There will be addresses that are no longer relevant over time. There are
addresses from legitimate addresses such as yahoo.com which Spammers use to
get past our filters, but they are caught with other methods such as manual
checks. Takes a lot of time. Other methods are to block domains used in
campaigns such as the recent domain wuzzlenorple.com. wuzzlenorple.com does
exist, and was registered on 6-20-2001 specifically to send out Spam in an
effort to circumvent our Spam filters, but because wuzzlenorple.com has no
DNS entry anywhere it gets bounced by Postfix, and listed for a manual check
before going into our database.
Performance with Imail lookups of a local database such as the kill list
will be best answered by the IPSwitch folks. I do not know what the Imail
limit is off hand for a kill list, or what kind of a performance hit it
would take. One way the Imail ported version could be kept down to a
smaller number of listings would be to offer a monthly, quarterly, and full
list for the kill list downloads. This would keep up with current Spam
campaigns while respecting the Imail software limits. Currently there are
10,489 in the kill list. In any given month there could be 10,000 addresses
for the kill list.
I will see what I can find in the KB. If someone else finds the kill list
file length limit in the KB before I do, please post it.
The Postfixgate kill list will be modified, and maintained according to what
is best to maintain Imail performance while still fighting Spam.
----- Original Message -----
From: "Andy Schmidt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, July 22, 2001 12:53 AM
Subject: RE: [IMail Forum] Postfixgate Anti-Spam Database kill list for
Imail users is now available
> >> From: "Todd Lahman" <[EMAIL PROTECTED]>
> >> Available immediately is the ported kill list which contains the same
> 10,489 real and bogus domains and e-mail addresses
>
> Hm - I have a concern here. Are entries in the kill list permanent? We
all
> know that spammers will change their email addresses and bogus domains
> constantly. So - this list could become longer and longer, taking more
and
> more time to search - even though the oldest entries probably are no
longer
> being used because the spammer switched names after one mailing campaign?
>
> Or is your database tracking "hits" and identifying "dead" entries that
are
> no longer SPAM relevant?
>
>
> Best Regards
> Andy Schmidt
>
> Argos Networks
> 600 East Crescent Avenue
> Suite 203
> Upper Saddle River, NJ 07458-1846
>
> Phone: +1 201 934-9411 x20 (Business)
> Fax: +1 201 934-9206
>
> http://www.ArgosWeb.net/
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
