Thomas, When you said white and black IP lists, which lists (by name please) are you talking about?
I see the whitelistedIP list, but I don't want these allowed emails to contribute to the whitelist or notspam corpus, I just want to give them a bonus score, like senderbase functionality allows. I know I can give a bonus using a bombheaderre, but why not have this also in Senderbase? It keeps this kind of thing in one place. You've already got the new code looking to the hostname, but, if I understand it correctly, that's only if the domain isn't returned by senderbase. What's the downside to just having an "or" match here to catch a given value in WhiteSenderBase if it appears in the neetwork name, domain name, OR the hostname? Greyhat- I've been using assp since 0.34, back in the John Hanna days. I'm not trying to use senderbase as a single layer. Quite to the contrary, I use senderbase, I believe how it is intended, to help insure that a single layer inaccuracy (say bayesian) will incorrectly block a message. I like that the data comes from Cisco's ironport network, vs simply a reverse DNS to global servers. I'm suggesting what I perceive as an improvement to ASSP for Thomas' consideration. Sometimes its those little things that can make a big difference. One of the things I'm battling is an inaccurate corpus. This isn't ASSP's fault - it's due to my job responsibility having changed several years back, no one else paying attention when there was supposed to be someone, using very old v2 code, and some lousy settings for about 3 years before now. Now that I've convinced the powers that be that this has gotten out of hand, we're back on track and the corpus is improving greatly. Giving senderbase the ability to look down to the hostname would help me - if there's another way, I'm all ears. On Mon, May 11, 2015 at 8:39 AM, Grayhat <gray...@gmx.net> wrote: > :: On Sun, 10 May 2015 22:54:08 -0400 > :: <CALhpkAkJ83fODX8sO9h8EHYrs6Ev=oozgitp7zngrqqznkb...@mail.gmail.com> > :: K Post <nntp.p...@gmail.com> wrote: > > > example: > > 63.249.66.210 SenderBase: status=not classified, data=US, CRUZIO, > > cruzio.com, , Y, 19, changedetection.com > > SO GREAT that it shows the changedetection.com hostname in the > > analyze gui now, but it's not matching my whitelist, because the > > domain of cruzio.com takes priority. If only ASSP would look to the > > hostname as well, regardless of if there's a domain listed, we'd be > > golden. > > the purpose for the senderbase queries is different, it's used to find > the IP *owner* country (as opposed as the IP country, a big player may > use IPs spread all over the globe but be based in country "XX") and the > owner informations; when it comes to IPs and domain/host names we have > DNS lists and URI lists... and sincerely it seems to me that you are > missing the inner working of ASSP, see, the code uses a "layered check" > approach where each bit and piece contributes to the scoring; my humble > suggestion is to try reading the archives of this list and/or looking > at the ASSP source code > > > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
