Re: [Assp-test] PTR missing and PTR invalid don't score
Guten Morgen Fritz, sorry for that missinterpretation. Update works as expected: Sep-19-12 16:58:17 34806-00067 [PTRmissing] 49.248.95.155 kameronstoth...@sky.com to: ... [scoring:50] (PTR missing); Sep-19-12 16:58:17 34806-00067 49.248.95.155 kameronstoth...@sky.com to:... Message-Score: added 50 for PTR missing, total score for this message is now 1074; Thanks for your help so far! Looking for the PTR entries I found the same behaviour with BlackDomains: Sep-19-12 19:04:58 34807-00114 [BlackDomain] 87.139.70.22 i...@blacklisted.com to: i...@ourdomain.de [scoring:512] (blacklisted domain 'blacklisted.com'); Sep-19-12 19:04:58 34807-00114 [VIRUS] 87.139.70.22 i...@blacklisted.com to: i...@ourdomain.de ClamAV: scanned 2497 bytes in message - OK ; Sep-19-12 19:04:59 34807-00114 87.139.70.22 i...@blacklisted.com to: i...@ourdomain.de Bayesian Check [scoring] - Prob: 0.02558 = ham; Sep-19-12 19:04:59 34807-00114 [MessageOK] 87.139.70.22 i...@blacklisted.com to: i...@ourdomain.de message ok [Subject] - c:/assp/mailcopy\notspam/mail12345.eml; Sep-19-12 19:04:59 34807-00114 87.139.70.22 i...@blacklisted.com to: i...@ourdomain.de [SMTP Reply] 250 Message accepted for delivery; while BlackAddress seems to work: Sep-19-12 20:30:29 34807-00136 188.173.41.109 donotre...@next-gen.ro to: i...@ourdomain.de Message-Score: added 307 for blackish blackAddresses '@next-gen.ro', total score for this message is now 307; Sep-19-12 20:30:29 34807-00136 [Blackish] 188.173.41.109 donotre...@next-gen.ro to: i...@ourdomain.de [scoring:307] -- blackish blackAddresses '@next-gen.ro'; DoBlackDomain=score blValencePB=512,1024 bltestMode=On Any hints on that ? Thank you very much for support! Regards Dieter -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://ad.doubleclick.net/clk;258768047;13503038;j? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] PTR missing and PTR invalid don't score
same bug - different location. should be fixed in 1.9.7.9 (0.0.06) http://downloads.sourceforge.net/project/assp/ASSP%20Installation/Auto Update/ASSP1dev/assp.pl.gz there is also a new rebuildspamdb.pl http://downloads.sourceforge.net/project/assp/ASSP%20Installation/Auto Update/ASSP1dev/rebuildspamdb.pl.gz -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://ad.doubleclick.net/clk;258768047;13503038;j? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] PTR missing and PTR invalid don't score
Hi, Fritz, isn't this 2.0 ? I'm still using 1.9 Mit freundlichen Grüßen i.V. Dieter Centner __ PAZDERA AG IT-Leiter Kronacher Straße 34 95119 Naila Telefon: +49 9282 930-231 Fax: +49 9282 930-111 E-Mail: dcent...@pazdera.de __ Sitz der Gesellschaft: Coburg Handelsregister Coburg HRB 4320 Aufsichtsratsvorsitzender: Holger Köthe Vorstand: Michael Pazdera (Vors.) Re: [Assp-test] PTR missing and PTR invalid don't score From: Fritz Borgstedt fb@iw... - 2012-09-13 13:26 ASSP development mailing list assp-test@... schrei bt: But it seems that the PTR-Lookup doesn't add the score to the totals: That is a bug. Thanks. Please try: http://downloads.sourceforge.net/project/assp/ASSP%20Installation/Auto Update/ASSP1dev/assp.pl.gz -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] PTR missing and PTR invalid don't score
I gave you a link for V1: ASSP1 The % 20 in the URL represents a space -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
[Assp-test] PTR missing and PTR invalid don't score
I have setup assp ( 1.9.3.9 ) to scoring. But it seems that the PTR-Lookup doesn't add the score to the totals: the settings are: ptrTestMode:=1 DoPTRCheck:=3 DoPTRCheckInvalid:=1 invalidPTRRe:=file:files/invalidptr.txt validPTRRe:=static whitePTRRe:= PTRCacheExp:=72 The following parts of the log show, what I mean: Sep-12-12 20:28:23 34747-00367 [PTRmissing] 49.249.55.109 boyce-andersony...@chiprunner.ca to: (mailadress) [scoring:50] (PTR missing); Sep-12-12 20:28:23 34747-00367 [VIRUS] 49.249.55.109 boyce-andersony...@chiprunner.ca to: (mailadress) ClamAV: scanned 1100 bytes in message - OK ; Sep-12-12 20:28:23 34747-00367 49.249.55.109 boyce-andersony...@chiprunner.ca to: (mailadress) Bayesian Check [scoring:45] - Prob: 1.0 = spam; Sep-12-12 20:28:23 34747-00367 49.249.55.109 boyce-andersony...@chiprunner.ca to: (mailadress) Message-Score: added 45 for Bayesian Probability: 1.0, total score for this message is now 45; shouldn't the total score be 95? Sep-12-12 21:38:02 34747-00374 [DNSBL] 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) [scoring:1024] DNSBL: neutral, 109.243.181.242 listed in safe.dnsbl.sorbs.net; Sep-12-12 21:38:02 34747-00374 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) Message-Score: added 1024 for DNSBL: neutral, 109.243.181.242 listed in safe.dnsbl.sorbs.net, total score for this message is now 1073; Sep-12-12 21:38:03 34747-00374 [PTRinvalid] 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) [scoring:50] (PTR invalid 'user-109-243-181-242.play-internet.pl'); Sep-12-12 21:38:03 34747-00374 [VIRUS] 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) ClamAV: scanned 799 bytes in message - OK ; Sep-12-12 21:38:03 34747-00374 [BombData] 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) [scoring:25] -- bombDataRe: ' cialis (25)'; Sep-12-12 21:38:03 34747-00374 109.243.181.242 evelynnmar...@alerton.com to: (mailadress) Message-Score: added 25 for bombDataRe: ' cialis (25)', total score for this message is now 1098; should be 1073+50+25=1148 ?? Mit freundlichen Grüßen i.V. Dieter Centner __ PAZDERA AG IT-Leiter Kronacher Straße 34 95119 Naila Telefon: +49 9282 930-231 Fax: +49 9282 930-111 E-Mail: dcent...@pazdera.de __ Sitz der Gesellschaft: Coburg Handelsregister Coburg HRB 4320 Aufsichtsratsvorsitzender: Holger Köthe Vorstand: Michael Pazdera (Vors.) -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
Re: [Assp-test] PTR missing and PTR invalid don't score
ASSP development mailing list assp-test@lists.sourceforge.net schrei bt: But it seems that the PTR-Lookup doesn't add the score to the totals: That is a bug. Thanks. Please try: http://downloads.sourceforge.net/project/assp/ASSP%20Installation/Auto Update/ASSP1dev/assp.pl.gz -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
