assp-user Mailing List for Anti-Spam SMTP Proxy Server

These could be shortened.  ASSP is processing regex's with the /i
switch, so case-sensitivity is not a factor.

On 4/30/06, Ulrik L=F8ye <ul...@rt...> wrote:
> Add this to your blackRe (or bombRe)
>
> [P].{1,5}?[H].{1,5}?[A].{1,5}?[R].{1,5}?[M]\s
> [P].{1,5}?[H].{1,5}?[A].{1,5}?[R].{1,5}?[M].{1,5}?[A].{1,5}?[C].{1,5}?[Y]=
\s
> [C]\s.\s[Ii1!|l]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=83=
=C2=A2]\s.\s[L]\s.\s[Ii1!|l]\s.\s[S]\s
> [Vv]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s.\s=
[L]\s.\s[Ii1!|l]\s.\s[U]\s.\s[M]\s
> [Vv]\s.\s[Ii1!|l]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=
=83=C2=A2]\s.\s[Gg]\s.\s[Rr=C3=82=C2(r)]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=
=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s
> [X]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s.\s[=
N]\s.\s[Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s.\s[X]\=
s
> [Aa@=C3=83=C2=A4=C3=83=C3=83=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s.\s[M]\s.\s[=
B]\s.\s[Ii1!|l]\s.\s[E]\s.\s[N]\s
> [S]\s.\s[O]\s.\s[M]\s.\s[A]\s
> [M]\s.\s[E]\s.\s[R]\s.\s[Ii1!|l]\s.\s[D]\s.\s[I]\s.\s[A]\s
> \s[cC].[il1I].[aA].[lL].[il1I].[sS]\s
> \s[V].[il1I].[aA].[G].[R].[aA]\s
> \s[cC][il1I][aA][lL][il1I][sS]\s
> [xX]anax
> [Ll][Ee3=C3=83=E2=80=B9=C3=83=C2=AB=C3=83=E2=80=B0=C3=83=C2=AA=C3=83=C2=
=A8=C3=83=C2(c)][Vv][Ii1!|l][Tt][Rr=C3=82=C2(r)][Aa@=C3=83=C2=A4=C3=83 =C3=
=83=C2=A1=C3=83=C2=A3=C3=83=C2=A2]\s
>
>
> Mvh.
> Ulrik L=F8ye
>
> -----Oprindelig meddelelse-----
> Fra: ass...@li... [mailto:assp-user-admin@lists.=
sourceforge.net] P=E5 vegne af as...@pi...
> Sendt: 30. april 2006 07:57
> Til: Ass...@li...
> Emne: [Assp-user] Medical Spam not being Stopped after training
>
> Hi all
>
> After training ASSP for with over 20 of these messages and confirming tha=
t the rebuild is work, they still get thought.
>
> I would like to know now I can stop these messages.
>
> Also where can I get a copy of the new testing version of ASSP.
>
> Has the problem with it not working with Debian Woody been fixed ?
>
> Cheers
> Mike
>


--
ME2

Hi Fritz

Yep

Mike

On Sun, April 30, 2006 6:45 pm, Fritz Borgstedt wrote:
> ass...@li... schreibt:
>> Any version I have tried after 1.1.1 has had an issue where the admin
>> page does not display, instead a file is created in the running direct=
ory
>>  with the content of the page.
>
> Did you copy the image folder and the content to the assp directory?
>
>
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, securit=
y?
> Get stuff done quickly with pre-integrated technology to make your job
> easier Download IBM WebSphere Application Server v.1.0.1 based on Apach=
e
> Geronimo
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=
=3D121642
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>

ass...@li... schreibt:
>Any version I have tried after 1.1.1 has had an issue where the admin
>page
>does not display, instead a file is created in the running directory
>with
>the content of the page.

Did you copy the image folder and the content to the assp directory?

Hi Lars

Any version I have tried after 1.1.1 has had an issue where the admin pag=
e
does not display, instead a file is created in the running directory with
the content of the page.

Mike


On Sun, April 30, 2006 5:57 pm, Lars Troen wrote:
>>

>> Has the problem with it not working with Debian Woody been fixed ?
>>
>>
> What problem with Woody?
> I have been running 1.1.0 and 1.1.1 on woody without any problems excep=
t
> for this occatinal "need to restart assp" issue.
>
> Lars
>
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, securit=
y?
> Get stuff done quickly with pre-integrated technology to make your job
> easier Download IBM WebSphere Application Server v.1.0.1 based on Apach=
e
> Geronimo
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=120709&bid&3057&dat=12164=
2
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>

>=20
> Has the problem with it not working with Debian Woody been fixed ?
>=20
What problem with Woody?=20
I have been running 1.1.0 and 1.1.1 on woody without any problems except
for this occatinal "need to restart assp" issue.

Lars
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Hi all

After training ASSP for with over 20 of these messages and confirming tha=
t
the rebuild is work, they still get thought.

I would like to know now I can stop these messages.

Also where can I get a copy of the new testing version of ASSP.

Has the problem with it not working with Debian Woody been fixed ?

Cheers
Mike

NORM!  If you don't get it, you don't get it.

________________________________

From: ass...@li... on behalf of Owen Dare
Sent: Thu 4/27/2006 6:46 PM
To: ass...@li...
Subject: [Assp-user] Norm




What is the ideal number for the norm?
After rebuilding I get these figures.
Just wondering if it should be closer or below 1.00 and how best to =
maintain
it. I have many more non-spam compared to spam.

mt=3D206072
Analyzing c:\assp/errors/spam
161

Analyzing c:\assp/errors/notspam
204

Analyzing c:\assp/spam
11692 ***

Analyzing c:\assp/notspam
21003 *******

Found 5416699 spam words, 4578263 non-spam words.
Generating weighted keys...
norm=3D1.1831
Saving rebuilt SPAM
database*************************************************

total time processing=3D601 second(s)
Uploading Greylist via Direct Connection
uploaded 884 bytes

Thanks
Owen Dare


________________________________________________
Message sent using UebiMiau 2.7.9



This message was scanned by ClamAV antivirus for Windows.
Although no virus was found the recipient should exercise due care.



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, =
security?
Get stuff done quickly with pre-integrated technology to make your job =
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache =
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dk&kid=120709&bid&3057&dat=121642
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

Would the "newest possible" be whats on sourceforge ?


----- Original Message ----- 
From: "Fritz Borgstedt" <fb...@iw...>
To: <ass...@li...>
Sent: Saturday, April 29, 2006 4:35 PM
Subject: Re: [Assp-user] ASSP stops working


> ass...@li... schreibt:
>>Very strangly my ASSP stopped today as well. I'm running the 1.2beta
>>from
>>fritz's site (as of 2 weeks ago)
>
> Old betas are obsolet ))).
>
> Please run the 1.1.2 b1 - it is not changing and stable
>
> or if you want to participate in the beta testing of the 1.2.0 version
> run the newest possible.
>
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job 
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
> 

ass...@li... schreibt:
>Very strangly my ASSP stopped today as well. I'm running the 1.2beta
>from 
>fritz's site (as of 2 weeks ago)

Old betas are obsolet ))).

Please run the 1.1.2 b1 - it is not changing and stable

or if you want to participate in the beta testing of the 1.2.0 version
run the newest possible.

Very strangly my ASSP stopped today as well. I'm running the 1.2beta from 
fritz's site (as of 2 weeks ago)
It was very odd because the "tail maillog" showed data from 2 hours back. 
I stopped then restarted assp (unix command) and then all of a sudden the 
maillog had log entries from the intermittiant dead periods ! It was acting 
like the log was not flushed to disk.
During the dead period ASSP would accept connections (socket would connect) 
but would not respond to SMTP at all, but the admin WWW interface worked 
fine.  Stopping and restarting worked fine.

Any additional info ? I'll send whatever you'd like but dont know if any 
more is useful
For now I've set my nightly script which rebuilds the spamdb to also kill 
and restart assp instead of sending it a HUP

-David



>>> I have seen this exact same behavior for quite some time now. Restarting 
>>> the assp service or the SMTP receiver service solves the
>>> problem.  Days or weeks sound like a dream, my server is doing it
>>> several times daily.  I installed a service watcher app which
>>> watches the port and restarts assp when port 25 stops responding..
>
> > Is this the same also after you upgraded to the 1.2.0beta? How much
> > memory is on your system and what is your mail load?
>
> It would really help if you guys would provide minimal info when reporting 
> problems like this - you know, like the version of ASSP, the 
> platform/version, etc...
>
> -- 
>
> Best regards,
>
> Charles
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job 
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
> 

>> I have seen this exact same behavior for quite some time now. 
>> Restarting the assp service or the SMTP receiver service solves the
>> problem.  Days or weeks sound like a dream, my server is doing it
>> several times daily.  I installed a service watcher app which
>> watches the port and restarts assp when port 25 stops responding..

 > Is this the same also after you upgraded to the 1.2.0beta? How much
 > memory is on your system and what is your mail load?

It would really help if you guys would provide minimal info when 
reporting problems like this - you know, like the version of ASSP, the 
platform/version, etc...

-- 

Best regards,

Charles

Is this the same also after you upgraded to the 1.2.0beta? How much
memory is on your system and what is your mail load?
=20
Lars


________________________________

	From: ass...@li...
[mailto:ass...@li...] On Behalf Of Brett Hays
	Sent: 28. april 2006 03:13
	To: Ass...@li...
	Subject: [Assp-user] ASSP stops working
=09
=09
	I have seen this exact same behavior for quite some time now.
Restarting the assp service or the SMTP receiver service solves the
problem.  Days or weeks sound like a dream, my server is doing it
several times daily.  I installed a service watcher app which watches
the port and restarts assp when port 25 stops responding..

Could somebody explain what happened here?
ASSP stopped responding for a couple of minutes during this.
I would think that adding 6.00.2800.1807 to the PB.white would not be 
useful. :o)

Thanks,

Doug Traylor
------------------------------------------------------------------------------

Apr-28-06 09:24:41 PB: adding(white) 67.96.53.18 - 
Whitelist:spe...@vi...

Apr-28-06 09:24:41 67.96.53.18 <spe...@vi...> to: 
<auser>@<mydomain>.com recipient accepted: <auser>@<mydomain>.com
Apr-28-06 09:24:46 67.96.53.18 <spe...@vi...> to: 
<auser>@<mydomain>.com Received-SPF: neutral (H-F_Spam_Filter: local policy) 
client-ip=67.96.53.18; envelope-from= spe...@vi...; 
helo=viteconline.com;
Apr-28-06 09:24:46 67.96.53.18 <spe...@vi...> to: 
<auser>@<mydomain>.com local or whitelisted - (no bad attachments)

Apr-28-06 09:24:46 PB: adding(white) 10.0.2.77 - email
Apr-28-06 09:24:46 PB:email pb.white addition: 10.0.2.77

Apr-28-06 09:24:58 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:25:09 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:25:22 Cache reset (d:\assp/pb/pbdb.white.db)

Apr-28-06 09:25:30 PB: adding(white) 6.00.2800.1807 - email
Apr-28-06 09:25:30 PB:email pb.white addition: 6.00.2800.1807

Apr-28-06 09:25:36 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:25:47 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:25:58 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:26:12 Cache reset (d:\assp/pb/pbdb.white.db)

Apr-28-06 09:26:14 PB:email pb.white addition: 6.00.2800.1807

Apr-28-06 09:26:25 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:26:36 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:26:49 Cache reset (d:\assp/pb/pbdb.white.db)

Apr-28-06 09:26:58 Email whitelist addition: ne...@ne...
Apr-28-06 09:26:59 PB: adding(white) 6.00.2800.1543 - email
Apr-28-06 09:26:59 PB:email pb.white addition: 6.00.2800.1543

Apr-28-06 09:27:04 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:27:15 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:27:27 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:27:40 Cache reset (d:\assp/pb/pbdb.white.db)
Apr-28-06 09:27:44 Email whitelist addition: title=3d...@ne...

We previously talked about this being checked as "bayesian spam". Check =
at the e-mail header and let me known if you think that this should be =
added into the spam... it's a delivery receipt

Here's an example :



Microsoft Mail Internet Headers Version 2.0
Received: from ASSP-nospam ([192.168.0.2]) by sonodc01.mydomain.com with =
Microsoft SMTPSVC(5.0.2195.6713);
	 Fri, 28 Apr 2006 09:46:31 -0400
Received: from 205.150.116.5 ([205.150.116.5] =
helo=3Dsonosrv03.mydomain.com)
	by ASSP-nospam; 28 Apr 2006 09:46:30 -0400
From: pos...@so...
To: Au...@my...
Date: Fri, 28 Apr 2006 09:46:29 -0400
MIME-Version: 1.0
Content-Type: multipart/report; report-type=3Ddelivery-status;
	boundary=3D"9B095B5ADSN=3D_01C662E9DBDB1ABF00000199sonosrv03.sonovi"
Message-ID: <IrT...@so...>
Subject: ****SPAM**** Notification =20
	d'=3D?unicode-1-1-utf-7?Q?+AOk-tat =20
	de =20
	remise =20
	(relais)?=3D
X-Assp-Delay: not delayed (auto whitelisted); 28 Apr 2006 09:46:30 -0400
X-Assp-Received-SPF: pass (ASSP-nospam: local policy) =
client-ip=3D205.150.116.5;
	envelope-from=3D ; helo=3Dsonosrv03.mydomain.com;
X-Assp-Received-RBL: pass (ASSP-nospam: local policy) rbl=3Dnone;
	client-ip=3D205.150.116.5;
X-Assp-Spam-Prob: 1.00000
X-Assp-Envelope-From:=20
X-Assp-Spam: YES
X-Assp-Spam-Reason: Bayesian spam
X-Intended-For: Au...@my...
Return-Path: <>
X-OriginalArrivalTime: 28 Apr 2006 13:46:31.0892 (UTC) =
FILETIME=3D[28503140:01C66ACA]

--9B095B5ADSN=3D_01C662E9DBDB1ABF00000199sonosrv03.sonovi
Content-Type: text/plain; charset=3Dunicode-1-1-utf-7

--9B095B5ADSN=3D_01C662E9DBDB1ABF00000199sonosrv03.sonovi
Content-Type: message/delivery-status

--9B095B5ADSN=3D_01C662E9DBDB1ABF00000199sonosrv03.sonovi
Content-Type: message/rfc822

Received: from sonodc01.mydomain.com ([192.168.0.2]) by =
sonosrv03.mydomain.com with Microsoft SMTPSVC(5.0.2195.6713);
	 Fri, 28 Apr 2006 09:46:20 -0400
Received: from 192.168.0.4 ([192.168.0.4] helo=3Dsonodc01.mydomain.com) =
by
	ASSP-nospam; 28 Apr 2006 09:46:20 -0400
content-class: urn:content-classes:message
Return-Receipt-To: "Manon Lauzon" <Au...@my...>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary=3D"----_=3D_NextPart_001_01C66ACA.20F97438"
Disposition-Notification-To: "Manon Lauzon" <Au...@my...>
Subject: ****SPAM**** RE: RE :=20
X-MIMEOLE: Produced By Microsoft Exchange V6.0.6603.0
Date: Fri, 28 Apr 2006 09:46:19 -0400
Message-ID: =
<218...@so...>
X-MS-Has-Attach:=20
X-MS-TNEF-Correlator:=20
Thread-Topic: RE :=20
Thread-Index: AcZqyYoLlpRyaWMBSledZAiZOXmhWwAABCWQ
From: "Manon Lauzon" <Au...@my...>
To: "Lefebvre, Alain" <ALe...@PE...>
Return-Path: Au...@my...
X-OriginalArrivalTime: 28 Apr 2006 13:46:20.0617 (UTC) =
FILETIME=3D[2197C390:01C66ACA]

------_=3D_NextPart_001_01C66ACA.20F97438
Content-Type: text/plain;
	charset=3D"iso-8859-1"
Content-Transfer-Encoding: quoted-printable

------_=3D_NextPart_001_01C66ACA.20F97438
Content-Type: text/html;
	charset=3D"iso-8859-1"
Content-Transfer-Encoding: quoted-printable


------_=3D_NextPart_001_01C66ACA.20F97438--

--9B095B5ADSN=3D_01C662E9DBDB1ABF00000199sonosrv03.sonovi--

Fixed. Great, thanks!

Dajo

-----Oorspronkelijk bericht-----
Van: ass...@li...
[mailto:ass...@li...] Namens Fritz Borgstedt
Verzonden: vrijdag 28 april 2006 13:40
Aan: ass...@li...
Onderwerp: Re: [Assp-user] how to move the maillogs to their own
directory

ass...@li... schreibt:
>In Beta 10, it's impossible to search the maillog.

Please try 11.



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

There are exceptions to every rule, and in this case, regarding ASSP,
that is where autowhitelisting comes into play.
=20

-----Original Message-----
From: ass...@li...
[mailto:ass...@li...] On Behalf Of Fritz
Borgstedt
Sent: Thursday, April 27, 2006 4:49 PM
To: ass...@li...
Subject: Re: [Assp-user] Blacklisted domains not working 100%

ass...@li... schreibt:
>There are many mom and pop shops out there that=20
>don't want email from any place more than 50 miles away.  So be it,
>their=20
>loss.  Nothing to be offended by.
>
>It's getting late there friend, go have a beer take a break.  I wish
>I could=20
>but I can't mix beer with my meds.
>
>Doug=20

I am not personally offended, even less because of nationality. But I
HATE this attitude. You will tell me, that the owner of a mom and pop
shop will agree, to get no mails from Europe, if you explain to him,
that means also, he will get no mail from aunt Erna. I really doubt it.

And I really meant it: why bother with complicated methods like ASSP
if its so easy to block "the source" of SPAM.
But ok, I just blocked all senders with IPs located in the US. May be
I built it in as an option. That is at least an option, where I get
the real originator.



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

ass...@li... schreibt:
>In Beta 10, it's impossible to search the maillog.

Please try 11.

John, thank you. And thanks again for ASSP. All of the great work that
Fritz, Przemek, John Calvi, and others have done and are doing is based on
the rock-solid foundation that you built. Your ingenious implementation of
whitelisting and Bayesian filtering continues to be the core feature that
makes ASSP so incredibly efficient, accurate, and adaptable. It's a great
testament to the work you have done that such talented programmers have
jumped on board to carry on with this project that you began.

Ced.

ass...@li... on Thursday, April 27, 2006 at 7:30 PM
-0500 wrote:
>I have to say that this is good news. It looks to me that main.db and
>daily.db are still active files, but they have new ones as well. It looks
>like I'll have to download the clam source to figure out how the new
>files differ from the old ones. Or maybe I can find it in their forum
>archives somewhere.
>
>Anyway, if you have been using tunedb I don't see that you should abandon
>it just because of fear. ASSP has never been able to look inside zip
>files. ASSP has always relied on blocking messages with evil extensions
>like .pif and .exe and such. 
>
>I will try to check into the changes to the database.
>
>John
>
>Ced Paine <cp...@fe...> wrote:
>
>  Can someone explain how John Hanna's tuned.db works? It's still
>available on the Sourceforge site. I've been downloading it once/day via
>a DOS batch script and I've pointed ASSP to it. What confuses me is that
>the number of virus definitions it contains is still changing, at least
>according to my logs:
>
>Apr-12-06 13:16:42 Loading virus definitions ...
>Apr-12-06 13:16:42 Virus definitions loaded; count=440
>Apr-13-06 01:44:39 Loading virus definitions ...
>Apr-13-06 01:44:39 Virus definitions loaded; count=440
>Apr-14-06 01:48:29 Loading virus definitions ...
>Apr-14-06 01:48:29 Virus definitions loaded; count=439
>Apr-15-06 01:44:20 Loading virus definitions ...
>Apr-15-06 01:44:20 Virus definitions loaded; count=439
>Apr-16-06 01:43:52 Loading virus definitions ...
>Apr-16-06 01:43:52 Virus definitions loaded; count=423
>Apr-17-06 01:44:16 Loading virus definitions ...
>Apr-17-06 01:44:16 Virus definitions loaded; count=439
>Apr-18-06 01:44:50 Loading virus definitions ...
>Apr-18-06 01:44:50 Virus definitions loaded; count=439
>Apr-19-06 01:44:51 Loading virus definitions ...
>Apr-19-06 01:44:51 Virus definitions loaded; count=439
>Apr-20-06 01:44:48 Loading virus definitions ...
>Apr-20-06 01:44:49 Virus definitions loaded; count=439
>Apr-21-06 01:44:29 Loading virus definitions ...
>Apr-21-06 01:44:29 Virus definitions loaded; count=398
>Apr-22-06 01:44:19 Loading virus definitions ...
>Apr-22-06 01:44:19 Virus definitions loaded; count=408
>Apr-23-06 01:44:12 Loading virus definitions ...
>Apr-23-06 01:44:12 Virus definitions loaded; count=408
>Apr-24-06 01:44:45 Loading virus definitions ...
>Apr-24-06 01:44:45 Virus definitions loaded; count=406
>Apr-25-06 01:45:06 Loading virus definitions ...
>Apr-25-06 01:45:06 Virus definitions loaded; count=263
>Apr-26-06 01:44:47 Loading virus definitions ...
>Apr-26-06 01:44:47 Virus definitions loaded; count=405
>
>If tuned.db is based on clamAV's DB file, why is it still changing? If
>not, is it, in fact, up-to-date?
>
>Ced
>
>[ mailto:ass...@li...
>]ass...@li... on Wednesday, April 26, 2006 at 3:52 PM
>-0500 wrote:
>It is the same old DB file.  It does not convert the NDB files(now
>there's 
>an idea for a new tool!).  Once you get it, there is no need to get it 
>again.  It does not change.  There is no need to script unpacking the cvd 
>files with sigtool for ASSP only.
>
>If you have any email volume to speak of, you will be wasting a huge
>amount 
>of CPU to scan for two year old viruses in ASSP since you will still need
>to 
>run an up-to-date virus scanner and will then be double scanning
>everything 
>that gets through ASSP.
>
>I recommend that you simply disable ASSP's AV scanning until there is 
>substantial work done there.
>
>Doug Traylor
> 
>
>
>
>
>---------------------------------------------------------------------------Talk
>is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. 

In Beta 10, it's impossible to search the maillog.
The result is always:
"no results found, searched in 0 log files (0 lines)"=20

Dajo


-----Oorspronkelijk bericht-----
Van: ass...@li...
[mailto:ass...@li...] Namens Fritz Borgstedt
Verzonden: donderdag 27 april 2006 18:36
Aan: ass...@li...
Onderwerp: Re: [Assp-user] how to move the maillogs to their own
directory


>Is this a known problem? Did I forget to do something?

It is fixed now (i hope).

09 is out. Please test it.

Fritz



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user

I think I've got it now.

Thanks

Fritz Borgstedt wrote:
> ass...@li... schreibt:
>> Am I right in 
>> thinking this PB value will in/decrease as scores for new offences
>> are 
>> added and old offences expire?
> 
> Old offenses expire - but not if you allow writing to
> denysmtpfromfile. This is the strongest block and can only be removed
> manually (button file edit is provided)
> or by email removewhite (ip nr in bootom of message).
> 
> 
> 
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 

ass...@li... schreibt:
>sigh, I sure wasn't thinking straight yesterday...
>Of course I need to keep the Bayesian check in testmode, I want the
>subject to get tagged and such. And since PB adding works also for
>filters in testmode, it's ok this way.

That is true today.
I imagine to run Bayesian in scoring modus and let PB tag it if in
testmode.

sigh, I sure wasn't thinking straight yesterday...
Of course I need to keep the Bayesian check in testmode, I want the
subject to get tagged and such. And since PB adding works also for
filters in testmode, it's ok this way.

2006/4/28, Wim Borghs <wim...@gm...>:
> Wow! I'm going to love having that especially for the bayesian check!
> I still can't afford to switch off the test mode for the bayesian
> filter. Some legitimate mails are marked as spam by the bayesian
> filter. It's definitely good enough to use it for adding to the
> pb-score but not good enough to block mails in our environment.
> Great work Fritz!

>Restarting the assp service or the SMTP receiver service solves the
>problem. 

I bet, it is not an ASSP Problem.
I assume, your mailserver is configured for ip-limitation ore
something similar.

ass...@li... schreibt:
>Reporting-MTA: dns;EXCHANGE1.harborfreight.com 
>Received-From-MTA: dns;harborfreight.com 
>Arrival-Date: Thu, 27 Apr 2006 17:46:13 -0700 
> 
>Final-Recipient: rfc822;[ mailto:sj...@ht...
>]mailto:sj...@ht... 
>Action: failed 
>Status: 5.5.0 
>Diagnostic-Code: smtp;551 This is not a relay host - mail must be to
>or from host domain. 

I do not know this error code. Try to find something in the log.