DoDomainIP would be nice but it does not work too well. As you can see below it works very rarely. Basicly its not, while it should catch so many IPs!
root@sv1 [/usr/assp]# cat assp.cfg|grep DoDomainIP DoDomainIP:=1 root@sv1 [/usr/assp]# cat assp.cfg|grep maxSMTPdomainIP maxSMTPdomainIP:=10 maxSMTPdomainIPExpiration:=7200 maxSMTPdomainIPLD:=1 maxSMTPdomainIPWL:=yahoo.com|hotmail.com|gmail.com root@sv1 [/usr/assp/logs]# cat maillog.txt|grep 'of ips per domain'|tail -n 10 Nov-05-13 17:27:43 38366-82065 [IPperDomain] 190.235.182.47 <reversaliegy...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 17:27:45 38366-82068 [IPperDomain] 190.235.182.47 <loiteredo...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 17:27:46 38366-82079 [IPperDomain] 190.235.182.47 <disclaimed...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 18:54:54 38367-92203 [IPperDomain] 190.237.154.229 <expungin...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 18:55:00 38367-92216 [IPperDomain] 190.190.141.73 <birdin...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 18:55:02 38367-92219 [IPperDomain] 190.190.141.73 <marcia...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 19:29:25 38367-95213 [IPperDomain] 190.239.197.42 <cruciformr...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 19:30:30 38367-95306 [IPperDomain] 2.145.109.86 <drum...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 19:42:49 38367-97978 [IPperDomain] 190.238.249.61 <stick...@google.com> '@google.com' passed limit(10) of ips per domain; Nov-05-13 20:28:53 38367-01924 [IPperDomain] 183.91.80.50 <controll...@google.com> '@google.com' passed limit(10) of ips per domain; root@sv1 [/usr/assp/logs]# cat maillog.txt|grep '@google.com'|tail -n 30|awk '{print $4}'|uniq -c 1 188.186.84.29 1 [SpoofedSender] 2 188.186.84.29 1 [SpoofedSender] 2 94.183.41.92 1 202.29.239.113 2 202.84.75.242 1 87.76.50.237 2 118.98.197.170 1 181.64.158.166 1 117.241.0.194 1 59.177.235.197 1 147.30.39.222 1 200.35.37.4 1 87.76.50.237 1 2.180.138.43 1 110.164.71.145 1 201.230.184.55 1 117.241.0.194 1 202.53.80.218 2 2.184.221.41 1 200.35.202.156 1 181.66.116.195 1 95.58.102.125 1 124.158.74.2 root@sv1 [/usr/assp/logs]# cat maillog.txt|grep '@google.com'|tail -n 30 Nov-06-13 05:31:21 38371-00645 202.53.80.218 <suppleme...@google.com> to: p...@omega-bud.pl disconnected (1 seconds); Nov-06-13 05:31:22 38371-00647 2.184.221.41 <appetizin...@google.com> to: bi...@rysy.pl recipient delayed: bi...@rysy.pl; Nov-06-13 05:31:22 38371-00647 2.184.221.41 <appetizin...@google.com> to: bi...@rysy.pl disconnected (2 seconds); Nov-06-13 05:31:23 38371-00646 200.35.202.156 <stable...@google.com> to: sekretar...@soart.pl disconnected (8 seconds); Nov-06-13 05:31:27 38371-00650 181.66.116.195 <oafsxu...@google.com> to: woszczy...@w-s.pl disconnected (3 seconds); Nov-06-13 05:31:36 38371-00658 95.58.102.125 <compresso...@google.com> to: y...@uni-bus.com.pl disconnected (6 seconds); Nov-06-13 05:31:39 38371-00664 124.158.74.2 <cutest...@google.com> to: hande...@medsoft.com.pl disconnected (1 seconds); Nov-06-13 05:31:47 38371-00671 202.47.64.70 <pepper...@google.com> to: m...@uni-bus.com.pl disconnected (5 seconds); Nov-06-13 05:31:50 38371-00672 119.63.83.37 <besmirchingq...@google.com> to: ad...@lottocad.pl recipient delayed: ad...@lottocad.pl; Nov-06-13 05:31:50 38371-00672 119.63.83.37 <besmirchingq...@google.com> to: ad...@lottocad.pl disconnected (1 seconds); Nov-06-13 05:31:53 38371-00673 181.18.28.140 <sociablespu...@google.com> to: da...@lysyszyn.pl recipient delayed: da...@lysyszyn.pl; Nov-06-13 05:31:53 38371-00673 181.18.28.140 <sociablespu...@google.com> to: da...@lysyszyn.pl disconnected (2 seconds); Nov-06-13 05:31:56 38371-00676 190.238.166.45 <bergera...@google.com> to: kinermaciejki...@pasadema.pl disconnected (2 seconds); Nov-06-13 05:31:56 38371-00679 95.56.157.17 <seventhc...@google.com> to: kaz...@medsoft.com.pl disconnected (4 seconds); Nov-06-13 05:31:56 38371-00680 95.56.157.17 <additionally...@google.com> to: l...@medsoft.com.pl disconnected (4 seconds); Nov-06-13 05:32:02 38371-00710 178.61.193.159 <manuelalb...@google.com> to: dog...@w-s.pl disconnected (3 seconds); Nov-06-13 05:32:02 38371-00711 178.61.193.159 <dogmati...@google.com> to: hzldsumw...@w-s.pl disconnected (3 seconds); Nov-06-13 05:32:08 38371-00712 37.218.153.138 <expiate...@google.com> to: redak...@101porad.pl disconnected (3 seconds); Nov-06-13 05:32:10 38371-00713 118.98.197.170 <railway...@google.com> to: m...@oneclick.pl disconnected (2 seconds); Nov-06-13 05:32:11 38371-00715 117.3.177.253 <pricec...@google.com> to: progl...@proglama.pl recipient delayed: progl...@proglama.pl; Nov-06-13 05:32:12 38371-00715 117.3.177.253 <pricec...@google.com> to: progl...@proglama.pl disconnected (2 seconds); Nov-06-13 05:32:12 38371-00714 122.2.22.242 <bellicosee...@google.com> to: norb...@rafalik.pl recipient delayed: norb...@rafalik.pl; Nov-06-13 05:32:12 38371-00714 122.2.22.242 <bellicosee...@google.com> to: norb...@rafalik.pl disconnected (2 seconds); Nov-06-13 05:32:14 38371-00718 117.3.177.253 <thr...@google.com> to: n...@flashblog.pl recipient delayed: n...@flashblog.pl; Nov-06-13 05:32:14 38371-00718 117.3.177.253 <thr...@google.com> to: n...@flashblog.pl disconnected (2 seconds); Nov-06-13 05:32:15 38371-00717 117.218.108.23 <burdened...@google.com> to: ra...@ratel.net.pl recipient delayed: ra...@ratel.net.pl; Nov-06-13 05:32:15 38371-00717 117.218.108.23 <burdened...@google.com> to: ra...@ratel.net.pl disconnected (3 seconds); Nov-06-13 05:32:18 38371-00721 87.76.50.237 <grann...@google.com> to: mi...@w-s.pl disconnected (1 seconds); Nov-06-13 05:32:23 38371-00725 82.200.205.101 <absolv...@google.com> to: e...@ece.com.pl recipient delayed: e...@ece.com.pl; Nov-06-13 05:32:23 38371-00725 82.200.205.101 <absolv...@google.com> to: e...@ece.com.pl disconnected (1 seconds); ------------------------------------------------------------------------------ November Webinars for C, C++, Fortran Developers Accelerate application performance with scalable programming models. Explore techniques for threading, error checking, porting, and tuning. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user