From: larsneo <an...@kr...> - 2007-05-14 09:36:41
|
Fritz Borgstedt wrote: > please try built (38) with ASSP v1.3.2(40) the exportextreme.txt gets populated but at least within the logfile the score is not raised for a single ip in multiple connections (maybe a specific logfile-entry for a blacklisting in exportextreme.txt might be a nice idea): May-14-07 11:26:15 id-91347746 222.253.14.46 <ver...@my...> to: ver...@my... Message-Score: 0+25 (ForgedHELO) > May-14-07 11:26:15 id-91347746 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 25+5 (SPF-fail) > May-14-07 11:26:16 id-91347746 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 30+30 (RBL-Failed) > May-14-07 11:26:16 id-91347746 222.253.14.46 <ver...@my...> to: > ver...@my... Bomb:scoring: BombRegEx: 'Subject: acquisition meds > at US drug stock' > May-14-07 11:26:16 id-91347746 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 60+50 (BombRe) > May-14-07 11:26:16 id-91347746 222.253.14.46 <ver...@my...> to: > ver...@my... Message Scoring: 110 >= 50 > acquisition_meds_at_US_drug_stockpile_ > May-14-07 11:26:23 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 0+25 (ForgedHELO) > May-14-07 11:26:23 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 25+5 (SPF-fail) > May-14-07 11:26:23 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 30+30 (RBL-Failed) > May-14-07 11:26:24 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Bomb:scoring: BombRegEx: 'Subject: acquisition meds > at US drug stock' > May-14-07 11:26:24 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Message-Score: 60+50 (BombRe) > May-14-07 11:26:24 id-91347807 222.253.14.46 <ver...@my...> to: > ver...@my... Message Scoring: 110 >= 50 > acquisition_meds_at_US_drug_stockpile_ will keep an eye on this - thx for your work so far ;-) -- View this message in context: http://www.nabble.com/question-about-extreme-threshold-in-v1.3.2%2837%29-tf3725739.html#a10600634 Sent from the assp-user mailing list archive at Nabble.com. |