Andrew, thanks for sharing your scripts, however, I would bet that few list
member will actually see them.
Log entries:
==
11/07/2004 01:00:46 Qe43e56af00464c1b MIME file: Scripts.zip [base64;
Length=5925 Checksum=655492]
11/07/2004 01:00:46 Qe43e56af00464c1b Banning .ZIP file with cmd
Try this in your global config file, it will cause an email to be
unwhitelisted and go through the testing process
BYPASSWHITELIST bypasswhitelist x y 0 0
where x is the weight you want to assign
where y is the amount of recipients required to skip the whitelist
no setting is required in
Interesting maps by Postini that illuminate the geographical origins of
spam, viruses and directory harvest attacks.
Map shortcuts:
Spam
http://postini.com/stats/world-spam-2048.jpg
Viruses
http://postini.com/stats/world-virus-2048.jpg
Directory harvest attacks
Wow! Practically no viruses from Europe?! Can't be true.
For my understanding the geolocation for spam and dictionary attacks in
middle europe is not very exact as several cities like Milano (Italy),
Frankfurt and Hamburg (Germany) are missing completely and I can't believe
they have better or
Also, it could be that their ARIN IP numbers are off.
For example, UUNet might be servicing WANs in one country with IP allotments
from another...
Not sure if that's possibly but it could be.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus
...South America, also, and most of Asia, as well.
I think this just shows that the virus generators are sophisticated enough
to cover their tracks well by using zombies in the US.
-d
- Original Message -
From: Mark E. Smith [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday,
Hi,
I'm about to review/update my spam tests which currently are:
BASE64 WARN
CBL WARN
COMMENTS WARN
DSBL WARN
MYFILTERS WARN X-Warning: This E-mail failed Spam filters
ORDB WARN
REYNOLDSRSMT WARN
SORBS-NOMAIL WARN
SORBS-SMTP WARN
SORBS-SPAM WARN
SPAMCOP WARN
DSN WARN
NOABUSE WARN
NOPOSTMASTER
I highly recommend you review this site as part of your planning:
http://www2.spamchk.com/public.html
_M
On Monday, November 8, 2004, 12:07:25 AM, Glen wrote:
GH Hi,
GH I'm about to review/update my spam tests which currently are:
GH BASE64 WARN
GH CBL WARN
GH COMMENTS WARN
GH DSBL WARN
GH
Well, Glen, there's a LOT more that you could be doing. I see that you've
only put forward the names of built-in tests and IP4R tests. Do you have
Declude Junkmail Lite, Standard or Pro? And have you upgraded to the
current version of the declude.exe application?
The manual is here:
