Spam Filter ISP Forums : According to Domains and From Emails filtering https://www.logsat.com/spamfilter/forums/ Wed, 10 Jun 2026 20:58:42 +0000 Fri, 30 Apr 2004 23:23:00 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=3506 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[According to Domains and From Emails filtering : Oleg, Can you email me the batch...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3521&title=according-to-domains-and-from-emails-filtering#3521 Author: Dan B
Subject: 3506
Posted: 30 April 2004 at 11:23pm

Oleg,

Can you email me the batch file and the spam.dat files?  I would like to see what our large log files will show.  You can email me at funnyman____ at yahoo dot com  those are (4 under scores)

Thanks,

Dan Blickensderfer

]]> Fri, 30 Apr 2004 23:23:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3521&title=according-to-domains-and-from-emails-filtering#3521 <![CDATA[According to Domains and From Emails filtering : Hmm... looks like forum deleted...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3507&title=according-to-domains-and-from-emails-filtering#3507 Author: Guests
Subject: 3506
Posted: 29 April 2004 at 3:21am

Hmm... looks like forum deleted all my single line breaks...

Corrections to previous message:

spam.dat has one entry per one line.

batch file needs correction too. It needs to insert line breaks instead of unneeded spaces.

if you interested, don't hesitate to contact me by email.]]> Thu, 29 Apr 2004 03:21:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3507&title=according-to-domains-and-from-emails-filtering#3507 <![CDATA[According to Domains and From Emails filtering : As I noticed before, there is...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3506&title=according-to-domains-and-from-emails-filtering#3506 Author: Guests
Subject: 3506
Posted: 29 April 2004 at 3:04am

As I noticed before, there is no ability in SpamFilter to filter connections by their domain name.So I made batch file for Windows that scans SpamFilter's logfile and refreshes IPs database.This batch uses some utilities from http://unxutils.sourceforge.net/. (sed.exe, uniq.exe, cut.exe)It requires file named spam.dat, that contains something like:======\.ppp\.clientdynam\.dial\.client\.pool\.ip\-ip[0-9]dslcable======As you noticed, it uses Regular Expressions.So you can improve this file for your needs.And here is batch itself:===========echo.>database.txtrem take all the symbol names to be blacklisted by their IPfor /f "tokens=1,* delims= " %%a in (spam.dat) do sed -n "/%%a/p" %1>>database.txtdatabase.txtrem take all the symbol names to be blacklisted by their IPfor /f "tokens=1,* delims= " %%a in (spam.dat) do sed -n "/%%a/p" %1>>database.txtdatabase.txtrem take all the symbol names to be blacklisted by their IPfor /f "tokens=1,* delims= " %%a in (spam.dat) do sed -n "/%%a/p" %1>>database.txt>database.txt>database.txtdatabase.txtdatabase.txt

rem select only DNS resolve stringssed -n "s/.*Resolving \(.*\)/\1/p" database.txt>1.txt1.txt1.txt

rem remove repeating stringssort 1.txt>2.txtuniq 2.txt>3.txt2.txtuniq 2.txt>3.txt2.txtuniq 2.txt>3.txt3.txt3.txt

rem take only IPs without their DNS namescut -d- -f 1 3.txt>4a.txtcut -d- -f 2- 3.txt>4b.txt4a.txtcut -d- -f 2- 3.txt>4b.txt4a.txtcut -d- -f 2- 3.txt>4b.txt4b.txt4b.txt

rem you can comment next line and replace it by copy 4a.txt 5.txtsed "s/\.[0-9]* /.0/" 4a.txt>5.txtrem previous line replaces last group in IP address by 05.txtrem previous line replaces last group in IP address by 05.txtrem previous line replaces last group in IP address by 0

rem add new IPs to existing basecat 5.txt BlacklistedIPs >6.txt6.txt6.txt

rem remove dupessort 6.txt>7.txtuniq 7.txt>8.txt7.txtuniq 7.txt>8.txt7.txtuniq 7.txt>8.txt8.txt8.txt

rem form new base that can be copied to location, where SpamFilter set to.ren 8.txt BlacklistedIPs=========

That's it.I think it is easier to make copuple of white addresses instead of receiving tons of junk email to analyse its contents by text filters.]]> Thu, 29 Apr 2004 03:04:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3506&PID=3506&title=according-to-domains-and-from-emails-filtering#3506