I can't use the email interface, I've been working on this for somes hours now, need help !

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
14 messages Options
Reply | Threaded
Open this post in threaded view
|

I can't use the email interface, I've been working on this for somes hours now, need help !

MaxF

Hi all,

I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.

I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.

If you need anymore information, let me known, thank you !


Maxime Frenette




Maxime Frenette.vcf (732 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Regex help - expression to identify spam

Bill Christensen
Hi folks,

I need to add some regex to my "expression to identify spam" to
eliminate the worst of the paypal/ebay phishing attempts.  Too many
real PP/ebay emails were getting rejected, so I had to put those
domain names in the whitelisted domains in order to keep my users
from mutiny.

I'm not very good at regex...

My current regex for that is

http://[\w\.]+@|\w<[a-z0-9]+[abcdfghjklmnpqrstuvwxyz0-9]{4}[a-z0-9]*>|subject:
[^\n]*     \S

(I don't remember where that came from; possibly this list)

and I need to add some stuff like:

        PayPal Account Suspension Notice
        eBay account suspension
        Notification of Limited Account

etc.

Thanks for any assistance.

--
Bill Christensen
<http://greenbuilder.com/contact/>

Green Building Professionals Directory: <http://directory.greenbuilder.com>
Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
Green Real Estate: <http://www.greenbuilder.com/realestate/>
Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
Books/videos/software: <http://bookstore.greenbuilder.com/>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

SPF on specific domains?

Bill Christensen
In reply to this post by MaxF
Hi again folks,

I haven't yet started using SPF for various reasons (including the
fact that I know some of the domains we receive legitimate mail from
don't have accurate SPF records), but I was wondering if it's
possible to run the SPF check *only* on specific domains that you
*know* have SPF working - like ebay and paypal and AOL and MSN.

Seems that this could be a list item in the config, as so many other
tunable bits are with ASSP.


--
Bill Christensen
<http://greenbuilder.com/contact/>

Green Building Professionals Directory: <http://directory.greenbuilder.com>
Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
Green Real Estate: <http://www.greenbuilder.com/realestate/>
Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
Books/videos/software: <http://bookstore.greenbuilder.com/>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Regex help - expression to identify spam

Micheal Espinola Jr
In reply to this post by MaxF
There is a much easier solution for this type of issue:

1.  Enable SPF Validation.
2.  Add Ebay, PayPal, etc, addresses to your noProcessing regex.

Ebay and PayPal use SPF records, so you can trust this.  Anything that
doesn't really come from their servers will fail SPF validation, and
get flagged as spam - to be tagged or deleted at your option.

By adding the addresses to your noProcessing regex, you can be sure
that none of the message contents pollute your Baysian word corpuses.

On 1/15/06, [hidden email] <[hidden email]> wrote:

> Hi folks,
>
> I need to add some regex to my "expression to identify spam" to
> eliminate the worst of the paypal/ebay phishing attempts.  Too many
> real PP/ebay emails were getting rejected, so I had to put those
> domain names in the whitelisted domains in order to keep my users
> from mutiny.
>
> I'm not very good at regex...
>
> My current regex for that is
>
> http://[\w\.]+@|\w<[a-z0-9]+[abcdfghjklmnpqrstuvwxyz0-9]{4}[a-z0-9]*>|subject:
> [^\n]*     \S
>
> (I don't remember where that came from; possibly this list)
>
> and I need to add some stuff like:
>
>        PayPal Account Suspension Notice
>        eBay account suspension
>        Notification of Limited Account
>
> etc.
>
> Thanks for any assistance.
>
> --
> Bill Christensen
> <http://greenbuilder.com/contact/>
>
> Green Building Professionals Directory: <http://directory.greenbuilder.com>
> Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
> Green Real Estate: <http://www.greenbuilder.com/realestate/>
> Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
> Books/videos/software: <http://bookstore.greenbuilder.com/>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://ads.osdn.com/?ad_idv37&alloc_id865&op=click">http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Regex help - expression to identify spam

Bill Christensen

Thanks for the reply.

A) Which (stable) version has SPF?  I've been using 1.1.0 with no
trouble for a long time now, and have been going by the "ain't broke,
don't fix it" rule.

B) I guess I should have used some other examples that I'd like to
get rid of, like the plethora of spam about micro-cap and smallcap
stocks, etc.  It's not just the ebay and pp stuff....   I'd still
like to know how to properly add phrases to the regex.

C) Your reply did answer my second email regarding 'tuning' the SPF
filtering to only apply to certain domains to some extent - but is
there a way to set it up so that ONLY the domains I choose are
subject to SPF, and the rest aren't?  Or is it the other way around,
where all domains are subject to SPF *except* the ones I choose?

Hmmm.. Guess it's time to pull out the test machine and try an upgrade...


At 2:56 PM -0500 1/15/06, Micheal Espinola Jr wrote:

>There is a much easier solution for this type of issue:
>
>1.  Enable SPF Validation.
>2.  Add Ebay, PayPal, etc, addresses to your noProcessing regex.
>
>Ebay and PayPal use SPF records, so you can trust this.  Anything that
>doesn't really come from their servers will fail SPF validation, and
>get flagged as spam - to be tagged or deleted at your option.
>
>By adding the addresses to your noProcessing regex, you can be sure
>that none of the message contents pollute your Baysian word corpuses.
>
>On 1/15/06, [hidden email] <[hidden email]> wrote:
>>  Hi folks,
>>
>>  I need to add some regex to my "expression to identify spam" to
>>  eliminate the worst of the paypal/ebay phishing attempts.  Too many
>>  real PP/ebay emails were getting rejected, so I had to put those
>>  domain names in the whitelisted domains in order to keep my users
>>  from mutiny.
>>
>>  I'm not very good at regex...
>>
>>  My current regex for that is
>>
>>
>>http://[\w\.]+@|\w<[a-z0-9]+[abcdfghjklmnpqrstuvwxyz0-9]{4}[a-z0-9]*>|subject:
>>  [^\n]*     \S
>>
>>  (I don't remember where that came from; possibly this list)
>>
>>  and I need to add some stuff like:
>  >
>  >        PayPal Account Suspension Notice
>  >        eBay account suspension
>  >        Notification of Limited Account
>  >
>  > etc.
>  >
>  > Thanks for any assistance.
>  >

--
Bill Christensen
<http://greenbuilder.com/contact/>

Green Building Professionals Directory: <http://directory.greenbuilder.com>
Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
Green Real Estate: <http://www.greenbuilder.com/realestate/>
Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
Books/videos/software: <http://bookstore.greenbuilder.com/>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: Regex help - expression to identify spam

Robert K Coffman Jr. -Info From Data Corp.
One of the nice things about upgrading ASSP is that backing out of an
upgrade is extremely simple.

- Bob Coffman



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Regex help - expression to identify spam

Micheal Espinola Jr
In reply to this post by Micheal Espinola Jr
A)  I can't recall which was the first release version to implement
SPF, but you could find hat out from the Change log.  I have been
using ASSP v1.1.2 beta 1 since its release and have found it to be
very stable with the later versions of Perl.  I highly recommend it
(for the value-added features) - as have many others.

B)  I think you would be better served using the Spam Bomb regex for
text matching such things.  I use it for the following regex matches:

\nsubject: ?re.? ?\[\d*\]
account could be suspended
account info verification
account information verification
<yourcompanyname> antivirus
<yourcompanyname>support team
update and verify your information
update team
update you.? account information
will be deactivated
will result in account suspension
from: .?(admin|department|mail|office|post)@(cia|fbi)\.gov

C) It's possible with the right Perl code, but I don't believe it's
possible with the way the code is currently written.

Again, I highly recommend the upgrade.  HTH.


On 1/15/06, [hidden email] <[hidden email]> wrote:

>
> Thanks for the reply.
>
> A) Which (stable) version has SPF?  I've been using 1.1.0 with no
> trouble for a long time now, and have been going by the "ain't broke,
> don't fix it" rule.
>
> B) I guess I should have used some other examples that I'd like to
> get rid of, like the plethora of spam about micro-cap and smallcap
> stocks, etc.  It's not just the ebay and pp stuff....   I'd still
> like to know how to properly add phrases to the regex.
>
> C) Your reply did answer my second email regarding 'tuning' the SPF
> filtering to only apply to certain domains to some extent - but is
> there a way to set it up so that ONLY the domains I choose are
> subject to SPF, and the rest aren't?  Or is it the other way around,
> where all domains are subject to SPF *except* the ones I choose?
>
> Hmmm.. Guess it's time to pull out the test machine and try an upgrade...
>
>
> At 2:56 PM -0500 1/15/06, Micheal Espinola Jr wrote:
> >There is a much easier solution for this type of issue:
> >
> >1.  Enable SPF Validation.
> >2.  Add Ebay, PayPal, etc, addresses to your noProcessing regex.
> >
> >Ebay and PayPal use SPF records, so you can trust this.  Anything that
> >doesn't really come from their servers will fail SPF validation, and
> >get flagged as spam - to be tagged or deleted at your option.
> >
> >By adding the addresses to your noProcessing regex, you can be sure
> >that none of the message contents pollute your Baysian word corpuses.
> >
> >On 1/15/06, [hidden email] <[hidden email]> wrote:
> >>  Hi folks,
> >>
> >>  I need to add some regex to my "expression to identify spam" to
> >>  eliminate the worst of the paypal/ebay phishing attempts.  Too many
> >>  real PP/ebay emails were getting rejected, so I had to put those
> >>  domain names in the whitelisted domains in order to keep my users
> >>  from mutiny.
> >>
> >>  I'm not very good at regex...
> >>
> >>  My current regex for that is
> >>
> >>
> >>http://[\w\.]+@|\w<[a-z0-9]+[abcdfghjklmnpqrstuvwxyz0-9]{4}[a-z0-9]*>|subject:
> >>  [^\n]*     \S
> >>
> >>  (I don't remember where that came from; possibly this list)
> >>
> >>  and I need to add some stuff like:
> >  >
> >  >        PayPal Account Suspension Notice
> >  >        eBay account suspension
> >  >        Notification of Limited Account
> >  >
> >  > etc.
> >  >
> >  > Thanks for any assistance.
> >  >
>
> --
> Bill Christensen
> <http://greenbuilder.com/contact/>
>
> Green Building Professionals Directory: <http://directory.greenbuilder.com>
> Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
> Green Real Estate: <http://www.greenbuilder.com/realestate/>
> Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
> Books/videos/software: <http://bookstore.greenbuilder.com/>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

FW: I can't use the email interface, I've been working on this for somes hours now, need help !

MaxF
In reply to this post by MaxF

So thre's no body here that had any problems like this or may have an idea about what could be my problem ?

Thank you again,

Maxime Frenette

-----Original Message-----
From: Maxime Frenette
Sent: 13 janvier, 2006 20:21
To: [hidden email]
Subject: I can't use the email interface, I've been working on this for
somes hours now, need help !



Hi all,

I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.

I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.

If you need anymore information, let me known, thank you !


Maxime Frenette




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: FW: I can't use the email interface, I've been working on this for somes hours now, need help !

Micheal Espinola Jr
Have you verified that your "localDomains" is configured properly?
You have created the appropriate bogus domain for email report
addresses?  Have you verified that those email report addresses have
been configured properly under the Email Interface settings?

On 1/17/06, Maxime Frenette <[hidden email]> wrote:

>
> So thre's no body here that had any problems like this or may have an idea about what could be my problem ?
>
> Thank you again,
>
> Maxime Frenette
>
> -----Original Message-----
> From: Maxime Frenette
> Sent: 13 janvier, 2006 20:21
> To: [hidden email]
> Subject: I can't use the email interface, I've been working on this for
> somes hours now, need help !
>
>
>
> Hi all,
>
> I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.
>
> I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.
>
> If you need anymore information, let me known, thank you !
>
>
> Maxime Frenette
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: FW: I can't use the email interface, I've been working on this for somes hours now, need help !

MaxF
In reply to this post by MaxF
I added this bogus domain in the relay section where they ask for local domains, so I have mydomain.com|asspnospam.org

In the email interface configuration I have [hidden email], [hidden email], etc...

I only have to do theses settings right ? The email interface is enable so it should work ?




-----Original Message-----
From: [hidden email]
[mailto:[hidden email]]On Behalf Of Micheal
Espinola Jr
Sent: 17 janvier, 2006 12:43
To: [hidden email]
Subject: Re: [Assp-user] FW: I can't use the email interface, I've been
working on this for somes hours now, need help !


Have you verified that your "localDomains" is configured properly?
You have created the appropriate bogus domain for email report
addresses?  Have you verified that those email report addresses have
been configured properly under the Email Interface settings?

On 1/17/06, Maxime Frenette <[hidden email]> wrote:

>
> So thre's no body here that had any problems like this or may have an idea about what could be my problem ?
>
> Thank you again,
>
> Maxime Frenette
>
> -----Original Message-----
> From: Maxime Frenette
> Sent: 13 janvier, 2006 20:21
> To: [hidden email]
> Subject: I can't use the email interface, I've been working on this for
> somes hours now, need help !
>
>
>
> Hi all,
>
> I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.
>
> I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.
>
> If you need anymore information, let me known, thank you !
>
>
> Maxime Frenette
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: FW: I can't use the email interface, I've been working on this for somes hours now, need help !

Micheal Espinola Jr
No, that's not right.  You should only have the email names
(assp-spam, assp-notspam, etc) specified.  Do not include the domain
name (@asspnospam.org) in the email interface configuration.

On 1/17/06, Maxime Frenette <[hidden email]> wrote:

> I added this bogus domain in the relay section where they ask for local domains, so I have mydomain.com|asspnospam.org
>
> In the email interface configuration I have [hidden email], [hidden email], etc...
>
> I only have to do theses settings right ? The email interface is enable so it should work ?
>
>
>
>
> -----Original Message-----
> From: [hidden email]
> [mailto:[hidden email]]On Behalf Of Micheal
> Espinola Jr
> Sent: 17 janvier, 2006 12:43
> To: [hidden email]
> Subject: Re: [Assp-user] FW: I can't use the email interface, I've been
> working on this for somes hours now, need help !
>
>
> Have you verified that your "localDomains" is configured properly?
> You have created the appropriate bogus domain for email report
> addresses?  Have you verified that those email report addresses have
> been configured properly under the Email Interface settings?
>
> On 1/17/06, Maxime Frenette <[hidden email]> wrote:
> >
> > So thre's no body here that had any problems like this or may have an idea about what could be my problem ?
> >
> > Thank you again,
> >
> > Maxime Frenette
> >
> > -----Original Message-----
> > From: Maxime Frenette
> > Sent: 13 janvier, 2006 20:21
> > To: [hidden email]
> > Subject: I can't use the email interface, I've been working on this for
> > somes hours now, need help !
> >
> >
> >
> > Hi all,
> >
> > I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.
> >
> > I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.
> >
> > If you need anymore information, let me known, thank you !
> >
> >
> > Maxime Frenette
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> > _______________________________________________
> > Assp-user mailing list
> > [hidden email]
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
>
>
> --
> ME2
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

RE: FW: I can't use the email interface, I've been working on this for somes hours now, need help !

MaxF
In reply to this post by MaxF
Ok, the first time I tested thoses e-mails, I had only the assp-spam , assp-notspam, but thoses e-mails was added in Active directory in a contact... I had a reply from another user who said to me that he had the same problem when theses adresses was added anywhere in the active directory, so I will try again with only the email names.

Thank you !

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]]On Behalf Of Micheal
Espinola Jr
Sent: 18 janvier, 2006 07:15
To: [hidden email]
Subject: Re: [Assp-user] FW: I can't use the email interface, I've been
working on this for somes hours now, need help !


No, that's not right.  You should only have the email names
(assp-spam, assp-notspam, etc) specified.  Do not include the domain
name (@asspnospam.org) in the email interface configuration.

On 1/17/06, Maxime Frenette <[hidden email]> wrote:

> I added this bogus domain in the relay section where they ask for local domains, so I have mydomain.com|asspnospam.org
>
> In the email interface configuration I have [hidden email], [hidden email], etc...
>
> I only have to do theses settings right ? The email interface is enable so it should work ?
>
>
>
>
> -----Original Message-----
> From: [hidden email]
> [mailto:[hidden email]]On Behalf Of Micheal
> Espinola Jr
> Sent: 17 janvier, 2006 12:43
> To: [hidden email]
> Subject: Re: [Assp-user] FW: I can't use the email interface, I've been
> working on this for somes hours now, need help !
>
>
> Have you verified that your "localDomains" is configured properly?
> You have created the appropriate bogus domain for email report
> addresses?  Have you verified that those email report addresses have
> been configured properly under the Email Interface settings?
>
> On 1/17/06, Maxime Frenette <[hidden email]> wrote:
> >
> > So thre's no body here that had any problems like this or may have an idea about what could be my problem ?
> >
> > Thank you again,
> >
> > Maxime Frenette
> >
> > -----Original Message-----
> > From: Maxime Frenette
> > Sent: 13 janvier, 2006 20:21
> > To: [hidden email]
> > Subject: I can't use the email interface, I've been working on this for
> > somes hours now, need help !
> >
> >
> >
> > Hi all,
> >
> > I really need your help on this, I did a new installation of ASSP 1.1.2b1 and I'm not able to make use of the email interface, it's looks like ASSP don't see the email "magic word" and try to send it to external and for sure I receive a undelivrable receipt... I checked in the mailog and I see the e-mail passing trought the assp, but it's not reconigsed.
> >
> > I'm using a relay configuration for outgoing email, the fake local domain is also added in my configuration in the relaying section of ASSP. I tryed many way to get this thing working fine, but it's seem that's nothing working for now.
> >
> > If you need anymore information, let me known, thank you !
> >
> >
> > Maxime Frenette
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> > _______________________________________________
> > Assp-user mailing list
> > [hidden email]
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
>
>
> --
> ME2
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> <a href="http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>


--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Regex help - expression to identify spam

Bill Christensen
In reply to this post by Micheal Espinola Jr
At 11:46 AM -0500 1/17/06, Micheal Espinola Jr wrote:

>B)  I think you would be better served using the Spam Bomb regex for
>text matching such things.  I use it for the following regex matches:
>
>\nsubject: ?re.? ?\[\d*\]
>account could be suspended
>account info verification
>account information verification
><yourcompanyname> antivirus
><yourcompanyname>support team
>update and verify your information
>update team
>update you.? account information
>will be deactivated
>will result in account suspension
>from: .?(admin|department|mail|office|post)@(cia|fbi)\.gov


Do those get entered on one line, separated by pipe | or as above?


--
Bill Christensen
<http://greenbuilder.com/contact/>

Green Building Professionals Directory: <http://directory.greenbuilder.com>
Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
Green Real Estate: <http://www.greenbuilder.com/realestate/>
Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
Books/videos/software: <http://bookstore.greenbuilder.com/>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Regex help - expression to identify spam

Micheal Espinola Jr
In reply to this post by Micheal Espinola Jr
On 1/18/06, [hidden email] <[hidden email]> wrote:
>
> Do those get entered on one line, separated by pipe | or as above?

That depends on how you have ASSP configured.  I have my bombRe
pointing to a file, so I can manage each specific regex on an
individual line.  I do that in every place that I can.  I find it
makes administration and change-management much easier.

If you wanted to use one single line, just be sure to place a pipe (|)
in between each line, and be sure *not* to have a trailing pipe at the
end.

--
ME2


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
<a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user