RedRe

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
30 messages Options
12
Reply | Threaded
Open this post in threaded view
|

RedRe

Milan Trenka

Hello Fritz

 

With (37) it is the same. RedRE is not working like it should.

 

Outgoing:

Aug-20-07 01:38:36 mail-6716c13798 x.x.x.x <[hidden email]> to: [hidden email] recipient accepted unchecked: [hidden email]

Aug-20-07 01:38:37 [Local/White] mail-6716c13798 x.x.x.x <[hidden email]> to: [hidden email] local or whitelisted - (no bad attachments) test_37_1_  -> c:\assp/notspam/test_37_1_--1.eml

Aug-20-07 01:38:39 mail-6716c13798 x.x.x.x <[hidden email]> to: [hidden email] is disconnected

 

Aug-20-07 01:43:10 x.x.x.x <> authenticated

Aug-20-07 01:43:10 mail-6990c6215 x.x.x.x <[hidden email]> to: [hidden email] recipient accepted unchecked: [hidden email]

Aug-20-07 01:43:10 [Local/White] mail-6990c6215 x.x.x.x <[hidden email]> to: [hidden email] local or whitelisted - (no bad attachments) test_37_2_  -> c:\assp/notspam/test_37_2_--2.eml

 

Incoming

Aug-20-07 02:06:08 Connected: x.x.x.x:3263 -> x.x.x.x:25 -> x.x.x.x:2525

Aug-20-07 02:06:09 mail-8368c174 x.x.x.x <[hidden email]> to: info@ xxx.ch  Regex:Red 'autoreply'

Aug-20-07 02:06:13 [MessageLimit][low] mail-8368c174 x.x.x.x <[hidden email]> to: info@ xxx.ch spam determined to be safe, passing on to recipient test_37_7_

Aug-20-07 02:06:15 mail-8368c174 x.x.x.x <[hidden email]> to: info@ xxx.ch is disconnected

 

Regards Milan


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: RedRe

Fritz Borgstedt

>
>
>Aug-20-07 01:43:10 x.x.x.x <> authenticated
>
>Aug-20-07 01:43:10 mail-6990c6215 x.x.x.x <[hidden email]> to:
>[hidden email] recipient accepted unchecked: [hidden email]
>
>Aug-20-07 01:43:10 [Local/White] mail-6990c6215 x.x.x.x <[hidden email]>
>to: [hidden email] local or whitelisted - (no bad attachments)
>test_37_2_  -> c:\assp/notspam/test_37_2_--2.eml


I do not get it.

A "autoreply" authenticated?


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: RedRe

Fritz Borgstedt
In reply to this post by Milan Trenka

>With (37) it is the same. RedRE is not working like it should.

Next stop: 38


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

spamHaters

Graziano-3
Hello

anyone can show me an example of usage of  spamHaters (in what case it
could be useful)

testing (38)


Thanks
Graziano

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: spamHaters

Graziano-3
ok I have understood ) , please ignore this message.

Graziano

> Hello
>
> anyone can show me an example of usage of  spamHaters (in what case it
> could be useful)
>
> testing (38)
>
>
> Thanks
> Graziano
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Assp-test mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>  

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: spamHaters

Fritz Borgstedt
In reply to this post by Graziano-3

>Hello
>
>anyone can show me an example of usage of  spamHaters (in what case
>it
>could be useful)

The main example is to set a complete domain to spamLover and some
adresses to spamHater.
How would you have accomplished that before introduction of spamHater?


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: spamHaters

JP van Melis

I'd like to know if the following assumptions on how "Spamhaters" works is
correct:

All rules that are in testmode are ignored for normal users, but are
effective for those that are meant for spamhaters. This means I have to
enable some rules I'm currently not using and put them in testmode.
If nothing is in testmode, there's no difference between normal users and
"spamhaters"...


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Testmode

JP van Melis
In reply to this post by Graziano-3
While you are editing the config, for instance, "Bayesian Options" there's
no indication if it is in testmode or not. I guess more users would find
this useful. The devs agree?


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: spamHaters

Fritz Borgstedt
In reply to this post by JP van Melis
[hidden email] schreibt:
>
>I'd like to know if the following assumptions on how "Spamhaters"
>works is
>correct:


spamHaters are exceptions to spamlovers and/or testmode.

testmode can be set for the various methods ASSP uses, additionally
testmode is internally used if blocking seems not appropriate.

there are two spamHater lists:

- Bayesian
- All


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Fritz Borgstedt
In reply to this post by JP van Melis

>While you are editing the config, for instance, "Bayesian Options"
>there's
>no indication if it is in testmode or not. I guess more users would
>find
>this useful. The devs agree?


The testmode options are together in one section (legacy), we have to
decide, concentrated or distributed to the sections. The same is true
for logging.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Daniel Miller
Fritz Borgstedt wrote:

>> While you are editing the config, for instance, "Bayesian Options"
>> there's
>> no indication if it is in testmode or not. I guess more users would
>> find
>> this useful. The devs agree?
>>    
>
>
> The testmode options are together in one section (legacy), we have to
> decide, concentrated or distributed to the sections. The same is true
> for logging.
>  
If my vote counts, please either keep them consolidated in those two
sections - or duplicate access to them from both the relevant scanner
area and the concentrated test/log section.  The current layout of
testmode/logging is very clear - "it ain't broke, so don't fix it!".

--
Daniel

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

JP van Melis
In reply to this post by Fritz Borgstedt
I don't want to be able to edit testmode, only an indication if it is in
testmode as additional info.


-----Oorspronkelijk bericht-----
Van: [hidden email]
[mailto:[hidden email]] Namens Fritz Borgstedt
Verzonden: maandag 20 augustus 2007 10:58
Aan: [hidden email]
Onderwerp: Re: [Assp-test] Testmode


>While you are editing the config, for instance, "Bayesian Options"
>there's
>no indication if it is in testmode or not. I guess more users would
>find
>this useful. The devs agree?


The testmode options are together in one section (legacy), we have to
decide, concentrated or distributed to the sections. The same is true
for logging.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Header info

JP van Melis
In reply to this post by Daniel Miller
AFAIK the header info of the incoming mail server is not used.
This info could be faked by a spammer.
Couldn't the header-info be used if this server is on a so-called "trusted
list"?


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Header info

Ulrik Løye
The header is used by some tests.

Mvh.
Ulrik Løye
 

> -----Oprindelig meddelelse-----
> Fra: [hidden email]
> [mailto:[hidden email]] På vegne af
> JP van Melis
> Sendt: 20. august 2007 11:39
> Til: [hidden email]
> Emne: [Assp-test] Header info
>
> AFAIK the header info of the incoming mail server is not used.
> This info could be faked by a spammer.
> Couldn't the header-info be used if this server is on a
> so-called "trusted list"?
>
>
> --------------------------------------------------------------
> -----------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and
> a browser.
> Download your FREE copy of Splunk now >>  
> http://get.splunk.com/ _______________________________________________
> Assp-test mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Kevin-158
In reply to this post by Daniel Miller
Daniel L. Miller wrote:

> Fritz Borgstedt wrote:
>>> While you are editing the config, for instance, "Bayesian Options"
>>> there's
>>> no indication if it is in testmode or not. I guess more users would
>>> find
>>> this useful. The devs agree?
>>>    
>>
>> The testmode options are together in one section (legacy), we have to
>> decide, concentrated or distributed to the sections. The same is true
>> for logging.
>>  
> If my vote counts, please either keep them consolidated in those two
> sections - or duplicate access to them from both the relevant scanner
> area and the concentrated test/log section.  The current layout of
> testmode/logging is very clear - "it ain't broke, so don't fix it!".
>

I concur. Keeping the TestMode settings in their own section is a good
idea. Having to search through the interface checking each tests section
is a pain for users, simplicity is the best thing here i believe.

The way the code is written i don't believe it allows for us to put the
TestMode in each tests section and also in a global TestMode section,
that could also be confusing to some people.

Kevin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

JP van Melis
As I said already; I don't want to be able to edit "testmode". I just want
to see that an option I'm currently looking at is in testmode or not. Keep
the settings where they are, just some extra info.

JP

-----Oorspronkelijk bericht-----
Van: [hidden email]
[mailto:[hidden email]] Namens Kevin
Verzonden: dinsdag 21 augustus 2007 1:28
Aan: [hidden email]
Onderwerp: Re: [Assp-test] Testmode

Daniel L. Miller wrote:

> Fritz Borgstedt wrote:
>>> While you are editing the config, for instance, "Bayesian Options"
>>> there's
>>> no indication if it is in testmode or not. I guess more users would
>>> find
>>> this useful. The devs agree?
>>>    
>>
>> The testmode options are together in one section (legacy), we have to
>> decide, concentrated or distributed to the sections. The same is true
>> for logging.
>>  
> If my vote counts, please either keep them consolidated in those two
> sections - or duplicate access to them from both the relevant scanner
> area and the concentrated test/log section.  The current layout of
> testmode/logging is very clear - "it ain't broke, so don't fix it!".
>

I concur. Keeping the TestMode settings in their own section is a good
idea. Having to search through the interface checking each tests section
is a pain for users, simplicity is the best thing here i believe.

The way the code is written i don't believe it allows for us to put the
TestMode in each tests section and also in a global TestMode section,
that could also be confusing to some people.

Kevin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Hill, Brett
So basically, some sort of greyed out check box (with or without a check
depending on the config) in each section?

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of JP van
Melis
Sent: Tuesday, August 21, 2007 4:06 AM
To: [hidden email]
Subject: Re: [Assp-test] Testmode

As I said already; I don't want to be able to edit "testmode". I just
want to see that an option I'm currently looking at is in testmode or
not. Keep the settings where they are, just some extra info.

JP


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Fritz Borgstedt


>As I said already; I don't want to be able to edit "testmode". I just
>want to see that an option I'm currently looking at is in testmode or
>not. Keep the settings where they are, just some extra info.

Please contribute something. Write it, or find someone to write it.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

JP van Melis
>  Please contribute something. Write it, or find someone to write it.
??
Hey, I'm merely suggesting something that could be seen as an improvement.
I consider that contributing.
Apparently, you (or even most) don't see this as an improvement.
If so, just say so, but don't come with arguments about editing in one
place, as that wasn't what I meant. I was merely reacting on that.

If I'm the only one that sees an advantage in this extra info.. Well...
Leave it.
Don't become offending...

-----Oorspronkelijk bericht-----
Van: [hidden email]
[mailto:[hidden email]] Namens Fritz Borgstedt
Verzonden: dinsdag 21 augustus 2007 13:37
Aan: [hidden email]
Onderwerp: Re: [Assp-test] Testmode



>As I said already; I don't want to be able to edit "testmode". I just
>want to see that an option I'm currently looking at is in testmode or
>not. Keep the settings where they are, just some extra info.

Please contribute something. Write it, or find someone to write it.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Testmode

Fritz Borgstedt

>If so, just say so, but don't come with arguments about editing in one
>place, as that wasn't what I meant. I was merely reacting on that.

Arguments?

I answered correctly that the way we can do this, is by distributing
testmodes.
Kevin added that the way the code is written, there is no easy way to
do it otherwise.
You ignored that and got offensive by suggesting that I was not
capable of understanding your nice suggestion.

And now comes the real question:

Why is asking you to write or find someone to write it , offensive?


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
12