I have several customers (all utilizing Outlook) in different locations, who have suddenly started being blocked from sending email. Looking at the logs, I see:
Jan-20-12 11:02:41 [Worker_4] Connected: remoteIP:49240 > externalIP:25 > internalIP:portnum > internalIP:portnum , 33-34 Jan-20-12 11:02:41 [Worker_4] remoteIP Message-Score: added 25 for EarlyTalker, total score for this message is now 25 Jan-20-12 11:02:41 [Worker_4] remoteIP [EarlyTalker] got 'non printable hex data' from the client before the '220 ...' server greeting was sent - rejecting connection Jan-20-12 11:02:41 [Worker_4] remoteIP [EarlyTalker] All connections from IP remoteIP will be rejected by assp for the next 15-30 minutes. Jan-20-12 11:02:41 [Worker_4] Disconnected: remoteIP - command list was 'XXXXXXXXXXXXXXXXXXXX' - used 1 SocketCalls None of these customers had this problem before, and in fact, this is the first time I've can remember seeing this, ever. It really drives my customers crazy not to be able to send mail. I've had to set my etValencePB to 0 to disable EarlyTalker detection, and manually clear the EmergencyBlock list. Is there a way to simply score based on EarlyTalker, rather than shutting down and blocking IP's instantly? Or at least configure the level of response? ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
