PenaltyBox

[Penalty_Box] Description

DoPenalty: PenaltyBox - IP Profiles - The PenaltyBox is a temporary position of low esteem awarded for a perceived misdeed. It scores IP's based on some events ( (ISP/Secondary MX Servers) will prevent from penalties. Select 'monitor' to fill WhiteBox and BlackBox. 'monitor' is also the right choice if you do not want to block IP's but rather score a message in 'Message Scoring Mode'. default: 2=monitor

DoPenaltyMessage: Message Scoring - If this feature is selected, the total score for all checks during a message is used to determine if the email should be considered Spam. If the combined score is greater than , the message will be blocked. default: 1=activated

PenaltyMessageTag: Low MessageLimit - MessageMode will not block messages whose score exceeds this threshold during the message but will tag them. default: 40 PenaltyMessageBlock: High MessageLimit - MessageMode will block messages whose score exceeds this threshold during the message. default: 50

AddScoringHeader: Add IP/Message Scoring Header - Adds a line to the email header "X-Assp-XXX-Score: ", where XXX may be IP, Message or both. default: 1=activated

pbdb: PenaltyBox Database - The directory/file with the penaltybox database files. For removal of entries from BlackBox use .For removal of entries from WhiteBox use default: pb/pbdb

noPB: Don't do BlackBox for these IP's - Enter IP's that you don't want to be profiled. These IP's will also be automatically removed from PB-BlackBox. IP ranges are defined as for example 182.82.10. CIDR notation is accepted (182.82.10.0/24). Hyphenated ranges can be used (182.82.10.0-182.82.10.255). Text after the range (and before a numbersign) will be accepted as comment to be shown in a match.

noPBwhite: Don't do WhiteBox for these IP's - Enter IP's that you don't want to be NOT profiled. These IP's will also be automatically removed from PB-WhiteBox.

WhiteExpiration: Expiration Time for WhiteBox Entries - The WhiteBox is always activated. The WhiteBox is similar to the Whitelist - but it is not a whitelist: content-related checks like Bayesian, URIBL, Bomb will be done, IP-related checks will be skipped. WhiteBox entries will expire after this specified number of days. default: 30

spamtrapaddresses: PenaltyBox Trap Addresses - Mail to any of these addresses will be blocked and the scoring value is added. Whitelist will be ignored. Nothing will be stored in the Spam Collection. These addresses are not checked for validity. Entries that start with '@' indicate that all addresses with that domain should match. Entries without '@' indicate the user part of email addresses with any domain. default: put|your@penaltytrap.com|addresses|@example.org

stValencePB: Penalty Trap Address Score, default=50 - For IP scoring in PenaltyBox

Cache Unknown Addresses (DoPenaltyMakeTraps) If enabled, unknown addresses are cached. If set to 'use for spamtrapaddresses' very activ addresses will be used like spamtrapaddresses. If set to 'use for spamaddresses' they will work like spamaddresses. If set to 'use for validation' all entries regardless of their frequency will be used to validate incoming addresses. Note: LocalAddresses_Flat or doLDAP or doVRFY must be enabled.

Unknown Address Frequency Limit (PenaltyMakeTraps) Minimum number of times an address must appear during PBTrapCacheExp before it will be used as spamaddress/spamtrapaddress. For example: 10.

Exceptionlist for Address Cache (noPenaltyMakeTraps) Addresses which should not be cached. Accepts specific addresses (user@example.com), user parts (user) or entire domains (@example.com). Wildcards are supported (fribo@example.com).

Invalid Addresses Refresh Interval (PBTrapCacheExp) Addresses will be removed after this interval in hours if the 'Invalid Addresses Frequency Limit' is not reached. For example 3

PenaltyUseNetblocks: Use IP Netblocks - Perform the IP address checks of the sending host based on the /24 subnet rather than on the specific IP. default: 1=activated

PenaltyError: Penalty Reply - If set SMTP reply for Penalty Deny. eg: '554 5.7.1 Error, send your mail to postmaster@LOCALDOMAIN to ensure delivery'. The literal LOCALDOMAIN will be replaced by the recipient domain. For example:554 5.7.1 Mail appears to be unsolicited - send error reports to postmaster@LOCALDOMAIN.

PenaltyDuration: Penalty Interval - IP's will be kept in the BlackBox if their score exceeds the Penalty Limit during this interval (minutes). default: 60

PenaltyLimit: Penalty Limit - PB will block IP's whose score exceeds this threshold during the Penalty Interval. Successful ASSP checks will increase the internal score per IP. default: 50 PenaltyExpiration: Expiration Time - Penalties will expire after this number of minutes. If set to Zero the Penalty BlackBox will be deleted and started from scratch. default: 360 CleanPBInterval: Clean Up PB Databases - Delete outdated entries from blackbox and whitebox databases every this many hours.Note: the current timeout must expire before the new setting is loaded, or you can restart. default: 3

DoPenaltyExtreme: PenaltyBox Extreme IP Profiling - If set PBextreme will block IP's whose score meet or exceed Extreme Scoring Threshold. blocks after the header is done, based on the IP's score from previous and current SMTP session PenaltyExtreme: Extreme Scoring Threshold - PBextreme will use this to determine candidates for special treatment. default: 150

ExtremeWL: Penalize Whitelisted - Enable extreme penalties for whitelisted addresses.

ExtremeNP: Penalize NonProcessing - Enable extreme penalties for addresses on the list.

ExtremeExpiration: Expiration Time for Extreme Penalties - Extreme penalties will expire after this number of days. default: 7 DoExtremeExport: Do Export Penalty BlackBox Extreme

DoExtremeExportAppend: Append Export File - Do not overwrite the export file but append to it. exportInterval: Export BlackBox Extreme File Interval - Exported Penalty Black Box Extreme File every this hours. default: 6

exportExtremeBlack: Exported BlackBox Extreme File - IP's in Penalty BlackBox which surpassed the extreme level will be regularly stored into this file. May be used for setting the firewall or similar applications. default: file:files/exportedextreme.txt

DoNotPenalizeRed: Do Not Score IP's in Redlisted Messages - IP's matching Red Regex or Redlist will not collect scoring values from PenaltyBox.

DoNotPenalizeNull: Do Not Score IP's From Bounce/Null-Senders - IP's matching (Bounce Senders) will not be profiled.

msValencePB: Message Scoring Limit Exceeded, default=10 - For IP scoring in PenaltyBox

pbeValencePB: Extreme Bad IP History, TotalScore larger than PenaltyExtreme, default=25 - message scoring in PenaltyBox

pbValencePB: Bad IP History, TotalScore larger than PenaltyLimit, default=15 - message scoring in PenaltyBox

gripValencePB: GRIP value (+ if > 0.9,- if