Fritz Borgstedt wrote: > The text "has blacklisted domain" is only in one place. And if the > text is logged then *all* actions are done. > Please give an example of a working domain.
The following includes content from my blackListedDomains and two different examples of spam (headers and corresponding maillog entries). The avon.com spam is what I believe to be a sub-domain/PB issue. The worldsecuritynetwork.net is an example of a strict domain match that behaves normally (is "working"). blackListedDomains=file:lists/blackListedDomains.txt: ----- avon.com# Avon newsletter worldsecuritynetwork.net# World Security Network Foundation ----- [avon.com sub-domain] user's spam message header: ----- X-Assp-Delay: delayed for 2h 1m 54s; 4 Oct 2006 06:37:31 -0400 X-Assp-Spam-Prob: 1.00000 X-Assp-Envelope-From: [EMAIL PROTECTED] X-Assp-Spam: YES X-Assp-Spam-Reason: Has blacklisted domain X-Intended-For: [EMAIL PROTECTED] ----- [worldsecuritynetwork.net] user's spam message header: ----- X-Assp-Delay: delayed for 4h 3m 18s; 4 Oct 2006 00:40:13 -0400 X-Assp-PB-Score: 200 (BlacklistedDomain) X-Assp-Spam-Prob: 0.00000 X-Assp-Envelope-From: [EMAIL PROTECTED] X-Assp-Spam: YES X-Assp-Spam-Reason: Has blacklisted domain X-Intended-For: [EMAIL PROTECTED] ----- [avon.com sub-domain] ASSP maillog: ----- Oct-4-06 06:37:31 Connected: 206.165.246.79:26320 -> X.X.X.X:25 -> X.X.X.X:26 Oct-4-06 06:37:31 206.165.246.79 <[EMAIL PROTECTED]> whitelisting triplet: (206.165.246.0,[EMAIL PROTECTED],[EMAIL PROTECTED]) waited: 2h 1m 54s Oct-4-06 06:37:31 206.165.246.79 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] has blacklisted domain -> c:/assp/corpus/normal/spam/8395.eml Oct-4-06 06:37:31 206.165.246.79 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] deleting spamming whitelisted tuplet: (206.165.246.0,shop.avon.com) age: 0s Oct-4-06 06:37:31 206.165.246.79 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] is disconnected ----- [worldsecuritynetwork.net] ASSP maillog: ----- Oct-4-06 00:40:13 Connected: 209.183.221.248:11517 -> X.X.X.X:25 -> X.X.X.X:26 Oct-4-06 00:40:13 209.183.221.248 <[EMAIL PROTECTED]> whitelisting triplet: (209.183.221.0,[EMAIL PROTECTED],[EMAIL PROTECTED]) waited: 4h 3m 18s Oct-4-06 00:40:13 PB: 209.183.221.0 score: 0+200 => 200 reason:209.183.221.248:BlacklistedDomain Oct-4-06 00:40:13 209.183.221.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] has blacklisted domain -> c:/assp/corpus/normal/spam/16928.eml Oct-4-06 00:40:13 209.183.221.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] deleting spamming whitelisted tuplet: (209.183.221.0,worldsecuritynetwork.net) age: 0s Oct-4-06 00:40:13 209.183.221.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] is disconnected Oct-4-06 00:40:39 Connected: 216.33.97.83:5831 -> X.X.X.X:25 -> X.X.X.X:26 ----- ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
