Looks like IPs listed in the DNSBLcache are not getting fully blocked, instead they are continuing on until the actual DNSBL test is run.
Jan-14-08 13:32:54 Connected: 89.132.3.160:2000 -> 192.168.1.91:25 -> 192.168.1.91:125 Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] monitoring (89.132.3.160 has bad profile of 100, adding 20 ) Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 20, added 20 for Bad Profile Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] MX found (cache): dc.rr.com -> cdptpa-smtpin02.mail.rr.com Jan-14-08 13:33:00 id-5544c2185 [PTRinvalid][scoring] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] PTR invalid (cache): 89.132.3.160 -> adsl-598403a0.monradsl.monornet.hu Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 20, added PTRinvalid for PTR invalid (cache): 89.132.3.160 -> adsl-598403a0.monradsl.monornet.hu Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] PB: 20.0.0.0 TotalScore is PTRinvalid, added PTRinvalid for Jan-14-08 13:33:00 id-5544c2185 [DNSBL] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] SPAM FOUND (89.132.3.160 listed in zen.spamhaus.org, DNSBLcached at 08-01-14/13:32) Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 120, added 100 for DNSblacklisted in zen.spamhaus.org Jan-14-08 13:33:00 id-5544c2185 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] IP-Score: total for this IP is 200, added 100 for DNSBLcache Jan-14-08 13:33:00 id-5544c2185 [DNSBL] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] SPAM FOUND (DNSblacklisted in zen.spamhaus.org) -> c:\assp/spam/2185.eml Jan-14-08 13:33:00 Disconnected: 89.132.3.160 Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] monitoring (89.132.3.160 has extreme profile of 200, adding 40) Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 40, added 40 for Extreme Bad Profile Jan-14-08 13:33:42 id-5584c9356 [Extreme][monitoring] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] monitoring (totalscore for '89.132.3.160' is 200, surpassing extreme level of 150, last penalty was 'DNSBLcache') Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] MX found (cache): dc.rr.com -> cdptpa-smtpin02.mail.rr.com Jan-14-08 13:33:42 id-5584c9356 [PTRinvalid][scoring] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] PTR invalid (cache): 89.132.3.160 -> adsl-598403a0.monradsl.monornet.hu Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 40, added PTRinvalid for PTR invalid (cache): 89.132.3.160 -> adsl-598403a0.monradsl.monornet.hu Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] PB: 20.0.0.0 TotalScore is PTRinvalid, added PTRinvalid for Jan-14-08 13:33:42 id-5584c9356 [DNSBL] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] SPAM FOUND (89.132.3.160 listed in zen.spamhaus.org, DNSBLcached at 08-01-14/13:32) Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total for this message is 140, added 100 for DNSblacklisted in zen.spamhaus.org Jan-14-08 13:33:42 id-5584c9356 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] IP-Score: total for this IP is 300, added 100 for DNSBLcache Jan-14-08 13:33:42 id-5584c9356 [DNSBL] 89.132.3.160 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] SPAM FOUND (DNSblacklisted in zen.spamhaus.org) -> c:\assp/spam/9356.eml Jan-14-08 13:33:42 Disconnected: 89.132.3.160 ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
