This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[5.010] Spam protection

Well, it looks like the pop3 proxy is starting to behave.. At least I can get my messages.
But there still seems to be some wierdness with the spam protection. I have it set at the following:
PASS 02
QUARANTINE 03

I check my mail and nothing gets tagged as spam.. Here some entries from the content manager logs:

2004:05:31-10:26:02 (none) spamd[5211]: checking message for (unknown):65534.
2004:05:31-10:26:02 (none) spamd[5211]: identified spam (9.1/5.0) for (unknown):65534 in 0.3 seconds, 3490 bytes.
2004:05:31-10:26:02 (none) weed:antispam[5209]: protocol: pop3 score: 9.1

This should get tagged as spam but doesnt. And when I check the headers in the message, there are no x-spam-score headers in there now..
It looks like it's checking the message ok, but doesn't do anything with it..
The AntiVirus works good though..

This thread was automatically locked due to age.

Parents

0 Vukasin over 21 years ago

I know that this may sound weird, but did you reboot after the up2date?
Cancel
Vote Up 0 Vote Down

Cancel
0 Msan over 21 years ago in reply to Vukasin

[ QUOTE ]
I know that this may sound weird, but did you reboot after the up2date?

[/ QUOTE ]

Nope, but I will give that a try right now..

OK, rebooted and SPAM protection is kicking in.. BUT now I am getting spammed by the Spam protection.. I get a message from the "Scanning subsystem" saying content blocked and why.. But one for every spam?? Thats just as bad as getting the spam in the first place..
Is there any way to turn this off or just have one summary email?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vukasin over 21 years ago in reply to Msan

well this is to make sure that you know that there is a POTENTIAL spam coming in. if it is a false positive (that DOES happen) you are notified and can look it up in the proxy content manager. if you are annoyed by the notification you can add a rule to your email client to sort the mails to a different folder based on the subject.
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to Vukasin

Where are the mails quarantined? In the Proxy Content Manager?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vukasin over 21 years ago in reply to THoehne

yes
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to Vukasin

Why isn't the senders adress shown in the notification mail for the recipient? This could improve the avoidance of false spam detection...

And why does the preview of the mail in the Proxy Content Manager load the original HTML content of the mail??? That's a security leak!

The average spam score reporting doesn't work either!
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to THoehne

Wrote to the Support.
They said it's a known bug...
Waiting for next Update!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 THoehne over 21 years ago in reply to THoehne

Wrote to the Support.
They said it's a known bug...
Waiting for next Update!
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 dayne1432 over 21 years ago in reply to THoehne

I have the Pop3 proxy spam settings threshold at:

Pass: 1

Quarantine : 2

And stuff is still getting through! Does V4 have pop3 proxy spam and virus filtering? If so, is there a way to downgrade your license to V4. I am tired of waiting for patches to software that is put out to the market and sold when it only partially works!

You guys should have done a private beta and then sold licenses once ALL the bugs were fixed.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to dayne1432

[ QUOTE ]
I have the Pop3 proxy spam settings threshold at:

Pass: 1

Quarantine : 2

And stuff is still getting through! Does V4 have pop3 proxy spam and virus filtering? If so, is there a way to downgrade your license to V4. I am tired of waiting for patches to software that is put out to the market and sold when it only partially works!

You guys should have done a private beta and then sold licenses once ALL the bugs were fixed.

[/ QUOTE ]
v4 has spam and a/v..however it is no longer possible to take v5 keys and use them in v4. ASL recently changed the keys to make v5 keys incompatible with v4.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 dayne1432 over 21 years ago in reply to William Warren

ok so i need to wait for an update. When is the update coming that will fix the pop3 proxy entirely?

Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 dayne1432 over 21 years ago in reply to dayne1432

ok i have downloaded 5.013 and 5.014 and stuff is still getting in. You guys need to beef up you pop3 spam filter. Some companies have their email servers hosted. I don't know why you guys didn't put the filtering capabilities of the smtp proxy on the pop3 proxy. [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to William Warren

Sorry to correct you, but the v5 key DOES work with the v4! You just have to extract the key from the license-file and paste it into the v4 webinterface! Tested it myself!

And what is ment with "keep coming through"? Perhaps this should be explaint, since my SPAM filter works...
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to dayne1432

I have found another prob...

I just checked the Content Filter Reporting and it says that my POP3 average spam score is 15.2 !! But no mails in the Proxy Content Manager!

Yesterday it was 11.3 for 172 processed mails! That can't be right!!
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to THoehne

[ QUOTE ]
Sorry to correct you, but the v5 key DOES work with the v4! You just have to extract the key from the license-file and paste it into the v4 webinterface! Tested it myself!

And what is ment with "keep coming through"? Perhaps this should be explaint, since my SPAM filter works...

[/ QUOTE ]
try it with a new conversion..trust me it doesn't..i ahve tried many times..had to talk to the developers themselves..earlier conversions might but recent ones will not.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel