Anti-Spam SMTP Proxy Server

>
>I know, I put additional the hyphenated range in and crashed the cidr
>range. Will be ready in (19) or (20).

It should work now in (20)

perl error "cant locate LWP/Simple.pm in @inc"

went back to 1.3.3.1- ok

debian 4.0 perl 5.8

upgraded from 1.26 to 1.30 to 1.31

thanks



-- 
View this message in context: http://www.nabble.com/Unable-to-start-1.3.3.3---perl-error-cant-locate-LWP-Simple.pm-tf4356838.html#a12415873
Sent from the assp-test mailing list archive at Nabble.com.

Hi, Fritz.

When there's a good time, consider expanding sendAllDestination into one 
address:port (sendAllHamDestination) for ccHam messages and another 
address:port (sendAllSpamDestination) for ccSpam messages.  I need to send 
ham to a different server than the spam catchall.

Thanks.

    Dave

A user just forwarded an email to our assp-notspam address.

The report he got back from ASSP only said, "Report from:  
hisaddress@..."

Looking in the email section, the notspamreport.txt file is blank.

Combined Spam/Ham Report & Whitelist Add/Remove is ticked.

The address in the email was NOT added to the whitelist.

The log simply says:

Aug-31-07 14:33:05 id-4785c8225 127.0.0.1 <hisaddress@...>  
email hamreport

I'm running v1.3.3.3(21).

Anyone else have this happen?

Thanks,

James.

Kevin wrote:
> Fritz Borgstedt wrote:
>>> I know, I put additional the hyphenated range in and crashed the cidr
>>> range. Will be ready in (19) or (20).
>> It should work now in (20)
> 
> (20) isn't starting for me.
> It crashes when parsing a comment line in my denySMTP file.
> 
> It seems the - character is whats causing it.

Fixed it by changing line 11727 to:

if ($CanUseCIDRlite && $l=~s/--+/-/g ) {


And the CIDR code is working now.
Nice work Fritz.

Kevin

subscribe

I have this in my noPB:  64.20.227.0|64.20.227.131

Yet this is in the blackbox:
64.20.227.0=021186688239 1186688239 1 175 64.20.227.131 RelayAttempt 175
64.20.227.131=021186688239 1186688239 1 175 64.20.227.131 RelayAttempt =
175

A shutdown and restart did not clear the blackbox.

Isn't it true that these addresses should not have been blocked nor =
added to the blacklist?

Dave

Hi, all.

Can anyone tell me what ASSP settings would allow these connections to get 
authenticated?  I didn't notice anything until I started getting bounce 
messages from other servers:

Aug-24-07 08:25:05 222.183.157.127 <> authenticated
Aug-25-07 08:08:14 222.183.155.179 <> authenticated
Aug-26-07 18:47:38 211.158.67.57 <> authenticated
Aug-26-07 20:29:58 222.183.148.69 <> authenticated
Aug-26-07 21:30:40 211.158.67.57 <> authenticated
Aug-26-07 22:07:13 222.183.148.69 <> authenticated
Aug-27-07 01:05:46 211.158.128.181 <> authenticated
Aug-30-07 05:50:03 222.183.161.73 <> authenticated
Aug-30-07 08:16:56 222.183.153.214 <> authenticated
Aug-30-07 09:30:44 222.183.140.22 <> authenticated

Does this make sense? I sent an email to an account that wasn't listed 
in my LocalAddresses_Flat file and in the log it was reported as 
"ForgedHELO".

Aug-30-07 13:24:06 [ForgedHELO] 209.86.89.62 <sender@...> 
invalid address rejected: invalid_address@...

Fritz Borgstedt wrote:
> In (19) is now an option to have the header copied into the body.
> Somebody interested may try how SpamCop is reacting to this format.

I report all my spam to SpamCop, but I do it with server-side inbox
rules on my Exchange server - forwarding the messages as attachments.

Details on SpamCop email submissions are here:

   http://www.spamcop.net/fom-serve/cache/166.html

If you interact with SpamCop on a large scale, I recommend that you add
their IP Blocks to your noProcessingIPs:

   http://www.asspsmtp.org/wiki/SpamCop_%28IP_Block%29

A Perl script for reporting spam to various services based on content
can be found here:

   http://www.gloomytrousers.co.uk/open_source/spam_reporter.shtml

In (19) is now an option to have the header copied into the body.
Somebody interested may try how SpamCop is reacting to this format.

>i can confirm that [v1.3.3.3(18)] doesn't seem to add the adresses to
>the whitelist although "Combined Spam/Ham Report & Whitelist
>Add/Remove" is activated.

Actually it is working.
The cosmetic thing was, that the logentry went *only* to the
admininfo.txt file.

I mean, it's not a big deal.  I was just curious. Is it some kind of
error log? Obviously, this is extracted at the time of processing.
Here's what I've got so far:

Tue Aug 28 13:44:19 2007:  Received-SPF: unknown (ASSP.nospam: error in
processing during lookup of reservations@...)
client-ip=3D38.103.84.35; envelope-from=3Dreservations@...;
helo=3Dmx2.spiritair.com;
Tue Aug 28 16:16:58 2007:  local or whitelisted -
Utilities_generating_system_error_at_night_  -> c:\assp/notspam/7808.eml
Tue Aug 28 16:42:05 2007:  message ok Dump_and_Load_errors_  ->
c:\assp/notspam/11764.eml
Tue Aug 28 18:04:42 2007:  Received-SPF: unknown (ASSP.nospam: error in
processing during lookup of caroline.mccall@...)
client-ip=3D61.90.219.58; =
envelope-from=3Dcaroline.mccall@...;
helo=3Dpsa-hp.pipesupports.co.th;
Wed Aug 29 08:27:44 2007:  local or whitelisted -
RE_Utilities_generating_system_error_at_night_  ->
c:\assp/notspam/9923.eml
Wed Aug 29 08:46:31 2007:  Received-SPF: unknown (ASSP.nospam: error in
processing during lookup of reservations@...)
client-ip=3D38.103.84.35; envelope-from=3Dreservations@...;
helo=3Dmx2.spiritair.com;
Wed Aug 29 09:16:19 2007:  AdminInfo: email whitelist deletion:
equipment@...
Wed Aug 29 09:17:45 2007:  AdminInfo: email whitelist deletion:
equipment@...
Wed Aug 29 09:19:43 2007:  AdminInfo: email whitelist deletion:
equipment@...
Wed Aug 29 09:33:20 2007:  message ok Re_Dump_and_Load_errors_  ->
c:\assp/notspam/4521.eml
Wed Aug 29 10:20:22 2007:  adding new triplet:
(216.177.115.0,errors@...)
Wed Aug 29 10:34:22 2007:  message ok RE_Dump_and_Load_errors_  ->
c:\assp/notspam/12362.eml
Wed Aug 29 10:39:45 2007:  message ok Re_Dump_and_Load_errors_  ->
c:\assp/notspam/1500.eml
Wed Aug 29 10:45:22 2007:  accepting triplet:
(216.177.115.0,errors@...) waited: 25m
Wed Aug 29 10:45:22 2007:  Received-SPF: pass (ASSP.nospam: domain of
errors@... designates 216.177.115.3 as permitted sender)
client-ip=3D216.177.115.3; envelope-from=3Derrors@...;
helo=3Dmail6.reachmail.net;=20

-----Original Message-----
From: assp-test-bounces@...
[mailto:assp-test-bounces@...] On Behalf Of Kevin
Sent: Wednesday, August 29, 2007 6:14 PM
To: assp-test@...
Subject: Re: [Assp-test] Purpose of "Config Infos" in the GUI

Hill, Brett wrote:
> I've got a few line entries in this log.  What exactly is it telling
me?
> =20

What exactly are the entries?

Kevin

------------------------------------------------------------------------
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
Assp-test@...
https://lists.sourceforge.net/lists/listinfo/assp-test

i'm facing a strange problem with messages from my backup-mx that are
between low/high threshold - although the log says
-----
Aug-30-07 09:25:52 id-8748c830 194.88.172.82 <returns@...>
to: info [a] mydomain.de passing because messagescore(45) is in low
range(40:50), otherwise MessageLimit reached 40 (Low Threshold)
-----
the mail is not sent to the recipient but remains on the backup-mx.
any pointer welcome.

regards from germany
andreas