Re: Blocked users

Orin Wells wrote:
> We have a client that uses a mailing list to send a
weekly newsletter to 
> a list of some 2,000 recipients.  We have the
g_use_send_warning set to 
> 1200 so we see anyone who sends out a bunch but this
only warns the 
> administrator which is fine.
> 
> We also have g_user_send_ip set to 5,000 to block any
IP address from 
> sending more than this in a day.  They are using some
sort of internal 
> list rather than a surgemail Dlist.  Something we will
try to talk them 
> into changing.  This was set to 5,000 to overcome a
problem we had a 
> couple of months ago.    I have to admit I am not
comfortable with it at 
> this level.
> 
> A member of this particular domain (with the big list)
apparently sent 
> to her list twice (she says) and it is possible that
another member of 
> the domain also used the list this person ended up
being blocked and has 
> been since yesterday.  The puzzle to me is that she is
the ONLY sender 
> from this IP address who appears to have been blocked. 
When I increased 
> the g_user_send_ip she was again able to send.
> 
> This gives me several questions I need answers to.
> 
> 1. What would have caused her (one user only) to be
specifically 
> blocked?  Is there a setting for this that I can't
find?
> 

Do you have ?
	g_user_send_max
defined, if so then that would be the cause, if not, then
show me the actual log entry showing
it blocking that user (this will be in msg*.rec logs I
think)

> 2.  If this IS the case, how come when I upped
g_user_send_ip was her 
> block lifted?

Maybe the block was released due to time and your change was
not relevant.

> 
> 3. Is there some way to reset this block once someone
stupidly stumbles 
> into it?

Restart surgemail  Or add a
whitelist
	G_USER_SEND_WHITE "userdomain.name"

> 
> 4. Why were all the users at this (static) IP not
blocked?

Well my guess is it was the user limit not the ip limit. 
But the log entries would be helpful in determining this,
the 
log should make it clear which limit was reached.   Once we
see those log entries we can then determine if it worked as
expected or not and then fix it if necessary.

> 
> 5. If an IP exceeds the g_user_send_ip is there a
setting that can be 
> changed to reset the block on the IP?

The whitelist setting as above.

> 
> 6. Is there a variable somewhere that could be examined
to see how many 
> messages were sent from a specific IP other than
looking at one of the 
> reports?

No.
	ChrisP.