For the spam in testmode I've found it -> 5.13 . The sub MaillogRemove was only looking for notspam mails - for the case where a POST check failes.
For this noprocessing mail, it is normal that the second line is written. It comes from POST checks. The first line is written, because of "noprocessing" has past all basic (configured checks) . This first line is only written if AttachmentLog is set to verbose and the AFC-plugin is not installed - the second line is written by the POST checks, because they could fail - but in this case all is OK. Thomas K Post <[email protected]> 02.11.2009 16:46 Bitte antworten an ASSP development mailing list <[email protected]> An ASSP development mailing list <[email protected]> Kopie Thema Re: [Assp-test] Antwort: bayesian test user + message limit exceeded to wrong folder Possibly along the same lines, when there's a match to the noprocessing list, I see two log lines that indicate file location: Take this for example: Nov-01-09 03:55:19 msg65719-03708 1.2.3.225 <[email protected]> Regex:NoProcessingList '[email protected]' Nov-01-09 03:55:21 msg65719-03708 1.2.3.225 <[email protected]> to: [email protected] Message-Score: added -15 for In Penalty White Box, total score for this message is now -15 Nov-01-09 03:55:21 msg65719-03708 [NoProcessing] 1.2.3.225 <[email protected]> to: [email protected] message proxied without processing (no bad attachments) [Web Contact Us] -> messages/okmail/Web_Contact_Us--57918.txt Nov-01-09 03:55:21 msg65719-03708 [MessageOK] 1.2.3.225 <[email protected]> to: [email protected] message ok [Web Contact Us] -> messages/okmail/Web_Contact_Us--57918.txt See how the last 2 log lines have the file name in there? Is that normal and is that similar to the problem that we're seeing for bayesian test users that have a bayesian message that also exceeds the message score? Hope this helps in some way to narrow down the problem. On Mon, Nov 2, 2009 at 10:18 AM, K Post <[email protected]> wrote: > Yes it does still exist. > > It was put to discarded incorrectly. It should go to spam. > > It seems that as soon as it's found to be a bayesian test user, it > goes to the discarded folder, but it should got to spam because it > ultimately fails message score. > > I'm guessing that when the block reporting happens, it's not putting > the file link because the last line in the log that it sees where the > file location >>should<< be is the message scoring line and there's no > file information there since it was stored several lines above. > > Thanks > > On Mon, Nov 2, 2009 at 3:01 AM, Thomas Eckardt/eck > <[email protected]> wrote: >>>messages/discarded/spam_subject--57666.txt >> >> Does the file still exists ? >> >> Thomas >> >> >> >> >> >> K Post <[email protected]> >> 02.11.2009 03:26 >> Bitte antworten an >> ASSP development mailing list <[email protected]> >> >> >> An >> ASSP development mailing list <[email protected]> >> Kopie >> >> Thema >> [Assp-test] bayesian test user + message limit exceeded to wrong folder >> >> >> >> >> >> >> I found this problem by looking at my block reports. 2.0.1 rc 0.5.09, >> but it surely happens with later versions too. >> >> We have a handful of users who are set as bayesian test mode users. >> This means that mesages that are >only< bayesian spam will be >> considered test mode and will get flagged in the subject but not >> rejected. For other users, bayesian messgaes are outright rejected. >> These rejects go to the discarded folder. >> >> Well, it seems that for messages to these bayesian test mode users >> that are bayesian but also fail due to exceeding the message limit >> (say bayesian + a suspicious helo + neutral dnsbl), are going to the >> discarded folder instead of the spam folder. We have message limit >> set to go to spam. >> >> I think this log excerpt shows the problem: >> >> >> Oct-31-09 21:42:29 msg39747-00216 [DNSBL] 1.2.3.4 <[email protected]> >> to: [email protected] [scoring] DNSBL: neutral, 1.2.3.4 listed in >> bb.barracudacentral.org dnsbl-1.uceprotect.net >> >> Oct-31-09 21:42:29 msg39747-00216 1.2.3.4 <[email protected]> to: >> [email protected] Message-Score: added 34 for DNSBL: neutral, 1.2.3.4 >> listed in bb.barracudacentral.org dnsbl-1.uceprotect.net, total score >> for this message is now 34 >> >> Oct-31-09 21:42:29 msg39747-00216 1.2.3.4 <[email protected]> to: >> [email protected] Bayesian Check - Prob: 1.00000 => spam >> >> Oct-31-09 21:42:29 msg39747-00216 1.2.3.4 <[email protected]> to: >> [email protected] Message-Score: added 39 for Bayesian Probability: >> 1.0000, total score for this message is now 73 >> >> Oct-31-09 21:42:29 msg39747-00216 [Bayesian][testmode] 1.2.3.4 >> <[email protected]> to: [email protected] [spam found] and possibly >> passing because bayesian test mode user, otherwise blocked (Bayesian) >> [spam subject] -> messages/discarded/spam_subject--57666.txt >> >> Oct-31-09 21:42:29 msg39747-00216 1.2.3.4 <[email protected]> to: >> [email protected] deleting spamming safelisted tuplet: >> (210.44.112.0,efcc.org) age: 2s >> >> Oct-31-09 21:42:29 msg39747-00216 [MessageLimit] 1.2.3.4 >> <[email protected]> to: [email protected] [spam found] (MessageScore >> 73, limit 50) [spam subject]; >> >> Notice as soon as bayesian test mode is hit, it seems to indicate that >> the message is moved to discarded. Two lines down from that, it shows >> the message score being exceeded, but there's no file linked from >> there since it expects to see that in spam, where it is not. >> >> This causes the problem in the block report, which I'm sure will be >> resolved once the files are put to the correct folder in the first >> place. >> >> Not a biggie, but it will certainly cause confusion. >> >> Thanks as always. >> >> ------------------------------------------------------------------------------ >> Come build with us! The BlackBerry(R) Developer Conference in SF, CA >> is the only developer event you need to attend this year. Jumpstart your >> developing skills, take BlackBerry mobile applications to market and stay >> ahead of the curve. Join us from November 9 - 12, 2009. Register now! >> http://p.sf.net/sfu/devconference >> _______________________________________________ >> Assp-test mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-test >> >> >> >> >> DISCLAIMER: >> ******************************************************* >> This email and any files transmitted with it may be confidential, legally >> privileged and protected in law and are intended solely for the use of the >> >> individual to whom it is addressed. >> This email was multiple times scanned for viruses. There should be no >> known virus in this email! >> ******************************************************* >> >> >> ------------------------------------------------------------------------------ >> Come build with us! The BlackBerry(R) Developer Conference in SF, CA >> is the only developer event you need to attend this year. Jumpstart your >> developing skills, take BlackBerry mobile applications to market and stay >> ahead of the curve. Join us from November 9 - 12, 2009. Register now! >> http://p.sf.net/sfu/devconference >> _______________________________________________ >> Assp-test mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-test >> > ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
