[Declude.JunkMail] truncate.gbudb.net looking for testers.

2010-01-22 Thread Pete McNeil

Hello Declude folks,

I asked DB if I could post about this.
We're testing a dns based black list derived from Message Sniffer's 
GBUdb IP reputation system.
We will eventually be offering subscriptions to this BL for a modest 
(really) fee.


The list contains IPs that are generalized in the truncate range in the 
GBUdb cloud. It is updated every 10 minutes. This could be helpful for 
safely knocking down connections on systems that receive messages first 
and scan them later.


If you are interested in testing this on your system then please send us 
a note (support@ armresearch.com) and let us know the IP address of your 
resolver so that we can add it to the ACL.


When we go live with this we will prefer that subscribers configure 
their resolver (Bind 9.3+) as a slave so that it can receive IXFR 
updates as they occur. If you are interested in testing this 
functionality please let us know that too.


We have a limited number of slots open for testing.
We look forward to hearing from you.

Best,

_M

Pete McNeil (Madscientist)
Chief Scientist ARM Research Labs



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Conditional Whitelist - Good Use of SPF!

2010-01-22 Thread John T
1) Add the predefined test SPFPASS to the global.cfg with no weight
2) Create a filter test with one line:
TESTSFAILED WHITELIST CONTAINS SPFPASS
It will not stop other tests from running, but as long as no external test 
takes action upon the email, what ever the outcome of all other tests, the 
email will be white listed
If you only want come domains to use this, you would need to create another 
test that is a qualifier which when triggered (fails) you would then add a line 
in your SPFPASSWHITE test at the top saying TESTSFAILED END NOTCONTAINS 
SPFWHITEQUALIFYJohn T
eServices For You
-Original Message-
From: Andy Schmidt andy_schm...@hm-software.com
Sent 1/20/2010 6:50:16 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Conditional Whitelist - Good Use of SPF!A true 
WHITELIST would mean that:
a) it could skip over all the other tests right from the start
b) it would work even if you have some tests that DELETE emails!
Your scheme would not prevent emails from being killed outright by Sniffer
or similar content tests.
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dean
Lawrence
Sent: Wednesday, January 20, 2010 9:24 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Conditional Whitelist - Good Use of SPF!
Andy,
Since there is already an SPF Pass, Fail, and Neutral result, couldn't
you just create a rule that if the sender passes SPF that you apply a
large negative point value? Then you could apply that rule to only the
domains that you want to whitelist.
Dean
On Wed, Jan 20, 2010 at 8:47 AM, Andy Schmidt
andy_schm...@hm-software.com wrote:
 Hi,



 Despite all the shortcomings of SPF, there may be one GOOD use:



 Every once in a while I receive requests to whitelist certain sender email
 addresses or domains - then I explain that we don't like to do that
because
 it would allow any spam that PRETENDS to come from that domain to pass.



 What WOULD be a good feature, would be an SPF based domain whitelist!



 It would be a conditional whitelist of senders that will ONLY be applied,
if
 SPF for that domain PASSES.



 Best Regards,

 Andy





 ---
 This E-mail came from the Declude.JunkMail mailing list. To
 unsubscribe, just send an E-mail to imail...@declude.com, and
 type unsubscribe Declude.JunkMail. The archives can be found
 at http://www.mail-archive.com.
--
__
Dean Lawrence, CIO/Partner
Internet Data Technology
888.GET.IDT1 ext. 701 * fax: 888.438.4381
http://www.idatatech.com/
Corporate Internet Development and Marketing Specialists
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.