User Tools

Site Tools


software:assp

QR Code generator

QRcode Readers

Android

iPhone

NeoReader

Iphone The Best barcode reasder

Strict SPF Processing Regex* (strictSPFRe)

Use to stop - fake docusign.net That is getting thru

  X-MS-Exchange-Organization-PRD: docusign.net
  Received-SPF: Fail (localhost: domain of dse@docusign.net does not designate 8.23.224.50 as permitted sender) receiver=localhost; client-ip=50.197.48.170; helo=50-197-48-170-static.hfc.comcastbusiness.net;
  X-Assp-Received-SPF: none ip=50.197.48.170 mailfrom=Orders@staplesadvantage.com

Email Address testing

From: http://wintelguy.com/mtrace.pl

eMail Tracer

This tool analyzes email headers and presents basic information about an email massage in an easy to read table form.

2012-08-29

There are duplicate emails in notspam from Nicole receiving and forwarding to Hostmysite

Config changes

New HMMValencePB:=49 HMMlocalValencePB:=55 UserAttach:= DoPrivatSpamdb:=0 - requires database for spam Bayesian_localOnly:= - area for configuration of baysean checking or not for emai addresses EmailSenderNoReply:= asspCfgVersion:=2.2.2(12237) ConfigChangeSchedule:=00000e0000 EnableHighPerformance:=0 autoCorrectCorpus:=0.6-1.4-4000-14 RebuildFileTimeLimit:=1 5 SSL_version:=SSLv2/3 SSL_cipher_list:= SSLtimeout:=5 EmailAdminDomains:= - Used for multiple domains to specify who have premissions in domain useUnicodeGCString:=1 - Unicode::GString - not sure where used ConfigSavedOK:=1 - not a parameter in web configuration

My Changes UseSubjectsAsMaillogNames:=1 MaintBayesCollection:=1

Removed allowAdminConnectionsFromName:=

* list of hostnames

= Update Software =

From: http://assp.cvs.sourceforge.net/viewvc/assp/assp2/

Download GNU tarball

= BlockReport Setup Recommendations =

=Parm
1. never set 'doMove2Num' to on !
2. set 'UseSubjectsAsMaillogNames' to 'ON' to produce unique file names ! ON
3. set 'MaxAllowedDups' 0
4. set 'decodeMIME2UTF8' to 'ON' Not Found
5. set 'MaxFileNameLength'
6. set 'MaintBayesCollection' ON
MaxFiles 14009
7. set 'MaxBayesFileAge' 0
8. set 'MaxCorrectedDays' 1000
9. set 'MaxNoBayesFileAge'
10. set 'MaxFileAgeSchedule'
=Parm
1. never set 'doMove2Num' to on !
2. set 'UseSubjectsAsMaillogNames' to 'ON' to produce unique file names ! ON
3. set 'MaxAllowedDups' 0
4. set 'decodeMIME2UTF8' to 'ON' Not Found
5. set 'MaxFileNameLength'
6. set 'MaintBayesCollection' ON
MaxFiles 14009
7. set 'MaxBayesFileAge' 770 250
8. set 'MaxCorrectedDays' 1000
9. set 'MaxNoBayesFileAge'
10. set 'MaxFileAgeSchedule'

From: http://comments.gmane.org/gmane.mail.spam.assp.test/10341

18.11.2010

The resend link in your example points to the file 'spam/2390.eml'. The file name shows, that you don't use 'UseSubjectsAsMaillogNames'. Now your file names are build using random numbers between 1 and 'MaxFiles', and assp don't care about, if the resulting file name still exists or not. This behavior is still implemented for backward compatibility. So it is possible, that a file gets overwritten and the result is, what you see in your BlockReports → pointing to wrong mails (btw. this has nothing to do with the new BlockReports such_a_v2_setup_was_wrong_all_the_time}

If you want to use BlockReports configure your setup as follows:

=Parm =Old
1. never set 'doMove2Num' to on ! OFF
2. set 'UseSubjectsAsMaillogNames' to 'ON' to produce unique file names ! OFF ON
3. set 'MaxAllowedDups' 0 0
4. set 'decodeMIME2UTF8' to 'ON' Not Found Not Found
5. set 'MaxFileNameLength' 50
6. set 'MaintBayesCollection' OFF ON
MaxFiles 14009 14009
7. set 'MaxBayesFileAge' 0 0
8. set 'MaxCorrectedDays' 1000 1000
9. set 'MaxNoBayesFileAge' 31
10. set 'MaxFileAgeSchedule' 1

think about - and if usefull configure

'ConsoleCharset', system default 'LogCharset', Not Found 'UseUnicode4MaillogNames', No 'UseUnicode4SubjectLogging', No 'AllowedDupSubjectRe', Not Set 'ExtraBlockReportLog' Enabled and the other parameters in the BlockReports section of the GUI

And not to forget: Never use any 'old style' rebuildspamdb.pl, move2num.pl or any other V1 script (e.g. if you've done an upgrade from V1) !

Thomas

= Alternative =

http://www.mail-archive.com/assp-test@lists.sourceforge.net/msg12988.html

No need for that; configure ASSP to only “tag” emails instead of straight blocking them (ok, you may setup exceptions so that surefire junk will be rejected); then setup the “custom header” option in ASSP to something your backend mailserver will recognize (configure it to do so) and use the mailserver rules to move such tagged messages to the “junkmail” folder, this way your users will be able to “recover” those messages and will avoid delays and “false positives”

= Further =

Fritz Borgstedt | 19 Nov 16:13

Re: Block Reports

ASSP development mailing list <assp-test <at> lists.sourceforge.net> schreibt:

Can you comment on this? It used to be strongly recommended to disable
'UseSubjectAsMaillogNames' as soon as your corpus was built - is this
no
longer the recommended way

The collection cleaning tools existing since a year or so will clean the corpus and keep the size below MaxFiles. The tools provide a better control over the age of deleted files.

= Migration Notes - Upgrade from 1.3 to 2.0 =

|rel="__blank"

= ASSP Setup 1.3 =

|rel="__blank"

= Do Not Collect Messages From (Collecting) =

nagios.admin@power.com|notify@ringcentral.com Added to “Do Not Collect Messages from/to these Addresses* (noCollecting)”

= Forums =

http://sourceforge.net/apps/phpbb/assp/

= ASSP Updates at cvs sourceforge =

http://assp.cvs.sourceforge.net/viewvc/assp/

Note: mib and mrtg are both for snmp

version numbering of assp V2

FAMILY.MAJOR.MINOR_BUILD[.PATCH]

(% class=“cleanwrap” style=“margin: 0px; padding: 15px; border-width: 0px; outline-width: 0px; font-size: 13px; vertical-align: baseline; background-color: transparent; font-family: monospace,sans-serif; white-space: pre-wrap; word-wrap: break-word; overflow: auto;” %) odd_-_production_version_even_-_development_version}

https://sourceforge.net/projects/assp/files//ASSP%20V2%20multithreading/changelog.txt/view

Blacklisted Domains

Validate Sender

Blacklisted Addresses and Domainssoftware}(blackListedDomains)

Those listed will have the spam score increased by blValencePB

In PenaltyBox

Blacklisted Domain, default=20 (blValencePB)

What is this?

Blocked Organizations Score, default=25 (sborgValencePB)

Block report for Exchange not working

Exchange

>Oct-04-11 17:13:27 [Worker_1] <doing line <thread-index: AcyC2mPGcfOTBDuwROCleEKppNywOw==[CR][LF] > >Oct-04-11 17:13:27 [Worker_1] <doing line <From: "emailname" <emailname@domain.com>[CR][LF] > >Oct-04-11 17:13:27 [Worker_1] <doing line <To: <spamreport@domain.com>[CR][LF] > >Oct-04-11 17:13:27 [Worker_1] <doing line <[CR][LF] ... ... >Oct-04-11 17:13:32 [Worker_10000] <MonitorMainThread >Oct-04-11 17:13:32 [Worker_10000] <run CMD from cmdQueue >Oct-04-11 17:13:32 [Worker_10000] Info: processing queued blocked mail request from Oct-04-11 17:13:32 [Worker_10000] <matchSL - - EmailAdmins >Oct-04-11 17:13:32 [Worker_10000] <BlockReportHTMLTextWrap >Oct-04-11 17:13:32 [Worker_10000] <matchSL - - EmailAdmins >Oct-04-11 17:13:32 [Worker_10000] Error: BlockReport is unable to parse for a valid report address Oct-04-11 17:13:32 [Worker_10000] <matchSL - - EmailAdmins >Oct-04-11 17:13:32 [Worker_10000] <localmail -

Thunderbird >Oct-04-11 17:20:11 [Worker_1] <doing line <From: JS <emailname@domain.com>[CR][LF] > >Oct-04-11 17:20:11 [Worker_1] <doing line <User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0) Gecko/20110922 Thunderbird/7.0[CR][LF] > >Oct-04-11 17:20:11 [Worker_1] <doing line <MIME-Version: 1.0[CR][LF] > >Oct-04-11 17:20:11 [Worker_1] <doing line <To: spamreport@domain.com[CR][LF] > >Oct-04-11 17:20:11 [Worker_1] <doing line <Subject: 5[CR][LF] > >Oct-04-11 17:20:11 [Worker_1] <doing line <Content-Type: text/plain; charset=ISO-8859-1; format=flowed[CR][LF] > >Oct-04-11 17:20:13 [Worker_10000] <MonitorMainThread >Oct-04-11 17:20:13 [Worker_10000] <run CMD from cmdQueue >Oct-04-11 17:20:13 [Worker_10000] Info: processing queued blocked mail request from emailname@domain.com Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - EmailAdmins >Oct-04-11 17:20:13 [Worker_10000] <BlockReportHTMLTextWrap >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - EmailAdmins >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - BlockResendLinkLeft >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - BlockResendLinkRight >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - EmailAdmins >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - EmailAdmins >Oct-04-11 17:20:13 [Worker_10000] <matchSL - emailname@domain.com - EmailAdmins >Oct-04-11 17:20:13 [Worker_10000] <localmail - emailname@domain.com >Oct-04-11 17:20:13 [Worker_10000] <localdomains - domain.com

power.com Mail originating in Exchange with output through ASSP MailLoops

In Exchange|=Email Exists In Postfix|=End or Loop

NO NO
NO Postfix Transport = EX
NO Postfix Transport = HMSite
Exchange NO
Exchange Postfix = EX
Exchange Postfix = HMSite

power.com Incoming Email with Exchange out through ASSP MailLoops

In Exchange|=Email Exists In Postfix|=End or Loop

NO NO
NO Postfix Transport = EX
NO Postfix Transport = HMSite
Exchange NO
Exchange Postfix = EX
Exchange Postfix = HMSite

= Whitelist and Senderbase =

= ASSP Parameter=Original Value= New Value
whiteListedDomains file:whitelisteddomains.txt file:files/whitedomains.txt

in maillog tail. I have used the original from installation package and added some domains from maillog tail interface.

whiteSenderBase N/A file:files/whiteorg.txt

with syntax change for each line

ASSPBLOCK report

The ASSPBLOCK report request function is fantastic! \\My question is: If you click 'resend' on a blocked email, does that automatically add the sender(s) to the whitelist and identify the email as 'notspam'?

autoAddResendToWhite

Help Message

Help for the Spam Filter (ASSP) We are using one of the most advanced SPAM filters on the internet. It continually adapts itself to detect spam.

For the most part it does a good job, but occasionally a spam slips through.

When you receive a spam, you have a choice to either just delete it and move on, or report it to the spam filter to help improve its performance. To report the spam select the message in your inbox, right-click and select “Forward as attachment.” (If your email software doesn't support “Forward as attachment” simply forward the mail.) Address it to assp-spam@mydomain.com and click send. You've done your duty and added the evil spam to the spam filter's collection.

Just to remind you of the basic operation of our spam filter: 1) Anyone you email will never have a message blocked. 2) Never email a spammer software}you validate their address authorizing them to spam us. 3) Don't forward spam software}it makes the spam filter think we like it. 4) Report spam by forwarding it to the addtospam@power.com address. 5) The spam filter keeps track of mail we send and spam we receive software} if an incoming message is not from someone we've emailed and it's more like the mail we send than the spam we receive then it gets through. Otherwise it's blocked and the sender gets the message, “Mail appears to be unsolicited software}report errors to postmaster@ourhost.com” 6) If you become aware that mail you want is being blocked send the sender an email so their mail isn't blocked any more.

Function of special addresses

spamhelp@power.com - reply's to the sender with this help page

addtospam@power - Any mail sent or forwarded to this address will be

       reported to our spam filter as a spam

removefromspam@power.com - Any mail sent or forwarded to this address will be

       reported to our spam filter as a good email

addtowhitelist@power.com - add addresses to the whitelist

removefromwhitelist@power.com- remove addresses from the whitelist

turnoffspamfilter@power.com - Turn off all spam filtering, the spam filter will not stop

    any mail from reaching you 

turnonspamfilter@power.com - Turn on spam filtering

assp-persblack - request to add addresses to your personal blacklist

assp-persnotblack - request to remove addresses from your personal blacklist

You can force a complete report about all your personal black list entries by defining an email address that begins with 'reportpersblack' in a remove request : eg: reportpersblack@anydomain.com

Start and Stop Scripts

  • for ASSP
  • I put an init script called assp in ~{~{/etc/init.d}}
  • I ran the system services control panel in Yast and checked runlevel 3 an 5
  • I changed the S level of assp in ~{~{/etc/init.d/rc.3 and 5 }} to S14assp to start last. K level was at 1 to stop the first thing

The names of the stop scripts always begin with K for kill. Start scripts begin with S for start

Adding a script to the /etc/rc.d/rc#.d/ directory with either an S or K prefix, adds the script to the boot or shutdown process. The scripts are run in numerical order. S20abc is run before S30xyz. The extensibility to the boot and shutdown procedures of the operating system is one of the strengths of UNIX. The orderly sequential initiation of processes can be coordinated for dependent processes. The orderly shutdown of processes is often required of complex programs such as databases. This is how it is done.

Reference:

http://www.yolinux.com/TUTORIALS/LinuxTutorialInitProcess.html


Re: How to set the order of init.d scripts.

  On 16 May 2007 13:30:31 -0700, voipfc wrote:
  > Does the init.d script system have a way to set the order?
  >
  > I am running mydns which depends on mysql and the init.d sequence runs
  > it before mysql starts, causing it to fail. Is there a way to
  > rearrange the order of execution, even if they start and stop at the
  > same runlevels?
  Number picks who runs first and for the same number they are executed
  in the order found. Usually seen with ls. Example for run level 2
  ls -al /etc/rc.d/rc2.d/*

Reference:

http://fixunix.com/setup/19053-how-set-order-init-d-scripts.htm


Commands

chkconfig,

Novell/SUSE Linux provides several tools for managing init scripts. The most simple is innserv. For example, to have /etc/init.d/bar loaded with the default runlevels specified in the “INIT INFO” section, execute:

# innserv /etc/init.d/bar

To have it removed, type

# innserv -r /etc/init.d/bar

reference:

http://www.novell.com/coolsolutions/feature/15380.html

= Run Level Commands: Stop linux =

http://www.yolinux.com/TUTORIALS/LinuxTutorialInitProcess.html

= Create Linux from Scratch =

http://archive.linuxfromscratch.org/lfs-museum/1.0/LFS-HOWTO-1.0-HTML/LFS-HOWTO-1.0.html#toc1

= assptoolbar =

http://www.assptoolbar.com/

= Advanced Configuration =

https://sourceforge.net/apps/mediawiki/assp/index.php?title=ASSP_Advanced_Workflow

http://www.scribd.com/doc/17799/ASSP-Extracting-the-Ham-from-Spam-by-David-J-Young

= Sender Receives Notification =

http:~/~/www.oitc.com/ctw/assp/

Text to add to each notification

? maxRealSizeError

552_message_exceeds_maxrealsize_byte_size_rcpt}

? maxSizeError

552_message_exceeds_maxsize_byte_size}

? SpamError

www.power.com_contact-us.php}

NoRelaying

530_relaying_not_allowed}

NoValidRecipient

emailaddress}

SenderInvalidError

554_5.7.7_reason}

PenaltyTrapPolite

emailaddress}

PenaltyError

software}

DelayError

451_4.7.1_please_try_again_later}

SPFError

spfresult}

RBLError

550_5.7.1_blacklisted_by_rbllisted}

URIBLError

554_5.7.1_blacklisted_by_uriblname_contact_the_postmaster_of_this_domain_for_resolution._this_attempt_has_been_logged}

? AttachmentError

500_these_attachments_are_not_allowed_--_compress_before_mailing}

UuencodedError

554_5.7.1_this_mail_is_uuencoded_and_will_be_blocked}

AvError

500_mail_appears_infected_with_infection_--_disinfect_and_resend}

? bombError

550_your_message_was_rejected_because_it_appears_to_be_part_of_a_spam_bomb}

scriptError

550_your_email_contains_html_scripting_code_--_please_resend_as_plain_text}

= DNSBL Weighting =

RBL Service Providers* (RBLServiceProvider)

Names of DNSBLs to use separated by "|". You may set for every provider a weight like zen.spamhaus.org=>50|bl.spamcop.net=>25. Defaults are: zen.spamhaus.org=>1|bl.spamcop.net=>1|psbl.surriel.com=>2|ix.dnsbl.manitu.net=>2| l2.apews.org=>3|combined.njabl.org=>1|safe.dnsbl.sorbs.net=>1|dnsbl-1.uceprotect.net=>2| dnsbl-2.uceprotect.net=>2|dnsbl-3.uceprotect.net=>2|blackholes.five-ten-sg.com=>3". DNSBL providers can get a "weight" like bl.spamcop.net=>1. The value of the weight can be set directly like=>45 or as a divisor of RBLmaxweight. Low numbers < 6 are divisors . So if RBLmaxweight = 50 (default) bl.spamcop.net=>50 would be the same as bl.spamcop.net=>1, bl.spamcop.net=>2 would be the same as bl.spamcop.net=>25. If the sum of weights surpasses RBLmaxweight, the DNSBL check fails. If not, the DNSBL check is scored as "neutral" even with RBLmaxhits reached. Setting Showmaxreplies will allow ALL replies to contribute to the total weight regardless of RBLmaxhits. Some RBL Service Providers, like blackholes.five-ten-sg.com, provides different return codes in a single DNS-zone: like 127.a.b.c - where a,b,c are used to identify a weight or type (or what ever) of the returned entry. If you want to care about special return codes, or if you want to use different weights for different return codes, you should use the following enhanced entry syntax:


http://old.nabble.com/1.6.5.1-%22New-DNSBL%22-Wording-Question-td27064433.html

probably the example text is wrong; see, when the DNSBL weighting feature was added to ASSP, the official explanation was that values from 1 to 6 were used as dividers where values above 6 were used as weight, this means that having and entry like (e.g.)

db.wpbl.info⇒2

will result in a score increase of 50/2 ⇒ 25 in case an IP gets a hit on the wpbl.info DNSBL; on the other hand, having an entry like

dnsbl-3.uceprotect.net⇒10

would mean that a hit on the above DNSBL will result in a score increase of 10 spam points; so, again, I think that probably the phrasing in the GUI descriptive text is wrong … given that things (code) weren't changed to work in a different way… but then that would badly break existing installations :(

If the weight is less 1 it acts as a multiplier of RBLmaxweight. If RBLmaxweight = 50 (default) bl.spamcop.net⇒1 will score 50 for a hit, ix.dnsbl.manitu.net⇒0.5 will score 25. Values above 6 are used as weight. So an entry like dnsbl-2.uceprotect.net⇒10 would mean that a hit on the above DNSBL will result in a score increase of 10 spam points. To accommodate the old (obsolete) notation, values over 1 and below 6 are used as dividers. ix.dnsbl.manitu.net⇒2 is the same as ix.dnsbl.manitu.net⇒0.5!

= Maintenance of the spam and notspam lists =

For migration to ASSP 2.xx… I am lowering the spam and not spam folders to 14000 from 18009. I will delete all of 2009 spams. I deleted all notspams from Mar 2011 backwards. Left 15000+ emails.


How to combine databases from multiple users?

Once you have standard-format copies of all the spam/ham messages from a bunch of users, you can put them into ASSP's spam and ham folders, and use ASSP's “renumber” tool and “rebuild database” tools.

reference:

http://mail.python.org/pipermail/spambayes/2004-April/012124.html

= Commands to deal with Deletion of spam and notspam emails =

Create a list of the spam files:
Resulting Lists:

notspam.txt_notspamlist.txt_spamlist.txt_spamlistname.txt}

Separate the old files:

createnotspamdeletionlist_createspamdeletionlist_createnotspamdeletionlist.awk_createspamdeletionlist.awk_oldnotspam.txt_oldspam.txt}

Delete the old spam:

remove_extra_notspam_remove_extra_spam}

Backup of First set of spam:

emailarchive.txt}

= ASSP (Anti SPAM SMTP Proxy) Users list =

http://blog.gmane.org/gmane.mail.spam.assp.user

We do not recommend to run ASSP without - Net::CIDR::Lite - Net::IP::Match::Regexp

= Manual =

http://www.grscripts.com/assp_configuration.htm

http://sourceforge.net/apps/mediawiki/assp/index.php?title=SPAM_Lover/Hater

= perl mcpam =

How do I install Perl modules?

Installing a new module can be as simple as typing

* belgian}.

= List of perl Modules =

http://www.cpan.org/misc/cpan-faq.html#How_installed_modules

Look in
command

= ASSP Installation =

Bash Reference for if tests

http://www.ibm.com/developerworks/library/l-bash-test/index.html

Centos example:

http://www.how2centos.com/fight-spam-with-assp-anti-spam-smtp-proxy-on-centos-5-4/

http://www.how2centos.com/fight-spam-with-assp-anti-spam-smtp-proxy-on-centos-5-4/

From: …/ASSPInstallFolder/install.txt

Unix Installation: https://apps.sourceforge.net/mediawiki/assp/index.php?title=Unix

If you want to run assp.pl as a daemon start first from command line:

perl assp.pl Point your browser to http://127.0.0.1:55555/ Password: nospam4me Section: Server Setup Change the options and click “Apply Changes” (and restart)

assp_nobody}

assp.mod.zip script to install perl modules.

Get it at

installation notes


Remember to actually *READ* the README file! And re-read it if you have any problems.

OSNAME: linux LANG: POSIX ODBCHOME: LD_LIBRARY_PATH: DBROOT: WINDIR: II_SYSTEM: Perl: 5.012003 ExtUtils::MakeMaker: 6.56 Command line options:

u! = undef
w! = undef
e! = undef
g! = 0
x! = undef
o=s = 

You are using a Perl configured with threading enabled. Please read the warnings in DBI about this.

You should also be aware that on non-Windows platforms ODBC drivers come in two forms, thread-safe and non-thread-safe drivers and you may need to make sure you are using the right one.


install new version of CPAN

Also I am getting this message in CPAN:

There's a new CPAN.pm version (v1.9102) available! [Current version is v1.87] You might want to try install CPAN reload cpan without quitting the current session. It should be a seamless upgrad +e while we are running… [download]

I will admit I am a little scared to do this since I “think” I did it once and it broke all my scripts that used downloaded modules and I had to reload them all.

So if I start CPAN and type:

install CPAN reload CPAN


= Documentation =

http://www.magicvillage.de/~Fritz_Borgstedt/0001B38B-8000001C/0002DF8F-8000001C/

|rel="__blank" |rel="__blank"


Check out the ASSP project status at: http://www.magicvillage.de/~Fritz_Borgstedt/assp/S064D398D?WasRead=1

Go here http://sourceforge.net/mail/?group_id=69172 to subscribe to the email list.

Visit the community forums at: http://apps.sourceforge.net/mediawiki/phpbb/

For updated info and help visit the WIKI for ASSP at http://apps.sourceforge.net/mediawiki/assp/

Don't forget to read the ASSP Documentation that can be found in the wiki: https://apps.sourceforge.net/mediawiki/assp/index.php?title=ASSP_Documentation

Getting Started at https://apps.sourceforge.net/mediawiki/assp/index.php?title=Getting_Started

ASSP workflows can be seen here: Basic: https://apps.sourceforge.net/mediawiki/assp/index.php?title=ASSP_Basic_Workflow Advanced: https://apps.sourceforge.net/mediawiki/assp/index.php?title=ASSP_Advanced_Workflow

Starter-DB: http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05BB20E1?WasRead=1

= Utilities =

rebuildspamdb.pl repair.pl move2num.pl stat.p

Catch-22

Issue:

Issue:Let’s say a client receives a non-delivery report, how can he (not in whitelist) send a message to the organization if he is still not in whitelist? I mean, if the recipient or assp admin does not receive the notification, they will not know that there is a false positive and will not add the unknown client to whitelist…

Solution:

Solution: Set up an email address and put it in the Spam- Lover Address configuration option. Then modify the spam error message to direct people to “500 Mail appears to be unsolicited (spam). Please forward this email to not- spam@mydomain.com}}}if you feel this is in error.” Any false positives that bounce back to clients will hopefully be reported to the Mail Admin via the spam lover address (they just forward it), assuming they read the rejected email.

Info

What order does ASSP process mail to check if it is spam?

  1. Local or whitelisted? Local or whitelisted?
  2. Blacklisted Domain? Blacklisted Domain?
  3. Spam Helo? Spam Helo?
  4. Addressed to spam-bucket? Addressed to spam-bucket?
  5. Mail bomb? Mail bomb?
  6. Blocked attachment? Blocked attachment?
  7. Matches expression to identify non-spam? Matches expression to identify non-spam?
  8. Matches expression to identify spam? Matches expression to identify spam?
  9. Bayesian evaluation Bayesian evaluation
  10. If the message is identified as spam at any step along the way it goes to the spam directory.
  11. If the message is local or whitelisted it goes to the notspam directory.

Use Subject as Maillog Names

Internal Name: UseSubjectsAsMaillogNames

* This will prevent ASSP from controlling the number of files in your collections(→MAXFILES). * If your collections grow over 1000 items run move2num.pl and turn this off. * You can turn this on to help you manually identify mail in your spam-folder (spamlog) and ham-folder (notspamlog) collections. It is recommended to enable MaintBayesCollection and to setup MaxNoBayesFileAge to your needs, if you have switched this option to on.

Rebuilding Spam Database

perl rebuildspamdb.pl

2011-08-19 usr_share_assp}

Before

usr_share_assp}

References

software/assp.txt · Last modified: 2013/08/17 02:51 by superwizard