[mdlug] ASSP update...

[Carl T. Miller]

Michael ORourke wrote:
> Well, I finally setup ASSP on one of the email servers I support.  I have
> to
> say, it was very easy to install.  Configuration, now that's a different
> issue altogether.  There must be about 400 different settings that can be
> customized.  I followed the HOW-TO from the Wiki site and I believe I have
> it configured correctly and it is in *learning* mode (aka testonly mode).
> So I'm gonna let it run for a few days then try to run it live and see
> what
> happens.  Anyone out there running ASSP?  I think I remember a few people
> jump in on my last post, regarding anti-spam tools, about 4 months ago.

Yes, I've been running it on five domains for over a year now.
I'd agree with you about the configuration.  I had to re-read the
documentation every day for a week before I even thought I was
willing to give it a try.

My advice would be to start simply and add features one at a time
as needed.  When starting a new installation, I don't start it in
training mode, but I do sit there for at least three hours watching
every message come in.  If something is misidentified, I update it
immediately.  I'll also ask people to send a quick message to everyone
in their contact lists, since that puts those people in a white list.
After about three hours, it will be about 99% trained and I check in
every hour for the rest of the day.  I'll then check in several times
a day for the next week or two until I rarely get errors.  After two
or three weeks I'll add SPF protection, and when I'm sure that's good
I'll add the RBL checks.  This causes a minimum of disruption for
users, and they will immediately see the difference.

c