assp-user Mailing List for Anti-Spam SMTP Proxy Server

Yes, there was a fix in 1.0.3 that directly addressed that issue. I don't know that it definately will fix the problem you experienced, but there's a good chance. Give it a try and let me know how it turns out.

john

Bill B. <bi...@we...> wrote :

> John,
> 
> We had an empty dnsbl file when we experienced these crashes last month.  We
> have since stopped using ASSP.  Will 1.0.3 now fix this problem you think?
> 
> Bill
> 
> 
> -----Original Message-----
> From: "Bill B."
> Sent: Wed, 27 Aug 2003 17:16:38 EDT
> Subject: Re: [Assp-user] crash
> 
> 
> Any ideas on what I can do to track down this problem?  It has crashed on me a
> few more times since Monday, but other than that its running great.
> 
> One thing I noticed during the 60 seconds before the crashes, is that there are
> new incoming connections established (but no more than usual), but it doesn't
> look like all of the related connections are being made to the backend smtp
> server.
> 
> There are no "Couldn't create server socket to..." messages written to the log. 
> However I used to see those error messages last week because our server was
> running out of available sockets, so I adjusted the TCP/IP registry settings to
> allow more sockets, following the recommendation of a few sites I found...
> 
> http://www.stalker.com/CommuniGatePro/Scalability.html#TimeWait
> http://www.macromedia.com/support/coldfusion/ts/documents/tn17277.htm
> 
> Could these tweaks be causing ASSP to crash?  I wouldn't think so, but its worth
> asking.
> 
> Also, would adding some sort of exception handling to the script help prevent
> the crashing or help us to debug it?
> 
> Thanks,
> Bill
> 
> 
> 
> -----Original Message-----
> From: "Bill B."
> Sent: Mon, 25 Aug 2003 14:18:10 EDT
> Subject: Re: [Assp-user] crash
> 
> 
> Yes, its a fresh install of ActiveState 5.8.0.  The install filename was: 
> 
>   ActivePerl-5.8.0.806-MSWin32-x86.msi
> 
> Bill
> 
> 
> -----Original Message-----
> From: "John Hanna"
> Sent: Mon, 25 Aug 2003 12:10:14 -0600
> Subject: Re: [Assp-user] crash
> 
> 
> Hmmm... Very interesting... Are you running ActiveState? What version?
> 
> John
> ----- Original Message ----- 
> From: "Bill B." &amp;lang=en">bi...@we...>
> To: &amp;lang=en">ass...@li...>
> Sent: Monday, August 25, 2003 8:04 AM
> Subject: [Assp-user] crash
> 
> 
> > John,
> >
> > I've had ASSP 1.0.1 crash on me twice since we started using it this
> weekend.  We're running it as a Windows Service.  The ASSP log shows nothing
> out of the ordinary.  Attached is the DrWatson file and below is what was
> show in Event Viewer for both cra
> > shes:
> >
> >
> > The application, , generated an application error The error occurred on
> 08/25/2003 @ 09:21:53.309 The exception generated was c0000005 at address
> 28090A31 (win32_select)
> >
> > The application, , generated an application error The error occurred on
> 08/24/2003 @ 20:32:18.086 The exception generated was c0000005 at address
> 28090A31 (win32_select)
> >
> >
> >
> >
> >
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
> at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
> at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user



___________________________________
NOCC, http://nocc.sourceforge.net

> trash my spam database.  Is the following procedure correct?
>
> - stop assp
> - delete contents of errors/spam
> - delete contents of spam
> - delete spamdb
> - download the sample spam database from sourcefourge
> - run rebuildspamdb.pl
> - start assp

I would also turn on the feature "show subject as text string" since it
allows you to scan each directory and check the subject line. It's a simple
matter to *move* spam/ham to the other directory then send a spam/ham report
to follow up.
Check the docs - I can't remember if you need to renumber them prior to
rebuilding the db - I've set mine to automatically renumber after browsing
so it's not an issue.

I agree with Robert, but I'll add my own two cents.

If you are getting false positives, one of the most important things to do is to (a) develop your whitelist -- if you are able to whitelist those who send you email you won't have false positives from them. and (b) develop your not-spam collection. If your notspam collection has a healthy sample of the mail that is like your false-positives, then the false-positives will go away. (c) try to find a few tags or phrases you can put in your "expression to identify non-spam" -- this will also significantly reduce your rates of false-positives.

Hope that helps.
John


Orso Robert <r....@it...> wrote :

> I would do it that way:
> 
> - return to "Test" mode (that prevents the deletion of further mails, almost
> all spam is passed through)
> - DON'T delete errors/spam, since these are hand selected and most certainly
> correct
> - remove the contents of spam into some backup directory, just to be sure
> - add as much "known bad by first hand experience" messages into the spam
> directory (your spambase is of no good without actual spam to compare the
> incoming messages against them)
> You might have enough, if you sort the backup-spam files by date and take
> those that are well before you started to get false positives
> - run rebuildspamdb.pl
> 
> You might stop and start ASSP, but you will receive not a single email until
> you have it running again - which might be a problem on a busy site.
> 
> - watch the mails some time in test-mode to be sure you got it straight
> again.
> - turn off test-mode
> 
> You should consider to update your version to 1.0.3 which has a lot added
> since 0.35
> 
> Best regards,
> Robert
> 
> -----Ursprüngliche Nachricht-----
> Von: doctor [mailto:do...@lc...]
> Gesendet: Dienstag, 30. September 2003 18:08
> An: ass...@li...
> Betreff: [Assp-user] Large number of false positives
> 
> 
> Hi,
> 
> Using 0.35.  I am experiencing a large number of false positives.  I think I
> need 
> to 
> trash my spam database.  Is the following procedure correct?
> 
> - stop assp
> - delete contents of errors/spam
> - delete contents of spam
> - delete spamdb
> - download the sample spam database from sourcefourge
> - run rebuildspamdb.pl
> - start assp
> 
> Tks,
> Don
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user



___________________________________
NOCC, http://nocc.sourceforge.net

How odd. No, your setup looks ok. I'm sorry I'm not at a place to do much testing right now -- I'll have to look at it when I get home next week. Sorry for the inconvenience.

john

Nathan Chan <ch...@xs...> wrote :

> G'Day All,
> 
> Well the problem i saw in 1.0.1a is still happening for some reason 
> and i need to work out why it suddenly started happening.
> 
> Basically the spamlovers address' are being ignored and hence 
> email to them are being classified as spam.
> 
> just one of many log lines :
> 
> Sep-29-03 23:40:13 203.34.161.93 &amp;lang=en">no...@se...>
> 
> to: su...@e-...
> Bayesian spam
> 
> and yet :
> spamLovers:=info|support|craig|humphreys|craigh|emailadmin|harry|
> roberte|san|gray|carinasystem|victork|networking
> localDomains:=xsi.com.au|xsidata.com.au|xsidatasolutions.com.au|
> dawn.com.au|e-datagroup.com.au|e-dataservices.com.au|digitaltape.com.au|
> dlt.com.au
> 
> I have had to put the entire assp system back into test mode now 
> for the last week :(  after this has been running since version 0.2 !!
> 
> Can someone please explain to me why this is happening ??
> 
> Do i have too many domains / spamlovers ?  I have also checked 
> there are no double || in any of the lines.  Is there any 
> circumstance as to when a spamlover would still get bayesian 
> filtered ?
> 
> Thanks
> Nathan
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user



___________________________________
NOCC, http://nocc.sourceforge.net

Yea. Sorry -- I guess I missed it while I was trying to get ready to leave. I'll try to update the 1.0.3 release with the line removed.

j

Manuel Martin <li...@ma...> wrote :

> Hello Nathan,
> 
> On Mon, 29 Sep 2003 12:51:51 +1000 
> "Nathan Chan" &amp;lang=en">ch...@xs...>
> wrote:
> > [root@fw assp]# ba=content-\w+: 
> > .*\s+.*name\s*=\s*".*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
> > md|com|ht[ab])"|content-\w+: 
> > .*\s+.*name\s*=\s*.*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
> > md|com|ht[ab])\s
> > be=1
> > ok
> > 
> > ?????
> Nothing to worry about, these are some leftover debug messages.
> If you want to get rid of them, just locate the line:
> print "ba=$badattach \nbe=$BlockExes\n",$b=~/$badattach/i,"ok\n";
> and change it to:
> #print "ba=$badattach \nbe=$BlockExes\n",$b=~/$badattach/i,"ok\n";
> or remove it completely.
> 
> Bye, MM
> -- 
> Latest personal build of ASSP is 4.2b
> Get it here: http://www.martinnet.de/assp-mmb42b.zip
> 
> Please read the instructions in the config-options carefully.
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user



___________________________________
NOCC, http://nocc.sourceforge.net

I would do it that way:

- return to "Test" mode (that prevents the deletion of further mails, =
almost
all spam is passed through)
- DON'T delete errors/spam, since these are hand selected and most =
certainly
correct
- remove the contents of spam into some backup directory, just to be =
sure
- add as much "known bad by first hand experience" messages into the =
spam
directory (your spambase is of no good without actual spam to compare =
the
incoming messages against them)
You might have enough, if you sort the backup-spam files by date and =
take
those that are well before you started to get false positives
- run rebuildspamdb.pl

You might stop and start ASSP, but you will receive not a single email =
until
you have it running again - which might be a problem on a busy site.

- watch the mails some time in test-mode to be sure you got it straight
again.
- turn off test-mode

You should consider to update your version to 1.0.3 which has a lot =
added
since 0.35

Best regards,
Robert

-----Urspr=FCngliche Nachricht-----
Von: doctor [mailto:do...@lc...]
Gesendet: Dienstag, 30. September 2003 18:08
An: ass...@li...
Betreff: [Assp-user] Large number of false positives


Hi,

Using 0.35.  I am experiencing a large number of false positives.  I =
think I
need=20
to=20
trash my spam database.  Is the following procedure correct?

- stop assp
- delete contents of errors/spam
- delete contents of spam
- delete spamdb
- download the sample spam database from sourcefourge
- run rebuildspamdb.pl
- start assp

Tks,
Don



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

Hi,

Using 0.35.  I am experiencing a large number of false positives.  I think I need 
to 
trash my spam database.  Is the following procedure correct?

- stop assp
- delete contents of errors/spam
- delete contents of spam
- delete spamdb
- download the sample spam database from sourcefourge
- run rebuildspamdb.pl
- start assp

Tks,
Don

G'Day All,

Well the problem i saw in 1.0.1a is still happening for some reason 
and i need to work out why it suddenly started happening.

Basically the spamlovers address' are being ignored and hence 
email to them are being classified as spam.

just one of many log lines :

Sep-29-03 23:40:13 203.34.161.93 <no...@se...> 
to: su...@e-... Bayesian spam

and yet :
spamLovers:=info|support|craig|humphreys|craigh|emailadmin|harry|
roberte|san|gray|carinasystem|victork|networking
localDomains:=xsi.com.au|xsidata.com.au|xsidatasolutions.com.au|
dawn.com.au|e-datagroup.com.au|e-dataservices.com.au|digitaltape.com.au|
dlt.com.au

I have had to put the entire assp system back into test mode now 
for the last week :(  after this has been running since version 0.2 !!

Can someone please explain to me why this is happening ??

Do i have too many domains / spamlovers ?  I have also checked 
there are no double || in any of the lines.  Is there any 
circumstance as to when a spamlover would still get bayesian 
filtered ?

Thanks
Nathan

Hello Nathan,

On Mon, 29 Sep 2003 12:51:51 +1000 
"Nathan Chan" <ch...@xs...> wrote:
> [root@fw assp]# ba=content-\w+: 
> .*\s+.*name\s*=\s*".*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
> md|com|ht[ab])"|content-\w+: 
> .*\s+.*name\s*=\s*.*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
> md|com|ht[ab])\s
> be=1
> ok
> 
> ?????
Nothing to worry about, these are some leftover debug messages.
If you want to get rid of them, just locate the line:
print "ba=$badattach \nbe=$BlockExes\n",$b=~/$badattach/i,"ok\n";
and change it to:
#print "ba=$badattach \nbe=$BlockExes\n",$b=~/$badattach/i,"ok\n";
or remove it completely.

Bye, MM
-- 
Latest personal build of ASSP is 4.2b
Get it here: http://www.martinnet.de/assp-mmb42b.zip

Please read the instructions in the config-options carefully.

Hello John,

On Sun, 28 Sep 2003 15:32:59 -0400 
Doug Lytle <su...@dr...> wrote:
> I've been watching the tail log of maillog.txt over the weekend and have
> noticed something strange.  Sometimes I see an incoming mail to a
> user(s) that is labeled as 'spam address', when it isn't in the 'Spam
> Addresses' field.  Would this be a bug (Maybe fixed in 1.02), or would
> it be because the from email address is probably a bad address?

The spamaddresses are parsed independantely to everything else (at least
in 1.0.3), the from: doesn't play a role for the check (noprocess, black
and whitelisted is checked before applying the rule for spamaddresses,
so these may pass / be blocked nevertheless, but this isn't the case for
you)
A mail is classifed as spam if _any_ rcpt-to: is in the spamadresses
(and no noprocess or whitelist applies), e. g. someone sends to all your
users a SPAM in one go. That's nice, because no legit user should feel
the urge to send anything to a spambucket. HTH.

Bye, MM
-- 
Latest personal build of ASSP is 4.2b
Get it here: http://www.martinnet.de/assp-mmb42b.zip

Please read the instructions in the config-options carefully.

John,

I've been watching the tail log of maillog.txt over the weekend and have
noticed something strange.  Sometimes I see an incoming mail to a
user(s) that is labeled as 'spam address', when it isn't in the 'Spam
Addresses' field.  Would this be a bug (Maybe fixed in 1.02), or would
it be because the from email address is probably a bad address?

Curious,

Doug

John,

I've been watching the tail log of maillog.txt over the weekend and have 
noticed something strange.  Sometimes I see an incoming mail to a 
user(s) that is labeled as 'spam address', when it isn't in the 'Spam 
Addresses' field.  Would this be a bug (Maybe fixed in 1.02), or would 
it be because the from email address is probably a bad address?

Curious,

Doug

Hi all

I am currently testing this special build (mainly because of the
"Internal-Whitelist-Addition" feature, but also enabling the new DNSBL
handling and others).

The features I am using are very useful to me and I could not find any
negative side-effects so far. I suggest that after a phase of testing it
would be great if John could integrate them into his own build.
Everything is well documented and configurable using the web interface

Enrico

SourceForge.net wrote:

 >Read and respond to this message at:
 >https://sourceforge.net/forum/message.php?msg_id=2212682
 >By: mmartinfs
 >
 >Hello,
 >
 >I've upgraded my customized build of ASSP to 1.0.3 and added some
 >new options. I can be obtained at http://www.martinnet.de/assp-mmb42b.zip.
 >I'm still looking for more testers and much more feedback, therefore 
I'm posting
 >to the forums, too.
 >
 >An overview follows:
 >* denotes a generally useful feature (I think),
 ># an addition for my personal use,
 >- a fix
 >
 ># Password hidden (for my personal use, was kindly prepared by John
 >Hanna)
 >* X-Assp-Report: YES for messages generated by the Mail-Interface (easy
 >  filtering)
 >- Modified regular expression for mail-address ($mailregex) which is
 >  used throughout the programm now. I added [,],: in some places,
 >  because I experienced that some addresses were whitelisted but not
 >  recognized afterwards because different expressions were used (I think).
 >  Also, I added the necessity to include a dot in the domain part (which
 >  is arguably good or bad). Change as you wish.
 >* made DNSBL usable with dialups with the inclusion of a regular
 >  expression to extract the sender's ip from a (trusted) external host
 >  (e. g. your externally hosted mail server or proxy). Received: -lines
 >  are read one by one top down and compared seperately to $dnsblre until
 >  a matching line is found. Additionally, expressions can be evaluated
 >  per line, so that different servers can be used simultaniously.
 >- X-Assp-Spam-Prob: is added only once (could happen twice if mail is
 >  directly forwarded after delivery
 >* Redlist-Extension: optionally treat mail as redlisted if all envelope
 >  recipients are redlisted (usefull for users with automatic forwarding
 >  to external addresses, like road-warriors
 >* Internal-Whitelist-Addition: optionally add only addresses supplied by
 >  "relayable" hosts
 >* Non-Greedy-Whitelist-Addition: optionally do not collect all
 >  header-supplied adresses for inclusion in whitelist, use only envelope
 >  recipients
 >* DNSBLRE is used for the Goodhost-Feature, too: Added a property to the
 >  $Con-hash. ->{proxy} is the same as ->{ip}, unless we get to know
 >  otherwise. {proxy} contains  the "real"  delivering agent's ip in a
 >  scenario where ASSP is not the only proxy  used to receive mail. After
 >  the header is read completely, the Received:-lines are parsed with a
 >  user-supplied regex for a suitable ip. This is afterwards used for
 >  dnsbl-matching and the goodhosts database. If no ip can be found in
 >  the header, {proxy} stays equal to {ip}, and can be used for all
 >  non-connection-related stuff afterwards.
 >  Thanks to John Hanna for his clean code and good documentation of it.
 > Otherwise, I wouldn't have been able to implement this.
 >* / - Added an option to broaden the DNSBL-search for CLASS B (-style)
 >  subnets. Some mayor ISPs use entire /16-ranges for dialups, and it is
 >  unlikely that a dialup-user doesn't deliver mail via a smarthost (like
 >  he should) for something besides spamming, so it's common that such
 >  dialin-subnets are included in blacklists. Formerly only exact matches
 >  or CLASS C were looked up.
 >* Added an option to scan all Received:-lines for DNSBL-listed ips. My
 >  theory is that a spammer will always try to relay  through a
 >  non-blacklisted host, but this host will often record the sender's ip.
 >  If we find any blacklisted ip in the Received:-lines, there's a good
 >  chance that this is SPAM. If we don't, we don't know if it's HAM or if
 >  the spammer disguised himself too well (which is the point where we
 >  started). The ips found can therefore be only used for blacklisting,
 >  not for good/whitelisting. To prevent that all dialups become
 >  blacklisted by error, only exact matches are used.
 >* Added an option to change $OutgoingBufSize via the interface
 >  (requested by Enrico)
 >
 >Bye, MM
 >
 >______________________________________________________________________
 >You are receiving this email because you elected to monitor this forum.
 >To stop monitoring this forum, login to SourceForge.net and visit:
 >https://sourceforge.net/forum/unmonitor.php?forum_id=235332
 >
 >
 >

John,

We had an empty dnsbl file when we experienced these crashes last month.  We have since stopped using ASSP.  Will 1.0.3 now fix this problem you think?

Bill


-----Original Message-----
From: "Bill B."
Sent: Wed, 27 Aug 2003 17:16:38 EDT
Subject: Re: [Assp-user] crash


Any ideas on what I can do to track down this problem?  It has crashed on me a few more times since Monday, but other than that its running great.

One thing I noticed during the 60 seconds before the crashes, is that there are new incoming connections established (but no more than usual), but it doesn't look like all of the related connections are being made to the backend smtp server.

There are no "Couldn't create server socket to..." messages written to the log.  However I used to see those error messages last week because our server was running out of available sockets, so I adjusted the TCP/IP registry settings to allow more sockets, following the recommendation of a few sites I found...

http://www.stalker.com/CommuniGatePro/Scalability.html#TimeWait
http://www.macromedia.com/support/coldfusion/ts/documents/tn17277.htm

Could these tweaks be causing ASSP to crash?  I wouldn't think so, but its worth asking.

Also, would adding some sort of exception handling to the script help prevent the crashing or help us to debug it?

Thanks,
Bill



-----Original Message-----
From: "Bill B."
Sent: Mon, 25 Aug 2003 14:18:10 EDT
Subject: Re: [Assp-user] crash


Yes, its a fresh install of ActiveState 5.8.0.  The install filename was: 

  ActivePerl-5.8.0.806-MSWin32-x86.msi

Bill


-----Original Message-----
From: "John Hanna"
Sent: Mon, 25 Aug 2003 12:10:14 -0600
Subject: Re: [Assp-user] crash


Hmmm... Very interesting... Are you running ActiveState? What version?

John
----- Original Message ----- 
From: "Bill B." <bi...@we...>
To: <ass...@li...>
Sent: Monday, August 25, 2003 8:04 AM
Subject: [Assp-user] crash


> John,
>
> I've had ASSP 1.0.1 crash on me twice since we started using it this
weekend.  We're running it as a Windows Service.  The ASSP log shows nothing
out of the ordinary.  Attached is the DrWatson file and below is what was
show in Event Viewer for both cra
> shes:
>
>
> The application, , generated an application error The error occurred on
08/25/2003 @ 09:21:53.309 The exception generated was c0000005 at address
28090A31 (win32_select)
>
> The application, , generated an application error The error occurred on
08/24/2003 @ 20:32:18.086 The exception generated was c0000005 at address
28090A31 (win32_select)
>
>
>
>
>



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user





-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

---- Original Message ----
From:		Mail Delivery Subsystem
Date:		Fri 9/26/03 20:55
To:		do...@lc...
Subject:	Warning: could not send message for past 4 hours

    **********************************************
    **      THIS IS A WARNING MESSAGE ONLY      **
    **  YOU DO NOT NEED TO RESEND YOUR MESSAGE  **
    **********************************************

The original message was received at Fri, 26 Sep 2003 15:59:11 -0400
from www@localhost

   ----- The following addresses had transient non-fatal errors -----
ass...@li...

   ----- Transcript of session follows -----
... while talking to mail.sourceforge.net.:
>>> RCPT To:<ass...@li...>
<<< 451-host lookup did not complete
<<< 451 Could not complete sender verify
ass...@li...... Deferred: 451-host lookup did not
complete
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

G'Day All,

I have just moved to 1.0.3 because we were having a problem 
where the spamlovers list was being ignored for some reason.  

Upon moving to 1.0.3, i am now seeing the following print onto my 
screen quite often :

[root@fw assp]# ba=content-\w+: 
.*\s+.*name\s*=\s*".*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
md|com|ht[ab])"|content-\w+: 
.*\s+.*name\s*=\s*.*\.(exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|c
md|com|ht[ab])\s
be=1
ok

?????

Thanks
Nathan

Greetings,

I liked the sound of a couple of things in 1.0.2 and 1.0.3, so I decided
to rev my 1.0.1a system this morning.

First, unzip, gunzip, and bunzip all failed to find anything useful in
the downloaded ZIP file. Would it be possible to save future versions as
.tgz, or perhaps post a note on the download page with hints on how to
extract the contents? I ended up downloading the file to a Samba server
so I could use WinZip from my desktop to extract it, then FTP the
contents to the actual server. Restart failed silently because the two
files were not executable.

I followed the 1.0.2 instructions and copied just assp.pl and
rebuildspamdb.pl to /usr/local/assp.

The Configuration page now reports that I am running 1.0.3, but I see no
trace of the new "Forward all spams" feature. I think this feature will
be crucial to my ability to get ASSP out of test mode.

Incidentally, I have my system running happily at the moment. I set it
up on RedHat 9.0, using ASSP, Sendmail, MailScanner, SpamAssassin, and
two virus scanners. I'm using f-prot and ClamAV at the moment, I plan to
add ETrust as soon as I get a little time. Users can pick up their mail
using POP3 of course, but I also have SquirrelMail for web access. I
don't expect this to be a blockbuster service, but I've got about 50
users and several more have signed up for a trial in the last few days.
http://www/bogachiel.net

I did sent a small donation, I hope more of the other 195 installations
do the same!

Van



--
----------------------------------------------------------
Sign up now for Quotes of the Day, a handful of quotations
on a theme delivered every morning.
Enlightenment! Daily, for free!
mailto:tw...@wh...?subject=Subscribe_QOTD

For web hosting and maintenance,
visit Van's home page: http://www.domainvanhorn.com/van/
----------------------------------------------------------

Further on spamlover list: I'd like this to be a file rather than line on the
config page. It looks to me like I want to add every new user as a spamlover
for the first thirty days so they can identify which senders are being blocked
and get them in the whitelist.

I would set it up like this:
    linds*.com # 22 Sept
    jg # 27 Sept
    jcp # 28 Sept

Then I could review it every few days and delete the oldest lines so those
users and domains would switch to normal processing.

John, I don't know if you're familiar with MailScanner, but almost everything
in the (long) configuration file can either be a rule or a file with rules in
it. Very, very handy for the administrator.

Van

David Hooton wrote:

> Count me as one :)
>
> The way we collect spam it's much tidier if it's blackholed silently and
> added to the database.
>
> It would also be good if spamlovers could be a us...@do... entry
> rather than just the user bit.  We run quite a few domains, this is a BIG
> limitation for us :)
> --
> Regards,
>
> David Hooton
> Senior Partner
> Platform Hosting
> www.platformhosting.com
>
> > find two others who want this feature and I'll talk about adding it as an
> > option.
> >
> > j
> > ----- Original Message -----
> > From: "dave" <bo...@ev...>
> > To: <ass...@li...>
> > Sent: Thursday, September 04, 2003 3:18 PM
> > Subject: RE: [Assp-user] Spam Addresses not using domains?
> >
> >
> >> I would like if the spambucket never got any error, since I forward all
> >> my ISP accounts into the bucket.
> >>
> >> >-----Original Message-----
> >> >From: ass...@li...
> >> >[mailto:ass...@li...] On Behalf Of John Hanna
> >> >Sent: Tuesday, September 02, 2003 3:17 PM
> >> >To: ass...@li...
> >> >Subject: Re: [Assp-user] Spam Addresses not using domains?
> >> >
> >> >
> >> >Yes and yes. the spambucket addresses get the same 500 error
> >> >as all the rest of the spam you receive, but they also
> >> >contribute to the spam database. Yes it's possible that a
> >> >spammer might remove the address from the list of good
> >> >addresses, but then again... I don't think most spammers ever do that.
> >> >
> >> >john
> >> >----- Original Message -----
> >> >From: "David Hooton" <da...@pl...>
> >> >To: <ass...@li...>
> >> >Sent: Saturday, August 30, 2003 9:35 PM
> >> >Subject: Re: [Assp-user] Spam Addresses not using domains?
> >> >
> >> >
> >> >> One further question..
> >> >>
> >> >> Do spam addresses help build the spam database?  I had
> >> >envisaged them
> >> >> as a "honeypot" which would build the database, but they
> >> >just seem to
> >> >> 500 error all mail to them.
> >> >>
> >> >> --
> >> >> Regards,
> >> >>
> >> >> David Hooton
> >> >> Senior Partner
> >> >> Platform Hosting
> >> >> 1300 85 HOST
> >> >> www.platformhosting.com
> >> >>
> >> >>
> >> >>
> >> >===============================================================
> >> >=========
> >> >>   This message has been scanned for viruses and unsafe content by
> >> >>   Platform MailScanner
> >> >>
> >> >>   To report SPAM forward the message to: sp...@pl...
> >> >>   To report incorrectly tagged messages: no...@pl...
> >> >>
> >> >>   Platform MailScanner - http://mailscanner.platformhosting.com/
> >> >>   Platform Hosting - http://www.platformhosting.com/
> >> >>
> >> >>
> >> >======================================================================
> >> >> ==
> >> >>
> >> >>
> >> >>
> >> >> -------------------------------------------------------
> >> >> This sf.net email is sponsored by:ThinkGeek
> >> >> Welcome to geek heaven.
> >> >> http://thinkgeek.com/sf
> >> >> _______________________________________________
> >> >> Assp-user mailing list
> >> >> Ass...@li...
> >> >> https://lists.sourceforge.net/lists/listinfo/assp-user
> >> >
> >> >
> >> >
> >> >-------------------------------------------------------
> >> >This sf.net email is sponsored by:ThinkGeek
> >> >Welcome to geek heaven.
> >> >http://thinkgeek.com/sf _______________________________________________
> >> >Assp-user mailing list
> >> >Ass...@li...
> >> >https://lists.sourceforge.net/lists/listinfo/as>sp-user
> >> >
> >>
> >>
> >>
> >> -------------------------------------------------------
> >> This sf.net email is sponsored by:ThinkGeek
> >> Welcome to geek heaven.
> >> http://thinkgeek.com/sf
> >> _______________________________________________
> >> Assp-user mailing list
> >> Ass...@li...
> >> https://lists.sourceforge.net/lists/listinfo/assp-user
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Assp-user mailing list
> > Ass...@li...
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
> > ========================================================================
> >    This message has been scanned for spam & viruses by Mail Security.
> >    To report SPAM forward the message to:    sp...@ma...
> >    Mail Security                            www.mailsecurity.net.au
> > ========================================================================
> >
> >
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user

--
----------------------------------------------------------
Sign up now for Quotes of the Day, a handful of quotations
on a theme delivered every morning.
Enlightenment! Daily, for free!
mailto:tw...@wh...?subject=Subscribe_QOTD

For web hosting and maintenance,
visit Van's home page: http://www.domainvanhorn.com/van/
----------------------------------------------------------

Hello,

I've upgraded my customized build of ASSP to 1.0.3 and added some
new options. I can be obtained at http://www.martinnet.de/assp-mmb42b.zip.
I'm still looking for more testers and much more feedback.

An overview follows:
* denotes a generally useful feature (I think), 
# an addition for my personal use,
- a fix

# Password hidden (for my personal use, was kindly prepared by John
Hanna)
* X-Assp-Report: YES for messages generated by the Mail-Interface (easy
  filtering)
- Modified regular expression for mail-address ($mailregex) which is
  used throughout the programm now. I added [,],: in some places,
  because I experienced that some addresses were whitelisted but not
  recognized afterwards because different expressions were used (I think).
  Also, I added the necessity to include a dot in the domain part (which
  is arguably good or bad). Change as you wish.
* made DNSBL usable with dialups with the inclusion of a regular
  expression to extract the sender's ip from a (trusted) external host
  (e. g. your externally hosted mail server or proxy). Received: -lines
  are read one by one top down and compared seperately to $dnsblre until 
  a matching line is found. Additionally, expressions can be evaluated
  per line, so that different servers can be used simultaniously.
- X-Assp-Spam-Prob: is added only once (could happen twice if mail is
  directly forwarded after delivery
* Redlist-Extension: optionally treat mail as redlisted if all envelope
  recipients are redlisted (usefull for users with automatic forwarding
  to external addresses, like road-warriors
* Internal-Whitelist-Addition: optionally add only addresses supplied by
  "relayable" hosts
* Non-Greedy-Whitelist-Addition: optionally do not collect all
  header-supplied adresses for inclusion in whitelist, use only envelope
  recipients
* DNSBLRE is used for the Goodhost-Feature, too: Added a property to the 
  $Con-hash. ->{proxy} is the same as ->{ip}, unless we get to know
  otherwise. {proxy} contains  the "real"  delivering agent's ip in a
  scenario where ASSP is not the only proxy  used to receive mail. After
  the header is read completely, the Received:-lines are parsed with a
  user-supplied regex for a suitable ip. This is afterwards used for
  dnsbl-matching and the goodhosts database. If no ip can be found in
  the header, {proxy} stays equal to {ip}, and can be used for all
  non-connection-related stuff afterwards.
  Thanks to John Hanna for his clean code and good documentation of it.
 Otherwise, I wouldn't have been able to implement this.
* / - Added an option to broaden the DNSBL-search for CLASS B (-style)
  subnets. Some mayor ISPs use entire /16-ranges for dialups, and it is
  unlikely that a dialup-user doesn't deliver mail via a smarthost (like
  he should) for something besides spamming, so it's common that such
  dialin-subnets are included in blacklists. Formerly only exact matches
  or CLASS C were looked up.
* Added an option to scan all Received:-lines for DNSBL-listed ips. My
  theory is that a spammer will always try to relay  through a
  non-blacklisted host, but this host will often record the sender's ip.
  If we find any blacklisted ip in the Received:-lines, there's a good
  chance that this is SPAM. If we don't, we don't know if it's HAM or if
  the spammer disguised himself too well (which is the point where we
  started). The ips found can therefore be only used for blacklisting,
  not for good/whitelisting. To prevent that all dialups become
  blacklisted by error, only exact matches are used.
* Added an option to change $OutgoingBufSize via the interface
  (requested by Enrico)

Bye, MM
-- 
Latest personal build of ASSP is 3.1
Get it here: http://www.martinnet.de/assp-mmb42b.zip

Please read the instructions in the config-options carefully.

I'm sorry for releasing twice in two days, but that's life. Today's release
fixes a bug that Thilo Klien helped identify with the "forward all spam to
an address" feature. It also includes two often requested new features:
blocked file extensions are listed in the config file and there's a new
"block a spam bomb" feature for those of us unfortunate enough to be used by
a spammer as their "from" address. It might also be useful for blocking
email viruses which show up after the 10k mark in the file. It also should
prevent some of the TLS problems people have been having.

Please download and enjoy!

Also, I've decided to use paypal donations to help fund the replacement of
my three-year-old pocket pc, so keep those donations coming. And thanks
again to those loyal few who have made my day by saying thanks with more
than words. :-)

I'll be out of the office for a week, so expect whatever replies to be
delayed. (Gee, a new h2210 might make it easier to answer ASSP support
requests while I travel... Hmmm... maybe my motives aren't entirely
selfish.)

John

The decision hinges on weather they should go in the notspam collection =
-- I'd think that mail sent from local users to a mail list would =
probably be considered appropriate for the notspam collection. In this =
case the redRe would probably be better.=20

john
  ----- Original Message -----=20
  From: Ged West=20
  To: 'ass...@li...'=20
  Sent: Friday, September 26, 2003 12:48 PM
  Subject: RE: [Assp-user] RE: A dumb question I am sure.


  I am sorry I am showing my ignorance.  But would there be a benefit to =
not-processing these types of emails or should just redlisting them be =
enough?

  ___________________________________________
  Ged West, CCNA, MCSE, CNA, A+, N+
  IS Specialist
  Grays Harbor PUD
  gw...@gh...
  Office:  360-538-6268
  Cell:  360-580-4079
  Fax:  360-538-6340
  http://www.ghpud.org
  _________________________________________


    -----Original Message-----
    From: John Hanna [mailto:jh...@cp...]
    Sent: Friday, September 26, 2003 10:51 AM
    To: ass...@li...
    Subject: Re: [Assp-user] RE: A dumb question I am sure.


    Yes, with any version you can identify a string in the header for =
"expression to identify redlisted mail"  and starting with 1.0.2 you can =
use something in the header to identify mail for no-processing.

    Based on these examples you could use yph.*boing\.topica

    john

      ----- Original Message -----=20
      From: Ged West=20
      To: 'ass...@li...'=20
      Sent: Thursday, September 25, 2003 4:35 PM
      Subject: [Assp-user] RE: A dumb question I am sure.


      I am sure this has been answered somewhere before. but here goes.

      Is there a way to stop emails that local users send out from =
adding to the whitelist?=20

      Here is an example:

      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...=20
      yph...@bo...


      I have several users that get email from lists, when they reply to =
the list it gets added to the whitelist.  Can I use a regular expression =
to essentially redlist mail goling to these types of lists?  I don't =
really see it as a problem, it doesn't effect the way assp works it just =
clutters up my whitelist (and I am neat freak) :-0

      I am just curious if it can be done that is all.  I am not asking =
for a new feature to be added or anything like that. =20
      I just want a check box at the bottom of the config page, that =
says "check this box to have ASSP make your dinner, wash your car, and =
do your laundry".  I'm not asking for much. :-)

      Thanks

      Ged


      ---
      Outgoing mail is certified Virus Free.
      Checked by AVG anti-virus system (http://www.grisoft.com).
      Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003


      This electronic correspondence has been reviewed by Mail =
Essentials.



    ---
    Incoming mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003




  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003


  This electronic correspondence has been reviewed by Mail Essentials.

I am sorry I am showing my ignorance.  But would there be a benefit to
not-processing these types of emails or should just redlisting them be
enough?
 

___________________________________________
Ged West, CCNA, MCSE, CNA, A+, N+
IS Specialist
Grays Harbor PUD
gw...@gh...
Office:  360-538-6268
Cell:  360-580-4079
Fax:  360-538-6340
HYPERLINK "http://www.ghpud.org/" \nhttp://www.ghpud.org
_________________________________________


-----Original Message-----
From: John Hanna [mailto:jh...@cp...]
Sent: Friday, September 26, 2003 10:51 AM
To: ass...@li...
Subject: Re: [Assp-user] RE: A dumb question I am sure.


Yes, with any version you can identify a string in the header for
"expression to identify redlisted mail"  and starting with 1.0.2 you can us=
e
something in the header to identify mail for no-processing.
 
Based on these examples you could use yph.*boing\.topica
 
john
 

----- Original Message ----- 
From: HYPERLINK "mailto:gw...@gh..."Ged West 
To: HYPERLINK
"mailto:'ass...@li...'"'ass...@li...'=
 
Sent: Thursday, September 25, 2003 4:35 PM
Subject: [Assp-user] RE: A dumb question I am sure.


I am sure this has been answered somewhere before. but here goes.
 
Is there a way to stop emails that local users send out from adding to the
whitelist? 
 
Here is an example:
 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxdosabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxdveabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxmf8abwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxmpmabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxpawabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxqn8abwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxtncabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxupgabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyzuvoabwa=
a
aaa...@bo...
 
 
I have several users that get email from lists, when they reply to the list=

it gets added to the whitelist.  Can I use a regular expression to
essentially redlist mail goling to these types of lists?  I don't really se=
e
it as a problem, it doesn't effect the way assp works it just clutters up m=
y
whitelist (and I am neat freak) :-0
 
I am just curious if it can be done that is all.  I am not asking for a new=

feature to be added or anything like that.  
I just want a check box at the bottom of the config page, that says "check
this box to have ASSP make your dinner, wash your car, and do your laundry"=
.
I'm not asking for much. :-)
 
Thanks
 
Ged


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003


This electronic correspondence has been reviewed by Mail Essentials.


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003
 


This electronic correspondence has been reviewed by Mail Essentials.

Yes, with any version you can identify a string in the header for =
"expression to identify redlisted mail"  and starting with 1.0.2 you can =
use something in the header to identify mail for no-processing.

Based on these examples you could use yph.*boing\.topica

john

  ----- Original Message -----=20
  From: Ged West=20
  To: 'ass...@li...'=20
  Sent: Thursday, September 25, 2003 4:35 PM
  Subject: [Assp-user] RE: A dumb question I am sure.


  I am sure this has been answered somewhere before. but here goes.

  Is there a way to stop emails that local users send out from adding to =
the whitelist?=20

  Here is an example:

  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...=20
  yph...@bo...


  I have several users that get email from lists, when they reply to the =
list it gets added to the whitelist.  Can I use a regular expression to =
essentially redlist mail goling to these types of lists?  I don't really =
see it as a problem, it doesn't effect the way assp works it just =
clutters up my whitelist (and I am neat freak) :-0

  I am just curious if it can be done that is all.  I am not asking for =
a new feature to be added or anything like that. =20
  I just want a check box at the bottom of the config page, that says =
"check this box to have ASSP make your dinner, wash your car, and do =
your laundry".  I'm not asking for much. :-)

  Thanks

  Ged


  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003


  This electronic correspondence has been reviewed by Mail Essentials.

Hi Robert,


>Actually, now having spent a very few minutes reviewing Vpopmail and
>Qmail...  You really only have a couple of options here, and the
>open.smtp file does appear to be one of them..   As I understand it from
>the documentation, the open-smtp file is definitely the log that is used
>to record the actual IP addresses that are captured with the
>--enable-roaming-users=y  option.  That's all fine and good..

Yes, it's that.

>The problem is the 'clearopensmtp' daemon that you have to run every
>hour.. It clears / updates this logfile from any entries that are older
>than your specified time delay.

This is easy to implement. Just put a CRONTAB. The recommended value is
9-59,10 * * * * /.../clearopensmtp...

>Poprelayd  would work fine with a
>simple mod to the scanaddr  routine otherwise, as the two key bits of
>information are in the file (IP address and timestamp).  However,
>poprelay is setup to scan forward from the last EOF in a normal
>accumulative logfile.  This would also have to be turned off to rescan
>your open-smtp file from the beginning each time.

Yes, I understand.

>One other question that comes to mind is that it seems that the apparent
>default length of time to allow an authenticated POP3 user as a valid
>relay seems abnormally long to me (somewhere along the lines of 3
>days??? or 3 hours??  In any case, it's definitely not minutes... ).
>Would you change the Vpopmail cleaning routines to tighten that up?

The --enable-relay-clear-minutes=N of the VpopMail configure can be changed
to what you want. The default is 180 minutes but I have put 60.

>That being said, poprelayd  wouldn't need a huge mod to work with it...
>Simply scan the logfile every few minutes, and rebuild as you go for
>ASSP to allow it.  You can even script the running of the
>'clearopensmtp' program to be followed with the poprelayd  daemon so
>that the popip database is rebuilt at each cleanup...  I don't know if
>my skills to Perl are quite up to snuff in making the mod for Vpopmail
>logs, but I'll give it a go and see if you can get it working in
>poprelayd.

My Perl skill is also minimal.

>There is an alternative as well... But that will definitely go beyond my
>skills to implement.  The resultant compiled database  'open-smtp.cdb'
>contains the current list of ALL valid IP's that can relay after updates
>from 'clearopensmtp'.  I have NO idea what the compiled format looks
>like inside with regards to information available, field positioning,
>etc, nor do I know how to implement CDB Dbase support inside of Perl.
>But ultimately, if you only wanted to modify the PopB4SMTP routine
>inside of ASSP customized to VpopMail,  then THIS is the database you
>will need to search&scan for authorization.. NOT the logfile.  But like
>I said, I don't know the structure of that compiled database (doesn't
>seem to be very well documented at a glance), nor how to get CDB Dbase
>support working in Perl...   But if you can figure that part out, then
>perhaps there is something you could do with ASSP directly as well.

Yes, but why not use the "open-smtp file" text format in a loop in 
the PopB4SMTP
routine? For normal installations, it will not be resource-eating.

I have two other solutions but I will be unhappy with them:

- Say to ASSP that it must allow all connexions (if it's technicallay 
possible);
because QMAIL is never an open-relay this will work, but what a waste 
of resources...

- don't use ASSP anymore (I currently used it since 3 months on my actual
Netscape 4 MTA on Windows NT) and use SpamAssassin and Qmail on my 
new G5 machine.

Thus, my technical preference is to find a Perl-guru which modifies 
the PopB4SMTP
subroutine to scan the text file produced by vpopmail. I recall the syntax:

217.136.25.107:allow,RELAYCLIENT="",RBLSMTP="" 10642239803

If I had time, I would learn Perl...

Guy

I am sure this has been answered somewhere before. but here goes.
 
Is there a way to stop emails that local users send out from adding to the
whitelist? 
 
Here is an example:
 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxdosabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxdveabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxmf8abwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxmpmabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxpawabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxqn8abwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxtncabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyxupgabwa=
a
aaa...@bo... 
HYPERLINK
"mailto:yph...@bo..."yphgaqejawyzuvoabwa=
a
aaa...@bo...
 
 
I have several users that get email from lists, when they reply to the list=

it gets added to the whitelist.  Can I use a regular expression to
essentially redlist mail goling to these types of lists?  I don't really se=
e
it as a problem, it doesn't effect the way assp works it just clutters up m=
y
whitelist (and I am neat freak) :-0
 
I am just curious if it can be done that is all.  I am not asking for a new=

feature to be added or anything like that.  
I just want a check box at the bottom of the config page, that says "check
this box to have ASSP make your dinner, wash your car, and do your laundry"=
.
I'm not asking for much. :-)
 
Thanks
 
Ged

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003
 


This electronic correspondence has been reviewed by Mail Essentials.