> Actually, you mean that you are at the limit, and several of > your entries aren't being used.
Can't understand...? The IPs from the second and third block are extracted from the last days logfiles. Any of this Ip has send many many legit messages and only some of them has send a few spam messages. > IPBYPASS isn't used for IPs that are listed in blacklists -- > that's what whitelisting is for. But if I whitelist an IP or IP-range wouldn't this whitelist the message generally and avoid that other spam-tests are able to catch the spam? > That is probably the best thing to do here. Really? :-( > If they are *so* bad that they are being listed in blacklists > *and* they keep changing IPs, the problem is on their end. > Do you really want to spend all your time helping them for > free? While false positives are a bad thing, there are > limits. For example, if a major ISP starts intentionally > allowing spammers to send mail through their servers, and > half their mail is legitimate but half is spam, what are you > going to do? > > If the ISP can't stay out of blacklists, and wants their mail > delivered, they have to make sure that they can be > whitelisted. If they can't do that, they can't expect their > mail to be delivered. Well the situation is that this ISP offers many Dialup- and XDSL-Lines. Connectivity is their core business. After being listed in some IP blacklists they have changed their mail server settings and track users that was identified as spammers. Now we can see less then 5% of spam comming from this IPs. In absolute numbers the legit messages are very much. If I should block messages by this legit/spam ratio then before I maybe should add a lot of points to any message comming from USA or Canada. More then 75% of all messages comming from there is spam. As I can understand I need something like IPBYPASS and not IP WHITELIST because I can read on the manual: "WARNING: Whitelisting is a last resort to accept mail from poorly administered mailservers, and will often allow spam through if you are not careful" Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
