from the analyzer GUI: Note: Analysis is performed using the current spam database, hashes and lists -- if yours was rebuilt since the time the mail was received, you'll receive a different result. This also applies to the feature matching results, they may be diffent from the results when the mail was received. All feature matching results are shown stateless - which means for example : if 'noprocessing' and a 'RBL/DNSBL hit' is shown here, in the real mail processing, the RBL check may be skipped because of the noprocessing state .
Yes, there is no example for the possible combinations related to ' heloBlacklistIgnore' and all the other 'helo' settings, lists, hashes ... but who would need them? Thomas Von: "K Post" <nntp.p...@gmail.com> An: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Datum: 30.04.2021 17:39 Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? and there's my answer to " What could I be doing wrong / misunderstanding?" I didn't realize that analyze didn't consider heloBlacklistIgnore. I don't see that indicated in the gui. Analyze says that it uses the current db, hashes, and lists. I, apparently incorrectly, thought that "lists" would include the heloBlaklistIgnore list. I'm sorry to once again have frustrated you with my questions. if there's a better way I could have asked what I did, or somewhere else I should be asking, I'm all ears. On Fri, Apr 30, 2021 at 10:31 AM Thomas Eckardt < thomas.ecka...@thockar.com> wrote: >in my heloBlacklistIgnore and then a mail comes in with helo mta-xx-xxx.sparkpostmail.com it is still getting scored due to a known bad helo. show me a single logline from a processed mail where this happens ! >I see: HELO Blacklist: 'mta-85-129.sparkpostmail.com' this is the result line from the analyzer - the analyzer shows every match, it's on YOU to know that a heloBlacklistIgnore match will skip the helo checks for real mail processing Thomas Von: "K Post" <nntp.p...@gmail.com> An: "ASSP development mailing list" < assp-test@lists.sourceforge.net> Datum: 30.04.2021 15:38 Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? I guess I was unclear in my question. I'm not saying that a match in heloBlacklistIgnore is causing scoring, I'm saying that I have *.sparkpostmail.com in my heloBlacklistIgnore and then a mail comes in with helo mta-xx-xxx.sparkpostmail.com it is still getting scored due to a known bad helo. I see: HELO Blacklist: 'mta-85-129.sparkpostmail.com' but why would it be on the blacklist (and get the score assigned for that) when I have *.sparkpostmail.com in my heloBlacklistIgnore? On Fri, Apr 30, 2021 at 2:41 AM Thomas Eckardt <thomas.ecka...@thockar.com > wrote: If I ask you about something that does'nt exists in assp ..... what it is ???? LOL Thomas Von: "K Post" <nntp.p...@gmail.com> An: "ASSP development mailing list" < assp-test@lists.sourceforge.net> Datum: 29.04.2021 16:04 Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? The line in heloBlacklistIgnore is *.sparkpostmail.com There's no score associated to that line, but I must not be understanding what you're asking or what heloBlacklistIgnore does - how could there be a score assosiated with this?. Doesn't heloBlacklistIgnore just tell ASSP not to pay any attention to helo's that match that list when scoring a message? if so, shouldn't the line above make it so that a helo from mta-xx-xxx.sparkpostmail.com isn't considered when scoring the message? If you're asking for my hlValencePB, that's set to 15, but I don't know how that comes into play here. As always, much appreciated. ken On Mon, Apr 26, 2021 at 2:17 AM Thomas Eckardt <thomas.ecka...@thockar.com > wrote: How high is the scrore used by assp for 'heloBlacklistIgnore' ? Thomas RTM,RTM,RTM,RTM Von: "K Post" <nntp.p...@gmail.com> An: "ASSP development mailing list" < assp-test@lists.sourceforge.net> Datum: 25.04.2021 10:14 Betreff: [Assp-test] HeloBlacklistIgnore still matching helo? I have *.sparkpostmail.com in my heloBlacklistIgnore, yet messages from mta-85-129.sparkpostmail.com seem to still be scored based on that. From analyze: • HELO Blacklist: 'mta-85-129.sparkpostmail.com' What could I be doing wrong / misunderstanding? Thanks _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *******************************************************
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
