what is your setting of 'spamMSLog' Thomas
Von: aquilinux <aquili...@gmail.com> An: For Users of ASSP <assp-user@lists.sourceforge.net> Datum: 27.11.2014 15:04 Betreff: [Assp-user] Where is my spam mail? I often have problems with mails blocked by MessageScore if triggered after by PluginAll. The link to the spam folder is missing from the logs, therefore the block report is unable to locate the file on the system. so, the report is missing the resend link. in these cases (i thought this was fixed some time ago but is not) i would manually release the file via GUI (becuse the message was already blocked by MessageLimit - before the Plugin routine). in this case i'm posting to your attention, the message has been blocked only by MessageLimit after PluginAll, precisely by the bayesian scan triggered by ASSP_OCR. well, there are two weird things: 1) where is the mail? Losing emails is a very big problem for an antispam system (and here again i'm raising a bug on MessageLimit reached after PluginAll) 2) ASSP_OCR is set to monitoring (i had the same case some time ago and i tryed to set ASSP_OCR to monitor as a workaround) so, it should not interfere on scoring. i have the same issue with other Plugins (DCC and RAZOR). the first issue i had about the missing resend link in report was for DCC. even setting it to monitoring didn't help. now i realize it is affecting all plugins disregarding for them being in monitor state. the only workaround is to disable the check. i'm running ASSP version 2.4.4(14296) on Debian. here is the mail log: Nov-25-14 17:00:55 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> [SMTP Reply] 250 2.1.0 Ok Nov-25-14 17:00:55 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [SMTP Reply] 250 2.1.5 Ok Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [SMTP Reply] 354 End data with <CR><LF>.<CR><LF> Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com DKIM-Signature found Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Message-Score: added -5 for 207.126.144.0 in griplist (0.00), total score for this message is now -5 Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Message-Score: added -15 (pbwValencePB) for In Penalty White Box, total score for this message is now -20 Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Message-Score: added -15 (pbwValencePB) for (OIP: 209.85.220.176) In Penalty White Box, total score for this message is now -35 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com HMM Check [scoring] - Prob: 1.00000 => spam Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Message-Score: added 49 for HMM Probability: 1.0000, total score for this message is now 14 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com info: removed MSGID-signature from header Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [Plugin] calling plugin ASSP_AFC Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com info: 2 attachments found for Level-1 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [Plugin] calling plugin ASSP_DCC Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [Plugin] calling plugin ASSP_Razor Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com razor message [check]: Razor-Agents v2.84 starting razor-check Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com razor message [check]: mail 1 is not known spam. Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: (att) file text2.xlb found in mime part 2 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: (att) file text3.xlb found in mime part 3 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: (att) file image001.jpg found in mime part 4 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: (att) file ~WRD099.jpg found in mime part 5 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: OCR(2.20) (TextFile(text2.xlb), TextFile(text3.xlb)) data extracted Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com ASSP_OCR: Plugin(2.20) successful called for runlevel 'complete mail'! Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Bayesian Check [scoring] - Prob: 1.00000 => spam Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com Message-Score: added 49 for Bayesian Probability: 1.00000, total score for this message is now 63 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com info: the setting of 'UseAvClamd' (block) is temporarily overwritten by the 'DoASSP_OCR' setting of (monitor) Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [MessageLimit] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com mail blocked by MessageScore-check after Plugin all - reason MessageScore 63, limit 50 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [MessageLimit] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [spam found] (MessageScore 63, limit 50) [MESSAGE SUBJECT HERE]; Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [SMTP Reply] 250 OK Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <sen...@senderdomain.com> to: recipi...@mydomain.com [SMTP Reply] 221 <assp2.europassistance.it> closing thanks for helping! regards, aqx -- "Madness, like small fish, runs in hosts, in vast numbers of instances." Nessuno mi pettina bene come il vento. ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
