Re: [Declude.JunkMail] IP4R DNS lookup

2004-06-18 Thread Scott Fisher
I posted my May Ip4R results at this link if you want to compare percents.
http://www.mail-archive.com/[EMAIL PROTECTED]/msg19089.html 

I don't fail on any specific tests, although some are at 90% of my tag weight.

Like Andy I also group tests too.
I have a DUL-Combo that consists of 4 DUL tests.
I have a proxy-combo that has numerous proxy and relay tests.

Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 06/17/04 03:57PM 
I was wondering how reliable the ip4r lookups are.  There seems to be a
lot of SPAM that is only failing one of the ip4r test (SORBS, SBL, AHBL,
etc) and no more of the test, hence delivering the SPAM.  Is it safe to
increase the weight of all these test to my deletion weight in order to
stop them from being delivered or are there some false positives that
may be caught?

 
Isaias Hernandez
TC Online Internet Support
979-775-6239
[EMAIL PROTECTED] 


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] IP4R DNS lookup

2004-06-17 Thread Andy Schmidt
Hi,

I have used filters to summarize categories of ip4r and other tests.

All the open relay tests will fail ONE filter.  So whether one or 4
black-lists say it's an open relay - it will only get ONE weight.

All the DUL/DUHL will fail ONE filter. So, whether a dial-up or dynamic port
is listed in one or many black-lists - it will only get ONE weight.

This technique allowed me to check against MORE blacklists AND define a
higher weight for each class of blacklist.  I don't have to fear that just
because a dial-up port is widely known it will suddenly fail JUST on that.

Best Regards
Andy

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] IP4R DNS lookup

2004-06-17 Thread Darrell \([EMAIL PROTECTED])
It depends on the IP4R tests.  For example SBL/XBL is very reliable and I
weight them high.  However, most the of the IP4R tests we weight low/medium.

Darrell


Check out http://www.invariantsystems.com for utilities for Declude And
Imail.
IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.


- Original Message - 
From: TCOnline Internet Support [EMAIL PROTECTED]
To: Declude.JunkMail [EMAIL PROTECTED]
Sent: Thursday, June 17, 2004 4:57 PM
Subject: [Declude.JunkMail] IP4R DNS lookup


I was wondering how reliable the ip4r lookups are.  There seems to be a
lot of SPAM that is only failing one of the ip4r test (SORBS, SBL, AHBL,
etc) and no more of the test, hence delivering the SPAM.  Is it safe to
increase the weight of all these test to my deletion weight in order to
stop them from being delivered or are there some false positives that
may be caught?


Isaias Hernandez
TC Online Internet Support
979-775-6239
[EMAIL PROTECTED]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.