[Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Bonno Bloksma
Hi, How do you guys deal with it, LOTS of legit mailservers are listed in what used to be reliable spamsender databases. X-RBL-Warning: SPAMBAG: 109.176.216.212.blacklist.spambag.org. X-RBL-Warning: SPAMCANNIBAL: blocked, See:

Re: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Darin Cox
Yeah, UCEPROTECT in particular seems to have added a lot of major ISPs recently. We started counterweighting ISPs by REVDNS, but we were spending too much time doing that, so we reduced the weight of the UCEPROTECT1 and UCEPROTECT2 tests. Darin. - Original Message - From: Bonno

RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread David Barker
Also if you check our release notes http://www.declude.com/searchresults.asp?Cat=89 you will see that we had suggested lowering the weights on UCEPROTECT1 and UCEPROTECT2 David Barker Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED]

Re: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Bonno Bloksma
Hi, Just read the release notes and noticed that you deleted some tests as well. Why were those deleted? Ineffective of deprecated lists? p.s. Just reduced the weight on UCEPROTEC 1 a 2 to the new level. I'll install the latest version this evening, I'm still running 4.3.23 but I have 2 other

[Declude.JunkMail] Config Files (Upgrades)

2007-04-19 Thread Don Brown
Are the latest versions of global.cfg, declude.cfg, $default$.junkmail, etc. always written to X:\IMail\Declude\resource with the installation of each upgrade? Thursday, April 19, 2007, 8:06:45 AM, David Barker [EMAIL PROTECTED] wrote: DB Also if you check our release notes DB

RE: [Declude.JunkMail] Config Files (Upgrades)

2007-04-19 Thread David Barker
As we do not overwrite any config files, the \declude\resource directory contains the latest config templates, so you can do a comparison on changes. David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED]

RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread David Barker
Different reasons, slow performance etc, in the case of ORDB it shut down. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Thursday, April 19, 2007 10:23 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] lot's of legit mailservsr in

RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Todd Richards
David - On the topic of updates (for a newbie), the release notes for 4.3.40 mention that you removed the following IP4R tests. However, my cfg file still has them. Are these just suggested changes? I always wondered how the cfg file is updated without overwriting my changes, but also getting

RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread David Barker
In some cases we suggest you remove them as they often do not get a response which effects performance, you will see this if you run your Declude logs on DEBUG in the global.cfg (didn't get a resposne) The better the test the higher the weight attributed to the test, so a test that scores 2 for

Re: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Scott Fisher
I only score UCE L2 if there was no UCE L1 score. Filter: # Combine the UCEPROTECT Only Add LEVEL2 if LEVEL1 not hit TESTSFAILED END CONTAINS UCEPROTECT-LEVEL1-LAST TESTSFAILED 50 CONTAINS UCEPROTECT-LEVEL2-LAST This way I'm not double scoring this test as many are in both, - Original

RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases

2007-04-19 Thread David Barker
The other option depending if the UCEPROTECT-3 is not really to much of a concern is to use the following: UCEPROTECT IP4Rdnsbl-1.uceprotect.net * 4 0 David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311

[Declude.JunkMail] unsubscribe Declude.JunkMail

2007-04-19 Thread Glenn \\ WCNet
unsubscribe Declude.JunkMail --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.