Blacklist is superior to Whitelist?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Blacklist is superior to Whitelist?

James Moe-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ASSP version 2.4.7(16036)

  Some messages have not been getting through. :-(
  Here is one where the sender is whitelisted and, inexplicably,
blacklisted as well. I do not have a clue how surveymonkey.com got on
a blacklist; it is listed in files/whitedomains.txt.

Whitelisted sender Domain: surveymonkey.com
  then
[spam found] (blacklisted domain 'surveymonkey.com'

  Is it to be expected that the blacklist is both queried and takes
precedence after a whitelisted domain?

2016-02-18 08:07:32 209.85.213.172 info: got STARTTLS request from
209.85.213.172
2016-02-18 08:07:32 Finished message - received DATA size: 3.06 kByte
- - sent DATA size: 0 Byte
2016-02-18 08:07:32 Disconnected: session:7FC7207E22C0 194.72.108.191
- - processing time 11 seconds
2016-02-18 08:07:32 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> info: found message
size announcement: 36.40 kByte

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] Whitelisted sender Domain: surveymonkey.com

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] Whitelisted sender Domain: surveymonkey.com
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] DKIM-Signature found
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: detected IP's on the mail routing way:
12.130.139.200
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: detected source IP: 12.130.139.200

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: found known good HELO
'mail-ig0-f172.google.com' - weight is -2

2016-02-18 08:07:33 08052-09003 [BlackDomain] 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] [spam found] (blacklisted domain
'surveymonkey.com') [Try even more powerful features this month] ->
/usr/local/bin/assp2/spam-yes/9003--97129.eml;
2016-02-18 08:07:33 Finished message - received DATA size: 36.59 kByte
- - sent DATA size: 0 Byte
2016-02-18 08:07:33 Disconnected: session:7FC7184D4558 209.85.213.172
- - processing time 1 seconds

- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlbGNmEACgkQzTcr8Prq0ZPD7wCfce5U29qUaKUjNMxUXxmtnSH9
CEEAoKmhk9bGMKOiB2m5yprpMdfTV/SE
=2yo2
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Blacklist is superior to Whitelist?

Thomas Eckardt/eck
DoBlackDomainWL ????

Thomas





Von:    James Moe <[hidden email]>
An:     For Users of ASSP <[hidden email]>
Datum:  18.02.2016 22:26
Betreff:        [Assp-user] Blacklist is superior to Whitelist?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ASSP version 2.4.7(16036)

  Some messages have not been getting through. :-(
  Here is one where the sender is whitelisted and, inexplicably,
blacklisted as well. I do not have a clue how surveymonkey.com got on
a blacklist; it is listed in files/whitedomains.txt.

Whitelisted sender Domain: surveymonkey.com
  then
[spam found] (blacklisted domain 'surveymonkey.com'

  Is it to be expected that the blacklist is both queried and takes
precedence after a whitelisted domain?

2016-02-18 08:07:32 209.85.213.172 info: got STARTTLS request from
209.85.213.172
2016-02-18 08:07:32 Finished message - received DATA size: 3.06 kByte
- - sent DATA size: 0 Byte
2016-02-18 08:07:32 Disconnected: session:7FC7207E22C0 194.72.108.191
- - processing time 11 seconds
2016-02-18 08:07:32 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> info: found message
size announcement: 36.40 kByte

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] Whitelisted sender Domain: surveymonkey.com

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] Whitelisted sender Domain: surveymonkey.com
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] DKIM-Signature found
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: detected IP's on the mail routing way:
12.130.139.200
2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: detected source IP: 12.130.139.200

2016-02-18 08:07:33 08052-09003 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] info: found known good HELO
'mail-ig0-f172.google.com' - weight is -2

2016-02-18 08:07:33 08052-09003 [BlackDomain] 209.85.213.172
<sma.deanna+caf_=deanna=[hidden email]> to:
[hidden email] [spam found] (blacklisted domain
'surveymonkey.com') [Try even more powerful features this month] ->
/usr/local/bin/assp2/spam-yes/9003--97129.eml;
2016-02-18 08:07:33 Finished message - received DATA size: 36.59 kByte
- - sent DATA size: 0 Byte
2016-02-18 08:07:33 Disconnected: session:7FC7184D4558 209.85.213.172
- - processing time 1 seconds

- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlbGNmEACgkQzTcr8Prq0ZPD7wCfce5U29qUaKUjNMxUXxmtnSH9
CEEAoKmhk9bGMKOiB2m5yprpMdfTV/SE
=2yo2
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Blacklist is superior to Whitelist?

James Moe-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/18/2016 10:21 PM, Thomas Eckardt wrote:
> DoBlackDomainWL ????
>
  It was set to ON, the default.

- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlbIrrAACgkQzTcr8Prq0ZMvtACgn0+tSTojkov6hogHjfmLk32F
eZsAn2tq8blAy3sIn0HgizcuYkIDa1V7
=Cigg
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user