Hello Josef

look at the header :)

213.47.210.34 <[email protected]> to: [email protected] [spam found]
and possibly passing because all in testmode, otherwise blocked 
(BombData: 'Pharma Sc') [Newsletter von Pollenwarndienst at] ->

One  BombData  Regex (Pharma Sc) was triggerd. Maybe you set this also
to score instead of block

Matti


> Hello,

> we have assp running in test mode, the following mail is marked as spam,
> but i don't understand why, the total score for this message is 34 and
> my Low MessageLimit  is 40 and High MessageLimit is 50.
> Any hints this mail isn't Spam.

> 18.06.2010 11:16:59 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] Message-Score: added -10 for
> Home Country Bonus AT (SCICON PHARMA SCIENCE CONSULTING GMBH), total 
> score for this message is now -10
> 18.06.2010 11:17:00 52619-03120 [Worker_1] [DNSBL] 213.47.210.34 
> <[email protected]> to: [email protected] [scoring] DNSBL: neutral, 
> 213.47.210.34 listed in blackholes.five-ten-sg.com l2.apews.org
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] Message-Score: added 34 for
> DNSBL: neutral, 213.47.210.34 listed in blackholes.five-ten-sg.com 
> l2.apews.org, total score for this message is now 24
> 18.06.2010 11:17:00 52619-03120 [Worker_1] [SPF] 213.47.210.34 
> <[email protected]> to: [email protected] [scoring] SPF: pass 
> ip=213.47.210.34 [email protected] helo=mail.polleninfo.org
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] Message-Score: added -10 for
> SPF pass, total score for this message is now 14
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] Regex:BombDataRe 'PB 20: for
> Pharma Sc'
> 18.06.2010 11:17:00 52619-03120 [Worker_1] [BombData] 213.47.210.34 
> <[email protected]> to: [email protected]  (BombData  'Pharma Sc')
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] Message-Score: added 20 for
> BombData: 'Pharma Sc', total score for this message is now 34
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] deleting spamming safelisted
> tuplet: (213.47.210.0,polleninfo.org) age: 1s
> 18.06.2010 11:17:00 52619-03120 [Worker_1] [BombData][testmode] 
> 213.47.210.34 <[email protected]> to: [email protected] [spam found] 
> and possibly passing because all in testmode, otherwise blocked 
> (BombData: 'Pharma Sc') [Newsletter von Pollenwarndienst at] -> 
> /opt/assp/discarded/3120.eml
> 18.06.2010 11:17:00 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] ClamAV: scanned 4950 bytes 
> in  message - OK
> 18.06.2010 11:17:01 52619-03120 [Worker_1] 213.47.210.34 
> <[email protected]> to: [email protected] spam found and passing () 
> [Newsletter von Pollenwarndienst at]
> 18.06.2010 11:17:01 52619-03120 [Worker_1] [MessageOK] 213.47.210.34 
> <[email protected]> to: [email protected] message ok [Newsletter von 
> Pollenwarndienst at] -> /opt/assp/discarded/3120.eml

> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate 
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
> lucky parental unit.  See the prize list and enter to win: 
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Assp-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-user



-- 
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
Geschäftsführer: Henry Haack
HRB Passau Nr. 5678
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to