RE: [Declude.JunkMail] blklst ON statistics...
What was the trick to getting the blacklist text file working? I haven't been able to get it to output anything. Running Declude 4.3.23 for Smartermail. I put the BLKLST ON in the global.cfg, right place? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 HitsIP Address HostName 54 61.50.229.194 61.50.229.194 --- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --- 14 202.175.165.198n17z165l198.broadband.ctm.net --- 12 66.151.234.151 ccm14.constantcontact.com --- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --- 11 66.151.234.153 ccm16.constantcontact.com --- 8 201.9.194.141 201009194141.user.veloxzone.com.br --- 8 213.207.242.147 213.207.242.147 --- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --- 7 169.139.180.120 mail.scps.k12.fl.us --- 7 202.175.95.171 z95l171.static.ctm.net --- 7 219.155.156.139 hn.kd.pix --- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --- 6 125.33.74.167 125.33.74.167 --- 6 208.254.21.131 crozier.missingkids.com --- 6 222.217.118.250 222.217.118.250 --- 6 59.45.98.25559.45.98.255 --- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] blklst ON statistics...
Place it in the Declude.cfg, restart the proc service What was the trick to getting the blacklist text file working? I haven't been able to get it to output anything. Running Declude 4.3.23 for Smartermail. I put the BLKLST ON in the global.cfg, right place? Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise Sent: Tuesday, December 12, 2006 3:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 HitsIP Address HostName 54 61.50.229.194 61.50.229.194 --- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --- 14 202.175.165.198n17z165l198.broadband.ctm.net --- 12 66.151.234.151 ccm14.constantcontact.com --- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --- 11 66.151.234.153 ccm16.constantcontact.com --- 8 201.9.194.141 201009194141.user.veloxzone.com.br --- 8 213.207.242.147 213.207.242.147 --- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --- 7 169.139.180.120 mail.scps.k12.fl.us --- 7 202.175.95.171 z95l171.static.ctm.net --- 7 219.155.156.139 hn.kd.pix --- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --- 6 125.33.74.167 125.33.74.167 --- 6 208.254.21.131 crozier.missingkids.com --- 6 222.217.118.250 222.217.118.250 --- 6 59.45.98.25559.45.98.255 --- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] blklst ON statistics...
It should be in the declude.cfg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise Sent: Tuesday, December 12, 2006 3:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... What was the trick to getting the blacklist text file working? I haven't been able to get it to output anything. Running Declude 4.3.23 for Smartermail. I put the BLKLST ON in the global.cfg, right place? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 HitsIP Address HostName 54 61.50.229.194 61.50.229.194 --- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --- 14 202.175.165.198n17z165l198.broadband.ctm.net --- 12 66.151.234.151 ccm14.constantcontact.com --- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --- 11 66.151.234.153 ccm16.constantcontact.com --- 8 201.9.194.141 201009194141.user.veloxzone.com.br --- 8 213.207.242.147 213.207.242.147 --- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --- 7 169.139.180.120 mail.scps.k12.fl.us --- 7 202.175.95.171 z95l171.static.ctm.net --- 7 219.155.156.139 hn.kd.pix --- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --- 6 125.33.74.167 125.33.74.167 --- 6 208.254.21.131 crozier.missingkids.com --- 6 222.217.118.250 222.217.118.250 --- 6 59.45.98.25559.45.98.255 --- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] blklst ON statistics...
Thanks, got it, the original email I saw said global.cfg - working now. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, December 12, 2006 3:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... It should be in the declude.cfg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise Sent: Tuesday, December 12, 2006 3:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... What was the trick to getting the blacklist text file working? I haven't been able to get it to output anything. Running Declude 4.3.23 for Smartermail. I put the BLKLST ON in the global.cfg, right place? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 HitsIP Address HostName 54 61.50.229.194 61.50.229.194 --- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --- 14 202.175.165.198n17z165l198.broadband.ctm.net --- 12 66.151.234.151 ccm14.constantcontact.com --- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --- 11 66.151.234.153 ccm16.constantcontact.com --- 8 201.9.194.141 201009194141.user.veloxzone.com.br --- 8 213.207.242.147 213.207.242.147 --- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --- 7 169.139.180.120 mail.scps.k12.fl.us --- 7 202.175.95.171 z95l171.static.ctm.net --- 7 219.155.156.139 hn.kd.pix --- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --- 6 125.33.74.167 125.33.74.167 --- 6 208.254.21.131 crozier.missingkids.com --- 6 222.217.118.250 222.217.118.250 --- 6 59.45.98.25559.45.98.255 --- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
