Messages that score in between your low message limit and high message
limit are tagged, they are not blocked until you hit the high message
limit.
If your settings are default for these two entries your low is 40, and
your high is 50.
________________________________
From: Hill, Brett [mailto:[EMAIL PROTECTED]
Sent: Monday, December 01, 2008 10:32 AM
To: [email protected]
Subject: [Assp-test] Possible Penalty Box Problem 1.4.3.1?
I just upgraded to 1.4.3.1 from 1.4.3.0.111614. I haven't changed any
of my settings, but I did noticed a lot of changes to the Penalty Box in
1.4.3.1. What I noticed was that even though my "Low Messagelimit" is
set to 40 and this particular email came through scoring 45, it was
allowed through with the following explanation: X-Assp-Block: NO (low
message threshold:40) when it should have been blocked.
Here's the ASSP Log:
Dec-1-08 09:46:00 id-42759-03703 [SPF] 70.43.207.210
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [scoring] SPF: none
ip=70.43.207.210 [EMAIL PROTECTED] helo=mail.vertimax.com
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] ClamAV: scanned 1605 bytes in message - OK
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] [scoring] Bayesian Check - Prob: 1.00000 => spam
Dec-1-08 09:46:00 id-42759-03703 70.43.207.210 <[EMAIL PROTECTED]> to:
[EMAIL PROTECTED] PB-Message-Score is 45, added 45 (Bayesian
Probability: 1.0000)
Dec-1-08 09:46:00 id-42759-03703 [MessageLimit][lowlimit] 70.43.207.210
<[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam found] and passing
because messagescore(45) low [You Have Been Selected]
Here's the header from the email:
>From <[EMAIL PROTECTED]> Mon, 01 Dec 2008 09:46:00 -0500
X-Connect-IP: 192.168.1.150
X-Envelope-To: <[EMAIL PROTECTED]>
X-SEF-MessageID: ADE5D878-DD5F-4013-8C22-AF25910C2ACA
Return-Path: <[EMAIL PROTECTED]>
Received: from ASSP [192.168.1.150] by mail.mydomain.com - SurfControl
E-mail Filter (5.5.0); Mon, 01 Dec 2008 09:46:00 -0500
Received: from mail.vertimax.com ([70.43.207.210]
helo=mail.vertimax.com)
by ASSP.nospam; 1 Dec 2008 09:45:59 -0500
Received: from User ([72.4.3.34]) by mail.vertimax.com with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 1 Dec 2008 09:22:08 -0500
From: "Wal-mart"<[EMAIL PROTECTED]>
Subject: You Have Been Selected !
Date: Mon, 1 Dec 2008 09:19:44 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 01 Dec 2008 14:22:08.0542 (UTC)
FILETIME=[31761BE0:01C953C0]
X-Assp-Delay: [EMAIL PROTECTED] was delayed before 13m 44s; 1 Dec 2008
09:46:00 -0500
X-Assp-Received-SPF: none ip=70.43.207.210 [EMAIL PROTECTED]
helo=mail.vertimax.com
X-Assp-Message&IP-Score: 45 (Bayesian Probability: 1.0000)
X-Assp-Spam-Level: **********
X-Assp-Tag: MessageLimit
X-Assp-Envelope-From: [EMAIL PROTECTED]
X-Assp-Intended-For: [EMAIL PROTECTED]
X-Assp-Version: 1.4.3.1
X-Assp-Spam: YES
X-Assp-Original-Subject: You Have Been Selected
X-Assp-Block: NO (low message threshold:40)
X-Assp-Spam-Reason: MessageScore surpassed low limit
X-Assp-Message-Totalscore: 45
X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1
X-SEF-Processed: 5_5_0_210__2008_12_01_09_46_01
Have I configured something wrong? Or is it in the code?
Kind Regards,
Brett
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
