Paul Houlbrooke wrote:
> Paul Houlbrooke wrote:
>> Since 11.0, DNSBL has stopped working for me (unless it was moved until 
>> after Bayesian). ValidateRBL is on.
> 
> Actually nevermind, it does seem to be working. Setting RBL Logging to 
> verbose does bring up the ...
> 
> Jan-17-08 08:22:43 Commencing DNSBL checks on xxx.xxx.xxx.xxx
> Jan-17-08 08:22:43 Completed DNSBL checks on xxx.xxx.xxx.xxx
> 
> ...lines. It's just nothing has been caught since I upgraded to 11.0.


DNSBL seems to be working properly now.

Something I have noticed now that I have DNSBL logging turned on is that 
  it appears as if the DNSBL test is being run twice, one at the 
beginning of the connection and again after the PTR test. I'm assuming 
the first time it's run, it's actually checking the cache. Is this 
correct? If so, perhaps making that a little clearer inside the log 
would be good. Also, on the second DNSBL check there is no "Completed" 
message.



Jan-17-08 15:39:08 Commencing DNSBL checks on 90.133.19.230
Jan-17-08 15:39:08 Completed DNSBL checks on 90.133.19.230
Jan-17-08 15:39:08 id-2347c4336 [InvalidHELO][scoring] 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring (invalid HELO: 
'd90-133-19-239.cust.tele2.it')
Jan-17-08 15:39:08 id-2347c4336 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total 
for this message is 20, added 20 for invalid HELO: 
'd90-133-19-239.cust.tele2.it'
Jan-17-08 15:39:08 id-2347c4336 [PTRinvalid][scoring] 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring (PTR invalid 
'd90-133-19-230.cust.tele2.it')
Jan-17-08 15:39:08 id-2347c4336 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total 
for this message is 40, added 20 for PTR invalid 
'd90-133-19-230.cust.tele2.it'
Jan-17-08 15:39:09 Commencing DNSBL checks on 90.133.19.230
Jan-17-08 15:39:09 id-2347c4336 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: total 
for this message is 140, added 100 for DNSBLfailed zen.spamhaus.org
Jan-17-08 15:39:09 id-2347c4336 [DNSBL] 90.133.19.230 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam found 
(DNSblacklisted in zen.spamhaus.org)   -> c:\assp/spam/4336.eml

Jan-17-08 15:40:14 id-2414c12419 78.180.32.211 
<[EMAIL PROTECTED]> Message-Score: total for this message 
is 10, added 10 for Suspicious HELO - contains IP: '[78.180.32.211]'
Jan-17-08 15:40:14 id-2414c12419 78.180.32.211 
<[EMAIL PROTECTED]> [scoring] (Suspicious HELO - contains 
IP: '[78.180.32.211]')
Jan-17-08 15:40:15 Commencing DNSBL checks on 78.180.32.211
Jan-17-08 15:40:15 Completed DNSBL checks on 78.180.32.211
Jan-17-08 15:40:15 id-2414c12419 [PTRmissing][scoring] 78.180.32.211 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring (PTR missing)
Jan-17-08 15:40:15 id-2414c12419 78.180.32.211 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: 
total for this message is 30, added 20 for PTR missing
Jan-17-08 15:40:15 Commencing DNSBL checks on 78.180.32.211
Jan-17-08 15:40:16 id-2414c12419 78.180.32.211 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: 
total for this message is 130, added 100 for DNSBLfailed zen.spamhaus.org
Jan-17-08 15:40:16 id-2414c12419 [DNSBL] 78.180.32.211 
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam found 
(DNSblacklisted in zen.spamhaus.org)   -> c:\assp/spam/12419.eml



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to