> -----Original Message-----
> From: Fritz Borgstedt [mailto:[email protected]]
> Sent: Friday, July 27, 2012 9:46 AM
> To: ASSP development mailing list
> Subject: Re: [Assp-test] ASSP 1.9.7.2 Scoring
>
> How did you whitelist it.
> Are your configuration allow viruscheck for whitelistedt?
More than likely, it was whitelisted by forwarding it to
"[email protected]" . I have it setup to whitelist when sent
there.
Scan Whitelisted Senders is checked. We can't completely trust them,
now can we? :-) People's accounts are getting hacked all the time and
you never know what might get sent through.
Attached, please find another example. This one is from Amazon mail
servers. The whitelisted address is: "[email protected]" and
not
"00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000000@amazonses.
com".
I know, 6 months or so ago, I had issues with ASSP not recognizing
addresses that were whitelisted. After a few go arounds with you, you
were able to fix it and it's been working beautifully ever since,
thanks! Any chance this new thing, with the empty (), is linked to that
old one?
Kind Regards,
Brett
Log:
Jul-27-12 09:31:32 id-34339-04638 199.255.194.132
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
info: found message size announcement: 5.10 kByte;
Jul-27-12 09:31:32 id-34339-04638 199.255.194.132
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
to: [email protected] Message-Score: added 15 for Bad IP History for
199.255.194.132, total score for this message is now 15;
Jul-27-12 09:31:32 id-34339-04638 [VIRUS] 199.255.194.132
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
to: [email protected] ClamAV: scanned 5402 bytes in whitelisted message - OK ;
Jul-27-12 09:31:32 id-34339-04638 [WhitelistedOK] 199.255.194.132
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
to: [email protected] whitelisted [Your Free Trial of Keeper Backup Has Been
Activated] -> notspam/34339-04638.eml;
Header:
From
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
Fri, 27 Jul 2012 09:31:32 -0400
X-Connect-IP: 192.168.5.11
X-Envelope-To: <[email protected]>
X-SEF-MessageID: 93E0225E-7ADB-47EA-BE8E-C7CC0A77D448
Return-Path:
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com>
Received: from ASSP [192.168.5.11] by mail.mydomain.com - SurfControl E-mail
Filter (5.5.0); Fri, 27 Jul 2012 09:31:32 -0400
Received: from a194-132.smtp-out.amazonses.com ([199.255.194.132]
helo=a194-132.smtp-out.amazonses.com) by ASSP.nospam with ESMTP (ASSP
1.9);
27 Jul 2012 09:31:32 -0400
Return-Path:
00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/html
X-Mailer: MIME::Lite 3.028 (F2.77; T1.34; A2.09; B3.13; Q3.13)
Date: Fri, 27 Jul 2012 13:31:40 +0000
Subject: Your Free Trial of Keeper Backup Has Been Activated
From: Keeper Team <[email protected]>
To: [email protected]
Message-ID:
<00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@email.amazonses.com>
X-SES-Outgoing: 199.255.194.132
X-Assp-Delay: [email protected] not delayed (auto accepted);
27 Jul 2012 09:31:32 -0400
X-Assp-Message-Score: 15 (Bad IP History for 199.255.194.132)
X-Assp-Message-Totalscore: 15
X-Assp-Spam-Level: ***
X-Assp-Whitelisted: Yes ()
X-Assp-Envelope-From:
00000138c8a2aa40-8ee4a181-aa4e-4575-973e-84e71d3e2212-000...@amazonses.com
X-Assp-Intended-For: [email protected]
X-Assp-ID: ASSP.nospam (id-34339-04638)
X-Assp-Version: 1.9.7.2(0.0.01)
X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1
X-SEF-Processed: 5_5_0_210__2012_07_27_09_31_32
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
