ASSP v1.2.6(44) When checking my logs for inconsistencies, I noticed issues regarding PB scoring and session logging. This is most noticeable for me regarding PayPal spoofs. First, messages that matched NP but failed SPF are not accumulating a PB score. Second, although the message was rejected for SPF fail, "message proxied without processing" is being logged:
---------- Nov-30-06 03:26:25 Connected: 207.59.120.226:39844 -> 127.0.0.1:25 -> 127.0.0.1:26 Nov-30-06 03:26:25 207.59.120.226 <[EMAIL PROTECTED]> whitelisting triplet: (207.59.120.0,[EMAIL PROTECTED],[EMAIL PROTECTED]) waited: 15m 21s Nov-30-06 03:26:25 207.59.120.226 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Noprocessing RE: 'From: "PayPal Service"<[EMAIL PROTECTED]' Nov-30-06 03:26:27 207.59.120.226 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] failed SPF checks IMPORTANT_PayPal_Security_Measures_PP_052_CA_788_ Nov-30-06 03:26:27 207.59.120.226 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] deleting spamming whitelisted tuplet: (207.59.120.0,paypal.com) age: 2s Nov-30-06 03:26:27 207.59.120.226 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] message proxied without processing - (no bad attachments) ---------- If it is any help, the SPF fail in this example is a softfail - but I have SPFsoftfail <./,DanaInfo=parcel.massbar.org,Port=55555+#SPFsoftfail> enabled. Is anyone else seeing this? ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
