Print Page | Close Window

n/a country filter

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5743
Printed Date: 10 May 2025 at 8:58pm


Topic: n/a country filter
Posted By: Marco
Subject: n/a country filter
Date Posted: 03 August 2006 at 10:55am

im just wondering: can one block this 'country' because the ip's it uses are fake?

or can some of the 'n/a' ip's be real valid ip's? im' asking because i do seem to have received around 400 spams from originating country 'n/a'. Or are these mails a result of the reverse DNS lookup failure?

regards,

Marco



-------------
Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams



Replies:
Posted By: LogSat
Date Posted: 03 August 2006 at 9:55pm
Marco,

I'd recommend against blocking the n/a's, as they could indeed be valid IPs for a legitimate country that have not been added to the database yet.

You can find an updated copy of the geo database at http://www.logsat.com/SpamFilter/pub/GeoIP.zip - http://www.logsat.com/SpamFilter/pub/GeoIP.zip . To update it, simply extract the GeoIP.dat file in the zip into SpamFilter's directory and overwite the existing one. There should be no need to restart SpamFilter.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: Marco
Date Posted: 04 August 2006 at 8:16am

ok, thanks Roberto

I think i will set the block still though.. the chance that our company will receive valid emails from an unregistered country is astronomically small.. (erm or should i say microscopically )



-------------
Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams


Posted By: jemmie
Date Posted: 05 August 2006 at 11:07am

Perhaps a suggestion to build in the next version of SF.

Autoupdating of this file.

jemmie



Posted By: StevenJohns
Date Posted: 17 August 2006 at 9:38am

Marco,

These countries are not "unregistered" at all. It just means that the IP hasn't been put in the GeoIP database.

For instance, http://www.upstreaminter.net - www.upstreaminter.net is a new ISP in the UK. They have only just started and have been given a block of IP's from RIPE to hand out to their customers (of which I am one). When we go to google from one of these IP's, google tries to re-direct us to the relevant language page, based on the country that the IP is from. Google sends us to it's polish site because it has no idea of where we come from.

Unfortunately, it takes a while for everyone to update their geoip databases and so any mail from me will end up in the N/A list.

 



Posted By: Marco
Date Posted: 17 August 2006 at 10:51am

ok, cheers for sharing that, i had no idea, the block remains though  All mails that have been received here from N/A are spams, and as soon as geoip is updated it no longer applies so the problem (if any) goes away allmost by itself.

 



-------------
Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams


Posted By: Desperado
Date Posted: 18 August 2006 at 8:54am
I'm with Marco on this one.  I have always blocked the "n/a" ane have rarely, if ever, blocked a good message.  I also update my GeoDB very often.  The only time I had a problem was when GB became UK and the GeoDB took a couple of days to catch up.

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: StevenJohns
Date Posted: 18 August 2006 at 9:08am

Ok, but doesn't this also depend on how often Logsat update their geoip db??

 



Posted By: Desperado
Date Posted: 18 August 2006 at 9:15am

No ... It depends on how often you, the user, updates the GeiDB file on your server.  As postes elsewhere, the updated db can be downloaded from:

http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz - http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz

Any you can script it to update automatically using any simple script or even patch command.



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com




Print Page | Close Window