Blacklist remove after x days or date
Idea shared by jorge.mx.neto - June 10, 2015 at 1:46 PM
Proposed
From the moment we've a complain of a external spammer and we file a complain with the prevaricator we Blacklist the incoming IP, can you add a rule based by days or date in the Security > Blacklist?
 
Thanks,
Jorge

3 Replies

Reply to Thread
1
This is a great idea and much needed, however it needs to go further.  We need the ability to remove blacklisted IP's by date AND stats.  For example, if a blacklist has not been hit in x number of days/months more than x times, then remove it.  Manual or automated would both be good.
 
 
PS
0
The problem is that maybe 2 years ago spam started ramping up to epic proportions. The public blacklists while helpful, are not able to keep up with the creative spammers (and there are lots of them). The old assumption is that an IP gets infected, sends spam for a while till someone stops it. Thus most anti-spam engines automatically only block an IP for a short time and release. But what the spammers are actually doing now is buying/using entire blocks of hundreds sometimes thousands of IP's, and rotating through them in a manner to always stay 1 step ahead of the blacklists. Some are smart enough to rotate some IP's every several months (have proof in my logs). They frequently use cheap hosting providers who are either unwilling or unable to stop this pattern. The only effective solution myself and others have found is to blacklist those hosting providers who are not responsible. This works, but now I have a blacklist that has also grown to epic proportions with no easy way to manage it. We need reports that show if a blacklist is still being regularly hit, so that an IP block that may have been reassigned, or taken over by a more responsible owner, etc. can be taken off the list. If someone from SmarterMail would like to see some of the evidence in my logs, I would be glad to share. If SmarterMail could add this feature it would be an absolute must have for my company.
PS
1
One more thing, I contacted SmarterTools about this idea, and they suggested to discuss it here as the more that comment on it etc, the more likely they are to implement.  So please, comment!
 
PS

Reply to Thread