Nabble - Anti-Spam SMTP Proxy Server

Re: Antwort: Issue with (version 2.0.0.7.12)

2008-11-22T05:02:00Z

Ok thanks. I no idea why it was doing that and why it went away when I returned back to 7.10

I will wait till your next release and try again and see if it returns.

I am running 7.12 on my postfix box with no issues it was only with my Exchange 2003 box.

Thanks for looking.

Daniel Du Vall

Systems Admin

http://1peter4-10.org

http://volkswageninsanity.us

"Generally, people's biggest regrets stem from the dreams they don't attempt to fulfill."

From: Thomas Eckardt/eck [mailto:Thomas.Eckardt@...]
Sent: Saturday, November 22, 2008 3:57 AM
To: ASSP development mailing list
Subject: [Assp-test] Antwort: Issue with (version 2.0.0.7.12)

Hi Daniel,

I have compared 7.08 and 7.12 - there are no changes in the code which could result in that behavior!

Thomas

"Daniel K. Du Vall" <dduvall@...>

20.11.2008 18:13

Bitte antworten an
ASSP development mailing list <assp-test@...>

An	<assp-test@...>
Kopie
Thema	[Assp-test] Issue with (version 2.0.0.7.12)

(version 2.0.0.7.12) Seems to be changing the address from duvalls@... to duvalduvalduvalls@... which does not exist. I reverted back to (7.10) and the issue is gone.

Nov-20-08 10:00:15 [Worker_1] Connected: 209.85.198.234:6624 -> 172.16.0.10:5050 -> 172.16.0.2:25
Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread will wait (max 30 s) for the answer of Worker_1 which handles 0 sockets
Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread freed by idle Worker_1 in 0.017 seconds
Nov-20-08 10:00:15 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... DKIM-signature found
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 4731 bytes in whit elisted message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] [Whitelisted] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments) [Fwd Delivery Status Notification Failure]
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from [In-Reply-To:]
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from header
Nov-20-08 10:00:16 [Worker_1] Warning: got unexpected signal CLD in Worker_1: package - ASSP_OCR, file - Plugins/ASSP_OCR.pm, line - 80!
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... [Plugin] calling plugin ASSP_Attac hmentFullCheck
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 798 bytes in white listed message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 1666 bytes in whit elisted message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments)
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... -> ./notspam/Fwd_Delivery_Status_ Notification_Failure_--9.eml
Nov-20-08 10:00:46 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: no (more) data readable from 209.85.198.234 - last command was 'QUIT'
Nov-20-08 10:00:46 [Worker_1] Disconnected: 209.85.198.234 - command list was 'EHLO,MAIL FROM,RCPT TO,DATA,QUIT' - insite 8 SocketCalls
Nov-20-08 10:00:46 [Worker_1] Worker_1 prepair to sleep
Nov-20-08 10:00:46 [Worker_1] Worker_1 will sleep now

Daniel Du Vall
Systems Admin
http://1peter4-10.org
http://volkswageninsanity.us
"Generally, people's biggest regrets stem from the dreams they don't attempt to fulfill."

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________
Assp-test mailing list
Assp-test@...
https://lists.sourceforge.net/lists/listinfo/assp-test

DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
Assp-test@...
https://lists.sourceforge.net/lists/listinfo/assp-test

From forum: assp-test

Antwort: Issue with (version 2.0.0.7.12)

2008-11-22T02:56:31Z

Hi Daniel,

I have compared 7.08 and 7.12 - there are no changes in the code which could result in that behavior!

Thomas

"Daniel K. Du Vall" <dduvall@...>

20.11.2008 18:13

Bitte antworten an
ASSP development mailing list <assp-test@...>

An	<assp-test@...>
Kopie
Thema	[Assp-test] Issue with (version 2.0.0.7.12)

(version 2.0.0.7.12) Seems to be changing the address from duvalls@... to duvalduvalduvalls@... which does not exist. I reverted back to (7.10) and the issue is gone.

Nov-20-08 10:00:15 [Worker_1] Connected: 209.85.198.234:6624 -> 172.16.0.10:5050 -> 172.16.0.2:25
Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread will wait (max 30 s) for the answer of Worker_1 which handles 0 sockets
Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread freed by idle Worker_1 in 0.017 seconds
Nov-20-08 10:00:15 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... DKIM-signature found
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 4731 bytes in whit elisted message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] [Whitelisted] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments) [Fwd Delivery Status Notification Failure]
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from [In-Reply-To:]
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from header
Nov-20-08 10:00:16 [Worker_1] Warning: got unexpected signal CLD in Worker_1: package - ASSP_OCR, file - Plugins/ASSP_OCR.pm, line - 80!
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... [Plugin] calling plugin ASSP_Attac hmentFullCheck
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 798 bytes in white listed message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 1666 bytes in whit elisted message - OK
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments)
Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... -> ./notspam/Fwd_Delivery_Status_ Notification_Failure_--9.eml
Nov-20-08 10:00:46 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: no (more) data readable from 209.85.198.234 - last command was 'QUIT'
Nov-20-08 10:00:46 [Worker_1] Disconnected: 209.85.198.234 - command list was 'EHLO,MAIL FROM,RCPT TO,DATA,QUIT' - insite 8 SocketCalls
Nov-20-08 10:00:46 [Worker_1] Worker_1 prepair to sleep
Nov-20-08 10:00:46 [Worker_1] Worker_1 will sleep now

Daniel Du Vall
Systems Admin
http://1peter4-10.org
http://volkswageninsanity.us
"Generally, people's biggest regrets stem from the dreams they don't attempt to fulfill."

------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________ Assp-test mailing list Assp-test@... https://lists.sourceforge.net/lists/listinfo/assp-test

DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
Assp-test@...
https://lists.sourceforge.net/lists/listinfo/assp-test

From forum: assp-test

Antwort: winmail.dat not converting

2008-11-22T02:50:14Z

>Is it because it matched the no processing regex?

Yes, noprocessing turns off any check (config dependend) and the queuing of the mail data. This results in turning off any conversions, plugins level 2 calls, DKIM checks ........ !

Thomas

James Brown <jlbrown@...>

20.11.2008 05:07

Bitte antworten an
ASSP development mailing list <assp-test@...>

An	ASSP development mailing list <assp-test@...>
Kopie
Thema	[Assp-test] winmail.dat not converting

I noticed an email from Pere (sat@...) on the assp-user list today, which had the subject "[Assp-user] No processing". It had a winmail.dat attachment. I'm using version 2 (2.0.0.7.12) and this was no converted, even though I have doInFixTNEF set. I have TNEFDEBUG turned on, but there is no mention of anything in the logs: Nov-20-08 02:15:24 id-07724-07578 [Worker_1] 192.168.1.2 <assp-user-bounces@... > Regex:WhiteDomain 'sourceforge.net' Nov-20-08 02:15:24 id-07724-07578 [Worker_1] 192.168.1.2 <assp-user-bounces@... > Regex:NoProcessingDomain 'sourceforge.net' Nov-20-08 02:15:24 id-07724-07578 [Worker_1] 192.168.1.2 <assp-user-bounces@... > to: jlbrown@... Found 'Received:' from forwarding IP: lists.sourceforge.net(216.34.181.88) Nov-20-08 02:15:24 id-07724-07578 [Worker_1] 192.168.1.2 <assp-user-bounces@... > to: jlbrown@... Regex:Red 'bounce' Nov-20-08 02:15:24 id-07724-07578 [Worker_1] [NoProcessing] 192.168.1.2 <assp-user-bounces@...> to: jlbrown@... message proxied without processing - (attachments unchecked) [Re Assp user No processing] Is it because it matched the no processing regex? Thanks, James. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________ Assp-test mailing list Assp-test@... https://lists.sourceforge.net/lists/listinfo/assp-test

DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
Assp-test@...
https://lists.sourceforge.net/lists/listinfo/assp-test

smime.p7s (28K) Download Attachment

From forum: assp-test

Re: tcpdump

2008-11-21T18:14:11Z

perhaps the interface

Joseph L. Casale wrote:

I am trying to dump some communication from inbound smtp servers on one of my rigs.
Assp config has listenPort:25, smtpDestination:127.0.0.1:10025 and relayPort:225
# tcpdump -w ~/tcpdump.log -s 0 port 25 yields data when email arrives.
# tcpdump -w ~/tcpdump.log -s 0 port 10025 yields no data when email should be proxied back.
# tcpdump -w ~/tcpdump.log -s 0 port 225 yields data when email is sent.

What's the obvious I am overlooking here?

Thanks!
jlc

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

ClamAV problem

2008-11-21T10:05:49Z

I think I’ve solved this, I’m wondering if anyone else has had this problem, or if there are any other implications or solutions.

I had to update/reinstall ClamAV (Win32 on server 2003) and did so using the step by step here http://www.asspsmtp.org/wiki/ClamAV_0.94_Win32

Things installed fine, freshclam did its thing, the service installed, and Clamd came up just fine.

However, whenever ASSP would receive a message with an attachment, I was getting the following errors:

In the ASSP log: ClamAv Temporary Off : Cannot connect to 'localhost:1026': IO::Socket::INET: connect: Unknown error

In the clamd.log: ERROR: ScanStream: accept timeout.

I’ve added the following to clamd.conf, and now things are fine.

StreamMinPort 1026

StreamMaxPort 1026

Is this a known issue, or just something with my install?

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: tcpdump

2008-11-21T09:08:35Z

Just because of the fact that I came up with such headaches before :-)

See below :

---
tcpdump -i1 -C1 -s512 -wDump-out.pcap net 192.168.0.0 mask 255.255.255.0 and dst port 25
---

"dump the first 512bytes of each packet on interface "1" and when the
file reaches 1Mb, start a new log file"

BTW, this was done for my DMZ which only had one IP address active;
That of the mailserver interface. Hence the subnet and mask thingy.

Hope this helps,

Regards,

s.

--- On Fri, 21/11/08, Joseph L. Casale <JCasale@...> wrote:

> From: Joseph L. Casale <JCasale@...>
> Subject: [Assp-user] tcpdump
> To: "assp-user@..." <assp-user@...>
> Date: Friday, 21 November, 2008, 5:50 AM
> I am trying to dump some communication from inbound smtp
> servers on one of my rigs.
> Assp config has listenPort:25,
> smtpDestination:127.0.0.1:10025 and relayPort:225
> # tcpdump -w ~/tcpdump.log -s 0 port 25 yields data when
> email arrives.
> # tcpdump -w ~/tcpdump.log -s 0 port 10025 yields no data
> when email should be proxied back.
> # tcpdump -w ~/tcpdump.log -s 0 port 225 yields data when
> email is sent.
>
> What's the obvious I am overlooking here?
>
> Thanks!
> jlc
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move
> Developer's challenge
> Build the coolest Linux based applications with Moblin SDK
> & win great prizes
> Grand prize is a trip for two to an Open Source event
> anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Assp-user mailing list
> Assp-user@...
> https://lists.sourceforge.net/lists/listinfo/assp-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

ASSP crash

2008-11-20T21:53:41Z

Once again, when trying to receive an email, something happens that
causes Perl to crash. Oddly it happened again on a Friday afternoon.

Log entries:

Nov-21-08 16:42:28 id-46148-16433 [Worker_2] 192.168.1.2 <trevorkinnane@...
> to: info@... Found 'Received:' from forwarding IP:
mail.crediflex.com(202.183.99.247)
Nov-21-08 16:42:29 id-46148-16433 [Worker_2] 192.168.1.2 <trevorkinnane@...
> to: info@... Message-Score: total for this message is 5,
added 5 for DNSBL neutral, 202.183.99.247 listed by combined-
HIB.dnsiplists.completewhois.com
Nov-21-08 16:42:29 id-46148-16433 [Worker_2] 192.168.1.2 <trevorkinnane@...
> to: info@... Message-Score: total for this message is 10,
added 5 for SPF permerror
Nov-21-08 16:42:33 id-46148-16433 [Worker_2] 192.168.1.2 <trevorkinnane@...
> to: info@... Bayesian Check - Prob: 0.00000 => ham
Nov-21-08 16:44:19 [Worker_10000] Info: saving Stats in file
asspstats.sav

The crash happened at 16:42:34.142, just after the bayesian check.
Notice that the 'housekeeping' duties of ASSP keep going, saving
stats, PBBlack, PBWhite, PBTrap, cache records, etc. Just no mail
transfers.

This is a different email than the one that was causing the problems
last week.

Any suggestions?

Thanks,

James.

PS. Running 2.0.0.7.12. Mac OS X 10.4.11. Perl is 5.8.8.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

smime.p7s (28K) Download Attachment

From forum: assp-user

tcpdump

2008-11-20T19:50:07Z

I am trying to dump some communication from inbound smtp servers on one of my rigs.
Assp config has listenPort:25, smtpDestination:127.0.0.1:10025 and relayPort:225
# tcpdump -w ~/tcpdump.log -s 0 port 25 yields data when email arrives.
# tcpdump -w ~/tcpdump.log -s 0 port 10025 yields no data when email should be proxied back.
# tcpdump -w ~/tcpdump.log -s 0 port 225 yields data when email is sent.

What's the obvious I am overlooking here?

Thanks!
jlc

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Immediate Disconnection

2008-11-20T18:17:46Z

I have recently taken over installing an assp service for our customer
and have managed to enable processing so far
to allow the whitelisted emails in and out all ok, but it seems those
not listed fail.

The assp machine has a public and private ip and the Exchange server is
on a private ip address.

Nov-21-08 11:13:11 Connected: internetip1:43371 -> publicipofserver:25
-> privateipofexchangeserver:25
Nov-21-08 11:13:12 internetip1 <> is disconnected
Nov-21-08 11:13:12 Connected: internetip2:45664 -> publicipofserver:25
-> privateipofexchangeserver:25
Nov-21-08 11:13:12 internetip1 <> is disconnected

Any ideas what I should check to allow an unknown address to be allowed in ?

Thanks
Martin Rheumer

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: General Exchange Rules used with ASSP

2008-11-20T17:30:06Z

Charles Marcus wrote:
> As long as you really meant 'spam is REJECTED' (at smtp time) - I agree...
>
> Bouncing spam is called backscatter/outscatter and is a huge no-no.

Oops, yes I mean reject of course.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-20T17:22:38Z

Micheal Espinola Jr wrote:
> Of the ones you listed, none of them are actually Outlook. If you can
> trust x-headers at all anyhow.
>

That was sort of my point. :) I was going through my legit mail doing
some checking and most of the ones that actually include the X-Mailer
header seem to be legitimate and accurately identify the client used,
including the 'Microsoft Office Outlook' variants. All those also
happen to include the build number so it's pretty easy to manually spot
the faked ones. A lot of my mail is from various lists too, and it was
rather interesting to see what some of them were using.

--
Do not meddle in the affairs of wizards,
for they are subtle and quick to anger.
-- Gildor Inglorion

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-20T17:03:52Z

Dave Watkins wrote:
> Microsoft Windows Mail is what the Outlook Express replacement is called In Vista. I have no idea if it generates headers that say as much though :)
>
That was from the X-Mailer header so I'd say that answers that question.

--
Do not meddle in the affairs of wizards,
for they are subtle and quick to anger.
-- Gildor Inglorion

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Issue with (version 2.0.0.7.12)

2008-11-20T09:12:32Z

(version 2.0.0.7.12) Seems to be changing the address from duvalls@... to duvalduvalduvalls@... which does not exist. I reverted back to (7.10) and the issue is gone.

Nov-20-08 10:00:15 [Worker_1] Connected: 209.85.198.234:6624 -> 172.16.0.10:5050 -> 172.16.0.2:25

Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread will wait (max 30 s) for the answer of Worker_1 which handles 0 sockets

Nov-20-08 10:00:15 [Main_Thread] Info: Main_Thread freed by idle Worker_1 in 0.017 seconds

Nov-20-08 10:00:15 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... DKIM-signature found

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 4731 bytes in whit elisted message - OK

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] [Whitelisted] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments) [Fwd Delivery Status Notification Failure]

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from [In-Reply-To:]

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: removed MSGID-signature from header

Nov-20-08 10:00:16 [Worker_1] Warning: got unexpected signal CLD in Worker_1: package - ASSP_OCR, file - Plugins/ASSP_OCR.pm, line - 80!

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... [Plugin] calling plugin ASSP_Attac hmentFullCheck

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 798 bytes in white listed message - OK

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... ClamAV: scanned 1666 bytes in whit elisted message - OK

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... whitelisted (no bad attachments)

Nov-20-08 10:00:16 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... -> ./notspam/Fwd_Delivery_Status_ Notification_Failure_--9.eml

Nov-20-08 10:00:46 id-00415-00025 [Worker_1] 209.85.198.234 <duvall.daniel@...> to: duvalduvalduvalls@... info: no (more) data readable from 209.85.198.234 - last command was 'QUIT'

Nov-20-08 10:00:46 [Worker_1] Disconnected: 209.85.198.234 - command list was 'EHLO,MAIL FROM,RCPT TO,DATA,QUIT' - insite 8 SocketCalls

Nov-20-08 10:00:46 [Worker_1] Worker_1 prepair to sleep

Nov-20-08 10:00:46 [Worker_1] Worker_1 will sleep now

Daniel Du Vall

Systems Admin

http://1peter4-10.org

http://volkswageninsanity.us

"Generally, people's biggest regrets stem from the dreams they don't attempt to fulfill."

From forum: assp-test

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-20T05:51:35Z

Jeroen van Aart wrote:
> That's not what I am doing, I think most email clients are about as
> crap, including thunderbird. Some just crap a tiny bit less. Outlook has
> a known history of security issues and as such made email viruses
> popular, that's what I pointed out.

Pointed out, pointlessly. Outlook has been secure from that for a few
versions now. If you want to badmouth other products, go for it. Doing
it to Outlook, I can assure you, is currently pointless - which is the
only reason for my reply. I am not advocating the use of Microsoft Outlook.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

signature.asc (194 bytes) Download Attachment

From forum: assp-user

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-20T05:48:09Z

Of the ones you listed, none of them are actually Outlook. If you can trust x-headers at all anyhow.

Melvin wrote:

Outlook, silly?  Really!  And I thought I was the only one...

However, a great deal of it tries to pass itself off as if it did.  A 
quick check of the x-mailer headers from a couple of dozen from a recent 
batch of spam:

5 Outlook Express
8 Thuderbird
1 The Bat!
10 Microsoft Windows Mail (not sure what actually would produce that 
x-mailer header legitimately)

Makes me curious now to see if there's any specific patterns that might 
be helpful in the crusade. :)



Micheal Espinola Jr wrote:

Jeroen van Aart wrote:

Of course, how else do all these email viruses and trojans spread so easily?

The worlds spam is not being sent via Microsoft Outlook.  That's just silly.

  
------------------------------------------------------------------------

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
------------------------------------------------------------------------

_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

signature.asc (194 bytes) Download Attachment

From forum: assp-user

Re: General Exchange Rules used with ASSP

2008-11-20T02:51:48Z

On 11/19/2008, Jeroen van Aart (kroshka@...) wrote:
> The preferred way in my opinion is that spam bounces

As long as you really meant 'spam is REJECTED' (at smtp time) - I agree...

Bouncing spam is called backscatter/outscatter and is a huge no-no.

--

Best regards,

Charles

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

winmail.dat not converting

2008-11-19T20:05:03Z

smime.p7s (28K) Download Attachment

From forum: assp-test

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-19T18:19:30Z

Steve Moss wrote:
> Yawn. Let's not get into these pointless, entrenched my-email-client-is-better-than-yours nonsense.

That's not what I am doing, I think most email clients are about as
crap, including thunderbird. Some just crap a tiny bit less. Outlook has
a known history of security issues and as such made email viruses
popular, that's what I pointed out.

Greetings,
Jeroen

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: General Exchange Rules used with ASSP

2008-11-19T18:11:29Z

Maxime Frenette wrote:
> Where should I start looking ? I didn't had any answers here, I do known I should read again and again,

> -----Original Message-----
> From: Maxime Frenette [mailto:mfrenette@...]
> Sent: 17 novembre 2008 11:23
> To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
> Subject: [Assp-user] General Exchange Rules used with ASSP

> If you need any more informations, let me known, I'll do my best to reply asap.

I am of the opinion that letting users deal with spam, in a type of
"junk/spam folder" setup, isn't working in the long run. The preferred
way in my opinion is that spam bounces and then the odd false positive
will be noticed soon enough by the sender. This is far better, but still
not ideal, than having spam sit forever in a crowded junk folder waiting
for the user to check it, but likely will be deleted unread. In the
meantime the sender starts to become rather angry why you did not reply.

It will also save you the admin a lot of trouble and time.

Best regards,
Jeroen

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-19T17:42:36Z

> I was talking about virus emails (and trojans), not spam. They're not
> exactly the same thing.
>
> You can't deny the security issues past and present in outlook helped a
> lot in propagating as well as enabling the email virus to cause harm.
> The fact an email virus works at all has to do a lot with the improper
> way outlook (used to) deal with attachments, scripts and what have you.
>
> Best regards,
> Jeroen

Yawn. Let's not get into these pointless, entrenched my-email-client-is-better-than-yours nonsense.
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: General Exchange Rules used with ASSP

2008-11-19T17:36:25Z

>> Where should I start looking ? I didn't had any answers here, I do known I should read again and again, but will like to do this asap since we are still in a big servers migration and unfortunately, I don't have too much time for assp these days and I do have some problems with false positive and I'll really like to let my users deal with theres spams... So any good ideas will be really much appreciated. <<

You did have an answer - the ASSP Toolbar for Outlook (www.assptoolbar.com). It has a lot of facilities to make it easy for users to do just what it seems you are asking.

-----Original Message-----
From: Maxime Frenette [mailto:mfrenette@...]
Sent: Wednesday, November 19, 2008 10:40 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] General Exchange Rules used with ASSP

Where should I start looking ? I didn't had any answers here, I do known I should read again and again, but will like to do this asap since we are still in a big servers migration and unfortunately, I don't have too much time for assp these days and I do have some problems with false positive and I'll really like to let my users deal with theres spams... So any good ideas will be really much appreciated.

Regards,

Maxime F.

-----Original Message-----
From: Maxime Frenette [mailto:mfrenette@...]
Sent: 17 novembre 2008 11:23
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: [Assp-user] General Exchange Rules used with ASSP

Hi Everyone,

I've been away from the list for a long time, I was reading but I didn't had any inputs here for a while.

I just want to ask users of ASSP who are using it with Exchange based servers. Is there anyone using a general outlook rules to let pass the tagged spam to users and being transferred to a specific mailbox folder ? What will be the best way to let users manage theirs spams ?

If you need any more informations, let me known, I'll do my best to reply asap.

Regards,

Maxime Frenette
Administrateur adjoint, Réseau informatique *
Computer Network Assistant Adminstrator
T (514) 322-8774 ext 2237 * F (514) 322-7012 - - 237
mfrenette@...

www.sonovideo.com
Expert-conseil en solutions audio-vidéo, audiovisuel, télédiffusion et automatisation Expert Consultant in audio-video, audiovisual, broadcast and automation solutions

Sono Vidéo

Sono Vidéo inc. s'engage à protéger la confidentialité de l'information de ses clients. Si vous n'êtes pas un des destinataires désignés de ce message, veuillez aviser l'expéditeur et effacer immédiatement ce courriel. Si vous n'êtes pas le destinataire désigné, toute diffusion ou publication de ce message est interdite.

Sono Vidéo inc. is committed to protecting the privacy of its customers. If you are not one of the intended recipients or entities of this message, please notify the sender and immediately delete this email and all associated attachments so that it is not recoverable. If you are not the intended recipient, any dissemination, distribution or copying of this communication is strictly prohibited.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user

Re: Assp-user Digest, Vol 31, Issue 12

2008-11-19T16:01:48Z

Microsoft Windows Mail is what the Outlook Express replacement is called In Vista. I have no idea if it generates headers that say as much though :)

> -----Original Message-----
> From: Melvin [mailto:melvin@...]
> Sent: Thursday, 20 November 2008 12:36 p.m.
> To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
> Subject: Re: [Assp-user] Assp-user Digest, Vol 31, Issue 12
>
> Outlook, silly? Really! And I thought I was the only one...
>
> However, a great deal of it tries to pass itself off as if it did. A
> quick check of the x-mailer headers from a couple of dozen from a
> recent
> batch of spam:
>
> 5 Outlook Express
> 8 Thuderbird
> 1 The Bat!
> 10 Microsoft Windows Mail (not sure what actually would produce that
> x-mailer header legitimately)
>
> Makes me curious now to see if there's any specific patterns that might
> be helpful in the crusade. :)
>
>
>
> Micheal Espinola Jr wrote:
> > Jeroen van Aart wrote:
> >
> >> Of course, how else do all these email viruses and trojans spread so
> easily?
> >>
> >
> > The worlds spam is not being sent via Microsoft Outlook. That's just
> silly.
> >
> >
> > ---------------------------------------------------------------------
> ---
> >
> > ---------------------------------------------------------------------
> ----
> > This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> > Build the coolest Linux based applications with Moblin SDK & win
> great prizes
> > Grand prize is a trip for two to an Open Source event anywhere in the
> world
> > http://moblin-contest.org/redirect.php?banner_id=100&url=/
> > ---------------------------------------------------------------------
> ---
> >
> > _______________________________________________
> > Assp-user mailing list
> > Assp-user@...
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
>
>
> --
> Do not meddle in the affairs of wizards,
> for they are subtle and quick to anger.
> -- Gildor Inglorion
>
>
>
> -----------------------------------------------------------------------
> --
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the
> world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Assp-user mailing list
> Assp-user@...
> https://lists.sourceforge.net/lists/listinfo/assp-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-user mailing list
Assp-user@...
https://lists.sourceforge.net/lists/listinfo/assp-user

From forum: assp-user