Thanks Dave. I thought of that just after I sent the email.
I've now set it to 2, logging, so that I'll be able to run it through the Mail Analyzer to work out exactly what is happening. Ie what triggers the regex. Thanks, James. On 23/07/2007, at 11:29 AM, Dave Emory wrote: > Set DoBombHeaderRe = 0. > > ----- Original Message ----- > From: James Brown > To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy > Sent: Sunday, July 22, 2007 6:07 PM > Subject: [Assp-user] BombHeaderRe:'' > > > I am getting lots of emails blocked by BombHearderRe: > > > Jul-23-07 09:47:49 [BombHeader] id-8068c11086 209.104.37.135 > <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] BombHeaderRe:'' > > > Jul-23-07 09:53:09 [BombHeader] id-8389c12337 61.8.115.193 > <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] BombHeaderRe:'' > Glenfords_Discount_Tool_Centres_Head_Office_ > > > I am using the default bombHeaderRe of: > > > \d\s+(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s+\d\d\d\d\s+ > \d\d:\d\d(:\d\d)?\s+[+\-]\d\d[6-9]\d > > > Any suggestions as to how to fix this? > > > Thanks, > > > James. > > > > ---------------------------------------------------------------------- > --- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a > browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > > > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > > ---------------------------------------------------------------------- > --- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a > browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
