Print Page | Close Window

DonotAddIPToSFDB=

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5642
Printed Date: 03 December 2025 at 3:53pm


Topic: DonotAddIPToSFDB=
Posted By: Guests
Subject: DonotAddIPToSFDB=
Date Posted: 07 June 2006 at 2:53am
Would be great to get a DoNotAddIPToSFDB= for the SFDB filter!
 
So I could locally skip SFDB check for the big ISPs that get into the SFDB all the time.
 
/Kim


Replies:
Posted By: LogSat
Date Posted: 07 June 2006 at 9:00pm
Well... in a way that is already doable.

Our centralized SFDB database is updated by SpamFilter reporting IPs that are added to the local "Cache IP blacklist". If an IP address is not added to the IP cache blacklist, it will never be reported to the SFDB database.

This said... please see the following in regards to the IP cache from our documentation:

Enable Cached IP Blocking - If an IP address sends more than a certain number of spam emails (3 by default) during a certain time interval (10 minutes by default), then it can be temporarily banned (blacklisted). All further connections from that IP address will be immediately rejected without allowing the sender to transmit any data. This should greatly reduce the load on the server. A banned IP address will be automatically removed from this temporary blacklist after a defined time interval (60 minutes by default). To prevent specific IPs to be added to this list, they can be added to DoNotAddIPToHoneypot SpamFilter.ini option.

That should thus do the trick!

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Guests
Date Posted: 08 June 2006 at 4:26am

Yes I know, but have no control on other users submitting to SFDB....

What I am looking for is to locally skip SFDB check for some IPs(and not whitelist them and skip all the other filters)

A list of IPs that would not be checked against SFDB but ALL the other filters.

/Kim

Posted By: LogSat
Date Posted: 08 June 2006 at 6:47pm
Well.. that would be an unusual scenario. If an IP is present in the SFDB, it usually indicates that it is being used to send spam, and should thus be blacklisted.

If you're askign for that IP to be whitelisted from the SFDB, then you are, in a way, saying that you trust that IP not to send spam, and so it should not be added to the SFDB.

However, if you trust the IP not to send spam, that would mean that you should whitelist it entirely from all filters, as just like it's added to the SFDB, it could eventually appear in the RBL and SURBL servers, for example.

Big ISPs are abused by spammers, and they do sometimes send spam (until they identify the problem and eliminate it). Just like they appear in the SFDB filter, these ISPs will be listed in various RBL and SURBL servers as well. ...unless they have deals with them so that they are never listed with them. But in this case (blacklist servers admins whitelisting largre ISPs), it's like giving them a free pass for everything. If they are whitelisted, they can send a lot of spam that will go undetected. At that point, if they are trusted enough to be whitelisted by the blacklist providers, a SpamFilter admin may as well add them to a local whitelist...

We're open to discussion on this topic however, as usual, as we do value everyone's opinion. So I guess we'll see how this goes!





-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: mikek
Date Posted: 09 March 2007 at 4:15am
Just ran into the same problem. mail.gmx.net is blacklisted by SFDB at the moment.

What I would like to do is exclude this server from the SFDB test, but still run all the other filters.

Whitelisting the IP of such a huge ISP will cause a lot of spams to get through, but if it's blocked by SFDB, a lot of legitimate emails will get blocked...

How about an IPFilterMatrix similar to the DomainFilterMatrix?

Cheers,

Mike


Print Page | Close Window