Spam Filter ISP Forums : New release / aggressive blocking https://www.logsat.com/spamfilter/forums/ Sat, 11 Jul 2026 08:05:13 +0000 Wed, 07 May 2003 10:41:00 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=407 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[New release / aggressive blocking : We released build 117 ast night...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=418&title=new-release-aggressive-blocking#418 Author: LogSat
Subject: 407
Posted: 07 May 2003 at 10:41am

We released build 117 ast night that fixes this problem.

Roberto Franceschetti
LogSat Software

]]> Wed, 07 May 2003 10:41:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=418&title=new-release-aggressive-blocking#418 <![CDATA[New release / aggressive blocking : Thanks. That works. -Marian ...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=417&title=new-release-aggressive-blocking#417 Author: Guests
Subject: 407
Posted: 07 May 2003 at 10:34am

Thanks. That works.

-Marian

 

]]> Wed, 07 May 2003 10:34:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=417&title=new-release-aggressive-blocking#417 <![CDATA[New release / aggressive blocking : Ouch, this was missed during testing....]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=414&title=new-release-aggressive-blocking#414 Author: LogSat
Subject: 407
Posted: 06 May 2003 at 10:54pm

Ouch, this was missed during testing. It turns out the match against the allowed domains is failing if the "Allowed Domains" are entered in uppercase. It's definetly a bug and we'll release a patch within the next few hours.

In the meantime you can solve the problem by converting your "Allowed domains" to lowercase. This bug is limited to the upper case in your local list, the upper/lower case which the remote sender uses is handled correctly.

Roberto Franceschetti
LogSat Software

]]> Tue, 06 May 2003 22:54:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=414&title=new-release-aggressive-blocking#414 <![CDATA[New release / aggressive blocking : Howdy, Here is the repetetive...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=412&title=new-release-aggressive-blocking#412 Author: Guests
Subject: 407
Posted: 06 May 2003 at 4:41pm

Howdy,

Here is the repetetive line

" rejected - no relay allowed or % found"

05/06/03 10:18:59:140 -- (10444) Disconnect
05/06/03 10:19:39:390 -- Loading local black / white lists
05/06/03 10:20:39:390 -- Loading local black / white lists
05/06/03 10:21:38:828 -- (10480) Connection from: 146.82.86.12  -  Originating country : N/A
05/06/03 10:21:39:015 -- (10480) Resolving 146.82.86.12 - Not found
05/06/03 10:21:39:015 -- (10480) Mail from: bmi@mailunique.com To: rkelly@worldlinks.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:21:39:015 -- (10480) 146.82.86.12 - Mail from: bmi@mailunique.com To: rkelly@worldlinks.com will be disconnected
05/06/03 10:21:39:015 -- (10480) Disconnect
05/06/03 10:21:39:390 -- Loading local black / white lists
05/06/03 10:21:54:937 -- (10480) Connection from: 208.46.113.4  -  Originating country : N/A
05/06/03 10:21:55:796 -- (10480) Resolving 208.46.113.4 - iad1.efax.com
05/06/03 10:21:55:796 -- (10480) Mail from: message@mail.efax.com To: patrizio@worldlinks.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:21:55:796 -- (10480) 208.46.113.4 - Mail from: message@mail.efax.com To: patrizio@worldlinks.com will be disconnected
05/06/03 10:21:55:796 -- (10480) Disconnect
05/06/03 10:22:39:390 -- Loading local black / white lists
05/06/03 10:23:16:406 -- (9984) Connection from: 69.41.72.117  -  Originating country : N/A
05/06/03 10:23:16:562 -- (9984) Resolving 69.41.72.117 - jr117.lesscpa.com
05/06/03 10:23:16:562 -- (9984) Mail from: autoloans@oinlist.lesscpa.com To: awatts@worldlinks.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:23:16:562 -- (9984) 69.41.72.117 - Mail from: autoloans@oinlist.lesscpa.com To: awatts@worldlinks.com will be disconnected
05/06/03 10:23:16:562 -- (9984) Disconnect
05/06/03 10:23:39:390 -- Loading local black / white lists
05/06/03 10:24:39:390 -- Loading local black / white lists
05/06/03 10:25:12:156 -- (10536) Connection from: 69.24.239.52  -  Originating country : N/A
05/06/03 10:25:12:500 -- (10536) Resolving 69.24.239.52 - out032.tpcper.com
05/06/03 10:25:12:500 -- (10536) Mail from: perf-news-errors.9224.211401.37135356.501.0.4@b.AdvizeMark1.com To: neal@worldvacations.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:25:12:500 -- (10536) 69.24.239.52 - Mail from: perf-news-errors.9224.211401.37135356.501.0.4@b.AdvizeMark1.com To: neal@worldvacations.com will be disconnected
05/06/03 10:25:12:500 -- (10536) Disconnect
05/06/03 10:25:15:562 -- (9984) Connection from: 81.53.42.105  -  Originating country : N/A
05/06/03 10:25:18:218 -- (9984) Resolving 81.53.42.105 - arennes-303-1-27-105.abo.wanadoo.fr
05/06/03 10:25:18:218 -- (9984) Mail from: vxf0x8bf6xbe@attbi.com To: neal@worldlinks.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:25:18:218 -- (9984) 81.53.42.105 - Mail from: vxf0x8bf6xbe@attbi.com To: neal@worldlinks.com will be disconnected
05/06/03 10:25:18:218 -- (9984) Disconnect
05/06/03 10:25:25:625 -- (10536) Connection from: 211.107.175.246  -  Originating country : N/A
05/06/03 10:25:29:687 -- (10536) Resolving 211.107.175.246 - Not found
05/06/03 10:25:29:687 -- (10536) Mail from: bnglel1bpln@swbell.net To: loks@worldvacations.com - rejected - no relay allowed or % found in FROM address
05/06/03 10:25:29:687 -- (10536) 211.107.175.246 - Mail from: bnglel1bpln@swbell.net To: loks@worldvacations.com will be disconnected
05/06/03 10:25:29:687 -- (10536) Disconnect
05/06/03 10:25:31:859 -- (10536) Connection from: 61.186.102.213  -  Originating country : N/A
05/06/03 10:25:39:390 -- Loading local black / white lists
05/06/03 10:25:46:703 -- (10536) Resolving 61.186.102.213 - Not found
05/06/03 10:25:46:703 -- (10536) Mail from: 6w9gk8x8@swbell.net To: loks@worldlinks.com - rejected - no relay allowed or % found in FROM address

]]> Tue, 06 May 2003 16:41:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=412&title=new-release-aggressive-blocking#412 <![CDATA[New release / aggressive blocking : Russ, Could you also show some...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=410&title=new-release-aggressive-blocking#410 Author: LogSat
Subject: 407
Posted: 06 May 2003 at 3:53pm

Russ,

Could you also show some spamfilter log entries showing why emails are being rejected?

Roberto Franceschetti
LogSat Software

]]> Tue, 06 May 2003 15:53:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=410&title=new-release-aggressive-blocking#410 <![CDATA[New release / aggressive blocking : THe new registred release has...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=407&title=new-release-aggressive-blocking#407 Author: Guests
Subject: 407
Posted: 06 May 2003 at 11:46am

THe new registred release has caused very aggressive blocking. We did not change any of the rules. INI below. Any feedback would be helpful. We have had to shut down the filter until we figure this out.

 

; a true after an ordb entry means their DNS is expecting the IP to be reversed; i.e. to test a connection from 1.2.3.4 they expect 4.3.2.1.bl.spamcop.net[blacklists]site1=BL.SPAMCOP.NET, TRUEsite2=SBL.SPAMHAUS.ORG, TRUEsite3=RELAYS.OSIRUSOFT.COM, TRUEsite4=SPAM.DNSRBL.NET, TRUEsite5=DNSBL.NJABL.ORG, TRUE;site6=dun.dnsrbl.net, true
[server settings]; dns - your DNS serverdns=192.168.0.30
; the SpamFilter can be limited to listen on a specific IP:port. Leave empty for all IPs bound to nic;ListenIP=209.26.140.2ListenFQDN=worldlinks.comListenPort=2505
;The email address to use in Error Replies to sendersErrorHandlerEmailAddress="System Administrator" <rkelly@worldlinks.com>
; DestinationServer is where you want all mail received by SpamFilter to be forwarded toDestinationServer=192.168.0.6DestinationPort=2501
; AllowPercent is used to accept (AllowPercent=1) or reject (AllowPercent=0) emails containing the % character.; Many SMTP servers are susceptible to being tricked into relaying with this.; Ex. if you are netwide.net, then a spammer can use; mail to: joe%yahoo.com@netwide.net; to relay mail to joe@yahoo.com if your server is vulnerable; Setting AllowPercent to 1 rejects ALL recipients email addresses conatining the % signAllowPercent=1
;log daily activity to logfilesLogging=1ListenIP=192.168.0.6MultiThreaded=0MaxInboundConnections=10LocalBlackListFileName=LogKeywords=1AutoVersionCheck=0LocalIPBlackListFileName=LocalDomainsBlackListFileName=RejectNoReverse=0DisableConnectionsGrid=0MaxRCPTTO=20MinMAPS=2ArchiveSpamDays=0KeywordsFileName=C:\Program Files\SpamFilter\keywords.txtExcludedDomainsFileName=C:\Program Files\SpamFilter\ExcludedDomains.txtExcludedFromEmailsFileName=AuthorizedTOEmailsFileName=LocalEMailsBlacklistFileName=LocalEMailsTOBlacklistFileName=RejectNoReverseForceDelete=0RejectEmptyMailFrom=0RejectEmptyMailFromForceDelete=0RejectSameToFrom=0RejectSameToFromForceDelete=0BlackListForceDelete=0ContentFilterForceDelete=0LocalIPBlacklistForceDelete=0LocalDomainsBlacklistForceDelete=0CountriesForceDelete=0LocalEmailsBlacklistForceDelete=0LocalEmailsTOBlacklistForceDelete=0
; avoid being ourselves an open relay...; enter here the recipient domains that SpamFilter will accept.; I.E. if you are hosting netwide.net, then only emails addressed to user@netwide.net will; be accepted and passed on to your DestinationServer.; if your first entry is allow1=* then all emails will be accepted (not recommended); allow1=*[allowed domains]allow1=DISCOVEREUROPE.COMallow2=MAIL.DISCOVEREUROPE.COMallow3=WORLDLINKS.COMallow4=MAIL.WORLDLINKS.COMallow5=MAIL2.WORLDLINKS.COMallow6=WORLDVACATIONS.COMallow7=MAIL.WORLDVACATIONS.COMallow8=MAIL2.WORLDVACATIONS.COMallow9=PUBSYSTEM.COMallow10=MAIL.PUBSYSTEM.COMallow11=MAIL2.PUBSYSTEM.COMallow12=HANROUSA.COMallow13=MAIL.HANROUSA.COMallow14=MAIL2.HANROUSA.COMallow15=DISCOVERBRAZIL.COMallow16=MAIL.DISCOVERBRAZIL.COMallow17=MAIL2.DISCOVERBRAZIL.COMallow18=HOTELLINKS.COMallow19=CARIBBEANCOAST.COMallow20=MAYANRIVIERA.COMallow21=PLAYADELCARMEN.COMallow22=TULUM.COMallow23=DISCOVERCOZUMEL.NETallow24=DISCOVERLAFRANCE.COMallow25=DISCOVERPARIS.COMallow26=DISCOVERMEXICO.COMallow27=DISCOVERSTBARTHS.COMallow28=ELEGANTTRAVELER.COMallow29=ELEGANTTRAVELLER.COMallow30=RW-3.COMallow31=DHINET.COMallow32=207.224.106.221
; if you REALLY must be able to receive emails from a domain which is; blacklisted, you can bypass the filter by adding it here...;exclude1=somedomain1.com;exclude2=somdomain.com
[Error Response]ResponseBlacklistedMAPS=521 The IP %IP% is Blacklisted by %MAPSResponse%.ResponseBlacklistLocalIP=521 The IP %IP% is Blacklisted.ResponseBlacklistLocalDomain=521 The domain %Domain% is Blacklisted.ResponseBlacklistLocalEMail=521 The EMail %EMailFrom% is Blacklisted.ResponseNoReverseDNS=550 Your IP %IP% does not have a reverse DNS entry. Disconnecting...ResponseMaxRCPTTO=550 You exceeded then maximum number of RCPT TO. Disconnecting...ResponseCountryBlacklist=550 Your IP address is from a blacklisted country. Disconnecting..ResponseRelayRestricted=550 You are not allowed to send mail to %EMailTo%ResponseKeywordMatch=552 This email is rejected. It contains keywords rejected by the antispam content filter.ResponseBlacklistLocalEMailTo=521 The EMail %EMailTo% is Blacklisted.[CountryBlackList]Country1=NG
]]> Tue, 06 May 2003 11:46:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=407&PID=407&title=new-release-aggressive-blocking#407