Good day everyone.

I'm fairly new to ASSP but am setting it up to replace an existing (but no longer supported) spam solution I've been using.

My question concerns using DNS based blacklists and whitelists. I have two sets of DNS based lists running on bind. One is a blacklist and one is a whitelist. What I will do is add a range of IPs to the blacklist (say a /24 or /16) and then whitelist specific IPs within that range. For example (using non-routeable IPs):

Blacklist - 10.0.0.0/8
Whitelist - 10.100.23.15/32

ASSP flags anything coming from 10.100.23.15 as spam, even though it's whitelisted. When I run the real IP through the mail analyzer, I get the following (replacing the actual IP with 10.100.23.15):

• URIBL check: 'OK'
• RBLCacheCheck returned OK for 10.100.23.15: inserted as not ok at 2017-03-15 11:58:22 , listed by bl.mcf.com{127.0.0.2} - message score: 10
 • RBLScore: bl.mcf.com -> 127.0.0.2 -> 10
• 10.100.23.15 is in PTRCache: status=PTR OK - mail.tcmsp.net
• 10.100.23.15 is in RWLCache: status=not listed
• 10.100.23.15 SenderBase: status=not classified, ...

If I use nslookup to lookup ip address in the whitelist, I get a 127.0.0.3 return value, which is what I expect.

Do I have something configured incorrectly that is preventing the whitelist from overriding the blacklist?

Any pointers would be appreciated.

Thanks.

Farokh
----------------------------------------------------------------------------
Best Tech Service, LLC- When only the Best will do...
For all your technology needs including hosting solutions.
Cell: 914-262-1594
Like us on facebook: https://www.facebook.com/besttechsvc

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to