Thanks. I think I'll go the way of a group. The gui says:
It is possible to define a group ( Groups ) in the first parameter like: [user@domain]=>recipient@any-domain The group name must be a lower case email address of a local domain without any wildcard. This will create a combined block report for all email addresses defined in this group - useful, if someone has multiple email addresses and want's to get a single report. I tried creating a group like this [blockrep...@ourcharity.org] @ourcharity.org @ourotherdomain.org @sub.ourcharity.org ... I changed what was *.*=>k...@ourcharity.org=>1 in blockreportfile to [blockrep...@ourcharity.org]=>k...@ourcharity.org=>1 I've manually run the block report, but nothing arrives. I'm guessing I'm not understanding the GUI description. Clarify when you have a moment? This is totally not urgent. Thanks On Mon, Sep 14, 2015 at 5:19 AM, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > There are so many way to this ... for example: > > make a group of domains for the report and exclude the honeypot > use the replace recipient feature to translate all honeypot addresses in > to a single one - nice, you'll get one report line with the count of all > honeypot attempts > do not log the final log line, which has [spam found] and the honeypot > domain in it > use 'BlockReport/modify.pm' to remove unwanted content fron the report > (could be very complex) > > Thomas > > > > > Von: K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 13.09.2015 17:42 > Betreff: [Assp-test] Block Report Filter > > > > One of the unfortunate parts of my job is analyzing the block report on a > nightly basis. Yes, you should feel sorry for me. > > I recently implemented some honeypots, which are working great along with > your new method of having the database rebuild immediately with them. > GREAT STUFF. > > I've got a whole subdomain that's just a honeypot. I added that subdomain > to the BlockReportFilter with the idea that I don't have to see the random > emails that come in - and there are a lot of them. > > The filter seems to work, but unfortunately, each recipient address is > still listed in the block report. There aren't any messages, instead it > shows each email address followed by "no blocked" followed by something > like "1 line skipped on global defined filter regex 'BlockReportFilter'" > - and there's a ton of email addresses. > > *Is there a way to have addresses that have no activity other than what's > filtered out simply not show in a wildcard block report?* > > > *Thanks* > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
