Timeout of ispip

Previous Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Timeout of ispip

Matti Haack
Hello,

I  am  not  shure if my Problem is connectet to the version (1.3.3.2(31)) or a
general setup problem, so I postet it to the test list.
I am not shure, but I don't think that I had this problem in (26)

It  looks as mails from an relaying server in ispip get stuck if it is
in BombDataRegEx

85.10.201.53 is in ispip
I  had  to remove some letters from the BombDataRegEx in the log, as it was blocked by
the mailing list - it was these litte blue pill -
The mail was already tagged as spam from the relaying Spamassasin.

Aug-17-07 10:29:54 id-9394c12012 85.10.201.53 <> to: [hidden email] recipient accepted: [hidden email]
Aug-17-07 10:29:55 id-9394c12012 85.10.201.53 <> to: [hidden email] Message-Score: 0+15 (bombSuspiciousRe)
Aug-17-07 10:29:55 id-9394c12012 85.10.201.53 <> to: [hidden email]  Regex:Suspicious 'X-Spam-Level: *****'
Aug-17-07 10:29:55 [BombData][scoring] id-9394c12012 85.10.201.53 <> to: [hidden email] scoring BombDataRegEx: 'Via '
Aug-17-07 10:29:55 [BombData][scoring] id-9394c12012 85.10.201.53 <> to: [hidden email] Message-Score: 15+80 (BombData)
Aug-17-07 10:29:55 [URIBL][montoring] id-9394c12012 85.10.201.53 <> to: [hidden email] URIBL montoring Received-URIBL: pass
Aug-17-07 10:29:55 [MessageLimit] id-9394c12012 85.10.201.53 <> to: [hidden email] Message Limit  _SPAM_failure_notice_

The connection stays open until timeout. No further logentry with id id-9394c12012


Matti






-
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de

Registergericht Passau HRB 5678
USt. ID: DE195625715



Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit:
http://www.inn.de 


-- Ausgehende E-Mail wurde auf Viren gescannt  --


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test