----- Original Message ----- From: "Sony" <[email protected]> To: "assp-test" <[email protected]> Sent: Friday, January 30, 2009 9:33 AM Subject: [Assp-test] 1.5.1 rc 01 log issue
> Please see below where the first time the IP address was scored for a trap > address, there's no reason inside the parentheses following "after adding > 200". A few seconds later, the score is increased again, and this time > there's the reason inside the parentheses. This probably started in the > first 1.5.0 code. > > Jan-30-09 09:04:44 Connected: 83.11.233.161:4780 -> 192.168.0.5:25 -> > 192.168.0.5:2525 > Jan-30-09 09:04:45 PB: trap address [email protected] found > Jan-30-09 09:04:45 ID-35085-06893 [Trap] 83.11.233.161 > <[email protected]> penalty trap address: > [email protected] > Jan-30-09 09:04:45 ID-35085-06893 83.11.233.161 <[email protected]> > IP-Score for '83.11.233.0' is now 200, after adding 200 () > Jan-30-09 09:04:45 Disconnected: 83.11.233.161 > Jan-30-09 09:04:47 Connected: 83.11.233.161:4873 -> 192.168.0.5:25 -> > 192.168.0.5:2525 > Jan-30-09 09:04:48 PB: trap address [email protected] found > Jan-30-09 09:04:48 ID-35088-08084 [Trap] 83.11.233.161 > <[email protected]> penalty trap address: [email protected] > Jan-30-09 09:04:48 ID-35088-08084 83.11.233.161 <[email protected]> > IP-Score for '83.11.233.0' is now 400, after adding 200 > (penaltytrap:[email protected]) > Jan-30-09 09:04:48 Disconnected: 83.11.233.161 > Similar logging is happening for another IP scoring reason as well: Jan-30-09 09:45:22 Connected: 76.76.100.237:38320 -> 192.168.0.5:25 -> 192.168.0.5:2525 Jan-30-09 09:45:22 [email protected] matches [email protected] in LocalAddresses_Flat Jan-30-09 09:45:22 ID-37522-00099 76.76.100.237 <[email protected]> accepting triplet: (76.76.100.0,#-#[email protected],crem...@chewtoy .com) waited: 9m 3s Jan-30-09 09:45:22 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] recipient accepted: [email protected] Jan-30-09 09:45:23 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] MessageScore is now 40, after adding 40 (Blocked Country CA - Interweb Media) Jan-30-09 09:45:23 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] IP-Score for '76.76.100.0' is now 40, after adding 40 () Jan-30-09 09:45:23 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] [scoring] Blocked Country CA - Interweb Media Jan-30-09 09:45:23 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] ClamAV: scanned 7532 bytes in message - OK Jan-30-09 09:45:24 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] Bayesian Check - Prob: 1.00000 => spam Jan-30-09 09:45:24 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] MessageScore is now 90, after adding 50 (Bayesian Probability: 1.0000) Jan-30-09 09:45:24 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] IP-Score for '76.76.100.0' is now 90, after adding 50 (Bayesian Probability: 1.0000) Jan-30-09 09:45:24 ID-37522-00099 [Bayesian] 76.76.100.237 <[email protected]> to: [email protected] [spam found] (Bayesian) -> d:\assp/discarded/37522.eml; Jan-30-09 09:45:24 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] deleting spamming safelisted tuplet: (76.76.100.0,vzifbu.moogoocrunch.com) age: 2s Jan-30-09 09:45:24 ID-37522-00099 76.76.100.237 <[email protected]> to: [email protected] [SMTP Error] 554 Mail appears to be unsolicited -- send error reports to [email protected] Jan-30-09 09:45:24 Disconnected: 76.76.100.237 ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
