I’m not terribly good with the statistics in Notes so I might be asking something dumb here…
I need to produce on a monthly basis, a list of all the IP Addresses and the Blacklists they were blocked at. (eg: 29/10/2003 01:39:25 SMTP Server: Remote host 24.198.96.5 (ptd-24-198-96-5.maine.rr.com) found in DNS blacklist at bl.spamcop.net)
I can see the information that I need in the Notes Log, but I’m not sure where to begin. As far as I can tell, the statistics only give a “final figure” and I’ve no idea how to restrict it to a given month.
As the log obviously doesn’t keep all of that information, my guess is that we need an agent that can go through the log and output the required lines to another database.
Can anyone tell me if I’m approaching this the right way and/or if this feature is already available somewhere else.
We’ve created an event monitor that is triggered by the phrase “found in DNS blacklist”. The event is written to a database dnsbl.nsf, wich is based on statrep.ntf. This way you’ll have one place where all events are stored together, and you can view them by blacklist, by server or by date if you fiddle a bit with the views.
Subject: event monitoring was quick and easy to setup
I just wanted to chime in and say this solution worked great for us. I had to read the help on creating an event handler (and change the search text to “found in blacklist”) but it took 5 minutes to setup tops.
I didn’t realize just how many blacklisted addresses we get until now!