Hi Thomas,
strange thing I have noticed in ASSP maillog
(see attached maillog.txt).
Messages with ID m1-24609-00874 and m1-24609-10953 stored under the
same filename - notspam/Re--174757.eml.
At that, why [spam found] message stored under notspam folder?
ASSP version 2.1.2(11321), Perl version 5.010001.
Thanks in advance.
Mike.
Nov-24-11 10:50:09 m1-24609-12146 [Worker_7] 82.144.192.10
<[email protected]> info: found message size announcement: 5.47 kByte
Nov-24-11 10:50:09 m1-24609-12146 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] Whitelisted sender
address: [email protected]
Nov-24-11 10:50:09 m1-24609-12146 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] info: removed
MSGID-signature from header
Nov-24-11 10:50:09 m1-24609-12146 [Worker_7] [MessageOK] 82.144.192.10
<[email protected]> to: [email protected] message ok -
(whitelistdb) - [Re] -> /usr/local/share/assp/notspam/Re--174755.eml
Nov-24-11 10:50:09 m1-24609-06764 [Worker_7] 82.144.192.10
<[email protected]> info: found message size announcement: 5.46 kByte
Nov-24-11 10:50:09 m1-24609-06764 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] Whitelisted sender
address: [email protected]
Nov-24-11 10:50:09 m1-24609-06764 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] info: removed
MSGID-signature from header
Nov-24-11 10:50:09 m1-24609-06764 [Worker_7] [MessageOK] 82.144.192.10
<[email protected]> to: [email protected] message ok -
(whitelistdb) - [Re] -> /usr/local/share/assp/notspam/Re--174756.eml
Nov-24-11 10:50:09 m1-24609-00874 [Worker_7] 82.144.192.10
<[email protected]> info: found message size announcement: 5.46 kByte
Nov-24-11 10:50:09 m1-24609-00874 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] Whitelisted sender
address: [email protected]
Nov-24-11 10:50:09 m1-24609-00874 [Worker_7] 82.144.192.10
<[email protected]> to: [email protected] info: removed
MSGID-signature from header
Nov-24-11 10:50:09 m1-24609-00874 [Worker_7] [MessageOK] 82.144.192.10
<[email protected]> to: [email protected] message ok -
(whitelistdb) - [Re] -> /usr/local/share/assp/notspam/Re--174757.eml
Nov-24-11 10:50:09 m1-24609-10953 [Worker_7] 82.144.192.10 <[email protected]>
info: found message size announcement: 41.46 kByte
Nov-24-11 10:50:09 m1-24609-10953 [Worker_7] 82.144.192.10 <[email protected]>
to: [email protected] Message-Score: added 20 for blacklisted domain
'@zeffo.biz', total score for this message is now 20
Nov-24-11 10:50:09 m1-24609-10953 [Worker_7] [BlackDomain] 82.144.192.10
<[email protected]> to: [email protected] [spam found] (blacklisted domain
'@zeffo.biz') [1 10] -> /usr/local/share/assp/notspam/Re--174757.eml;
Nov-24-11 10:50:10 m1-24609-10953 [Worker_7] 82.144.192.10 <[email protected]>
to: [email protected] [SMTP Error] 554 5.7.1 Mail appears to be unsolicited
-- send error reports to [email protected]
Nov-24-11 10:50:10 m1-24609-10953 [Worker_7] 82.144.192.10 <[email protected]>
to: [email protected] [SMTP Status] 451 4.7.1 Please try again later
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure
contains a definitive record of customers, application performance,
security threats, fraudulent activity, and more. Splunk takes this
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
