[Assp-test] Feature request: Day of Week in Maillog file selection

2020-12-15 Thread K Post
I find users saying "can you check the logs for an email from XYZ from last Monday or Tuesday?" It would be helpful if I could see the day of the week next to the dates that are displayed when you click the question mark that lists maillog numbers and their dates. If it's not a big deal, could yo

Re: [Assp-test] Feature request - adding IP to lists from Gui, add date / note

2020-11-02 Thread K Post
> 1.2.3.4 # added by Global-Penalty-Box Server - [possibly a > comment] - 2020-08-08 12:48:12 > > the next release will have it > > > Thomas > > > > Von:"K Post" > An:"ASSP development mailing list" < > a

Re: [Assp-test] Feature request - adding IP to lists from Gui, add date / note

2020-10-29 Thread Thomas Eckardt
1.2.3.4 # added by Global-Penalty-Box Server - [possibly a comment] - 2020-08-08 12:48:12 the next release will have it Thomas Von:"K Post" An: "ASSP development mailing list" Datum: 29.10.2020 13:17 Betreff: Re: [Assp-test] Feature request - adding I

Re: [Assp-test] Feature request - adding IP to lists from Gui, add date / note

2020-10-29 Thread K Post
checking in on this. Any thoughts? On Tue, Sep 29, 2020 at 3:58 PM K Post wrote: > If it's not too difficult to implement, would it be possible when adding > an IP to blocklists to automatically add the date it was added and possibly > a space for a note to be added? > > For example if I add an

[Assp-test] Feature request - adding IP to lists from Gui, add date / note

2020-09-29 Thread K Post
If it's not too difficult to implement, would it be possible when adding an IP to blocklists to automatically add the date it was added and possibly a space for a note to be added? For example if I add an IP to a list from /ipaction I get 1.2.3.4 # added by GUI Action - - via MaillogTail I

[Assp-test] Feature request: Failed before on SSL/TLS

2019-08-15 Thread Scott MacLean
Without doubt the biggest management headache I have with ASSP is the SSL/TLS DDoS feature. When SSL fails, for whatever reason: Aug-14-19 14:48:09 [Worker_2] Error: Worker_2 accept_SSL to client 111.222.333.444 failed IO::Socket::SSL=GLOB(0x1089bb828) (timeout: 5 s) : SSL accept attempt failed b

Re: [Assp-test] Feature request: Daily report of error reports

2017-02-18 Thread K Post
.1:5/maillog?wrap=2&color=1&tailbyte=1&search=[spam+ > found]&order=0&nocontext=1&nohighlight=1&size=2&files= > files&limit=100#MlTop > > to prevent the login popup, define the user:passord in the URL - o

Re: [Assp-test] Feature request: Daily report of error reports

2017-02-17 Thread Thomas Eckardt
l think about this feature request. Thomas Von:K Post An: ASSP development mailing list Datum: 17.02.2017 20:36 Betreff:Re: [Assp-test] Feature request: Daily report of error reports And while I'm at it, I'll request this too: Add an option to show messages marked with

Re: [Assp-test] Feature request: Daily report of error reports

2017-02-17 Thread K Post
And while I'm at it, I'll request this too: Add an option to show messages marked with the Spam prefix - messages that are probably spam but fell below the threshold - to the blockreport (noted as not needing to be resent if not spam) Again, something like this would help an admin improve ASSP acc

[Assp-test] Feature request: Daily report of error reports

2017-02-17 Thread K Post
I find the nightly report that I get of all blocked mail to be *incredibly* helpful. I use it to resend mail and see how the server's doing in general. Would it be possible to have a similar report sent to the admin of error reports (mail sent to the EmailSpam and EmailNotSpam addresses)? That wo

Re: [Assp-test] Feature request

2016-09-23 Thread Thomas Eckardt
rintable characters per default! Thomas Von:Gooegg An: 'ASSP development mailing list' Datum: 22.09.2016 17:19 Betreff: [Assp-test] Feature request Hi all, I would like to know if it could be possible to have and separate Msg/IP scorring for messages with non

Re: [Assp-test] Feature request

2016-09-22 Thread admin-at-extremeshok-dot-com
+1 __.https://eXtremeSHOK.com .__ On 22-Sep-16 4:59 PM, Gooegg wrote: > Hi all, > > I would like to know if it could be possible to have and separate Msg/IP > scorring for messages with non printable characters in > undecod

[Assp-test] Feature request

2016-09-22 Thread Gooegg
Hi all, I would like to know if it could be possible to have and separate Msg/IP scorring for messages with non printable characters in undecoded subject (RFC2047) or have a way to disable just that that check? I'am asking this because I have a rather large user base of mostly french speaking p

Re: [Assp-test] Feature request - IP address update from domain

2014-08-27 Thread Daniel Miller
hoice to query DNS. > > Thomas > > > > > > Von:"Daniel L. Miller" > An: ASSP development mailing list > Datum: 26.08.2014 22:26 > Betreff:[Assp-test] Feature request - IP address update from > domain > > > > Anyone else experi

Re: [Assp-test] Feature request - IP address update from domain

2014-08-26 Thread Thomas Eckardt
se DNS to find MX records for address/domain and remove from any Black/Blocklists Use the OS tools or any tool/webpage of your choice to query DNS. Thomas Von:"Daniel L. Miller" An: ASSP development mailing list Datum: 26.08.2014 22:26 Betreff: [Assp-test] Feat

[Assp-test] Feature request - IP address update from domain

2014-08-26 Thread Daniel L. Miller
Anyone else experienced this? Current operation: 1. A customer/vendor tries to send me an email - ASSP blocks it for what would otherwise be good reason. 2. Badly configured remote immediately tries to resend multiple times - ASSP places in Penalty Blacklist. 3. Office staff complain unable

[Assp-test] Feature request: Auto-whitelist also removes from black, grey, pb, ip

2013-03-21 Thread Daniel L. Miller
The auto-whitelist solves almost all my needs. Almost. The penalty blacklisting works wonders at killing all kinds of misbehaving spammers - but sometimes I'll have a bonehead remote sender trying to send us something, and when they get rejected they just keep sending until they're on the vari

[Assp-test] (feature request) DoNoSpoofing very own SpamError

2012-12-08 Thread krz...@gmail.com
How about diffrent SpamError just for DoNoSpoofing? One could explain how to get yourself into noSpoofingCheckDomain while not confusing normal false-positive spam sender (which gets SpamError) -- LogMeIn Rescue: Anywhere,

[Assp-test] Feature request for 2.x and 1.x

2012-11-03 Thread TR Shaw
For virus file scan there are two possible returns "good" and "bad." I am implementing Adobe's malware classifier with ASSP which returns 0 = CLEAN, 1 = DIRTY, or UNKNOWN. I would like 1) to add a "maybe" and 2 have someone tell me how "good" and "bad" gets scored. I will be happy to repor

Re: [Assp-test] Feature request.

2012-09-10 Thread Anders Westin
Hi Colin Thanks for the tip will look at this ASAP. /Anders From: Colin To: assp-test@lists.sourceforge.net Date: 2012-09-10 15:10 Subject:Re: [Assp-test] Feature request. Have a look at the following options: uniqeIDLogging uniqueIDPrefix Should do what you are asking

Re: [Assp-test] Feature request.

2012-09-10 Thread Colin
Have a look at the following options: uniqeIDLogging uniqueIDPrefix Should do what you are asking for already. All the best, Colin Waring. On 10/09/2012 13:59, Anders Westin wrote: > Hi Thomas > > Is it possible to get a some sort of session id in the log, that follows > from connection to disc

[Assp-test] Feature request.

2012-09-10 Thread Anders Westin
Hi Thomas Is it possible to get a some sort of session id in the log, that follows from connection to disconnection and it must be unique? it would be great to have when you tracking messages in the log and maybe the id should added in the mail header. something like this (sampleid can be anyt

[Assp-test] Feature request: independent maillog interface

2012-08-07 Thread Daniel Miller
My apologies for any typos - doing this from my phone.  I just had an instance where my office was complaining about blocked senders while I was out. I tried to remotely access assp via my phone & vpn, but couldn't get the page to load.  Falling back to ssh, I found in the log that aol had been

[Assp-test] Feature Request: Scoring Stats

2012-07-30 Thread Daniel L. Miller
At this time, unless I misunderstand, the statistics shown under "Message Statistics" are for messages that are specifically blocked by each category. So those tests that are specifically set to "block" will show in these counters. However, all tests that are set to "score" have no representa

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-27 Thread Charles Marcus
On 2012-07-27 1:37 AM, Daniel L. Miller wrote: > On 7/25/2012 10:54 AM, Charles Marcus wrote: >> Ok, well... >> >> Can you point me to documentation that explains how to setup ASSP such >> that it totally bypasses/disables all of the 'SMTP Proxy' functionality, >> so that it works only as a post-q

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-26 Thread Daniel L. Miller
On 7/25/2012 10:54 AM, Charles Marcus wrote: > Ok, well... > > Can you point me to documentation that explains how to setup ASSP such > that it totally bypasses/disables all of the 'SMTP Proxy' functionality, > so that it works only as a post-queue Content Filter? > Did my last ASSP list-post prov

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Daniel L. Miller
On 7/25/2012 10:54 AM, Charles Marcus wrote: > On 2012-07-25 1:33 PM, Fritz Borgstedt wrote: >> ASSP development mailing list schrei >> bt: >>> Could you (or Thomas) at least comment on the possibility/viability >>> of splitting ASSP's functionality into pre and post processing 'modes' >>> or 'mo

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the per u

2012-07-25 Thread Daniel L. Miller
On 7/25/2012 9:38 AM, Charles Marcus wrote: > On 2012-07-25 11:23 AM, Fritz Borgstedt wrote: >> ASSP 1.9 is rocksolid and can be used pre/post. > Understood, and thanks, but I would need full/solid SSL/TLS support, so > v1 is no longer an option for me. > >> ASSP 2 is rocksolid and can be used pre

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the per u

2012-07-25 Thread Steve Moffat
Absolutely Sent from my Android phone using TouchDown (www.nitrodesk.com) ASSP 1.9 is rocksolid and can be used pre/post. ASSP 2 is rocksolid and can be used pre/post. -- Live Security Virtual Conference Exclusive li

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Fritz Borgstedt
ASSP development mailing list schrei bt: > >Can you point me to documentation that explains how to setup ASSP such > >that it totally bypasses/disables all of the 'SMTP Proxy' functionalit >y, >so that it works only as a post-queue Content Filter? Use listenPort for input from from (pre) queue

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Charles Marcus
On 2012-07-25 1:33 PM, Fritz Borgstedt wrote: > ASSP development mailing list schrei > bt: >> Could you (or Thomas) at least comment on the possibility/viability >> of splitting ASSP's functionality into pre and post processing 'modes' >> or 'modules' (for lack of a better term), so that we would

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Fritz Borgstedt
ASSP development mailing list schrei bt: > >Could you (or Thomas) at least comment on the possibility/viability of > >splitting ASSP's functionality into pre and post processing 'modes' or > >'modules' (for lack of a better term), so that we would have the optio >n >of only implementing the conte

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Charles Marcus
On 2012-07-25 12:46 PM, Fritz Borgstedt wrote: > ASSP development mailing list schrei > bt: >> That said - and again, *please* do not take offense - but >> complaints about new versions of v2 locking up/freezing/etc abound >> on the assp-test list, > There is a production version of ASSP V2 and

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the pe

2012-07-25 Thread Fritz Borgstedt
ASSP development mailing list schrei bt: >That said - and again, *please* do not take offense - but complaints >about new versions of v2 locking up/freezing/etc abound on the assp-te >st >list, There is a production version of ASSP V2 and a development version. Us e the production version an

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the per u

2012-07-25 Thread Charles Marcus
On 2012-07-25 11:23 AM, Fritz Borgstedt wrote: > ASSP 1.9 is rocksolid and can be used pre/post. Understood, and thanks, but I would need full/solid SSL/TLS support, so v1 is no longer an option for me. > ASSP 2 is rocksolid and can be used pre/post. Well, I know a lot of mail admins who are p

Re: [Assp-test] Feature Request - Content-Filter-Only mode, with all of the per u

2012-07-25 Thread Fritz Borgstedt
ASSP 1.9 is rocksolid and can be used pre/post. ASSP 2 is rocksolid and can be used pre/post. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has cha

[Assp-test] Feature Request - Content-Filter-Only mode, with all of the per user Block Reporting/Training features intact

2012-07-25 Thread Charles Marcus
Hello, I'm just seeing if this is something that the devs would even consider... I love ASSP, but I had to stop using it a long time ago (when the new v2 development took off thanks to Thomas joining the project) because for our needs, it was just a much too fast moving target, and more import

Re: [Assp-test] Feature request v1.9.3.2

2012-04-04 Thread Barry den Hertog
Fritz, Thank you! Will update asap. Barry -Oorspronkelijk bericht- Van: Fritz Borgstedt [mailto:f...@iworld.de] Verzonden: woensdag 4 april 2012 16:48 Aan: ASSP development mailing list Onderwerp: Re: [Assp-test] Feature request v1.9.3.2 There is new dev version here: http

Re: [Assp-test] Feature request v1.9.3.2

2012-04-04 Thread Fritz Borgstedt
There is new dev version here: http://downloads.sourceforge.net/project/assp/ASSP%20Installation/Auto Update/ASSP1dev/assp.pl.gz with - Hide IP in 'Received:' header (HideIP) If set, ASSP will hide the IP and HELO in the 'Received:' header for l ocal connections --

Re: [Assp-test] Feature request v1.9.3.2

2012-04-04 Thread Barry den Hertog
Perhaps that should be a beter solution: all valid senders/clients will be touched/changed then. Thanks, Barry -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: woensdag 4 april 2012 16:15 To: ASSP development mailing list Subject: Re: [Assp-test] Feature request

Re: [Assp-test] Feature request v1.9.3.2

2012-04-04 Thread Fritz Borgstedt
ASSP development mailing list schrei bt: > >The changed code checks if the connecting IP exists in acceptAllMail a >nd, >when matched, inserts the fake ip 127.0.0.1 and hostname internal. Whe >n not >match: nothing changes. Should tis only be done for IPs in acceptAllMail or for all local co

[Assp-test] Feature request v1.9.3.2

2012-04-04 Thread Barry den Hertog
Hi Fritz, First of all thank you for doing such great work! I've got a feature request for the 1.x ASSP versions. When sending an e-mail from the local network to an external address, my clients connect to the ASSP server directly. This connection is registered as a received-hop in the message h

[Assp-test] Feature request

2012-01-05 Thread TR Shaw
I would like an option to, for every url processed with URIBL's, convert the host name to IP and then query the DNSBL's. Tom -- Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex infrastructure or v

[Assp-test] Feature Request Senderbase

2011-03-10 Thread Matti Haack
Hello, I would like to have a function in ASSP to get a list of all entires of the SBcache (or the new entries from the last x days), which are not already added to the SB-Whitelist and have a button or link there to move them to the Whitelist. actually, from time to time, I look into the

[Assp-test] Feature Request

2011-03-06 Thread Daniel L. Miller
From the mail log view, make mail & server addresses appear as links which when clicked give options for adding/removing from white/redlist. -- Daniel -- What You Don't Know About Data Connectivity CAN Hurt You This pap

Re: [Assp-test] Feature Request 1.8.x (hopefully a simple one)

2011-01-27 Thread Hill, Brett
> -Original Message- > From: Hill, Brett [mailto:hil...@nlbusa.com] > Sent: Wednesday, January 26, 2011 9:26 AM > To: assp-test@lists.sourceforge.net > Subject: [Assp-test] Feature Request 1.8.x (hopefully a simple one) > > Can you add a button to the ASSP interface

[Assp-test] Feature Request 1.8.x (hopefully a simple one)

2011-01-26 Thread Hill, Brett
Can you add a button to the ASSP interface to manually force an auto-update (a way to manually start the auto-update process)? It would remove a lot of steps for checking for a more recent version than what was already downloaded. I don't see anything like this in the current 1.8.5.3 version y

Re: [Assp-test] Feature Request: auto update support files

2010-10-11 Thread Andrew Porter
One way to cope with locally modified versions of files that originate in the ASSP source repository is to actually have 2 files for all the file: files read by ASSP. The original file could be read as file:data/BombExpression.txt and the local as file:data/BombExpression.local.txt or similar f

Re: [Assp-test] Feature Request: auto update support files

2010-10-10 Thread Daniel L. Miller
On 10/10/2010 12:32 AM, Thomas Eckardt wrote: > A real good implementation of an autoupdate of the support files is very > difficult, because we need a line versioning not only a file versioning. > This feature is still in conceptionel development. > > To get notified about changed files in the '

Re: [Assp-test] Feature Request: auto update support files

2010-10-10 Thread Thomas Eckardt
, I recommend to use the 'feed', 'monitor' and 'watch' features inside the sourgeforge 'assp' project. Thomas Von:"Daniel L. Miller" An: ASSP development mailing list Datum: 10.10.2010 06:50 Betreff:[Assp-test] Feature R

[Assp-test] Feature Request: auto update support files

2010-10-09 Thread Daniel L. Miller
Auto-update currently updates assp.pl and rebuildspamdb.pl - but nothing else (as far as I know). Can support be added for updating the support files - such as the recent preheaderre.txt file which did not exist in previous versions. Options could include downloading missing files (such as t

[Assp-test] Feature request, human verification for whitelisting.

2010-08-15 Thread assplove
Perhaps utilizing Captcha. Options including, whitelist as usual, or whitelist for X amount of time. Require whitelist requester to specify recipient email address(which would be verified via validate recipient methods). Option to send notification to recipient with any instructions, such as

Re: [Assp-test] Feature request

2010-06-30 Thread Paul Schutte
pass the > message, if the last spam detection flag does not belong to the Bayes > check - for example 'messagescore'. This will be changed in 2.0.2_1.1.14. > > Thomas > > > > Von:Paul Schutte > An: ASSP development mailing list &

Re: [Assp-test] Feature request

2010-06-29 Thread Thomas Eckardt
'messagescore'. This will be changed in 2.0.2_1.1.14. Thomas Von:Paul Schutte An: ASSP development mailing list Datum: 29.06.2010 17:05 Betreff: Re: [Assp-test] Feature request Hi. I see messages in the maillog.txt that looks like this: 2010-06-29 16:52:07 23121-1

Re: [Assp-test] Feature request

2010-06-29 Thread Paul Schutte
While I am on a roll... Another suggestion is to maybe give bonus points to messages that are classed as "confident.ham" ? We then would have finer grained control over what happen to bayesian spams: confident.ham => gets (adjustable) bonus score to help them over some hurdles. doubtful.ham => h

Re: [Assp-test] Feature request

2010-06-29 Thread Paul Schutte
Hi. I see messages in the maillog.txt that looks like this: 2010-06-29 16:52:07 23121-19670 [Worker_15] [MessageLimit][lowconfidence] 67.195.8.63 to: patr...@it.up.ac.za [spam found] and possibly passing because of low confidence, otherwise blocked (MessageScore 89, limit 80) [Thank you for using

Re: [Assp-test] Feature request

2010-06-26 Thread Paul Schutte
Hello again. Fritz, thank you for your advice about the (switchTestToScoring) setting. However, I stil see messages above (PenaltyMessageLimit) being delivered to the users. These messages are tagged as spam (score 40-80 should be tagged). Messages with scores above 80 should be blocked. I would

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-25 Thread Charles Marcus
On 2010-06-25 4:53 AM, GrayHat wrote: > exactly my point; it doesn't make sense imHo allowing users to > change their passwords w/o checking them and then reject the > emails due to "weak passwords"; the password issue must be > dealt with at mailserver level I don't think Matti meant that these s

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-25 Thread GrayHat
>> ASSP is much more then a spamfilter (as you should know). >> It provides Mail Routing, SSL, Virusscanning, connection >> shaping and lots more usefull functions. > Surely the testing for weak passwords should be done at the > point that the password is changed - not somewhere else later >

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-25 Thread Andrew Porter
On 24/06/10 15:44, Matti Haack wrote: > ASSP is much more then a spamfilter (as you should know). It provides > Mail Routing, SSL, Virusscanning, connection shaping and lots more usefull > functions. > Surely the testing for weak passwords should be done at the point that the password is chan

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-25 Thread Matti Haack
Hello Greyhat, there is no way in the API to access Hmailserver passwords - and hmailserver only stores hashes in it's DB. Of course, it would be easy to change the Admin Script. But so we would have a solution covering any MTA. On My system I never had an issue with weak passwords

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-25 Thread GrayHat
> BTW Greyhat, could you be so kind and tell me wich > application can test for weak passwords in connection > with hmailserver? It seems as you have great experience > with some appliances who would manage this. I think you'll have to look at the hMailServer "scripting" the program expos

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Matti Haack
ASSP is much more then a spamfilter (as you should know). It provides Mail Routing, SSL, Virusscanning, connection shaping and lots more usefull functions. On my machine, toasting coffe and cleaning up the room runs fine :) But it would be great if it also checks for weak passwords. I think thi

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread GrayHat
> Weak Passwords are in the top 10 reasons for relaying spam. So I fell > this could be part of ASSP No, sorry, assp is a SPAMFILTER not a way to allow brain-dead admins to plug some kind of "silver bullet" on their network and feel better just because "they installed something"; if you want or n

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Matti Haack
Weak Passwords are in the top 10 reasons for relaying spam. So I fell this could be part of ASSP Matti >>> Good idea, but why not just use cracklib or something that is already >>> designed and well tested for something like this: >> >>> http://search.cpan.org/dist/Crypt-Cracklib/Cracklib.pm >>

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread GrayHat
>> Good idea, but why not just use cracklib or something that is already >> designed and well tested for something like this: > >> http://search.cpan.org/dist/Crypt-Cracklib/Cracklib.pm > This would be helpful too. Nope; I don't think so, see... ASSP is a *spamfilter* not some kind of "universal

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Matti Haack
Hello Thomas, > I still not understand, what this should be for!? The SMTP password (used > in the AUTH command) are stored and checked at the MTA - why should assp > check its weakness, if the MTA should do this at the time when it is > specfied? You are right. But many MTAs have no option t

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Thomas Eckardt
eff: [Assp-test] Feature request: Weak Password Warning Hello, would it be possible to check incomming SMTP Passwords against a list of regexes and send a warning to the logfile if matching? Additionatly it would be good to check the PW not to be the user part or a substring of the userpart of

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Charles Marcus
On 2010-06-24 6:31 AM, Matti Haack wrote: >> Good idea, but why not just use cracklib or something that is already >> designed and well tested for something like this: >> >> http://search.cpan.org/dist/Crypt-Cracklib/Cracklib.pm > This would be helpful too. > But I think ASSP already includes lot

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Matti Haack
> Good idea, but why not just use cracklib or something that is already > designed and well tested for something like this: > http://search.cpan.org/dist/Crypt-Cracklib/Cracklib.pm This would be helpful too. But I think ASSP already includes lot of code to check regexes, so a simple regex text

Re: [Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Charles Marcus
On 2010-06-24 6:08 AM, Matti Haack wrote: > would it be possible to check incomming SMTP Passwords against a list > of regexes and send a warning to the logfile if matching? > > Additionatly it would be good to check the PW not to be the user part > or a substring of the userpart of the email ad

[Assp-test] Feature request: Weak Password Warning

2010-06-24 Thread Matti Haack
Hello, would it be possible to check incomming SMTP Passwords against a list of regexes and send a warning to the logfile if matching? Additionatly it would be good to check the PW not to be the user part or a substring of the userpart of the email adress and the domain name. As many mailserv

Re: [Assp-test] Feature request

2010-06-08 Thread Paul Schutte
switchTestToScoring is off On Tue, 2010-06-08 at 21:12 +0200, Fritz Borgstedt wrote: > ASSP development mailing list > schreibt: > >The easiest to explain this is that had I turned Bayesian off, the > >score > >would have been 110 and the message blocked. > >Now with Bayesian on, the score is 129

Re: [Assp-test] Feature request

2010-06-08 Thread Paul Schutte
I am running ASSP version 2.0.2(1.1.09) On Tue, 2010-06-08 at 21:12 +0200, Fritz Borgstedt wrote: > ASSP development mailing list > schreibt: > >The easiest to explain this is that had I turned Bayesian off, the > >score > >would have been 110 and the message blocked. > >Now with Bayesian on, the

Re: [Assp-test] Feature request

2010-06-08 Thread Fritz Borgstedt
ASSP development mailing list schreibt: >The easiest to explain this is that had I turned Bayesian off, the >score >would have been 110 and the message blocked. >Now with Bayesian on, the score is 129.5,but message only gets tagged >and passed on because of Bayesian uncertainty. What version are

[Assp-test] Feature request

2010-06-08 Thread Paul Schutte
Hello. Thank you for the best spam filter ever! I would just like to ask whether you can make a small change in how messages are tagged and rejected. I am using a low message limit of 40 and a high limit of 100. I am using baysValencePB of 39(default) and baysConfidenceHalfScore is enabled. I am

[Assp-test] Feature request, if not already implemented, fast zip file scanning for bad files/virus

2010-02-12 Thread Scott Haneda
Cross-posting to ass-user for user feedback please... It can be used as a tactic to get nefarious files in email to take a exe, bat, or others, zip it up, and send it. As far as I know, ASSP will scan the base64 parts of an email, or perhaps just look at the filename attachment part in the con

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Steve Moss
PM To: ASSP development mailing list Subject: Re: [Assp-test] Feature Request re IP Penalty Blocking ASSP development mailing list schreibt: >Unlikely they >will send you legitimate mail in the future anyway, more likely they >will send spam after they expire from PB. Just my opinion...

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Steve Moss
OK, that should help. I'll give 1.6.0 a go. -Original Message- From: Fritz Borgstedt [mailto:f...@iworld.de] Sent: Thursday, October 15, 2009 1:23 PM To: ASSP development mailing list Subject: Re: [Assp-test] Feature Request re IP Penalty Blocking ASSP development mailing list sch

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Alex Frunza
Ok great, so everyone will have a choice now...I still choose never to expire them. On 10/15/2009 3:22 PM, Fritz Borgstedt wrote: > ASSP development mailing list > schreibt: > >> Unlikely they >> will send you legitimate mail in the future anyway, more likely they >> will send spam after they

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Fritz Borgstedt
ASSP development mailing list schreibt: >Unlikely they >will send you legitimate mail in the future anyway, more likely they >will send spam after they expire from PB. Just my opinion... However in the newest version of V1 (1.6.0) the meaning of ForcePBExtreme has changed: Enforce Early Penal

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Alex Frunza
Thursday, October 15, 2009 11:48 AM > To: ASSP development mailing list > Subject: Re: [Assp-test] Feature Request re IP Penalty Blocking > > You have the option to export Penalty Extreme, and can export them > directly into your denysmtpfrom...file (make sure the append option is &

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Steve Moss
t Subject: Re: [Assp-test] Feature Request re IP Penalty Blocking You have the option to export Penalty Extreme, and can export them directly into your denysmtpfrom...file (make sure the append option is used). I think this is what you wanted On 10/15/2009 1:23 PM, Steve Moss wrote: > Here&#

Re: [Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Alex Frunza
You have the option to export Penalty Extreme, and can export them directly into your denysmtpfrom...file (make sure the append option is used). I think this is what you wanted On 10/15/2009 1:23 PM, Steve Moss wrote: > Here's my situation: as shown by my ASSP envelope recipient statistics, >

[Assp-test] Feature Request re IP Penalty Blocking

2009-10-15 Thread Steve Moss
Here's my situation: as shown by my ASSP envelope recipient statistics, my mail server gets hit by around 18,000 invalid recipient addresses a day. This was at around 6,000 per day a year ago, and is continuing to rise at a fairly steady rate. Now, I'd like to have ASSP reduce the load on my server

Re: [Assp-test] Feature Request: Google Safebrowsing

2009-09-29 Thread GrayHat
> I think it could be helpful, if ASSP would check all URLs in inomming > mails with googel safebrowsing to filter out Phising and Malware > emails: > http://code.google.com/intl/de/apis/safebrowsing/developers_guide.html as far as I can tell (and if I recall it correctly), using the additional C

[Assp-test] Feature Request: max message size

2009-09-29 Thread Peter Felcan - SULOCO
Hello, it will be very useful for me (hope also for others) if ASSP would block message bigger then specific size (not size*rcpt). Thanks. **Peter Felcan** SULOCO s.r.o. 1. mája 912/3 039 01 Turc(ianske Teplice IC(O: 36 665 177 DIC(: 2022230276 IC( DPH: SK2022230276 mobil: +421-918-605715 e-ma

[Assp-test] Feature Request: Google Safebrowsing

2009-09-29 Thread Matti Haack
Hello, I think it could be helpful, if ASSP would check all URLs in inomming mails with googel safebrowsing to filter out Phising and Malware emails: http://code.google.com/intl/de/apis/safebrowsing/developers_guide.html With best regards Matti -- Matti Haack - Hit Haack IT Service Gmbh

[Assp-test] Feature Request v1.5.x : BombData - add line number to log of bombre.txt file

2009-09-22 Thread Adam Carter - Vantage IT
Recently we've had a couple of mails caught by BombData. While it helpfully logs the offending text in the ASSP log, could it also display the line number of the bombre.txt file to make troubleshooting a little easier? Some of our less experienced support staff have been struggling with the regex

[Assp-test] Feature Request "Shutdown/Restart Service next Idle"

2009-03-16 Thread Matti Haack
Hello, during ASSP testing, we need many restarts To shorten unavailabe times of our Server, it would be good if there would be a restart button, that waits until no active connection is running and then perform a restart. At the moment it works that when you hit the restart buttotn, all new conn

[Assp-test] Feature Request

2008-12-17 Thread Daniel L. Miller
Have "ASSP Version" shown in the GUI a link to the appropriate magicvillage folder for quick downloading/verification. -- Daniel -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future

[Assp-test] Feature request: link analysis results to assp setting variable name

2008-11-17 Thread Trevor Jacques
I'm using 2.0.0(5.15) and noticed that, when I analysed a problematic false positive, the result showed: Suspicious Local Domain in Header: 'by mydomain.com' This was useful only to the extent that it may indicate a bad setting, but not exactly which one. Since there are so many 'local' settin

[Assp-test] Feature Request

2008-11-03 Thread Daniel L. Miller
As a possible aid for the developers - and users too for that matter - have a new option in Logging for "ASSP version logging". This would add the ASSP version at the start of the line - maybe before or after the unique id field. For installations that are going to be left alone for extended p

[Assp-test] Feature request: bypass whitelist for analysis

2008-10-15 Thread Daniel L. Miller
As an option, either with a selection box in the GUI or as a separate e-mail address for the interface, have the ability to analyze a message without applying the whitelist. This way admins can check samples of messages they have already received, to verify that these mails would still pass wi

Re: [Assp-test] Feature request: IPv6

2008-10-14 Thread noc
Hello Is it possibile to use ASSP with native IPv6? If not, when can it be done? IPv4 addresses are running out beginning 2010. Many ISPs are implementing 'dual stack' now. Regards Milan - This SF.Net email is spo

Re: [Assp-test] Feature request: strict sender domain

2008-10-14 Thread Matti Haack
let's publish 1.4 (and maybe 2?) on SF! I think both versions run very well even on priduction systems. Collect all new features for the next versions. We should make a "whislist" on the Wiki, where anybody can describe his ideas. Matti >> ASSP 1.4.1 is going to be published on SF. Is this featu

Re: [Assp-test] Feature request: strict sender domain

2008-10-13 Thread GrayHat
> ASSP 1.4.1 is going to be published on SF. Is this feature important > enough to put it in 1.4.1 or should I start 1.4.2 beta? imVHo 1.4.1 is as good as it may be, so let's freeze it and queue the idea as a "whish" for the 1.4.2 --

Re: [Assp-test] Feature request: strict sender domain

2008-10-13 Thread Fritz Borgstedt
>If you're asking ME No, I was asking the list. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a

Re: [Assp-test] Feature request: strict sender domain

2008-10-13 Thread Micheal Espinola Jr
Fritz Borgstedt wrote: > ASSP 1.4.1 is going to be published on SF. Is this feature important > enough to put it in 1.4.1 or should I start 1.4.2 beta? I don't think the release of 1.4.1 should wait. I think its a great concept, but nothing that worth putting 1.4.1 off for. signature.asc Descri

Re: [Assp-test] Feature request: strict sender domain

2008-10-13 Thread Daniel L. Miller
Fritz Borgstedt wrote: >> Under the model I've described, both DNSBL tests need to be >> performed, >> as one test might only score, while the other will either block or >> add >> significantly to the score. For this reason also, the standard test >> should come first as it may result in a bloc

  1   2   >