From: B. C. <bc...@po...> - 2006-12-03 13:13:48
|
On Sat, December 2, 2006 6:25 pm, Fritz Borgstedt wrote: > >>EmailWhitelistRemove >> >>does that delete the tuple? or just the email address? > > The Email-Interface handles the whitelist and the redlist, there is no > "tuple" involved. > > I have found a way to make exim, after SA scans it and scores it 'too high' to take a copy and send it to the assp email addresses. What I am looking for is a way to delete the tuple that was made to at least slow the 'spammer' down. Dec-2-06 18:21:22 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:29 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:30 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:32 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:34 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:35 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:37 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:38 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:40 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:21:41 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:22:28 64.72.x.2 <edf...@wi...> email whitelist deletion Dec-2-06 18:32:20 64.72.x.2 <fn...@te...> email whitelist deletion Dec-2-06 18:32:25 64.72.x.2 <457...@bg...> email whitelist deletion Dec-2-06 18:32:45 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:32:45 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:32:46 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:32:46 64.72.x.2 <hea...@he...> email whitelist deletion Dec-2-06 18:32:47 64.72.x.2 <hea...@he...> email whitelist deletion etc. These are all SA messages that have scored higher than 15 (and less than 100) and have been fed to the asspnotwhite email. As you can see there is sometimes a large influx from the same email address (or since assp is greylisting) confirmed tuple. I'm looking to delay that individual as much as possible and keep them from hammering SA. There is no automated email that deletes the tuple? and makes them have to reconfirm and re-whitelist again? |