>I was hoping that any email sent to [ mailto:[EMAIL PROTECTED] >]mailto:[EMAIL PROTECTED] would be rejected immediately (and perhaps >ultimately be taken off of the spammers list), and that the source IP >would receive penalty points for sending to the hzlkv email address. > Well, the IP address of the sending server IS receiving penalty >points, but no rejection response is being sent.
The Penalty Trap Address is working as a trap, so ASSP is stopping the message and is replying with 250 OK (ASSP is lying). Penalty Points will be scored and will eventually penalize the IP . The Penalty Box blocks mail based on the IP and the history of this IP. The history is written to a Black Box by scoring events like "is PenaltyTrap Address". The scoring values can be set below. If the score per specified time interval surpasses the threshold the mail is rejected (and the IP is marked for blocking). These IPs continue to get score values up to the Extreme Threshold. After that the IP is denied the connection in a very early stage. The White Box stores IPs which should not be put into the Black Box. The White Box is always activated and works in a similar way for IPs as the Whitelist works for addresses. Is an address in the whitelist or whitedomain, the IP goes into the White Box. Entries in Don't do penalties for these IPs or ISP/Secondary MX Servers will prevent from penalties. You should run it with option 2 to fill White Box,Black Box and exportExtremeFile. Option 2 is also the right choice if you do not want to penalize IP's but rather use Single Message Mode 0 = deactivate, 1 = activate, 2 = logging/scoring/single message Internal Name: DoPenalty Single Message Mode If this option is selected, the PB scores for all checks in one message are combined to determine if the email should be considered as Spam. This allows you to assign different weights to individual checks so that not one check will automatically cause an incoming email to be considered as spam, but rather the combination of any failed checks . The checks ((DNSBL,URIBL,MX/A,PTR...) must be set to modus 3 (score only). If the combined score is greater than Threshold Combined Scores per Message, the mail will be blocked. Internal Name: DoPenaltyMessage ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
