ASSP Deluxe for cPanel

[Radio_Head]

Radio_Head, you simply don't care about what you client, or your clients want, do you?

It's easier to lecture someone about who dumb they are, than listening to their needs. With any other solution out there, an end user can see which email addresses are whitelisted, which are black listed, and edit both lists with a easy to use interface. Why is it so difficult for you to even consider introducing something like this?

please read this again "First of all ASSP whitelist is shared and automatic and controlled by email interface. This makes ASSP different from other antispam solutions (automatic whitelist).".
I always get maximum consideration from all requests . But , how could you permit your users to manage a whitelist which is automatic and shared in a way different from email interface ?. If you tell me how, I will do it. If you want this you should first ask in ASSP mailing list dev a whitelist which is not shared. If it will be accepted then I will be more than happy to consider (as always) and accept to code sections to manage/edit whitelists.

[goodmove]

First of all ASSP whitelist is shared and automatic and controlled by email interface.

What does shared and automatic whitelist mean? How is it controlled by the email interface?

[goodmove]

they are on localdomains mailfoundry forwards all mails to our server

How does your external MX know which recipients it should accept or reject mail for if the localdomains, email accounts and aliases info reside on another (presumably, on a Cpanel) server?

[Radio_Head]

How does your external MX know which recipients it should accept or reject mail for if the localdomains, email accounts and aliases info reside on another (presumably, on a Cpanel) server?

If you have any account using a remote MX (for example google mx services), ASSP should know this . All remote mx should be placed on ASSP web interface > relaying > ISP/Secondary MX Servers /(ispip)
ASSP Deluxe for cpanel executes this operation automatically (using ex_localdomains.php which detects accounts using remote MX and place their ips in ispip). Regarding your question related to whitelists please read the ASSP wiki and documentation
SourceForge.net: assp

[Radio_Head]

ASSP Deluxe 3.7.4
- cex=custom@email.com is now accepted in ex_localdomains.php and find_abusers.php



Detailed changelog here > Changelog for ASSP Deluxe for cPanel



Useful links
Did you check latest recommended RBL lists ? Tweaking ASSP deluxe for cPanel
Are you using Unofficial clamd Signatures ? Tweaking ASSP deluxe for cPanel
ASSP Deluxe for cPanel checklist : assp deluxe for cpanel antispam checklist

[goodmove]

You should really be careful recommending RBLs (from link in your signature) that are guaranteed to result in legitimate emails gettiing lost, five-ten-sg.com and apews.org being the worst two offenders. bl.spamcop.net and sorbs.net regularly blocks hotmail and yahoo mail servers.

[Radio_Head]

You should really be careful recommending RBLs (from link in your signature) that are guaranteed to result in legitimate emails gettiing lost, five-ten-sg.com and apews.org being the worst two offenders. bl.spamcop.net and sorbs.net regularly blocks hotmail and yahoo mail servers.

The RBLs are recommended testing each week a block of about 1 thousand fresh spam ips. Currently these RBLs are producing the best results and are recommended. If you use ASSP scoring mode you know that the email will not be blocked for a single RBL check. Also, using Maximum Hits to 2, two RBL hits are required to score an email due to RBL (no to block the email) .
Also, you can use Maximum Hits to 3 which is safer against blocking good senders. However I will investigate what you reported with next RBL testing I will do next week.

[Radio_Head]

FAQs added recently

What is asspblock@ ? Is it possible to receive via email a list of blocked email ? here

Is it possible to run "spam assassin" along with ASSP ? here

Is it possible to skip antispam processing for specific user in the domain … not all the domain ? here

Why is ASSP blocking local senders ? . here

How to fix /etc/remotedomains and /etc/localdomains using ASSP Deluxe for cPanel. here

How to install or uninstall spf and domainkey for all your users using ASSP Deluxe for cPanel. here


.

[Radio_Head]

ASSP Deluxe 4.0.0

find_abusers.php updated to version 12.0
-- fixed "Email sent from Foreign Country"
-- fixed "Email sent by ISP"
-- various improvements

Scripts speed improvements, added support for 3rd and 4rd home locations

status.php : fixed an issue where ASSP was not restarting correctly .
ex_localdomains.php ; better server ip detection, various improvements.

Added 10 UNOFFICIAL CLAMD Signatures to signatures.php
Sanesecurity jurlbl.ndb (LOW false positives)
Sanesecurity phish.ndb (LOW false positives)
Sanesecurity sanesecurity.ftm (LOW false positives)
Sanesecurity winnow_malware.hdb (LOW false positives)
Sanesecurity winnow_malware_links.ndb (LOW false positives)

Sanesecurity INetMsg-SpamDomains-2w.ndb (MEDIUM false positives) ;
It contains the last 2 weeks of collected spam domains (2w)
Sanesecurity jurlbla.ndb (MEDIUM false positives)
Sanesecurity scamnailer.ndb (MEDIUM false positives)
Sanesecurity winnow.complex.patterns.ldb (MEDIUM false positives)
Sanesecurity winnow_phish_complete_url.ndb (MEDIUM false positives)

- new command sm=0 added to signatures.php
- new command sh=0 added to signatures.php

ASSP WHM 4.8.8

ASSP Frontend 5.8

Detailed changelog here > Changelog for ASSP Deluxe for cPanel



Useful links
Did you check latest recommended RBL lists ? Tweaking ASSP deluxe for cPanel
Are you using Unofficial clamd Signatures ? Tweaking ASSP deluxe for cPanel
ASSP Deluxe for cPanel checklist : assp deluxe for cpanel antispam checklist

[betoranaldi]

Is it possible to track down a local host relayer?

IFD is sending me messages about localhostrelays and there seems to be an excessive amount.

I am looking to track it down.

[Radio_Head]

these could help

http://www.grscripts.com/howtofaq.html#90
http://www.grscripts.com/howtofaq.html#56b

[betoranaldi]

these could help

ASSP Deluxe post installation steps ,FAQs and support.
ASSP Deluxe post installation steps ,FAQs and support.

Thanks, I will read through them now.

An example of what I am seeing in my logs is

2010-02-02 14:04:59 1NcO3X-0007Rp-HA <= notifications@yahoo.com H=localhost (host.domain.com) [127.0.0.1] P=esmtp S=5720 T="Best_Percocet_Adderall"
2010-02-02 14:04:59 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1NcO3X-0007Rp-HA
2010-02-02 14:04:59 1NcO3X-0007Rp-HA => |/usr/local/assp/deluxe/piping.php (spammaster@domain.com) <spammaster@domain.com> R=virtual_aliases_nostar T=virtual_address_pipe
2010-02-02 14:04:59 1NcO3X-0007Rp-HA Completed

[Radio_Head]

If after applying the articles above these email are still passing (especially this http://www.grscripts.com/howtofaq.html#90 with DoLocalSenderDomain and DoLocalSenderAddress enabled) please contact me at daniolo@gmail.com for support.

[Radio_Head]

ASSP Deluxe 4.0.1

assp-white@ user requests are now added to /whitelist using update_email.php (instead to wait rebuildspamdb.pl execution)



Detailed changelog here > Changelog for ASSP Deluxe for cPanel



Useful links
Did you check latest recommended RBL lists ? Tweaking ASSP deluxe for cPanel
Are you using Unofficial clamd Signatures ? Tweaking ASSP deluxe for cPanel
ASSP Deluxe for cPanel checklist : assp deluxe for cpanel antispam checklist

[Radio_Head]

ASSP Deluxe 4.0.3

- fixed clamd failures if a clamd unofficial signatures is not installed correctly
- fixed a mailware.com.br updating issue


Detailed changelog here > Changelog for ASSP Deluxe for cPanel


Useful links
Did you check latest recommended RBL lists ? Tweaking ASSP deluxe for cPanel
Are you using Unofficial clamd Signatures ? Tweaking ASSP deluxe for cPanel
ASSP Deluxe for cPanel checklist : assp deluxe for cpanel antispam checklist