>1. Why this message passing, when [PenaltyBox] totalscore for
195.149.248.140 is 148?
>DoPenalty:=2
set it to 1 (block)
There are two penalties:
message -> DoPenaltyMessage (accumulated per mail)
IP -> DoPenalty (accumulated per IP)
148 < 150 (PenaltyExtreme:=150 / DoPenaltyExtreme:=1) - The next mail
from this IP will be possibly blocked, because it will reach the 150 at
the frist mistake.
>3. And last, X-ASSP headers broke this message
The org mail has a malformed header end 0D 0D 0A 0D 0A - so our
headers are added after the frist 0D - and finaly, before sent this single
0D, it is corrected to 0D 0A - the next version will correct this
malformed header before the final lineend-check.
>2. Message is stored in discarded folder because messagescore (48) low.
Why after that message is stored in notspam folder by MessageOK?
Don't know what is happen here. It looks like the filename was removed
from the internal mail hash too early. If a mail is OK for any reason and
it has no filename, the final processing code assumes that the mail should
be stored in 'notspam' - at least I checked the filehandle not the
filename - hope I can fix this.
This will not happen if 'DoPenalty' is set to 1.
Thomas
Von: Michael M Galapchuk <michael.galapc...@fcbank.com.ua>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum: 15.11.2011 11:37
Betreff: [Assp-test] Some questions about Message Scoring
Hi Thomas,
please, give me advice, how to stop this SPAM message correctly.
See details in maillog.txt.
Some questions:
1. Why this message passing, when [PenaltyBox] totalscore for
195.149.248.140 is 148?
Do I need to change configuration?
[assp.cfg]
DoPenalty:=2
DoPenaltyMessage:=1
MsgScoreOnEnd:=
PenaltyMessageLow:=40
PenaltyMessageLimit:=50
DoPenaltyExtreme:=1
DoPenaltyExtremeSMTP:=1
PenaltyExtreme:=150
2. Message is stored in discarded folder because messagescore (48) low.
Why after that message is stored in notspam folder by MessageOK?
3. And last, X-ASSP headers broke this message
(empty line before X-Assp-Version).
See for_mercy--7187.eml.txt and for_mercy-after_ASSP.eml.txt.
Thanks in advance.
Mike.[Anhang "for_mercy--7187.eml.txt" gelöscht von Thomas Eckardt/eck]
[Anhang "for_mercy-after_ASSP.eml.txt" gelöscht von Thomas Eckardt/eck]
[Anhang "maillog.txt" gelöscht von Thomas Eckardt/eck]
------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
