Elliot Wilen wrote: > I'm noticing that sometimes the log reports RBL blocks like this: > > Oct-10-06 20:17:44 70.50.228.162 <[EMAIL PROTECTED]> RBLCache(1): - > 70.50.228.162 blocked by bl.spamcop.net (06-10-10/20:16) > Oct-10-06 20:17:47 70.50.228.162 <[EMAIL PROTECTED]> RBLCache(2): - > 70.50.228.162 blocked by bl.spamcop.net (06-10-10/20:16) > > While other times it has entries like this: > > Oct-10-06 20:47:44 218.28.33.186 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > failed RBL checks -> ./spam/hut_tiny_olden_gave_--112.eml > > What causes these different entries? The first style is useful because it > names the RBL, but the second style names the file that the spam is stored > in. Ideally I'd like both for each RBL-blocked spam. >
RBLCache entries are when the ip is a repeat offender with the number of tries listed is parentheses. "failed RBL checks" is what is logged when you first find an IP on a DNSBL. The normal log would show this. At least for my config it does. (This is an example log and is just for display.) Oct-10-06 20:47:44 RBLCache: adding 218.28.33.186:cbl.abuseat.org sbl-xbl.spamhaus.org Oct-10-06 20:47:44 218.28.33.186 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] failed RBL checks Does that answer your questions? Kevin ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
