Hi Thomas, I've been running RC13 since yesterday, and I'm still seeing many many messages with headers not being inserted.
This is a message that is representative of what I have seen hundreds of times in the last day: Return-Path: <[email protected]> Received: from jmqphw ([192.168.0.60]) by mail.frogstar.com with hMailServer ; Wed, 22 Apr 2009 15:53:29 -0400 Received: from jmqphw ([88.5.101.175] helo=jmqphw) by mail.frogstar.com; 22 Apr 2009 15:53:23 -0400 Sender: <[email protected]> From: "Ivy Nidia" <[email protected]> To: <[email protected]> Bcc: <[email protected]>, <[email protected]>, <[email protected]> Message-ID: <[email protected]> Reply-To: "Ivy Nidia" <[email protected]> Date: Wed, 22 Apr 2009 12:01:45 -0700 Subject: Canada Pharmacy is a cheap and affordable discount online Canada Drugs Pharmacy which serves over 25,000 customers. We open 24 hours a day 7 days a week pkhd npv Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: 8bit X-Assp-Message/IP-Score: 10 (check invalid HELO: 'jmqphw') That one ASSP header line is the only thing added to the message header. However, when I take the message header and body, paste it into Mail Analyzer, this is what I get - no question it should have been caught and tagged. And like I said, this is happening a great deal - but not always, because some email (about 50%, as far as I can tell) is being tagged and caught correctly. Feature Matching: BombRaw RE: 'Pharmacy' matching bombRe(file:files/bombre.txt): 'P+\s*?h+\s*?a+\s*?r+\s*?m+\s*?a+\s*?c+\s*?y+' BombData RE: 'Pharmacy' matching bombDataRe(file:files/bombre.txt): 'P+\s*?h+\s*?a+\s*?r+\s*?m+\s*?a+\s*?c+\s*?y+' BombHeader RE: 'From: "Ivy Nidia" To: Bcc: , , Message-ID: Reply-To: "Ivy Nidia" Date: Wed, 22 Apr 2009 12:01:45 -0700 Subject: Canada Pharmacy is a cheap and affordable discount online Canada Drugs Pharmacy which serves over 25,000 customers. We open 24 hours a day 7 days a week pkhd npv Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: 8bit X-Assp-Message/IP-Score: 10 (check invalid HELO: 'jmqphw') ******* 0nline Canadian Pharmacy Mall ******* NoPrescription needed for CialisLevitrvViagra, Hairloss treatment, WieghtLoss & all others.. Viagra' matching bombHeaderRe(file:files/bombheaderre.txt): '1' Black RE: 'Pharmacy' matching blackRe(file:files/bombre.txt): 'P+\s*?h+\s*?a+\s*?r+\s*?m+\s*?a+\s*?c+\s*?y+' Not a Valid Format of HELO: 'jmqphw' Invalid Format of HELO: 'jmqphw' -------------------------------------------------------------------------------- Bayesian Analysis: Bad Words Bad Prob Good Words Good Prob iaai.com rcpt 0.9848 ip-score 10 0.0152 x-assp-message ip-score 0.0172 canadian pharmacy 0.9533 invalid helo 0.0607 10 check 0.0623 check invalid 0.0628 href cn 0.9269 ssub discount 0.9175 an aarp 0.9161 discount ssub 0.9124 ssub cheap 0.9069 cheap ssub 0.9047 our big 0.8936 cn href 0.8880 pharmacy ssub 0.8850 our site 0.8821 online ssub 0.8760 ssub online 0.8743 ssub pharmacy 0.8716 all meds 0.8691 canadian 0nline 0.8665 Totals: 0.9848 0.9848 0.0152 0.0172 0.9533 0.9533 0.0607 0.0623 0.0628 0.9269 0.9269 0.9175 0.9161 0.9124 0.9069 0.9047 0.8936 0.8880 0.8850 0.8850 0.8821 0.8760 0.8743 0.8716 0.8716 0.8691 0.8665 0.8665 0.8650 0.8649 0.8649 -------------------------------------------------------------------------------- Spam Probability: probability: 1.0000 ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
