ASSP Deluxe for cPanel

[Radio_Head]

I have been a loyal user of mailscanner and spamassassin for a few years now. I love it very much as an antispam tool which my servers are getting constantly. Then I found out about ASSP. From what I read about ASSP, it seems to not use the method applied by spamassassin like calculating the header or something. That's why it is so much faster than SA. Therefore, it is relying most of it's spamdetection method on bayes. Bayes is effective to certain extent. I think it is also a very good antispam method but there are reports that it can't detect those nasty graphics stock spam.

Don't get me wrong. I think ASSP seems to be a good idea especially it's low resource usage and less tinkering on MTA and server settings. So, I will give it a try soon.

My question :

1) does the howto in radio_head's site exclusively only for paying customers? Is there a general howto to install ASSP?

2) can ASSP detect and remove those graphics stock spams?

3) is there an interface in ASSP similar to mailwatch for mailscanner? I love this mailwatch so much I really hate to part with it.

1) the how to permits to install "assp" togheter with "assp deluxe for cpanel" .
On my web site there is no general "how to install assp". However on my "How to" I
describe what exaclty do my php scripts. So if you can realize scripts which does the same
work, you can use this "How To" .

2) surely , but depends on how you configure assp. Remember that
assp it's not only a bayesian filter !

3) if you go to http://www.grscripts.com you can see several screenshots to compare.


Bye

[abubin]

1) the how to permits to install "assp" togheter with "assp deluxe for cpanel" .
On my web site there is no general "how to install assp". However on my "How to" I
describe what exaclty do my php scripts. So if you can realize scripts which does the same
work, you can use this "How To" .

2) surely , but depends on how you configure assp. Remember that
assp it's not only a bayesian filter !

3) if you go to http://www.grscripts.com you can see several screenshots to compare.


Bye

1) ok, should be able to figure out your howto. It's a nicely done guide.

2) How then are those graphics stocks spam detected by other elements of assp?

3) from the screenshot in your website, I don't see anything similar to mailwatch. How easy is it to look for a particular false positive email and then release it to respective users?

[Radio_Head]

1) ok, should be able to figure out your howto. It's a nicely done guide.

2) How then are those graphics stocks spam detected by other elements of assp?

3) from the screenshot in your website, I don't see anything similar to mailwatch. How easy is it to look for a particular false positive email and then release it to respective users?

1) thank you

2) How then are those graphics stocks spam detected by other elements of assp?
I suggest you to subscribe to assp mailing list or to read the assp wiki/docs
I provide support to "assp deluxe for cpanel" not for "how to configure and use assp" .
My fast question is that if the bayesian fails to detect graphics stocks spam , assp
has other 20 ? ( I never counted all of them !) tools to block that email . PRT , RBL , HELO , greylisting , much much others .. and 1.2.7 is near the angle ...

3) are you talking about this http://mailwatch.sourceforge.net/doku.php right ?
If yes , those mailwatch reports are avaiable only on WHM
My screenshots shows logs are for CLIENTS avaialble on your cpanel skin.
These logs are avaialble per domain and per subdomain too.
Consider also that mailwatch creates a lot of reports and it use cpu resources.
My logs simply analyze the assp txt log , and creates the report on the fly , dinamically
in less than 1 seconds , only when required, on a slow old server.
The Cpanel client analyze the rejected email , then he can analyze the ip address , and he can
whitelist it if required . All the work is done via Cpanel from the client , and not via WHM from YOU.
From your point of view (administrator) assp has an Info Stat page which is very detailed .
It doesn't have those mailwatch graphics linke this http://mailwatch.sourceforge.net/lib...il-by-date.png for now , but the assp Info Stat is currently eonough
useful to understand how is working assp on your server.


Bye

[4u123]

I'ill consider it if I'll receive other requests like this. Consider that once assp running and configured there is NO need to open the the assp web interface daily.

We use RVskin and I enquired about integrating your script into their skins but they said about your script...

Its cPanel interface integration is not comform to cPanel standard. All addon icon should be listed in cell folder and should not edit /usr/local/cpanel/base/frontend/x/mail/email.html manually. I see on the instruction chattr files is required. This will break other things. It should build as WHM Addon Module. In a near future especially after cPanel 11, he will figure it out and distribute as addon module. That time, you simply go to RVSkin Manager/Integration/WHM Addon Module.

[Radio_Head]

If you have a licensed ip please email me (the email on my site) and I try to work on this rvskin "problem" .

[abubin]

1) thank you

2) How then are those graphics stocks spam detected by other elements of assp?
I suggest you to subscribe to assp mailing list or to read the assp wiki/docs
I provide support to "assp deluxe for cpanel" not for "how to configure and use assp" .
My fast question is that if the bayesian fails to detect graphics stocks spam , assp
has other 20 ? ( I never counted all of them !) tools to block that email . PRT , RBL , HELO , greylisting , much much others .. and 1.2.7 is near the angle ...

3) are you talking about this http://mailwatch.sourceforge.net/doku.php right ?
If yes , those mailwatch reports are avaiable only on WHM
My screenshots shows logs are for CLIENTS avaialble on your cpanel skin.
These logs are avaialble per domain and per subdomain too.
Consider also that mailwatch creates a lot of reports and it use cpu resources.
My logs simply analyze the assp txt log , and creates the report on the fly , dinamically
in less than 1 seconds , only when required, on a slow old server.
The Cpanel client analyze the rejected email , then he can analyze the ip address , and he can
whitelist it if required . All the work is done via Cpanel from the client , and not via WHM from YOU.
From your point of view (administrator) assp has an Info Stat page which is very detailed .
It doesn't have those mailwatch graphics linke this http://mailwatch.sourceforge.net/lib...il-by-date.png for now , but the assp Info Stat is currently eonough
useful to understand how is working assp on your server.


Bye

2) so you are saying that you don't get those stocks spams currently? If yes then that would be good news and even better reason for me to try assp.

3) yes, that's the correct mailwatch I am talking about. I was asking how easy it is to release false positives in assp.

For eg, my user said he is expecting an email from abc@domain.com but have not receive anything yet. So, with mailwatch, I will be able to search for all mails from abc@domain.com. I found this mail which was detected as spam (I configured not to deliver spams). I just open up that mail and click on "release" to release that email to the user. User will be able to receive the email. I can even send this mail into bayes engine as ham (not spam).

Is this implemented in ASSP?

Anyway, since you are like expert in ASSP, it just seems easier to ask you than registering for ASSP's mailing list and receive all the emails that I don't need. I never like mailing list they just keep on sending mails that I don't need. Forum is a much more effective way to handle things.

Also, if I really am going to switch to ASSP, I will definitely get your script. Those customizations you did is good.

[Radio_Head]

For eg, my user said he is expecting an email from abc@domain.com but have not receive anything yet. So, with mailwatch, I will be able to search for all mails from abc@domain.com. I found this mail which was detected as spam (I configured not to deliver spams). I just open up that mail and click on "release" to release that email to the user. User will be able to receive the email. I can even send this mail into bayes engine as ham (not spam).

Is this implemented in ASSP?
>>>>>


I am working to add other powerful assp filters on cpanel web interface
and working on 1.2.7 integration .1.2.7 will be a big update . The only problem is the time because I am losing a lot time replying to questions via email/forum. For this reason I ask you to read assp docs wiki and mailing list. I hope you can understand.
If the problem can found a solution on assp web site or documentation I prefer to forward you there. However the question above is related to assp deluxe for cpanel.

If an assp user said he is expecting an email from abc@domain.com but have not receive anything yet he can ;

Open the control panel and search the email on the logs . He search the email on HIS control panel ; is not YOUR work from WHM . He don't need to contact you, he can solve the problem himself.

An example

Suppose the email was rejected because abc@domain.com was sending an email with no PTR record and the Cpanel client has the PTR filter enabled.
The client search the email abc@domain.com on PTR filter LOG and he finds that the email was rejected on 19 jan with ip address .. blah blah blah ..

At this point he can
1) EASY WAY . he can go on his control panel > Spam and Virus protection , analyze the PTR log filter and REPORT abc@domain.com (using the REPORT button) . In this way abc@domain.com will be no more blocked also if abc@domain.com is using invalid PTR.It will be whitelisted from assp.
2) the client can send an email to abc@domain.com . In this way the email abc@domain.com will be automatically whitelisted from assp (!) .
3) The client can send an email to assp-white@clientdomain.com and include the email abc@domain.com in the body of the message. In this way the email abc@domain.com will be automatically whitelisted rfom assp. This is a powerful assp feature called "EMAIL INTERFACE" .
4) as a last possibility the client can disable the PTR filter per domain and per subdomain.
5) Since sending email without PTR is not a good idea he could advice
abc@domain.com to add a ptr record to his domain.com


Same procedure if the email will be rejected for bayesian or other filters.
As can you see the client can whitelist or solve the problem himself without contacting you.

Regarding false positives . false positives could happen only with baeysian filter.
For example email rejected due to RBL or invalid HELO could not be considered false positive. These email are rejected because listed on RBL or using invalid HELOs i.e.-
If you don't want reject these email simply disable the filter using the control panel
per domain and per subdomain.


The bayesian filter is different. Sometime it could tag an email with [ spam ] or sometime it could reject the email . In this case we could have false positive.

Consider that

1) the assp bayesian filter will work better day after day because it learns from errors.
2) the client can report false positive using the ways explained on the example above
3) possibilities to REJECT a valid/important email are near to 0 (or 0) if you use my assp
settings. (I am talking to REJECT , no to tag an email with [ spam])
4) as a last possibility the client can disable the bayesian filter
per domain and per subdomain and he still has a lot of other filters .

All this is explained also on the control panel (on my web interface). The client knows very well how it works , simply reading the brief integrated help .


Bye

[4u123]

If you have a licensed ip please email me (the email on my site) and I try to work on this rvskin "problem" .

Hi,

Firstly I think your script is great. We would love to use ASSP on all our servers but Rvskin wont integrate your script unless it is written as an addon module. We didnt buy any licenses because we cant use your script in its current form.

[Radio_Head]

As of now it's not on plan . You have simply to add a link to /asspdeluxe/index.php nothing else.
Is it not possible with your rvskin theme ? Is all your rvskin encoded ?

[t9clkclnr]

Whoohoo!

Ok, here was my issues I ran into:

1. ensure, that your PTR records are set. Also, if you have other servers you send and receive email from, ensure those have PTR records or just disable this feature.

2. Also, if you are like me and connect to the server from an ISP that doesn't mask the HELO with theirs, then you should disable HELO lookups too!

This was a major problem for me, as many customers of mine travel, and connect from different places.

Also, I had to disabled exim on an alternate port, and just let ASSP listen on those ports.

Radio_Head, thank you for posting the assp.cfg file, as this would still be a project right now. In all actuality I was able to get a better grasp, on your software, then arbitrarily entering/copying your config via the web interface.

Once I knew exim and assp were running correctly, it allowed me time to tweak and massage the config for the server to ensure and fine tune it. Seems to be working really good and on a dual - dual core xeon server with 2 GIG ram, it's extremely fast with a very low imprint on the server.

I'm testing a single account on the server that gets tons of spam and so far so good. Seems to be getting less and less all the time (within last 24 hours).

I'm not exactly a noob here, but I'm not a pro either. The how to is nice, but could use some more explanations.

Thanks Radio_Head, your software so far seems solid.

[t9clkclnr]

Does the validation of email recipients interfere with sending email to:

assp-spam@mydomain.com?

I'm still getting bounces on this as:

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

does this address need to be placed in the assp_local_emails file?

You mentioned before that assp should handle this automagically. Any ideas of what i should look at?

[Radio_Head]

are you sending these email to assp-spam@mydomain.com using smtp mail.mydomain.com ? (it's required)

[t9clkclnr]

I'm sending this from the webmail interface for Horde on the same server.

Is there a way to perform this from the webmail installations on the server?

[RTCruiser]

Does the validation of email recipients interfere with sending email to:

assp-spam@mydomain.com?

I'm still getting bounces on this as:

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

does this address need to be placed in the assp_local_emails file?

You mentioned before that assp should handle this automagically. Any ideas of what i should look at?

Checking the obvious, but did you remember to actually create the assp-spam@yourdomain.com email account? This is given as an example in the ASSP control panel. You can change the email address that ASSP uses to receive spam reports. (As well as the email addresses for "not spam", whitelisting, redlisting, etc.)

[t9clkclnr]

According to Radio_head, you don't have to create the email address:

"Thank you, no problem.

Regarding your question , ASSP automatically processes them . It's the "Email Interface" feature.

Bye"

My post was #56, and Radio_head responded with a no, it was automatically handled. Which makes sense, otherwise the assp-spam email would need to be created for each and every account on the server. (which could be)

I'm sure from reading my post and his following it, you can now see why I would be even more confused with your response versus radio_head's response.

Maybe my original post was not clear, although after reading it 10 times, it seems clear... dont it?

Thank you for your input.