Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread Frederick Samarelli



It looks like it may be a redundant test to 
sniffer.

Everything INV-URIBL catches so does 
SNIFFER.

Fred

  - Original Message - 
  From: 
  Darrell 
  ([EMAIL PROTECTED]) 
  To: Declude.JunkMail@declude.com 
  
  Sent: Monday, December 27, 2004 10:32 
  PM
  Subject: [Declude.JunkMail] URI Blacklist 
  External Program Beta Now Posted For Download
  
  We have released a publicbeta of our 
  URIlookup tool at http://www.invariantsystems.com/invuribl/default.htm.In 
  addition, we haveposted some stats on how effective the tool is on our 
  system at http://www.invariantsystems.com/invuribl/stats.htm.
  
  For a more detailed description on the tool 
  please see the below message or send me a note with any 
questions.
  Darrell
  
- Original Message - 
From: 
Darrell 
([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 

Sent: Wednesday, December 22, 2004 
11:13 PM
Subject: URI Blacklist External 
Program

We have wrote an external application that 
extracts URI'sfrom a message and checks themagainst a URI 
Blacklist.For those not familar with 
URI blacklists here is how the folks at surbl.org describe it.

"Surblblacklistsdiffer from most other RBLs in that 
they're used to detect spam based on message body URIs (usually web sites). 
Unlike most other RBLs, SURBLs are not used to block spam 
senders. Instead they allow you to block messages that have 
spam domains which occur in message bodies. "

We have been running this application in 
production for the lastweek against multi.surbl.org. We have 
also tested the application against several of the other SURBL lists with 
the same level ofsucess.

If you are interested in testing or running the 
software please join the following list [EMAIL PROTECTED]. 
During the beta period this is where we will be communicating about the 
application. For some of the applications basic features and 
implementation requirements please see http://www.invariantsystems.com/invuribl/default.htm. 
We expect to release a beta version within the next couple 
days.

If you would like any additional information 
prior to joining the list please let me know,
Darrell

---Check out http://www.invariantsystems.com 
for utilities for Declude And Imail. IMail/Declude Overflow Queue 
Monitoring, MRTG Integration, and Log 
Parsers.


RE: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread Markus Gufler



based on 10, 100 or 1000 messages?

Markus

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Frederick 
  SamarelliSent: Tuesday, December 28, 2004 4:03 PMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] URI 
  Blacklist External Program Beta Now Posted For Download
  
  It looks like it may be a redundant test to 
  sniffer.
  
  Everything INV-URIBL catches so does 
  SNIFFER.
  
  Fred
  
- Original Message - 
From: 
Darrell 
([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 

Sent: Monday, December 27, 2004 10:32 
PM
Subject: [Declude.JunkMail] URI 
Blacklist External Program Beta Now Posted For Download

We have released a publicbeta of our 
URIlookup tool at http://www.invariantsystems.com/invuribl/default.htm.In 
addition, we haveposted some stats on how effective the tool is on our 
system at http://www.invariantsystems.com/invuribl/stats.htm.

For a more detailed description on the tool 
please see the below message or send me a note with any 
questions.
Darrell

  - Original Message - 
  From: 
  Darrell 
  ([EMAIL PROTECTED]) 
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, December 22, 2004 
  11:13 PM
  Subject: URI Blacklist External 
  Program
  
  We have wrote an external application that 
  extracts URI'sfrom a message and checks themagainst a URI 
  Blacklist.For those not familar with 
  URI blacklists here is how the folks at surbl.org describe 
it.
  
  "Surblblacklistsdiffer from most other RBLs in that 
  they're used to detect spam based on message body URIs (usually web 
  sites). Unlike most other RBLs, SURBLs are not used to block spam 
  senders. Instead they allow you to block messages that have 
  spam domains which occur in message bodies. "
  
  We have been running this application in 
  production for the lastweek against multi.surbl.org. We have 
  also tested the application against several of the other SURBL lists with 
  the same level ofsucess.
  
  If you are interested in testing or running 
  the software please join the following list [EMAIL PROTECTED]. 
  During the beta period this is where we will be communicating about the 
  application. For some of the applications basic features and 
  implementation requirements please see http://www.invariantsystems.com/invuribl/default.htm. 
  We expect to release a beta version within the next couple 
  days.
  
  If you would like any additional information 
  prior to joining the list please let me know,
  Darrell
  
  ---Check out http://www.invariantsystems.com 
  for utilities for Declude And Imail. IMail/Declude Overflow Queue 
  Monitoring, MRTG Integration, and Log 
  Parsers.


Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread Frederick Samarelli



Since I only implemented it last evening on our 
test server we are looking at about 500 emails.

  - Original Message - 
  From: 
  Markus Gufler 
  
  To: Declude.JunkMail@declude.com 
  
  Sent: Tuesday, December 28, 2004 10:14 
  AM
  Subject: RE: [Declude.JunkMail] URI 
  Blacklist External Program Beta Now Posted For Download
  
  based on 10, 100 or 1000 messages?
  
  Markus
  


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Frederick 
SamarelliSent: Tuesday, December 28, 2004 4:03 PMTo: 
Declude.JunkMail@declude.comSubject: 
Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For 
Download

It looks like it may be a redundant test to 
sniffer.

Everything INV-URIBL catches so does 
SNIFFER.

Fred

  - Original Message - 
  From: 
  Darrell 
  ([EMAIL PROTECTED]) 
  To: Declude.JunkMail@declude.com 
  
  Sent: Monday, December 27, 2004 10:32 
  PM
  Subject: [Declude.JunkMail] URI 
  Blacklist External Program Beta Now Posted For Download
  
  We have released a publicbeta of our 
  URIlookup tool at http://www.invariantsystems.com/invuribl/default.htm.In 
  addition, we haveposted some stats on how effective the tool is on 
  our system at http://www.invariantsystems.com/invuribl/stats.htm.
  
  For a more detailed description on the tool 
  please see the below message or send me a note with any 
  questions.
  Darrell
  
- Original Message - 
From: 
Darrell 
([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 

Sent: Wednesday, December 22, 2004 
11:13 PM
Subject: URI Blacklist External 
Program

We have wrote an external application that 
extracts URI'sfrom a message and checks themagainst a URI 
Blacklist.For those not familar 
with URI blacklists here is how the folks at surbl.org describe 
it.

"Surblblacklistsdiffer from most other RBLs in that 
they're used to detect spam based on message body URIs (usually web 
sites). Unlike most other RBLs, SURBLs are not used to block spam 
senders. Instead they allow you to block messages that have 
spam domains which occur in message bodies. "

We have been running this application in 
production for the lastweek against multi.surbl.org. We have 
also tested the application against several of the other SURBL lists 
with the same level ofsucess.

If you are interested in testing or running 
the software please join the following list [EMAIL PROTECTED]. 
During the beta period this is where we will be communicating about the 
application. For some of the applications basic features and 
implementation requirements please see http://www.invariantsystems.com/invuribl/default.htm. 
We expect to release a beta version within the next couple 
days.

If you would like any additional 
information prior to joining the list please let me know,
Darrell

---Check out 
http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude 
Overflow Queue Monitoring, MRTG Integration, and Log 
Parsers.


Re[2]: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread Pete McNeil
Since URI are a subset of the SNF rulebase it's not unlikely that there
would be quite a bit of overlap. The key differences would be that SNF
does not use any network resources to look up the URI and SNF does not
waste any time examining URI that are not known to be seen in spam --

One of the countermeasures spammers use against SURBL is to
include a large number of URI that point to legitimate sources. SURBL
type mechanisms have no way of knowing which URI are legitimate and
which ones may be payload so they waste a good deal of effort
looking up URI that don't matter (often with ratios of 10:1 or more).

SNF already knows what it is looking for and it ignores the rest.

The use of URI data for tagging spam is always very effective. We've
used it since the beginning :-)

_M

On Tuesday, December 28, 2004, 10:14:47 AM, Markus wrote:

MG based on 10, 100 or 1000 messages?
MG  
MG Markus

  
  

MG   From: [EMAIL PROTECTED]   
MG [mailto:[EMAIL PROTECTED] On Behalf Of Frederick
MG Samarelli
MG Sent: Tuesday, December 28, 2004 4:03 PM
MG To: Declude.JunkMail@declude.com
MG Subject: Re: [Declude.JunkMail] URIBlacklist External
MG Program Beta Now Posted For Download


  

  
MG It looks like it may be a redundant test tosniffer.
  
MG  
  
MG Everything INV-URIBL catches so doesSNIFFER.
  
MG  
  
MG Fred
  
  
MG - Original Message - 
  
MG From:  Darrell  ([EMAIL PROTECTED])
  
MG To:Declude.JunkMail@declude.com  
  
MG Sent: Monday, December 27, 2004 10:32  PM
  
MG Subject: [Declude.JunkMail] URI  Blacklist External
MG Program Beta Now Posted For Download
  


  
MG We have released a public beta of our  URI lookup tool at
MG http://www.invariantsystems.com/invuribl/default.htm.  In 
MG addition, we have posted some stats on how effective the tool is
MG on our  system at
MG http://www.invariantsystems.com/invuribl/stats.htm.
  
MG  
  
MG For a more detailed description on the tool  please see
MG the below message or send me a note with any  questions.
  
MG Darrell
  
  
MG - Original Message - 
  
MG From:  Darrell([EMAIL PROTECTED])
  
MG To:Declude.JunkMail@declude.com  
  
MG Sent: Wednesday, December 22, 200411:13 PM
  
MG Subject: URI Blacklist ExternalProgram
  


  
MG We have wrote an external application thatextracts
MG URI's from a message and checks them against a URI   
MG Blacklist. For those not familar withURI blacklists here
MG is how the folks at surbl.org describe  it.
  
MG  
  
MG Surbl blacklists differ from most other RBLs in that   
MG they're used to detect spam based on message body URIs (usually
MG websites). Unlike most other RBLs, SURBLs are not used to
MG block spam senders. Instead they allow you to block messages that
MG havespam domains which occur in message bodies. 
  
MG  
  
MG We have been running this application inproduction
MG for the last week against multi.surbl.org.  We havealso
MG tested the application against several of the other SURBL lists
MG withthe same level of sucess.
  
MG  
  
MG If you are interested in testing or runningthe
MG software please join the following list
MG [EMAIL PROTECTED]During the
MG beta period this is where we will be communicating about the  
MG application.  For some of the applications basic features and 
MG implementation requirements please see
MG http://www.invariantsystems.com/invuribl/default.htm. We
MG expect to release a beta version within the next couple   
MG days.
  
MG  
  
MG If you would like any additional informationprior to
MG joining the list please let me know,
  
MG Darrell
  
MG  
  
MG ---
MG Check out http://www.invariantsystems.com for utilities for
MG Declude And Imail.  IMail/Declude Overflow Queue   
MG Monitoring, MRTG Integration, and LogParsers.




  


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Newbie - Can a declude rule check for a header?

2004-12-28 Thread Chase Seibert


I'm trying to consolidate spam filtering rules on the iMail end, after Declude 
has processed the message. Before declude, I used the following rule, which 
basically checks if the message matched more than one blacklist (iMail 
anti-spam), OR had a statistics rating over .9:
H~X-IMAIL-SPAM-DNSBL.*X-IMAIL-SPAM-DNSBL!OR!H~X-IMAIL-SPAM-STAT:Suspected Spam
 
I am currently deploying Declude for spam/virus, and I am hoping I can shorten 
this rule to just:
H~X-RBL-Warning: WEIGHT[1-9]:Suspected Spam
 
This would match WEIGHT10, WEIGHT20 (but not WEIGHT05, which I have added into 
the system, but to not want filtered by default). My problem is that I want to 
continue to utilize iMail's anti-spam in addition to Declude. Not for 
blacklists, but for the statistics filter. My question is, can I add a rule 
into Declude that will check if the header X-IMAIL-SPAM-STAT exists, and give 
that a weight?
 
I'm sure this has been asked before, but I could not find anything in the 
message archive or in the Declude documentation. As a side note, IPSwitch 
really needs to update the message archive search tool. It sucks.
 
Thanks!

 

 -Chase

Chase Seibert |  Network and Systems Engineer |  Bullhorn Inc.  |  617.464.2440 
x119  |  www.bullhorn.com


RE: Re[2]: [Declude.JunkMail] SURBL vs. Sniffer?

2004-12-28 Thread Andy Schmidt
Hi Pete,

Is Sniffer performing URI checks as part of certain return codes only -
e.g., if I were to use SURBL to augment Sniffer, are there certain Sniffer
Return Codes that are likely to overlap with SURBL lookups - or have all
Sniffer return codes the potential of having been triggered by URI checks?

Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Tuesday, December 28, 2004 10:37 AM
To: Markus Gufler
Subject: Re[2]: [Declude.JunkMail] URI Blacklist External Program Beta Now
Posted For Download


Since URI are a subset of the SNF rulebase it's not unlikely that there
would be quite a bit of overlap. The key differences would be that SNF does
not use any network resources to look up the URI and SNF does not waste any
time examining URI that are not known to be seen in spam --

One of the countermeasures spammers use against SURBL is to include a large
number of URI that point to legitimate sources. SURBL type mechanisms have
no way of knowing which URI are legitimate and which ones may be payload
so they waste a good deal of effort looking up URI that don't matter (often
with ratios of 10:1 or more).

SNF already knows what it is looking for and it ignores the rest.

The use of URI data for tagging spam is always very effective. We've used it
since the beginning :-)

_M

On Tuesday, December 28, 2004, 10:14:47 AM, Markus wrote:

MG based on 10, 100 or 1000 messages?
MG  
MG Markus

  
  

MG   From: [EMAIL PROTECTED]   
MG [mailto:[EMAIL PROTECTED] On Behalf Of Frederick 
MG Samarelli
MG Sent: Tuesday, December 28, 2004 4:03 PM
MG To: Declude.JunkMail@declude.com
MG Subject: Re: [Declude.JunkMail] URIBlacklist External
MG Program Beta Now Posted For Download


  

  
MG It looks like it may be a redundant test tosniffer.
  
MG  
  
MG Everything INV-URIBL catches so doesSNIFFER.
  
MG  
  
MG Fred
  
  
MG - Original Message -
  
MG From:  Darrell  ([EMAIL PROTECTED])
  
MG To:Declude.JunkMail@declude.com
  
MG Sent: Monday, December 27, 2004 10:32  PM
  
MG Subject: [Declude.JunkMail] URI  Blacklist External
MG Program Beta Now Posted For Download
  


  
MG We have released a public beta of our  URI lookup tool at
MG http://www.invariantsystems.com/invuribl/default.htm.  In 
MG addition, we have posted some stats on how effective the tool is
MG on our  system at
MG http://www.invariantsystems.com/invuribl/stats.htm.
  
MG  
  
MG For a more detailed description on the tool  please see
MG the below message or send me a note with any  questions.
  
MG Darrell
  
  
MG - Original Message -
  
MG From:  Darrell([EMAIL PROTECTED])
  
MG To:Declude.JunkMail@declude.com
  
MG Sent: Wednesday, December 22, 200411:13 PM
  
MG Subject: URI Blacklist ExternalProgram
  


  
MG We have wrote an external application thatextracts
MG URI's from a message and checks them against a URI   
MG Blacklist. For those not familar withURI blacklists here
MG is how the folks at surbl.org describe  it.
  
MG  
  
MG Surbl blacklists differ from most other RBLs in that   
MG they're used to detect spam based on message body URIs (usually
MG websites). Unlike most other RBLs, SURBLs are not used to
MG block spam senders. Instead they allow you to block messages that
MG havespam domains which occur in message bodies. 
  
MG  
  
MG We have been running this application inproduction
MG for the last week against multi.surbl.org.  We havealso
MG tested the application against several of the other SURBL lists
MG withthe same level of sucess.
  
MG  
  
MG If you are interested in testing or runningthe
MG software please join the following list
MG [EMAIL PROTECTED]During the
MG beta period this is where we will be communicating about the  
MG application.  For some of the applications basic features and 
MG implementation requirements please see
MG http://www.invariantsystems.com/invuribl/default.htm. We
MG expect to release a beta version within the next couple   
MG days.
  
MG  
  
MG If you would like any additional informationprior to
MG joining the list please let me know,
  
MG Darrell
  
MG  
  
MG ---
MG Check out http://www.invariantsystems.com for utilities for
MG Declude And Imail.  IMail/Declude Overflow Queue   
MG Monitoring, MRTG Integration, and LogParsers.




  


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The 

Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread DLAnalyzer Support
Fred, 

While invURIBL will catch a lot of SPAM - I still would recommend folks use 
Sniffer.  The thing to keep in mind is that Sniffer triggers on many other 
aspects of SPAM other than URI data. 

Darrell 

Frederick Samarelli writes: 

It looks like it may be a redundant test to sniffer. 

Everything INV-URIBL catches so does SNIFFER. 

Fred
  - Original Message - 
  From: Darrell ([EMAIL PROTECTED]) 
  To: Declude.JunkMail@declude.com 
  Sent: Monday, December 27, 2004 10:32 PM
  Subject: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download 

  We have released a public beta of our URI lookup tool at http://www.invariantsystems.com/invuribl/default.htm.  In addition, we have posted some stats on how effective the tool is on our system at http://www.invariantsystems.com/invuribl/stats.htm. 

  For a more detailed description on the tool please see the below message or send me a note with any questions.
  Darrell
- Original Message - 
From: Darrell ([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 
Sent: Wednesday, December 22, 2004 11:13 PM
Subject: URI Blacklist External Program 

We have wrote an external application that extracts URI's from a message and checks them against a URI Blacklist. For those not familar with URI blacklists here is how the folks at surbl.org describe it. 

Surbl blacklists differ from most other RBLs in that they're used to detect spam based on message body URIs (usually web sites). Unlike most other RBLs, SURBLs are not used to block spam senders. Instead they allow you to block messages that have spam domains which occur in message bodies.  

We have been running this application in production for the last week against multi.surbl.org.  We have also tested the application against several of the other SURBL lists with the same level of sucess. 

If you are interested in testing or running the software please join the following list [EMAIL PROTECTED]  During the beta period this is where we will be communicating about the application.  For some of the applications basic features and implementation requirements please see http://www.invariantsystems.com/invuribl/default.htm.  We expect to release a beta version within the next couple days. 

If you would like any additional information prior to joining the list please let me know,
Darrell 

---
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log 
Parsers.


Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log 
Parsers. 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Off Topic: Contracts for spam/virus filtering

2004-12-28 Thread Kornitz, David
We are in the process of creating a contract for spam/virus filtering service 
that we offer to our customers.  Does anyone have an example of such a contract 
that they would be willing to share?
 
Thanks in advance.
 
David
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re[4]: [Declude.JunkMail] SURBL vs. Sniffer?

2004-12-28 Thread Pete McNeil
On Tuesday, December 28, 2004, 11:06:59 AM, Andy wrote:

AS Hi Pete,

AS Is Sniffer performing URI checks as part of certain return codes only -
AS e.g., if I were to use SURBL to augment Sniffer, are there certain Sniffer
AS Return Codes that are likely to overlap with SURBL lookups - or have all
AS Sniffer return codes the potential of having been triggered by URI checks?

Experiemental Received IP (Result=63), Obfuscation Techniques
(Result=62), and Experimental Abstract (Result=61) are not likely to
include any URI data - Experimental Abstract may include generalized
versions of URI.

All of the other result codes are likely to overlap with URI data.

_M



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re[4]: [Declude.JunkMail] SURBL vs. Sniffer?

2004-12-28 Thread Pete McNeil
On Tuesday, December 28, 2004, 11:06:59 AM, Andy wrote:

AS Hi Pete,

AS Is Sniffer performing URI checks as part of certain return codes only -

Sorry to respond twice but I want to clear up some potential confusion
- SNF includes URI as part of it's pattern matrix. It does not do any
specific URI checking. Rather, it simply recognizes known URI as
patterns of data in the message - there is no special mechanism for
it.

We code URI regularly as part of our rule generation process so URI
are commonly included in the pattern matrix. When scanning a message,
the entire pattern matrix is matched against the message at one time
so all recognized patterns are evaluated at once no matter what kind
of pattern they may be.

_M



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For Download

2004-12-28 Thread Chase Seibert


FYI - I have seen two emails in my personal inbox from this morning that were 
caught by INV-URIBL but not SNIFFER. I get about 40 spams a day on this account.


 -Chase

Chase Seibert |  Network and Systems Engineer |  Bullhorn Inc.  |  617.464.2440 
x119  |  www.bullhorn.com


 
-Original Message-
From:Frederick Samarelli [EMAIL PROTECTED] 
To: Declude.JunkMail@declude.com ;
Sent: Dec 28, 2004 10:28:09 AM
Subject: Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted 
For Download


Since I only implemented it last evening on our test server we are looking at 
about 500 emails.

- Original Message - 
From: Markus Gufler 
To: Declude.JunkMail@declude.com 
Sent: Tuesday, December 28, 2004 10:14 AM
Subject: RE: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted 
For Download



based on 10, 100 or 1000 messages?
 
Markus




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick 
Samarelli
Sent: Tuesday, December 28, 2004 4:03 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted 
For Download





It looks like it may be a redundant test to sniffer.

 

Everything INV-URIBL catches so does SNIFFER.

 

Fred

- Original Message - 
From: Darrell ([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 
Sent: Monday, December 27, 2004 10:32 PM
Subject: [Declude.JunkMail] URI Blacklist External Program Beta Now Posted For 
Download




We have released a public beta of our URI lookup tool at 
http://www.invariantsystems.com/invuribl/default.htm.  In addition, we have 
posted some stats on how effective the tool is on our system at 
http://www.invariantsystems.com/invuribl/stats.htm.

 

For a more detailed description on the tool please see the below message or 
send me a note with any questions.

Darrell

- Original Message - 
From: Darrell ([EMAIL PROTECTED]) 
To: Declude.JunkMail@declude.com 
Sent: Wednesday, December 22, 2004 11:13 PM
Subject: URI Blacklist External Program




We have wrote an external application that extracts URI's from a message and 
checks them against a URI Blacklist. For those not familar with URI blacklists 
here is how the folks at surbl.org describe it.

 

Surbl blacklists differ from most other RBLs in that they're used to detect 
spam based on message body URIs (usually web sites). Unlike most other RBLs, 
SURBLs are not used to block spam senders. Instead they allow you to block 
messages that have spam domains which occur in message bodies. 

 

We have been running this application in production for the last week against 
multi.surbl.org.  We have also tested the application against several of the 
other SURBL lists with the same level of sucess.

 

If you are interested in testing or running the software please join the 
following list [EMAIL PROTECTED]  During the beta period this is where we will 
be communicating about the application.  For some of the applications basic 
features and implementation requirements please see 
http://www.invariantsystems.com/invuribl/default.htm.  We expect to release a 
beta version within the next couple days.

 

If you would like any additional information prior to joining the list please 
let me know,

Darrell

 

---
Check out http://www.invariantsystems.com for utilities for Declude And Imail.  
IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.

[Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread Chuck Cahill
While at work, I enjoy the protection of Declude for Spam and Virus 
prevention but at home it's a different story.  At home, I have the Boss's 
(Wife) computer protected from viruses but that's where it stops.  Like 
most Boss's, she's under the impression that an Email address must be 
shared with everyone and anyone.

While I wait for Declude to come out with a desktop version, does anyone 
have suggestions on what works well for the mostly computer 
illiterate.  I'm looking for something I can configure and tweak as 
necessary but doesn't require much user interaction.  I'm trying to stay 
away from the Bayesian Filtering programs that require you marking the 
messages as HAM or SPAM.  This end user will tell you she'll update it 
but she'll say one thing and do another.

Thanks
Chuck Cahill

Visit us at www.yfcs.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread Matt
Chuck,
Seems like you are looking for the infamous magic bullet.
What I tell people to do under these conditions is either start fresh 
with new addresses and use a Web mail account for commercial things, and 
a real account for personal things.  If not that, I have sold some 
people E-mail hosting for family domains, but it starts at 3 accounts 
and not just one, and I don't push for getting a lot of this type of 
business because it is much harder to support 100 three account clients 
than one 300 account client.  You could probably get somewhat decent 
protection (80% to 90%) by going to a service that sells them one at a 
time and generally charge $20 to $30 per year.  That might be the best 
option for your needs.

Matt

Chuck Cahill wrote:
While at work, I enjoy the protection of Declude for Spam and Virus 
prevention but at home it's a different story.  At home, I have the 
Boss's (Wife) computer protected from viruses but that's where it 
stops.  Like most Boss's, she's under the impression that an Email 
address must be shared with everyone and anyone.

While I wait for Declude to come out with a desktop version, does 
anyone have suggestions on what works well for the mostly computer 
illiterate.  I'm looking for something I can configure and tweak as 
necessary but doesn't require much user interaction.  I'm trying to 
stay away from the Bayesian Filtering programs that require you 
marking the messages as HAM or SPAM.  This end user will tell you 
she'll update it but she'll say one thing and do another.

Thanks
Chuck Cahill

Visit us at www.yfcs.com

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread John Tolmachoff \(Lists\)
Make her use an e-mail address protected by Declude.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Chuck Cahill
 Sent: Tuesday, December 28, 2004 1:40 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] OT - Desktop Spam Prevention
 
 While at work, I enjoy the protection of Declude for Spam and Virus
 prevention but at home it's a different story.  At home, I have the Boss's
 (Wife) computer protected from viruses but that's where it stops.  Like
 most Boss's, she's under the impression that an Email address must be
 shared with everyone and anyone.
 
 While I wait for Declude to come out with a desktop version, does anyone
 have suggestions on what works well for the mostly computer
 illiterate.  I'm looking for something I can configure and tweak as
 necessary but doesn't require much user interaction.  I'm trying to stay
 away from the Bayesian Filtering programs that require you marking the
 messages as HAM or SPAM.  This end user will tell you she'll update it
 but she'll say one thing and do another.
 
 
 Thanks
 Chuck Cahill
 
 
 
 Visit us at www.yfcs.com
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread Matt Goodhue
Hello Chuck,

Here is one that I setup for some of my customers who have email
accounts with their cable ISP's at home.  I have found it to be ok on
the desktop and very configurable.

It uses DSNBL lists for its filtering.

http://www.spampal.org/

Thanks.
Matt Goodhue


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Cahill
Sent: Tuesday, December 28, 2004 5:00 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] OT - Desktop Spam Prevention

While at work, I enjoy the protection of Declude for Spam and Virus 
prevention but at home it's a different story.  At home, I have the
Boss's 
(Wife) computer protected from viruses but that's where it stops.  Like 
most Boss's, she's under the impression that an Email address must be 
shared with everyone and anyone.

While I wait for Declude to come out with a desktop version, does anyone

have suggestions on what works well for the mostly computer 
illiterate.  I'm looking for something I can configure and tweak as 
necessary but doesn't require much user interaction.  I'm trying to stay

away from the Bayesian Filtering programs that require you marking the 
messages as HAM or SPAM.  This end user will tell you she'll update it 
but she'll say one thing and do another.


Thanks
Chuck Cahill



Visit us at www.yfcs.com

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread Chuck Cahill
Thanks Matt,
This looks extremely promising.
Chuck Cahill
YFCS, Inc

At 05:23 PM 12/28/2004 -0500, you wrote:
Hello Chuck,
Here is one that I setup for some of my customers who have email
accounts with their cable ISP's at home.  I have found it to be ok on
the desktop and very configurable.
It uses DSNBL lists for its filtering.
http://www.spampal.org/
Thanks.
Matt Goodhue

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Cahill
Sent: Tuesday, December 28, 2004 5:00 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] OT - Desktop Spam Prevention
While at work, I enjoy the protection of Declude for Spam and Virus
prevention but at home it's a different story.  At home, I have the
Boss's
(Wife) computer protected from viruses but that's where it stops.  Like
most Boss's, she's under the impression that an Email address must be
shared with everyone and anyone.
While I wait for Declude to come out with a desktop version, does anyone
have suggestions on what works well for the mostly computer
illiterate.  I'm looking for something I can configure and tweak as
necessary but doesn't require much user interaction.  I'm trying to stay
away from the Bayesian Filtering programs that require you marking the
messages as HAM or SPAM.  This end user will tell you she'll update it
but she'll say one thing and do another.
Thanks
Chuck Cahill


Visit us at www.yfcs.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OT - Desktop Spam Prevention

2004-12-28 Thread Matt
Sorry, I thought SpamPal used bayesian filtering, I should have checked 
first.

Matt

Chuck Cahill wrote:
Thanks Matt,
This looks extremely promising.
Chuck Cahill
YFCS, Inc

At 05:23 PM 12/28/2004 -0500, you wrote:
Hello Chuck,
Here is one that I setup for some of my customers who have email
accounts with their cable ISP's at home.  I have found it to be ok on
the desktop and very configurable.
It uses DSNBL lists for its filtering.
http://www.spampal.org/
Thanks.
Matt Goodhue


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Cahill
Sent: Tuesday, December 28, 2004 5:00 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] OT - Desktop Spam Prevention
While at work, I enjoy the protection of Declude for Spam and Virus
prevention but at home it's a different story.  At home, I have the
Boss's
(Wife) computer protected from viruses but that's where it stops.  Like
most Boss's, she's under the impression that an Email address must be
shared with everyone and anyone.
While I wait for Declude to come out with a desktop version, does anyone
have suggestions on what works well for the mostly computer
illiterate.  I'm looking for something I can configure and tweak as
necessary but doesn't require much user interaction.  I'm trying to stay
away from the Bayesian Filtering programs that require you marking the
messages as HAM or SPAM.  This end user will tell you she'll update it
but she'll say one thing and do another.
Thanks
Chuck Cahill


Visit us at www.yfcs.com

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.