OK, I've used the "Analyze" tool now on several of these
messages, and they all say that the IP is in the 
denySMTPConnectionsAlways list.

Here's the header of one...

Bryan

>From - Fri Mar 14 10:25:33 2008
X-Account-Key: account2
X-UIDL: 64A67207-2EBF4BE3-B4A2FA22-20DCE041
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:

Received: by curly.laughingj.com from localhost
    (router,SLmail V5.1); Fri, 14 Mar 2008 10:19:32 -0500 
    for <bjarvis>
Received: from mx1.pam-five.com [192.168.1.100]
 by curly.laughingj.com [192.168.1.100]  (SLMail Pro) with SMTP
 id F0347EA77CCB48728D9116995A39D930
 for <[EMAIL PROTECTED]>; Fri, 14 Mar 2008 10:18:18 -0500
Received: from mx1.pam-five.com ([208.76.223.85] helo=mx1.pam-five.com) by
        ASSP.nospam; 14 Mar 2008 10:18:17 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=pam-five.com;
        h=from:to:subject:date:message-id:content-type;
        q=dns/txt; s=s512; bh=ueAon1tCbYOMo962AYv/9phZpus=;
        
b=HoNtJVHvVk/p8LrQCV2TNO4FrIn4PLAQ25OglVSgNUknfjQAkXePohECXreltGHkpIZP9IE/ut
Ypj/+oxex2Fg==;
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple;
        s=s512; d=pam-five.com;
        
b=drr5wzmTSNgfAyu9MLWwd4Z09MqCSTKDzZ5Uteja0YjNsbNsfdy+rDX+h7HOG6jiz5ppSFJA5Z
wCXtS6EY12jA==;
Received: from mx1.pam-five.com [208.76.223.85] by pam-five.com
[208.76.223.85];
  Fri, 14 Mar 2008 11:00:40 EST
MIME-Version: 1.0
From: Wipe Your Debt  <[EMAIL PROTECTED]>
To: "" <[EMAIL PROTECTED]>
Subject: [SPAM] [Bayesian][testmode] Let us do the dirty work on your DEBT
Date: Fri, 14 Mar 2008 11:00:40 EST
Message-ID: <[EMAIL PROTECTED]>
X-Mailer: 3.5.0-34 [Mar  6 2008, 05:48:33]
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Assp-Delay: delayed for 7m 25s; 14 Mar 2008 10:18:17 -0500
X-Assp-Received-RWL: not listed  rwl=none; client-ip=208.76.223.85
X-Assp-Received-SPF: pass - client-ip=208.76.223.85;
[EMAIL PROTECTED];
        helo=mx1.pam-five.com;
X-Assp-Received-DNSBL: pass
X-Assp-Received-URIBL: pass
X-Assp-Score: 20 (Bayesian)
X-Assp-Bayes-Confidence: 0.89297
X-Assp-Spam-Prob: 1.00000
X-Assp-Tag: Bayesian
X-Assp-Envelope-From: [EMAIL PROTECTED]
X-Assp-Intended-For: [EMAIL PROTECTED]
X-Assp-Version: 1.3.3.8()
X-Assp-Spam: YES
X-Assp-Block: NO (Testmode)
X-Assp-ID: id-7897c6424
X-Assp-Spam-Reason: Bayesian Spam
X-Assp-Totalscore: 20
X-SLUIDL: 64A67207-2EBF4BE3-B4A2FA22-20DCE041
Status: RO
 


======================================================
Bryan Jarvis                     cell: (972) 768-2002
http://www.laughingj.com
http://www.lifeandfiresafety.com
           PRIDE      HONOR   INTEGRITY

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fritz
Borgstedt
Sent: Friday, March 14, 2008 09:01
To: 'Questions and Answers for users of ASSP Anti-Spam SMTP Proxy'
Subject: Re: [Assp-user] Questions on denySMTPConnectionsFrom and /or
denySMTPConnectio

Logging is controlled by denySMTPLog
Did you try the "Analyze" tool?


PS.: 
Please remove the value in "Bayesian Confidence Threshold".


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to