Spam Filter ISP Forums : Blacklist IP Wildcard Issue

Spam Filter ISP Forums : Blacklist IP Wildcard Issue https://www.logsat.com/spamfilter/forums/ Sat, 06 Jun 2026 09:38:14 +0000 Mon, 05 May 2008 18:59:49 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6356 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Blacklist IP Wildcard Issue : Hi Alan, The CDIR notation was...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12061&title=blacklist-ip-wildcard-issue#12061 Author: LogSat
Subject: 6356
Posted: 05 May 2008 at 6:59pm

Hi Alan,

The CDIR notation was added in v4.0.0.770, but, to be truthful, I do not know when we added the documentation to the manual. Here's the relevant section:

Blacklisted IPs - You can keep a file with additional IPs that you want to blacklist by entering the filename below. If the file does not exist it will be created. The file is reloaded every minute. List individual IP addresses on each line. Use an ending .0 for a Class C wildcard (i.e. 192.12.45.0 to block 192.12.45.1 --> 192.12.45.255). This IP blacklist also supports the use of CDIR notation to specify networks. For example, 192.12.45.0/24 will block the previous Class C of addresses as well. The contents of the file will be loaded in the memo box, allowing you to make changes to the file.

Unfortunately most likely we're still not going to be able to provide support for comments in all the blacklist/whitelist files. The reason is the same for which we do not check for correctness (the most common problems are leading/trailing spaces in the entries). Some customers have dozens of millions of entries in these lists, and checking each line for correctness (and parsing out the comments) would severely hamper performance in these cases. We process these white/black lists in bulk when reading/writing them, without looking at individual entries but rather by managing the raw memory locations that hold the strings as a whole, without applying any parsing for speed.]]> Mon, 05 May 2008 18:59:49 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12061&title=blacklist-ip-wildcard-issue#12061 <![CDATA[Blacklist IP Wildcard Issue : Now if we can only get a feature...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12058&title=blacklist-ip-wildcard-issue#12058 Author: Alan
Subject: 6356
Posted: 05 May 2008 at 3:10pm

Now if we can only get a feature to add COMMENTS.
I would suggest adding them following a "#" and having SF ignore remaining text in the line after the #.

I would love to be able to better annotate why filters are added, when I added them, etc.
]]> Mon, 05 May 2008 15:10:47 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12058&title=blacklist-ip-wildcard-issue#12058 <![CDATA[Blacklist IP Wildcard Issue : Is there a guide on how to use...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12057&title=blacklist-ip-wildcard-issue#12057 Author: Alan
Subject: 6356
Posted: 05 May 2008 at 3:07pm

Is there a guide on how to use the CDIR feature?
Do we just include the IP block in the IP Filter list (e.g. xxx.yyy.zzz.0/16)?
I don't see mention of it in the official documentation.

This feature is effective as of 4.0.0.772, correct?

And finally, as a registered SF user (since the 1.x days), it has been a real pleasure dealing with Roberto and using a product that the USERS can influence the direction of.

]]> Mon, 05 May 2008 15:07:30 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=12057&title=blacklist-ip-wildcard-issue#12057 <![CDATA[Blacklist IP Wildcard Issue : >> SpamFilter was first...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11632&title=blacklist-ip-wildcard-issue#11632 Author: StevenJohns
Subject: 6356
Posted: 30 January 2008 at 10:55am

>> SpamFilter was first released in Aug 2002, and we hope we'll be around for several more years!

You'd better....where would we be without SF ?????

I don't normally lick ass, but SF is the best spam filter available....regardless of cost.

]]> Wed, 30 Jan 2008 10:55:10 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11632&title=blacklist-ip-wildcard-issue#11632 <![CDATA[Blacklist IP Wildcard Issue : The CDIR notation is a new feature...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11599&title=blacklist-ip-wildcard-issue#11599 Author: LogSat
Subject: 6356
Posted: 22 January 2008 at 8:09am

The CDIR notation is a new feature was introduced to solve a problem reported by Jerbo128 just 4 days ago :-)
Yesterday we released a new pre-release version of SpamFilter v4 that supports it (pre-release versions and betas are usually only available to licensed users). We are able to have such quick turnarounds (bug fixes are often released in less than 24/36 hours) as we are a smaller company and are not limited by inner political and marketing reasons in our business...
For the "holding up a number of years", SpamFilter was first released in Aug 2002, and we hope we'll be around for several more years!

For Avast!, there's no known issues with it nor other solutions. Please note the following however.
By default SpamFilter processes emails in RAM for efficiency. You can use
the following option in the SpamFilter.ini file to change this behavior:

;Set this to 0 to prevent queued emails to be spooled to memory, and force
spooling to disk. While less efficient, spooling to disk helps allow
existing antivirus software to detect and block some infected email files
SpoolQueueFilesToMemory=1

If the temp files are spooled to disk, this allows your antivirus a chance
to catch viruses the files may contain. If this happens, and your AV
deletes the file, SpamFilter is "smart" enough to understand what
happened, and will simply ignore the file and the relative email. However
your AV must be able to keep up with the mail flow, and not all of them
can.
The antivirus plugin for the partner we use, Norman, is fully integrated
in SpamFilter, and will inspect all attachments in emails. We go even as
far as "hacking" the passwords in zip files if they are not longer than 6
digits, so we can catch many of the viruses in password protected zip
files.
]]> Tue, 22 Jan 2008 08:09:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11599&title=blacklist-ip-wildcard-issue#11599 <![CDATA[Blacklist IP Wildcard Issue : (Sorry if kinda long) If you...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11598&title=blacklist-ip-wildcard-issue#11598 Author: cytechusa
Subject: 6356
Posted: 22 January 2008 at 3:03am

(Sorry if kinda long)

If you see the amount of junk that comes from the 200. range, I guess I'm looking to drop the connections and not even process them,like to bloke most all amsterdam,china. Ect

is the CDIR working in ver 3.5.4.718?

I'm wanting to make sure where I invest in a product, and how it is going to hold up for a number of years, I hate making changes (Customers hate it worse)

It seems to be what I was looking for, I gotta give roberto "Kudo's" on how quickly he responds to emails i have sent to him, was kinda worried at first "No phone support" no contract support, When he told me he doesn't have much need for "Paid" support, I almost fell-over!!! not that I'm lookn to give money away. (more of-an-at-a-boy) Roberto

Anyways, I'm going to be getting the Full 4.0 version so he can feed the family, gonna pop for the Anti-virus plug-in, Currently running Avast! Server, any for-seen issues there?

thanks

Diamond

]]> Tue, 22 Jan 2008 03:03:59 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11598&title=blacklist-ip-wildcard-issue#11598 <![CDATA[Blacklist IP Wildcard Issue : 201.0.0.0/8 to block the whole...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11595&title=blacklist-ip-wildcard-issue#11595 Author: jerbo128
Subject: 6356
Posted: 21 January 2008 at 9:56pm

201.0.0.0/8 to block the whole class A.

201.0.0.0/24 to block just the class C

That's a lot of ips if you are doing the entire Class A...

Jeremy

Edited by jerbo128 - 21 January 2008 at 9:58pm]]> Mon, 21 Jan 2008 21:56:05 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11595&title=blacklist-ip-wildcard-issue#11595 <![CDATA[Blacklist IP Wildcard Issue : whats the best way to block ip...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11594&title=blacklist-ip-wildcard-issue#11594 Author: cytechusa
Subject: 6356
Posted: 21 January 2008 at 9:53pm

whats the best way to block ip say 201.0.0.0 would you put someting like 201.1.1.0? or 201.255.255.0?]]> Mon, 21 Jan 2008 21:53:34 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11594&title=blacklist-ip-wildcard-issue#11594 <![CDATA[Blacklist IP Wildcard Issue : Yes, the new beta of SpamFilter...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11585&title=blacklist-ip-wildcard-issue#11585 Author: LogSat
Subject: 6356
Posted: 21 January 2008 at 2:35pm

Yes, the new beta of SpamFilter that will be released within the next day or so will allow the CDIR notation, and will thus allow you to specify the /8.]]> Mon, 21 Jan 2008 14:35:25 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11585&title=blacklist-ip-wildcard-issue#11585 <![CDATA[Blacklist IP Wildcard Issue : can we do 201.0.0.0/8?? ]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11578&title=blacklist-ip-wildcard-issue#11578 Author: cytechusa
Subject: 6356
Posted: 20 January 2008 at 10:29pm

can we do 201.0.0.0/8??]]> Sun, 20 Jan 2008 22:29:12 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6356&PID=11578&title=blacklist-ip-wildcard-issue#11578