Hi there, A couple of months back I did a few messages about this. The problem went away with an update but all of a sudden it is back :/
DoMSGIDsig is set to block yet some backscatter messages are getting through because they are being scored instead of rejected and aren't going over the threshold. Again the LHS part of the email does not exist so these then become bounce messages that sit in my mail queues until they expire. There are only two examples from this week (included below) which leads me to believe that this is only affecting some messages rather than all as I was previously seeing hundreds per day. All the best, Colin Waring. 2012-11-26 04:27:59 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [SMTP Reply] 250 Accepted 2012-11-26 04:27:59 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [SMTP Reply] 354 Enter message, ending with "." on a line by itself 2012-11-26 04:27:59 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [scoring] SPF: none ip=109.202.17.215 helo=nsk.arconada.ru 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] Regex:BombSubjectRe 'PB 6: for Notification' 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] [BombSubjectRe] 109.202.17.215 to: [email protected] [scoring] (BombSubjectRe 'Notification') 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] Message-Score: added 6 for BombSubjectRe 'Notification', total score for this message is now 6 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] HMM Check [scoring] - Prob: 0.00000 => ham 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] Bayesian Check [scoring] - Prob: 0.00000 => ham 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] info: found bounced sender: <> and recipient: <[email protected]> without valid MSGID-signature 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] [MSGID-sig] 109.202.17.215 to: [email protected] MSGID-sig check failed for bounce sender 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] Message-Score: added 40 (fbmtvValencePB) for MSGID-sig check failed for bounce sender , total score for this message is now 46 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] [MSGID-sig][lowlimit] 109.202.17.215 to: [email protected] [spam found] and possibly passing because messagescore(46) low [Delivery Status Notification Failure] 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [Plugin] calling plugin ASSP_AFC 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [Plugin] calling plugin ASSP_DCC 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] [MessageOK] 109.202.17.215 to: [email protected] message ok [Delivery Status Notification Failure] 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [SMTP Reply] 250 OK id=1TcqIZ-0007Wv-BL 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [TLS-out] 109.202.17.215 to: [email protected] [SMTP Reply] 221 mail.smtphost.co.uk closing connection 2012-11-26 04:28:00 m1-04078-13239 [Worker_1] [SSL-out] 109.202.17.215 to: [email protected] finished message - received DATA size: 3.53 kByte - sent 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [SMTP Reply] 250 Accepted 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [SMTP Reply] 354 Enter message, ending with "." on a line by itself 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [scoring] SPF: none ip=212.176.125.145 helo=mail.genbank.ru 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] Regex:BombSubjectRe 'PB 6: for Notification' 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] [BombSubjectRe] 212.176.125.145 to: [email protected] [scoring] (BombSubjectRe 'Notification') 2012-11-27 06:50:06 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] Message-Score: added 6 for BombSubjectRe 'Notification', total score for this message is now 6 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] HMM Check [scoring] - Prob: 0.00000 => ham 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] Bayesian Check [scoring] - Prob: 0.00000 => ham 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] info: found bounced sender: <> and recipient: <[email protected]> without valid MSGID-signature 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] [MSGID-sig] 212.176.125.145 to: [email protected] MSGID-sig check failed for bounce sender 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] Message-Score: added 40 (fbmtvValencePB) for MSGID-sig check failed for bounce sender , total score for this message is now 46 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] [MSGID-sig][lowlimit] 212.176.125.145 to: [email protected] [spam found] and possibly passing because messagescore(46) low [Delivery Status Notification Failure] 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [Plugin] calling plugin ASSP_AFC 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [Plugin] calling plugin ASSP_DCC 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] [MessageOK] 212.176.125.145 to: [email protected] message ok [Delivery Status Notification Failure] 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [SMTP Reply] 250 OK id=1TdEze-0004ea-8c 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [TLS-out] 212.176.125.145 to: [email protected] [SMTP Reply] 221 mail.smtphost.co.uk closing connection 2012-11-27 06:50:07 m1-99006-11513 [Worker_2] [SSL-out] 212.176.125.145 to: [email protected] finished message - received DATA size: 7.09 kByte - sent DATA size: 7.09 kByte ------------------------------------------------------------------------------ Keep yourself connected to Go Parallel: INSIGHTS What's next for parallel hardware, programming and related areas? Interviews and blogs by thought leaders keep you ahead of the curve. http://goparallel.sourceforge.net _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
