assp-user Mailing List for Anti-Spam SMTP Proxy Server

For Users of ASSP  <ass...@li...> schreibt:
>Curiously, I also noticed my ldapnotfounddb is set to the default
>value 
>(because I never changed it) of "ldapnotfound".  However, the file on
>my 
>hard drive is "ldaplist.notfound".

That is a bug, will be fixed in 09.

For Users of ASSP  <ass...@li...> schreibt:
>Thank you.  Is there anything wrong with just setting npLocalRe to
>use 
>the same file as my noProcessingDomains?


That may work. But there are differences in the use of those fields.
The easiest way would be to set npLocalRe to npRe.

  On 8/31/2010 4:05 AM, Charles Marcus wrote:
> On 2010-08-31 5:20 AM, Fritz Borgstedt<fb...@iw...>  wrote:
>> For Users of ASSP<ass...@li...>  schreibt:
>>> Does this mean my recipient validation needs to be adjusted - this
>>> ldaplist.notfound is now 14k in size, while my ldaplist only has the
>>> dozen entries appropriate for my domain?
>> No, it means, that ASSP is trying to reduce the load by caching the
>> misses in recipient validation.
> Maybe those type files would be better named something more generic and
> more descriptive, like:
>
> mapname-neg.cache
>
> Then of course you could have
>
> mapname-pos.cache
>
Found and notfound are clear enough - I just needed to confirm that the 
size of the notfound file was appropriate.

What might be helpful would be to add a note to ldapnotfounddb, 
something like, "If LDAP is used for recipient validation, this file may 
contain a relatively large number of invalid addresses."

Curiously, I also noticed my ldapnotfounddb is set to the default value 
(because I never changed it) of "ldapnotfound".  However, the file on my 
hard drive is "ldaplist.notfound".  Using version 1.7.5.7(1.0.07) via 
auto-update.
-- 
Daniel

  On 8/31/2010 2:18 AM, Fritz Borgstedt wrote:
> There are two regex option for marking messages to be  "noprocessing":
>
>
> - Regular Expression to Identify NoProcessing Incoming Mails* (npRe)
>
> - Regular Expression to Identify NoProcessing Outgoing Mails*
> (npLocalRe).
>
> In your case the group should also be in the "npLocalRe" field.

Thank you.  Is there anything wrong with just setting npLocalRe to use 
the same file as my noProcessingDomains?
-- 
Daniel

On 2010-08-31 5:20 AM, Fritz Borgstedt <fb...@iw...> wrote:
> For Users of ASSP  <ass...@li...> schreibt:
>> Does this mean my recipient validation needs to be adjusted - this 
>> ldaplist.notfound is now 14k in size, while my ldaplist only has the 
>> dozen entries appropriate for my domain?

> No, it means, that ASSP is trying to reduce the load by caching the
> misses in recipient validation.

Maybe those type files would be better named something more generic and
more descriptive, like:

mapname-neg.cache

Then of course you could have

mapname-pos.cache

-- 

Best regards,

Charles

For Users of ASSP  <ass...@li...> schreibt:
>Does this mean my recipient validation needs to be adjusted - this 
>ldaplist.notfound is now 14k in size, while my ldaplist only has the 
>dozen entries appropriate for my domain?

No, it means, that ASSP is trying to reduce the load by caching the
misses in recipient validation.

For Users of ASSP  <ass...@li...> schreibt:
>Or is there something that should be 
>changed so posts to groups are treated as noprocessing instead of 
>whitelisted (because I'm a local sender) and notspam?


There are two regex option for marking messages to be  "noprocessing":


- Regular Expression to Identify NoProcessing Incoming Mails* (npRe)

- Regular Expression to Identify NoProcessing Outgoing Mails*
(npLocalRe).

In your case the group should also be in the "npLocalRe" field.

  I was reviewing my notspam collection, and I see that my own posts to 
email lists (like this one) are being included in the notspam 
collection.  I have this group and others setup as noprocessing.  Is 
this proper and desired behavior?  Or is there something that should be 
changed so posts to groups are treated as noprocessing instead of 
whitelisted (because I'm a local sender) and notspam?

-- 
Daniel

  ASSP's been quiet for a while - just the way it's supposed to be.  I 
was idly leafing through my folders, checking on my server health, when 
I found this file.  Based on the contents - it looks like a bunch of 
attempts to reach garbage addresses - some in my domain, some not (like 
yahoo).

Does this mean my recipient validation needs to be adjusted - this 
ldaplist.notfound is now 14k in size, while my ldaplist only has the 
dozen entries appropriate for my domain?
-- 
Daniel

[...]
> checking and adding PPM-repositories for module installation
> 'ppm' is not recognized as an internal or external command,
> operable program or batch file.

Uninstall ActivePerl, reboot (not needed but it's just to stay on
the safe side) and ensure to remove the Perl folder, then install
ActivePerl 5.10 running the setup "as admin" and ensure to
check the option to add the Perl paths to the PATH variable
now fire up a fresh "cmd" and issue a "PATH" command, if
all's ok, you should see some perl paths in there; if not, you'll
need to add 

<path>\Perl\Site
<path>\Perl\Bin

to your *system* PATH (NOT to the user one) at that point
reopening a cmd should show the correct path, if all ok, just
try entering "ppm version" from console and you should
see some messages showing the ppm and perl versions
if all ok again, just proceed with ASSP installation (ensure
the system is connected to the internet and isn't using a
proxy - otherwise you'll need to take some further steps)

Install activestate perl 5.10.*    x86.
On Aug 27, 2010, at 12:29 PM, Kelvin Krastel wrote:

> Well I tried to install it today on my exchange server with the
> following result:
> 
> 
> 
> Apparently ppm is not installed.
> 
> 
> 
> What am I doing wrong?
> 
> 
> 
> Kelvin Krastel
> 
> 
> 
> -------------Microsoft Windows [Version 5.2.3790]
> 
> 
> 
> C:\ASSP\assp.mod\install>mod_inst.pl
> 
> Perl 5.012001  ASSP module installation helper version 1.10
> 
> 
> 
> reading proxy settings from assp.cfg
> 
> Odd number of elements in hash assignment at
> C:\ASSP\assp.mod\install\mod_inst.p
> 
> l line 71, <CFG> chunk 1.
> 
> %HTTP_proxy% is not set - will make downloads via direct connect
> 
> copying needed binary files to C:\\Perl\\bin
> 
> C:\ASSP\assp.mod\bin\libeay32.dll
> 
> C:\ASSP\assp.mod\bin\libssl32.dll
> 
> C:\ASSP\assp.mod\bin\ocr
> 
> C:\ASSP\assp.mod\bin\ocr.bat
> 
> C:\ASSP\assp.mod\bin\pdf2ocr
> 
> C:\ASSP\assp.mod\bin\pdf2ocr.bat
> 
> C:\ASSP\assp.mod\bin\pdf2ocrturntotext
> 
> C:\ASSP\assp.mod\bin\pdf2ocrturntotext.bat
> 
> C:\ASSP\assp.mod\bin\pdfbklt
> 
> C:\ASSP\assp.mod\bin\pdfbklt.bat
> 
> C:\ASSP\assp.mod\bin\pdffonts.exe
> 
> C:\ASSP\assp.mod\bin\pdfgetext
> 
> C:\ASSP\assp.mod\bin\pdfgetext.bat
> 
> C:\ASSP\assp.mod\bin\pdfimages.exe
> 
> C:\ASSP\assp.mod\bin\pdfinfo.bat
> 
> C:\ASSP\assp.mod\bin\pdfinfo.exe
> 
> C:\ASSP\assp.mod\bin\pdfinfo.pl
> 
> C:\ASSP\assp.mod\bin\pdfrevert
> 
> C:\ASSP\assp.mod\bin\pdfrevert.bat
> 
> C:\ASSP\assp.mod\bin\pdfstamp
> 
> C:\ASSP\assp.mod\bin\pdfstamp.bat
> 
> C:\ASSP\assp.mod\bin\pdftk.exe
> 
> C:\ASSP\assp.mod\bin\pdftopbm.exe
> 
> C:\ASSP\assp.mod\bin\pdftops.exe
> 
> C:\ASSP\assp.mod\bin\pdftotext.exe
> 
> C:\ASSP\assp.mod\bin\ssleay32.dll
> 
>       26 file(s) copied.
> 
> checking and adding PPM-repositories for module installation
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> adding respository 'trouchelle' 'http://trouchelle.com/ppm10/' to ppm
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> adding respository 'trouch-act'
> 'http://trouchelle.com/ppm10/activestate/1000/'
> 
> to ppm
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> adding respository 'uni_winnipeg'
> 'http://cpan.uwinnipeg.ca/PPMPackages/10xx/' t
> 
> o ppm
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> adding respository 'bribes.org' 'http://www.bribes.org/perl/ppm/' to ppm
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> adding respository 'C:\ASSP\assp.mod\' to ppm
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> ================================
> 
> = Installing perl modules      =
> 
> ================================
> 
> install module Authen::SASL version 2.1401
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> module Compress::Zlib version 2.027 is already installed
> 
> module Digest::MD5 version 2.39 is already installed
> 
> module Digest::SHA1 version 2.12 is already installed
> 
> install module Email::MIME version 1.903
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Email::MIME::Modifier version 1.903
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Email::Send version 2.198
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Email::Valid version 0.182
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module File::ReadBackwards version 1.04
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module File::Scan::ClamAV version 1.91
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> module LWP::Simple version 5.827 is already installed
> 
> install module MIME::Types version 1.23
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module MIME::Tools version 5.427
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Mail::SPF version 2.007
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Mail::SRS version 0.31
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Net::CIDR::Lite version 0.20
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Net::DNS version 0.65
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Net::IP::Match::Regexp version 1.01
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Net::LDAP version 0.36
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> module Net::SMTP version 2.31 is already installed
> 
> install module Net::SenderBase version 1.01
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> module PerlIO::scalar version 0.07 is already installed
> 
> module Time::HiRes version 1.9721 is already installed
> 
> install module IO::Socket::SSL version 1.14
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Net::Syslog version 0.03
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> install module Win32::Daemon version 20030617
> 
> 'ppm' is not recognized as an internal or external command,
> 
> operable program or batch file.
> 
> 
> 
> finished module installation for ASSP
> 
> 
> 
> 
> 
> checking module installation for ASSP
> 
> 
> 
> module Authen::SASL is not installed    [FAILED]
> 
> module Compress::Zlib 2.027 is installed        [OK]
> 
> module Digest::MD5 2.39 is installed    [OK]
> 
> module Digest::SHA1 2.12 is installed   [OK]
> 
> module Email::MIME is not installed     [FAILED]
> 
> module Email::MIME::Modifier is not installed   [FAILED]
> 
> module Email::Send is not installed     [FAILED]
> 
> module Email::Valid is not installed    [FAILED]
> 
> module File::ReadBackwards is not installed     [FAILED]
> 
> module File::Scan::ClamAV is not installed      [FAILED]
> 
> module LWP::Simple 5.827 is installed   [OK]
> 
> module MIME::Types is not installed     [FAILED]
> 
> module MIME::Tools is not installed     [FAILED]
> 
> module Mail::SPF is not installed       [FAILED]
> 
> module Mail::SRS is not installed       [FAILED]
> 
> module Net::CIDR::Lite is not installed [FAILED]
> 
> module Net::DNS is not installed        [FAILED]
> 
> module Net::IP::Match::Regexp is not installed  [FAILED]
> 
> module Net::LDAP is not installed       [FAILED]
> 
> module Net::SMTP 2.31 is installed      [OK]
> 
> module Net::SenderBase is not installed [FAILED]
> 
> module PerlIO::scalar 0.07 is installed [OK]
> 
> module Time::HiRes 1.9721 is installed  [OK]
> 
> module IO::Socket::SSL is not installed [FAILED]
> 
> module Net::Syslog is not installed     [FAILED]
> 
> module Win32::Daemon is not installed   [FAILED]
> 
> 
> 
> 
> 
> there where errors - to correct them do the following:
> 
> 
> 
> - start cmd.exe
> 
> - type >ppm
> 
> - if the error was '*** package PACKAGENAME not installed ***'
> 
> - type >install PACKAGENAME
> 
> - if the error was 'ppm install failed: Can't determine best'
> 
> - type >s PACKAGENAME
> 
> - look for the line with the highest modules-versionnumber and keep in
> mind the
> 
> NUMBER on the left site
> 
> - type >install NUMBER   or   >upgrade --install NUMBER
> 
> - if you need more help on ppm  type  help
> 
> 
> 
> 
> 
> - or you may use CPAN to install some modules
> 
> - for this you'll need to download
> ftp://ftp.microsoft.com/softlib/mslfiles/nma
> 
> ke15.exe
> 
> - extract nmake15.exe  to your  perl/bin  Directory
> 
> - as long, as you have no C-compiler installed on your system, you can
> only inst
> 
> all
> 
> - modules that have no XS-code!
> 
> 
> 
> 
> 
> C:\ASSP\assp.mod\install>
> 
> 
> 
> 
> 
> ________________________________________________________________________
> ________________
> 
> Sent from my laptop. Or from my desktop. Or from my Android Phone. Or
> from an Internet kiosk. Who cares?
> 
> 
> 
> ------------------------------------------------------------------------------
> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
> Be part of this innovative community and reach millions of netbook users 
> worldwide. Take advantage of special opportunities to increase revenue and 
> speed time-to-market. Join now, and jumpstart your future.
> http://p.sf.net/sfu/intel-atom-d2d
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user



-Paul

Well I tried to install it today on my exchange server with the
following result:

 

Apparently ppm is not installed.

 

What am I doing wrong?

 

Kelvin Krastel

 

-------------Microsoft Windows [Version 5.2.3790]

 

C:\ASSP\assp.mod\install>mod_inst.pl

Perl 5.012001  ASSP module installation helper version 1.10

 

reading proxy settings from assp.cfg

Odd number of elements in hash assignment at
C:\ASSP\assp.mod\install\mod_inst.p

l line 71, <CFG> chunk 1.

%HTTP_proxy% is not set - will make downloads via direct connect

copying needed binary files to C:\\Perl\\bin

C:\ASSP\assp.mod\bin\libeay32.dll

C:\ASSP\assp.mod\bin\libssl32.dll

C:\ASSP\assp.mod\bin\ocr

C:\ASSP\assp.mod\bin\ocr.bat

C:\ASSP\assp.mod\bin\pdf2ocr

C:\ASSP\assp.mod\bin\pdf2ocr.bat

C:\ASSP\assp.mod\bin\pdf2ocrturntotext

C:\ASSP\assp.mod\bin\pdf2ocrturntotext.bat

C:\ASSP\assp.mod\bin\pdfbklt

C:\ASSP\assp.mod\bin\pdfbklt.bat

C:\ASSP\assp.mod\bin\pdffonts.exe

C:\ASSP\assp.mod\bin\pdfgetext

C:\ASSP\assp.mod\bin\pdfgetext.bat

C:\ASSP\assp.mod\bin\pdfimages.exe

C:\ASSP\assp.mod\bin\pdfinfo.bat

C:\ASSP\assp.mod\bin\pdfinfo.exe

C:\ASSP\assp.mod\bin\pdfinfo.pl

C:\ASSP\assp.mod\bin\pdfrevert

C:\ASSP\assp.mod\bin\pdfrevert.bat

C:\ASSP\assp.mod\bin\pdfstamp

C:\ASSP\assp.mod\bin\pdfstamp.bat

C:\ASSP\assp.mod\bin\pdftk.exe

C:\ASSP\assp.mod\bin\pdftopbm.exe

C:\ASSP\assp.mod\bin\pdftops.exe

C:\ASSP\assp.mod\bin\pdftotext.exe

C:\ASSP\assp.mod\bin\ssleay32.dll

       26 file(s) copied.

checking and adding PPM-repositories for module installation

'ppm' is not recognized as an internal or external command,

operable program or batch file.

adding respository 'trouchelle' 'http://trouchelle.com/ppm10/' to ppm

'ppm' is not recognized as an internal or external command,

operable program or batch file.

adding respository 'trouch-act'
'http://trouchelle.com/ppm10/activestate/1000/'

to ppm

'ppm' is not recognized as an internal or external command,

operable program or batch file.

adding respository 'uni_winnipeg'
'http://cpan.uwinnipeg.ca/PPMPackages/10xx/' t

o ppm

'ppm' is not recognized as an internal or external command,

operable program or batch file.

adding respository 'bribes.org' 'http://www.bribes.org/perl/ppm/' to ppm

'ppm' is not recognized as an internal or external command,

operable program or batch file.

adding respository 'C:\ASSP\assp.mod\' to ppm

'ppm' is not recognized as an internal or external command,

operable program or batch file.

'ppm' is not recognized as an internal or external command,

operable program or batch file.

================================

= Installing perl modules      =

================================

install module Authen::SASL version 2.1401

'ppm' is not recognized as an internal or external command,

operable program or batch file.

module Compress::Zlib version 2.027 is already installed

module Digest::MD5 version 2.39 is already installed

module Digest::SHA1 version 2.12 is already installed

install module Email::MIME version 1.903

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Email::MIME::Modifier version 1.903

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Email::Send version 2.198

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Email::Valid version 0.182

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module File::ReadBackwards version 1.04

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module File::Scan::ClamAV version 1.91

'ppm' is not recognized as an internal or external command,

operable program or batch file.

module LWP::Simple version 5.827 is already installed

install module MIME::Types version 1.23

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module MIME::Tools version 5.427

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Mail::SPF version 2.007

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Mail::SRS version 0.31

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Net::CIDR::Lite version 0.20

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Net::DNS version 0.65

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Net::IP::Match::Regexp version 1.01

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Net::LDAP version 0.36

'ppm' is not recognized as an internal or external command,

operable program or batch file.

module Net::SMTP version 2.31 is already installed

install module Net::SenderBase version 1.01

'ppm' is not recognized as an internal or external command,

operable program or batch file.

module PerlIO::scalar version 0.07 is already installed

module Time::HiRes version 1.9721 is already installed

install module IO::Socket::SSL version 1.14

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Net::Syslog version 0.03

'ppm' is not recognized as an internal or external command,

operable program or batch file.

install module Win32::Daemon version 20030617

'ppm' is not recognized as an internal or external command,

operable program or batch file.

 

finished module installation for ASSP

 

 

checking module installation for ASSP

 

module Authen::SASL is not installed    [FAILED]

module Compress::Zlib 2.027 is installed        [OK]

module Digest::MD5 2.39 is installed    [OK]

module Digest::SHA1 2.12 is installed   [OK]

module Email::MIME is not installed     [FAILED]

module Email::MIME::Modifier is not installed   [FAILED]

module Email::Send is not installed     [FAILED]

module Email::Valid is not installed    [FAILED]

module File::ReadBackwards is not installed     [FAILED]

module File::Scan::ClamAV is not installed      [FAILED]

module LWP::Simple 5.827 is installed   [OK]

module MIME::Types is not installed     [FAILED]

module MIME::Tools is not installed     [FAILED]

module Mail::SPF is not installed       [FAILED]

module Mail::SRS is not installed       [FAILED]

module Net::CIDR::Lite is not installed [FAILED]

module Net::DNS is not installed        [FAILED]

module Net::IP::Match::Regexp is not installed  [FAILED]

module Net::LDAP is not installed       [FAILED]

module Net::SMTP 2.31 is installed      [OK]

module Net::SenderBase is not installed [FAILED]

module PerlIO::scalar 0.07 is installed [OK]

module Time::HiRes 1.9721 is installed  [OK]

module IO::Socket::SSL is not installed [FAILED]

module Net::Syslog is not installed     [FAILED]

module Win32::Daemon is not installed   [FAILED]

 

 

there where errors - to correct them do the following:

 

- start cmd.exe

- type >ppm

- if the error was '*** package PACKAGENAME not installed ***'

- type >install PACKAGENAME

- if the error was 'ppm install failed: Can't determine best'

- type >s PACKAGENAME

- look for the line with the highest modules-versionnumber and keep in
mind the

NUMBER on the left site

- type >install NUMBER   or   >upgrade --install NUMBER

- if you need more help on ppm  type  help

 

 

- or you may use CPAN to install some modules

- for this you'll need to download
ftp://ftp.microsoft.com/softlib/mslfiles/nma

ke15.exe

- extract nmake15.exe  to your  perl/bin  Directory

- as long, as you have no C-compiler installed on your system, you can
only inst

all

- modules that have no XS-code!

 

 

C:\ASSP\assp.mod\install>

 

 

________________________________________________________________________
________________

Sent from my laptop. Or from my desktop. Or from my Android Phone. Or
from an Internet kiosk. Who cares?

 

  On 8/26/2010 4:27 AM, Shane Killian wrote:
> Hi Guys,
>
> I am having an issue where customers are replying to mails that were originally sent out by some of the sales guys and the mail is getting blocked with the following reason:
>
> [spam found] -- bombRe: '10% discount , 5% discount'
>
> Is there anything I can do to ensure that these mail addresses are getting whitelisted?
>
> Kind Regards,
>
> Shane Killian
> Systems Administrator
> Irishjobs.ie
> +353 (0)1 4333934
Hi Shane,

You might want to look at using whitere to handle this.  Make sure that 
the sales guys include their phone, etc., or some other keyword of your 
choice, and add it to the whitere list.

Melvin

Hi Shane,

Outgoing email recipients should be whitelisted automatically by default as
long as you are routing your outbound mail through ASSP.

I have found the default bomb/black settings to be far too aggressive in my
experience though, so I have changed them as follows (keep in mind that all
of my comments are related to ASSP v1):

Under Regex/Bombs:

Use Black Regular Expression to Identify Spam (DoBlackRe,default=block):
CHANGED TO SCORE

Use Header Regular Expressions (DoBombHeaderRe,default=block): CHANGED TO
SCORE

Use Subject Regular Expression on Subject (DoBombSubjectRe,default=block):
CHANGED TO SCORE

Use Bomb Regular Expressions (DoBombRe,default=block): CHANGED TO SCORE

I also changed Maximum Penalty on Regex Match per Mail per Check
(bombMaxPenaltyVal,default=70) to 50, although it didn't really seem to
limit the maximum penalty on a test message I sent, I'd have to do some
additional testing to confirm this.


Under Scoring Settings:

Black Expression Matching (blackValencePB,default=40): CHANGED TO 9

Bomb Expression Matching (bombValencePB,default=40): CHANGED TO 9


These settings seem to work very well, penalizing messages with suspicious
content but not blocking them entirely.  True spam has additional issues
that ultimately cause it to be blocked, this just helps to push it over.
Your mileage may vary.

- Phil


----------

Hi Guys,

I am having an issue where customers are replying to mails that were
originally sent out by some of the sales guys and the mail is getting
blocked with the following reason:

[spam found] -- bombRe: '10% discount , 5% discount'

Is there anything I can do to ensure that these mail addresses are getting
whitelisted?

Kind Regards,

Shane Killian
Systems Administrator
Irishjobs.ie
+353 (0)1 4333934

Hi Guys,

I am having an issue where customers are replying to mails that were originally sent out by some of the sales guys and the mail is getting blocked with the following reason:

[spam found] -- bombRe: '10% discount , 5% discount'

Is there anything I can do to ensure that these mail addresses are getting whitelisted?

Kind Regards,

Shane Killian
Systems Administrator
Irishjobs.ie
+353 (0)1 4333934



E-mail Disclaimer:

The information contained in this message is confidential and is intended for the addressee only. If you have received this message in error or there are any problems please notify the originator immediately. The unauthorized use, disclosure, copying or alteration of this message is strictly forbidden. This mail and any attachments have been scanned for viruses prior to leaving the network of saongroup.com

saongroup.com will not be liable for direct, special, indirect or consequential damages arising from alteration of the contents of this message by a third party or as a result of any virus being passed on. saongroup.com reserves the right to monitor and record e-mail messages sent to and from this address for the purposes of investigating or detecting any unauthorized use of its system and ensuring its effective operation.

Another possible way to deal with this would be to put 'NG' (without quotes)
into Suspicious Countries (CountryCodeRe).

Ensure that Do Suspicious Country Scoring (DoSenderBase) is set to "Score".
Under "Scoring Settings", change Suspicious Country Code  (sbsccValencePB)
to a value higher than the (ASSP v1) default of 10, I use 20.  Take a look
at the messages that are making it through and see how much it will take to
put them "over the edge" so to speak and block them.  Set the penalty
accordingly.

Of course these settings are good for ASSP v1, some of them might be
different in ASSP v2.

Phil Quesinberry
Q Systems Engineering, Inc.
Electronic Controls and Embedded Systems Development
http://www.qsystemsengineering.com

----------

Dale <db...@co...> schreibt:
>419 scam


That depends how your Bayesian is handling it. Bayesian should really
really catch it.  To reach then the limit for message scoring is is
sufficient to put "nigeria" or similar into bombSuspiciousRe.

Hi Fritz,

Thank you

Dale

----- Original Message ----- 
From: "Fritz Borgstedt" <fb...@iw...>
To: "For Users of ASSP" <ass...@li...>
Sent: Tuesday, August 24, 2010 12:01 AM
Subject: Re: [Assp-user] Message Scoring Mode


>
> Dale <db...@co...> schreibt:
>>Hi Phil
>>
>>I can't seem to find Set message Warning Tag
>>(MessageScoringWarningTag)
>>
>>In TestModes I have Prepend Spam Subject which I have [POSSIBLE SPAM]
>>
>>I can't wait to smile when the emails and calls stop
>>
>>Believe me, that will be a nice silence
>
>
>
> That feature is not available in ASSP V2.
> Use simple the feature which is available in V2: set DoPenaltyMessage
> to "block" and set PenaltyMessageLimit to the
> threshold ASSP should block. ASSP will tag all messages with
> totalscore between PenaltyMessageLow and PenaltyMessageLimit and will
> block messages with totalscore above PenaltyMessageLimit.
>
>
> ------------------------------------------------------------------------------
> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
> Be part of this innovative community and reach millions of netbook users
> worldwide. Take advantage of special opportunities to increase revenue and
> speed time-to-market. Join now, and jumpstart your future.
> http://p.sf.net/sfu/intel-atom-d2d
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user 

Dale <db...@co...> schreibt:
>Hi Phil
>
>I can't seem to find Set message Warning Tag
>(MessageScoringWarningTag)
>
>In TestModes I have Prepend Spam Subject which I have [POSSIBLE SPAM]
>
>I can't wait to smile when the emails and calls stop
>
>Believe me, that will be a nice silence



That feature is not available in ASSP V2.
Use simple the feature which is available in V2: set DoPenaltyMessage
to "block" and set PenaltyMessageLimit to the 
threshold ASSP should block. ASSP will tag all messages with
totalscore between PenaltyMessageLow and PenaltyMessageLimit and will
block messages with totalscore above PenaltyMessageLimit.

Dale <db...@co...> schreibt:
>Hi Fritz
>
>Ideally, I do want tagging, I just want to have messages that are
>over a 
>certain threshold deleted.
>
>Is there a way to do this?


Set DoPenaltyMessage to "block" and set PenaltyMessageLimit to that 
threshold.

Hi Phil

I can't seem to find Set message Warning Tag (MessageScoringWarningTag)

In TestModes I have Prepend Spam Subject which I have [POSSIBLE SPAM]

I can't wait to smile when the emails and calls stop

Believe me, that will be a nice silence

:)

Thanks

Dale

----- Original Message ----- 
From: "Phil Quesinberry" <ph...@qs...>
To: <ass...@li...>
Sent: Monday, August 23, 2010 7:08 PM
Subject: Re: [Assp-user] Message Scoring Mode


>
> Dale,
>
> Set Message Scoring (DoPenaltyMessage) back to "Block".
>
> Set MessageScoring Lower Limit (MessageScoringLowerLimit) to the scoring
> threshold over which you want messages to be tagged.  For example: 39.
>
> Set MessageScoring Upper Limit (MessageScoringUpperLimit) to the scoring
> threshold over which you want messages to be blocked.  For example: 50.
>
> Set message Warning Tag (MessageScoringWarningTag) to the tag you want to 
> be
> added to the subject when the score is between the lower and upper limits.
> For example: [Possible Spam].
>
> If you want ASSP to tag the headers with additional information about 
> tests
> and scoring, look near the bottom of the "TestMode/Spam Control" section 
> and
> check the appropriate boxes for the information you want included in the
> header.
>
> Smile when you overhear others within your organization talking about how
> all of their spam suddenly disappeared and enjoy listening to the 
> conspiracy
> theories that are sure to follow...
>
> - Phil
>
> ----------
>
> From: "Dale" <db...@co...>
> Subject: Re: [Assp-user] Message Scoring Mode
> To: "For Users of ASSP" <ass...@li...>
> Message-ID: <BE23EC7CBD4C497A950883E964F56BDB@DALE>
> Content-Type: text/plain; format=flowed; charset="iso-8859-1";
> reply-type=original
>
> Hi Fritz
>
> Ideally, I do want tagging, I just want to have messages that are over a
> certain threshold deleted.
>
> Is there a way to do this?
>
> Dale
>
>
>
>
> ------------------------------------------------------------------------------
> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
> Be part of this innovative community and reach millions of netbook users
> worldwide. Take advantage of special opportunities to increase revenue and
> speed time-to-market. Join now, and jumpstart your future.
> http://p.sf.net/sfu/intel-atom-d2d
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user 

Dale,

Set Message Scoring (DoPenaltyMessage) back to "Block".

Set MessageScoring Lower Limit (MessageScoringLowerLimit) to the scoring
threshold over which you want messages to be tagged.  For example: 39.

Set MessageScoring Upper Limit (MessageScoringUpperLimit) to the scoring
threshold over which you want messages to be blocked.  For example: 50.

Set message Warning Tag (MessageScoringWarningTag) to the tag you want to be
added to the subject when the score is between the lower and upper limits.
For example: [Possible Spam].

If you want ASSP to tag the headers with additional information about tests
and scoring, look near the bottom of the "TestMode/Spam Control" section and
check the appropriate boxes for the information you want included in the
header.

Smile when you overhear others within your organization talking about how
all of their spam suddenly disappeared and enjoy listening to the conspiracy
theories that are sure to follow...

- Phil

----------

From: "Dale" <db...@co...>
Subject: Re: [Assp-user] Message Scoring Mode
To: "For Users of ASSP" <ass...@li...>
Message-ID: <BE23EC7CBD4C497A950883E964F56BDB@DALE>
Content-Type: text/plain; format=flowed; charset="iso-8859-1";
	reply-type=original

Hi Fritz

Ideally, I do want tagging, I just want to have messages that are over a 
certain threshold deleted.

Is there a way to do this?

Dale

I was wondering if it is possible to configure ASSP to filter on a 
specific "Received:" header. I currently am getting the occasional spam 
that's sent through html injection from freemail providers such as yahoo 
and hotmail. The first "Received:" often contains IPs I block, such as 
in the 41/8 block.

Scanning for something like "Received: from [41.*]" could do the job in 
such cases.

Thanks,
Jeroen

-- 
http://goldmark.org/jeff/stupid-disclaimers/
http://linuxmafia.com/~rick/faq/plural-of-virus.html

Hi Fritz

Ideally, I do want tagging, I just want to have messages that are over a 
certain threshold deleted.

Is there a way to do this?

Dale



----- Original Message ----- 
From: "Fritz Borgstedt" <fb...@iw...>
To: "For Users of ASSP" <ass...@li...>
Sent: Monday, August 23, 2010 12:46 PM
Subject: Re: [Assp-user] Message Scoring Mode


>
> Dale <db...@co...> schreibt:
>>X-Assp-Tag: MessageLimit[tagging]
>
>
> Ok, you have set DoPenaltyMessage to "tagging" and ASSP is doing what
> you want. Set it to block if you want ASSP to block it.
>
>
> ------------------------------------------------------------------------------
> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
> Be part of this innovative community and reach millions of netbook users
> worldwide. Take advantage of special opportunities to increase revenue and
> speed time-to-market. Join now, and jumpstart your future.
> http://p.sf.net/sfu/intel-atom-d2d
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user 

Dale <db...@co...> schreibt:
>X-Assp-Tag: MessageLimit[tagging]


Ok, you have set DoPenaltyMessage to "tagging" and ASSP is doing what
you want. Set it to block if you want ASSP to block it.

Hi Fritz

There is no X-Assp-Block


Here's the rest of the header


Received: from smtp2c.orange.fr ([80.12.242.155] helo=smtp2c.orange.fr) by
 server.synergyspamfiltering.com with ESMTP (2.0.2); 23 Aug 2010
 01:29:01 -0700
Received: from me-wanadoo.net (localhost [127.0.0.1])
 by mwinf2c23.orange.fr (SMTP Server) with ESMTP id D552A80004FE;
 Mon, 23 Aug 2010 10:31:03 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
 by mwinf2c23.orange.fr (SMTP Server) with ESMTP id BE4A48000658;
 Mon, 23 Aug 2010 10:31:03 +0200 (CEST)
Received: from Hi (ARouen-156-1-5-239.w90-8.abo.wanadoo.fr [90.8.4.239])
 by mwinf2c23.orange.fr (SMTP Server) with ESMTP id 522A980004FE;
 Mon, 23 Aug 2010 10:30:05 +0200 (CEST)
X-ME-UUID: 201...@mw...
X-ME-User-Auth: h-t...@wa...
Reply-To: <eli...@we...>
From: "Pastor Mrs Andreana Shalker"<h-t...@wa...>
Subject: [SPAM] [MessageLimit][tagging][tagmode] Your Approval Is Needed 
Please ...
Date: Mon, 23 Aug 2010 15:31:03 +0700
MIME-Version: 1.0
Content-Type: text/plain;
 charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <201...@mw...>
To: undisclosed-recipients:;
X-Assp-Version: 2.0.2(1.2.01) on server.synergyspamfiltering.com
X-Assp-Delay: not delayed (80.12.242.155 in RWL); 23 Aug 2010
 01:29:02 -0700
X-Assp-Received-SPF: none ip=80.12.242.155 mailfrom=h-t...@wa...
 helo=smtp2c.orange.fr
X-Assp-Message-Score: 20 (Foreign Country FR (Mail Essentials Project))
X-Assp-Message/IP-Score: 35 (Bayesian Probability: 1.0000)
X-Assp-Spam-Level: ***********
X-Assp-Tag: MessageLimit[tagging]
X-Assp-Envelope-From: h-t...@wa...
X-Assp-ID: server.synergyspamfiltering.com 52142-03101
X-Assp-Spam: YES
X-Spam-Status:yes
X-Assp-Spam-Reason: MessageScore 55, limit 53
X-Assp-Message-Totalscore: 55



Dale


----- Original Message ----- 
From: "Fritz Borgstedt" <fb...@iw...>
To: "For Users of ASSP" <ass...@li...>
Sent: Monday, August 23, 2010 10:51 AM
Subject: Re: [Assp-user] Message Scoring Mode


>
> Dale <db...@co...> schreibt:
>>X-Assp-Spam: YES
>>X-Spam-Status:yes
>>X-Assp-Spam-Reason: MessageScore 55, limit 53
>>X-Assp-Message-Totalscore: 55
>>
>>The high limit is 53, total score is 55, and it was sent through
>
>
> I do not think that these are  the complete assp-headers. I am missing
> at least the "X-Assp-Block:" header which shows if blocked or not.
> Show the log please. It should be possible to use "View Maillog Tail"
> and search for that message.
>
>
> ------------------------------------------------------------------------------
> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
> Be part of this innovative community and reach millions of netbook users
> worldwide. Take advantage of special opportunities to increase revenue and
> speed time-to-market. Join now, and jumpstart your future.
> http://p.sf.net/sfu/intel-atom-d2d
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user