Doug, >25-01-2015 18:16:35 [Worker_1] <matchSL - supp...@drdos.info - noScan >25-01-2015 18:16:35 [Worker_1] <matchIP - 10.10.10.250 - noScanIP >25-01-2015 18:16:35 [Worker_1] <matchSL - supp...@drdos.info - noScan >25-01-2015 18:16:35 [Worker_1] <matchIP - 10.10.10.250 - noScanIP
this looks like I expect it. Please check the IP-match for '10.10.10.250 - noScanIP' using the 'manage IP-address' dialog . - start the GUI analyzer (top menu) - at the top of the analyzer dialog you'll see 'To analyze/modify individual IP addresses click here. ' - click on 'here' - a new window will open - write '10.10.10.250' in the address field and click anywhere right beside the field - the dialog will auto reload and print out the results you should see 'matches in noScanIP with 10.10.10.250/32' as a result If you don't get this result - please zip the definition file and the 'optRE' file and send it to me. Thomas Von: Doug Lytle <supp...@drdos.info> An: ASSP development mailing list <assp-test@lists.sourceforge.net> Datum: 26.01.2015 00:41 Betreff: Re: [Assp-test] ClamAV - ASSP version 2.4.4(15004) Thomas Eckardt wrote: > Doug, > > there is no code in the current assp.pl that calls 'matchSL' with the > parameter 'noScanIP'. This was the case in some versions before assp 2.2.2 > build 12218. Thomas, I created a new Virtual Machine (Copy of the original ASSP), I deleted the contents of the /assp folder, leaving only the: spam notspam And reloaded. I now get the below debug: >25-01-2015 18:16:35 [Worker_1] <Maillog >25-01-2015 18:16:35 [Worker_1] <bodyWrap >25-01-2015 18:16:35 [Worker_1] <bodyWrap >25-01-2015 18:16:35 [Worker_1] <getbody - done:1 maillength:8402 >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <CheckAttachments >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <BombOK >25-01-2015 18:16:35 [Worker_1] <matchSL - supp...@drdos.info - noBombScript >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <BombBlackOK >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <matchSL - supp...@drdos.info - noScan >25-01-2015 18:16:35 [Worker_1] <matchIP - 10.10.10.250 - noScanIP >25-01-2015 18:16:35 [Worker_1] <matchSL - supp...@drdos.info - noScan >25-01-2015 18:16:35 [Worker_1] <matchIP - 10.10.10.250 - noScanIP >25-01-2015 18:16:35 [Worker_1] <ClamAV >25-01-2015 18:16:35 [Worker_1] <ClamScanPing - maxwait 10 seconds >25-01-2015 18:16:35 [Worker_1] <ClamScanScan - maxwait 15 seconds >25-01-2015 18:16:35 m1-27795-02791 [Worker_1] [TLS-out] 10.10.10.250 <supp...@drdos.info> to: supp...@drdos.info ClamAV: scanned 8400 bytes in local message - OK >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh >25-01-2015 18:16:35 [Worker_1] <MsgScoreTooHigh Doug -- Ben Franklin quote: "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety." ------------------------------------------------------------------------------ New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
