Print Page | Close Window

Logging & Quarantine Questions

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5449
Printed Date: 29 November 2025 at 2:01am


Topic: Logging & Quarantine Questions
Posted By: pcmatt
Subject: Logging & Quarantine Questions
Date Posted: 17 January 2006 at 8:43pm

We're missing the standard log line:

Resolving Ipaddress - hostname

That line is needed to validate the Reverse DNS filter.

Any way we can get that back in the standard logging?

Any plans on updating the quarantine database so that it contains Rejection Codes for the current set of filters?

Thanks -Matt



-------------
-Matt R


Replies:
Posted By: LogSat
Date Posted: 17 January 2006 at 10:25pm
Matt,

Starting with the new build 2.7.1.511, reverse DNS lookups are only performed when needed. If the reverse DNS filter is disabled, or if the email has been rejected by another filter that has a higher priority than the reverse DNS filter, then the reverse lookup will not be performed and thus the log entry will not be there. However when the reverse DNS filter is checked and thus the reverse query is performed, the log entry should indeed be there. If it's not, then it's a bug, and we'd need to see your SpamFilter's logfile to find out what happened.

FYI the updated filter order is available at:
http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5171#6993 - http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID= 5171#6993


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: pcmatt
Date Posted: 17 January 2006 at 10:56pm

Your logic makes sense, but the problem is my users need reverse DNS lookups for auditing purposes but we don't want to require one to send an email. If some day you could have a checkbox for this as most smtp programs do, that would be grand.  The hostname of the machine connecting is also required for validation of SPF (without having to track down headers).  I can understand someone wanting to have the option to eliminate getting the hostname for every connection, but I really think it should be allowed for those who want it and can afford the extra lookup that has been in SpamFilter for years until recently.

Rejection codes apear to be missing for:

1. IP is in local blacklist file

2. IP is in local blacklist cache

Thanks,

Matt



-------------
-Matt R


Print Page | Close Window