It looks like the sender address  [EMAIL PROTECTED]  was ignored in a 
regex. Because the report lines should not contain the senders address.

Aug-20-08 17:49:02 [Bayesian] 202.124.241.22 <
[EMAIL PROTECTED]> [spam found] (Bayesian) [Nett 
Partner Offer HP helps cut your costs plus you can win 3500 in marketing 
expertise] 

At the moment I can not find why! It will take some time to find this!

Thomas




James Brown <[EMAIL PROTECTED]> 
Gesendet von: [EMAIL PROTECTED]
21.08.2008 07:20
Bitte antworten an
ASSP development mailing list <assp-test@lists.sourceforge.net>


An
ASSP development mailing list <assp-test@lists.sourceforge.net>
Kopie

Thema
[Assp-test] ASSP-Block-Report - finding wrong log lines?






Version 2, 5.10

Just got an email from one of my users saying that his block report had a 
line from the logs which is an email destined for another email address. 
See his email below, which includes the block report he received.

The log at this time is:

Aug-20-08 17:49:01 id-18530-02139 [Worker_3] 202.124.241.22 <
[EMAIL PROTECTED]> to: [EMAIL PROTECTED] 
Message-Score: total for this message is 5, added 5 for SPF none 
Aug-20-08 17:49:02 id-18530-02139 [Worker_3] 202.124.241.22 <
[EMAIL PROTECTED]> to: [EMAIL PROTECTED] 
Bayesian Check  - Prob: 0.99962 => spam
Aug-20-08 17:49:02 id-18530-02139 [Worker_3] 202.124.241.22 <
[EMAIL PROTECTED]> to: [EMAIL PROTECTED] 
Message-Score: total for this message is 30, added 25 for Bayesian 
Probability: 0.9996 
Aug-20-08 17:49:02 id-18530-02139 [Worker_3] [Bayesian] 202.124.241.22 <
[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam 
found] (Bayesian) [Nett Partner Offer HP helps cut your costs plus you can 
win 3500 in marketing expertise] -> /Applications/assp//spam/2139.eml

Am I reading this correctly?

Thanks,

James.

Begin forwarded message:

From: Edward Brown <[EMAIL PROTECTED]>
Date: 21 August 2008 3:06:03 PM
To: James Brown <[EMAIL PROTECTED]>
Subject: [Fwd: ASSP-Block-Report for the last 5 days]

Hi. Got the email about the new version. So I figured I'd have a look if 
any emails to me had bounced (didn't expect them to have, but thought I'd 
try it anyway).

I've attached the reply, it looks like an email to Cam but it says 1 
blocked email sent to me.... does it make sense to you?

Ed.

From: [EMAIL PROTECTED]
Date: 21 August 2008 3:02:36 PM
To: [EMAIL PROTECTED]
Subject: ASSP-Block-Report for the last 5 days




Aug-20-08 17:49:02 [Bayesian] 202.124.241.22 <
[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam 
found] (Bayesian) [Nett Partner Offer HP helps cut your costs plus you can 
win 3500 in marketing expertise] 



46678 lines analysed in 2 logfiles


1 blocked emails found for [EMAIL PROTECTED] in the last 5 days
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's 
challenge
Build the coolest Linux based applications with Moblin SDK & win great 
prizes
Grand prize is a trip for two to an Open Source event anywhere in the 
world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test



DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to