Spam Filter ISP Forums http://www.logsat.com/spamfilter/forums/ This is an XML content feed of; Spam Filter ISP Forums : Last 10 Posts Thu, 07 Aug 2008 15:39:26 +0000 Thu, 07 Aug 2008 15:18:46 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 9.06 30 www.logsat.com/spamfilter/forums/RSS_topic_feed.asp Spam Filter ISP Support : Exchange server stops receiving mail http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12314#12314 Author: bmillerab
Subject: Exchange server stops receiving mail
Posted: 07 August 2008 at 3:18pm

Thanks for the quick response.  I guess holidays can do that.  Totally forgot about changing the tcp port on the exchange server.]]> Thu, 07 Aug 2008 15:18:46 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12314#12314 Spam Filter ISP Support : Exchange server stops receiving mail http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12313#12313 Author: WebGuyz
Subject: Exchange server stops receiving mail
Posted: 07 August 2008 at 2:19pm

Your MX records were pointing to the IP of the Spamfilter Service. You need to change the MX record back to the IP address of the Exchange server and make sure the Exchange server is receiving on port 25.]]> Thu, 07 Aug 2008 14:19:49 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12313#12313 Spam Filter ISP Support : Exchange server stops receiving mail http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12312#12312 Author: bmillerab
Subject: Exchange server stops receiving mail
Posted: 07 August 2008 at 1:47pm

My Evaluation copy of Spam Filter ISP expired several days ago while I was on vacation.  My Exchange server has stopped receiving mail as of the expiration time.

I have turned of the Spam Filter service, rebooted the server, and still no success.  Am I missing something more basic than just the service?
]]> Thu, 07 Aug 2008 13:47:24 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6534&PID=12312#12312 Spam Filter ISP Support : Grey Listening http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12311#12311 Author: JeffHildebrand
Subject: Grey Listening
Posted: 06 August 2008 at 7:11pm

Thanks for the prompt reply, it looks like that will do the trick.  We had 15 computers get grey listed this morning, and most cleared up after the grey listing delay, with the exception of one.  It kept bouncing back and forth between limbo and the greylist.  Below is an abridged copy of our log, each "will add to allowed list" was where one email went through, but it would get added back to limbo shortly there after.  We are running in non enterprised mode, and the greylistallowed.txt file has just over 38000 records in it.

08/06/08 09:10:51:421 -- (7876) GreyList limbo - Added 66.166.66.166
08/06/08 09:16:39:078 -- (4448) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 09:24:43:234 -- (8040) GreyList limbo - Added 66.166.66.166
08/06/08 09:29:45:437 -- (5964) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 09:43:56:046 -- (6452) GreyList limbo - Added 66.166.66.166
08/06/08 09:52:39:812 -- (4824) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 09:53:16:937 -- (5680) GreyList limbo - Added 66.166.66.166
08/06/08 10:03:24:765 -- (2640) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 10:18:45:937 -- (6464) GreyList limbo - Added 66.166.66.166
08/06/08 10:26:29:609 -- (7696) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 11:37:54:843 -- (7236) GreyList limbo - Added 66.166.66.166
08/06/08 11:45:59:078 -- (6504) GreyList cache - 66.166.66.166 removed from limbo, will add to allowed list
08/06/08 11:48:54:750 -- (7060) GreyList limbo - Added 66.166.66.166
08/06/08 11:48:54:750 -- (7060) IP is in not in GreyList Allowed. Disconnecting: 66.166.66.166

]]> Wed, 06 Aug 2008 19:11:37 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12311#12311 Spam Filter ISP Support : Updated Filter order http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171&PID=12310#12310 Author: LogSat
Subject: Updated Filter order
Posted: 06 August 2008 at 4:50pm

Very valid point. We've just updated the documentation, and it will be included in the next release of SpamFilter.]]> Wed, 06 Aug 2008 16:50:00 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171&PID=12310#12310 Spam Filter ISP Support : SPAM Filters used by Major ISPs http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6525&PID=12309#12309 Author: aco_pa
Subject: SPAM Filters used by Major ISPs
Posted: 06 August 2008 at 4:42pm

I also recommend Logsat's filter, we spent a long time weighing options from open source to dedicated appliances and SFI has worked great for us. 121 million messages blocked in the last 6 months alone.
 
Anthony
]]> Wed, 06 Aug 2008 16:42:45 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6525&PID=12309#12309 Spam Filter ISP Support : Greylist / Whitelist http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6470&PID=12308#12308 Author: Desperado
Subject: Greylist / Whitelist
Posted: 06 August 2008 at 4:30pm

Jeff,
 
This is actually has more than one answer.
 
For SFI (Non Enterprise)  The short answer is "Yes" to both.
 
For SFE (Running in Enterprise mode) The GreyListAllowed.txt will be read in at startup.  The domain list however is stored in the SQL Database and the text file will be overwritten at startup with the entries in the SQL tables.
]]> Wed, 06 Aug 2008 16:30:27 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6470&PID=12308#12308 Spam Filter ISP Support : Grey Listening http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12307#12307 Author: Desperado
Subject: Grey Listening
Posted: 06 August 2008 at 4:25pm

Jeff,
 
// New to VersionNumber = '4.0.0.773';
{TODO -cNew : Allowed to specify future dates in the GreyListAllowed.txt files so that IPs can be stored in the list for years without expiring}
So, what you do is stop the SpamFilter service and edit the GreyListAllowed.txt file and add something like:
66.166.66.166~43100.1111111111
Save the file and start the SpamFilter Service.
 
This will force 66.166.66.166 to NOT be Grey Listed for something just under 10 years or so.  This DOES NOT White List the IP ... just prevents the Grey Listing delay.
 
At this time, only single IP's are accepted so if you have a /24 to list, I would creat a list of 256 entries using something like Excel or even a micro in UltraEdit and increment the final octet of the IP address and past the resulting list in the actual GreyListAllowed.txt file.  Kinda painful but you only need to do it once every 10 years or so!


Edited by Desperado - Yesterday at 4:35pm]]> Wed, 06 Aug 2008 16:25:06 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12307#12307 Spam Filter ISP Support : Greylist / Whitelist http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6470&PID=12306#12306 Author: JeffHildebrand
Subject: Greylist / Whitelist
Posted: 06 August 2008 at 1:43pm

If the spamfilter services is stopped, and you make changes to the domains\greylistalllowed.txt, will those changes be read correctly?]]> Wed, 06 Aug 2008 13:43:45 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6470&PID=12306#12306 Spam Filter ISP Support : Grey Listening http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12305#12305 Author: JeffHildebrand
Subject: Grey Listening
Posted: 06 August 2008 at 1:07pm

Is there anyway to prevent a range of IP's from being greylisted?  Basicly I would like to not have our network addresses greylisted so out going email is not delayed.]]> Wed, 06 Aug 2008 13:07:38 +0000 http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6532&PID=12305#12305