ASSP is not detecting bombre's on incoming email, but it does detect it
if I put it into the analyzer.
 
I've got an entry in my bombre.txt file called:  facebookmail\.com
 
ASSP doesn't detect the following example as containing a bombre on
incoming emails:
 
>From <[email protected]> Thu, 11 Feb 2010 14:24:25
-0500
X-Connect-IP: 192.168.1.10
X-Envelope-To: <[email protected]>
X-SEF-MessageID: 61C27DA7-CB07-438E-BC7B-87D4E696E911
Return-Path: <[email protected]>
Received: from ASSP [192.168.1.10] by mail.nlbusa.com - SurfControl
E-mail Filter (5.5.0); Thu, 11 Feb 2010 14:24:25 -0500
Received: from mx-out.facebook.com ([69.63.184.106]
helo=mx-out.facebook.com)
 with IPv4:26 by ASSP.nospam; 11 Feb 2010 14:24:13 -0500
Return-Path: <[email protected]>
DKIM-Signature: v=1; a=rsa-sha1; d=facebookmail.com; s=q1-2009b;
c=relaxed/relaxed;
 q=dns/txt; [email protected]; t=1265915053;
 h=From:Subject:Date:To:MIME-Version:Content-Type;
 bh=ltS6P6Idoz3jZo0uF3rYR7mmzXo=;
 b=SaTkl/sjaZ3AFkfY8/lKjqeDx+nUhFDLMW3E9/nk7THdPYbdvgSEUXEQvJFmDC0u
 eShHUbKKk+ED6vIX/9tOwQ==;
Received: from [10.18.255.140] ([10.18.255.140:39752])
 by mta302.ash1.facebook.com (envelope-from
<[email protected]>)
 (ecelerity 3.0.19.34928 r(34928)) with ECSTREAM
 id 04/13-31857-CA4547B4; Thu, 11 Feb 2010 11:04:13 -0800
X-Facebook: from zuckmail ([OTguMjA5LjQ3LjIwOA==]) 
 by www.facebook.com with HTTP (ZuckMail);
Date: Thu, 11 Feb 2010 11:04:12 -0800
To: <[email protected]>
From: Facebook <[email protected]>
Reply-to: Facebook <[email protected]>
Subject: Facebook Contact Email Confirmation
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: ZuckMail [version 1.00]
X-Facebook-Notify: contact_confirm; mailid=
Errors-To: [email protected]
X-FACEBOOK-PRIORITY: 0
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"
X-Assp-Delay: [email protected] was delayed for 20m 1s; 11 Feb 2010
 14:24:14 -0500
X-Assp-Score: 40 (Bayesian Probability: 1.0000)
X-Assp-Spam-Level: =?UTF-8?Q?=20?=********
X-Assp-Envelope-From: [email protected]
X-Assp-Intended-For: [email protected]
X-Assp-Version: 1.6.5.4(1.0.00)
X-Assp-ID: ASSP.nospam (id-16254-09670)
X-Assp-Spam: Probably
X-Assp-Original-Subject: Facebook Contact Email Confirmation
X-Assp-Block: NO (MessageScoring Warning Range)
X-Assp-Spam-Reason: MessageScore in warning range
X-Assp-Message-Totalscore: 40
X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1
X-SEF-Processed: 5_5_0_210__2010_02_11_14_24_25
 
Kind Regards,
Brett
------------------------------------------------------------------------------
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
http://p.sf.net/sfu/solaris-dev2dev
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to