Kevin -
Thanks for the reply!
Your reply confirms what I thought about IP blocking
for a subnet (212.200.123. vs 212.200.123.0) but
looking in the penalty box I saw the latter.
I _believe_ I have almost all the logging options turned
on (CLAMAV being a notable exception since I don't run CLAMAV)
but I'm not seeing anything logged for denySMTPConnections
from or denySMTPConnectionsAlways.
Plus, here is the header for an email I received this AM
after looking everything over last night.
This IP address is in the denySMTPConnectionsAlways,
both as an individual and as part of a blocked range.
So, I guess I still have questions about if my settings
are correct. I can send my settings file to you
offline if need be.
Thanks again for your help with this!
Bryan
>From - Fri Mar 14 07:55:32 2008
X-Account-Key: account2
X-UIDL: 7B811BB5-CFFD438F-8C5B9529-0B6AAD42
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: by curly.laughingj.com from localhost
(router,SLmail V5.1); Fri, 14 Mar 2008 07:44:55 -0500
for <bjarvis>
Received: from emultipleplaces.com [192.168.1.100]
by curly.laughingj.com [192.168.1.100] (SLMail Pro) with SMTP
id FD969F5391DC4943B3411B3EF7A24384
for <[EMAIL PROTECTED]>; Fri, 14 Mar 2008 07:44:41 -0500
Received: from emultipleplaces.com ([190.92.152.32]
helo=emultipleplaces.com)
by ASSP.nospam; 14 Mar 2008 07:44:40 -0500
Received: (qmail 4564 invoked from network); 14 Mar 2008 12:23:04 -0000
Received: from unknown (HELO emultipleplaces.com) (192.168.1.20)
by emultipleplaces.com with SMTP; 14 Mar 2008 12:23:04 -0000
Message-ID: <[EMAIL PROTECTED]>
From: "Paralegal Degrees Online" <[EMAIL PROTECTED]>
To: "Bryan" <[EMAIL PROTECTED]>
Subject: [SPAM] [Bayesian][testmode] Graduate With a Paralegal Degree, 100%
Online
Date: 14 Mar 2008 09:23:04 -0300
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Assp-Delay: delayed for 17m; 14 Mar 2008 07:44:41 -0500
X-Assp-Score: 25 (DNSBLneutral)
X-Assp-Received-DNSBL: neutral (combined.njabl.org->127.0.0.4; )
X-Assp-Received-URIBL: pass
X-Assp-Score: 20 (Bayesian)
X-Assp-Bayes-Confidence: 0.00004
X-Assp-Spam-Prob: 1.00000
X-Assp-Tag: Bayesian
X-Assp-Envelope-From: [EMAIL PROTECTED]
X-Assp-Intended-For: [EMAIL PROTECTED]
X-Assp-Version: 1.3.3.8()
X-Assp-Spam: YES
X-Assp-Block: NO (Testmode)
X-Assp-ID: id-8680c2448
X-Assp-Spam-Reason: Bayesian Spam
X-Assp-Totalscore: 45
X-SLUIDL: 7B811BB5-CFFD438F-8C5B9529-0B6AAD42
Status: RO
<html>
<body>
<br />
======================================================
Bryan Jarvis cell: (972) 768-2002
http://www.laughingj.com
http://www.lifeandfiresafety.com
PRIDE HONOR INTEGRITY
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Thursday, March 13, 2008 18:01
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Questions on denySMTPConnectionsFrom and /or
denySMTPConnectionsFromAlways
Bryan Jarvis wrote:
> denySMTPConnectionsFrom, or denySMTPConnectionsFromAlways
denySMTPConnectionsFromAlways personally.
> I'm running version 1.3.3.8 and I'm not sure these functions are working.
> However, I don't know that for 100%
They are.
> But, I had Bayesian spam today from the same IP as I placed into the
> denySMTPConnectionsFrom file yesterday.
From the GUI:
[denySMTPConnectionsFrom]
"IP's in noDelay, acceptAllMail, ispip, whiteListedIPs, noProcessingIPs,
whitebox will pass"
[denySMTPConnectionsFromAlways]
"IP's in noDelay, acceptAllMail, ispip, whiteListedIPs, noProcessingIPs,
whitebox will have no free pass"
> Is there a log file entry that denotes when one of these IP's are blocked?
"Logging" section, "Enables Logging for 'Deny SMTP Connections From'"
setting.
> Also, how do I block a range of IP's - do I enter 212.123.32.0 for it to
> block the whole subnet?
http://www.asspsmtp.org/wiki/Address-Range-Notation#Simple
Kevin
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
