Place it in the Declude.cfg, restart the proc service
>What was the trick to getting the blacklist text file working? I haven't >been able to get it to output anything. Running Declude 4.3.23 for >Smartermail. I put the "BLKLST ON" in the global.cfg, right place? Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise Sent: Tuesday, December 12, 2006 3:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 Hits IP Address HostName ________________________________________________________ 54 61.50.229.194 61.50.229.194 --------------------------- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --------------------------- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --------------------------- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --------------------------- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --------------------------- 14 202.175.165.198 n17z165l198.broadband.ctm.net --------------------------- 12 66.151.234.151 ccm14.constantcontact.com --------------------------- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --------------------------- 11 66.151.234.153 ccm16.constantcontact.com --------------------------- 8 201.9.194.141 201009194141.user.veloxzone.com.br --------------------------- 8 213.207.242.147 213.207.242.147 --------------------------- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --------------------------- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --------------------------- 7 169.139.180.120 mail.scps.k12.fl.us --------------------------- 7 202.175.95.171 z95l171.static.ctm.net --------------------------- 7 219.155.156.139 hn.kd.pix --------------------------- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --------------------------- 6 125.33.74.167 125.33.74.167 --------------------------- 6 208.254.21.131 crozier.missingkids.com --------------------------- 6 222.217.118.250 222.217.118.250 --------------------------- 6 59.45.98.255 59.45.98.255 --------------------------- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
