I often have problems with mails blocked by MessageScore if triggered after by PluginAll. The link to the spam folder is missing from the logs, therefore the block report is unable to locate the file on the system. so, the report is missing the resend link. in these cases (i thought this was fixed some time ago but is not) i would manually release the file via GUI (becuse the message was already blocked by MessageLimit - before the Plugin routine).
in this case i'm posting to your attention, the message has been blocked only by MessageLimit after PluginAll, precisely by the bayesian scan triggered by ASSP_OCR. well, there are two weird things: 1) where is the mail? Losing emails is a very big problem for an antispam system (and here again i'm raising a bug on MessageLimit reached after PluginAll) 2) ASSP_OCR is set to monitoring (i had the same case some time ago and i tryed to set ASSP_OCR to monitor as a workaround) so, it should not interfere on scoring. i have the same issue with other Plugins (DCC and RAZOR). the first issue i had about the missing resend link in report was for DCC. even setting it to monitoring didn't help. now i realize it is affecting all plugins disregarding for them being in monitor state. the only workaround is to disable the check. i'm running ASSP version 2.4.4(14296) on Debian. here is the mail log: Nov-25-14 17:00:55 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> [SMTP Reply] 250 2.1.0 Ok Nov-25-14 17:00:55 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [SMTP Reply] 250 2.1.5 Ok Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [SMTP Reply] 354 End data with <CR><LF>.<CR><LF> Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] DKIM-Signature found Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Message-Score: added -5 for 207.126.144.0 in griplist (0.00), total score for this message is now -5 Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Message-Score: added -15 (pbwValencePB) for In Penalty White Box, total score for this message is now -20 Nov-25-14 17:00:56 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Message-Score: added -15 (pbwValencePB) for (OIP: 209.85.220.176) In Penalty White Box, total score for this message is now -35 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] HMM Check [scoring] - Prob: 1.00000 => spam Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Message-Score: added 49 for HMM Probability: 1.0000, total score for this message is now 14 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] info: removed MSGID-signature from header Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [Plugin] calling plugin ASSP_AFC Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] info: 2 attachments found for Level-1 Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [Plugin] calling plugin ASSP_DCC Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [Plugin] calling plugin ASSP_Razor Nov-25-14 17:00:57 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] razor message [check]: Razor-Agents v2.84 starting razor-check Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] razor message [check]: mail 1 is not known spam. Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: (att) file text2.xlb found in mime part 2 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: (att) file text3.xlb found in mime part 3 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: (att) file image001.jpg found in mime part 4 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: (att) file ~WRD099.jpg found in mime part 5 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: OCR(2.20) (TextFile(text2.xlb), TextFile(text3.xlb)) data extracted Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [Plugin] 207.126.144.207 <[email protected]> to: [email protected] ASSP_OCR: Plugin(2.20) successful called for runlevel 'complete mail'! Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Bayesian Check [scoring] - Prob: 1.00000 => spam Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] Message-Score: added 49 for Bayesian Probability: 1.00000, total score for this message is now 63 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] info: the setting of 'UseAvClamd' (block) is temporarily overwritten by the 'DoASSP_OCR' setting of (monitor) Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [MessageLimit] 207.126.144.207 <[email protected]> to: [email protected] mail blocked by MessageScore-check after Plugin all - reason MessageScore 63, limit 50 Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] [MessageLimit] 207.126.144.207 <[email protected]> to: [email protected] [spam found] (MessageScore 63, limit 50) [MESSAGE SUBJECT HERE]; Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [SMTP Reply] 250 OK Nov-25-14 17:00:58 m1-31255-13136 [Worker_1] [TLS-in] [TLS-out] 207.126.144.207 <[email protected]> to: [email protected] [SMTP Reply] 221 <assp2.europassistance.it> closing thanks for helping! regards, aqx -- "Madness, like small fish, runs in hosts, in vast numbers of instances." Nessuno mi pettina bene come il vento. ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
