Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Losing honeypot enties
  FAQ FAQ  Forum Search   Register Register  Login Login

Losing honeypot enties

 Post Reply Post Reply
Author
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Topic: Losing honeypot enties
    Posted: 20 August 2007 at 2:26pm
I am using 3.5.4.692.

why am I losing Honeypot entires? I have many email addresses in there, but they are all gone. This is the second time it happens.


Only thing left on there is entries started with numbers and IP addresses.


Edited by Stupid - 20 August 2007 at 2:43pm
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 20 August 2007 at 6:36pm
Is this for SpamFilter ISP "standard" or "Enterprise"? If it is the "Standard" version, could you please check the \SpamFilter\domains\SFI\Filters.ini file, to see if the entry:
BL_HoneypotEmailsFileName
has specified the full path + filename to the text file, and not just the filename?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 21 August 2007 at 9:16am
It did it again!!!

Standard. Here's how it looks like:

BL_HoneypotBlockedIPsFileName=C:\Program Files\SpamFilter\HoneypotBlockedIPs.txt
BL_HoneypotEmailsFileName=C:\Program Files\SpamFilter\HoneypotBlockedIPs.txt



Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 21 August 2007 at 4:25pm
It's getting bad losing these. My Honeypot actually blocks majority of my spam. any idea?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 21 August 2007 at 4:35pm
We've been re-checking the past bug fixes, and saw that the following one:

// New to VersionNumber = '3.5.4.700';
{TODO -cFix : In SFE, sometimes new entries were not being added to the autowhitelist table}

could have actually caused a similar problem to other self-maintained lists as well, as the honeypot one.

Could you please upgrade to the latest build of SpamFilter to see if the problem has already been fixed in the latest builds?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 21 August 2007 at 4:37pm
I guess I'll try that and let you know.
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 22 August 2007 at 9:49am
I am now on 704, but I lost again the email addresses in the honeypot!!!

Edited by Stupid - 22 August 2007 at 9:50am
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 22 August 2007 at 5:48pm
Ok, I should have caught this before, but I was looking at only the presence of the full path name in your post, I was not looking at the filename itself.
This is the problem:

BL_HoneypotBlockedIPsFileName=C:\Program Files\SpamFilter\HoneypotBlockedIPs.txt

BL_HoneypotEmailsFileName=C:\Program Files\SpamFilter\HoneypotBlockedIPs.txt


You are using the same filename for both blacklists, so one is overwriting the contents of the other. Please note that those two files are very much different.

The "Honeypot Emails" contains a list of email addresses. These email addresses are stored in whatever file you specify via the GUI, and is then stored in "BL_HoneypotEmailsFileName".

Any emails sent to a recipient in that list will cause the IP of the sender to be blacklisted. This sender's IP will be added to the file specified in the "BL_HoneypotBlockedIPsFileName" field. By default, this file is handled internally by SpamFilter and is called "HoneypotBlockedIPs.txt".

You will thus need to ensure that you use different filenames for the different lists.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 23 August 2007 at 9:18am
Where and how do I make this correction?

Edited by Stupid - 23 August 2007 at 9:20am
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 23 August 2007 at 7:38pm
To keep the file names consistent, you should change the file used by the "Honeypot Emails" list. That can be done wither via SpamFilter's GUI, or by editing this line in the Filters.ini:

BL_HoneypotEmailsFileName=C:\Program Files\SpamFilter\NewFileNameHere.txt


This file should contain the list of email addresses you want to use as hoenypots.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 24 August 2007 at 9:18am
If I do that, where do I add new email addresses that I want to use as honeypot?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 24 August 2007 at 7:45pm
Either via SpamFilter' GUI, in the "Settings - Configuration - Black / White Lists / Honeypots" tab, or by entering them directly in the new file you should have created, specified by the entry:

BL_HoneypotEmailsFileName=C:\Program Files\SpamFilter\NewFileNameHere.txt

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 27 August 2007 at 5:50pm
it seems this resolved the problem.
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.078 seconds.