Thomas,

In the old code, I had this fix:

# if ($this->{error}) {$this->{skipnotspam} = 0;return;}
if ($this->{error} && $DoInvalidPTR==1) {$this->{skipnotspam} = 0;return;}

As I recall, it is the difference between Block and Score.

Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)

On 11/10/2014 8:32 PM, Michael Thomas wrote:
> Thomas,
>
> This is actually a very old issue, but I was running a much older
> version. I was not up to date, so I did not want to raise the issue on a
> version that was that old.
>
> I do not want to say "always". I cannot document "always". There are
> times when I see a "PTR Invalid" and that is the only error logged, even
> though there are other obvious things that should have been logged and
> counted.
>
> In this case, the origin IP address, for which the PTR was invalid, was
> listed in a sub-net in DenyAlways. In fact, it was the very same IP
> address that earned a listing in DenyAlways.
> ========================
> 117.62.9.92/24    # APNIC Dynamic
> ========================
>
> Below are the complete ASSP headers from the message:
> ========================
> X-Assp-ID: mx00-scanner.mathbox.net 88431-04453
> X-Assp-Session: 5A752CAC (mail 1)
> X-Assp-Envelope-From: wglu...@glavo.net
> X-Assp-Intended-For: xx...@xxxxxx.xxx
> X-Assp-Version: 2.4.3(14258) on mx00-scanner.mathbox.net
> X-Assp-Received-SPF: none ip=117.62.9.92 mailfrom=wglu...@glavo.net
> helo=glavo.net
> X-Original-Authentication-Results: mx00-scanner.mathbox.net; spf=none
> X-Assp-Re-InvalidPTRRe: PB 15: for 92.9.62.117.broad.wx.
> X-Assp-Message-Score: 15 (PTR invalid '(matchlength:45)
> 92.9.62.117.broad.wx.js.dynamic.163data.com.cn.')
> X-Assp-IP-Score: 15 (PTR invalid '(matchlength:45)
> 92.9.62.117.broad.wx.js.dynamic.163data.com.cn.')
> X-Assp-Detected-URI: glavo.net(2)
> X-Assp-Spam-Level: ****
> ========================
>
> Also, I checked the Admin Info messages. DenyAlways was clean. No issues
> listed.
>
> Michael Thomas
>


------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to