Hi,

>The blocking seems to happen for whitelisted addresses as well. Maybe these 
>addresses hit a is-whitelisted-time-out.

The same to me. I don't know if there is a chance to bypass mails. I wrote a 
mail to assp-users few days ago (see below). This is a special case.
I put all the IPs to white list and noprocessing last week. I added them to 
noBlockingIPs today. Maybe I get rid of the IP-Scoring.

Is it a wrong behaviour or is there a way to prevent processing mails from 
certain servers/clients?

Regards 
Marco


---
Hello,

I'm wondering if I understood this matrix:

[ filtered mail | unfiltered mail ] x [ contributes to whitelist | doesn't 
contribute ] =
filtered & contributes = normal
unfiltered & contributes = spamlover
filtered & doesn't contribute = redlist (does contribute to spam/nonspam 
collections)
unfiltered & doesn't contribute = no processing (also doesn't contribute to 
spam/nonspam collections)

If I put an IP to the nonprocessing list the mails from the server/client 
should not be filtered, right?

We are sending Mails with a fixed IP through our ISPs relayserver1. The header 
is looking like this:

Received: from firstmx (127.0.0.1)                                         by 
ourserverexchange (127.0.0.1) 
Received: from firtsmx [firstmx IP]                                        by 
assp.local
Received: from releayserver1 [releayserver1 IP]            by firstmx
Received: from client [our external IP])                               by 
releayserver 1
Received: client


I decided to put [our external IP] to the noprocessing list and to the white 
list.

X-Assp-Version: 2.1.2(11338) on assp.local
X-Assp-Delay: not delayed (auto accepted); 7 Dec 2011 10:12:45 +0100
X-Assp-Message-Score: 15 (Extreme Bad History (1326))
X-Assp-Received-SPF: neutral (cache) ip=[firstmx IP]
                helo=firstmx
X-Assp-Message/IP-Score: 5 (SPF neutral)
X-Assp-Message/IP-Score: 49 (Bayesian Probability: 0.99933)
X-Assp-Tag: MessageLimit
X-Assp-ID: assp.local m-49165-12813
X-Assp-Detected-RIP: [relayserver1 IP]
X-Assp-Source-IP: [relayserver1 IP]
X-Assp-Spam: YES
X-Assp-Block: NO (all in testmode)
X-Assp-Original-Subject: ** RECOVERY Service Alert memcached Status is OK **
X-Spam-Status: yes
X-Assp-Spam-Reason: MessageScore 69, limit 50
X-Assp-Message-Totalscore: 69

The mails are passing the bayesian check and will taged as spam and gets 15 
more points for Extreme Bad History. How to prevent that assp processes mails 
from several IPs?


Regards Marco



-----Ursprüngliche Nachricht-----
Von: "Robert M. Münch" [mailto:robert.mue...@saphirion.com] 
Gesendet: Sonntag, 11. Dezember 2011 18:01
An: assp-test@lists.sourceforge.net
Betreff: [Assp-test] ASSP 2 / Filtering to hard



Hi, I'm using ASSP-2 for a long time now but since a couple of updates we see, 
that mails are categorized much stricter as spam than before. This leads to 
that quite a lot of mails are rejected that went through / should pass. The 
blocking seems to happen for whitelisted addresses as well. Maybe these 
addresses hit a is-whitelisted-time-out.

Anyway, looking at the spam report, I see that the blocking happen because of 
scoring. I have a level of 50 and false positives have scoring between 50 and 
130.

Is there a way to find out, what single scores an email had when it was 
analyzed?

Is there a way to get a statistics how frequent which scoring rule is used? 
This would help me to see if I can lower the scoring value.

Thanks a lot.

--
Robert M. Münch

http://www.saphirion.com
smarter | better | faster


------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011 Microsoft is holding a special 
Learn Windows Azure training event for developers. It will provide a great way 
to learn Windows Azure and what it provides. You can attend the event by 
watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to