<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>Spam Filter ISP Forums : how can I tell if maps servers are being checked</title>
  <link>https://www.logsat.com/spamfilter/forums/</link>
  <description><![CDATA[This is an XML content feed of; Spam Filter ISP Forums : Spam Filter ISP Support : how can I tell if maps servers are being checked]]></description>
  <pubDate>Tue, 21 Jul 2026 06:09:02 +0000</pubDate>
  <lastBuildDate>Wed, 30 Jul 2014 21:32:24 +0000</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 11.04</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=7093</WebWizForums:feedURL>
  <image>
   <title><![CDATA[Spam Filter ISP Forums]]></title>
   <url>https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png</url>
   <link>https://www.logsat.com/spamfilter/forums/</link>
  </image>
  <item>
   <title><![CDATA[how can I tell if maps servers are being checked : Terry,If you go to the &amp;#034;Activity...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7093&amp;PID=14637&amp;title=how-can-i-tell-if-maps-servers-are-being-checked#14637</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=8">LogSat</a><br /><strong>Subject:</strong> 7093<br /><strong>Posted:</strong> 30 July 2014 at 9:32pm<br /><br />Terry,<div><br></div><div>If you go to the "Activity Log" tab in SpamFilter, you will see an input box where you can enter an IP and check to see if it listed in one of the MAPS RBL servers in SpamFilter by clicking on the "Check if IP in ORBS" button.</div><div><br></div><div>If the IP is blacklisted, you will see this message replace the IP address being searched:</div><div><br></div><div><font color="#0000cc">521 The IP 173.232.22.70 is Blacklisted by zen.spamhaus.org. ttp://www.spamhaus.org/sbl/query/SBLCSS -- &nbsp;--&nbsp;<br></font><div><br></div><div>You can also see if IPs are being blocked by looking at SpamFilter's activity logfiles for messages similar to this:</div></div><div><br></div><div><div><font color="#0000cc">07/29/14 00:11:21:704 -- (20930032) - <b>MAPS search done... 521 The IP</b> 107.184.134.107 is Blacklisted by cbl.abuseat.org. locked - see http://cbl.abuseat.org/lookup.cgi?ip=107.184.134.107 -- &nbsp;--&nbsp;</font></div></div><div><br></div><div>I highlighted in bold the text that will always be present when a match is found - the rest depends on the specific IP and the response by the MAPS RBL server.</div><div><br></div><div>If you do not see any emails being blocked by your MAPS servers, if you'd like to zip us<span style="font-family: Verdana; line-height: normal;">&nbsp;the following so we can take a look:</span></div><p style="margin: 0px; line-height: normal; font-family: Verdana;"><span ="Apple-tab-span" style="white-space:pre">	</span>• SpamFilter's latest activity logfile</p><p style="margin: 0px; line-height: normal; font-family: Verdana;"><span ="Apple-tab-span" style="white-space: pre;">	</span>• The \SpamFilter\Domains directory structure (if the files containing any of your blacklists/whitelists are outside that directory tree, please include those&nbsp;as well.</p><p style="margin: 0px; line-height: normal; font-family: Verdana; min-height: 15px;"><br></p><p style="margin: 0px; line-height: normal; font-family: Verdana;">If the zipped file is over 8MB in size, I'll send you via PM a URL you can use to upload us the zip.</p><p style="margin: 0px; line-height: normal; font-family: Verdana;"><br></p><div><br></div><div><br></div>]]>
   </description>
   <pubDate>Wed, 30 Jul 2014 21:32:24 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7093&amp;PID=14637&amp;title=how-can-i-tell-if-maps-servers-are-being-checked#14637</guid>
  </item> 
  <item>
   <title><![CDATA[how can I tell if maps servers are being checked :   I am running v4.5.1.98...we...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7093&amp;PID=14636&amp;title=how-can-i-tell-if-maps-servers-are-being-checked#14636</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=38">Terry</a><br /><strong>Subject:</strong> 7093<br /><strong>Posted:</strong> 30 July 2014 at 11:15am<br /><br />I am running v4.5.1.98...we continue to get more and more spam getting to our staff....nearly every time I research the ip's of the sender I am finding them blocked by one of our maps providers....this morning I got a spam message that made it through at about 6:30am...when I looked up the address at 7am I find that spamhaus-zen blacklisted the address.....<div>This seems to be a regular occurrence...is there a logging option to see if it really is testing the maps servers?&nbsp; I am getting more and more complaints from the staff about spam getting through that wasn't before.&nbsp;</div><div>Also seeing some errors from the sfdc process at times in the log that are new but I don't believe that has anything to do with it.</div><div>&nbsp;</div><div>07/30/14 06:27:41:840 -- (145381504) Detected TCP Connection: 173.232.22.70<br>07/30/14 06:27:41:840 -- (145381504) Connection from: 173.232.22.70&nbsp; -&nbsp; Originating country : United States<br>07/30/14 06:27:41:965 -- (145381504) Received MAIL FROM: <a href="mailto:LaserTreatmentforToenails@fungus-toenails.info" target="_blank" rel="nofollow">LaserTreatmentforToenails@fungus-toenails.info</a><br>07/30/14 06:27:42:012 -- (145389312) Received RCPT TO: xxxxxxxxxxx<a href="mailto:xxxxxxxxxxx@portptld.com" target="_blank" rel="nofollow">@portptld.com</a><br>07/30/14 06:27:42:027 -- (145381504) Received RCPT TO: <a href="mailto:sxxxxxxx@portofportland.com" target="_blank" rel="nofollow">sxxxxxxx@portofportland.com</a><br>07/30/14 06:27:42:043 -- (145381504) Resolving 173.232.22.70 - 173-232-22.static.rdns.serverhub.com<br>07/30/14 06:27:42:043 -- (145381504) found SPF record for fungus-toenails.info: v=spf1 a mx ip4:173.232.22.0/24 -all<br>07/30/14 06:27:42:043 -- (145381504) SPF query result: pass<br>07/30/14 06:27:42:043 -- (145381504) - SPF analysis for fungus-toenails.info done: - pass<br>07/30/14 06:27:42:043 -- (145381504) Mail from: <a href="mailto:LaserTreatmentforToenails@fungus-toenails.info" target="_blank" rel="nofollow">LaserTreatmentforToenails@fungus-toenails.info</a><br>07/30/14 06:27:42:043 -- (145389312) Resolving 212.117.36.229 - client-36-229.speedy-net.bg<br>07/30/14 06:27:42:043 -- (145381504) - MAPS search done... <br>07/30/14 06:27:42:043 -- (145381504) RCPT TO: xxxxxxxx<a href="mailto:xxxxxxxxrs@portofportland.com" target="_blank" rel="nofollow">rs@portofportland.com</a> accepted<br>07/30/14 06:27:42:183 -- (145381504) Checking SFDC<br>07/30/14 06:27:42:183 -- (145381504) Checking SFDE<br>07/30/14 06:27:42:215 -- (145381504) EMail from <a href="mailto:LaserTreatmentforToenails@fungus-toenails.info" target="_blank" rel="nofollow">LaserTreatmentforToenails@fungus-toenails.info</a> to <a href="mailto:stan.watters@portofportland.com" target="_blank" rel="nofollow">stan.watters@portofportland.com</a> passes Bayesian filter - 0% spam&nbsp; (32ms)<br>07/30/14 06:27:42:215 -- (145381504) Checking SURBL<br>07/30/14 06:27:42:230 -- (145381504) Start virus scan<br>07/30/14 06:27:42:246 -- (145381504) Starting queueing procedures<br>07/30/14 06:27:42:246 -- (145381504) EMail from <a href="mailto:LaserTreatmentforToenails@fungus-toenails.info" target="_blank" rel="nofollow">LaserTreatmentforToenails@fungus-toenails.info</a> to <a href="mailto:stan.watters@portofportland.com" target="_blank" rel="nofollow">stan.watters@portofportland.com</a> was queued (IndyF093449A-0C76-4080-B3DC-209CE21B2CB4.~tmp). Size: 4 KB, 4575 bytes<br>07/30/14 06:27:42:246 -- (145381504) Created thread (127311888) to handle delivery<br>07/30/14 06:27:42:246 -- (127311888) Sending email from <a href="mailto:LaserTreatmentforToenails@fungus-toenails.info" target="_blank" rel="nofollow">LaserTreatmentforToenails@fungus-toenails.info</a> to xxxxxxx<a href="mailto:xxxxxxxs@portofportland.com" target="_blank" rel="nofollow">s@portofportland.com</a> -- <br>07/30/14 06:27:42:293 -- (145389312) - Invalid MX record - <br>07/30/14 06:27:42:293 -- (145389312) 212.117.36.229 - Mail from: <a href="mailto:lberryf4@client-36-229.speedy-net.bg" target="_blank" rel="nofollow">lberryf4@client-36-229.speedy-net.bg</a> To: xxxxx<a href="mailto:xxxxxy@portptld.com" target="_blank" rel="nofollow">y@portptld.com</a> will be rejected<br>07/30/14 06:27:43:057 -- (145389312) Start virus scan<br>07/30/14 06:27:43:088 -- (145389312) Warning - SFDC_WebErrorsUpload has reached its limit, SFDC checks are paused temporarily<br>07/30/14 06:27:43:088 -- (145389312) Warning - SFDC_WebErrorsUpload has reached its limit, SFDC checks are paused temporarily<br>07/30/14 06:27:43:104 -- (145389312) Starting quarantine procedures<br>07/30/14 06:27:43:104 -- (145389312) Created thread (145364608) to add email to quarantine<br>07/30/14 06:27:43:104 -- (145389312) Starting bayesian procedures</div>]]>
   </description>
   <pubDate>Wed, 30 Jul 2014 11:15:17 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7093&amp;PID=14636&amp;title=how-can-i-tell-if-maps-servers-are-being-checked#14636</guid>
  </item> 
 </channel>
</rss>