Re: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread Darrell \([EMAIL PROTECTED])
Goes to prove spammers are still trying the lowest priority MX record to 
get
around spam filters.

That is very true.  I think the mindset is that folks don't have access to 
features like IPBYPASS and trust mail coming from their backup mail server 
by default.

Darrell

invURIBL - Intelligent URI filtering plug-in for Declude, mxGuard, and ORF. 
Stop spam at the source the spamvertised domain.  More effective than 
traditional RBL's.  Try it today - http://www.invariantsystems.com




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread Nick Hayer

Hi John,

John T (Lists) wrote:

I have 3 gateway servers running IIS with ORF. These are my MX records for
all my domains.

ORF has identified and blocked 71% of incoming email on my primary gateway.
ORF has identified and blocked 81% of incoming email on my secondary
gateway.
I see the secondaries get more traffic as well - although I am not sure 
its deliberate or its the zombies do not know better -
[Regretfully I have abandoned ORF for the Alligate gateway. I am in the 
high nineties  96%+ with Brian's product...]


-Nick


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread Jay Sudowski - Handy Networks LLC
Ditto!  95%+ with Alligate.

-Jay

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Friday, December 15, 2006 9:42 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Interesting ORF stats


Hi John,

John T (Lists) wrote:
 I have 3 gateway servers running IIS with ORF. These are my MX records
for
 all my domains.

 ORF has identified and blocked 71% of incoming email on my primary
gateway.
 ORF has identified and blocked 81% of incoming email on my secondary
 gateway.
I see the secondaries get more traffic as well - although I am not sure 
its deliberate or its the zombies do not know better -
[Regretfully I have abandoned ORF for the Alligate gateway. I am in the 
high nineties  96%+ with Brian's product...]

-Nick


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread John T \(Lists\)
Now, to be fair, I am only using ORF for very simple blocking and I am only
using the following list of tests, so comparing my ORF stats with Alligate
is not appropriate:

Malformed HELO
HELO matches recipient domain
Valid REVDNS
Sender blacklist, either domain or email address
Attachment blocking policy
Valid recipient
F-Prot scanning 

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay
 Sudowski - Handy Networks LLC
 Sent: Friday, December 15, 2006 9:48 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Interesting ORF stats
 
 Ditto!  95%+ with Alligate.
 
 -Jay
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
 Hayer
 Sent: Friday, December 15, 2006 9:42 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Interesting ORF stats
 
 
 Hi John,
 
 John T (Lists) wrote:
  I have 3 gateway servers running IIS with ORF. These are my MX records
 for
  all my domains.
 
  ORF has identified and blocked 71% of incoming email on my primary
 gateway.
  ORF has identified and blocked 81% of incoming email on my secondary
  gateway.
 I see the secondaries get more traffic as well - although I am not sure
 its deliberate or its the zombies do not know better -
 [Regretfully I have abandoned ORF for the Alligate gateway. I am in the
 high nineties  96%+ with Brian's product...]
 
 -Nick
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Interesting ORF stats

2006-12-14 Thread John T \(Lists\)
I have 3 gateway servers running IIS with ORF. These are my MX records for
all my domains.

ORF has identified and blocked 71% of incoming email on my primary gateway.
ORF has identified and blocked 81% of incoming email on my secondary
gateway. (Interesting in that my primary and secondary carry the same value
in their MX records although my primary handles all outgoing as well.)
ORF has identified and blocked 94% of incoming email to my third gateway,
which has a lower value and is on a slow IDSL line.

Goes to prove spammers are still trying the lowest priority MX record to get
around spam filters.

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.