Menu
▾
▴
Re: [Assp-test] whiteListedDomains and whiteRe are being scored by DNSBL
|
From: Nadeem A. <Nad...@ab...> - 2014-09-13 10:04:53
|
Hi Thomas, Thank you. What I wish to achieve is that any domain addresses, regular expressions that are whitelisted or added for no processing; I don't want them to be checked for anything else. Is that possible in assp? Regards, Nadeem Abdulla ICT Administrator Ghobash Trading & Investment Co. Ltd Makeen Building, Airport Road Dubai, United Arab Emirates Dubai P.O.Box 2929, Office : +971-04-2999440 ,Extn:5215 M: +971504216865 www.ghobashgroup.com -----Original Message----- From: Thomas Eckardt [mailto:Tho...@th...] Sent: Friday, September 12, 2014 3:56 PM To: ASSP development mailing list Subject: Re: [Assp-test] whiteListedDomains and whiteRe are being scored by DNSBL The analyzer shows the current (just in time) results - they may differ from the results shown in the maillog, if any assp setting or cache was changed meanwhile. Simply look in to the maillog, to find a hint for this mail, that it is whitelisted or noprocessing - I think you'll not find such an entry. remove the IP addresses from the penaltybox and the RBLCache - this will not happen again. FYI: * Whitelisted Domains<http://172.29.1.109:55555/#whiteListedDomains>: 'bi...@dt...'<javascript:void(0);> this will set the whitelisting flag in the SMTP handshake part (before the DATA command is processed) * RBLCacheCheck returned OK for 2.50.7.235<javascript:void(0);>: inserted as not ok at 2014-09-11 15:16:33 , listed by dnsbl-2.uceprotect.net{127.0.0.2} - message score: 17 * RBLScore: dnsbl-2.uceprotect.net -> 127.0.0.2 -> 17 * RBLCacheCheck returned OK for 86.96.229.229<javascript:void(0);>: inserted as ok at 2014-09-11 15:16:34 * RBLCacheCheck returned OK for 86.96.226.150<javascript:void(0);>: inserted as not ok at 2014-09-11 15:16:34 , listed by l2.apews.org{127.0.0.2} safe.dnsbl.sorbs.net{127.0.0.6} - message score: 42 * RBLScore: l2.apews.org -> 127.0.0.2 -> 17 * RBLScore: safe.dnsbl.sorbs.net -> 127.0.0.6 -> 25 * RBLCheck returned OK for 172.29.1.106: RBL checks (IP checks, HELO, frequency, domain, header content ...) are done after the mail header is received * White RE<http://172.29.1.109:55555/#whiteRe>: 'P O Box 25940' * matching whiteRe(P O Box 25940): 'P O Box 25940' * No Processing RE<http://172.29.1.109:55555/#npRe>: 'P O Box 25940' * matching npRe(P O Box 25940): 'P O Box 25940' these regular expressions will match if 'maxBytes' of the mail body are received (body content checks) - if the mail is blocked by RBL in the mailheader - this white/np listing will not take place Thomas Von: Nadeem Abdulla <Nad...@ab...> An: ASSP development mailing list <ass...@li...> Datum: 12.09.2014 13:27 Betreff: Re: [Assp-test] whiteListedDomains and whiteRe are being scored by DNSBL Dear Thomas, Many thanks for your reply. But I ran this analyzer on an email which was scored and marked as spam even though it was whitelisted with domain addresses, regular expressions and also expressions added for no processing. FYI - The option ' Whitelisted DNSBL Validation' is already unchecked in ASSP. Below is the result from the Maillog Tail. Sep-11-14 15:16:33 m1-34191-02353 [Worker_1] 172.29.1.106 <bi...@dt...> to: Joe...@gc... Message-Score: added 17 for DNSBL: neutral, 2.50.7.235 listed in dnsbl-2.uceprotect.net, total score for this message is now 17 Sep-11-14 15:16:33 m1-34191-02353 [Worker_1] [DNSBL] 172.29.1.106 <bi...@dt...> to: Joe...@gc... [scoring] (DNSBL: neutral, 2.50.7.235 listed in (dnsbl-2.uceprotect.net<-127.0.0.2; )) Sep-11-14 15:16:34 m1-34191-02353 [Worker_1] 172.29.1.106 <bi...@dt...> to: Joe...@gc... DNSBL: result '127.0.0.11' from 'zen.spamhaus.org' was ignored for 86.96.229.229 Sep-11-14 15:16:34 m1-34191-02353 [Worker_1] 172.29.1.106 <bi...@dt...> to: Joe...@gc... Message-Score: added 42 for DNSBL: neutral, 86.96.226.150 listed in l2.apews.org safe.dnsbl.sorbs.net, total score for this message is now 59 Sep-11-14 15:16:34 m1-34191-02353 [Worker_1] [DNSBL] 172.29.1.106 <bi...@dt...> to: Joe...@gc... [scoring] (DNSBL: neutral, 86.96.226.150 listed in (l2.apews.org<-127.0.0.2; safe.dnsbl.sorbs.net<-127.0.0.6; )) Sep-11-14 15:16:34 m1-34191-02353 [Worker_1] [MessageLimit] 172.29.1.106 <bi...@dt...> to: Joe...@gc... [spam found] (MessageScore 59, limit 50) [RE TS2 2014 1479 quote] -> spam/RE_TS2_2014_1479_quote--63968.eml; Sep-11-14 15:16:34 m1-34191-02353 [Worker_1] 172.29.1.106 <bi...@dt...> to: Joe...@gc... [SMTP Error] 554 5.7.1 Mail appears to be unsolicited -- send error reports to pos...@gc... Kindly guide me to do the correct settings. Regards, Nadeem Abdulla ICT Administrator Ghobash Trading & Investment Co. Ltd Makeen Building, Airport Road Dubai, United Arab Emirates Dubai P.O.Box 2929, Office : +971-04-2999440 ,Extn:5215 M: +971504216865 www.ghobashgroup.com -----Original Message----- From: Thomas Eckardt [mailto:Tho...@th...] Sent: Thursday, September 11, 2014 9:15 PM To: ASSP development mailing list Subject: Re: [Assp-test] whiteListedDomains and whiteRe are being scored by DNSBL The analyzer shows all results regardless any whitelisting/noprocessing .... - it runs not a real mailprocessing! So you can calculate, what/how to setup to make a mail passing assp (or blocked). Thomas Von: Nadeem Abdulla <Nad...@ab...> An: "ass...@li..." <ass...@li...> Datum: 11.09.2014 13:53 Betreff: [Assp-test] whiteListedDomains and whiteRe are being scored by DNSBL Hi, All the addresses added to white listed domains and all expressions added to whiteRe are still being checked for spam by DNSBL. They are being scored. Please see the below analyze result. The below message has caught as a spam. Please help so that whitelisted emails should not be checked further. * Whitelisted Domains<http://172.29.1.109:55555/#whiteListedDomains>: 'bi...@dt...'<javascript:void(0);> * Whitelisted Domains<http://172.29.1.109:55555/#whiteListedDomains>: 'bi...@dt...'<javascript:void(0);> * SPF-check returned OK for 172.29.1.106 -> bi...@dt...<javascript:void(0) ;>, witness.ghobash.local * White RE<http://172.29.1.109:55555/#whiteRe>: 'P O Box 25940' * matching whiteRe(P O Box 25940): 'P O Box 25940' * No Processing RE<http://172.29.1.109:55555/#npRe>: 'P O Box 25940' * matching npRe(P O Box 25940): 'P O Box 25940' * URIBL check<http://172.29.1.109:55555/#ValidateURIBL>: 'OK' * Valid Format of HELO<http://172.29.1.109:55555/#DoValidFormatHelo>: 'witness.ghobash.local' * IP in Helo check<http://172.29.1.109:55555/#DoIPinHelo>: 'OK' * 2.50.7.235<javascript:void(0);> is in PB Black< http://172.29.1.109:55555/#pbdb>: score:17, last event - DNSBLneutral * 86.96.229.229<javascript:void(0);> is in PB Black< http://172.29.1.109:55555/#pbdb>: score:17, last event - DNSBLneutral * 86.96.226.150<javascript:void(0);> is in PB Black< http://172.29.1.109:55555/#pbdb>: score:326, last event - DNSBLneutral * RBLCacheCheck returned OK for 2.50.7.235<javascript:void(0);>: inserted as not ok at 2014-09-11 15:16:33 , listed by dnsbl-2.uceprotect.net{127.0.0.2} - message score: 17 * RBLScore: dnsbl-2.uceprotect.net -> 127.0.0.2 -> 17 * RBLCacheCheck returned OK for 86.96.229.229<javascript:void(0);>: inserted as ok at 2014-09-11 15:16:34 * RBLCacheCheck returned OK for 86.96.226.150<javascript:void(0);>: inserted as not ok at 2014-09-11 15:16:34 , listed by l2.apews.org{127.0.0.2} safe.dnsbl.sorbs.net{127.0.0.6} - message score: 42 * RBLScore: l2.apews.org -> 127.0.0.2 -> 17 * RBLScore: safe.dnsbl.sorbs.net -> 127.0.0.6 -> 25 * RBLCheck returned OK for 172.29.1.106: * 172.29.1.106 is in PTRCache: status=PTR OK - sonic.ghobash.com. * RWLcheck returned OK for 172.29.1.106 : status=unknown Thanks and Regards, Nadeem Abdulla Disclaimer The information transmitted in this email, including all attached files, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any access to this information by anyone other than the intended recipient(s) is unauthorized and strictly prohibited. ABAN INVESTMENT LLC. <http://www.abaninvestment.com/> ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Ass...@li... https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Ass...@li... https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Ass...@li... https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Ass...@li... https://lists.sourceforge.net/lists/listinfo/assp-test |