Autowhitelisting not working

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Autowhitelisting not working

m.huijgen
Hi,

I suspect autowhitelisting is not working in my ASSP setup. Is there any
way I can verify if it works?

In the section 'White/Redlist/Tuplets' on the top op the ASSP web
interface if I click the Show Whitelist button there are no addresses or
domains shown. If I add a an address here and then verify it also doesn't
show up here.

It seems the only way to get an address whitelisted is via the regular
menu: Whitelisting > Whitelisted Domains and Addresses > Edit file.

Any hints are appreciated.

Martin
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Autowhitelisting not working

m.huijgen
Ok, some more info. The plot thickens.

If I search the maillog tail from the web interface for 'autowhite' I find
entries like:

Jul-15-16 16:27:32 m1-92852-02329 [Worker_1] 172.21.135.10 <m.***@****.nl>
to: dtops_****@******.nlAdmininfo: whitelist addition:
dtops_****@*******.nl - AutoWhite on sent mail by m.***@****.nl

So it appears addresses do get added to an autowhitelist. However upon
entering that address (dtpos_****@*******.nl) in the White/Redlist/Tuplets
page it says 'dtops_****@*******.nl NOT whitelisted'.

Furthermore, mail from addresses we had sent mail to before (so which
should  be on the autowhitelist if nothing else) were tagged as spam.

So what's going on? Either the White/Redlist/Tuplets page does not search
in the autowhitelist or the autowhitelist is not updated. In either case
it would be interesting to know which file or database contains the
autowhitelist. The addresses that are supposedly autowhitelisted do not
show up in personal whitelistst or in the Berkeley database that is my
general whitelist.

Thanks!

Martin



From:   [hidden email]
To:     [hidden email]
Date:   13-07-2016 19:00
Subject:        [Assp-user] Autowhitelisting not working



Hi,

I suspect autowhitelisting is not working in my ASSP setup. Is there any
way I can verify if it works?

In the section 'White/Redlist/Tuplets' on the top op the ASSP web
interface if I click the Show Whitelist button there are no addresses or
domains shown. If I add a an address here and then verify it also doesn't
show up here.

It seems the only way to get an address whitelisted is via the regular
menu: Whitelisting > Whitelisted Domains and Addresses > Edit file.

Any hints are appreciated.

Martin------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning
reports.http://sdm.link/zohodev2dev_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user


------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Autowhitelisting not working

Thomas Eckardt/eck
There is only one whitelistdb in assp.

Check the BerkeleyDB using the system maintenance binaries. In doubt

- stop assp
- clean the 'assp/tmpDB' folder
- start assp

I recommend to use a RDB like MySQL, oracle, DB/2, MSSQL .... for the main
hashes and lists.

Thomas





Von:    [hidden email]
An:     For Users of ASSP <[hidden email]>
Datum:  15.07.2016 16:45
Betreff:        Re: [Assp-user] Autowhitelisting not working



Ok, some more info. The plot thickens.

If I search the maillog tail from the web interface for 'autowhite' I find

entries like:

Jul-15-16 16:27:32 m1-92852-02329 [Worker_1] 172.21.135.10 <m.***@****.nl>

to: dtops_****@******.nlAdmininfo: whitelist addition:
dtops_****@*******.nl - AutoWhite on sent mail by m.***@****.nl

So it appears addresses do get added to an autowhitelist. However upon
entering that address (dtpos_****@*******.nl) in the White/Redlist/Tuplets

page it says 'dtops_****@*******.nl NOT whitelisted'.

Furthermore, mail from addresses we had sent mail to before (so which
should  be on the autowhitelist if nothing else) were tagged as spam.

So what's going on? Either the White/Redlist/Tuplets page does not search
in the autowhitelist or the autowhitelist is not updated. In either case
it would be interesting to know which file or database contains the
autowhitelist. The addresses that are supposedly autowhitelisted do not
show up in personal whitelistst or in the Berkeley database that is my
general whitelist.

Thanks!

Martin



From:   [hidden email]
To:     [hidden email]
Date:   13-07-2016 19:00
Subject:        [Assp-user] Autowhitelisting not working



Hi,

I suspect autowhitelisting is not working in my ASSP setup. Is there any
way I can verify if it works?

In the section 'White/Redlist/Tuplets' on the top op the ASSP web
interface if I click the Show Whitelist button there are no addresses or
domains shown. If I add a an address here and then verify it also doesn't
show up here.

It seems the only way to get an address whitelisted is via the regular
menu: Whitelisting > Whitelisted Domains and Addresses > Edit file.

Any hints are appreciated.

Martin------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning
reports.http://sdm.link/zohodev2dev_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning
reports.http://sdm.link/zohodev2dev_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Autowhitelisting not working

m.huijgen
Hi Thomas,

Thanks for your reply. Indeed I am planning to migrate to MySQL for the
db's and I've set up a test server for that but for now I need to
troubleshoot our production server.

I've used the system utilities to check the Berkeley DB. After sending
to a new external e-mail address that address does not get added to the
whitelist. (Which is why I wondered perhaps I'm looking in the wrong file.)

Thank for the cleaning tip, I will carry it out asap and report back.

Martin


On 07/16/2016 11:36 AM, Thomas Eckardt wrote:

> There is only one whitelistdb in assp.
>
> Check the BerkeleyDB using the system maintenance binaries. In doubt
>
> - stop assp
> - clean the 'assp/tmpDB' folder
> - start assp
>
> I recommend to use a RDB like MySQL, oracle, DB/2, MSSQL .... for the main
> hashes and lists.
>
> Thomas
>
>
>
>
>
> Von:    [hidden email]
> An:     For Users of ASSP <[hidden email]>
> Datum:  15.07.2016 16:45
> Betreff:        Re: [Assp-user] Autowhitelisting not working
>
>
>
> Ok, some more info. The plot thickens.
>
> If I search the maillog tail from the web interface for 'autowhite' I find
>
> entries like:
>
> Jul-15-16 16:27:32 m1-92852-02329 [Worker_1] 172.21.135.10 <m.***@****.nl>
>
> to: dtops_****@******.nlAdmininfo: whitelist addition:
> dtops_****@*******.nl - AutoWhite on sent mail by m.***@****.nl
>
> So it appears addresses do get added to an autowhitelist. However upon
> entering that address (dtpos_****@*******.nl) in the White/Redlist/Tuplets
>
> page it says 'dtops_****@*******.nl NOT whitelisted'.
>
> Furthermore, mail from addresses we had sent mail to before (so which
> should  be on the autowhitelist if nothing else) were tagged as spam.
>
> So what's going on? Either the White/Redlist/Tuplets page does not search
> in the autowhitelist or the autowhitelist is not updated. In either case
> it would be interesting to know which file or database contains the
> autowhitelist. The addresses that are supposedly autowhitelisted do not
> show up in personal whitelistst or in the Berkeley database that is my
> general whitelist.
>
> Thanks!
>
> Martin
>
>
>
> From:   [hidden email]
> To:     [hidden email]
> Date:   13-07-2016 19:00
> Subject:        [Assp-user] Autowhitelisting not working
>
>
>
> Hi,
>
> I suspect autowhitelisting is not working in my ASSP setup. Is there any
> way I can verify if it works?
>
> In the section 'White/Redlist/Tuplets' on the top op the ASSP web
> interface if I click the Show Whitelist button there are no addresses or
> domains shown. If I add a an address here and then verify it also doesn't
> show up here.
>
> It seems the only way to get an address whitelisted is via the regular
> menu: Whitelisting > Whitelisted Domains and Addresses > Edit file.
>
> Any hints are appreciated.
>
> Martin------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
> reports.http://sdm.link/zohodev2dev_______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
> reports.http://sdm.link/zohodev2dev_______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity planning
> reports.http://sdm.link/zohodev2dev
>
>
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Autowhitelisting not working

m.huijgen
FYI:

Cleaning the tmpDB folder worked like a charm. Thanks!

I stopped the assp process, renamed the tmpDB folder to tmpDB.old, created
a new tmpDB folder with the same permissions and restarted the assp
process.

Martin



From:   Martin Huijgen <[hidden email]>
To:     [hidden email]
Date:   16-07-2016 19:38
Subject:        Re: [Assp-user] Autowhitelisting not working



Hi Thomas,

Thanks for your reply. Indeed I am planning to migrate to MySQL for the
db's and I've set up a test server for that but for now I need to
troubleshoot our production server.

I've used the system utilities to check the Berkeley DB. After sending
to a new external e-mail address that address does not get added to the
whitelist. (Which is why I wondered perhaps I'm looking in the wrong
file.)

Thank for the cleaning tip, I will carry it out asap and report back.

Martin


On 07/16/2016 11:36 AM, Thomas Eckardt wrote:
> There is only one whitelistdb in assp.
>
> Check the BerkeleyDB using the system maintenance binaries. In doubt
>
> - stop assp
> - clean the 'assp/tmpDB' folder
> - start assp
>
> I recommend to use a RDB like MySQL, oracle, DB/2, MSSQL .... for the
main

> hashes and lists.
>
> Thomas
>
>
>
>
>
> Von:    [hidden email]
> An:     For Users of ASSP <[hidden email]>
> Datum:  15.07.2016 16:45
> Betreff:        Re: [Assp-user] Autowhitelisting not working
>
>
>
> Ok, some more info. The plot thickens.
>
> If I search the maillog tail from the web interface for 'autowhite' I
find
>
> entries like:
>
> Jul-15-16 16:27:32 m1-92852-02329 [Worker_1] 172.21.135.10
<m.***@****.nl>
>
> to: dtops_****@******.nlAdmininfo: whitelist addition:
> dtops_****@*******.nl - AutoWhite on sent mail by m.***@****.nl
>
> So it appears addresses do get added to an autowhitelist. However upon
> entering that address (dtpos_****@*******.nl) in the
White/Redlist/Tuplets
>
> page it says 'dtops_****@*******.nl NOT whitelisted'.
>
> Furthermore, mail from addresses we had sent mail to before (so which
> should  be on the autowhitelist if nothing else) were tagged as spam.
>
> So what's going on? Either the White/Redlist/Tuplets page does not
search

> in the autowhitelist or the autowhitelist is not updated. In either case
> it would be interesting to know which file or database contains the
> autowhitelist. The addresses that are supposedly autowhitelisted do not
> show up in personal whitelistst or in the Berkeley database that is my
> general whitelist.
>
> Thanks!
>
> Martin
>
>
>
> From:   [hidden email]
> To:     [hidden email]
> Date:   13-07-2016 19:00
> Subject:        [Assp-user] Autowhitelisting not working
>
>
>
> Hi,
>
> I suspect autowhitelisting is not working in my ASSP setup. Is there any
> way I can verify if it works?
>
> In the section 'White/Redlist/Tuplets' on the top op the ASSP web
> interface if I click the Show Whitelist button there are no addresses or
> domains shown. If I add a an address here and then verify it also
doesn't
> show up here.
>
> It seems the only way to get an address whitelisted is via the regular
> menu: Whitelisting > Whitelisted Domains and Addresses > Edit file.
>
> Any hints are appreciated.
>
>
Martin------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
>
reports.http://sdm.link/zohodev2dev_______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
>
reports.http://sdm.link/zohodev2dev_______________________________________________

> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential,
legally
> privileged and protected in law and are intended solely for the use of
the

>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
>
>
------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
planning
> reports.http://sdm.link/zohodev2dev
>
>
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning
reports.http://sdm.link/zohodev2dev_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user


------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user