another example Jul-23-07 06:06:59 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] recipient accepted: [EMAIL PROTECTED] Jul-23-07 06:06:59 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring Regex:BombHeader 'windows-1250' Jul-23-07 06:06:59 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: 0+10 (BombHeaderRe) Jul-23-07 06:06:59 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Regex:Red 'windows-1250' Jul-23-07 06:06:59 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring Invalid HELO: 'pool-71-250-39-118.nwrknj.east.verizon.net' Jul-23-07 06:07:00 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring PTR invalid: pool-71-250-39-118.nwrknj.east.verizon.net Jul-23-07 06:07:00 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] scoring Regex:BombRaw 'Subject: cilia conflagra' Jul-23-07 06:07:00 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] URIBL scoring Received-URIBL: pass Jul-23-07 06:07:00 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] ClamAV: scanning 952 bytes done OK Jul-23-07 06:07:01 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Bayesian Check Prob: 1.00000 => spam Jul-23-07 06:07:01 71.250.39.118 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] message ok
message ok (?). should it not be rejected because it passed the score.? Graziano > Hello > > why messages like these are passing considering that I have > Low Threshold for Combined Scores per Message 25 > High Threshold for Combined Scores per Message 30 > Bayesian (baysValencePB) 28 > bombValencePB 10 > > 28+10 = 38 the message should not pass > > Jul-23-07 05:46:52 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > scoring > Regex:BombHeader '' > Jul-23-07 05:46:52 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > Message-Score: 0+10 (BombHeaderRe) > Jul-23-07 05:46:52 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > scoring > Valid HELO check: 'fivuli' > Jul-23-07 05:46:52 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > scoring > Invalid HELO: 'fivuli' > Jul-23-07 05:46:53 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > scoring > PTR invalid: dsl88.241-46114.ttnet.net.tr > Jul-23-07 05:46:56 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > URIBL > scoring Received-URIBL: fail (ramtis.com.sc.surbl.org->127.0.0.2; ) > Jul-23-07 05:46:56 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > ClamAV: > scanning 20048 bytes done OK > Jul-23-07 05:46:59 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > Bayesian > Check Prob: 1.00000 => spam > Jul-23-07 05:46:59 88.241.180.34 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > message ok > > > Thanks > Graziano > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
