Hi Roberto, I noticed this new addition to the spamfilter.ini file in the changes list but I am unable to find it in the spamfilter.ini after a upgrade.

I am assuming one must add this manually. Any particular place it needs to be in the spamfilter.ini?

Is the item entered like this:

DoNotAddIPToHoneypot=x.x.x.x,x.x.x.x,x.x.x.x

Thanks
Wayne

I had a false positive the other day from a sender who was coming in from bellsouth.net  Looks like our honeypot list tagged one of their mail servers.

I know you can use the donotaddiptohoneypot feature to prevent a trusted IP from being added to this list, my question is what's the best policy for determining what a "trusted" server is?  Should this be just your own internal relays or is it ok to add a major ISP's mail server to this list?

I'm like everyone else in that I don't want a semi-permanent surge of false positives from a specific ISP because someone cracked a password on their mail server.  Also, if it is a good practice to place major ISP's in the donotaddiptohoneypot list, is there a trusted list of major ISP mail servers out there we can add to this list?

The intent of the honeypot list should be to block all those zombie pc's out there and lame mail servers that are poorly configured.  I've only had a couple of false positives as a result of the honeypots list since we implemented it, but would like for our server to know who's a major source of email and thus should be allowed to continue on through the remaining filter list and who's not and should be scrutinized with extreme prejudice.