nevermind, figured it out. The group wants *@ourcharity.org I was missing the asterisk.
Works well. Thanks On Mon, Sep 14, 2015 at 12:21 PM, K Post <nntp.p...@gmail.com> wrote: > Thanks. I think I'll go the way of a group. > > The gui says: > > It is possible to define a group ( Groups ) in the first parameter like: > > [user@domain]=>recipient@any-domain > > The group name must be a lower case email address of a local domain > without any wildcard. This will create a combined block report for all > email addresses defined in this group - useful, if someone has multiple > email addresses and want's to get a single report. > > I tried creating a group like this > [blockrep...@ourcharity.org] > @ourcharity.org > @ourotherdomain.org > @sub.ourcharity.org > ... > > I changed what was > *.*=>k...@ourcharity.org=>1 > in blockreportfile > to > [blockrep...@ourcharity.org]=>k...@ourcharity.org=>1 > > I've manually run the block report, but nothing arrives. I'm guessing I'm > not understanding the GUI description. > > Clarify when you have a moment? This is totally not urgent. > Thanks > > > > > > > On Mon, Sep 14, 2015 at 5:19 AM, Thomas Eckardt < > thomas.ecka...@thockar.com> wrote: > >> There are so many way to this ... for example: >> >> make a group of domains for the report and exclude the honeypot >> use the replace recipient feature to translate all honeypot addresses in >> to a single one - nice, you'll get one report line with the count of all >> honeypot attempts >> do not log the final log line, which has [spam found] and the honeypot >> domain in it >> use 'BlockReport/modify.pm' to remove unwanted content fron the report >> (could be very complex) >> >> Thomas >> >> >> >> >> Von: K Post <nntp.p...@gmail.com> >> An: ASSP development mailing list <assp-test@lists.sourceforge.net> >> Datum: 13.09.2015 17:42 >> Betreff: [Assp-test] Block Report Filter >> >> >> >> One of the unfortunate parts of my job is analyzing the block report on a >> nightly basis. Yes, you should feel sorry for me. >> >> I recently implemented some honeypots, which are working great along with >> your new method of having the database rebuild immediately with them. >> GREAT STUFF. >> >> I've got a whole subdomain that's just a honeypot. I added that subdomain >> to the BlockReportFilter with the idea that I don't have to see the random >> emails that come in - and there are a lot of them. >> >> The filter seems to work, but unfortunately, each recipient address is >> still listed in the block report. There aren't any messages, instead it >> shows each email address followed by "no blocked" followed by something >> like "1 line skipped on global defined filter regex 'BlockReportFilter'" >> - and there's a ton of email addresses. >> >> *Is there a way to have addresses that have no activity other than what's >> filtered out simply not show in a wildcard block report?* >> >> >> *Thanks* >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> Assp-test mailing list >> Assp-test@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-test >> >> >> >> >> >> >> DISCLAIMER: >> ******************************************************* >> This email and any files transmitted with it may be confidential, legally >> privileged and protected in law and are intended solely for the use of the >> >> individual to whom it is addressed. >> This email was multiple times scanned for viruses. There should be no >> known virus in this email! >> ******************************************************* >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> Assp-test mailing list >> Assp-test@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-test >> > > ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
