RE: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Andy Schmidt
Here two big international ones:

t-online.de t-online.com
wanadoo.fr


Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Friday, May 30, 2003 01:16 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] spamdomains list


Here is my list thus far:

amazon.com
aol.com
apple.com
att.
attbi.com
bellsouth.net
charter.net
comcast.
compuserve.com
cox.
earthlink.
excite.com
gte.
hotmail.com
juno.com  .untd.com
lycos.com
microsoft.com
mindspring.
msn.com   .hotmail.com
netscape.
psi.
qwest.
.rr.com
verio.
verizon.  .bellatlantic.
yahoo.com

Bill
- Original Message - 
From: Scott MacLean [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 9:49 AM
Subject: Re: [Declude.JunkMail] spamdomains list


 If someone has a comprehensive spamdomains listing they are happy 
 with,could they post it for others to analyze/use?

 At 10:36 AM 5/30/2003, Bill Landry wrote:

 One comment.  Instead of having:
 
 yahoo.com
 yahoo.ca yahoo.com
 yahoo.de yahoo.com
 yahoo.dk yahoo.com
 yahoo.es yahoo.com
 yahoo.fr yahoo.com
 yahoo.it yahoo.com
 yahoo.no yahoo.com
 yahoo.se yahoo.com
 yahoo.co.jp yahoo.com
 yahoo.co.uk yahoo.com
 yahoo.com.ar yahoo.com
 yahoo.com.au yahoo.com
 yahoo.com.br yahoo.com
 yahoo.com.cn yahoo.com
 yahoo.com.hk yahoo.com
 yahoo.co.kr yahoo.com
 yahoo.com.mx yahoo.com
 yahoo.com.tw yahoo.com
 
 Why not just consolidate this down to:
 
 yahoo.yahoo.com
 
 Bill
 - Original Message -
 From: Bill B. [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, May 30, 2003 7:20 AM
 Subject: [Declude.JunkMail] spamdomains list
 
 
   Attached is a list of spamdomains and their coresponding aliases 
   that
I've
 compiled thus far.  Anybody want to comment or expand upon this?
  
   Bill
  
  
  
  
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.

 ___
 Scott MacLean
 [EMAIL PROTECTED]
 ICQ: 9184011
 http://www.nerosoft.com

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Markus Gufler
Thanks Andy.

Here I've some spamdomains for those who has italian domains on the
server:

tiscali.it  tiscalinet.it
tiscalinet.it   tiscali.it
tin.it  fep0
libero.it   tin.it
virgilio.it tin.it
iol.it  libero.it
supereva.it
freemail.it supereva.it
cicciociccio.it supereva.it
mybox.itsupereva.it
email.itwebmessenger.it


Here I've also a question:

It seems that legit mails with senderadresses containing @tin.it can be
delivered from smtp-servers with the following revdns records:

Tin.it
Tuttopmi.it
Flexmail.it

Because both tuttopmi.it and flexmail.it has hostnames beginning with
fep0x. I've added this as valid alias for tin.it

Will this work?

Markus





 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
 Sent: Thursday, June 05, 2003 6:25 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] spamdomains list
 
 
 Here two big international ones:
 
 t-online.de   t-online.com
 wanadoo.fr
 
 
 Best Regards
 Andy Schmidt
 
 HM Systems Software, Inc.
 600 East Crescent Avenue, Suite 203
 Upper Saddle River, NJ 07458-1846
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206
 
 http://www.HM-Software.com/
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Friday, May 30, 2003 01:16 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] spamdomains list
 
 
 Here is my list thus far:
 
 amazon.com
 aol.com
 apple.com
 att.
 attbi.com
 bellsouth.net
 charter.net
 comcast.
 compuserve.com
 cox.
 earthlink.
 excite.com
 gte.
 hotmail.com
 juno.com  .untd.com
 lycos.com
 microsoft.com
 mindspring.
 msn.com   .hotmail.com
 netscape.
 psi.
 qwest.
 .rr.com
 verio.
 verizon.  .bellatlantic.
 yahoo.com
 
 Bill
 - Original Message - 
 From: Scott MacLean [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, May 30, 2003 9:49 AM
 Subject: Re: [Declude.JunkMail] spamdomains list
 
 
  If someone has a comprehensive spamdomains listing they are happy
  with,could they post it for others to analyze/use?
 
  At 10:36 AM 5/30/2003, Bill Landry wrote:
 
  One comment.  Instead of having:
  
  yahoo.com
  yahoo.ca yahoo.com
  yahoo.de yahoo.com
  yahoo.dk yahoo.com
  yahoo.es yahoo.com
  yahoo.fr yahoo.com
  yahoo.it yahoo.com
  yahoo.no yahoo.com
  yahoo.se yahoo.com
  yahoo.co.jp yahoo.com
  yahoo.co.uk yahoo.com
  yahoo.com.ar yahoo.com
  yahoo.com.au yahoo.com
  yahoo.com.br yahoo.com
  yahoo.com.cn yahoo.com
  yahoo.com.hk yahoo.com
  yahoo.co.kr yahoo.com
  yahoo.com.mx yahoo.com
  yahoo.com.tw yahoo.com
  
  Why not just consolidate this down to:
  
  yahoo.yahoo.com
  
  Bill
  - Original Message -
  From: Bill B. [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, May 30, 2003 7:20 AM
  Subject: [Declude.JunkMail] spamdomains list
  
  
Attached is a list of spamdomains and their coresponding aliases
that
 I've
  compiled thus far.  Anybody want to comment or expand upon this?
   
Bill
   
   
   
   
  
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
  ___
  Scott MacLean
  [EMAIL PROTECTED]
  ICQ: 9184011
  http://www.nerosoft.com
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Dan Patnode
Markus,

I've been giving the subject of @'s in spamdomain tests some thought.  With the 
original one column test, there was no way an @ was going to be in the RDNS so using 
it meant automatic failure.  With the new two column format, this should now work:


@tin.itTin.it
@tin.itTuttopmi.it
@tin.itFlexmail.it


The only drawback is that this is not as flexible (forgiving) as say

Tin.it   Tuttopmi.it


Scott, would you confirm?

Dan



On Thursday, June 5, 2003 9:41, Markus Gufler [EMAIL PROTECTED] wrote:
Thanks Andy.

Here I've some spamdomains for those who has italian domains on the
server:

tiscali.it tiscalinet.it
tiscalinet.it  tiscali.it
tin.it fep0
libero.it  tin.it
virgilio.ittin.it
iol.it libero.it
supereva.it
freemail.itsupereva.it
cicciociccio.itsupereva.it
mybox.it   supereva.it
email.it   webmessenger.it


Here I've also a question:

It seems that legit mails with senderadresses containing @tin.it can be
delivered from smtp-servers with the following revdns records:

Tin.it
Tuttopmi.it
Flexmail.it

Because both tuttopmi.it and flexmail.it has hostnames beginning with
fep0x. I've added this as valid alias for tin.it

Will this work?

Markus





 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
 Sent: Thursday, June 05, 2003 6:25 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] spamdomains list
 
 
 Here two big international ones:
 
 t-online.de  t-online.com
 wanadoo.fr
 
 
 Best Regards
 Andy Schmidt
 
 HM Systems Software, Inc.
 600 East Crescent Avenue, Suite 203
 Upper Saddle River, NJ 07458-1846
 
 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206
 
 http://www.HM-Software.com/
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Friday, May 30, 2003 01:16 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] spamdomains list
 
 
 Here is my list thus far:
 
 amazon.com
 aol.com
 apple.com
 att.
 attbi.com
 bellsouth.net
 charter.net
 comcast.
 compuserve.com
 cox.
 earthlink.
 excite.com
 gte.
 hotmail.com
 juno.com  .untd.com
 lycos.com
 microsoft.com
 mindspring.
 msn.com   .hotmail.com
 netscape.
 psi.
 qwest.
 .rr.com
 verio.
 verizon.  .bellatlantic.
 yahoo.com
 
 Bill
 - Original Message - 
 From: Scott MacLean [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, May 30, 2003 9:49 AM
 Subject: Re: [Declude.JunkMail] spamdomains list
 
 
  If someone has a comprehensive spamdomains listing they are happy
  with,could they post it for others to analyze/use?
 
  At 10:36 AM 5/30/2003, Bill Landry wrote:
 
  One comment.  Instead of having:
  
  yahoo.com
  yahoo.ca yahoo.com
  yahoo.de yahoo.com
  yahoo.dk yahoo.com
  yahoo.es yahoo.com
  yahoo.fr yahoo.com
  yahoo.it yahoo.com
  yahoo.no yahoo.com
  yahoo.se yahoo.com
  yahoo.co.jp yahoo.com
  yahoo.co.uk yahoo.com
  yahoo.com.ar yahoo.com
  yahoo.com.au yahoo.com
  yahoo.com.br yahoo.com
  yahoo.com.cn yahoo.com
  yahoo.com.hk yahoo.com
  yahoo.co.kr yahoo.com
  yahoo.com.mx yahoo.com
  yahoo.com.tw yahoo.com
  
  Why not just consolidate this down to:
  
  yahoo.yahoo.com
  
  Bill
  - Original Message -
  From: Bill B. [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, May 30, 2003 7:20 AM
  Subject: [Declude.JunkMail] spamdomains list
  
  
Attached is a list of spamdomains and their coresponding aliases
that
 I've
  compiled thus far.  Anybody want to comment or expand upon this?
   
Bill
   
   
   
   
  
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
  ___
  Scott MacLean
  [EMAIL PROTECTED]
  ICQ: 9184011
  http://www.nerosoft.com
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E

Re: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Bill B.
Dan,

Those will work, but only because the revdns for legit email from those domains will 
always match outblaze.com and will never match accountant.com and the others.

I'd leave those @ symbols if I were you, because these outblaze domains use generic 
dictionary words.  So without the @ you will run the risk of matching unintended 
domains such as myaccountant.com, business-in-asia.com

Bill


-Original Message-
From: Dan Patnode
Sent: 06 Jun 2003 15:33:26 -0700
Subject: Re: [Declude.JunkMail] spamdomains list


So then these also won't work:

@2die4.com  outblaze.com
@accountant.com outblaze.com
@adexec.com outblaze.com
@africamail.com outblaze.com
@allergist.com  outblaze.com
@alumnidirector.com outblaze.com
@archaeologist.com  outblaze.com
@arcticmail.com outblaze.com
@artlover.com   outblaze.com
@asia.com   outblaze.com

I'll take the @'s out

Dan



On Thursday, June 5, 2003 13:33, R. Scott Perry [EMAIL PROTECTED] wrote:

@tin.itTin.it
@tin.itTuttopmi.it
@tin.itFlexmail.it

Scott, would you confirm?

I'm not sure this will work.

The problem is that when Declude JunkMail sees the line @tin.it  Tin.it, 
if the reverse DNS is mail.Tuttopmi.it, Declude JunkMail will fail the 
test (even though it matches the next line, Declude JunkMail won't know 
that that should cancel out a previous line that failed).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day
evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Bill Landry
Those should work fine.  What will not work is when the left part is listed
more than once with different right parts, the first match win and the
others will never be checked.  For example, abc.com will always only match
the first line item here:

@abc.comxyz.com   ---(Match and looks no further down the list)
@abc.comxyz.net
@abc.comxyz.org

Your list below should work just fine.

Bill
- Original Message - 
From: Dan Patnode [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 06, 2003 3:33 PM
Subject: Re: [Declude.JunkMail] spamdomains list


So then these also won't work:

@2die4.com outblaze.com
@accountant.com outblaze.com
@adexec.com outblaze.com
@africamail.com outblaze.com
@allergist.com outblaze.com
@alumnidirector.com outblaze.com
@archaeologist.com outblaze.com
@arcticmail.com outblaze.com
@artlover.com outblaze.com
@asia.com outblaze.com

I'll take the @'s out

Dan



On Thursday, June 5, 2003 13:33, R. Scott Perry [EMAIL PROTECTED]
wrote:

@tin.itTin.it
@tin.itTuttopmi.it
@tin.itFlexmail.it

Scott, would you confirm?

I'm not sure this will work.

The problem is that when Declude JunkMail sees the line @tin.it  Tin.it,
if the reverse DNS is mail.Tuttopmi.it, Declude JunkMail will fail the
test (even though it matches the next line, Declude JunkMail won't know
that that should cancel out a previous line that failed).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day
evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Dan Patnode
Thanks for the clarification.  In that example then, the way to go is:

@abc.comxyz.


:)



On Friday, June 6, 2003 16:12, Bill Landry [EMAIL PROTECTED] wrote:
Those should work fine.  What will not work is when the left part is listed
more than once with different right parts, the first match win and the
others will never be checked.  For example, abc.com will always only match
the first line item here:

@abc.comxyz.com   ---(Match and looks no further down the list)
@abc.comxyz.net
@abc.comxyz.org

Your list below should work just fine.

Bill
- Original Message - 
From: Dan Patnode [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 06, 2003 3:33 PM
Subject: Re: [Declude.JunkMail] spamdomains list


So then these also won't work:

@2die4.com outblaze.com
@accountant.com outblaze.com
@adexec.com outblaze.com
@africamail.com outblaze.com
@allergist.com outblaze.com
@alumnidirector.com outblaze.com
@archaeologist.com outblaze.com
@arcticmail.com outblaze.com
@artlover.com outblaze.com
@asia.com outblaze.com

I'll take the @'s out

Dan



On Thursday, June 5, 2003 13:33, R. Scott Perry [EMAIL PROTECTED]
wrote:

@tin.itTin.it
@tin.itTuttopmi.it
@tin.itFlexmail.it

Scott, would you confirm?

I'm not sure this will work.

The problem is that when Declude JunkMail sees the line @tin.it  Tin.it,
if the reverse DNS is mail.Tuttopmi.it, Declude JunkMail will fail the
test (even though it matches the next line, Declude JunkMail won't know
that that should cancel out a previous line that failed).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day
evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-06-06 Thread Bill Landry
yep, that would work.  However, I would probably do:

@abc.com.xyz.

with the leading dot, as well.  That way it would not also match wxyz..

Bill

- Original Message - 
From: Dan Patnode [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 06, 2003 5:36 PM
Subject: Re: [Declude.JunkMail] spamdomains list


Thanks for the clarification.  In that example then, the way to go is:

@abc.comxyz.


:)



On Friday, June 6, 2003 16:12, Bill Landry [EMAIL PROTECTED] wrote:
Those should work fine.  What will not work is when the left part is listed
more than once with different right parts, the first match win and the
others will never be checked.  For example, abc.com will always only match
the first line item here:

@abc.comxyz.com   ---(Match and looks no further down the list)
@abc.comxyz.net
@abc.comxyz.org

Your list below should work just fine.

Bill
- Original Message - 
From: Dan Patnode [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 06, 2003 3:33 PM
Subject: Re: [Declude.JunkMail] spamdomains list


So then these also won't work:

@2die4.com outblaze.com
@accountant.com outblaze.com
@adexec.com outblaze.com
@africamail.com outblaze.com
@allergist.com outblaze.com
@alumnidirector.com outblaze.com
@archaeologist.com outblaze.com
@arcticmail.com outblaze.com
@artlover.com outblaze.com
@asia.com outblaze.com

I'll take the @'s out

Dan



On Thursday, June 5, 2003 13:33, R. Scott Perry [EMAIL PROTECTED]
wrote:

@tin.itTin.it
@tin.itTuttopmi.it
@tin.itFlexmail.it

Scott, would you confirm?

I'm not sure this will work.

The problem is that when Declude JunkMail sees the line @tin.it  Tin.it,
if the reverse DNS is mail.Tuttopmi.it, Declude JunkMail will fail the
test (even though it matches the next line, Declude JunkMail won't know
that that should cancel out a previous line that failed).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day
evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Roger Heath
Reply to: Bill B.
  Re: [Declude.JunkMail] spamdomains list on Friday 9:20:04 AM

Wait a second? When I requested this, was this format put in Declude?

earthlink.com   earthlink.net
earthlink.net   earthlink.com
email.itwebmessenger.it
excite.com  excitenetwork.com

If so, I did not see this indicated in any messages I have read.

--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com


- Copy of Original Message(s): -

B Attached is a list of spamdomains and their coresponding aliases that I've compiled 
thus far.  Anybody want to comment or expand upon this?

B Bill

--
ActivatorMail(tm) ver.0518031 Scanned for all viruses by 
www.activatormail.com intelligent anti-virus anti-spam service

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Joseph Acac
email provided by netscape.net is at least partly based from AOL instant 
messenger accounts, which partly correspond to some peoples' real aol.com 
email addresses.  when you do a full install of Netscape 6 and above, it 
links w/ your AIM account for messaging, and provides you a *free*, 
spammed, email account in the netscape.net domain, under your username as 
defined in AIM.  That may be the connection.

At 08:02 05.30.2003, you wrote:
 Attached is a list of spamdomains and their coresponding aliases that I've
compiled thus far.  Anybody want to comment or expand upon this?
Please forgive my ignorance here, I have nearly every message from this list
for the past 6 months on my machine, so I have looked, but missed it I
guess. Anyway, what's the deal with this in the spamdomains list??
earthlink.com earthlink.net
earthlink.net earthlink.com
Does this mean if the address comes in as [EMAIL PROTECTED] - it's rev DNS
can be either earthlink.net or earthlink.com ??? and the other way around if
it's [EMAIL PROTECTED] - ?
What confuses me are these:

aol.com  netscape.net
netscape.net aol.com
My feeling here is why would a netscape user be sending with an AOL address
and vice-versa. So am I off here?
Thanks for any help

Paul

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
Joseph C. Acac
CNPRC
University of California at Davis
[EMAIL PROTECTED] 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread R. Scott Perry

Wait a second? When I requested this, was this format put in Declude?

earthlink.com   earthlink.net
earthlink.net   earthlink.com
email.itwebmessenger.it
excite.com  excitenetwork.com
If so, I did not see this indicated in any messages I have read.
This was added to v1.70 -- you can either have one entry on a line (where 
the reverse DNS must contain that entry, if the return address contains 
it), or you can have two (in which case the reverse DNS entry must contain 
*either* of the two entries, if the *first* entry appears in the return 
address).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Bill Landry
One comment.  Instead of having:

yahoo.com
yahoo.ca yahoo.com
yahoo.de yahoo.com
yahoo.dk yahoo.com
yahoo.es yahoo.com
yahoo.fr yahoo.com
yahoo.it yahoo.com
yahoo.no yahoo.com
yahoo.se yahoo.com
yahoo.co.jp yahoo.com
yahoo.co.uk yahoo.com
yahoo.com.ar yahoo.com
yahoo.com.au yahoo.com
yahoo.com.br yahoo.com
yahoo.com.cn yahoo.com
yahoo.com.hk yahoo.com
yahoo.co.kr yahoo.com
yahoo.com.mx yahoo.com
yahoo.com.tw yahoo.com

Why not just consolidate this down to:

yahoo.yahoo.com

Bill
- Original Message - 
From: Bill B. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 7:20 AM
Subject: [Declude.JunkMail] spamdomains list


 Attached is a list of spamdomains and their coresponding aliases that I've
compiled thus far.  Anybody want to comment or expand upon this?

 Bill





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Kevin Bilbee
OK I am having trouble with the spam domains test. I just can not get my
brain to wrap it. Could someone try to give a concise detailed
explanation???

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Bill B.
 Sent: Friday, May 30, 2003 7:20 AM
 To: [EMAIL PROTECTED]
 Subject: [Declude.JunkMail] spamdomains list


 Attached is a list of spamdomains and their coresponding aliases
 that I've compiled thus far.  Anybody want to comment or expand upon this?

 Bill




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Scott MacLean
At 01:36 PM 5/30/2003, John Tolmachoff \(Lists\) wrote:

 If someone has a comprehensive spamdomains listing they are happy
 with,could they post it for others to analyze/use?
Uh, see the orginal post that started this thread.
I would, except the list archives are still down.

___
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spamdomains list

2003-05-31 Thread John Tolmachoff \(Lists\)
 John,
 
 In your list you your have: microsoft.com msn.com

Urgh, I can't win. It is not my list. Please people, read the entire post.
(Yes, I myself am guilty at times, so first admonishment is to me.)

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Frederick Samarelli
Sorry John.

I am questioning the validity of the test more then I am questioning you.

Fred
- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 4:16 PM
Subject: RE: [Declude.JunkMail] spamdomains list


  John,
 
  In your list you your have: microsoft.com msn.com

 Urgh, I can't win. It is not my list. Please people, read the entire post.
 (Yes, I myself am guilty at times, so first admonishment is to me.)

 John Tolmachoff MCSE CSSA
 Engineer/Consultant
 eServices For You
 www.eservicesforyou.com


 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spamdomains list

2003-05-31 Thread Andy Schmidt
Bill,

MX records only tell you where email is SENT to.  It doesn't tell you
anything about OUTBOUND mail.

I have in fact received emails where signed @excite.com but where sent
through the excitenetwork's server.

The only way how you can determine, which other RDNS are used, is by
checking your Declude log files, use FILESTR to find the SPAMDOMAINS
failures and then filter for excite...

Best Regards
Andy 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Friday, May 30, 2003 03:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] spamdomains list


From what I see, they look to be mutually exclusive:
==
dig mx excite.com

;  DiG 9.2.1  mx excite.com
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 15919
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;excite.com.IN  MX

;; ANSWER SECTION:
excite.com. 900 IN  MX  10 xmxpita.excite.com.

;; AUTHORITY SECTION:
excite.com. 900 IN  NS  dns5.imgfarm.com.
excite.com. 900 IN  NS  dns4.imgfarm.com.

;; ADDITIONAL SECTION:
xmxpita.excite.com. 900 IN  A   208.45.133.107

;; Query time: 81 msec
;; SERVER: 204.189.38.2#53(204.189.38.2)
;; WHEN: Fri May 30 11:50:28 2003
;; MSG SIZE  rcvd: 114
==
dig mx excitenetwork.com

;  DiG 9.2.1  mx excitenetwork.com
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 2577
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;excitenetwork.com. IN  MX

;; ANSWER SECTION:
excitenetwork.com.  300 IN  MX  25 mx.excitenetwork.com.

;; AUTHORITY SECTION:
excitenetwork.com.  300 IN  NS  dns5.imgfarm.com.
excitenetwork.com.  300 IN  NS  dns4.imgfarm.com.

;; ADDITIONAL SECTION:
mx.excitenetwork.com.   300 IN  A   63.108.110.20

;; Query time: 121 msec
;; SERVER: 204.189.38.2#53(204.189.38.2)
;; WHEN: Fri May 30 11:51:56 2003
;; MSG SIZE  rcvd: 116
==

Bill

- Original Message - 
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 11:45 AM
Subject: RE: [Declude.JunkMail] spamdomains list


 Bill,

 You need to update:

 excite.com excitenetwork.com

 Best Regards
 Andy Schmidt

 HM Systems Software, Inc.
 600 East Crescent Avenue, Suite 203
 Upper Saddle River, NJ 07458-1846

 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206

 http://www.HM-Software.com/


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Friday, May 30, 2003 01:16 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] spamdomains list


 Here is my list thus far:

 amazon.com
 aol.com
 apple.com
 att.
 attbi.com
 bellsouth.net
 charter.net
 comcast.
 compuserve.com
 cox.
 earthlink.
 excite.com
 gte.
 hotmail.com
 juno.com  .untd.com
 lycos.com
 microsoft.com
 mindspring.
 msn.com   .hotmail.com
 netscape.
 psi.
 qwest.
 .rr.com
 verio.
 verizon.  .bellatlantic.
 yahoo.com

 Bill
 - Original Message -
 From: Scott MacLean [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, May 30, 2003 9:49 AM
 Subject: Re: [Declude.JunkMail] spamdomains list


  If someone has a comprehensive spamdomains listing they are happy 
  with,could they post it for others to analyze/use?
 
  At 10:36 AM 5/30/2003, Bill Landry wrote:
 
  One comment.  Instead of having:
  
  yahoo.com
  yahoo.ca yahoo.com
  yahoo.de yahoo.com
  yahoo.dk yahoo.com
  yahoo.es yahoo.com
  yahoo.fr yahoo.com
  yahoo.it yahoo.com
  yahoo.no yahoo.com
  yahoo.se yahoo.com
  yahoo.co.jp yahoo.com
  yahoo.co.uk yahoo.com
  yahoo.com.ar yahoo.com
  yahoo.com.au yahoo.com
  yahoo.com.br yahoo.com
  yahoo.com.cn yahoo.com
  yahoo.com.hk yahoo.com
  yahoo.co.kr yahoo.com
  yahoo.com.mx yahoo.com
  yahoo.com.tw yahoo.com
  
  Why not just consolidate this down to:
  
  yahoo.yahoo.com
  
  Bill
  - Original Message -
  From: Bill B. [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, May 30, 2003 7:20 AM
  Subject: [Declude.JunkMail] spamdomains list
  
  
Attached is a list of spamdomains and their coresponding aliases 
that
 I've
  compiled thus far.  Anybody want to comment or expand upon this?
   
Bill
   
   
   
   
  
  ---
  [This E-mail was scanned for viruses by Declude Virus 
  (http://www.declude.com)]
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
  ___
  Scott MacLean
  [EMAIL PROTECTED]
  ICQ: 9184011
  http://www.nerosoft.com
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http

Re: [Declude.JunkMail] spamdomains list

2003-05-31 Thread R. Scott Perry

What if you had two lines:

msn.com hotmail.com
msn.com microsoft.com
It would NOT fail if it reversed to either hotmail or ms, correct?
Actually, it would fail in this case, since each line is processed 
separately from the rest.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.