Re: [Assp-user] whitesenderbase issue and negative scoring in bombsenderre

[Ethical H. - J. M. <Jo...@et...>]

Thomas

Good point I used to have them in the bombHeaderRe but they stopped working
in that file so I tried a different one from someone elses suggestion.

I will try it again back in the header file.

Thanks
John

-----Original Message-----
From: Thomas Eckardt [mailto:Tho...@th...] 
Sent: December-18-13 1:30 AM
To: For Users of ASSP
Subject: Re: [Assp-user] whitesenderbase issue and negative scoring in
bombsenderre

>Eg I have this
>
>Received\: from *\.paypal\.com=>-1.5
>
>Received\: from *\.*\.paypal\.com=>-1.5

such a regex would work in bombHeaderRe (if it is right) but never in
bombSenderRe.

'bombSenderRe' .... 'Expression to identify mailfrom,ip and helo.'

So the part 'Received\: from' makes it useless in bombSenderRe!

Even the parts ' *\.paypal\.com' and ' *\.*\.paypal\.com' will IMHO never
match any of mailfrom, ip or helo!

Thomas





Von:    "Fritz Borgstedt" <fb...@iw...>
An:     "For Users of ASSP" <ass...@li...>, 
Datum:  17.12.2013 22:02
Betreff:        Re: [Assp-user] whitesenderbase issue and negative scoring 
in      bombsenderre



For Users of ASSP  <ass...@li...> schreibt:
>2)      Negative scoring not working in bombsenderre.txt
>
> 
>
>Eg I have this
>
>Received\: from *\.paypal\.com=>-1.5
>
>Received\: from *\.*\.paypal\.com=>-1.5
>
>But no mails from paypal are scored negatively.
>
> 
>
>I did this initially and it worked a while ago to whitelist proper 
>sending servers


Please show the received; line which should be scored.
The corresponding loglines of the mail would be great.

----------------------------------------------------------------------------
--
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your 

Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk

_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known
virus in this email!
*******************************************************