Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Honeypot ?
  FAQ FAQ  Forum Search   Register Register  Login Login

Honeypot ?

 Post Reply Post Reply
Author
Derek View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Derek Quote  Post ReplyReply Direct Link To This Post Topic: Honeypot ?
    Posted: 05 July 2005 at 12:40pm

Ok... I may be blind, but I cannot find the honeypot feature in my version of SpamFilter ISP.  I am running 2.5.1.441.  Should there be a tab for the Honeypot or is this just a name you are giving to another feature under the blacklists?

 

 

Back to Top
JimMeredith View Drop Down
Newbie
Newbie


Joined: 27 January 2005
Location: United States
Status: Offline
Points: 28
Post Options Post Options   Thanks (0) Thanks(0)   Quote JimMeredith Quote  Post ReplyReply Direct Link To This Post Posted: 05 July 2005 at 4:05pm

No, you're not blind... the honeypot feature was not introduced until 2.5.1.450.

// New to VersionNumber = '2.5.1.450';
{TODO -cNew : Added "Honeypot" feature to automatically block IPs that send emails to specified honeypot addresses}

Back to Top
Derek Jeffries View Drop Down
Newbie
Newbie


Joined: 06 July 2005
Location: United States
Status: Offline
Points: 1
Post Options Post Options   Thanks (0) Thanks(0)   Quote Derek Jeffries Quote  Post ReplyReply Direct Link To This Post Posted: 06 July 2005 at 9:41am

How often is the demo version updated?  I am wanting to evaluate SpamFilter but it looks like the demo is quite a few versions behind.

Derek

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 06 July 2005 at 8:05pm
There is no set policy... We try to release a new free version when the number of improvements available in the retail version is such that there are too many features users are not able to see/test. We'll probably release a new free version in a few weeks, a bit after the latest 2.6 versionis officially released.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Marco View Drop Down
Senior Member
Senior Member
Avatar

Joined: 07 June 2005
Location: Netherlands
Status: Offline
Points: 137
Post Options Post Options   Thanks (0) Thanks(0)   Quote Marco Quote  Post ReplyReply Direct Link To This Post Posted: 08 July 2005 at 9:09am

short question, do you guys also think that logging the e-mail attempts to invalid mail adresses (not in authorisedToList), together with the number of attempts, would be useful?

Having this feature would help create a nice honeypot mail adress list in my opinion.

Regards,

Marco

Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 08 July 2005 at 3:34pm
Marco,

The logging is already happening, as in the log sample below. Keeping track of the number of attempts however is not, and we'll leave that task for a 3rd party application that parses the logfiles...

07/08/05 15:32:52:921 -- (792) Connection from: 172.27.4.51  -  Originating country : N/A
07/08/05 15:32:53:296 -- (792) Resolving 172.27.4.51 - Not found
07/08/05 15:32:53:296 -- (792) - EmailTO is not in AuthorizedTOEmail list...
07/08/05 15:32:53:296 -- (792) 172.27.4.51 - Mail from: roberto@yahoo.com To: test@logsat.com will be rejected
07/08/05 15:32:53:296 -- (792) Disconnect

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Marco View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Marco Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2005 at 3:45am

My question wasnt clear enough, i meant logging to a separate file, something like the honeypotblockedip.txt, with a format like this:

rejectedemails.txt

xxx.xxx.xxx.xxx FROMsender@domain.com  TOadress@ourdomain.com 

 

Granted, it allready IS in the activitylog, but such a txt file would make life a lot easier in finding the bad senders.

Regards,

Marco

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2005 at 3:51pm
Sorry Marco, I know that you actually wanted the logging in an external file, but duplicating the logging functionality for some items in a separate log is not currently planned.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.168 seconds.