I just upgraded to 1.4.3.1 from 1.4.3.0.111614. I haven't changed any
of my settings, but I did noticed a lot of changes to the Penalty Box in
1.4.3.1. What I noticed was that even though my "Low Messagelimit" is
set to 40 and this particular email came through scoring 45, it was
allowed through with the following explanation: X-Assp-Block: NO (low
message threshold:40) when it should have been blocked.
Here's the ASSP Log:
Dec-1-08 09:46:00 id-42759-03703 [SPF] 70.43.207.210
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [scoring] SPF: none
ip=70.43.207.210 [EMAIL PROTECTED] helo=mail.vertimax.com
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] ClamAV: scanned 1605 bytes in message - OK
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] [scoring] Bayesian Check - Prob: 1.00000 => spam
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] PB-Message-Score is 45, added 45 (Bayesian
Probability: 1.0000)
Dec-1-08 09:46:00 id-42759-03703 [MessageLimit][lowlimit] 70.43.207.210
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam found] and passing
because messagescore(45) low [You Have Been Selected]
Here's the header from the email:
>From <[EMAIL PROTECTED]> Mon, 01 Dec 2008 09:46:00 -0500
X-Connect-IP: 192.168.1.150
X-Envelope-To: <[EMAIL PROTECTED]>
X-SEF-MessageID: ADE5D878-DD5F-4013-8C22-AF25910C2ACA
Return-Path: <[EMAIL PROTECTED]>
Received: from ASSP [192.168.1.150] by mail.mydomain.com - SurfControl
E-mail Filter (5.5.0); Mon, 01 Dec 2008 09:46:00 -0500
Received: from mail.vertimax.com ([70.43.207.210]
helo=mail.vertimax.com)
by ASSP.nospam; 1 Dec 2008 09:45:59 -0500
Received: from User ([72.4.3.34]) by mail.vertimax.com with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 1 Dec 2008 09:22:08 -0500
From: "Wal-mart"<[EMAIL PROTECTED]>
Subject: You Have Been Selected !
Date: Mon, 1 Dec 2008 09:19:44 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 01 Dec 2008 14:22:08.0542 (UTC)
FILETIME=[31761BE0:01C953C0]
X-Assp-Delay: [EMAIL PROTECTED] was delayed before 13m 44s; 1 Dec 2008
09:46:00 -0500
X-Assp-Received-SPF: none ip=70.43.207.210 [EMAIL PROTECTED]
helo=mail.vertimax.com
X-Assp-Message&IP-Score: 45 (Bayesian Probability: 1.0000)
X-Assp-Spam-Level: **********
X-Assp-Tag: MessageLimit
X-Assp-Envelope-From: [EMAIL PROTECTED]
X-Assp-Intended-For: [EMAIL PROTECTED]
X-Assp-Version: 1.4.3.1
X-Assp-Spam: YES
X-Assp-Original-Subject: You Have Been Selected
X-Assp-Block: NO (low message threshold:40)
X-Assp-Spam-Reason: MessageScore surpassed low limit
X-Assp-Message-Totalscore: 45
X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1
X-SEF-Processed: 5_5_0_210__2008_12_01_09_46_01
Have I configured something wrong? Or is it in the code?
Kind Regards,
Brett
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
