Document information

Document ID:	5119
Subject:	IP Reputation Filter
Creation date:	4/27/17 1:01 PM
Last modified on:	10/28/24 10:51 AM

How does the IP Reputation Filter Work

The IP Reputation filter in Xeams checks the number of junk messages that have been received in the past from a particular IP subnet. The default behavior is to check for last 2 days of data and if the data has more than 7 junk messages. This means if more than 7 junk messages are received from an IP subnet, this rule will assign a score to future incoming emails.

Changing default values

There are two configurable parameters for this rule:

1. Maximum number of days to go back
2. Minimum number of junk emails received

You can change these settings by following the steps below.

• Locate server.properties file in $INSTALL_DIR\config folder. Create a new text file if this file is not found on your system.
• Enter the following lines:
  
  

  min.messages.b4.spam.ipreputation=10
  num.days.cache.4.ipreputation=5

• Save the file
• Restart Xeams

The above example will change the number of days to 5 and a minimum email count to 10.

Bypassing certain IP addresses

Create a file called IPRepExceptions.dat in $INSTALL_DIR\config containing a list of IP address that you need to skip. The file must have one IP address per line.

Create a file called SkippedDomainsForIPRepExceptions.dat in $INSTALL_DIR\config containing a list of domain names. Xeams will do a reverse lookup for the IP address and if it the top-level domain matches the host name in the file, no score will be assigned.

Note: The two files above do not get synchronized in clustering.

User comments

Add a comment to this document

Do you have a helpful tip related to this document that you'd like to share with other users?

Your Name

Email

Hide my email address

Captcha

Your Tip

Submit Tip