Wish List
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5219
Printed Date: 14 March 2025 at 6:56am
Topic: Wish List
Posted By: Desperado
Subject: Wish List
Date Posted: 08 June 2005 at 4:20pm
I *wish* the autowhitelist function would ignore any case on either side of the pipe (|)
Waddauthink?
Regards,
------------- The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com
|
Replies:
Posted By: Desperado
Date Posted: 09 June 2005 at 11:53am
Anybody gonna comment on this?
Regards,
------------- The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com
|
Posted By: jacksun
Date Posted: 12 June 2005 at 2:08pm
I agree, case should never be a consideration WRT email.
Great Idea Dan.
Cheers,
Wayne
|
Posted By: LogSat
Date Posted: 12 June 2005 at 2:46pm
More than a "wish" that should be considered a bug, jacksun is correct.
We'll be uploading a new build with the fix within the next few hours.
------------- Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
Posted By: Desperado
Date Posted: 12 June 2005 at 2:52pm
Roberto,
Thanks ... and if I have not said so recently ... you are the King!.
Now ... can you fix my friggin air handling system? I had to run into work to resopnd to an over temp alarm. 97 degrees in our server room. Not good!
Regards,
------------- The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com
|
Posted By: kspare
Date Posted: 13 June 2005 at 2:32am
We had the same problem too, just doubled our a/c capacity.
Roberto, any way you can setup the honeypot so we can whitelist ips to not be affected by it?
My offsite spamfilter is forwarding mail on and somehow the honey pot is seeing email address's that the offsite found in the honey pot, tagged the subject line, but is still found my the honey pot and blocked.
PLEASE! I can't use my offsite mx anymore
|
Posted By: Desperado
Date Posted: 13 June 2005 at 7:42am
Kevin,
No sleep and burned out. Can you re-word your above post?
Offsite or backup SMTP is always going to be a trade off irregardless of the software. We do backup smtp for many customers using a simple queuing server and many of the customers primary servers are Spam Filtering appliances. Their server must "Trust" our server and as such they loose any benefits of filtering on the connection IP address such as rdns, dnsbl's and so on. SOME, but not all of their servers can still filter on keywords even if the IP is White Listed but that has only a small value so they live with it.
I think that one solution to this issue (which may not be very easy ... not knowing the internals of the SpamFilter software) would be to have an IP Whitelist, just like now and an IP relay list which would allow the backup to connect and instruct the SpamFilter to attempt to look at the IP that originally connected to the backup server. I fear that this would cause some significant overhead though.
Regards,
------------- The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com
|
Posted By: kspare
Date Posted: 13 June 2005 at 9:40am
Actually the only problem we have is with the honey pot, I just need to be able to tell the honey pot not to block that ip and it would work fine. I used it as it sits for awhile until I turned on the honey pot, that's where my problems started
|
Posted By: Marco
Date Posted: 13 June 2005 at 11:02am
in case the honeypot is triggered, compare the originating ip with the ones in the (to be added) 'relay ip list' and if matched, drop the mail, but DO NOT blacklist the relay's ip.
------------- Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams
|
Posted By: LogSat
Date Posted: 13 June 2005 at 7:24pm
Marco,
Just posted the following to the other thread at http://logsat.com/spamfilter/forums/forum_posts.asp?TID=5217 #6068
=============
SpamFilter should really see the original IP of the sender when
procesing emails. If SpamFilter handles emails that are being relayed
by a "friendly" server, then things are bound to go wrong, not just
with the honeypot file. Think about the SPF filter for example... If
the IP of the server connecting to SpamFilter is not listed in the SPF
DNS record of the sender, the email will be rejected. And if your
secondary is forwarding emails to SpamFilter, that *will* cause a big
issue.
The mains solutions that come to mind are to:
(1) place SpamFilter (or any other antispam software) in front of all the servers listed as MX records,
or (2) forward the email from the secondaries directly to your main SMTP server, bypassing the main spam filter.
or (3) install a second SpamFilter on a separate IP or separate server,
configure it skip ALL IP-based tests (reverse-DNS, country, SPF,
MAPS-RBL, IP blacklists, MX checks etc.), and have the secondary
forward emails to this lesser-featured SpamFilter.
------------- Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
Posted By: Guests
Date Posted: 19 June 2005 at 9:44pm
Iam because my sister a girl.
|
Posted By: Guests
Date Posted: 21 June 2005 at 9:59am
I vote for option #2 below. We already do this with our user's
mail clients. We have them all set to a non-standard SMTP port
that bypasses our spamfilter and goes straight to our mail
server. Then we don't trust nothing that hits on SMTP 25 that
claims to be from a domain that we are hosting because we already know
every legitimate user should be using our proprietary SMTP port.
Puts a brick wall up on all those new worms out there and allows us to
use a single public IP for both mail server and spamfilter. We
were using this method long before SPF came about and it's actually a
little more effective on our own domains, as we don't trust anything
being relayed out on port 25 from our own domains...even from IP's
authorized in our SPF records.
Guess we can look at setting up a backup SMTP server to do the same
thing by bypassing our in-house filter and just filter from the remote
backup server.
LogSat wrote:
Marco,
Just posted the following to the other thread at http://logsat.com/spamfilter/forums/forum_posts.asp?TID=5217 #6068
=============
SpamFilter should really see the original IP of the sender when
procesing emails. If SpamFilter handles emails that are being relayed
by a "friendly" server, then things are bound to go wrong, not just
with the honeypot file. Think about the SPF filter for example... If
the IP of the server connecting to SpamFilter is not listed in the SPF
DNS record of the sender, the email will be rejected. And if your
secondary is forwarding emails to SpamFilter, that *will* cause a big
issue.
The mains solutions that come to mind are to:
(1) place SpamFilter (or any other antispam software) in front of all the servers listed as MX records,
or (2) forward the email from the secondaries directly to your main SMTP server, bypassing the main spam filter.
or (3) install a second SpamFilter on a separate IP or separate server,
configure it skip ALL IP-based tests (reverse-DNS, country, SPF,
MAPS-RBL, IP blacklists, MX checks etc.), and have the secondary
forward emails to this lesser-featured SpamFilter.
|
|
|