I believe "ipfile" is specifically used to block single IPs and blocks of
IPs. The file it relates to should have a list of single IPs or IP/CIDR.
After the IP, the remainder of the line is only used for comments.
Otherwise you can also have a test (just as you state you've already got) in
which you would use qualifiers such as header contains, body contains, helo
is. etc., the string, and a weight to assign to that test if failed. Check
the docs for all the variations. This is mainly used for key words, or a
string of characters and an IP address is nothing more than a string of
characters.
HTH..
~Joe
----- Original Message -----
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, January 05, 2006 8:42 AM
Subject: [Declude.JunkMail] blocking IP range
I remember someone on this list said that if I wanted to add a weight to a
series of IP addresses in the same range I could do it this way:
1. In my global.cfg add an external test pointing to a file, adding some
weight to it
2. In that file, have a list of IP addresses
for example:
IPFILE.TXT
65.205.249.112
65.205.249.111
Is that it? Don't I need to use some type of HEADERS CONTAINS - like
this?
HEADERS CONTAINS 65.205.249.112
or
REMOTEIP IS 65.205.249.112
Last question: I was also told that I could do IP ranges like this:
65.205.249.0/24 - and this would cover all possible permutations of
65.204.249.???
Am I getting this right?
Thanks.
---
[This E-mail was scanned for viruses.]
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses at HNB.com]
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
