I'm using Declude Pro and what I do is also time consuming. I keep an access DB of spam e-mail that I get copied on or goes into the hold directory. I put the recipient, the X-declude sender and I have a four fields for IP address. I have two more fields one for "declude blocked" and one for "Imail blocked". I can run queries, filters or sort based on the IP address. This way I can see repeat IP's that come in from different senders and add them to the Put them in IMAIL's control access file. Conversely, when I see the same or similar senders using similar IP's (64.205.206.16, 64.205.206.27, 64.205.206.110 etc) I will add them to Declude's IP file and block the whole class C - 64.205.206.0/24. I have postmaster, admin and abuse set with a different .junkmailfile to run all the test but to never hold or delete anything so they can receive all mail in case someone innocent gets blocked. I have repeatedly told the users on my domains that the settings are a bit aggressive and should anyone complain that they are unable to get an e-mail through to have them contact me at one of those addresses to see if it is failing any of my black lists. I also built a black list based on the X-declude sender from that database. I never thought of adding the date.... : (
It is a bit of work, but since I started it the few users who had violated all the rules to not get spam went from getting over 100 spams a day to about 1 or 2. Marc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of paul Sent: Monday, March 24, 2003 01:19 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] IP filters Hey all, a quick question if I may.. Those who have IP lists set up, do you monitor repeats and then place them in the SMTP Control Access file if they are used repeatedly? What do you normally do? What I've been doing here is set the IP test as a weight, and new IPs that are from the US, esp. AOL etc - are added to the IP file, but others, foreign servers 80.whatever seem to be all junk, are added to the SMTP file. OBviously preventing the connection would save on resources correct? So what stage do you people add to your SMTP file? Since I see the same IPs over and over from services like Verio, I'm adding some of these to the SMTP list. More work for me, but I have each IP I add to the Control Acces in an Excel sheet so I know the dates I added them to that list, in case of problems. I have to say, this list is getting pretty big! Thanks for any input! Oh, one more thing...... Scott! What's the subscribe address for the Declude lists? I got bumped off the Junkmail and Virus lists last week due to an e-mail problem. Thanks! Paul --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
