Hi all, since I upgraded from 2.0.2-1.0.06 to 2.0.2-1.1.10 (same issue with 2.0.2-1.1.11) I see lots of log entries like these:
Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain no Bomb found in header Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain no Bomb found for 'bombSuspiciousRe' Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain no Bomb found for 'bombDataRe', 'bombRe' and 'bombCharSets' Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain Regex:BlackRe 'PB 20: for [!empty!]' Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain [!empty!] : (l:0) 20 , count : 1 , sum : 20 , time : 0 s Jun-09-10 08:37:32 65451-05566 [Worker_1] [BombBlack] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain (BombBlack '(l:0) (l:0) '[!empty!] (20)'') Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain Message-Score: added 20 for BombBlack '(l:0) (l:0) '[!empty!] (20)'', total score for this message is now 9 Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain PB-IP-Score for '87.248.110.138' is 20, added 20 for BombBlack Jun-09-10 08:37:32 65451-05566 [Worker_1] [BombBlack] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain [spam found] (BombBlack '(l:0) (l:0) '[!empty!] (20)'') [Alan Wake] -> /opt/assp/discarded/5566.eml; Jun-09-10 08:37:32 65451-05566 [Worker_1] 87.248.110.138 <sen...@yahoo.de> to: recipi...@my.domain [SMTP Error] 554 5.7.1 Delivery not authorized, message refused -- . (reason: BombBlack '(l:0) (l:0) '[!empty!] (20)'') The mail is not spam. I cannot see why it is discarded. What does [!empty!] mean here? Where does it come from? A bad regex somewhere? I use the bombre.txt from the cvs. Thanks for your hints. Regards Dirk Kulmsee ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
