Re: [Declude.JunkMail] BLARSBL:DBSL
Reply to: Roger Heath Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 8:49:08 AM Should be DSBL... and it appears to be working here after turning it on.. -- Roger Heath - Copy of Original Message(s): - R http://www.infoworld.com/cgi-bin/fixup.pl?story=http://www.infoworld.com/articles/op/xml/02/05/20/020520opestrat.xmldctag=security R Is DBSL a free blacklist? It seems so in the above article... R If so, do I just uncomment the line in the Global.Cfg to make it R active? R -- R Roger Heath R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service R --- R [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] R --- R This E-mail came from the Declude.JunkMail mailing list. To R unsubscribe, just send an E-mail to [EMAIL PROTECTED], and R type unsubscribe Declude.JunkMail. You can E-mail R [EMAIL PROTECTED] for assistance. You can visit our web R site at http://www.declude.com . R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: [Declude.JunkMail] BLARSBL:DBSL
Reply to: Intelliware Administrator Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 9:38:20 AM No, but I will try it. It seems to be working good. Scott had this under subscription based services in his sample global file, so I was a bit confused. Are there others? Does any one here have a complete list of the free ones available? -- Roger Heath - Copy of Original Message(s): - I Did you also uncomment DSBLALL ? I Kevin M. Donovan, MCSE I Network Support Specialist I IntelliWare Systems, Inc. I Phone (817) 277-0800 x228 I - Original Message - I From: Roger Heath [EMAIL PROTECTED] I To: Roger Heath [EMAIL PROTECTED] I Sent: Thursday, June 13, 2002 9:04 AM I Subject: Re: [Declude.JunkMail] BLARSBL:DBSL Reply to: Roger Heath Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 8:49:08 AM Should be DSBL... and it appears to be working here after turning it on.. -- Roger Heath - Copy of Original Message(s): - R I http://www.infoworld.com/cgi-bin/fixup.pl?story=http://www.infoworld.com/art I icles/op/xml/02/05/20/020520opestrat.xmldctag=security R Is DBSL a free blacklist? It seems so in the above article... R If so, do I just uncomment the line in the Global.Cfg to make it R active? R -- R Roger Heath R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service R --- R [This E-mail was scanned for viruses by Declude Virus I (http://www.declude.com)] R --- R This E-mail came from the Declude.JunkMail mailing list. To R unsubscribe, just send an E-mail to [EMAIL PROTECTED], and R type unsubscribe Declude.JunkMail. You can E-mail R [EMAIL PROTECTED] for assistance. You can visit our web R site at http://www.declude.com . R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus I (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . I --- I [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] I --- I This E-mail came from the Declude.JunkMail mailing list. To I unsubscribe, just send an E-mail to [EMAIL PROTECTED], and I type unsubscribe Declude.JunkMail. You can E-mail I [EMAIL PROTECTED] for assistance. You can visit our web I site at http://www.declude.com . I -- I ActivatorMail(tm) ver.061102 Scanned for all viruses by I www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: [Declude.JunkMail] BLARSBL:DBSL
No, but I will try it. It seems to be working good. Scott had this under subscription based services in his sample global file, so I was a bit confused. FYI, that section is for services that require a subscription *or* are not commonly used. The only ones that require a subscription are the MAPS tests (RBL, RSS, DUL) and the SNIFFER and POSTFIXGATE tests. Are there others? Does any one here have a complete list of the free ones available? You can go to http://www.declude.com/junkmail/support/ip4r.htm for a list of all the known DNS-based spam tests. Except for the ones listed above, they are all free. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: Re[3]: [Declude.JunkMail] BLARSBL:DBSL
I'm not sure if you mean BLARSBL or DSBL, but I have been using both, and DSBL-MULTI as well, for several months without issue. In fact, they have worked quite well for me, so I've given each of them a weight of 6, with my hold weight being 10. BLARSBL ip4rblock.blars.org * 6 0 DSBLip4rlist.dsbl.org * 6 0 DSBL-MULTI ip4rmultihop.dsbl.org * 6 0 Bill -Original Message- From: Roger Heath [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 13, 2002 9:03 AM To: R. Scott Perry Subject: Re[3]: [Declude.JunkMail] BLARSBL:DBSL Reply to: R. Scott Perry Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 10:18:20 AM Thanks. I had to drop this almost as soon as I started it. It seemed to work but then I began getting almost all mail trapped with a weight 10 appearing from nowhere. Even the tests list did not list a weight 10 rule violation. I commented out the DBSL and now am back to normal. -- Roger Heath - Copy of Original Message(s): - No, but I will try it. It seems to be working good. Scott had this under subscription based services in his sample global file, so I was a bit confused. R FYI, that section is for services that require a subscription *or* are not R commonly used. The only ones that require a subscription are the MAPS R tests (RBL, RSS, DUL) and the SNIFFER and POSTFIXGATE tests. Are there others? Does any one here have a complete list of the free ones available? R You can go to http://www.declude.com/junkmail/support/ip4r.htm for a list R of all the known DNS-based spam tests. Except for the ones listed above, R they are all free. R -Scott R --- R [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] R --- R This E-mail came from the Declude.JunkMail mailing list. To R unsubscribe, just send an E-mail to [EMAIL PROTECTED], and R type unsubscribe Declude.JunkMail. You can E-mail R [EMAIL PROTECTED] for assistance. You can visit our web R site at http://www.declude.com . R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[3]: [Declude.JunkMail] BLARSBL:DBSL
Reply to: R. Scott Perry Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 10:18:20 AM Thanks. I had to drop this almost as soon as I started it. It seemed to work but then I began getting almost all mail trapped with a weight 10 appearing from nowhere. Even the tests list did not list a weight 10 rule violation. I commented out the DBSL and now am back to normal. -- Roger Heath - Copy of Original Message(s): - No, but I will try it. It seems to be working good. Scott had this under subscription based services in his sample global file, so I was a bit confused. R FYI, that section is for services that require a subscription *or* are not R commonly used. The only ones that require a subscription are the MAPS R tests (RBL, RSS, DUL) and the SNIFFER and POSTFIXGATE tests. Are there others? Does any one here have a complete list of the free ones available? R You can go to http://www.declude.com/junkmail/support/ip4r.htm for a list R of all the known DNS-based spam tests. Except for the ones listed above, R they are all free. R -Scott R --- R [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] R --- R This E-mail came from the Declude.JunkMail mailing list. To R unsubscribe, just send an E-mail to [EMAIL PROTECTED], and R type unsubscribe Declude.JunkMail. You can E-mail R [EMAIL PROTECTED] for assistance. You can visit our web R site at http://www.declude.com . R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[5]: [Declude.JunkMail] BLARSBL:DBSL
Thanks, I will try these. Actually Scott has : #DSBLALLip4runconfirmed.dsbl.org* 4 0 Maybe this was the source of the pbm? That is correct. DSBL has 3 different databases: [1] DSBL, which lists open relays that were reported from trusted sources, [2] DSBLALL, which lists ANY server that relays mail to them (which can include providers with malicious users, such as Hotmail), and [3] DSBLMULTI, which lists multi-hop relays that were reported from trusted sources. http://www.dsbl.org/usage.html has more details on the three tests. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: Re[5]: [Declude.JunkMail] BLARSBL:DBSL
Use DSBALL at your own risk since entries are in fact unconfirmed and can come from any source. The other two lists only accept entries from trusted sources. Bill -Original Message- From: Roger Heath [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 13, 2002 10:02 AM To: Bill Landry Subject: Re[5]: [Declude.JunkMail] BLARSBL:DBSL Reply to: Bill Landry Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 11:18:07 AM Thanks, I will try these. Actually Scott has : #DSBLALLip4runconfirmed.dsbl.org* 4 0 Maybe this was the source of the pbm? -- Roger Heath - Copy of Original Message(s): - B I'm not sure if you mean BLARSBL or DSBL, but I have been using both, and B DSBL-MULTI as well, for several months without issue. In fact, they have B worked quite well for me, so I've given each of them a weight of 6, with my B hold weight being 10. B BLARSBL ip4rblock.blars.org * 6 0 B DSBLip4rlist.dsbl.org * 6 0 B DSBL-MULTI ip4rmultihop.dsbl.org * 6 B 0 B Bill B -Original Message- B From: Roger Heath [mailto:[EMAIL PROTECTED]] B Sent: Thursday, June 13, 2002 9:03 AM B To: R. Scott Perry B Subject: Re[3]: [Declude.JunkMail] BLARSBL:DBSL B Reply to: R. Scott Perry B Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 10:18:20 AM B Thanks. I had to drop this almost as soon as I started it. It B seemed to work but then I began getting almost all mail trapped B with a weight 10 appearing from nowhere. Even the tests list did B not list a weight 10 rule violation. I commented out the DBSL and B now am back to normal. B -- B Roger Heath B - Copy of Original Message(s): - No, but I will try it. It seems to be working good. Scott had this under subscription based services in his sample global file, so I was a bit confused. R FYI, that section is for services that require a subscription *or* are B not R commonly used. The only ones that require a subscription are the MAPS R tests (RBL, RSS, DUL) and the SNIFFER and POSTFIXGATE tests. Are there others? Does any one here have a complete list of the free ones available? R You can go to http://www.declude.com/junkmail/support/ip4r.htm for a list R of all the known DNS-based spam tests. Except for the ones listed above, R they are all free. R -Scott R --- R [This E-mail was scanned for viruses by Declude Virus B (http://www.declude.com)] R --- R This E-mail came from the Declude.JunkMail mailing list. To R unsubscribe, just send an E-mail to [EMAIL PROTECTED], and R type unsubscribe Declude.JunkMail. You can E-mail R [EMAIL PROTECTED] for assistance. You can visit our web R site at http://www.declude.com . R -- R ActivatorMail(tm) ver.061102 Scanned for all viruses by R www.activatormail.com intelligent anti-virus anti-spam service B -- B ActivatorMail(tm) ver.061102 Scanned for all viruses by B www.activatormail.com intelligent anti-virus anti-spam service B --- B [This E-mail was scanned for viruses by Declude Virus B (http://www.declude.com)] B --- B This E-mail came from the Declude.JunkMail mailing list. To B unsubscribe, just send an E-mail to [EMAIL PROTECTED], and B type unsubscribe Declude.JunkMail. You can E-mail B [EMAIL PROTECTED] for assistance. You can visit our web B site at http://www.declude.com . B --- B [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] B --- B [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] B --- B This E-mail came from the Declude.JunkMail mailing list. To B unsubscribe, just send an E-mail to [EMAIL PROTECTED], and B type unsubscribe Declude.JunkMail. You can E-mail B [EMAIL PROTECTED] for assistance. You can visit our web B site at http://www.declude.com . B -- B ActivatorMail(tm) ver.061102 Scanned for all viruses by B www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.061102 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] BLARSBL:DBSL
Use DSBALL at your own risk since entries are in fact unconfirmed and can come from any source. Just to clarify that: Unconfirmed means that it hasn't been proven that the entries are open relays. However, any IP listed in DSBLALL either comes from an open relay, or the person who submitted the address has access to send mail through the server. So it includes 3 main categories of mailservers: [1] Open relays, [2] Mail servers with malicious users (IE ISPs with users who don't like them), and [3] Mail servers with clueless admins that end up submitting their own site. So although the entries are unconfirmed, you can't add a closed mailserver without access to it. FWIW, DSBLALL has 46,692 entries, DSBL has 35,040 entries, and the multihop version has 5,219 entries. So it looks as though the DSBL test (which I believe is a subset of the DSBLALL test) probably ends up getting all the entries from DSBLALL that can be confirmed, making DSBLALL useful only for unusual situations. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
