The DoPenalty option states that 'monitor/messageingscoring' is the correct option to score messages for 'Bad IP Profile' and 'Extreme IP Profile'. That makes sense, but when looking at PBExtremeOK the penalty scoring is actually tied to the DoPenaltyExtreme option (as below.)
pbAdd($fh,$myip,$pbValencePB,"BadProfile",1) if $DoPenaltyExtreme>=2; pbAdd($fh,$myip,$pbeValencePB,"ExtremeProfile",1) if $DoPenaltyExtreme>=2; Shouldn't it actually be pbAdd(....) if $DoPenalty >=2; in both cases? I've run across several cases where messages like '<ip> has bad profile of 100, adding 20' appear in the logs but the penalty is never actually added to the IP score. Regards, Craig ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
