the '*' in front is missing in the groups definition [blockrep...@ourcharity.org] *@ourcharity.org *@ourotherdomain.org *@sub.ourcharity.org
Thomas Von: K Post <nntp.p...@gmail.com> An: ASSP development mailing list <assp-test@lists.sourceforge.net> Datum: 14.09.2015 18:21 Betreff: Re: [Assp-test] Block Report Filter Thanks. I think I'll go the way of a group. The gui says: It is possible to define a group ( Groups ) in the first parameter like: [user@domain]=>recipient@any-domain The group name must be a lower case email address of a local domain without any wildcard. This will create a combined block report for all email addresses defined in this group - useful, if someone has multiple email addresses and want's to get a single report. I tried creating a group like this [blockrep...@ourcharity.org] @ourcharity.org @ourotherdomain.org @sub.ourcharity.org ... I changed what was *.*=>k...@ourcharity.org=>1 in blockreportfile to [blockrep...@ourcharity.org]=>k...@ourcharity.org=>1 I've manually run the block report, but nothing arrives. I'm guessing I'm not understanding the GUI description. Clarify when you have a moment? This is totally not urgent. Thanks On Mon, Sep 14, 2015 at 5:19 AM, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > There are so many way to this ... for example: > > make a group of domains for the report and exclude the honeypot > use the replace recipient feature to translate all honeypot addresses in > to a single one - nice, you'll get one report line with the count of all > honeypot attempts > do not log the final log line, which has [spam found] and the honeypot > domain in it > use 'BlockReport/modify.pm' to remove unwanted content fron the report > (could be very complex) > > Thomas > > > > > Von: K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 13.09.2015 17:42 > Betreff: [Assp-test] Block Report Filter > > > > One of the unfortunate parts of my job is analyzing the block report on a > nightly basis. Yes, you should feel sorry for me. > > I recently implemented some honeypots, which are working great along with > your new method of having the database rebuild immediately with them. > GREAT STUFF. > > I've got a whole subdomain that's just a honeypot. I added that subdomain > to the BlockReportFilter with the idea that I don't have to see the random > emails that come in - and there are a lot of them. > > The filter seems to work, but unfortunately, each recipient address is > still listed in the block report. There aren't any messages, instead it > shows each email address followed by "no blocked" followed by something > like "1 line skipped on global defined filter regex 'BlockReportFilter'" > - and there's a ton of email addresses. > > *Is there a way to have addresses that have no activity other than what's > filtered out simply not show in a wildcard block report?* > > > *Thanks* > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
