Linda,
 
Thanks.  I have a few questions since I wasn't able to find any info in the
manual.
 
Does it log every IP or just IPs that sent email that had a weight that
indicated it was Spam?
 
 I have a log entry of:
 
151.49.14.245 95
 
What does the "95" at the end of the line indicate?  Is that the number of
emails from that IP?

  _____  

From: [email protected] [mailto:[email protected]]
On Behalf Of Linda Pagillo
Sent: Thursday, June 06, 2013 9:59 AM
To: [email protected]
Subject: [MBF]Re: Spam Flurry ?



Open your delcude.cfg file and add the following line to the bottom. BLKLST
ON

Once you do that, restart your decludeproc service and you will see the
blklst.txt in your Spool directory.

 

Linda Pagillo
Mail's Best Friend
Email: [email protected]
Web: www.mailsbestfriend.com
Office: 703.988.3605 x7016
Mobile: 931-284-9291

 

MBF

 

From: [email protected] [mailto:[email protected]]
On Behalf Of Dave Beckstrom
Sent: Thursday, June 06, 2013 10:52 AM
To: [email protected]
Subject: [MBF]Re: Spam Flurry ?

 

I searched the declude manual for "blklst" and found nothing.  How do I go
about enabling this feature?

 

  _____  

From: [email protected] [mailto:[email protected]]
On Behalf Of David Barker
Sent: Wednesday, May 29, 2013 3:15 PM
To: [email protected]
Subject: [MBF]Re: Spam Flurry ?

You can also use the blklst*.txt file which will provide this information
for easy extraction

David Barker
Mail's Best Friend

Email     : [email protected]
Web      : www.mailsbestfriend.com <http://www.mailsbestfriend.com/> 
Office    : 866.919.2075
Mobile  : 978.518.6461

 

From: [email protected] [mailto:[email protected]]
On Behalf Of Dave Beckstrom
Sent: Wednesday, May 29, 2013 3:29 PM
To: [email protected]
Subject: [MBF]Re: Spam Flurry ?

 

Yes.  I've been seeing a lot of patterns like that where I can block a whole
subnet.  I wish we had something that would parse the declude log files and
give stats on spam by IP so that it wasn't a manual process of identifying
those IP blocks.

 

  _____  

From: [email protected] [mailto:[email protected]]
On Behalf Of David Barker
Sent: Wednesday, May 29, 2013 11:19 AM
To: [email protected]
Subject: [MBF]Re: Spam Flurry ?

Anyone else seeing spam flurry coming from 96.9.155.0/24 ?

David Barker
Mail's Best Friend

Email     : [email protected]
Web      : www.mailsbestfriend.com <http://www.mailsbestfriend.com/> 
Office    : 866.919.2075
Mobile  : 978.518.6461

cid:[email protected]

 

<<image001.gif>>

<<image002.png>>

Reply via email to