Fritz Borgstedt wrote: > please try built (38)
with ASSP v1.3.2(40) the exportextreme.txt gets populated but at least within the logfile the score is not raised for a single ip in multiple connections (maybe a specific logfile-entry for a blacklisting in exportextreme.txt might be a nice idea): May-14-07 11:26:15 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: 0+25 (ForgedHELO) > May-14-07 11:26:15 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 25+5 (SPF-fail) > May-14-07 11:26:16 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 30+30 (RBL-Failed) > May-14-07 11:26:16 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Bomb:scoring: BombRegEx: 'Subject: acquisition meds > at US drug stock' > May-14-07 11:26:16 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 60+50 (BombRe) > May-14-07 11:26:16 id-91347746 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message Scoring: 110 >= 50 > acquisition_meds_at_US_drug_stockpile_ > May-14-07 11:26:23 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 0+25 (ForgedHELO) > May-14-07 11:26:23 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 25+5 (SPF-fail) > May-14-07 11:26:23 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 30+30 (RBL-Failed) > May-14-07 11:26:24 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Bomb:scoring: BombRegEx: 'Subject: acquisition meds > at US drug stock' > May-14-07 11:26:24 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message-Score: 60+50 (BombRe) > May-14-07 11:26:24 id-91347807 222.253.14.46 <[EMAIL PROTECTED]> to: > [EMAIL PROTECTED] Message Scoring: 110 >= 50 > acquisition_meds_at_US_drug_stockpile_ will keep an eye on this - thx for your work so far ;-) -- View this message in context: http://www.nabble.com/question-about-extreme-threshold-in-v1.3.2%2837%29-tf3725739.html#a10600634 Sent from the assp-user mailing list archive at Nabble.com. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
