Logging & Quarantine Questions |
Post Reply 
|
| Author | |
pcmatt 
Senior Member 
Joined: 15 February 2005 Location: United States Status: Offline Points: 116 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Logging & Quarantine QuestionsPosted: 17 January 2006 at 8:43pm |
|
We're missing the standard log line: Resolving Ipaddress - hostname That line is needed to validate the Reverse DNS filter. Any way we can get that back in the standard logging? Any plans on updating the quarantine database so that it contains Rejection Codes for the current set of filters? Thanks -Matt |
|
|
-Matt R
|
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4106 |
Post Options
Thanks(0)
Quote Reply
Posted: 17 January 2006 at 10:25pm |
|
Matt,
Starting with the new build 2.7.1.511, reverse DNS lookups are only performed when needed. If the reverse DNS filter is disabled, or if the email has been rejected by another filter that has a higher priority than the reverse DNS filter, then the reverse lookup will not be performed and thus the log entry will not be there. However when the reverse DNS filter is checked and thus the reverse query is performed, the log entry should indeed be there. If it's not, then it's a bug, and we'd need to see your SpamFilter's logfile to find out what happened. FYI the updated filter order is available at: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID= 5171#6993 |
|
|
|
|
pcmatt
Senior Member
Joined: 15 February 2005 Location: United States Status: Offline Points: 116 |
Post Options
Thanks(0)
Quote Reply
Posted: 17 January 2006 at 10:56pm |
|
Your logic makes sense, but the problem is my users need reverse DNS lookups for auditing purposes but we don't want to require one to send an email. If some day you could have a checkbox for this as most smtp programs do, that would be grand. The hostname of the machine connecting is also required for validation of SPF (without having to track down headers). I can understand someone wanting to have the option to eliminate getting the hostname for every connection, but I really think it should be allowed for those who want it and can afford the extra lookup that has been in SpamFilter for years until recently. Rejection codes apear to be missing for: 1. IP is in local blacklist file 2. IP is in local blacklist cache Thanks, Matt Edited by pcmatt |
|
|
-Matt R
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.578 seconds.