Print Page | Close Window

Honey Pot

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5155
Printed Date: 06 June 2025 at 2:18pm


Topic: Honey Pot
Posted By: kspare
Subject: Honey Pot
Date Posted: 09 May 2005 at 1:48pm

Ok, time to share some tricks and tips...

I wanted all my spamfilter instances to read the same autowhitelist.

So what I did was create a sql script that updates the server field in all messages to say server 4. So only that server writes the autoupdate. Every 10 mins it copies that file to a repository and all the server copy from that file ever 10 mins.

How can we do this for the honeypot as far as sharing what IP's should be blocked?

If the file was copied to a master file, and then an updated copy was copied down will spamfilter read that file and use any new ips??


Replies:
Posted By: LogSat
Date Posted: 09 May 2005 at 10:16pm
SpamFilter *will* reload the honeypot file if it is modified externally. SpamFilter also caches new IP to ban and dumps them to the files every minute or so. The two processes may conflict depending on who has the latest info (updated file or cached IPs), and as this is a very new feature still being tested, we don't really have analyzed this situation yet...


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: kspare
Date Posted: 10 May 2005 at 9:19am

Is it possible to start storing these files in the database to make it easier to share amongst different servers?

When it dumps to file does it over write the file or just add to it?

Posted By: LogSat
Date Posted: 10 May 2005 at 10:40pm
The problem with storing lists in the database has always been performance. The time may have come to revisit that for just ONE list that would allow the end users to manage their entries. We'll be thinking about that in the near future.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window