[Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Scott Fisher
FYI: It looks like around Janurary 26th the pub.mxrate.com IP4R DNSservices were made private. Since then I've had no response from the DNS lists. They have discontinued the public service and made a private service available. If you are interested the URL is here:

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread John Carter
I think mine are the Declude defaults, but I have not adjusted the overall scoring like some have. (tag at 10, delete at 20) MXRATE-BLOCK 127.0.0.2 for 7 on failure MXRATE-SUSPICIOUS 127.0.0.4 for 2 on failure John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread george kulman
Scott, Thanks very much for the info. George -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, March 01, 2006 12:14 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] MXRATE FYI FYI:

[Declude.JunkMail] SBC contact phone number

2006-03-01 Thread declude
Does anyone have a contact phone number for the abuse department at SBCGlobal.Net? We got on their blacklist somehow and having been trying to get off. The log entry says to email [EMAIL PROTECTED] I emailed that address with the pertinent IP info but don't get a response back. Any help

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Goran Jovanovic
Thanks Scott. Subscribed and got my new address and done. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, March 01, 2006 12:14 PM To: Declude.JunkMail@declude.com Subject:

RE: [Declude.JunkMail] ?? Start of phish/virus campaign ??

2006-03-01 Thread Colbeck, Andrew
Thanks, John. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FB AGLE%2EDFVSect=T I didn't see any on my server, but I did find the Trend Micro listing this morning. Generating anger or affront in the viewer seems to be the new infection meme; I just read a blog that

Re: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Scott Fisher
MXRATE-BLACK-LAST dnsbl%IP4R%.sub.mxrate.net127.0.0.2300MXRATE-SUSPICIOUS-LASTdnsbl%IP4R%.sub.mxrate.net127.0.0.4100MXRATE-WHITE-LASTdnsbl%IP4R%.sub.mxrate.net127.0.0.3-250 On a subject tag @ 100, hold @ 200, delete @ 300 scale. I was hoping to revisit the weights, when I noticed there were

Re: [Declude.JunkMail] SBC contact phone number

2006-03-01 Thread Dave Doherty
Hi Don- Very strange... I couldn't find any abuse contacts in the WHOIS system. The data for the IP of their inbound mail gateway (only one!) shows an old Prodigy address in Westchester, NY. If you access http://www.sbcglobal.com you get a warning that you may have been the victim of

RE: [Declude.JunkMail] SmarterMail 3.0 and Declude

2006-03-01 Thread Rick Baranowski
Are trying to do mailbox based off of weight? If so you can set this function up with in SM3 and let the user and or domain admin decide if they want to do this. I am still testing but seems to work ok for me. Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Kevin Bilbee
Scott, I thought MXRate asked the new domain not be posted publicly?? Kevin Bilbee -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Scott FisherSent: Wednesday, March 01, 2006 11:56 AMTo: Declude.JunkMail@declude.comSubject: Re:

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread John Carter
Hmmm, interesting. I've gotten over 3200 hits in 2 1/2 hours with ip4r ***.mxrate.net. I'll test these with a zero score and WARN to see if there is a difference. John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, March 01, 2006 1:56 PMTo:

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Colbeck, Andrew
John, I'm doing the same thing for a day. I don't have any information to support mycaution, but if I had changed my list the way that Solid Oak has done, I might also take the opportunity to re-jig the content. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

[Declude.JunkMail] Version 4

2006-03-01 Thread John Doyle
Good afternoon. I just resolved an issue with the upgrade from V3 to V4, and thought I'd pass it along. Our mail server is behind a pretty locked down firewall. When upgrading from V2 to V3 we had an issue with the new version firing up and then stopping. It was resolved when we allowed access

Re: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Dave Doherty
I'm running MXRATE at zero weight for testing also. So far today, MXRATE hasn't picked up anything that I'm notalready holding or deletingwith the other tests... It hit on about 2500 messages so far, but they all wound up with scores over 25 anyway. (I hold on 10, delete on 20). The ones I

RE: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Colbeck, Andrew
Wow, Dave. Talk about "your mileage may vary"... Mytraffic has a huge overlap between MXRate-BL and what Message Sniffer hits. Total hits for Message Sniffer: 26,504 Total hits for MXRate-BL: 5,746 Total hits for MXRateBL which also hit Sniffer: 5,697 We also had 21 hits on MXRate-BL for

Re: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread Dave Doherty
Hi Andrew- I did not look at the correlation between MXRATE and SNIFFER, only to see whether adding MXRATE would make a big difference overall. From a quick scan, it looks like all or most of the messages that hit MXRATE also hit SNIFFER, which supports your observation. I run SNIFFER

Re: [Declude.JunkMail] MXRATE FYI

2006-03-01 Thread John Carter
More your mileage with vary. I was also curious about the difference of running as ip4r or dnsbl. Y'all may know the issue, but I don't. I honestly thought one would work and other wouldn't. The results is it doesn't seem to matter which way you run it. Also in my case, there is