I was sending test messages to determine how to best set black/bomb expression scoring on the latest stable version, and noticed that the suffix of our ...engineering.com domain was being shortened to g.com and being scored on one of the URIBL blacklists. It's possible that it could be this particular URIBL we're using but I think I remember someone else reporting a similar problem a while back. I can confirm this with Wireshark if necessary.
Feb-16-11 00:39:58 29783-17355 206.46.xx.xx <[email protected]> to: [email protected] added 10 (blackRe: 'viagra'), total score for this message is now 10; Feb-16-11 00:39:58 29783-17355 [BombBlack] 206.46.xx.xx <[email protected]> to: [email protected] [scoring:10] -- blackRe: 'viagra (10)' -- [Returned mail test]; Feb-16-11 00:39:58 29783-17355 [BombRe] 206.46.xx.xx <[email protected]> to: [email protected] [scoring:10] -- bombRe: 'the virus (10)'; Feb-16-11 00:39:58 29783-17355 206.46.xx.xx <[email protected]> to: [email protected] added 10 (bombRe: 'the virus'), total score for this message is now 20; Feb-16-11 00:40:08 29783-17355 [URIBL] 206.46.xx.xx <[email protected]> to: [email protected] [scoring:15] -- URIBL neutral: 'g.com'(uribl.swinog.ch ); Feb-16-11 00:40:08 29783-17355 206.46.xx.xx <[email protected]> to: [email protected] added 15 (URIBL neutral: 'g.com'(uribl.swinog.ch )), total score for this message is now 35; Feb-16-11 00:40:08 29783-17355 206.46.xx.xx <[email protected]> to: [email protected] ClamAV: scanned 6426 bytes in message - OK ; Feb-16-11 00:40:08 29783-17355 [MessageOK] 206.46.xx.xx <[email protected]> to: [email protected] -- Message OK -- [Returned mail test] -> D:/AntiSpam/ASSP/okmail/Returned_mail_test__58.eml; Phil Quesinberry Q Systems Engineering, Inc. Electronic Controls and Embedded Systems Development (410) 969-8002 http://www.qsystemsengineering.com ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
