David wrote: > This is driving me nutty! There has been nothing new in my spamfolders > for the past 3 days, everything is passing through. Something is > terribly messed up. I'd love to know if it's the new ASSP builds or me > going crazy. There are missing headers, missing lines in the log, > nothing adds up. > > I wanted to attach a sample, but SourceForge blocked it for spam. At > least someone thinks this message is spam! Instead, I uploaded the full > text here: http://www.norelid.com/spamsample.txt > > Included here is also a complete log sample from that attached spam. > > The mail headers indicate that is was tested for BombHeaderRe (fail?), > SPF (neutral), DNSBL (fail), BombRaw (pass), Bayes (0.98574) and is > given a Spam Prob of 0. > The log lines, however, tell a different story. It says it was tested > for BombHeader (matched ''?), MissingMXA (pass?), BombRaw, URIBL (pass), > ClamAv, and Bayes (0.98574) and is given confident.spam. But then the > last line says message ok??? > > What is causing this odd discrepancy? Everything is passing ASSP > currently, it has not blocked a message in days! > Please verify your settings in the "Collection" section. The example you gave above referenced a DNSBL fail - so what is your "RBLFailLog" set to? Check "TestModes" - are any of the test modes checked?
-- Daniel ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
