Hi Chuck: Spamdomains has been one of those topics that appear and disappear- never with a final and definitive answer.
It would be good if something like this was done like Forged Virus - with a server giving the weight.. But there are so many variations and changes that perhaps this can't be done by a single company (e.g. Scott) - I know we gave up in maintaining it.. except if we see things that have to be added -like eBay and PayPal which we are about to move to a HOLD-spamdomain test - which could be helpful with phishing attempts. We had several universities in there but had to abort it since a lot of professors and students use their home PC's and the weight was causing problem with FP's. There was a discussion a while back for someone to maintain this and others contribute to it but that never got anywhere either. Oh well... That is a little history for you.. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Wednesday, March 10, 2004 1:52 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam domains question Kami's spamdomains file was last updated on 12/4/2003 and since that time I have noticed a lot of problems with spamdomains. For example, mail from mindspring accounts seems to be going through verizon mail servers at times. There are other examples. A discussion of rules for entries in spamdomains files in the manual is totally lacking (do not want beat this like a dead horse regarding the inadequate manual). The old search the archives answer is also getting tiresome - searching the archives is like looking for a needle in a haystack. If you search on spamdomains or spamdomains file or spamdomains configuration I end up with 100s of posts that do not apply. It could take hours to find what you are looking for searching the archives. Sorry for the rant. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Wednesday, March 10, 2004 10:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] spam domains question Hello, Jeffrey, Kami's "spamdomains" list is always publically available and it looks like its pretty good. But I think he uses spamdomains in a different way that I do. Typically an entry makes it on to my spamdomains list if a known legit domain name is used to send to non-legit e-mail from an IP address that is not owned by the original legit domain name. I think Kami's listed is limited to only the domains of organizations which have a lot of users using a common domain name, e.g. Excite, Yahoo, MSN, and other e-mail generators. My list can end up having legit domains with smaller users bases, e.g. stanford.edu, oac.state.oh.us, veritas.com. Basically any legit domain name that I see used multiple times when spoofing e-mail addresses. I usually wait until I've seen a domain name 5-10 times before I add it to my spamdomains list. Because I'm using it in a different way I have about 1000 entries in my spamdomains text file. I could send you the list offline if you like but I'm sure 90% of the Declude users on this list are not using spamdomains in the way that I am. Thanks, Dan ----- Original Message ----- From: Jeffrey Di Gregorio To: '[EMAIL PROTECTED]' Sent: Wednesday, March 10, 2004 11:36 AM Subject: [Declude.JunkMail] spam domains question I've seen a few posts to this list (from myself and a few others) over the last year requesting anyone to post a current spam domains list. These requests never seem to be answered or even acknowledged. Is there some reason for this that I am missing? There was a list posted about a year ago, but I think a few of us would much appreciate someone sharing a current and expanded list. Thanks for the help as always, Jeffrey Jeffrey Di Gregorio CCNP MCSE Systems Administrator Pacific School of Religion --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
