I have added the normal mail log, the debugging log and the penalty box part of
the ASSP configuration as text files if someone needs some more information to
explain why ASSP let this message pass through. Of course this is not the only
message where this happened.
[Worker_1] Connected: 93.183.165.26:2095 -> 172.16.5.150:25 -> 172.16.5.150:2525
, 10-11
Mar-11-09 19:38:50 [Worker_1] [InvalidHELO] 93.183.165.26
<[email protected]<mailto:[email protected]>> [scoring] (check
invalid HELO: 'nedjmin-a2915a2')
Mar-11-09 19:38:50 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> Message-Score: total for
this
message is 20, added 20 for check invalid HELO:
'nedjmin-a2915a2'
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
Message-Score: total for this message is 30, added 10 for
Foreign Country BG - ESCOM
Ltd. - Haskovo
Mar-11-09 19:38:51 [Worker_1] [PTRmissing] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
drucke...@rauchenstein.
ch [scoring] (PTR missing)
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
Message-Score: total for this message is 40, added 10 for
PTR missing
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
ClamAV: scanned 3620 bytes in message - OK
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
Bayesian Check scoring - Prob: 1.00000 => spam
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
Message-Score: total for this message is 79, added 39 for
Bayesian Probability:
1.0000
Mar-11-09 19:38:52 [Worker_1] [MessageLimit][lowlimit] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
[spam found] and passing because messagescore(79) low [RE
Discount Message 115334] -> c:\assp/discarded/96730.eml
Mar-11-09 19:38:52 [Worker_1] ASSP_OCR: can not find convert from ImageMagick
in PATH!? No images wiil be
processed!
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
[Plugin] calling plugin ASSP_AttachmentFullCheck
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
[email protected]<mailto:[email protected]>
ClamAV: scanned 3048 bytes in message - OK
Mar-11-09 19:38:52 [Worker_1] [MessageOK] 93.183.165.26
<[email protected]<mailto:[email protected]>> to:
drucke...@rauchenstein.
ch message ok [RE Discount Message 115334] ->
c:\assp/discarded/96730.eml
Mar-11-09 19:38:52 [Worker_1] Disconnected: 93.183.165.26
regards
Marco
Mar-11-09 19:38:50 [Main_Thread] Info: Main_Thread got connection request
11 Mar 09 19:38:50 [Worker_1] <34>
Mar-11-09 19:38:50 [Worker_1] Worker_1 wakes up
11 Mar 09 19:38:50 [Worker_1] <34>
Mar-11-09 19:38:50 [Worker_1] Info: Worker_1 got connection from MainThread -
3/3
11 Mar 09 19:38:50 [Worker_1] <1>
11 Mar 09 19:38:50 [Main_Thread] <34>
Mar-11-09 19:38:50 [Main_Thread] Info: Main_Thread freed by idle Worker_1 in
0.008 seconds
11 Mar 09 19:38:50 [Worker_1] <14>
11 Mar 09 19:38:50 [Main_Thread] <6>
11 Mar 09 19:38:50 [Worker_1] <14>
11 Mar 09 19:38:50 [Main_Thread] <50>
11 Mar 09 19:38:50 [Worker_1] <Connected: IO::Socket::INET=GLOB(0x1cdde2a4) --
IO::Socket::INET=GLOB(0x1cdde114)>
11 Mar 09 19:38:50 [Worker_1] <* connect ip=93.183.165.26 relay=<0> *>
11 Mar 09 19:38:50 [Worker_1] <34>
Mar-11-09 19:38:50 [Worker_1] Connected: 93.183.165.26:2095 -> 172.16.5.150:25
-> 172.16.5.150:2525 , 10-11
11 Mar 09 19:38:50 [Main_Thread] <8>
11 Mar 09 19:38:50 [Main_Thread] <34>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=0>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=0>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <220 ns1.itprime.ch Microsoft ESMTP MAIL
Service, Version: 7.0.6001.18000 ready at Wed, 11 Mar 2009 19:38:50 +0100 >>
11 Mar 09 19:38:50 [Worker_1] <30>
11 Mar 09 19:38:50 [Worker_1] <reply : 220 ns1.itprime.ch Microsoft ESMTP MAIL
Service, Version: 7.0.6001.18000 ready at Wed, 11 Mar 2009 19:38:50 +0100>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=0>
11 Mar 09 19:38:50 [Worker_1] <noop to server 1>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=117>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=0>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=117>
11 Mar 09 19:38:50 [Worker_1] <wrote: (117)<220 ns1.itprime.ch Microsoft ESMTP
MAIL Service, Version: 7.0.6001.18000 ready at Wed, 11 Mar 2009 19:38:50 +0100
>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <HELO nedjmin-a2915a2>>
11 Mar 09 19:38:50 [Worker_1] <15>
11 Mar 09 19:38:50 [Worker_1] <gl: <HELO nedjmin-a2915a2>>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=22>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=22>
11 Mar 09 19:38:50 [Worker_1] <wrote: (22)<HELO nedjmin-a2915a2>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <250 ns1.itprime.ch Hello [172.16.5.150]>>
11 Mar 09 19:38:50 [Worker_1] <30>
11 Mar 09 19:38:50 [Worker_1] <reply : 250 ns1.itprime.ch Hello [172.16.5.150]>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=41>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=41>
11 Mar 09 19:38:50 [Worker_1] <wrote: (41)<250 ns1.itprime.ch Hello
[172.16.5.150]>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <MAIL FROM:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <15>
11 Mar 09 19:38:50 [Worker_1] <gl: <MAIL FROM:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <ForgedHeloOK>
11 Mar 09 19:38:50 [Worker_1] <IPinHeloOK>
11 Mar 09 19:38:50 [Worker_1] <invalidHeloOK>
11 Mar 09 19:38:50 [Worker_1] <34>
Mar-11-09 19:38:50 [Worker_1] [InvalidHELO] 93.183.165.26
<[email protected]> [scoring] (check invalid HELO: 'nedjmin-a2915a2')
11 Mar 09 19:38:50 [Worker_1] <34>
Mar-11-09 19:38:50 [Worker_1] 93.183.165.26 <[email protected]>
Message-Score: total for this message is 20, added 20 for check invalid HELO:
'nedjmin-a2915a2'
11 Mar 09 19:38:50 [Worker_1] <validHeloOK>
11 Mar 09 19:38:50 [Worker_1] <LocalSenderOK>
11 Mar 09 19:38:50 [Worker_1] <RBLCacheOK>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=35>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=35>
11 Mar 09 19:38:50 [Worker_1] <wrote: (35)<MAIL FROM:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <250 2.1.0 [email protected]
OK>>
11 Mar 09 19:38:50 [Worker_1] <30>
11 Mar 09 19:38:50 [Worker_1] <reply : 250 2.1.0
[email protected] OK>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=46>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=46>
11 Mar 09 19:38:50 [Worker_1] <wrote: (46)<250 2.1.0
[email protected] OK>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <RCPT TO:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <15>
11 Mar 09 19:38:50 [Worker_1] <gl: <RCPT TO:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <[email protected] validated by flat
LocalAddresses list>
11 Mar 09 19:38:50 [Worker_1] <Delayok>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=37>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=37>
11 Mar 09 19:38:50 [Worker_1] <wrote: (37)<RCPT TO:<[email protected]>>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <250 2.1.5 [email protected] >>
11 Mar 09 19:38:50 [Worker_1] <30>
11 Mar 09 19:38:50 [Worker_1] <reply : 250 2.1.5 [email protected]>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=38>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=38>
11 Mar 09 19:38:50 [Worker_1] <wrote: (38)<250 2.1.5 [email protected]
>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <DATA>>
11 Mar 09 19:38:50 [Worker_1] <15>
11 Mar 09 19:38:50 [Worker_1] <gl: <DATA>>
11 Mar 09 19:38:50 [Worker_1] <361>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=6>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=6>
11 Mar 09 19:38:50 [Worker_1] <wrote: (6)<DATA>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <2>
11 Mar 09 19:38:50 [Worker_1] <doing <354 Start mail input; end with
<CRLF>.<CRLF>>>
11 Mar 09 19:38:50 [Worker_1] <30>
11 Mar 09 19:38:50 [Worker_1] <reply : 354 Start mail input; end with
<CRLF>.<CRLF>>
11 Mar 09 19:38:50 [Worker_1] <301>
11 Mar 09 19:38:50 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=46>
11 Mar 09 19:38:50 [Worker_1] <3>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=46>
11 Mar 09 19:38:50 [Worker_1] <wrote: (46)<354 Start mail input; end with
<CRLF>.<CRLF>>>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:50 [Worker_1] <6>
11 Mar 09 19:38:51 [Worker_1] <6>
11 Mar 09 19:38:51 [Worker_1] <6>
11 Mar 09 19:38:51 [Worker_1] <2>
11 Mar 09 19:38:51 [Worker_1] <doing <Content-Return: allowed>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <X-Mailer: devMail.Net (3.0.1854.22234-2)>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Return-Path:<[email protected]>>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Received: (qmail 2906 by uid 660); Wed,
11 Mar 2009 08:38:40 +0200>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Message-Id:
<20090311103840.2908.qm...@nedjmin-a2915a2>>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <To: [email protected]>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Subject: RE: Discount Message 115334>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <From: VIAGRA ® Official Site
<[email protected]>>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <MIME-Version: 1.0>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Content-Type: text/html; charset="UTF-8">>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <Content-Transfer-Encoding: 7bit>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <18>
11 Mar 09 19:38:51 [Worker_1] <ForgedHeloOK>
11 Mar 09 19:38:51 [Worker_1] <LocalSenderOK>
11 Mar 09 19:38:51 [Worker_1] <32>
11 Mar 09 19:38:51 [Worker_1] <SenderBaseOK>
11 Mar 09 19:38:51 [Worker_1] <34>
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] Message-Score: total for this message is 30, added 10
for Foreign Country BG - ESCOM Ltd. - Haskovo
11 Mar 09 19:38:51 [Worker_1] <RBLCacheOK>
11 Mar 09 19:38:51 [Worker_1] <RBLok>
11 Mar 09 19:38:51 [Main_Thread] <6>
11 Mar 09 19:38:51 [Main_Thread] <50>
11 Mar 09 19:38:51 [Main_Thread] <8>
11 Mar 09 19:38:51 [Main_Thread] <34>
11 Mar 09 19:38:51 [Worker_1] <PBExtremeOK>
11 Mar 09 19:38:51 [Worker_1] <BombHeaderOK>
11 Mar 09 19:38:51 [Worker_1] <BlackDomainOK>
11 Mar 09 19:38:51 [Worker_1] <invalidHeloOK>
11 Mar 09 19:38:51 [Worker_1] <validHeloOK>
11 Mar 09 19:38:51 [Worker_1] <BlackHeloOK>
11 Mar 09 19:38:51 [Worker_1] <PTROK>
11 Mar 09 19:38:51 [Worker_1] <34>
Mar-11-09 19:38:51 [Worker_1] [PTRmissing] 93.183.165.26
<[email protected]> to: [email protected] [scoring] (PTR missing)
11 Mar 09 19:38:51 [Worker_1] <34>
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] Message-Score: total for this message is 40, added 10
for PTR missing
11 Mar 09 19:38:51 [Worker_1] <ASSP_SkeletonTest: Plugin successful called for
runlevel 'mail header'!>
11 Mar 09 19:38:51 [Worker_1] <doing <<HTML>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BODY>>>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <doing <<table border="0" cellpadding="0"
cellspacing="0" width="660">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td><A HREF="http://lodxecif.cn"><img
alt="Men's Health hvxbk" border="0" height="131"
src="http://a676.g.akamaitech.net/f/676/773/60m/images.delivery.net/cm50content/19415/2697/toplogo.jpg"
width="266"></A><A HREF="http://lodxecif.cn"><img alt="Build Maximum MUSCLE,
STRENGTH, and POWER!" border="0" height="131"
src="http://a676.g.akamaitech.net/f/676/773/60m/images.delivery.net/cm50content/19415/2697/top2part.gif"
width="394"></A></td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</table>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<table border="0" cellpadding="2"
cellspacing="0" width="660">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</table>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<table border="0" cellpadding="7"
cellspacing="0" width="660">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td width="47">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td style="font-family: Verdana, Arial,
Helvetica, sans-serif; font-size: 12px" valign="top"><A
HREF="http://lodxecif.cn"><img align="right" alt="Try It FREE for 21 Days!
ORDER NOW! Plus, get 2 FREE Bonus Gifts!" border="0" height="197"
src="http://a676.g.akamaitech.net/f/676/773/60m/images.delivery.net/cm50content/19415/2697/index_05.gif"
width="189"></A> >>
11 Mar 09 19:38:51 [Worker_1] <doing < <BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<font face="Verdana, Arial, Helvetica,
sans-serif" originaltag="yes" size="2" style="font-size: 12px;">Dear
[email protected]<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < Tiny helper for big growth </font> >>
11 Mar 09 19:38:51 [Worker_1] <doing < <BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <doing < <BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<div align="left">>>
11 Mar 09 19:38:51 [Worker_1] <doing < <p style="font-family: Verdana, Arial,
Helvetica, sans-serif; font-size: 12px"><a href="http://lodxecif.cn"><img
src="http://lodxecif.cn/1.gif"></a></p>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</div></td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</table>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<table border="0" cellpadding="7"
cellspacing="0" width="660">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td width="58">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td style="font-family: Verdana, Arial,
Helvetica, sans-serif; font-size: 12px" valign="top"><BR> >>
11 Mar 09 19:38:51 [Worker_1] <doing < <span style="font-family: Verdana,
Arial, Helvetica, sans-serif; font-size: 14px; font-weight: bolder ; color:
#990000"><font color="#990000" face="Verdana, Arial, Helvetica, sans-serif"
originaltag="yes" style="font-size:14px;"><b>FREE gifts</b></font></span><font
face="Verdana, Arial, Helvetica, sans-serif" originaltag="yes" size="2"
style="font-size: 12px;"> reserved for you:
<i>[email protected]</i></font></td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td valign="top"><A
HREF="http://lodxecif.cn"></A></td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td width="58">>>
11 Mar 09 19:38:51 [Worker_1] <doing <<td colspan="2" style="font-family:
Verdana, Arial, Helvetica, sans-serif; font-size: 11px" valign="top"> If you
would prefer not to receive future information about special offers from Men's
Health, >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < you may <a style="color:#990000;
font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;
text-decoration: underline;" href="http://lodxecif.cn">Unsubscribe</a>. >>
11 Mar 09 19:38:51 [Worker_1] <3>
11 Mar 09 19:38:51 [Worker_1] <6>
11 Mar 09 19:38:51 [Worker_1] <2>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < Customer Service Department, 33 East
Minor Street, Emmaus, PA 18098 >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < >>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing < Copyright, Men's Health <BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</font> </td>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</tr>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</table>>>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<font color="#666666"
face="Verdana,Helvetica" originaltag="yes" size="1"></font><BR>>>
11 Mar 09 19:38:51 [Worker_1] <doing <<img width="1" height="1"
src="http://open.delivery.net/o?2.2.3K5.2hv.12hk7c.CdQNXI..N..1TKO.ZfgpqwjA%5fCaYSFOC0"
alt=" ">>>
11 Mar 09 19:38:51 [Worker_1] <doing <</BODY>>>
11 Mar 09 19:38:51 [Worker_1] <doing <</HTML>>>
11 Mar 09 19:38:51 [Worker_1] <doing <>>
11 Mar 09 19:38:51 [Worker_1] <doing <.>>
11 Mar 09 19:38:51 [Worker_1] <getbody - done:1 maillength:3620>
11 Mar 09 19:38:51 [Worker_1] <BombOK>
11 Mar 09 19:38:51 [Worker_1] <ScriptOK>
11 Mar 09 19:38:51 [Worker_1] <BombBlackOK>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] ClamAV: scanned 3620 bytes in message - OK
11 Mar 09 19:38:52 [Worker_1] <URIBLok>
11 Mar 09 19:38:52 [Worker_1] <31>
11 Mar 09 19:38:52 [Worker_1] <gl= <>>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] Bayesian Check scoring - Prob: 1.00000 => spam
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] Message-Score: total for this message is 79, added 39
for Bayesian Probability: 1.0000
11 Mar 09 19:38:52 [Worker_1] <thisIsSpam: MessageScore passed low limit>
11 Mar 09 19:38:52 [Worker_1] <362>
11 Mar 09 19:38:52 [Worker_1] <19>
11 Mar 09 19:38:52 [Worker_1] <14>
11 Mar 09 19:38:52 [Worker_1] <366>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] [MessageLimit][lowlimit] 93.183.165.26
<[email protected]> to: [email protected] [spam found] and passing
because messagescore(79) low [RE Discount Message 115334] ->
c:\assp/discarded/96730.eml
11 Mar 09 19:38:52 [Worker_1] <23>
11 Mar 09 19:38:52 [Worker_1] <convert and send data>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] ASSP_OCR: can not find convert from ImageMagick
in PATH!? No images wiil be processed!
11 Mar 09 19:38:52 [Worker_1] <ASSP_OCR: Plugin successful called for runlevel
'complete mail'!>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] [Plugin] calling plugin ASSP_AttachmentFullCheck
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected] ClamAV: scanned 3048 bytes in message - OK
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] [MessageOK] 93.183.165.26 <[email protected]>
to: [email protected] message ok [RE Discount Message 115334] ->
c:\assp/discarded/96730.eml
11 Mar 09 19:38:52 [Worker_1] <header (ct-attr) : text/html; charset="UTF-8">
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=4177>
11 Mar 09 19:38:52 [Worker_1] <PBOK>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=4177>
11 Mar 09 19:38:52 [Worker_1] <wrote: (4177)<long text>>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=0>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <220 ns1.itprime.ch Microsoft ESMTP MAIL
Service, Version: 7.0.6001.18000 ready at Wed, 11 Mar 2009 19:38:52 +0100 >>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=18>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=18>
11 Mar 09 19:38:52 [Worker_1] <wrote: (18)<HELO ASSP.nospam>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 ns1.itprime.ch Hello [172.16.5.150]>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=36>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=36>
11 Mar 09 19:38:52 [Worker_1] <wrote: (36)<MAIL FROM: <[email protected]>>>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 2.6.0
<20090311103840.2908.qm...@nedjmin-a2915a2> Queued mail for delivery>>
11 Mar 09 19:38:52 [Worker_1] <30>
11 Mar 09 19:38:52 [Worker_1] <reply : 250 2.6.0
<20090311103840.2908.qm...@nedjmin-a2915a2> Queued mail for delivery>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=81>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=81>
11 Mar 09 19:38:52 [Main_Thread] <6>
11 Mar 09 19:38:52 [Main_Thread] <50>
11 Mar 09 19:38:52 [Worker_1] <wrote: (81)<250 2.6.0
<20090311103840.2908.qm...@nedjmin-a2915a2> Queued mail for delivery>>
11 Mar 09 19:38:52 [Main_Thread] <8>
11 Mar 09 19:38:52 [Main_Thread] <34>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 2.1.0 [email protected]
OK>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=34>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=34>
11 Mar 09 19:38:52 [Worker_1] <wrote: (34)<RCPT TO: <[email protected]>>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 2.1.5 [email protected] >>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=6>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=6>
11 Mar 09 19:38:52 [Worker_1] <wrote: (6)<DATA>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <354 Start mail input; end with
<CRLF>.<CRLF>>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=4273>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cde6aac)
HASH(0x1cdde1b4) l=4273>
11 Mar 09 19:38:52 [Worker_1] <wrote: (4273)<long text>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <RSET>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cde6aac) l=6>
11 Mar 09 19:38:52 [Worker_1] <15>
11 Mar 09 19:38:52 [Worker_1] <gl: <RSET>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=6>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 2.6.0
<20090311103840.2908.qm...@nedjmin-a2915a2> Queued mail for delivery>>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <13>
11 Mar 09 19:38:52 [Worker_1] <closing IO::Socket::INET=GLOB(0x1cde6aac)>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=6>
11 Mar 09 19:38:52 [Worker_1] <wrote: (6)<RSET>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <250 2.0.0 Resetting>>
11 Mar 09 19:38:52 [Worker_1] <30>
11 Mar 09 19:38:52 [Worker_1] <reply : 250 2.0.0 Resetting>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=21>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=21>
11 Mar 09 19:38:52 [Worker_1] <wrote: (21)<250 2.0.0 Resetting>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <QUIT>>
11 Mar 09 19:38:52 [Worker_1] <15>
11 Mar 09 19:38:52 [Worker_1] <gl: <QUIT>>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde114) l=6>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde114)
HASH(0x5f97f1c) l=6>
11 Mar 09 19:38:52 [Worker_1] <wrote: (6)<QUIT>>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <2>
11 Mar 09 19:38:52 [Worker_1] <doing <221 2.0.0 ns1.itprime.ch Service closing
transmission channel>>
11 Mar 09 19:38:52 [Worker_1] <30>
11 Mar 09 19:38:52 [Worker_1] <reply : 221 2.0.0 ns1.itprime.ch Service closing
transmission channel>
11 Mar 09 19:38:52 [Worker_1] <sq: IO::Socket::INET=GLOB(0x1cdde2a4) l=63>
11 Mar 09 19:38:52 [Worker_1] <3>
11 Mar 09 19:38:52 [Worker_1] <6>
11 Mar 09 19:38:52 [Worker_1] <IO::Socket::INET=GLOB(0x1cdde2a4)
HASH(0x1caebedc) l=63>
11 Mar 09 19:38:52 [Worker_1] <wrote: (63)<221 2.0.0 ns1.itprime.ch Service
closing transmission channel>>
11 Mar 09 19:38:52 [Worker_1] <5>
11 Mar 09 19:38:52 [Worker_1] <12>
11 Mar 09 19:38:52 [Worker_1] <13>
11 Mar 09 19:38:52 [Worker_1] <34>
Mar-11-09 19:38:52 [Worker_1] Disconnected: 93.183.165.26
Mar-11-09 19:38:50 [Worker_1] Connected: 93.183.165.26:2095 -> 172.16.5.150:25
-> 172.16.5.150:2525
, 10-11
Mar-11-09 19:38:50 [Worker_1] [InvalidHELO] 93.183.165.26
<[email protected]> [scoring] (check
invalid HELO: 'nedjmin-a2915a2')
Mar-11-09 19:38:50 [Worker_1] 93.183.165.26 <[email protected]>
Message-Score: total for this
message is 20, added 20 for check invalid HELO:
'nedjmin-a2915a2'
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
Message-Score: total for this message is 30, added 10 for
Foreign Country BG - ESCOM
Ltd. - Haskovo
Mar-11-09 19:38:51 [Worker_1] [PTRmissing] 93.183.165.26
<[email protected]> to: drucke...@rauchenstein.
ch [scoring] (PTR missing)
Mar-11-09 19:38:51 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
Message-Score: total for this message is 40, added 10 for
PTR missing
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
ClamAV: scanned 3620 bytes in message - OK
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
Bayesian Check scoring - Prob: 1.00000 => spam
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
Message-Score: total for this message is 79, added 39 for
Bayesian Probability:
1.0000
Mar-11-09 19:38:52 [Worker_1] [MessageLimit][lowlimit] 93.183.165.26
<[email protected]> to:
[email protected] [spam found] and passing because
messagescore(79) low [RE
Discount Message 115334] -> c:\assp/discarded/96730.eml
Mar-11-09 19:38:52 [Worker_1] ASSP_OCR: can not find convert from ImageMagick
in PATH!? No images wiil be
processed!
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
[Plugin] calling plugin ASSP_AttachmentFullCheck
Mar-11-09 19:38:52 [Worker_1] 93.183.165.26 <[email protected]> to:
[email protected]
ClamAV: scanned 3048 bytes in message - OK
Mar-11-09 19:38:52 [Worker_1] [MessageOK] 93.183.165.26 <[email protected]>
to: drucke...@rauchenstein.
ch message ok [RE Discount Message 115334] ->
c:\assp/discarded/96730.eml
Mar-11-09 19:38:52 [Worker_1] Disconnected: 93.183.165.26
DoPenalty:=2
DoPenaltyMessage:=1
MsgScoreOnEnd:=1
PenaltyMessageLow:=40
PenaltyMessageLimit:=50
AddScoringHeader:=1
pbdb:=DB:
noPB:=
noPBwhite:=
WhiteExpiration:=90
spamtrapaddresses:=put|[email protected]|addresses|@here.org
DoPenaltyMakeTraps:=2
PenaltyMakeTraps:=10
noPenaltyMakeTraps:=
PBTrapInterval:=3
PenaltyUseNetblocks:=
PenaltyError:=
PenaltyDuration:=60
PenaltyLimit:=50
PenaltyExpiration:=360
CleanPBInterval:=3
DoPenaltyExtreme:=0
DoPenaltyExtremeSMTP:=0
PenaltyExtreme:=150
ExtremeWL:=
ExtremeNP:=
ExtremeExpiration:=7
DoExtremeExport:=
DoExtremeExportAppend:=
exportInterval:=6
exportExtremeBlack:=
DoNotPenalizeRed:=
DoNotPenalizeNull:=
baValencePB:=20
backsctrValencePB:=10
baysValencePB:=39
blValencePB:=20
bombSuspiciousValencePB:=20
bombValencePB:=25
blackValencePB:=20
dkimValencePB:=15
erValencePB:=5
fhValencePB:=150
fiphValencePB:=5
fiphmValencePB:=5
flValencePB:=20
hlValencePB:=20
iaValencePB:=25
idValencePB:=150
ifValencePB:=150
iplValencePB:=5
ihValencePB:=20
irValencePB:=5
midmValencePB:=5
midsValencePB:=5
midiValencePB:=10
fbmtvValencePB:=25
batvValencePB:=25
meValencePB:=15
msValencePB:=10
mxValencePB:=20
mxaValencePB:=15
pbeValencePB:=25
pbValencePB:=15
pbwValencePB:=-15
gripValencePB:=5
okValencePB:=-25
ptmValencePB:=10
ptiValencePB:=15
rblnValencePB:=25
rblValencePB:=100
rlValencePB:=15
saValencePB:=25
scriptValencePB:=25
sbsccValencePB:=10
bccValencePB:=25
sbfccValencePB:=10
sbhccValencePB:=-10
spfnValencePB:=5
spfsValencePB:=5
spfnonValencePB:=0
spfuValencePB:=0
spfeValencePB:=5
spfValencePB:=10
stValencePB:=50
uriblnValencePB:=20
uriblValencePB:=20
vsValencePB:=25
vdValencePB:=50
------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test