I noticed a false positive in one of my Black RegEx (I already fixed the Regex) and that pointed to another possible problem:
The sender was a valid mail server sending valid mails. ASSP classified it as spam [BombBlack] and apparently generated a [SMTP Error] 554 5.7.1 error and dropped the connection. The sender server did not understand and repeated the process all over again for hundreds of times. The sender user never received a failure message from their server. ASSP collected hundreds of those mails in the /usr/local/assp/discarded folder. Is it possible that the sender server is misconfigured or, did I made any misconfiguration in our ASSP server? Thanks for any help provided. Hilário Fochi Silveira P.S. Sample of the log is bellow (similar lines repeated hundreds of times): Sep-28-09 11:20:05 id-47604-05834 111.111.111.111 <valid_sen...@god_domain.com> to: u...@our_domain.com added 10 (Black RegEx 'DSC4jywGOcGi4HkoJPNKXwpPpS'), total score for IP '111.111.111.111' is now 10 Sep-28-09 11:20:06 id-47604-05834 [BombBlack] 111.111.111.111 <valid_sen...@god_domain.com> to: u...@our_domain.com [spam found] -- Black RegEx 'DSC4jywGOcGi4HkoJPNKXwpPpS' -- [Good mail subject] -> /usr/local/assp/discarded/5816.eml; Sep-28-09 11:20:06 id-47604-05834 111.111.111.111 <valid_sen...@god_domain.com> to: u...@our_domain.com [SMTP Error] 554 5.7.1 Mail (id-47604-05834) appears to be unsolicited (bombError) Black RegEx 'DSC4jywGOcGi4HkoJPNKXwpPpS' -- If you think this is a false positive, please forward this error report to [email protected] - Please call us by telephone. Sep-28-09 11:20:06 Disconnected: 111.111.111.111 ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
