Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Which options needs to be enabled?
Did you look into testmode?
-
This SF.net email is sponsored by: Splunk Inc.
Still
spamSubject is '[SPAM]' and EVERY checkbox under TestModes is unchecked.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fritz
Borgstedt
Sent: Monday, 27 August, 2007 16:50
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re:
- show the log
what version are you running?
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
Our DoBayesian is set to '1'. baysConfidence is '0.99960', but the
server is
still delivering Bayesian spam messages to the users with [SPAM] tag
in
You did set bayconfidence very high and you are wondering That the
server is delivering with spamtag ?
Set the damn thing to 0.
Hmm... ok. let me have a try. Thank a lot.
Muhammad Waseem Sindhu
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fritz
Borgstedt
Sent: Monday, 27 August, 2007 17:22
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re:
Have the SMTP limits obey the whitelist.
Why:
Well, we have a large organization we exchange large amounts of mail
with. For whatever reason, their Symantec Mail Security Gateway POS
trips the max errors and ends up blocking their mail for the expiration
period. This ended up in an endless loop
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Have the SMTP limits obey the whitelist.
what smtp limits do you mean?
-
This SF.net email is sponsored by: Splunk Inc.
Having it obey the ipwl is obviously strait forward. I was thinking
to
make things even better, it could check to see if the ip matches the
domain name listed in the whitedomains file, and if so, add that IP to
the list of a smtpwhiteip's file.
This is already done, whitedomains will put IPs
I got a false Positive and dont know why:
It is a booking-Conformation from Ryanair.
Here the Log-Entry (I masked the mailadresses):
[logstart]
Aug-27-07 15:58:36 id-3116c6352 195.27.14.155 itinerary**ryanair.com
accepting triplet:
(195.27.14.0,itinerary**ryanair.com,xxx**recipient-doma.in)
A better definition of what is stored in /spam or different folders
based on the reason would be nice.
I report my trapped Spam to SpamCop.net, and it is a bit boring to
report known Ips (and a lot of senseless work too).
I would like to report trapped (collected) Spam wich is not
DNSBL-failed,
How reliable are the Sanesecurity ClamAV definitions? Can I set them and
forget, or should I monitor them for false positives?
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
A better definition of what is stored in /spam or different folders
based on the reason would be nice.
???
I report my trapped Spam to SpamCop.net, and it is a bit boring to
report known Ips
Have you looked in your BombRe file for casino? It's in mine.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christian
Rehkopf
Sent: Monday, August 27, 2007 11:21 AM
To: assp-user@lists.sourceforge.net
Subject: [Assp-user] False Positive
Our DoBayesian is set to '1'. baysConfidence is '0.99960',
where did you get this value
0.99960
? this is not default.
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?
A better definition of what is stored in /spam or different folders
based on the reason would be nice.
???
In example:
/spam/dnsbl (for RBL-Failed Messages)
/spam/Collect (for Trapped Messages)
/spam/Bomb (for RegEx-ed Messages)
/spam/helo (for HeloBL and Invalid Helo)
Etc.
report
I'm not sure exactly which was tripped. I know their max sessions per
IP is set to 20, which ours is as well, which leaves it to either:
Maximum SMTP Connections Per IP Address Frequency =20
Or
Maximum Errors Per Session
I'm guessing the prior due to the large amount of mail we get from them.
I
Sounds like something that could be scripted easily enough outside of
ASSP if you wish to have that functionality.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christian
Rehkopf
Sent: Monday, August 27, 2007 12:49 PM
To: 'Questions and Answers for
In example:
/spam/dnsbl (for RBL-Failed Messages)
/spam/Collect (for Trapped Messages)
/spam/Bomb (for RegEx-ed Messages)
/spam/helo (for HeloBL and Invalid Helo)
Etc.
Use the tool which is already available.
Use ccspam with spamtag and put the mails in folders according to the
spamtag.
Dave Emory wrote:
My log shows lines like these:
Aug-27-07 10:01:35 66.35.250.225 [EMAIL PROTECTED]
to: [EMAIL PROTECTED]
recipient accepted: [EMAIL PROTECTED]
Aug-27-07 10:01:35 66.35.250.225 [EMAIL PROTECTED]
to: [EMAIL PROTECTED]
1) wrong list. use the 'test' list for beta versions,
OK. Everything newer than 1.3.1 is beta, correct?
2) update your beta, thats an old one.
Just got (10). Thanks.
3) is Bayesian in scoring mode?
No, it's activated (mode 1).
Have you looked in your BombRe file for casino? It's in mine.
The point is, that is is not in the mail.
Mit freundlichen Gru?en
Christian Rehkopf
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through
Dave Emory wrote:
1) wrong list. use the 'test' list for beta versions,
OK. Everything newer than 1.3.1 is beta, correct?
2) update your beta, thats an old one.
Just got (10). Thanks.
3) is Bayesian in scoring mode?
No, it's activated (mode 1).
version (10) fixed it.
Dave
Dave Emory wrote:
1) wrong list. use the 'test' list for beta versions,
OK. Everything newer than 1.3.1 is beta, correct?
Anything not on sf.net is beta.
2) update your beta, thats an old one.
Just got (10). Thanks.
See if you can reproduce it with that version.
3) is Bayesian in
My log shows lines like these:
Aug-27-07 10:01:35 66.35.250.225 [EMAIL PROTECTED]
to: [EMAIL PROTECTED]
recipient accepted: [EMAIL PROTECTED]
Aug-27-07 10:01:35 66.35.250.225 [EMAIL PROTECTED]
to: [EMAIL PROTECTED]
Regex:Redlist
Use the tool which is already available.
Use ccspam with spamtag and put the mails in folders
according to the spamtag.
OK - that work for ccspam, but is there a chance to do it File-based in
the ASSP-Folders too.
Like with the Subject in the filenames also (or or) with the spamtag?
I
Could just be a bug then.
It was a cosmetic thing.
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
I forward the Files from the Servers ASSP/spam Folder to Spamcop, not
from my Mailclient.
The change your mode of operation.
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find
Christian Rehkopf wrote:
Use the tool which is already available.
Use ccspam with spamtag and put the mails in folders
according to the spamtag.
OK - that work for ccspam, but is there a chance to do it File-based in
the ASSP-Folders too.
Like with the Subject in the filenames also (or
I've been trying them out, using the quarantine, and watching the alerts
that clamav sends me. Two weeks now I've not gotten any false positives.
_
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul
Houlbrooke
Sent: Monday, August 27, 2007
Christian Rehkopf wrote:
Use the tool which is already available.
Use ccspam with spamtag and put the mails in folders
according to the spamtag.
OK - that work for ccspam, but is there a chance to do it File-based in
the ASSP-Folders too.
Like with the Subject in the filenames also
Paul Houlbrooke wrote:
How reliable are the Sanesecurity ClamAV definitions? Can I set them and
forget, or should I monitor them for false positives?
You will get periodic false positives. Usually a user will call the
help desk stating that they can't send a message, I have ASSP
I organize my emails by Date/Time, like most, but on this list the times
are always all over the place. I suspect it has something to with with
different timezones. Do I need to do something with my client
(Thunderbird) to get the emails in order?
Paul Houlbrooke wrote:
I organize my emails by Date/Time, like most, but on this list the times
are always all over the place. I suspect it has something to with with
different timezones. Do I need to do something with my client
(Thunderbird) to get the emails in order?
Try sorting using
33 matches
Mail list logo
