Thank you for the information. I appreciate it. I did check through our log before posting to find out why it was blocked. Which in this case just mentioned (Bayesian) and then the keywords afterwards [Contact Information]. What sparked this question I had was I checked the email with the built in Mail Analyzer and the red flag that appeared was xx.xx.xx.xx is in CountryCache: status=changed to black country, data=US, COX COMMUNICATIONS, cox.net, , Y, 17
That's when I started my search as to why the status changed to what it did. When I opened the "show cache" under Country Cache Refresh Interval (SBCacheExp) and search for the first 2 octets of the IP is when I found it listed. DoCountryBlocking is set to block DoSenderBase is set to score CountryCodeBlockedRe is set to CN|KR|RU|JP|TR|TH|PL|LT|CL|RO|UA|GR|HU|SA|IN|GB|IE|PT|MD|PE|CZ|TW|BR|CL|SU So with what you mentioned in your previous message, US is not listed in CountryCodeBlockedRe. We do however have US listed in NoCountryCodeRe. So it's just really strange that a US IP address got red flagged on the Mail Analyzer when it shouldn't have. That's my main concern here. I'm just wondering if there is something I am missing in the config for ASSP. We have been running the same config for years, so it just puzzles me why all of the sudden now. Is there something else I am missing? Just seems really odd. On 5/29/2015 10:36 PM, K Post wrote: > I >>BELIEVE<< that the SBCachePB is the cache of country codes matched to > ip's along with the other SenderBase info. The cache helps reduce ASSP > workload by not looking up the country or network names for ip's that are > in the cache already. > > Whether they're blocked or not depends on DoCountryBlocking / > DoSenderBase. If set to block, then if the country matches a > CountryCodeBlockRe, the it'll be blocked. Set to score, it'll get the > score. High enough of a score, and it'll still be blocked. > > Search the log for an example reason and see why it was blocked??? > > On Fri, May 29, 2015 at 5:33 PM, Jay <[email protected]> wrote: > >> I have a question on the Country Cache Refresh Interval (SBCacheExp). >> Are the entries in this database being blocked? We are currently using >> version 2.4.1(14085) on our mail server. The reason why I ask is because >> we recently had an issue where several of our users have questioned why >> legitimate emails have been blocked. Running an analyze on an example >> email turned up an IP in the US (which is set on the ignore countries >> section) and listed in the Country Cache Refresh Interval (SBCacheExp) >> cache. >> >> The refresh interval is set to 3 days and has been for quite sometime. I >> am just trying to figure out if this cache is a list of blocked >> countries, then why do I have US IP addresses in there when they >> shouldn't be. >> >> Thanks. >> >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> Assp-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-user >> > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > > ----- > No virus found in this message. > Checked by AVG - www.avg.com > Version: 2015.0.5941 / Virus Database: 4354/9916 - Release Date: 06/01/15 > > ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
