[Assp-user] FileScanCMD for Windows

ASSP 1.7.1.4 running on Server 2003 R2 in assp.cfg: DoFileScan:=1 FileScanWL:=1 FileScanNP:=1 FileScanLocal:=1 FileScanDir:=c:\assp\virusscan FileScanCMD:=c:\windows\system32\cmd.exe /c C:\assp\batchfile.cmd FILENAME FileScanBad:=INFECTED FileScanGood:=OK FileScanRespRe:=UNKNOWN I tried

Re: [Assp-user] Quarantine

If a blocked email is stored in any folder, a link is included for each email to be shown. Thiis is doen when the requesting sender is a mail admin. However in the newest version there is a option to include it in all reports. -Include a Show-Link (inclShowLink) If a blocked email is stored in

[Assp-user] Fantastic regex

For catching foreign URL¹s or email addresses in the body of an email. Email¹s with foreign country codes can be blocked as part of ASSP¹s native functionality, but that does not protect against a lot of phishing/viagra sales attempts that come from US domains(yahoo, hotmail), but that have

[Assp-user] CPU usage stats above 100% for dual proc system.

I¹m guessing it is related to the system being dual processor. When it is single processor the stats show correctly. CPU Usage: 83.34% (100.04% avg) 100.24% avg Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701

Re: [Assp-user] Fantastic regex

For instance: Apr-26-10 10:13:39 91219-13449 [bombDataRe][sl] 216.34.181.88 sitelist-boun...@lists.sourceforge.net to: pdick...@fredco-md.net [spam passed] -- passing because spamlover, otherwise blocked (bombDataRe: 'http://hikari-navi.jp/ , http://xs.to/') -- [SPAM Dear assp user owner Catch 77

[Assp-user] [SPAM] Re: Fantastic regex

Thanks for that! On Mon, Apr 26, 2010 at 8:32 AM, Paul K. Dickson pdick...@frederickcountymd.gov wrote: For instance: Apr-26-10 10:13:39 91219-13449 [bombDataRe][sl] 216.34.181.88 sitelist-boun...@lists.sourceforge.net to: pdick...@fredco-md.net [spam passed] -- passing because spamlover,

[Assp-user] MaxVRFYErrors

I am seeing log entries like the following: Apr-23-10 13:42:47 [MaxVRFYErrors]   max recipient verification errors (5) exceeded -- dropping connection - after reply: 550-5.1.1 unnecessary spaces. Learn more at                             ; I can't seem to find where I would set the text for the

Re: [Assp-user] ASSP in local network

Hello Fritz, I tried adding this to my config and I can see from the headers that all IPs are resolved into domain names and the helo used is included as well but I still can't see any activity with my DNSBL filters. I still am not clear as to whether this is working for me. Thanks in

[Assp-user] to test mode or not to test mode

Hello there! Just a quick Q, is it advisable to let your spam collection grow to rebuildspamdb.pl's minimum count or is it just fine to rebuild spam db even if you're behind the minimum count? I was just concerned that my spambuckets count a not yet near 1, so im thinking to keep

[Assp-user] Policy question - what should defaults be for RBLs?

After a few years experience with RBLs from both perspectives (spam filter admin and the mail server admin) I've realized there are some RBLs that shouldn't be supported. Doubtless you have all heard complaints about various RBL providers. I'm wondering if we should re-assess what RBLs appear

[Assp-user] Recommendation for 500k+ messages per day

I am using ASSP 2.0.2 under debian (kernel 2.6.32) as an inbound proxy for our mail server. ASSP is crashing a couple of times a day for no apparent reason (nothing in log file). CPU is around 60% and is using 800mb of RAM. Current filter I am using: Validate HELO, DNSBL and URIBL Numbers of

Re: [Assp-user] Recommendation for 500k+ messages per day

Greylisting is pretty good and doesn't use much for CPU - we found that it really cut our processor usage. Around 50k per day, we found that we had to implement a local DNS server with caching to handle all the RBL requests. We just used BIND on the loopback. -Original Message- From: