Got me! What you describe does sound strange. I know that Thomas has made some significant improvements to the analyze GUI recently. Would you consider trying a new version? it could just be that analyze isn't working as expected???
On Mon, Jun 1, 2015 at 10:54 AM, Jay <[email protected]> wrote: > Thank you for the information. I appreciate it. I did check through our > log before posting to find out why it was blocked. Which in this case > just mentioned (Bayesian) and then the keywords afterwards [Contact > Information]. What sparked this question I had was I checked the email > with the built in Mail Analyzer and the red flag that appeared was > xx.xx.xx.xx is in CountryCache: status=changed to black country, > data=US, COX COMMUNICATIONS, cox.net, , Y, 17 > > That's when I started my search as to why the status changed to what it > did. When I opened the "show cache" under Country Cache Refresh Interval > (SBCacheExp) and search for the first 2 octets of the IP is when I found > it listed. > > DoCountryBlocking is set to block > DoSenderBase is set to score > CountryCodeBlockedRe is set to > CN|KR|RU|JP|TR|TH|PL|LT|CL|RO|UA|GR|HU|SA|IN|GB|IE|PT|MD|PE|CZ|TW|BR|CL|SU > > So with what you mentioned in your previous message, US is not listed in > CountryCodeBlockedRe. We do however have US listed in NoCountryCodeRe. > So it's just really strange that a US IP address got red flagged on the > Mail Analyzer when it shouldn't have. That's my main concern here. I'm > just wondering if there is something I am missing in the config for > ASSP. We have been running the same config for years, so it just puzzles > me why all of the sudden now. Is there something else I am missing? Just > seems really odd. > > On 5/29/2015 10:36 PM, K Post wrote: > > I >>BELIEVE<< that the SBCachePB is the cache of country codes matched to > > ip's along with the other SenderBase info. The cache helps reduce ASSP > > workload by not looking up the country or network names for ip's that are > > in the cache already. > > > > Whether they're blocked or not depends on DoCountryBlocking / > > DoSenderBase. If set to block, then if the country matches a > > CountryCodeBlockRe, the it'll be blocked. Set to score, it'll get the > > score. High enough of a score, and it'll still be blocked. > > > > Search the log for an example reason and see why it was blocked??? > > > > On Fri, May 29, 2015 at 5:33 PM, Jay <[email protected]> wrote: > > > >> I have a question on the Country Cache Refresh Interval (SBCacheExp). > >> Are the entries in this database being blocked? We are currently using > >> version 2.4.1(14085) on our mail server. The reason why I ask is because > >> we recently had an issue where several of our users have questioned why > >> legitimate emails have been blocked. Running an analyze on an example > >> email turned up an IP in the US (which is set on the ignore countries > >> section) and listed in the Country Cache Refresh Interval (SBCacheExp) > >> cache. > >> > >> The refresh interval is set to 3 days and has been for quite sometime. I > >> am just trying to figure out if this cache is a list of blocked > >> countries, then why do I have US IP addresses in there when they > >> shouldn't be. > >> > >> Thanks. > >> > >> > >> > >> > ------------------------------------------------------------------------------ > >> _______________________________________________ > >> Assp-user mailing list > >> [email protected] > >> https://lists.sourceforge.net/lists/listinfo/assp-user > >> > > > ------------------------------------------------------------------------------ > > _______________________________________________ > > Assp-user mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/assp-user > > > > > > ----- > > No virus found in this message. > > Checked by AVG - www.avg.com > > Version: 2015.0.5941 / Virus Database: 4354/9916 - Release Date: 06/01/15 > > > > > > > > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
