check your settings for:
URIBLmaxweight - URIBLmaxhits
URIBLmaxweight
Thomas
Von: Anders Westin <[email protected]>
An: ASSP development mailing list <[email protected]>
Datum: 26.01.2012 09:09
Betreff: [Assp-test] ASSP version 2.1.2(12010) the URI que is not
allways checked
Hi all
I have noticed that not all URI registrated for URI check is sent for
test, below is one sample of the problem, (I have several of them)
as you can in the log sevral uri:s is added to the "check que" but only
one of them is rely sent for test (sparkasse.it)
and one of them i blacklisted( 76.79.230.119 is listed at .uribl.com),
sometimes nothing from the "check que" is sent for test
Jan-26-12 02:15:41 [Worker_1] Connected: 80.12.204.198:20040 >
xxx.xxx.xxx.200:25 > xxx.xxx.xxx.198:125
Jan-26-12 02:15:42 [Worker_1] LDAP - found [email protected] in LDAPlist
Jan-26-12 02:15:42 [Worker_1] 80.12.204.198 <[email protected]> accepting
triplet: (80.12.204.0,[email protected],[email protected]) on host
assp.smtp01 waited: 3h 59m 36s
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] Message-Score: added 15 for Bad IP History, total score for
this message is now 15
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI isi-net.it
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered URI isi-net.it for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered URI isi-net.it for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found raw URI/URL @mwinf8902.myorangeoffice.com
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI mwinf8902.myorangeoffice.com
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered TLD URI myorangeoffice.com for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found raw URI/URL myorangeoffice.com
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI myorangeoffice.com
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered TLD URI myorangeoffice.com for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found raw URI/URL @sparkasse.it"
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI sparkasse.it
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered TLD URI sparkasse.it for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found raw URI/URL @isi-net.it>
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI isi-net.it
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered TLD URI isi-net.it for check
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found raw URI/URL http://76.79.230.119
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: found URI 76.79.230.119
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: registered IP-URI 76.79.230.119 for check
Jan-26-12 02:15:47 [Worker_1] Sending DNS(TXT)-query to xxx.xxx.xxx.200 on
multi.surbl.org for URIBL checks on sparkasse.it
Jan-26-12 02:15:47 [Worker_1] Sending DNS(TXT)-query to xxx.xxx.xxx.200 on
black.uribl.com for URIBL checks on sparkasse.it
Jan-26-12 02:15:47 [Worker_1] Commencing URIBL checks on 'sparkasse.it'
Jan-26-12 02:15:47 [Worker_1] Got 2 answers, 2 replies and 0 hits after 0
seconds for URIBL checks on 'sparkasse.it'
Jan-26-12 02:15:47 [Worker_1] Got OK replies from (black.uribl.com) -
NOTOK replies from () for URIBL on 'sparkasse.it'
Jan-26-12 02:15:47 [Worker_1] Completed URIBL checks on 'sparkasse.it'
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] URIBL: lookup returned <1> for sparkasse.it - res: ''
Jan-26-12 02:15:47 [Worker_1] [monitoring] 80.12.204.198
<[email protected]> to: [email protected] HMM-Check has given less than 5
results - using monitoring mode only
Jan-26-12 02:15:47 [Worker_1] [HMM][monitoring] 80.12.204.198
<[email protected]> to: [email protected] info: HMM-Check has taken 0
seconds and has given 0 results
Jan-26-12 02:15:47 [Worker_1] [HMM][monitoring] 80.12.204.198
<[email protected]> to: [email protected] info: Bayesian-Check has taken 0
seconds
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] Bayesian Check [scoring] - Prob: 1.00000 / Confidence:
0.00000 => doubtful.spam
Jan-26-12 02:15:47 [Worker_1] [HMM][monitoring] 80.12.204.198
<[email protected]> to: [email protected] info: got different spam result
for Bayesian and HMM : 1.00000 - 0.00000
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] Message-Score: added 25 for Bayesian Probability: 1.00000,
total score for this message is now 40
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] PB-IP-Score for '80.12.204.198' is 100, added 25 for
Bayesian
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] deleting spamming safelisted tuplet:
(80.12.204.0,isi-net.it) age: 5s
Jan-26-12 02:15:47 [Worker_1] [MessageLimit][lowlimit] 80.12.204.198
<[email protected]> to: [email protected] [spam found] and possibly passing
because messagescore(40) low [Sicurezza ISI NET] ->
/usr/share/assp2/discarded/14000--1295069.eml
Jan-26-12 02:15:47 [Worker_1] [Penalty][lowlimit] 80.12.204.198
<[email protected]> to: [email protected] [spam found] and possibly passing
because messagescore(40) low [Sicurezza ISI NET]
Jan-26-12 02:15:47 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] spam found and passing () [Sicurezza ISI NET]
Jan-26-12 02:15:48 [Worker_1] 80.12.204.198 <[email protected]> to:
[email protected] info: start damping on closing connection (8)
ASSP version 2.1.2(12010)
_________________________________________________________________________________________________________________________________________________
NOTICE: This email and any attachments are for the sole use of the
intended recipient(s) and may contain confidential and privileged
information.
Any unauthorized review, use, disclosure or distribution is prohibited.
If you are not the intended recipient, please notify the sender by reply
email and destroy the original message.
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
