got it. thanks. enjoy your weekend and break from me. On Fri, Apr 30, 2021 at 1:49 PM Thomas Eckardt <thomas.ecka...@thockar.com> wrote:
> from the analyzer GUI: > > Note: Analysis is performed using the current spam database, hashes and > lists -- if yours was rebuilt since the time the mail was received, you'll > receive a different result. This also applies to the feature matching > results, they may be diffent from the results when the mail was received. *All > feature matching results are shown **stateless* - which means for > *example*: if '*noprocessing*' and a '*RBL/DNSBL* hit' is shown here, in > the real mail processing, *the RBL check may be skipped* because of the > *noprocessing > state*. > > > Yes, there is no example for the possible combinations related to ' > heloBlacklistIgnore' and all the other 'helo' settings, lists, hashes ... > but who would need them? > > Thomas > > > > > > Von: "K Post" <nntp.p...@gmail.com> > An: "ASSP development mailing list" < > assp-test@lists.sourceforge.net> > Datum: 30.04.2021 17:39 > Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? > ------------------------------ > > > > and there's my answer to " What could I be doing wrong / misunderstanding?" > *I didn't realize that analyze didn't consider heloBlacklistIgnore.* > I don't see that indicated in the gui. Analyze says that it uses the > current db, hashes, and lists. I, apparently incorrectly, thought that > "lists" would include the heloBlaklistIgnore list. > > I'm sorry to once again have frustrated you with my questions. if there's > a better way I could have asked what I did, or somewhere else I should be > asking, I'm all ears. > > > On Fri, Apr 30, 2021 at 10:31 AM Thomas Eckardt < > *thomas.ecka...@thockar.com* <thomas.ecka...@thockar.com>> wrote: > >in my heloBlacklistIgnore and then a mail comes in with helo > *mta-xx-xxx.sparkpostmail.com* <http://mta-xx-xxx.sparkpostmail.com/> *it > is still getting scored** due to a known bad helo.* > > show me a single logline from a processed mail where this happens ! > > > >I see: HELO Blacklist: '*mta-85-129.sparkpostmail.com* > <http://mta-85-129.sparkpostmail.com/>' > > this is the result line from the analyzer - the analyzer shows every > match, it's on YOU to know that a heloBlacklistIgnore match will skip the > helo checks for real mail processing > > Thomas > > > > > > Von: "K Post" <*nntp.p...@gmail.com* <nntp.p...@gmail.com>> > An: "ASSP development mailing list" < > *assp-test@lists.sourceforge.net* <assp-test@lists.sourceforge.net>> > Datum: 30.04.2021 15:38 > Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? > ------------------------------ > > > > I guess I was unclear in my question. I'm not saying that a match in > heloBlacklistIgnore is *causing *scoring, I'm saying that I have > *.*sparkpostmail.com* <http://sparkpostmail.com/> > in my heloBlacklistIgnore and then a mail comes in with helo > *mta-xx-xxx.sparkpostmail.com* <http://mta-xx-xxx.sparkpostmail.com/>* it > is still getting scored due to a known bad helo.* > > I see: HELO Blacklist: '*mta-85-129.sparkpostmail.com* > <http://mta-85-129.sparkpostmail.com/>' > but why would it be on the blacklist (and get the score assigned for that) > when I have *.*sparkpostmail.com* <http://sparkpostmail.com/> in my > heloBlacklistIgnore? > > > > > On Fri, Apr 30, 2021 at 2:41 AM Thomas Eckardt < > *thomas.ecka...@thockar.com* <thomas.ecka...@thockar.com>> wrote: > If I ask you about something that does'nt exists in assp ..... what it is > ???? LOL > > Thomas > > > > > > Von: "K Post" <*nntp.p...@gmail.com* <nntp.p...@gmail.com>> > An: "ASSP development mailing list" < > *assp-test@lists.sourceforge.net* <assp-test@lists.sourceforge.net>> > Datum: 29.04.2021 16:04 > Betreff: Re: [Assp-test] HeloBlacklistIgnore still matching helo? > ------------------------------ > > > > The line in heloBlacklistIgnore is > *.*sparkpostmail.com* <http://sparkpostmail.com/> > There's no score associated to that line, but I must not be understanding > what you're asking or what heloBlacklistIgnore does - how could there be a > score assosiated with this?. Doesn't heloBlacklistIgnore just tell ASSP > not to pay any attention to helo's that match that list when scoring a > message? if so, shouldn't the line above make it so that a helo from > *mta-xx-xxx.sparkpostmail.com* <http://mta-xx-xxx.sparkpostmail.com/> > isn't considered when scoring the message? > > If you're asking for my hlValencePB, that's set to 15, but I don't know > how that comes into play here. > > As always, much appreciated. > ken > > > > On Mon, Apr 26, 2021 at 2:17 AM Thomas Eckardt < > *thomas.ecka...@thockar.com* <thomas.ecka...@thockar.com>> wrote: > How high is the scrore used by assp for 'heloBlacklistIgnore' ? > > Thomas > > RTM,RTM,RTM,RTM > > > > > > Von: "K Post" <*nntp.p...@gmail.com* <nntp.p...@gmail.com>> > An: "ASSP development mailing list" < > *assp-test@lists.sourceforge.net* <assp-test@lists.sourceforge.net>> > Datum: 25.04.2021 10:14 > Betreff: [Assp-test] HeloBlacklistIgnore still matching helo? > ------------------------------ > > > > I have > *.*sparkpostmail.com* <http://sparkpostmail.com/> > in my heloBlacklistIgnore, yet messages from > *mta-85-129.sparkpostmail.com* <http://mta-85-129.sparkpostmail.com/> > seem to still be scored based on that. From analyze: > > • HELO Blacklist: '*mta-85-129.sparkpostmail.com* > <http://mta-85-129.sparkpostmail.com/>' > > What could I be doing wrong / misunderstanding? > > Thanks > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > *Assp-test@lists.sourceforge.net* <Assp-test@lists.sourceforge.net> > *https://lists.sourceforge.net/lists/listinfo/assp-test* > <https://lists.sourceforge.net/lists/listinfo/assp-test> > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test >
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
