> -----Original Message-----
> From: Fritz Borgstedt [mailto:[email protected]]
> Sent: Friday, July 27, 2012 8:21 AM
>
> May be there is a bug.
> The empty () after "Yes" looks suspicious. (should be the reason)
>
> Is ist possible to get the log for it?
Here's all I have from the log:
Jul-27-12 05:57:20 id-34338-03651 206.132.3.142
<[email protected]> to:
[email protected] Message-Score: added 15 for Bad IP History for
206.132.3.142, total score for this message is now 15;
Jul-27-12 05:57:20 id-34338-03651 [VIRUS] 206.132.3.142
<[email protected]> to:
[email protected] ClamAV: scanned 9998 bytes in whitelisted message - OK
;
Jul-27-12 05:57:20 id-34338-03651 [WhitelistedOK] 206.132.3.142
<[email protected]> to:
[email protected] whitelisted [Great offers to earn cash back with your
Chase Debit Card] -> notspam/34338-03651.eml;
The email header is attached to this email.
> Is it really whitelisted for a good reason?
I suppose so. It's a typical advertisement email from Chase Bank (not
really spam, but want to make sure it gets through). But, this was just
one example. There are others where this also happens. I do not have
another example of this type presently. I have attached an example of
another whitelisted email that didn't get the penalty though "Email 2
Log and Header.txt". And it has the same "empty ()".
Lastly, this isn't new, it's been happening for at least the last few
versions you've put out.
Kind Regards,
Brett
X-Assp-Version: 1.9.7.2(0.0.01) on ASSP.nospam
X-Assp-Delay: [email protected] not delayed (auto accepted);
27 Jul 2012 05:57:20 -0400
X-Assp-Message-Score: 15 (Bad IP History for 206.132.3.142)
X-Assp-Message-Totalscore: 15
X-Assp-Whitelisted: Yes ()
X-Assp-Envelope-From:
[email protected]
X-Assp-Intended-For: [email protected]
X-Assp-ID: ASSP.nospam id-34338-03651
Received: from bigfootinteractive.com ([206.132.3.142]
helo=bigfootinteractive.com)
by ASSP.nospam with ESMTP (ASSP 1.9); 27 Jul 2012 05:57:20 -0400
Return-Path: <[email protected]>
DKIM-Signature: v=1; a=rsa-sha1; d=email.chase.com; s=ei; c=simple/simple;
q=dns/txt; [email protected]; t=1343383048;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=DmoF1hF5qP3z6cHrmD7Ir1uOROE=;
b=YglqPP7ruc2CqAWTnWB2RJNnscAwqvoHmdidmLd+dk1dw6YV+6Re5fzz037eKK4w
7Cj+vQO6qoGsaY7bTMvj2npU5gvmRLfHeCv5QKhbKqTmq+R33FEPkOjDUzfw56S1
l/7KtLacpNArjjvnjT6tuXctwXli6PqOZVI+G2aAHAc=;
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=ei; d=email.chase.com;
h=Received:Reply-To:Bounces_to:Message-ID:X-SS:X-BFI:Date:From:Subject:To:MIME-Version:Content-Type;
b=qafRW8NswjeVKprSeE8EbWt1+iCQG1Cg7PYkOq6y9fHhUdsu8DB4nzRfJrAGSGCP
sydf4rLsvnL7T5kbjavFMyLPXLdTgkm9g99xTrC/kB6JCuenPSVUzwihPt4QcyIH
P5bNF4BoyNeNXBhR5amx4IW9VIHe2STzFEJ4WSRgFok=
Received: from [192.168.3.36] ([192.168.3.36:43419] helo=unjdrmmailerpv11)
by pimta08.epsiloninteractive.com (envelope-from
<[email protected]>)
(ecelerity 2.2.2.45 r(34222M)) with ESMTP
id AF/C6-04770-80662105; Fri, 27 Jul 2012 05:57:28 -0400
Reply-To: =?iso-8859-1?B?IkNoYXNlIg==?=
<1a39d2c90layfovciariahhaaaaaaac2suztcwiutiyyaa...@email.chase.com>
Bounces_to: void.1a39d2c90layfovciariahhaaaaaaac2suztcwiutiyyaa...@epsilon.com
Message-ID:
<1a39d2c90layfovciariahhaaaaaaac2suztcwiutiyyaaaaa.5582.3630.unjdrmmailerpv11.dumpsho...@email.chase.com>
X-SS: 1-1-11480280-723686214
X-BFI: 1a39d2c90layfovciariahhaaaaaaac2suztcwiutiyyaaaaa
Date: Fri, 27 Jul 2012 05:56:10 EDT
From: =?iso-8859-1?B?Q2hhc2U=?= <[email protected]>
Subject: Great offers to earn cash back with your Chase Debit Card!
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="ABCD-1a39d2c90layfovciariahhaaaaaaac2suztcwiutiyyaaaaa-EFGH"
Log:
Jul-27-12 08:35:37 id-34339-04214 [VIRUS] 188.138.4.200
<[email protected]> to: [email protected] ClamAV: scanned
9496 bytes in whitelisted message - OK ;
Jul-27-12 08:35:38 id-34339-04214 [WhitelistedOK] 188.138.4.200
<[email protected]> to: [email protected] whitelisted
[ltima chance para participar do Concrete Show virada de tabela hoje] ->
notspam/34339-04214.eml;
Header:
From <[email protected]> Fri, 27 Jul 2012 08:35:38 -0400
X-Connect-IP: 192.168.5.11
X-Envelope-To: <[email protected]>
X-SEF-MessageID: 5315C91E-B8CF-41E5-8FA6-CAAA7A8E8AE2
Return-Path: <[email protected]>
Received: from ASSP [192.168.5.11] by mail.mydomain.com - SurfControl E-mail
Filter ; Fri, 27 Jul 2012 08:35:38 -0400
Received: from server110.akfastpass.com.br by ASSP.nospam with SMTP ; 27 Jul
2012 08:35:36 -0400
Received: ; 27 Jul 2012 12:35:45 -0000
DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=2; s=default;t=1343392545;
c=relaxed/simple;h=From:To:Subject;d=dkim.setdata.com.br;z=From:=20=3D?iso-8859-1?Q?Concrete_Show_South_America_2012?=3D=20<[email protected]>|To:=20<[email protected]>|Subject:=20=3D?iso-8859-1?Q?=3DDAltima_chance_para_participar_do_Concrete_Show_-?=3D=0A=09=3D?iso-8859-1?Q?_virada_de_tabela_hoje?=3D;bh=uoq1oCgLlTqpdDX/iUbLy7J1Wic=;b=Sm2ybR9187T73r2PGPJP/mWwsu0Hd1J6IWomwpnNNfp7xFRIcY+t9xMJsi+GdJoorsdcrejXqjgSKZLpDQK/S9bXebJrMZTRPCYV+LVO9z8Xv9fx743USmDKXwBy9zjC
Date: Fri, 27 Jul 2012 09:35:45 -0300
Message-ID: <[email protected]>
From: Concrete Show South America 2012 <[email protected]>
Subject: Última chance para participar do Concrete Show - virada de tabela hoje
To: <[email protected]>
List-Unsubscribe:
<http://app.aknamkt.com.br/emkt/tracer/?9,944715,6bc87a8e,bdd4>, <mailto:
[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_NextPart_001"
X-Trackmail: [c944715-6bc87a8e:permission]
X-Priority: 3
X-Mailer: Mail Class v2.0
X-Assp-Delay: [email protected] not delayed (auto accepted);27 Jul 2012
08:35:37 -0400
X-Assp-Whitelisted: Yes ()
X-Assp-Envelope-From: [email protected]
X-Assp-Intended-For: [email protected]
X-Assp-ID: ASSP.nospam (id-34339-04214)
X-Assp-Version: 1.9.7.2(0.0.01)
X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1
X-SEF-Processed: 5_5_0_210__2012_07_27_08_35_38
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
