Re: [spamdyke-users] RBLs

2014-03-09 Thread Dossy Shiobara
Again, as I said: this is from my own personal experience, but after having started using since 2 Dec 2013, it's consistently been giving good results, and I have yet to encounter a single false positive. I'm not saying anyone else should use the DNSBL, but I will say that anyone who blindly

Re: [spamdyke-users] RBLs

2014-03-09 Thread Gary Gendel
I tend to agree. The lists I've chosen have been the result of many years of tuning. Actually shlink.org wasn't even in my radar and isn't on many of the multi-rbl test sites so I need to test it. I'd be curious to hear about Sam's blacklist setup. Gary On 03/09/2014 09:24 AM, Dossy

Re: [spamdyke-users] RBLs

2014-03-09 Thread Sam Clippinger
I only use b.barracudacentral.org, zen.spamhaus.org and fresh.spameatingmonkey.com, plus my private list that's generated by the hunter_seeker script. My logs from just today show Barracuda is responsible for 90% of the RBL rejections. Spamhaus generated 10% and Spam Eating Monkey is 0%. My

Re: [spamdyke-users] RBLs

2014-03-09 Thread BC
On 3/9/2014 1:21 PM, Sam Clippinger wrote: plus my private list that's generated by the hunter_seeker script. My private list has blocked about 4.5 times more connections today than the DNS RBLs. Sam - Is a functionality that could be built into spamdyke with a .conf configuration option?

Re: [spamdyke-users] RBLs

2014-03-09 Thread mohaa
, but there are some. But i cant block their mailservers. I will give barracudecentral a try. Regards, Arne Original-Nachricht Betreff: Re: [spamdyke-users] RBLs Von: Sam Clippinger s...@silence.org An: spamdyke users spamdyke-users@spamdyke.org Datum: Sonntag, 9. März 2014 20:21

Re: [spamdyke-users] RBLs

2014-03-08 Thread Gary Gendel
Almost all of my uncaught spam comes from two domains: colocrossing.com hostnoc.net The latter usually has the ip address in the rdns so you can trap it that way, but I just block them entirely. With these two out of the way, and barracudacentral and zen.spamhaus, my users see almost no spam.

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
On Mar 8, 2014, at 6:52 AM, Gary Gendel g...@genashor.com wrote: Almost all of my uncaught spam comes from two domains: colocrossing.com hostnoc.net Color me unsurprised. I even think I know which spammer you're referring to. HostNoc/BurstNet has long had a reputation of being a

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amount of spam you see. Angus, To what does the TL;DR refer? How are you null-routing all those IPs? With spamdyke somehow? Bucky PS - this is a

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
My list consists of b.barracudacentral.org zen.spamhause.org Barracuda is not a relevant Blacklist. The most serious in (in this Order) are: zen.spamhaus.org bl.spamcop.net bl.mailspike.net ___ spamdyke-users mailing list

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:18 AM, Lutz Petersen wrote: Instead make this spamdyke.conf Settings: dns-blacklist-entry=bl.mailspike.net This is the one causing all sorts of mischief lately - blacklisting and unblacklisting legit and non-spamming IPs rapidly. What is wrong with barracuda? You said it

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
What is wrong with barracuda? You said it isn't relevant. What does that mean? The barracuda list is not maintained as the other lists. Beware - ist needs _huge_ manpower to produce good lists. Spamhaus and Spamcop have worldwide offices working 24/7. Barracuda not; the only usage of

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
BC wrote: On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amount of spam you see. To what does the TL;DR refer? TL;DR is Internet slang for 'Too Long; Didn't Read'. As it's used now, it's a way for

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
Funny, based on my own empirical evidence, Barracuda Central's DNSBL yields the best results. As with anything on the Internet, be skeptical and collect your own data. Доверяй, но проверяй (doveryai, no proveryai). *** 9373 92.80% DENIED_RBL_MATCH --- Breakdown --- 6956

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
And, anyone who wants to do just this, here's a handy list of hostnoc snowshoe netblocks documented: http://www.spamhaus.org/sbl/listings/hostnoc.net On 3/8/14 9:58 AM, Angus McIntyre wrote: Basically, my TL;DR was saying If you refuse to accept any communication whatsoever from this entire

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
Okay, thanks for the excellent explanation and I know how to null route an IP at the firewall. On 3/8/2014 7:58 AM, Angus McIntyre wrote: BC wrote: On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
Funny, based on my own empirical evidence, Barracuda Central's DNSBL yields the best results. 99% of this Hits are false positives: 6956 81.35% b.barracudacentral.org You are talking simply nonsense ! ___ spamdyke-users mailing list

Re: [spamdyke-users] RBLs

2014-03-07 Thread Sam Clippinger
Honestly, the RBL that seems to do the most good these days for me is the Barracuda Central list (b.barracudacentral.org). I also use Spamhaus, Spamcop and Spam Eating Monkey, but together those three don't catch even a tenth of what Barracuda catches. -- Sam Clippinger On Mar 6, 2014, at

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Thank you so much, Sam! On 3/7/2014 2:02 PM, Sam Clippinger wrote: Honestly, the RBL that seems to do the most good these days for me is the Barracuda Central list (b.barracudacentral.org http://b.barracudacentral.org). I also use Spamhaus, Spamcop and Spam Eating Monkey, but together those

Re: [spamdyke-users] RBLs

2014-03-07 Thread Gary Gendel
I tend to agree, however, it does depend on the ordering. I found that there are a lot of duplications on the list so the first one tends to get the most hits. My list consists of b.barracudacentral.org zen.spamhause.org I've tried others, but the others I've added only add a very small

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Do I need to sign up to use b.barracudacentral.org? I've been looking around their website... On 3/7/2014 2:11 PM, Gary Gendel wrote: I tend to agree, however, it does depend on the ordering. I found that there are a lot of duplications on the list so the first one tends to get the most

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Okay, thanks. It told me to register, which I did... then it disappeared into a black hole (probably preparing to spam me into the next century :). The about info said if you don't register the IPs from which you'll be making inqueries, they might add that IP to the blacklist. Gulp.

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Okay, it all worked. Interesting that nowhere did they tell me to use the URL you listed below, butin 15 minutes I'll try it. Sounds like you andGary recommend putting it as the first RBL in the spamdyke.conf file, right? On 3/7/2014 2:32 PM, Sam Clippinger wrote: No, it's publicly

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
On 3/7/2014 3:25 PM, Sam Clippinger wrote: Actually, the order of the options doesn't matter. spamdyke queries all of the RBLs simultaneously and uses the first positive response it gets from the DNS server. Okay, thanks for that bit. ___

Re: [spamdyke-users] RBLs

2014-03-07 Thread Dossy Shiobara
My list: dns-blacklist-entry=b.barracudacentral.org dns-blacklist-entry=bl.spamcop.net dns-blacklist-entry=cbl.abuseat.org dns-blacklist-entry=opm.tornevall.org dns-blacklist-entry=torexit.dan.me.uk dns-blacklist-entry=sbl.spamhaus.org #dns-blacklist-entry=zen.spamhaus.org