And 1.3.3 has the same issue for me. I will try a fresh install later on
tonight if no one has any better ideas. The cutest part is how
everything is getting dumped into mailok :(
The log snippet:
Jul-22-07 08:53:34 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] recipient accepted: [EMAIL PROTECTED]
Jul-22-07 08:53:34 Commencing DNSBL checks on 66.68.239.237
Jul-22-07 08:53:34 Completed DNSBL checks on 66.68.239.237
Jul-22-07 08:53:34 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] Received-RWL: not listed (yams.urigubu.com: local policy) rwl=none;
client-ip=66.68.239.237
Jul-22-07 08:53:34 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] scoring Regex:BombHeader ''
Jul-22-07 08:53:34 [BombHeader] id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] Message-Score: 0+18 (BombHeaderRe)
Jul-22-07 08:53:34 [MissingMXA][pass] id-2414c16398 66.68.239.237 <[EMAIL
PROTECTED]> to: [EMAIL PROTECTED] scoring PTR invalid:
cpe-66-68-239-237.rgv.res.rr.com
Jul-22-07 08:53:34 [BlackHelo][scoring] id-2414c16398 66.68.239.237 <[EMAIL
PROTECTED]> to: [EMAIL PROTECTED] scoring blacklisted HELO: 'hotmail.com'
Jul-22-07 08:53:35 [SPF][scoring] id-2414c16398 66.68.239.237 <[EMAIL
PROTECTED]> to: [EMAIL PROTECTED] Received-SPF: softfail (yams.urigubu.com:
transitioning domain of [EMAIL PROTECTED] does not designate 66.68.239.237 as
permitted sender) client-ip=66.68.239.237; [EMAIL PROTECTED]; helo=hotmail.com;
Jul-22-07 08:53:35 Commencing DNSBL checks on 66.68.239.237
Jul-22-07 08:53:35 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] DNSBL scoring Received-DNSBL: fail (bl.spamcop.net->127.0.0.2;
zen.spamhaus.org->127.0.0.11; )
Jul-22-07 08:53:35 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] scoring Regex:BombRaw 'Cialis'
Jul-22-07 08:53:35 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] URIBL scoring Received-URIBL: pass
Jul-22-07 08:53:35 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] ClamAV: scanning 852 bytes done OK
Jul-22-07 08:53:35 id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL
PROTECTED] Bayesian Check Prob: 1.00000 / Confidence: 0.00000 => doubtful.spam
Jul-22-07 08:53:35 [MessageOK] id-2414c16398 66.68.239.237 <[EMAIL PROTECTED]>
to: [EMAIL PROTECTED] message ok Extend_your_night_with_Soft_Cialis_ ->
/usr/local/assp/okmail/Extend_your_night_with_Soft_Cialis_--2.eml
Jul-22-07 08:53:35 66.68.239.237 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] is
disconnected
And the headers:
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Sun, 22 Jul 2007 08:53:35 -0500
Received: from [127.0.0.1] (port=53792 helo=hotmail.com)
by yams.urigubu.com with smtp (Exim 4.66)
(envelope-from <[EMAIL PROTECTED]>)
id 1ICbsM-000682-Og
for [EMAIL PROTECTED]; Sun, 22 Jul 2007 08:53:35 -0500
Received: from hotmail.com ([66.68.239.237] helo=hotmail.com) by
yams.urigubu.com; 22 Jul 2007 08:53:34 -0500
Reply-To: "Glenda Ledbetter" <[EMAIL PROTECTED]>
From: "Glenda" <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Date: Sun, 22 Jul 2007 10:02:23 -0400
To: <[EMAIL PROTECTED]>
Subject: Extend your night with Soft Cialis.
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Assp-Received-RWL: not listed (yams.urigubu.com: local policy) rwl=none;
client-ip=66.68.239.237
X-Assp-Re-BombHeader:
X-Assp-Score: 18 (BombHeaderRe)
X-Assp-Received-SPF: softfail (yams.urigubu.com: transitioning domain of
[EMAIL PROTECTED] does not designate 66.68.239.237 as permitted
sender)
client-ip=66.68.239.237; [EMAIL PROTECTED];
helo=hotmail.com;
X-Assp-Received-DNSBL: fail (bl.spamcop.net->127.0.0.2;
zen.spamhaus.org->127.0.0.11; )
X-Assp-Re-BombRaw: Cialis
X-Assp-Received-URIBL: pass
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
