> that is, apparently the earlytalker message is logged AFTER the > rejection also, I think that just *dropping* the connection for early > talkers would be a good idea ;)
just in case, here's another log snippet; i grepped the logs for the offending IP and here are the lines Feb-18-09 14:33:57 msg-67637-01458 201.254.68.233 <[email protected]> MessageScore is now 150, after adding 150 (forged Helo: 'xxxx.yyy') Feb-18-09 14:33:57 msg-67637-01458 [ForgedHELO] 201.254.68.233 <[email protected]> [spam found] (forced: forged Helo: 'xxxx.yyy') Feb-18-09 14:33:57 msg-67637-01458 201.254.68.233 <[email protected]> [SMTP Error] 554 5.7.1 Forged HELO . Feb-18-09 14:33:57 201.254.68.233 <> MessageScore is now 10, after adding 10 (EarlyTalker) Feb-18-09 14:33:57 201.254.68.233 <> EarlyTalker Feb-18-09 14:33:58 msg-67638-12026 201.254.68.233 <[email protected]> MessageScore is now 150, after adding 150 (forged Helo: 'xxxx.yyy') Feb-18-09 14:33:58 msg-67638-12026 [ForgedHELO] 201.254.68.233 <[email protected]> [spam found] (forced: forged Helo: 'xxxx.yyy') Feb-18-09 14:33:58 msg-67638-12026 201.254.68.233 <[email protected]> [SMTP Error] 554 5.7.1 Forged HELO . ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
