*I* manually marked them as negatives, and my one manual entry showed up as such correctly.... But that IP had four more entries showing the automated 'default positive' entries, and apparently that was enough to get this dialup IP listed as 'trusted' within the system... And as I noted its not alone.
Yes, I know the address submission is *supposed* to give only negatives, but I got something like 8 positives in before I shut it off (They got plus signs). I keep my Declude entries set to Verbose so I can follow what gets sent out and see what it wound up being when it arrives at Trustic. Mail volume is low today so I can follow along pretty closely. I'd leave this service alone for awhile so they can get their act together. They may call this a beta but it looks like it should still be an alpha. That method of auto-whitelisting is clearly something that wasn't thought through. All you have to do is look at a Trustic log and check out all the 'trusted' dialup and broadband IPs to see that. Sorry to sound so negative, but its just really a frustrating lesson in what happens when I don't think stuff through. The 'positive' list method of theirs is so deeply flawed its hard to see how anyone could put something like that out on the market... Automatically giving positive entries just because something isn't in a blacklist yet. How ridiculous. Most of the anti-spam battle is about discovering new IPs every day, and those IPs will change tomorrow. All their system will do is get server admins to let spam through. Could that have been the idea in the first place? Who knows anything about these guys? -------------------------------------------- Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com -------------------------------------------- -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua Levitsky Sent: Sunday, July 27, 2003 12:32 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] New spamcop style RBL.. ----- Original Message ----- From: "Matt Robertson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, July 27, 2003 2:44 PM Subject: RE: [Declude.JunkMail] New spamcop style RBL.. > I just verified a piece of spam that originated from a dialup IP. Now > its in my list and I see Trustic has listed that IP as a "trusted" > server... Its loaded with automatic recommendations from that stupid > auto-positive list. In fact the last four spams come from servers > marked as 'Trusted'. > > Looks like the people using automatic whitelisting are overwhelming the > blacklisters who actually send mail... A losing battle. ESPECIALLY > since I had Declude ROUTETO my high-weight spam to my Trustic bounce > address... Where it promptly gave them all positive recommendations > until I got it shut off. It's marked trusted but is it trusted and there is a negative on the left or is it trusted and there is a positive on the left? (In the first column there are plus signs and minus signs.) Also the email address submission only gives negatives... no positives.... not sure how you could ROUTETO and have positives as a result. -Josh --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
