The user received the mail with its subject prefixed by "[SPAM]". Also the
log says:
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] [Bayesian][testmode]
81.189.127.194 to: e.greeno...@evergreen-shipping.nl [spam found] and
possibly passing because testmode, otherwise blocked (Bayesian)
[Automatische Antwort: DFSU278391-1 off-hire at CZPQEM]
We're using the Bayesian module in testmode so ASSP just prefixes the
subject line with "[SPAM]" but still this should not occur, because the
address is on the whitelist. So I guess I must be doing something wrong
but I can't find it.
Martin
From: Thomas Eckardt <thomas.ecka...@thockar.com>
To: For Users of ASSP <assp-user@lists.sourceforge.net>
Date: 23-12-2016 13:34
Subject: Re: [Assp-user] Autoreply from whitelisted address marked
as spam
>.nl spam found and passing
I can't see, that the mail was blocked by assp.
Thomas
Von: m.huij...@evergreen-shipping.nl
An: For Users of ASSP <assp-user@lists.sourceforge.net>
Datum: 23.12.2016 12:34
Betreff: Re: [Assp-user] Autoreply from whitelisted address marked
as spam
Hi Thomas,
Thanks for your answers.
I would like this autoreply to go through without being tagged as spam.
Can you tell me how to do this?
Martin
From: Thomas Eckardt <thomas.ecka...@thockar.com>
To: For Users of ASSP <assp-user@lists.sourceforge.net>
Date: 23-12-2016 10:09
Subject: Re: [Assp-user] Autoreply from whitelisted address marked
as spam
I see:
>2. I need to 'inform the development' which I considered to have
done at this point ;)
You use an outdated assp version! If you would have read the current
changelog, you have seen, that this is fixed.
>4. The autoreply is not archived (we're using the ASSP_ARC Plugin
to archive ALL incoming and outgoing mail before it is processed).
This is not implemented - mails are archived after processing
Archived are mails only, if the file is stored anywhere in the corpus.
This is an automatic reply -> bounce processed. If bounced mails are not
stored -> no archive.
>1. Should I whitelist sbd.co.at?
This will not help for this mail (for the achive case).
Thomas
Von: m.huij...@evergreen-shipping.nl
An: For Users of ASSP <assp-user@lists.sourceforge.net>
Datum: 23.12.2016 09:46
Betreff: [Assp-user] Autoreply from whitelisted address marked as
spam
Hi,
A user [e.greeno...@evergreen-shipping.nl] sends an e-mail [to
tereza.novakova-czec...@euromar.at] and receives an autoreply. Sending out
the e-mail adds the address to the autowhitelist if it wasn't already
there however the autoreply is marked as spam. Why?
>From ASSP's web interface > Whitelist test page:
tereza.novakova-czec...@euromar.at,e.greeno...@evergreen-shipping.nl
personal Whitelisted
tereza.novakova-czec...@euromar.at Whitelisted
Relevant part of maillog.txt:
Dec-21-16 14:04:32 m1-25472-10631 [Worker_2] 172.21.135.10
<e.greeno...@evergreen-shipping.nl> info: found message size announcement:
14.76 kByte
Dec-21-16 14:04:32 [Worker_2]
e.greeno...@evergreen-shipping.nl,tereza.novakova-czec...@euromar.at
matches @euromar.at in whiteListedDomains
Dec-21-16 14:04:33 m1-25472-10631 [Worker_2] [MessageOK] 172.21.135.10
<e.greeno...@evergreen-shipping.nl> to: tereza.novakova-czec...@euromar.at
message ok - (whiteListedDomains '@euromar.at') - [Re: DFSU278391-1
off-hire at CZPQEM] ->
/usr/share/assp/notspam/Re_DFSU278391-1_off-hire_at_CZPQEM--245053.mht
Dec-21-16 14:04:33 m1-25473-07170 [Worker_2] 81.189.127.194 info: found
message size announcement: 5.86 kByte
Dec-21-16 14:04:33 m1-25473-07170 [Worker_2] [isbounce] 81.189.127.194
bounce message detected
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl info: found known good HELO
'mail.sbd.co.at' - weight is -2
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl Message-Score: added -40 for
KnownGoodHelo, total score for this message is now -40
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl [scoring] SPF: none (cache)
ip=81.189.127.194 mailfrom=postmas...@mail.sbd.co.at helo=mail.sbd.co.at
Dec-21-16 14:04:34 [Worker_2] Info: SenderBase found unknown Key and
Value: '56'=>'200' in DNS answer for '81.189.127.194' - please inform the
developement
Dec-21-16 14:04:34 [Worker_2] Info: SenderBase found unknown Key and
Value: '57'=>'1482210780' in DNS answer for '81.189.127.194' - please
inform the developement
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl Message-Score: added -15 (pbwValencePB)
for In Penalty White Box, total score for this message is now -55
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl Bayesian Check - Prob: 1.00000 -
Confidence: 0.00000 => doubtful.spam - answer/query relation: 100% of 156
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl Message-Score: added 24 for Bayesian
Probability: 1.00000, total score for this message is now -31
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] [Bayesian][testmode]
81.189.127.194 to: e.greeno...@evergreen-shipping.nl [spam found] and
possibly passing because testmode, otherwise blocked (Bayesian)
[Automatische Antwort: DFSU278391-1 off-hire at CZPQEM]
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl spam found and passing [Automatische
Antwort: DFSU278391-1 off-hire at CZPQEM]
Dec-21-16 14:04:34 m1-25473-07170 [Worker_2] 81.189.127.194 to:
e.greeno...@evergreen-shipping.nl [Plugin] calling plugin ASSP_Razor
I see a couple of things in the log that are interesting:
1. The remote domain is whitelisted.
2. I need to 'inform the development' which I considered to have
done at this point ;)
3. euromar.at resolves to 81.189.127.194 which resolves back to
mail.sbd.co.at which is not whitelisted.
4. The autoreply is not archived (we're using the ASSP_ARC Plugin
to archive ALL incoming and outgoing mail before it is processed).
Questions:
1. Should I whitelist sbd.co.at?
2. Why is the autoreply not archived?
Running ASSP version 2.5.1(16177) on Debian 8 (latest stable).
Thanks!
Martin
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform
today.http://sdm.link/intel_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform
today.http://sdm.link/intel_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform
today.http://sdm.link/intel_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform
today.http://sdm.link/intel_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
