Blacklists not working
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5626
Printed Date: 31 July 2025 at 5:08pm
Topic: Blacklists not working
Posted By: Guests
Subject: Blacklists not working
Date Posted: 25 May 2006 at 7:33pm
|
After installing the latest evaluation version I have noticed that the program is bypassing all my blacklists. I am having mail routed from the firewall to my local machine where the program is running. that's the 10.228 number. mailto:tvoge@caltim.com - tvoge@caltim.com is in the TOMAILBLOCKS.txt file for blocking and yet it's getting passed to the mail server where it will bounce. 10.228.215.210:25 is the mail server behind the firewall. This all started after I installed the latest eval. I went and reverted to the previous version and the same thing is happening. Anyone have any ideas as to what might be a miss? 05/25/06 19:24:38:248 -- (5680) Connection from: 10.228.215.1 - Originating country : N/A |
Replies:
Posted By: Guests
Date Posted: 25 May 2006 at 7:51pm
|
Here is more of the same. The problem seems to be the (Whitelisted Peer IP). mailto:tvogel@attractionsusa.com - tvogel@attractionsusa.com It's set up for only AUTHORIZED TO EMAIL lists. This address is NOT in the TO list. 05/25/06 19:47:51:967 -- (4060) Connection from: 10.228.215.1 - Originating country : N/A |
Posted By: LogSat
Date Posted: 25 May 2006 at 8:08pm
|
SpamFilter needs to see the original IP of the sender's server in order to perform all the IP-based tests. You will need to configure your firewall to pass SpamFilter the IP of the remote server. Without being able to see the real IP address, filters like the MAPS RBL servers, SPF, reverse DNS, MX tests, IP blacklists and more cannot be used. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Guests
Date Posted: 25 May 2006 at 8:37pm
|
Thanks for responding so quickly Roberto. The weird thing is that SF has been working this way fine for the past several weeks in it's current configuration. The trouble started when I installed the latest eval version. Tim |
LogSat wrote:Posted By: LogSat
Date Posted: 25 May 2006 at 9:59pm
|
If you have not changed your firewall/network settings, that should indicate that SpamFilter has always seen the same IP addresses. SpamFilter will see the IP that is reported by the Operating System, upgrading SpamFilter will not change that. Are you 100% certain that before you were seing the real IP address of the sender, and not IPs from your internal network? If you were before, again, an upgrade would not have changed that. You should look at any possible network/firewall changes that would instead indeed cause this to happen. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Guests
Date Posted: 25 May 2006 at 10:02pm
|
The IP it's been seeing is the internal. I HATE that I can't use the Country Block but the firewall has it's own RBL lookups and antivirus. But it doesn't have the country IP block which I love. I am trying to get it all reconfigured from scratch so that SF sees it all. Thanks again for all the help. --tim |
Posted By: Guests
Date Posted: 25 May 2006 at 10:23pm
| What about the "Whitelisted Peer IP". Where is SF storing this information? |
Posted By: LogSat
Date Posted: 26 May 2006 at 7:16am
|
It's in the file you specified on the "Settings - Black / White Lists - Excluded Domains / IPs" tab in SpamFilter. But again, you will not be able to use that feature reliably as SpamFilter is not seing the real IP of th sender. SpamFilter has *several* more IP-based filters than any firewall, so we strongly recommend that you do configure the fwall to pass the real IP to SpamFilter. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |