What adjustment should I make here to catch more of these? This message had so much wrong with it that I can't believe it got through...
- Bob Coffman Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] [isbounce] 5.116.246.132 bounce message detected Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 Message-Score: added 5 (fiphValencePB) for Suspicious HELO - contains IP: '[5.114.196.25]', total score for this message is now 5 Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 [scoring] (Suspicious HELO - contains IP: '[5.114.196.25]') Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 Message-Score: added 5 (fiphmValencePB) for IP in HELO '[5.114.196.25]' does not match IP in connection '5.116.246.132' , total score for this message is now 10 Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 [scoring] (IP in HELO '[5.114.196.25]' does not match IP in connection '5.116.246.132' ) Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 spambomb Regex: invalidFormatHeloRe 'PB 5: for 5.114.196' Nov-21-16 17:03:06 m1-65786-05105 [Worker_2] 5.116.246.132 Message-Score: added 5 for invalid HELO: '[5.114.196.25]', total score for this message is now 15 Nov-21-16 17:03:08 m1-65786-05105 [Worker_2] 5.116.246.132 to: recipi...@mydomain.com info: skip SPF check - domain [5.114.196.25] is not a FQDN Nov-21-16 17:03:08 m1-65786-05105 [Worker_2] 5.116.246.132 to: recipi...@mydomain.com Message-Score: added 10 for Foreign IP-Country IR (IRAN CELL SERVICE AND COMMUNICATION COMPANY), total score for this message is now 25 Nov-21-16 17:03:08 m1-65786-05105 [Worker_2] [PTRmissing] 5.116.246.132 to: recipi...@mydomain.com [scoring] (PTR missing) - Cache Nov-21-16 17:03:08 m1-65786-05105 [Worker_2] 5.116.246.132 to: recipi...@mydomain.com Message-Score: added 10 (ptmValencePB) for PTR missing, total score for this message is now 35 Nov-21-16 17:03:10 m1-65786-05105 [Worker_2] 5.116.246.132 to: recipi...@mydomain.com Bayesian Check - Prob: 0.00000 => ham - answer/query relation: 68% of 25 Nov-21-16 17:03:10 m1-65786-05105 [Worker_2] 5.116.246.132 to: recipi...@mydomain.com [Plugin] calling plugin ASSP_AFC Nov-21-16 17:03:10 m1-65786-05105 [Worker_2] [MessageOK] 5.116.246.132 to: recipi...@mydomain.com message ok [Invoice 1F34139] ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
