In hopes this might help someone else: If changing the default URBL settings ValidateURIBL from block to score, no score will be added to any URLs -- you must remove the weights from URIBLServiceProvider or (not tested) change URIBLmaxweight > 0.
My ASSP 1.9.1.8(1.1.01) was giving a URIBL score 0 to a message which fails a URIBL check: [URIBL] 65.55.90.111 <[email protected]> to: [email protected] [scoring:0] -- URIBLcache failed: 'baddomain.com'(multi.surbl.org<-127.0.0.64); All of my settings in the URIBL section are default except ValidateURIBL=score and URIBLLog=diagnostic. URIBLServiceProvider=multi.surbl.org=>1|black.uribl.com=>1. So, my URIBLServiceProvider are weighted: each has 1. My URIBLmaxhits=1, but it's ignored because URIBLServiceProvider are weighted according to comment under URIBLmaxhits: "URIBLmaxhits is ignored if the URIBLServiceProvider are classified (weighted), the email is flagged failed if weights for all URIs is greater or equal URIBLvalencPB." URIBLServiceProvider comment says: "The value of the weight can be [...] as a divisor of URIBLmaxweight . Low numbers < 6 are divisors." OK. I have low numbers, so they must be divisors or URIBLmaxweight, but URIBLmaxweight=0. The comment under URIBLmaxweight says: "If not defined or set to zero only URIBLmaxhit will be used to detect a fail or neutral state." So, I guess the only way to untangle this is to not weigh providers: URIBLServiceProvider=multi.surbl.org|black.uribl.com After setting this, I finally start getting some scores: [URIBL] 65.55.90.111 <[email protected]> to: [email protected] [scoring:30] -- URIBLcache failed: 'baddomain.com'(multi.surbl.org<-127.0.0.64); Nikola Lazic ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
