Hello there, I have this list on sourceforge bacula-us...@lists.sourceforge.net and every day it came in my personal blacklist. As you can figure I don't what this, so I started do dig into the logs to try to understand why. The thing is that I don't.
So I'm here asking for help to figure it out. First the logs: mar-10-17 13:32:12 [Worker_2] Spam-Report: empty sender is replaced by 'X-Assp-Intended-For' hei...@bacula.com.br - no reports will be sent mar-10-17 13:32:12 [Worker_2] Spam-Report: process message from hei...@bacula.com.br mar-10-17 13:32:12 m-63531-12079 [Worker_1] [TLS-out] 94.177.196.100 <s...@informesigs.top> Message-Score: added 5 (irValencePB) for invalid address casan...@casanova-taubate.com.br, total score for this message is now 5 mar-10-17 13:32:12 [Worker_2] Email: heitorfa...@gmail.com,hei...@bacula.com.br removed from Whitelist mar-10-17 13:32:12 [Worker_2] Email: bacula-us...@lists.sourceforge.net,hei...@bacula.com.br removed from Whitelist mar-10-17 13:32:12 [Worker_2] Email: personal blacklist added: hei...@bacula.com.br,mikefroeh...@gmx.de mar-10-17 13:32:12 m-63532-07185 [Worker_1] 94.177.196.100 info: PB-IP-Score for '94.177.196.0' is 5, added 5 in this session mar-10-17 13:32:12 m-63532-07185 [Worker_1] 94.177.196.100 disconnected: session:7F415D9F6CF0 94.177.196.100 - processed ids m-63531-12079 m-63532-07185 - processing time 1 seconds mar-10-17 13:32:12 [Worker_1] Worker_1 will sleep now mar-10-17 13:32:12 [Worker_2] Email: personal blacklist added: hei...@bacula.com.br,heitorfa...@gmail.com mar-10-17 13:32:12 [Worker_2] Email: personal blacklist added: hei...@bacula.com.br,bacula-us...@lists.sourceforge.net mar-10-17 13:32:12 [Worker_2] Info: report message written to -> /usr/share/assp2/errors/spam/_heitor_bacula_com_br_spam--72276.rpt.eml mar-10-17 13:32:12 [Worker_2] Spam-Report: finished report-message from hei...@bacula.com.br mar-10-17 13:32:12 m-63532-01188 [Worker_2] 144.76.146.38 disconnected: session:7F4155951788 144.76.146.38 - processed ids m-63531-08447 m-63532-01188 - processing time 1 seconds mar-10-17 13:32:12 [Worker_2] Worker_2 will sleep now As you can see all starts with bacula-us...@lists.sourceforge.net being removed from the whitelist and then added to personal blacklist... The report message (_heitor_bacula_com_br_spam--72276.rpt.eml) is this: X-Assp-Reported-By: hei...@bacula.com.br Subject: hei...@bacula.com.br: spam Received: from mout.gmx.net ([212.227.15.15] helo=mout.gmx.net) X-Assp-ID: kyahosting.com m-63526-12337^MX-Assp-Tag: MessageLimit^MX-Assp-Envelope-From: mikefroeh...@gmx.de^MX-Assp-Intended-For: hei...@bacula.com.br^MReceived: from server.kyahosting.com (LHLO server.kyahosting.com) (144.76.146.38) by server.kyahosting.com with LMTP; Fri, 10 Mar 2017 13:32:11 -0300 (BRT) Received: from server.kyahosting.com (localhost.localdomain [127.0.0.1]) by server.kyahosting.com (Postfix) with ESMTPS id 636B957802B3 for <hei...@bacula.com.br>; Fri, 10 Mar 2017 13:32:11 -0300 (BRT) Received: from KyaHosting (localhost.localdomain [127.0.0.1]) by server.kyahosting.com (Postfix) with ESMTPS id 9456B57802AE for <hei...@bacula.com.br>; Fri, 10 Mar 2017 13:32:06 -0300 (BRT) X-Assp-Version: 2.5.5(16366) on kyahosting.com X-Assp-ID: kyahosting.com m-63526-12337 X-Assp-Session: 7F415E6CA158 (mail 1) X-Assp-Detected-RIP: 109.45.1.16 X-Assp-Source-IP: 109.45.1.16 X-Assp-Envelope-From: mikefroeh...@gmx.de X-Assp-Intended-For: hei...@bacula.com.br X-Assp-Client-TLS: yes X-Assp-Server-TLS: yes X-Assp-Message-Score: -10 (SSL-TLS-connection-OK) X-Assp-IP-Score: -10 (SSL-TLS-connection-OK) X-Assp-Message-Score: 10 (Message-ID not valid: 'trinity-bba6e4dd-4736-4805-b2a6-5ef88c424925-1489163524746@msvc-mesg-gmx119') X-Assp-IP-Score: 10 (Message-ID not valid: 'trinity-bba6e4dd-4736-4805-b2a6-5ef88c424925-1489163524746@msvc-mesg-gmx119') X-Original-Authentication-Results: kyahosting.com; spf=pass X-Assp-Message-Score: -10 (SPF pass) X-Assp-IP-Score: -10 (SPF pass) X-Assp-Message-Score: 10 (Foreign IP-Country DE (1&1 INTERNET AG)) X-Assp-Message-Score: 17 (DNSBL: neutral, 109.45.1.16 listed in l2.apews.org zen.spamhaus.org) X-Assp-IP-Score: 17 (DNSBL: neutral, 109.45.1.16 listed in l2.apews.org zen.spamhaus.org) X-Assp-DNSBL: neutral, 109.45.1.16 listed in (l2.apews.org<-127.0.0.2; zen.spamhaus.org<-127.0.0.11; ) X-Assp-Re-bombRe: PB 26: for 10% discount X-Assp-Message-Score: 26 (Regex: bombRe 'PB 26: for 10% discount' bombRe: '10% discount') X-Assp-IP-Score: 26 (Regex: bombRe 'PB 26: for 10% discount' bombRe: '10% discount') X-Assp-Message-Score: 49 (HMM Probability: 1.00000) X-Assp-IP-Score: 49 (HMM Probability: 1.00000) X-Assp-Tag: MessageLimit X-Assp-Spam: YES (Probably) X-Spam-Status:yes X-Assp-Spam-Reason: MessageScore passed low limit X-Assp-Message-Totalscore: 92 Received: from mout.gmx.net ([212.227.15.15] helo=mout.gmx.net) by kyahosting.com with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) (2.5.5); 10 Mar 2017 13:32:06 -0300 Received: from [109.45.1.16] by msvc-mesg-gmx119.server.lan (via HTTP); Fri, 10 Mar 2017 17:32:04 +0100 MIME-Version: 1.0 Well AFAIK this mikefroeh...@gmx.de sent a message to the list bacula-us...@lists.sourceforge.net and ASSP caught it on a DNSBL right? What I don't understand is why ASSP removes bacula-us...@lists.sourceforge.net from whitelist and add it to the personal blacklist if the issue is with mikefroeh...@gmx.de? I've already added sourceforge.net on noProcessingDomains and *@lists.sourceforge.net|*@*.sourceforge.net on whiteListedDomains but this ain't worked. Can anyone give me a hand? Thanks -- Anahuac de Paula Gil "É agitando que se transforma a vida, o homem, a sociedade, o mundo". Francisco Julião Anahuac - http://www.anahuac.eu Tuttiverde - http://www.tuttiverde.com.br KyaHosting - http://www.kyahosting.com GUIA EcoMedical - http://ecomedical.med.br EXPOTEC - http://www.expotec.org.br suaNuvem - http://www.suanuvem.com DiasporaBR - http://diasporabr.com.br OpenLDAP - http://www.openldap.com.br Twitter: @anahuacpg Diaspora: anah...@diasporabr.com.br Jabber/XMPP: anah...@diasporabr.com.br ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user