Daniel L. Miller wrote: > Kevin wrote: >> Daniel L. Miller wrote: >> >>> Daniel L. Miller wrote: >>> >>>> Daniel L. Miller wrote: >>>> >>>> >>>>>>> I may have perhaps found the answer. My exportExtremeFileAppend was >>>>>>> checked, and the exportextreme file was ... a trifle large. A "sort >>>>>>> -u" >>>>>>> shrunk it to a manageable size, and ASSP is blocking connections again. >>>>>>> >>>>>>> May I recommend a warning message in the GUI, and possibly an overflow >>>>>>> error should be reported for larger files for when a idiot like me >>>>>>> tries >>>>>>> to shoot himself in the foot? >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> Could you be more specific as to the size. >>>>>> >>>>>> >>>>>> >>>>> Of course I already deleted the file without taking note of the size - >>>>> but it think it was over 10M. Took a while to load ASSP each time too! >>>>> >>>>> >>>>> >>>> I'm still blocking lots of others - but this particular site is still >>>> able to get past the IP blocks. Mail analyzer states that the IP is in >>>> both the exportextreme and the denysmtp. >>>> >>>> How are they getting through?!? >>>> >>> I see the message DOES have a valid SPF - does a valid SPF bypass the >>> penalty box blocks? Abbreviated headers follow: >>> >> But what does the maillog say? >> > Right under my nose!!! The $#$!$#! got a spam in right while I was > watching the log!!! Here's a straight stream from the log - I see > absolutely no evidence of a penalty box check....but ... twenty minutes > previous I show a successful block!! How is the IP block being > bypassed? How? How? <crying> How! >
Does it happen under 1.3.1? How about 1.3.3? Have you put the IP into 'denySMTPConnectionsFromAlways'? Kevin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
