What am I doing wrong here?

This is the E-mail header:

Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: OSSOFT: http://spamhaus.org/SBL/sbl.lasso?query=SBL5031
X-RBL-Warning: SPAMCOP: Blocked - see
http://spamcop.net/bl.shtml?64.49.243.105
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[4000020e].
X-Declude-Sender: [EMAIL PROTECTED]
[64.49.243.105]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.

This is one entry in a file bannedips.txt located on the root of the D:
drive

64.49.243.0/24

This is from my Global.cfg

IPBLACKLIST     fromfile D:\bannedips.txt       x       5       0


This is from my $default$.junkmail

IPBLACKLIST     DELETE


Shouldn't 64.49.243.0/24 get anything in this range, such as 64.49.243.105?
Should I make the text file less than 8 characters long?  If there is no
HOLD reason after the IP does it fail?
I only have 4 domains whitelisted so that shouldn't be an issue.

Thanks - Marc




-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, November 19, 2002 04:25 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Blacklist not working as expected



>They seemed to be originating from 216.39.115.66
>(81,68,55) so I also added 216.39.115.0/24 to bannedip.txt.  Would this
work
>just as well, better or faster if I put these IPs in the SMTP control
access
>list?  Though I didn't see an easy way to block an entire class C.

The 216.39.115.0/24 is the best way to handle the IP ranges (which in the
case of a /24 is a class C range).  It's slightly faster than multiple
entries, and a lot easier to read.
                                -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to