Ken,

look in to the GUI - written in red (at the end of the main page) you'll 
find


If any parameter that allowes the usage of weighted regular expressions is 
set to "block", but the sum of the resulting weighted penalty value is 
less than the corresponding "Penalty Box Valence Value" (because of lower 
weights) - only scoring will be done!

Thomas



Von:    K Post <[email protected]>
An:     ASSP development mailing list <[email protected]>
Datum:  10.01.2011 15:24
Betreff:        [Assp-test] bombraw match scores, even though set to 
block?




On a test domain and machine, 2.0.2 2.0.17, win32.

I have DoBombRe set to block.

My bombRe has a very simple test expression:
badword

I got an email from [email protected] via the gmail servers.  Score set 
to
-6 after a good griplist and ok spf.  Then it matched the BombRe and was
scored, not blocked.  Is this how it's supposed to work?

Jan-10-11 04:12:50 49011-00099 209.85.160.171 <[email protected]> IP
209.85.160.171 matches noDelay - with 209.85.128.0/17
Jan-10-11 04:12:50 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] domainkey-Signature found
Jan-10-11 04:12:50 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] Message-Score: added -5 for 209.85.160 in griplist 
(0.00),
total score for this message is now -5
Jan-10-11 04:12:50 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] Message-Score: added -1 for SPF pass, total score for 
this
message is now -6
Jan-10-11 04:12:51 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] Regex:BombRe 'PB 20: for badword'
Jan-10-11 04:12:51 49011-00099 [BombRaw] 209.85.160.171 
<[email protected]>
to: [email protected] (BombRaw 'badword')
Jan-10-11 04:12:51 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] Message-Score: added 20 for BombRaw: 'badword', total 
score
for this message is now 14
Jan-10-11 04:12:52 49011-00099 209.85.160.171 <[email protected]> to:
[email protected] Bayesian Check - Prob: 0.00000 => ham
Jan-10-11 04:12:52 49011-00099 [MessageOK] 209.85.160.171 <
[email protected]> to: [email protected] message ok [Services] ->
messages/okmail/Services--564719.txt




Also, just an aside, with the changed to the log, where options are linked
back to the admin option,
Jan-10-11 04:12:51 49011-00099 [BombRaw] 209.85.160.171 
<[email protected]>
to: [email protected] (BombRaw 'badword')
didn't have BombRaw in either place link to the admin.  Maybe because it's
being called BombRaw, but the admin option is bombRe?


Thanks.
------------------------------------------------------------------------------
Gaining the trust of online customers is vital for the success of any 
company
that requires sensitive data to be transmitted over the Web.   Learn how 
to 
best implement a security strategy that keeps consumers' information 
secure 
and instills the confidence they need to proceed with transactions.
http://p.sf.net/sfu/oracle-sfdevnl 
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Gaining the trust of online customers is vital for the success of any company
that requires sensitive data to be transmitted over the Web.   Learn how to 
best implement a security strategy that keeps consumers' information secure 
and instills the confidence they need to proceed with transactions.
http://p.sf.net/sfu/oracle-sfdevnl 
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to