Ah, maybe that's what it is. I did recently change my DNSBL setting to 
require a bad hit from 2 lists, instead of just the 1. And when 
something does fail because of DNSBL the email does not get CCed... so I 
would not have seen them before. As it stands now they are only getting 
scored because they are only getting a hit from 1 DNSBL.

Is there a way to redlist a message with a blank body, so it doesn't 
mess up my corpus? And for that matter, does a blank body even mess up 
the corpus?



Hill, Brett wrote:
> I'm not sure I completely understand what you're saying, but I've had
> almost half of mine come through with no body (until today...they must
> have found new IP's to send from).  And the spam reason (for the emails
> without bodies) has almost always been: 
> X-Assp-Score: 100 (DNSBL-failed)
> 
> Assuming ASSP is working correctly, perhaps it's just a problem with the
> software that the spammers are using that they're not sending correctly?
> No "Spam Lovers" in my config either.
> 
> Brett
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Paul
> Houlbrooke
> Sent: Friday, August 10, 2007 11:16 AM
> To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
> Subject: [Assp-user] No body, only headers
> 
> I've been getting a lot spam messages lately that have had no body. All
> the headers are there, just no message. Whether a read the message from
> the /spam folder or the CC copy, it's the same. All spambomb tests are
> deactivated. ccMaxBytes is also off. I so far have had no normal (none
> spam emails) without a body, so its just the spam.
> 
> 
> ------------------------------------------------------------------------
> -
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Assp-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-user
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Assp-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-user


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to