> Rick Klinge wrote: > > > >> Rick Klinge wrote: > >>>> Rick Klinge wrote: > >>>>> I'm noticing that if an ip address is listed within the > >>>>> 'denySMTPConnectionsFrom' that it is still getting > >> populated in the > >>>>> 'exportExtremeFile'. My question is; doesn't the connection get > >>>>> dropped 1st if the connecting mta's ip is listed in the > >>>>> 'denySMTPConnectionsFrom'? > >>>>> > >>>> Yes it should and i don't see this behavior at all on my > servers. > >>>> Could the entries have been before the IPs were added > tot he deny > >>>> file? What format are you putting them in the deny file as? > >>>> > >>>> Kevin > >>>> > >>> I've cleared the 'exportExtremeFile' and it still populates with > >>> entries that are already within the > 'denySMTPConnectionsFrom'. The > >>> format of the ip's I've put into the > >> 'denySMTPConnectionsFrom' is like > >>> this: > >>> > >>> 72.5.52. > >>> 72.5.52.150 > >>> 72.5.52.151 > >>> 72.52.73. > >>> 72.52.73.112 > >>> 72.52.73.119 > >>> 72.52.73.138 > >>> 72.52.73.83 > >>> 72.52.82. > >>> 72.52.82.68 > >>> 72.52.82.73 > >> You have some superfluous entries there. > >> "72.52.82." will block "72.52.82.68" and "72.52.82.73" > >> > >>> I have noticed in the logs that it appears to be working: > >>> > >>> Apr-18-07 15:42:51 Connection from 64.76.231.152:57708 rejected by > >>> denySMTPConnectionsFrom > >> I just ran a few searches and can't find any entries from my > >> Deny file > >> in my exported extreme. > >> > >> What do you have 'PenaltyLog' set to? > >> > >> Kevin > >> > > > > Yes. Manual entries of the denySMTPConnectionsFrom' then I > block the > > class C for that network. Should I remove the superfluous > entries? I > > don't know what you mean by 'PenaltyLog'? > > You can remove the superfluous entries if you like, they > don't hurt but > it would clean up the file IMHO. > > 'PenaltyLog' is the logging setting for the penalty box in ASSP, the > penalty box is what populates the exported extreme so I asked what > logging you had enabled for that so I could then ask you to > check the PB > logs for the IPs in question. > > Kevin
I searched/found: VALIDATEUSERLOG -- Enable User Validation logging: (Default: 1) PenaltyLog -- Enable PenaltyBox logging: 1 VALIDATESENDERLOG -- Enable Validate Sender Logging: 1 (Default: 0) I will sift through the PB and look for the ips in question.. Thanks, ~Rick ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
