| Author |
 Topic Search  Topic Options
|
LogSat 
Admin Group
Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: Free SpamFilter ISP v2.7.1.511 is avail
Posted: 11 January 2006 at 8:29pm |
|
SpamFilter ISP v2.7.1.511 has been released as a free download to the public for evaluation purposes. As always, the free version is a fully
functional copy, it has no expiration dates, but is licensed only for use in testing / development environments.
The improvements since the
previous free build 2.6.3.473 are listed below:
// New to VersionNumber = '2.7.1.511';
{TODO -cNew : Changed the priority of the IP blacklist filter, it is now placed before the local domains blacklist}
{TODO -cNew : Changed the logfile entry if the IP address is blacklisted to: "IP is in local blacklist file..."}
{TODO -cNew : Performing reverse DNS queries only if the ReverseDNS filter is enabled, thus improving performance when it's off}
// New to VersionNumber = '2.7.1.510';
{TODO -cFix : Improved the forced disconnects of the cache filter to prevent the current connections to add up}
{TODO -cFix : Regression error in v2.6.3.495 cause the MX record test to not detect all errors}
// New to VersionNumber = '2.7.1.508';
{TODO -cNew : Implemented an IP cache to temporarily deny further connections to IPs that sent multiple spams recently. This can greatly reduce the load on the server}
{TODO -cNew : Improved "Connections" tab, showing in real-time what commands the remote IPs are sending}
{TODO -cFix : Sometimes the "Current Connections" counter could not decrease when a remote connection is dropped, thus displaying a number higher than reality}
// New to VersionNumber = '2.6.3.502';
{TODO -cFix : Duplicate entries were being created in the logfiles}
{TODO -cFix : Bug introduced in v2.6.3.491. When forwarding emails to the destination SMTP server, sometimes the leading "<" and trailing ">" where missing in the MAIL FROM}
// New to VersionNumber = '2.6.3.495';
{TODO -cNew : Added options to not quarantine or send to NULL virus-infected emails}
// New to VersionNumber = '2.6.3.493';
{TODO -cNew : Added DNSTimeout option in SpamFilter.ini to customize the DNS timeout for all of SpamFilter's DNS queries}
{TODO -cNew : Added EnableDbgLogs SpamFilter.ini option to enable separate detailed logging for troubleshooting purposes}
{TODO -cNew : Added to SpamFilter.ini several of the optional entries with their default values for users to see}
{TODO -cFix : Clicking on "Check if IP in ORBS" button in GUI could result in Access Violations being logged}
// New to VersionNumber = '2.6.3.491';
{TODO -cNew : Added support for maximum message size in reply to EHLO and MAIL FROM, as per RFC1870}
// New to VersionNumber = '2.6.3.490';
{TODO -cNew : Changed the control used to display logging in the GUI}
{TODO -cFix : Added *lots* of exception handling code to prevent sporadic problems with the GUI locking up at random}
{TODO -cNew : Added optional EnableDBGLogs ini option for additional debugging}
{TODO -cNew : Greatly improved startup and "Save Settings" response's time for installs with thousands of local domains}
// New to VersionNumber = '2.6.3.488';
{TODO -cFix : Improved error trapping for the way the quarantine grid is displayed on screen}
{TODO -cNew : Increased the amount of information being logged in case of crashes in the quarantine grid refresh}
// New to VersionNumber = '2.6.3.487';
{TODO -cFix : Again still, when emails were over the MaxMsgSize limit, the sender was sometimes disconnected without outputting a numeric error code, causing them to retry }
// New to VersionNumber = '2.6.3.485';
{TODO -cFix : When emails were over the MaxMsgSize limit, the sender was sometimes disconnected without outputting a numeric error code, causing them to retry }
{TODO -cNew : Added more logging for the IP-to-Country lookup exception error handling routines}
// New to VersionNumber = '2.6.3.483';
{TODO -cFix : SPF bug introduced by build 482 was allowing SPF filter to pass emails which were supposed to fail "a" directive test}
// New to VersionNumber = '2.6.3.482';
{TODO -cFix : Crash when a honepot recipient is encountered under some circumstances. The last log entry was "EMail To is in honeypot emails"}
{TODO -cFix : SPF queries for certain "a" directives were failing if the email domain did not match the DNS A record}
// New to VersionNumber = '2.6.3.481';
{TODO -cFix : Added more exception handling code to try preventing crashes being reported}
{TODO -cFix : Fixed problem with SPF retrieving the HELO domain when the MAIL FROM is empty}
{TODO -cNew : Added the HELO host name to the email X-SF-HELO-Domain email header}
// New to VersionNumber = '2.6.3.479';
{TODO -cFix : Added more exception handling code to try preventing crashes being reported}
{TODO -cFix : Fixed problem with SPF retrieving the HELO domain when the MAIL FROM is empty}
{TODO -cNew : Added the HELO host name to the email X-SF-HELO-Domain email header}
// New to VersionNumber = '2.6.3.478';
{TODO -cNew : More user-friendly functionality for the "Custom Domain Filters" grid when saving the current entry}
{TODO -cNew : DoNotAddIPToHoneypot list now works with :Honeypot tags as well}
{TODO -cFix : The "Do not quarantine" option was not disconnecting the remote server immediately before receiving the email body, but was waiting till the end of message}
{TODO -cFix : Logfiles were missing entries from SPF logs and a few other events that were showing on activity screen. Bug introduced from build 461}
// New to VersionNumber = '2.6.3.476';
{TODO -cNew : Added support for ::null, ::nondr and ::honeypot tag options in the keyword filter}
// New to VersionNumber = '2.6.3.475';
{TODO -cFix : SPF bug introduced by build 474 on certain domains with SPF records spanning multiple lines}
{TODO -cNew : Added SpamFilter.ini option to use an alternate SMTP server to send out NDR (non-delivery) email notifications}
// New to VersionNumber = '2.6.3.474';
{TODO -cFix : SPF queries on domains with TXT records spanning multiple label strings could be incorrect}
Edited by LogSat
|
|
|
 |
Lee
Groupie
Joined: 04 February 2005
Location: United States
Status: Offline
Points: 50
|
Post Options
Thanks(0)
Quote Reply
Posted: 12 January 2006 at 8:13am |
Roberto, when will this be updated on the download site ?
When you click on the link it takes you to page to download 2.6.3.473.
|
|
LogSat
Admin Group
Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
|
Post Options
Thanks(0)
Quote Reply
Posted: 12 January 2006 at 1:22pm |
|
If C|Net still has not updated their mirrors, you will find a link pointing to our own server on the bottom of our download page.
|
|
|
|
Lee
Groupie
Joined: 04 February 2005
Location: United States
Status: Offline
Points: 50
|
Post Options
Thanks(0)
Quote Reply
Posted: 12 January 2006 at 9:11pm |
Roberto you would think at my age I would have learned to read by now. 
Thanks Lee
|
|
mgagne
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 02 February 2006 at 2:38pm |
|
We are trying this version , and frankly it lets everything trough and is there a toggle we should diddling with .....?
|
|
LogSat
Admin Group
Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
|
Post Options
Thanks(0)
Quote Reply
Posted: 02 February 2006 at 3:05pm |
|
The default settings should work in the majority of the cases. The most important thing to consider is that SpamFilter must see the original IP address of the sender in order to catch spam. If email is processed by other servers/firewalls before it is passed to SpamFilter, and the IP address of the sender has not been passed on by the firewall, many of the filters will not be able to detect spam.
Also ensure the DNS server(s) you specified in SpamFilter is working correctly and can be reached by SpamFilter, as without DNS again many of the filters will not function properly.
If you post a section of SpamFilter's activity logfile we may be able to understand from it what the specific problem is.
|
|
|
|
mgagne
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 February 2006 at 11:02am |
Here is a copy of the log ... we are getting all spam , the lists are not being picked up on ie banned to and from files . heres a piece of the log file.
02-03-06 10:57:59:299 -- (628) Blacklist cache - Added 201.129.17.25 to limbo
02-03-06 10:57:59:299 -- (628) Disconnect
02-03-06 10:57:59:299 -- (380) Time to add Msg to Bayes corpus:201
02-03-06 10:57:59:309 -- (752) EMail from osboamcgre@intermedes.com to coursesean@villedehull.ca was forwarded to 69.70.2.138:2525
02-03-06 10:58:00:260 -- (1756) - MAPS search done... 521 The IP 64.131.147.150 is rejected by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?64.131.147.150
02-03-06 10:58:00:260 -- (1756) 64.131.147.150 - Mail from: cnzgbhwrs@hotmail.com To: serge.riopel@villedegatineau.qc.ca will be spam-tagged
02-03-06 10:58:01:191 -- (1756) EMail from cnzgbhwrs@hotmail.com to serge.riopel@villedegatineau.qc.ca was queued. Size: 15 KB, 15360 bytes
02-03-06 10:58:01:211 -- (900) Sending email from cnzgbhwrs@hotmail.com to serge.riopel@villedegatineau.qc.ca
02-03-06 10:58:01:231 -- (380) Time to add Msg to Bayes corpus:9
02-03-06 10:58:01:482 -- (1756) Blacklist cache - Added 64.131.147.150 to limbo
02-03-06 10:58:01:482 -- (1756) Disconnect
02-03-06 10:58:01:612 -- (900) EMail from cnzgbhwrs@hotmail.com to serge.riopel@villedegatineau.qc.ca was forwarded to 69.70.2.138:2525
02-03-06 10:58:58:043 -- (704) Blacklist cache - starting cleanup
02-03-06 10:59:39:353 -- (1996) Connection from: 61.17.221.57 - Originating country : India
02-03-06 10:59:43:589 -- (1996) Resolving 61.17.221.57 - Error resolving IP address (DNS Server Reports Query Server Error)
02-03-06 10:59:43:949 -- (1996) - SPF analysis for msa.hinet.net done: - none
02-03-06 10:59:43:949 -- (1996) Mail from: asg.bqdh@msa.hinet.net
02-03-06 10:59:44:360 -- (1996) - MAPS search done... 521 The IP 61.17.221.57 is rejected by sbl-xbl.spamhaus.org. http://www.spamhaus.org/query/bl?ip=61.17.221.57
02-03-06 10:59:44:360 -- (1996) 61.17.221.57 - Mail from: asg.bqdh@msa.hinet.net To: sean@seanradio.com will be spam-tagged
02-03-06 10:59:46:643 -- (1996) EMail from asg.bqdh@msa.hinet.net to sean@seanradio.com was queued. Size: 1 KB, 1024 bytes
02-03-06 10:59:46:653 -- (1256) Sending email from wgdxu.ajjpe@msa.hinet.net to sean@seanradio.com
02-03-06 10:59:46:693 -- (380) Time to add Msg to Bayes corpus:9
02-03-06 10:59:46:953 -- (1256) EMail from wgdxu.ajjpe@msa.hinet.net to sean@seanradio.com was forwarded to 69.70.2.138:2525
02-03-06 10:59:47:644 -- (1996) Blacklist cache - Added 61.17.221.57 to limbo
02-03-06 10:59:47:644 -- (1996) Disconnect
02-03-06 10:59:48:035 -- (284) Connection from: 86.59.158.198 - Originating country : Czech Republic
02-03-06 10:59:48:886 -- (284) - IP address is from a blacklisted country...
02-03-06 10:59:48:886 -- (284) 86.59.158.198 - Mail from: ij@tanhennar.com To: mgagne@collection-consultants.com will be spam-tagged
02-03-06 10:59:50:939 -- (284) EMail from ij@tanhennar.com to mgagne@collection-consultants.com was queued. Size: 6 KB, 6144 bytes
02-03-06 10:59:50:959 -- (540) Sending email from ij@tanhennar.com to mgagne@collection-consultants.com
02-03-06 10:59:50:989 -- (380) Time to add Msg to Bayes corpus:20
02-03-06 10:59:51:360 -- (540) EMail from ij@tanhennar.com to mgagne@collection-consultants.com was forwarded to 69.70.2.138:2525
02-03-06 10:59:51:360 -- (284) Blacklist cache - Added 86.59.158.198 to limbo
02-03-06 10:59:51:360 -- (284) Disconnect
02-03-06 10:59:57:589 -- (964) Blacklist cache - starting cleanup
02-03-06 10:59:57:599 -- (964) Blacklist cache - removed IP 24.50.168.226 from limbo during cleanup
02-03-06 11:00:21:002 -- (768) Connection from: 209.104.219.45 - Originating country : United States
02-03-06 11:00:21:333 -- (768) - EmailTO is in local blacklist file...
02-03-06 11:00:21:333 -- (768) 209.104.219.45 - Mail from: 1-3780158-collection-consultants.com?llandry@sta45.panhope.c om To: llandry@collection-consultants.com will be spam-tagged
02-03-06 11:00:21:583 -- (768) EMail from 1-3780158-collection-consultants.com?llandry@sta45.panhope.c om to llandry@collection-consultants.com was queued. Size: 1 KB, 1024 bytes
02-03-06 11:00:21:593 -- (1044) Sending email from yourcredit@panhope.com to llandry@collection-consultants.com
02-03-06 11:00:21:613 -- (380) Time to add Msg to Bayes corpus:0
02-03-06 11:00:21:874 -- (1044) EMail from yourcredit@panhope.com to llandry@collection-consultants.com was forwarded to 69.70.2.138:2525
02-03-06 11:00:26:761 -- (768) Blacklist cache - Added 209.104.219.45 to limbo
02-03-06 11:00:26:791 -- (768) Disconnect
|
|
LogSat
Admin Group
Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 February 2006 at 3:35pm |
mgagne, The section of log you posted shows the details of 4 emails. However *all* 4 emails were correctly identified as spam by SpamFilter: Mail from: cnzgbhwrs@hotmail.com To: serge.riopel@villedegatineau.qc.ca will be spam-tagged
Mail from: asg.bqdh@msa.hinet.net To: sean@seanradio.com will be spam-tagged
Mail from: ij@tanhennar.com To: mgagne@collection-consultants.com will be spam-tagged
Mail from: 1-3780158-collection-consultants.com?llandry@sta45.panhope.c om To: llandry@collection-consultants.com will be spam-tagged
As I've highlighted, you configured SpamFilter to "tag and deliver", which means that SpamFilter will identify mail that is spam, will a "spam" tag, and will then deliver the email to your mail server. From the readme.html file: -
Tag
Spam & Deliver - Allows to tag spam by adding the header "X-SF-SPAM:Y"
to email classified as spam. The email is then forwarded to the
destination SMTP server. This allows administrators to handle spam as
they wish on the back-end.
-
Tag
Spam in Subject & Deliver - Allows to tag spam by prefixing the
word SPAM: in the subject line of emails classified as spam. The
email is then forwarded to the destination SMTP server. This allows
administrators to handle spam as they wish on the back-end.
|
|
|
|
mgagne
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 February 2006 at 6:25pm |
|
Thanks , i've check those off but all these emails are in the blacklist email file and they still passed to the mail server ?
|
|
LogSat
Admin Group
Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 February 2006 at 6:31pm |
|
Can you then post a new section of your activity logfile showing those emails arriving and still being delivered?
|
|
|
|
mgagne
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 February 2006 at 7:04pm |
02-03-06 00:00:53:487 -- (388) Blacklist cache - starting cleanup
02-03-06 00:00:53:497 -- (388) Blacklist cache - removed IP 64.122.139.253 from limbo during cleanup
02-03-06 00:00:53:517 -- (388) Blacklist cache - removed IP 86.101.125.206 from limbo during cleanup
02-03-06 00:01:15:809 -- (1504) Connection from: 58.53.18.163 - Originating country : China
02-03-06 00:01:16:250 -- (1504) No Data Received
02-03-06 00:01:16:260 -- (1504) Disconnect
02-03-06 00:01:53:413 -- (248) Blacklist cache - starting cleanup
02-03-06 00:01:53:423 -- (248) Blacklist cache - removed IP 206.131.239.149 from limbo during cleanup
02-03-06 00:02:48:993 -- (1956) Connection from: 209.104.217.200 - Originating country : United States
02-03-06 00:02:50:285 -- (1956) - EmailTO is in local blacklist file...
02-03-06 00:02:50:305 -- (1956) 209.104.217.200 - Mail from: 1-1363172-collection-consultants.com?llandry@ar200.activerig ht.com To: llandry@collection-consultants.com will be spam-tagged
02-03-06 00:02:50:946 -- (1956) EMail from 1-1363172-collection-consultants.com?llandry@ar200.activerig ht.com to llandry@collection-consultants.com was queued. Size: 2 KB, 2048 bytes
02-03-06 00:02:50:976 -- (124) Sending email from newbusiness@activeright.com to llandry@collection-consultants.com
02-03-06 00:02:51:026 -- (404) Time to add Msg to Bayes corpus:9
02-03-06 00:02:53:660 -- (1912) Blacklist cache - starting cleanup
02-03-06 00:02:53:660 -- (124) EMail from newbusiness@activeright.com to llandry@collection-consultants.com was forwarded to 69.70.2.138:2525
02-03-06 00:02:53:700 -- (1912) Blacklist cache - removed IP 210.207.34.151 from limbo during cleanup
02-03-06 00:02:55:863 -- (1956) Blacklist cache - Added 209.104.217.200 to limbo
02-03-06 00:02:55:863 -- (1956) Disconnect
02-03-06 00:03:53:426 -- (1968) Blacklist cache - starting cleanup
02-03-06 00:03:53:426 -- (1968) Blacklist cache - removed IP 66.206.11.62 from limbo during cleanup
02-03-06 00:04:42:096 -- (544) Connection from: 222.163.7.34 - Originating country : China
02-03-06 00:04:49:937 -- (404) Begin Sync Corpus.db
02-03-06 00:04:49:937 -- (404) Sync Corpus.db pass 0a
02-03-06 00:04:49:957 -- (404) Sync Corpus.db pass 0b
02-03-06 00:04:49:967 -- (404) Sync Corpus.db pass 0c
02-03-06 00:04:49:977 -- (404) Sync Corpus.db - 68164 - 106
02-03-06 00:04:50:228 -- (404) Sync Corpus.db pass 1 (251)
02-03-06 00:04:50:238 -- (404) Sync Corpus.db pass 2 (261)
02-03-06 00:04:50:248 -- (404) Sync Corpus.db pass 3 (271)
02-03-06 00:04:50:258 -- (404) Sync Corpus.db pass 4 (281)
02-03-06 00:04:50:308 -- (404) Sync Corpus.db pass 5 (331)
02-03-06 00:04:50:388 -- (404) Sync Corpus.db pass 6 (411)
02-03-06 00:04:50:578 -- (404) Sync Corpus.db pass 7 (601)
02-03-06 00:04:50:588 -- (404) Sync Corpus.db pass 8 (611)
02-03-06 00:04:50:598 -- (404) End Sync Corpus.db (621)
02-03-06 00:04:53:352 -- (1200) Blacklist cache - starting cleanup
02-03-06 00:04:53:362 -- (1200) Blacklist cache - removed IP 200.120.147.156 from limbo during cleanup
02-03-06 00:04:53:432 -- (1200) Blacklist cache - removed IP 209.104.223.164 from limbo during cleanup
02-03-06 00:04:53:442 -- (1200) Blacklist cache - removed IP 222.98.62.244 from limbo during cleanup
02-03-06 00:04:53:472 -- Bayesian Thread is not running - starting...
02-03-06 00:04:53:492 -- (1672) BayesianThread starting
02-03-06 00:04:53:502 -- (1672) TBayesianThread - Begin LoadFromFile for corpus.db (db.dat)
02-03-06 00:04:53:532 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat -> Ind9FF.tmp
02-03-06 00:04:53:572 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat.prb -> IndA00.tmp
02-03-06 00:04:53:582 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - setting Buffer size to 812918
02-03-06 00:04:53:592 -- (544) Resolving 222.163.7.34 - Not found
02-03-06 00:04:53:602 -- (544) - Reverse DNS not found -
02-03-06 00:04:53:612 -- (544) 222.163.7.34 - Mail from: sirzzqwq@rrehouseboats.com To: sstdenis@allcanadacollect.com will be spam-tagged
02-03-06 00:04:53:632 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - Reading Buffer in mem
02-03-06 00:04:53:652 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind9FF.tmp
02-03-06 00:04:53:673 -- (1672) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - IndA00.tmp
02-03-06 00:04:53:933 -- (1672) TBayesianThread - End LoadFromFile for corpus.db (db.dat) (360)
02-03-06 00:05:00:973 -- (544) EMail from sirzzqwq@rrehouseboats.com to sstdenis@allcanadacollect.com was queued. Size: 41 KB, 41984 bytes
02-03-06 00:05:01:023 -- (1212) Sending email from sirzzqwq@rrehouseboats.com to sstdenis@allcanadacollect.com
02-03-06 00:05:01:073 -- (1672) Time to add Msg to Bayes corpus:9
02-03-06 00:05:01:554 -- (1212) EMail from sirzzqwq@rrehouseboats.com to sstdenis@allcanadacollect.com was forwarded to 69.70.2.138:2525
02-03-06 00:05:01:994 -- (544) Blacklist cache - Added 222.163.7.34 to limbo
02-03-06 00:05:02:005 -- (544) Disconnect
02-03-06 00:05:23:746 -- (964) Connection from: 60.225.144.33 - Originating country : Australia
02-03-06 00:05:53:469 -- (448) Blacklist cache - starting cleanup
02-03-06 00:05:53:469 -- (448) Blacklist cache - removed IP 209.104.219.49 from limbo during cleanup
02-03-06 00:05:54:810 -- (964) Resolving 60.225.144.33 - cpe-60-225-144-33.nsw.bigpond.net.au
02-03-06 00:05:55:521 -- (964) - SPF analysis for 0451.com done: - none
02-03-06 00:05:55:531 -- (964) Mail from: dago@0451.com
02-03-06 00:05:55:992 -- (964) - MAPS search done... 521 The IP 60.225.144.33 is rejected by sbl-xbl.spamhaus.org. http://www.spamhaus.org/query/bl?ip=60.225.144.33
02-03-06 00:05:56:002 -- (964) 60.225.144.33 - Mail from: dago@0451.com To: cyclesean@villedehull.ca will be spam-tagged
02-03-06 00:06:26:446 -- (964) EMail from dago@0451.com to cyclesean@villedehull.ca was queued. Size: 4 KB, 4096 bytes
02-03-06 00:06:26:486 -- (752) Sending email from dago@0451.com to cyclesean@villedehull.ca
02-03-06 00:06:26:536 -- (1672) Time to add Msg to Bayes corpus:20
02-03-06 00:06:26:756 -- (752) EMail from dago@0451.com to cyclesean@villedehull.ca was forwarded to 69.70.2.138:2525
02-03-06 00:06:32:685 -- (964) Blacklist cache - Added 60.225.144.33 to limbo
02-03-06 00:06:32:685 -- (964) Disconnect
02-03-06 00:06:37:782 -- (144) Connection from: 12.208.189.165 - Originating country : United States
02-03-06 00:06:39:334 -- (144) Resolving 12.208.189.165 - 12-208-189-165.client.insightbb.com
02-03-06 00:06:39:375 -- (144) found SPF record for hotmail.com: v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all
02-03-06 00:06:39:395 -- (144) found SPF record for spf-a.hotmail.com: v=spf1 ip4:209.240.192.0/19 ip4:65.52.0.0/14 ip4:131.107.0.0/16 ip4:157.54.0.0/15 ip4:157.56.0.0/14 ip4:157.60.0.0/16 ip4:167.220.0.0/16 ip4:204.79.135.0/24 ip4:204.79.188.0/24 ip4:204.79.252.0/24 ip4:207.46.0.0/16 ip4:199.2.137.0/24 ~all
02-03-06 00:06:39:405 -- (144) SPF query result: softfail
02-03-06 00:06:39:415 -- (144) - SPF analysis for spf-a.hotmail.com done: - softfail
02-03-06 00:06:39:445 -- (144) found SPF record for spf-b.hotmail.com: v=spf1 ip4:199.103.90.0/23 ip4:204.182.144.0/24 ip4:204.255.244.0/23 ip4:206.138.168.0/21 ip4:64.4.0.0/18 ip4:65.54.128.0/17 ip4:207.68.128.0/18 ip4:207.68.192.0/20 ip4:207.82.250.0/23 ip4:207.82.252.0/23 ip4:209.1.112.0/23 ~all
02-03-06 00:06:39:445 -- (144) SPF query result: softfail
02-03-06 00:06:39:465 -- (144) - SPF analysis for spf-b.hotmail.com done: - softfail
02-03-06 00:06:39:505 -- (144) found SPF record for spf-c.hotmail.com: v=spf1 ip4:209.185.128.0/23 ip4:209.185.130.0/23 ip4:209.185.240.0/22 ip4:216.32.180.0/22 ip4:216.32.240.0/22 ip4:216.33.148.0/22 ip4:216.33.151.0/24 ip4:216.33.236.0/22 ip4:216.33.240.0/22 ip4:216.200.206.0/24 ip4:204.95.96.0/20 ~all
02-03-06 00:06:39:515 -- (144) SPF query result: softfail
02-03-06 00:06:39:525 -- (144) - SPF analysis for spf-c.hotmail.com done: - softfail
02-03-06 00:06:39:555 -- (144) found SPF record for spf-d.hotmail.com: v=spf1 ip4:65.59.232.0/23 ip4:65.59.234.0/24 ip4:209.1.15.0/24 ip4:64.41.193.0/24 ip4:216.34.51.0/24 ~all
02-03-06 00:06:39:565 -- (144) SPF query result: softfail
02-03-06 00:06:39:575 -- (144) - SPF analysis for spf-d.hotmail.com done: - softfail
02-03-06 00:06:39:595 -- (144) SPF query result: softfail
02-03-06 00:06:39:605 -- (144) - SPF analysis for hotmail.com done: - softfail
02-03-06 00:06:39:615 -- (144) Mail from: lqrcnghkmkr@hotmail.com
02-03-06 00:06:39:935 -- (144) - MAPS search done... 521 The IP 12.208.189.165 is rejected by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?12.208.189.165
02-03-06 00:06:39:945 -- (144) 12.208.189.165 - Mail from: lqrcnghkmkr@hotmail.com To: collins@financialbalance.ca will be spam-tagged
02-03-06 00:06:40:146 -- (144) EMail from lqrcnghkmkr@hotmail.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:06:40:166 -- (656) Sending email from lqrcnghkmkr@hotmail.com to collins@financialbalance.ca
02-03-06 00:06:40:226 -- (1672) Time to add Msg to Bayes corpus:0
02-03-06 00:06:40:326 -- (144) Blacklist cache - Added 12.208.189.165 to limbo
02-03-06 00:06:40:336 -- (144) Disconnect
02-03-06 00:06:40:566 -- (656) EMail from lqrcnghkmkr@hotmail.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:06:53:455 -- (1840) Blacklist cache - starting cleanup
02-03-06 00:07:53:451 -- (1988) Blacklist cache - starting cleanup
02-03-06 00:07:53:461 -- (1988) Blacklist cache - removed IP 218.79.224.38 from limbo during cleanup
02-03-06 00:08:20:931 -- (700) Connection from: 58.20.176.23 - Originating country : China
02-03-06 00:08:23:034 -- (700) Resolving 58.20.176.23 - Not found
02-03-06 00:08:23:294 -- (700) - SPF analysis for inter-linc.net done: - none
02-03-06 00:08:23:294 -- (700) Mail from: info@inter-linc.net
02-03-06 00:08:23:534 -- (700) - MAPS search done... 521 The IP 58.20.176.23 is rejected by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?58.20.176.23
02-03-06 00:08:23:554 -- (700) 58.20.176.23 - Mail from: info@inter-linc.net To: info@info-proprio.com will be spam-tagged
02-03-06 00:08:24:365 -- (700) EMail from info@inter-linc.net to info@info-proprio.com was queued. Size: 1 KB, 1024 bytes
02-03-06 00:08:24:416 -- (364) Sending email from info@inter-linc.net to info@info-proprio.com
02-03-06 00:08:24:436 -- (1672) Time to add Msg to Bayes corpus:0
02-03-06 00:08:24:606 -- (364) EMail from info@inter-linc.net to info@info-proprio.com was forwarded to 69.70.2.138:2525
02-03-06 00:08:24:716 -- (700) Blacklist cache - Added 58.20.176.23 to limbo
02-03-06 00:08:24:736 -- (700) Disconnect
02-03-06 00:08:53:467 -- (1492) Blacklist cache - starting cleanup
02-03-06 00:09:53:474 -- (1260) Blacklist cache - starting cleanup
02-03-06 00:10:06:222 -- (1620) Connection from: 213.98.2.36 - Originating country : Spain
02-03-06 00:10:08:185 -- (1620) Resolving 213.98.2.36 - 36.red-213-98-2.staticip.rima-tde.net
02-03-06 00:10:08:345 -- (1620) found SPF record for mainstrike.com: v=spf1 a mx ptr ?all
02-03-06 00:10:09:677 -- (1620) SPF query result: pass
02-03-06 00:10:09:687 -- (1620) - SPF analysis for mainstrike.com done: - pass
02-03-06 00:10:09:707 -- (1620) Mail from: infolekh@mainstrike.com
02-03-06 00:10:10:007 -- (1620) - MAPS search done... 521 The IP 213.98.2.36 is rejected by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?213.98.2.36
02-03-06 00:10:10:007 -- (1620) 213.98.2.36 - Mail from: infolekh@mainstrike.com To: collins@financialbalance.ca will be spam-tagged
02-03-06 00:10:11:730 -- (1620) EMail from infolekh@mainstrike.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:10:11:760 -- (176) Sending email from infolekh@mainstrike.com to collins@financialbalance.ca
02-03-06 00:10:11:800 -- (1672) Time to add Msg to Bayes corpus:0
02-03-06 00:10:12:130 -- (176) EMail from infolekh@mainstrike.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:10:12:271 -- (1620) Blacklist cache - Added 213.98.2.36 to limbo
02-03-06 00:10:12:271 -- (1620) Disconnect
02-03-06 00:10:53:490 -- (380) Blacklist cache - starting cleanup
02-03-06 00:10:53:500 -- (380) Blacklist cache - removed IP 219.128.148.241 from limbo during cleanup
02-03-06 00:10:53:520 -- (380) Blacklist cache - removed IP 61.52.190.71 from limbo during cleanup
02-03-06 00:11:53:486 -- (1900) Blacklist cache - starting cleanup
02-03-06 00:12:53:502 -- (1756) Blacklist cache - starting cleanup
02-03-06 00:13:53:499 -- (672) Blacklist cache - starting cleanup
02-03-06 00:13:53:509 -- (672) Blacklist cache - removed IP 209.104.217.200 from limbo during cleanup
02-03-06 00:14:05:055 -- (1540) Connection from: 87.103.153.33 - Originating country : N/A
02-03-06 00:14:12:436 -- (1540) Resolving 87.103.153.33 - p5400-02.33.153.103.87.sable.dial.krasnet.ru
02-03-06 00:14:12:466 -- (1540) found SPF record for hotmail.com: v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all
02-03-06 00:14:12:486 -- (1540) found SPF record for spf-a.hotmail.com: v=spf1 ip4:209.240.192.0/19 ip4:65.52.0.0/14 ip4:131.107.0.0/16 ip4:157.54.0.0/15 ip4:157.56.0.0/14 ip4:157.60.0.0/16 ip4:167.220.0.0/16 ip4:204.79.135.0/24 ip4:204.79.188.0/24 ip4:204.79.252.0/24 ip4:207.46.0.0/16 ip4:199.2.137.0/24 ~all
02-03-06 00:14:12:496 -- (1540) SPF query result: softfail
02-03-06 00:14:12:506 -- (1540) - SPF analysis for spf-a.hotmail.com done: - softfail
02-03-06 00:14:12:546 -- (1540) found SPF record for spf-b.hotmail.com: v=spf1 ip4:199.103.90.0/23 ip4:204.182.144.0/24 ip4:204.255.244.0/23 ip4:206.138.168.0/21 ip4:64.4.0.0/18 ip4:65.54.128.0/17 ip4:207.68.128.0/18 ip4:207.68.192.0/20 ip4:207.82.250.0/23 ip4:207.82.252.0/23 ip4:209.1.112.0/23 ~all
02-03-06 00:14:12:556 -- (1540) SPF query result: softfail
02-03-06 00:14:12:566 -- (1540) - SPF analysis for spf-b.hotmail.com done: - softfail
02-03-06 00:14:12:606 -- (1540) found SPF record for spf-c.hotmail.com: v=spf1 ip4:209.185.128.0/23 ip4:209.185.130.0/23 ip4:209.185.240.0/22 ip4:216.32.180.0/22 ip4:216.32.240.0/22 ip4:216.33.148.0/22 ip4:216.33.151.0/24 ip4:216.33.236.0/22 ip4:216.33.240.0/22 ip4:216.200.206.0/24 ip4:204.95.96.0/20 ~all
02-03-06 00:14:12:606 -- (1540) SPF query result: softfail
02-03-06 00:14:12:616 -- (1540) - SPF analysis for spf-c.hotmail.com done: - softfail
02-03-06 00:14:12:666 -- (1540) found SPF record for spf-d.hotmail.com: v=spf1 ip4:65.59.232.0/23 ip4:65.59.234.0/24 ip4:209.1.15.0/24 ip4:64.41.193.0/24 ip4:216.34.51.0/24 ~all
02-03-06 00:14:12:666 -- (1540) SPF query result: softfail
02-03-06 00:14:12:686 -- (1540) - SPF analysis for spf-d.hotmail.com done: - softfail
02-03-06 00:14:12:696 -- (1540) SPF query result: softfail
02-03-06 00:14:12:706 -- (1540) - SPF analysis for hotmail.com done: - softfail
02-03-06 00:14:12:716 -- (1540) Mail from: fhaecgfciii@hotmail.com
02-03-06 00:14:13:437 -- (1540) - MAPS search done...
02-03-06 00:14:13:437 -- (1540) RCPT TO: collins@financialbalance.ca accepted
02-03-06 00:14:15:050 -- (1540) EMail from fhaecgfciii@hotmail.com to collins@financialbalance.ca passes Bayesian filter - 0% spam (9ms)
02-03-06 00:14:15:190 -- (1540) EMail from fhaecgfciii@hotmail.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:14:15:220 -- (2032) Sending email from fhaecgfciii@hotmail.com to collins@financialbalance.ca
02-03-06 00:14:15:280 -- (1672) Time to add Msg to Bayes corpus:0
02-03-06 00:14:15:591 -- (2032) EMail from fhaecgfciii@hotmail.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:14:15:861 -- (1540) Disconnect
02-03-06 00:14:53:545 -- (1016) Blacklist cache - starting cleanup
02-03-06 00:14:54:006 -- (1672) Begin Sync Corpus.db
02-03-06 00:14:54:006 -- (1672) Sync Corpus.db pass 0a
02-03-06 00:14:54:026 -- (1672) Sync Corpus.db pass 0b
02-03-06 00:14:54:036 -- (1672) Sync Corpus.db pass 0c
02-03-06 00:14:54:056 -- (1672) Sync Corpus.db - 68270 - 131
02-03-06 00:14:54:316 -- (1672) Sync Corpus.db pass 1 (260)
02-03-06 00:14:54:316 -- (1672) Sync Corpus.db pass 2 (260)
02-03-06 00:14:54:326 -- (1672) Sync Corpus.db pass 3 (270)
02-03-06 00:14:54:346 -- (1672) Sync Corpus.db pass 4 (290)
02-03-06 00:14:54:406 -- (1672) Sync Corpus.db pass 5 (349)
02-03-06 00:14:54:476 -- (1672) Sync Corpus.db pass 6 (419)
02-03-06 00:14:54:667 -- (1672) Sync Corpus.db pass 7 (611)
02-03-06 00:14:54:677 -- (1672) Sync Corpus.db pass 8 (621)
02-03-06 00:14:54:687 -- (1672) End Sync Corpus.db (631)
02-03-06 00:14:55:077 -- (2020) Connection from: 210.211.161.186 - Originating country : India
02-03-06 00:14:55:568 -- Bayesian Thread is not running - starting...
02-03-06 00:14:55:578 -- (1376) BayesianThread starting
02-03-06 00:14:55:588 -- (1376) TBayesianThread - Begin LoadFromFile for corpus.db (db.dat)
02-03-06 00:14:55:618 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat -> IndA43.tmp
02-03-06 00:14:55:658 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat.prb -> IndA44.tmp
02-03-06 00:14:55:658 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - setting Buffer size to 814912
02-03-06 00:14:55:668 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - Reading Buffer in mem
02-03-06 00:14:55:688 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - IndA43.tmp
02-03-06 00:14:55:708 -- (1376) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - IndA44.tmp
02-03-06 00:14:55:939 -- (1376) TBayesianThread - End LoadFromFile for corpus.db (db.dat) (280)
02-03-06 00:15:16:138 -- (2020) Resolving 210.211.161.186 - 210.211.161.186.bb-dynamic.vsnl.net.in
02-03-06 00:15:16:318 -- (2020) - SPF analysis for desilver.com done: - none
02-03-06 00:15:16:328 -- (2020) Mail from: fireplace685@desilver.com
02-03-06 00:15:16:879 -- (2020) - MAPS search done... 521 The IP 210.211.161.186 is rejected by sbl-xbl.spamhaus.org. http://www.spamhaus.org/query/bl?ip=210.211.161.186
02-03-06 00:15:16:889 -- (2020) 210.211.161.186 - Mail from: fireplace685@desilver.com To: collins@financialbalance.ca will be spam-tagged
02-03-06 00:15:20:113 -- (2020) EMail from fireplace685@desilver.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:15:20:153 -- (1052) Sending email from corrodible57@fastbowler.com to collins@financialbalance.ca
02-03-06 00:15:20:203 -- (1376) Time to add Msg to Bayes corpus:9
02-03-06 00:15:20:514 -- (1052) EMail from corrodible57@fastbowler.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:15:21:615 -- (2020) Blacklist cache - Added 210.211.161.186 to limbo
02-03-06 00:15:21:625 -- (2020) Disconnect
02-03-06 00:15:53:511 -- (1800) Blacklist cache - starting cleanup
02-03-06 00:15:53:521 -- (1800) Blacklist cache - removed IP 222.163.7.34 from limbo during cleanup
02-03-06 00:16:53:528 -- (1936) Blacklist cache - starting cleanup
02-03-06 00:16:53:538 -- (1936) Blacklist cache - removed IP 12.208.189.165 from limbo during cleanup
02-03-06 00:16:53:558 -- (1936) Blacklist cache - removed IP 60.225.144.33 from limbo during cleanup
02-03-06 00:17:53:534 -- (388) Blacklist cache - starting cleanup
02-03-06 00:18:07:164 -- (1504) Connection from: 65.190.129.173 - Originating country : United States
02-03-06 00:18:07:594 -- (1504) Resolving 65.190.129.173 - cpe-065-190-129-173.nc.res.rr.com
02-03-06 00:18:07:724 -- (1504) found SPF record for hotmail.com: v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all
02-03-06 00:18:08:566 -- (1504) found SPF record for spf-a.hotmail.com: v=spf1 ip4:209.240.192.0/19 ip4:65.52.0.0/14 ip4:131.107.0.0/16 ip4:157.54.0.0/15 ip4:157.56.0.0/14 ip4:157.60.0.0/16 ip4:167.220.0.0/16 ip4:204.79.135.0/24 ip4:204.79.188.0/24 ip4:204.79.252.0/24 ip4:207.46.0.0/16 ip4:199.2.137.0/24 ~all
02-03-06 00:18:08:586 -- (1504) SPF query result: softfail
02-03-06 00:18:08:596 -- (1504) - SPF analysis for spf-a.hotmail.com done: - softfail
02-03-06 00:18:08:726 -- (1504) found SPF record for spf-b.hotmail.com: v=spf1 ip4:199.103.90.0/23 ip4:204.182.144.0/24 ip4:204.255.244.0/23 ip4:206.138.168.0/21 ip4:64.4.0.0/18 ip4:65.54.128.0/17 ip4:207.68.128.0/18 ip4:207.68.192.0/20 ip4:207.82.250.0/23 ip4:207.82.252.0/23 ip4:209.1.112.0/23 ~all
02-03-06 00:18:08:736 -- (1504) SPF query result: softfail
02-03-06 00:18:08:746 -- (1504) - SPF analysis for spf-b.hotmail.com done: - softfail
02-03-06 00:18:08:876 -- (1504) found SPF record for spf-c.hotmail.com: v=spf1 ip4:209.185.128.0/23 ip4:209.185.130.0/23 ip4:209.185.240.0/22 ip4:216.32.180.0/22 ip4:216.32.240.0/22 ip4:216.33.148.0/22 ip4:216.33.151.0/24 ip4:216.33.236.0/22 ip4:216.33.240.0/22 ip4:216.200.206.0/24 ip4:204.95.96.0/20 ~all
02-03-06 00:18:08:886 -- (1504) SPF query result: softfail
02-03-06 00:18:08:896 -- (1504) - SPF analysis for spf-c.hotmail.com done: - softfail
02-03-06 00:18:09:036 -- (1504) found SPF record for spf-d.hotmail.com: v=spf1 ip4:65.59.232.0/23 ip4:65.59.234.0/24 ip4:209.1.15.0/24 ip4:64.41.193.0/24 ip4:216.34.51.0/24 ~all
02-03-06 00:18:09:046 -- (1504) SPF query result: softfail
02-03-06 00:18:09:056 -- (1504) - SPF analysis for spf-d.hotmail.com done: - softfail
02-03-06 00:18:09:066 -- (1504) SPF query result: softfail
02-03-06 00:18:09:076 -- (1504) - SPF analysis for hotmail.com done: - softfail
02-03-06 00:18:09:096 -- (1504) Mail from: lyomlmmlxpc@hotmail.com
02-03-06 00:18:09:427 -- (1504) - MAPS search done... 521 The IP 65.190.129.173 is rejected by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?65.190.129.173
02-03-06 00:18:09:437 -- (1504) 65.190.129.173 - Mail from: lyomlmmlxpc@hotmail.com To: collins@financialbalance.ca will be spam-tagged
02-03-06 00:18:09:607 -- (1504) EMail from lyomlmmlxpc@hotmail.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:18:09:627 -- (1288) Sending email from lyomlmmlxpc@hotmail.com to collins@financialbalance.ca
02-03-06 00:18:09:667 -- (1376) Time to add Msg to Bayes corpus:0
02-03-06 00:18:09:737 -- (1504) Blacklist cache - Added 65.190.129.173 to limbo
02-03-06 00:18:09:747 -- (1504) Disconnect
02-03-06 00:18:09:998 -- (1288) EMail from lyomlmmlxpc@hotmail.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:18:16:677 -- (988) Connection from: 201.161.161.160 - Originating country : Mexico
02-03-06 00:18:17:068 -- (988) - IP address is from a blacklisted country...
02-03-06 00:18:17:088 -- (988) 201.161.161.160 - Mail from: lpbqpqvbtkh@hotmail.com To: collins@financialbalance.ca will be spam-tagged
02-03-06 00:18:17:388 -- (988) EMail from lpbqpqvbtkh@hotmail.com to collins@financialbalance.ca was queued. Size: 1 KB, 1024 bytes
02-03-06 00:18:17:418 -- (628) Sending email from lpbqpqvbtkh@hotmail.com to collins@financialbalance.ca
02-03-06 00:18:17:448 -- (1376) Time to add Msg to Bayes corpus:0
02-03-06 00:18:17:599 -- (988) Blacklist cache - Added 201.161.161.160 to limbo
02-03-06 00:18:17:599 -- (988) Disconnect
02-03-06 00:18:17:809 -- (628) EMail from lpbqpqvbtkh@hotmail.com to collins@financialbalance.ca was forwarded to 69.70.2.138:2525
02-03-06 00:18:29:556 -- (1420) Connection from: 63.86.221.119 - Originating country : United S
as an example if you look at the beginning llandry@collection-consultants.com is in the blacklist to file and should not go the server ? We have barred our old emails because of spam anything @collection-consultants.com should not go the server .
|
|
Tweet