not strictly related to ASSP
but i thought it wouldn't harm posting here:
whenever I send a mail to a non-existent external address, my postfix MTA
hands the DSN message back to Exchange 2010 who doesn't know about BATV
tag, hence it doesn't
for RebuildSpamDB)
they shouldn't appear on blockreports. Giving the user the chance to get a
resend for them is misleading.
Regards,
On Fri, Jan 10, 2014 at 3:32 PM, aquilinux aquili...@gmail.com wrote:
Hi all. i've been told by many users that sometimes resent spam mails are
missing body
Hi all. i've been told by many users that sometimes resent spam mails are
missing body or attachment.
I've seen this myself looking at some emails in spam folder, even if a test
spam mail i sent myself released via resend link was forwarded correctly,
with body and attachment.
Mails and
Hi there.
Any chance to have a configuration option to enforce this behaviour?
Something like Resend requests go to the intended recipient
I really like ASSP but this issue is driving me nuts, since in this case
i have to make extensive use of *noProcessing *for many *To:* recipients,
thanks for the tip Paul.
Sanesecurity with Foxhole works like a charm.
Regards,
On Fri, Dec 20, 2013 at 8:21 PM, Paul Whelan paul...@blakecomp.co.ukwrote:
On 20 Dec 2013 at 15:51, aquilinux wrote:
Hi all,
I'm using attachment blocking to block Level1 extensions for all users:
exe|scr
Hi all,
I'm using attachment blocking to block Level1 extensions for all users:
exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab]
but an .exe inside a .zip passed thru.
Does attachement blocking look inside archives?
How can i block this kind of exploit?
I scanned the .exe with
groups after
the '=' is not allowed for this parameter
Thomas
Von:aquilinux aquili...@gmail.com
An: ASSP development mailing list assp-test@lists.sourceforge.net,
Datum: 19.12.2013 17:44
Betreff:Re: [Assp-test] Resend requested by other user not going
to original
Ok, this was my quick and dirty solution, but:
Mail from any of these addresses can add/remove to/from redlist,
spamlovers, noprocessing, blacklist. May request an EmailBlockReport for a
list of users.
This is not very good for security.. and privacy too...
Regards,
Il 20/dic/2013 17:51
Hi all.
This is what is happening:
in my organization some local email addresses (ie. gr...@me.tld) are
catched by a shared web interface by which a group of users can work and
manage emails by their browsers.
Of course when a BlockReport contains a resend link and a user clicks it,
it opens the
i had same problems with EICAR test.
i don't know why but it was not detected when coming through assp.
i tried with a real virus and assp+clamav detected it.
here is my post on the forum: http://goo.gl/De93iQ
cheers.
On Fri, Dec 6, 2013 at 11:29 AM, Pontus Hellgren
Hi all.
Does exist something like *reportpersblack* for whitelisted addresses?
Like sending an empty mail to *EmailWhitelistAdd *...
Thanks.
--
Madness, like small fish, runs in hosts, in vast numbers of instances.
Nessuno mi pettina bene come il vento.
the default ASSP domain.
-Original Message-
From: aquilinux [mailto:aquili...@gmail.com]
Sent: 03 December 2013 10:27
To: ASSP development mailing list
Subject: Re: [Assp-test] how to report spam with MS Outlook (assp 2.3.3
13276)
I don't think authentication (lack of it) is a problem
Solved.
Mail Contact needs to have the option use MAPI RTF set to Never.
Thanks to all for the support :-)
On Wed, Dec 4, 2013 at 10:55 AM, aquilinux aquili...@gmail.com wrote:
This thing really was driving me crazy, but i think i found where the
problem lies.
But why and how to solve
: aquilinux [mailto:aquili...@gmail.com]
Sent: 02 December 2013 17:57
To: ASSP development mailing list
Subject: Re: [Assp-test] how to report spam with MS Outlook (assp 2.3.3
13276)
Please, post your relevant config entries for email interface, smtp
destinations and local domains. I don't use auth
: aquilinux [mailto:aquili...@gmail.com]
Sent: 30 November 2013 10:03
To: ASSP development mailing list
Subject: Re: [Assp-test] how to report spam with MS Outlook (assp 2.3.3
13276)
I set either .eml or .msg as MaillogExt with the same result. In the logs
i attached i set .msg (as you can see
my config.
The domain I use is set in localdomains.txt so that is unlikely to be the
issue.
The only thing I don't see in your logs is authentication which is in
mine..
-Original Message-
From: aquilinux [mailto:aquili...@gmail.com]
Sent: 02 December 2013 16:18
To: ASSP
found in header tags
All the best,
Colin Waring
-Original Message-
From: aquilinux [mailto:aquili...@gmail.com]
Sent: 29 November 2013 14:04
To: ASSP development mailing list
Subject: [Assp-test] how to report spam with MS Outlook (assp 2.3.3 13276)
Hi all,
i'm testing spam report
-
From: aquilinux [mailto:aquili...@gmail.com]
Sent: 30 November 2013 08:59
To: ASSP development mailing list
Subject: Re: [Assp-test] how to report spam with MS Outlook (assp 2.3.3
13276)
Hi Colin,
what puzzles me is:
Nov-29-13 14:58:18 [Worker_1] Spam-Report: (no attachment
Hi all,
i'm testing spam report with MS Outlook 2010 but i cannot get attached
files to be detected.
i'm sending spam emails to email interface address (mail-spam@assp.local)
forwarding them as attachments, one per email.
my assp flow is:
outlook - exchange -- assp + postfix -- Internet
But
heya,
i'm experiencing a problem with email interface functions.
all mail sent to white, notwhite, red and notred do not trigger the desired
action.
on the other way, all reports replies work (i.e. if i ask for help, white,
notwhite, red and notred i always get a mail back with my customized
In outlook 2010 users can choose to request a delivery and/or a read
receipt to the recipient.
My former antispam (Mailcleaner, i.e mailscanner + exim), which i used for
delivering outbound messages as well, let Exchange server to request the
delivery receipt.
Now that we are on ASSP + postfix
thanks all for your tips.
i can't afford the risk of the process being killed (even hypotethic).
so i think i will stay on 13276, at least in my production env.
i'll try 2.3.4 on my test env, upgrading all packages/modules and
installing missing modules before starting 2.3.4 .
Should I experience
the 'version.txt' file
- read the changelog
Thomas
Von:aquilinux aquili...@gmail.com
An: ASSP development mailing list assp-test@lists.sourceforge.net,
Datum: 05.11.2013 09:38
Betreff:[Assp-test] upgrading from ASSP version 2.3.3(13276) to
2.3.4(latest)
hi all.
is there any
hi all.
is there any caveat or recommendation or special modules/packages
requirements for upgrading from ASSP version 2.3.3(13276) to version
2.3.4(latest)?
i'm running a 2 hosts production system on Linux, perl 5.14, all databases
as tables on Mysql.
What i'd like to avoid is:
- database tables
was changed.
Thomas
Von:aquilinux aquili...@gmail.com
An: ASSP development mailing list assp-test@lists.sourceforge.net,
Datum: 22.10.2013 16:54
Betreff:[Assp-test] triggering Redlist reload
Hi all,
i set up a scheduled script to export all OutOfOffice mail addresses from
Hi all,
i set up a scheduled script to export all OutOfOffice mail addresses from
Exchange into the redlist file.
Is it possible to reload redlist upon file change (automatically, or by
triggering a command) and not only by accessing, changing and saving the
file via GUI?
thanks!
--
Madness,
fixed before going into production next
month.
thanks again for your efforts, ASSP really kicks the ass :-)
cheers!
On Wed, Oct 16, 2013 at 1:15 PM, Thomas Eckardt
thomas.ecka...@thockar.comwrote:
ASSP_OCR.pm version 2.14 removes the spaces from the file name.
Thomas
Von:aquilinux
-contrast
/opt/assp/tmp/.tesseract_x_temp_1381736958354.tif, 256*
is imagemagick not able to deal with file names containing whitespaces on
linux ?
or is there anything else wrong in this command?
Thomas
Von:aquilinux aquili...@gmail.com
An: ASSP development mailing list assp
, Oct 7, 2013 at 4:17 PM, Thomas Eckardt
thomas.ecka...@thockar.comwrote:
try ASSP_OCR.pm version 2.12 (just released)
Thomas
Von:aquilinux aquili...@gmail.com
An: assp-test@lists.sourceforge.net,
Datum: 07.10.2013 13:37
Betreff:[Assp-test] ASSP_OCR errors
Hi all
i will try, thanks.
On Mon, Oct 7, 2013 at 4:17 PM, Thomas Eckardt
thomas.ecka...@thockar.comwrote:
try ASSP_OCR.pm version 2.12 (just released)
Thomas
Von:aquilinux aquili...@gmail.com
An: assp-test@lists.sourceforge.net,
Datum: 07.10.2013 13:37
Betreff:[Assp-test
Hi all.
I'm running ASSP version 2.3.3(13276) with Perl v5.14.2 on a Ubuntu x86_64
box.
I'm getting this error since ASSP deployment:
ASSP_OCR::get_ocr(), imagemagick convert problem? /usr/local/bin/convert
/opt/assp/tmp/ocr_pl13807957101765image001.jpg -compress none -colorspace
rgb -contrast
75 matches
Mail list logo