This is part of the maillog of an obvious spam-message.
It already received a "neutral" flag for appearing on
"blackholes.five-ten-sg.com".

Is it now getting a "-10" for that IP?
If so, does that IP build up credit for having passed a message?

I changed the -25 bonus for "MessageOK" to 0.

JP


# cat maillog.txt | grep id-5885:27
Jan-22-08 10:58:06 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
accepting triplet:
(219.133.37.0,[EMAIL PROTECTED],[EMAIL PROTECTED]) waited: 2m 7s
Jan-22-08 10:58:06 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] recipient accepted unchecked: [EMAIL PROTECTED]
Jan-22-08 10:58:07 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] SenderBase showing:  CN - CHINANET Guangdong
province network
Jan-22-08 10:58:12 id-5885:27 [SPF] 219.133.37.221
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED]  SPF: none
ip=219.133.37.221 [EMAIL PROTECTED] helo=bnet.net.cn
Jan-22-08 10:58:12 id-5885:27 [DNSBL][scoring] 219.133.37.221
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Received-DNSBL:
neutral, blackholes.five-ten-sg.com
Jan-22-08 10:58:12 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] Message-Score: total for this message is 15, added
15 for DNSBLneutral blackholes.five-ten-sg.com
Jan-22-08 10:58:12 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] PB: 219.133.37.0 TotalScore is 15, added 15 for
DNSBLneutral
Jan-22-08 10:58:13 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] scoring (Received-URIBL: pass)
Jan-22-08 10:58:13 id-5885:27 219.133.37.221 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] IP-Score: total for this IP is -10, added -25 for
MessageOK
Jan-22-08 10:58:13 id-5885:27 [MessageOK] 219.133.37.221
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] message ok
Offer_Car_DVD_Car_Rearview_Camera_Handsfree_car_ki


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to