Hello,

As I din't ger any reply on this, I post it again:


I   am   not   shure  if  my  Problem  is  connectet  to  the  version
(1.3.3.2(38)) or a
general setup problem, so I postet it to the test list.
I am not shure, but I don't think that I had this problem in (26)

It  looks as mails from an relaying server in ispip get stuck if it is
in BombDataRegEx

85.10.201.53 is in ispip
I  had  to remove some letters from the BombDataRegEx in the log, as it was 
blocked by
the mailing list - it was these litte blue pill -
The mail was already tagged as spam from the relaying Spamassasin.

Aug-17-07 10:29:54 id-9394c12012 85.10.201.53 <> to: [EMAIL PROTECTED] 
recipient accepted: [EMAIL PROTECTED]
Aug-17-07 10:29:55 id-9394c12012 85.10.201.53 <> to: [EMAIL PROTECTED] 
Message-Score: 0+15 (bombSuspiciousRe) 
Aug-17-07 10:29:55 id-9394c12012 85.10.201.53 <> to: [EMAIL PROTECTED]  
Regex:Suspicious 'X-Spam-Level: *****'
Aug-17-07 10:29:55 [BombData][scoring] id-9394c12012 85.10.201.53 <> to: [EMAIL 
PROTECTED] scoring BombDataRegEx: 'Via '
Aug-17-07 10:29:55 [BombData][scoring] id-9394c12012 85.10.201.53 <> to: [EMAIL 
PROTECTED] Message-Score: 15+80 (BombData) 
Aug-17-07 10:29:55 [URIBL][montoring] id-9394c12012 85.10.201.53 <> to: [EMAIL 
PROTECTED] URIBL montoring Received-URIBL: pass
Aug-17-07 10:29:55 [MessageLimit] id-9394c12012 85.10.201.53 <> to: [EMAIL 
PROTECTED] Message Limit  _SPAM_failure_notice_

The connection stays open until timeout. No further logentry with id 
id-9394c12012


Matti






- 
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de

Registergericht Passau HRB 5678
USt. ID: DE195625715



Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit 
faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit:
http://www.inn.de 


-- Ausgehende E-Mail wurde auf Viren gescannt  --


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/assp-test



Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit 
faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit:
http://www.inn.de 


-- Ausgehende E-Mail wurde auf Viren gescannt  --


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to