Re: [Declude.JunkMail] EASYNET tests going away December 1
Andy, You have all of these tests running? What's the impact on the server for all of these? What's your mail load? I just love having to replace all these tests every month or so, don't we all? LOL! But I want to lessen the impact on our server as much as possible. What of these tests do you recommend the most? Paul Hi, Yesterday's results of my EasyNet replacement candidates: TEST # FAILED Percentage AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) SORBS-DUL...2,664...35.58% SORBS-HTTP7379.84% (proxies) SORBS-MISC.801.07% (proxies) SORBS-SOCKS...873...11.66% (proxies) SORBS-SMTP..50.07% SORBS-ZOMBIE...300.40% A) Do NOT use SORBS-SPAM. As they point out on their web site, it has been infested with the mail servers of most major providers by the simple fact that virus-infected customer systems have been sending arbitrary emails, implicating the mail sever of the provider. I tested it for two days and kept lowering the weight until I realized that it was not at all helpful in trying to distinguish spam from legitimate mail. B) I have been holding and/or deleting ANYTHING proxy for many weeks now and so far never had any customer complaints about lost emails. Best Regards Andy Schmidt --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Paul What program do you use to get those statistics listed ?? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Monday, December 01, 2003 9:52 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1 Andy, You have all of these tests running? What's the impact on the server for all of these? What's your mail load? I just love having to replace all these tests every month or so, don't we all? LOL! But I want to lessen the impact on our server as much as possible. What of these tests do you recommend the most? Paul Hi, Yesterday's results of my EasyNet replacement candidates: TEST # FAILED Percentage AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) SORBS-DUL...2,664...35.58% SORBS-HTTP7379.84% (proxies) SORBS-MISC.801.07% (proxies) SORBS-SOCKS...873...11.66% (proxies) SORBS-SMTP..50.07% SORBS-ZOMBIE...300.40% A) Do NOT use SORBS-SPAM. As they point out on their web site, it has been infested with the mail servers of most major providers by the simple fact that virus-infected customer systems have been sending arbitrary emails, implicating the mail sever of the provider. I tested it for two days and kept lowering the weight until I realized that it was not at all helpful in trying to distinguish spam from legitimate mail. B) I have been holding and/or deleting ANYTHING proxy for many weeks now and so far never had any customer complaints about lost emails. Best Regards Andy Schmidt --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Hi Paul: It's hard to measure the actual impact, as this machine serves a few functions. However, my unscientific observation has been, that two other applications on that machine are gobbling up most of its CPU use. Declude's use is noticeable - but minor - and seems to be mostly for Declude Virus launching the virus scanner. Also, keep in mind that in later Declude versions Scott had optimized the DNS queries that are directed against the SAME dnsbl server. My logic is - if it helps holding or deleting 10 or more percent of messages then I would just have to provide whatever hardware resources are necessary to run the additional test to save money at every desktop. If you are trying to ecnomize I would drop AHBL and then NJABL and only keep SORBS. However, I found that the AHBLSOURCES and NJABLSOURCES are pretty reliable, so I give them a high weight - where the SORBS-SOURCES test was eliminated because it's mostly false positives. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Monday, December 01, 2003 11:52 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1 Andy, You have all of these tests running? What's the impact on the server for all of these? What's your mail load? I just love having to replace all these tests every month or so, don't we all? LOL! But I want to lessen the impact on our server as much as possible. What of these tests do you recommend the most? Paul Hi, Yesterday's results of my EasyNet replacement candidates: TEST # FAILED Percentage AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) SORBS-DUL...2,664...35.58% SORBS-HTTP7379.84% (proxies) SORBS-MISC.801.07% (proxies) SORBS-SOCKS...873...11.66% (proxies) SORBS-SMTP..50.07% SORBS-ZOMBIE...300.40% A) Do NOT use SORBS-SPAM. As they point out on their web site, it has been infested with the mail servers of most major providers by the simple fact that virus-infected customer systems have been sending arbitrary emails, implicating the mail sever of the provider. I tested it for two days and kept lowering the weight until I realized that it was not at all helpful in trying to distinguish spam from legitimate mail. B) I have been holding and/or deleting ANYTHING proxy for many weeks now and so far never had any customer complaints about lost emails. Best Regards Andy Schmidt --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
FWIW, I run many more tests than this -- about 30 total plus the internal Declude tests, External Sniffer, and Declude Virus. Message load is about 150,000 messages per day on a dual 2.8 Ghz. No performance hits noticed. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Monday, December 01, 2003 11:52 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1 Andy, You have all of these tests running? What's the impact on the server for all of these? What's your mail load? I just love having to replace all these tests every month or so, don't we all? LOL! But I want to lessen the impact on our server as much as possible. What of these tests do you recommend the most? Paul Hi, Yesterday's results of my EasyNet replacement candidates: TEST # FAILED Percentage AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) SORBS-DUL...2,664...35.58% SORBS-HTTP7379.84% (proxies) SORBS-MISC.801.07% (proxies) SORBS-SOCKS...873...11.66% (proxies) SORBS-SMTP..50.07% SORBS-ZOMBIE...300.40% A) Do NOT use SORBS-SPAM. As they point out on their web site, it has been infested with the mail servers of most major providers by the simple fact that virus-infected customer systems have been sending arbitrary emails, implicating the mail sever of the provider. I tested it for two days and kept lowering the weight until I realized that it was not at all helpful in trying to distinguish spam from legitimate mail. B) I have been holding and/or deleting ANYTHING proxy for many weeks now and so far never had any customer complaints about lost emails. Best Regards Andy Schmidt --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] EASYNET tests going away December 1
if we comment out a test in global.cfg and leave its action in default.junkmail will there be any problems ? errors, performance issues, ... No, there will be no problems in doing that, as far as Declude is concerned. However, it may cause confusion later, if you see the test listed and are wondering why no action is being taken. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Hi, Yesterday's results of my EasyNet replacement candidates: TEST # FAILED Percentage AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) SORBS-DUL...2,664...35.58% SORBS-HTTP7379.84% (proxies) SORBS-MISC.801.07% (proxies) SORBS-SOCKS...873...11.66% (proxies) SORBS-SMTP..50.07% SORBS-ZOMBIE...300.40% A) Do NOT use SORBS-SPAM. As they point out on their web site, it has been infested with the mail servers of most major providers by the simple fact that virus-infected customer systems have been sending arbitrary emails, implicating the mail sever of the provider. I tested it for two days and kept lowering the weight until I realized that it was not at all helpful in trying to distinguish spam from legitimate mail. B) I have been holding and/or deleting ANYTHING proxy for many weeks now and so far never had any customer complaints about lost emails. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) For clarification, can you please post what you exact configuration is for those, in other words what return codes? Example, what exactly is AHBLDOMAINS as there is no test in the sample Global.cfg file and on the AHBL site, there is no code name that. http://www.ahbl.org/responsecodes.php John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
NJABLRELAYS ip4rdnsbl.njabl.org 127.0.0.2 4 0 NJABLDULip4rdnsbl.njabl.org 127.0.0.3 4 0 NJABLSOURCES ip4r dnsbl.njabl.org 127.0.0.4 7 0 NJABLMULTI ip4rdnsbl.njabl.org 127.0.0.5 5 0 NJABLFORMMAIL ip4r dnsbl.njabl.org 127.0.0.8 8 0 NJABLPROXIES ip4r dnsbl.njabl.org 127.0.0.9 8 0 AHBLRELAYS ip4rdnsbl.ahbl.org 127.0.0.2 5 0 AHBLPROXIES ip4rdnsbl.ahbl.org 127.0.0.3 8 0 AHBLSOURCES ip4rdnsbl.ahbl.org 127.0.0.4 7 0 AHBLPSSLip4rdnsbl.ahbl.org 127.0.0.5 5 0 AHBLFORMMAIL ip4r dnsbl.ahbl.org 127.0.0.6 8 0 AHBLENDUSER ip4rdnsbl.ahbl.org 127.0.0.9 5 0 AHBLEXEMPT ip4rexemptions.ahbl.org * -8 0 SORBS-HTTP ip4rdnsbl.sorbs.net 127.0.0.2 8 0 SORBS-SOCKS ip4rdnsbl.sorbs.net 127.0.0.3 8 0 SORBS-MISC ip4rdnsbl.sorbs.net 127.0.0.4 8 0 SORBS-SMTP ip4rdnsbl.sorbs.net 127.0.0.5 5 0 #SORBS-SPAM ip4rdnsbl.sorbs.net 127.0.0.6 3 0 SORBS-WEB ip4rdnsbl.sorbs.net 127.0.0.7 8 0 SORBS-BLOCK ip4rdnsbl.sorbs.net 127.0.0.8 6 0 SORBS-ZOMBIE ip4r dnsbl.sorbs.net 127.0.0.9 6 0 SORBS-DUL ip4rdnsbl.sorbs.net 127.0.0.10 5 0 AHBLDOMAINS rhsbl rhsbl.ahbl.org * 5 0 SORBS-BADCONF rhsbl rhsbl.sorbs.net 127.0.0.11 5 0 SORBS-NOMAILrhsbl rhsbl.sorbs.net 127.0.0.12 7 0 Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, November 28, 2003 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] EASYNET tests going away December 1 AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) For clarification, can you please post what you exact configuration is for those, in other words what return codes? Example, what exactly is AHBLDOMAINS as there is no test in the sample Global.cfg file and on the AHBL site, there is no code name that. http://www.ahbl.org/responsecodes.php John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
I think this might be on http://www.ahbl.org/using.php in the rhsbl section. I have been trying AHBL-DOMAINSrhsbl rhsbl.ahbl.org * 5 0 for a couple of days, but I don't have any stats to share today. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, 28 November 2003 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] EASYNET tests going away December 1 AHBLDOMAINS710.95% AHBLPROXIES...7359.82% AHBLSOURCES...3514.69% (reliable, so far) NJABLDUL..2743.66% (many duplicates with SORBS-DUL) NJABLPROXIES1,085...14.49% NJABLRELAYS...1181.58% NJABLSOURCES..2653.54% (reliable, so far) For clarification, can you please post what you exact configuration is for those, in other words what return codes? Example, what exactly is AHBLDOMAINS as there is no test in the sample Global.cfg file and on the AHBL site, there is no code name that. http://www.ahbl.org/responsecodes.php John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] EASYNET tests going away December 1
Andy, What weight to you hold and delete on? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 28, 2003 8:43 AM Subject: RE: [Declude.JunkMail] EASYNET tests going away December 1 NJABLRELAYS ip4r dnsbl.njabl.org 127.0.0.2 4 0 NJABLDUL ip4r dnsbl.njabl.org 127.0.0.3 4 0 NJABLSOURCES ip4r dnsbl.njabl.org 127.0.0.4 7 0 NJABLMULTI ip4r dnsbl.njabl.org 127.0.0.5 5 0 NJABLFORMMAIL ip4r dnsbl.njabl.org 127.0.0.8 8 0 NJABLPROXIES ip4r dnsbl.njabl.org 127.0.0.9 8 0 AHBLRELAYS ip4r dnsbl.ahbl.org 127.0.0.2 5 0 AHBLPROXIES ip4r dnsbl.ahbl.org 127.0.0.3 8 0 AHBLSOURCES ip4r dnsbl.ahbl.org 127.0.0.4 7 0 AHBLPSSL ip4r dnsbl.ahbl.org 127.0.0.5 5 0 AHBLFORMMAIL ip4r dnsbl.ahbl.org 127.0.0.6 8 0 AHBLENDUSER ip4r dnsbl.ahbl.org 127.0.0.9 5 0 AHBLEXEMPT ip4r exemptions.ahbl.org * -8 0 SORBS-HTTP ip4r dnsbl.sorbs.net 127.0.0.2 8 0 SORBS-SOCKS ip4r dnsbl.sorbs.net 127.0.0.3 8 0 SORBS-MISC ip4r dnsbl.sorbs.net 127.0.0.4 8 0 SORBS-SMTP ip4r dnsbl.sorbs.net 127.0.0.5 5 0 #SORBS-SPAM ip4r dnsbl.sorbs.net 127.0.0.6 3 0 SORBS-WEB ip4r dnsbl.sorbs.net 127.0.0.7 8 0 SORBS-BLOCK ip4r dnsbl.sorbs.net 127.0.0.8 6 0 SORBS-ZOMBIE ip4r dnsbl.sorbs.net 127.0.0.9 6 0 SORBS-DUL ip4r dnsbl.sorbs.net 127.0.0.10 5 0 AHBLDOMAINS rhsbl rhsbl.ahbl.org * 5 0 SORBS-BADCONF rhsbl rhsbl.sorbs.net 127.0.0.11 5 0 SORBS-NOMAIL rhsbl rhsbl.sorbs.net 127.0.0.12 7 0 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Hi, I report subject at 8. I bounce at 10. I delete at 20. I also delete MAILFROM, PERCENT and all -proxies Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sheldon Koehler Sent: Friday, November 28, 2003 12:29 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1 Andy, What weight to you hold and delete on? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 28, 2003 8:43 AM Subject: RE: [Declude.JunkMail] EASYNET tests going away December 1 NJABLRELAYS ip4r dnsbl.njabl.org 127.0.0.2 4 0 NJABLDUL ip4r dnsbl.njabl.org 127.0.0.3 4 0 NJABLSOURCES ip4r dnsbl.njabl.org 127.0.0.4 7 0 NJABLMULTI ip4r dnsbl.njabl.org 127.0.0.5 5 0 NJABLFORMMAIL ip4r dnsbl.njabl.org 127.0.0.8 8 0 NJABLPROXIES ip4r dnsbl.njabl.org 127.0.0.9 8 0 AHBLRELAYS ip4r dnsbl.ahbl.org 127.0.0.2 5 0 AHBLPROXIES ip4r dnsbl.ahbl.org 127.0.0.3 8 0 AHBLSOURCES ip4r dnsbl.ahbl.org 127.0.0.4 7 0 AHBLPSSL ip4r dnsbl.ahbl.org 127.0.0.5 5 0 AHBLFORMMAIL ip4r dnsbl.ahbl.org 127.0.0.6 8 0 AHBLENDUSER ip4r dnsbl.ahbl.org 127.0.0.9 5 0 AHBLEXEMPT ip4r exemptions.ahbl.org * -8 0 SORBS-HTTP ip4r dnsbl.sorbs.net 127.0.0.2 8 0 SORBS-SOCKS ip4r dnsbl.sorbs.net 127.0.0.3 8 0 SORBS-MISC ip4r dnsbl.sorbs.net 127.0.0.4 8 0 SORBS-SMTP ip4r dnsbl.sorbs.net 127.0.0.5 5 0 #SORBS-SPAM ip4r dnsbl.sorbs.net 127.0.0.6 3 0 SORBS-WEB ip4r dnsbl.sorbs.net 127.0.0.7 8 0 SORBS-BLOCK ip4r dnsbl.sorbs.net 127.0.0.8 6 0 SORBS-ZOMBIE ip4r dnsbl.sorbs.net 127.0.0.9 6 0 SORBS-DUL ip4r dnsbl.sorbs.net 127.0.0.10 5 0 AHBLDOMAINS rhsbl rhsbl.ahbl.org * 5 0 SORBS-BADCONF rhsbl rhsbl.sorbs.net 127.0.0.11 5 0 SORBS-NOMAIL rhsbl rhsbl.sorbs.net 127.0.0.12 7 0 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] EASYNET tests going away December 1
Scott if we comment out a test in global.cfg and leave its action in default.junkmail will there be any problems ? errors, performance issues, ... - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 21, 2003 1:52 PM Subject: [Declude.JunkMail] EASYNET tests going away December 1 FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work throughout December. It may drop dead after that. Hope I won't. Goodbye all. It was invigorating, it was fun, it was necessary. Don't give up. Ben. -- easynet.nl abuse handling dept. -- [EMAIL PROTECTED] - blacklists/dnsbls: http://abuse.easynet.nl/spamstats.html - - aup: http://www.nl.easynet.net/pub/av/aup/nl (dutch) -- - aup: http://www.nl.easynet.net/pub/av/aup/en (english) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
RE: [Declude.JunkMail] EASYNET tests going away December 1
Since the tests will be dead, remove them is best. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of serge Sent: Thursday, November 27, 2003 6:43 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1 Scott if we comment out a test in global.cfg and leave its action in default.junkmail will there be any problems ? errors, performance issues, ... - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 21, 2003 1:52 PM Subject: [Declude.JunkMail] EASYNET tests going away December 1 FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work
[Declude.JunkMail] EASYNET tests going away December 1
FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work throughout December. It may drop dead after that. Hope I won't. Goodbye all. It was invigorating, it was fun, it was necessary. Don't give up. Ben. -- easynet.nl abuse handling dept. -- [EMAIL PROTECTED] - blacklists/dnsbls: http://abuse.easynet.nl/spamstats.html - - aup: http://www.nl.easynet.net/pub/av/aup/nl (dutch) -- - aup: http://www.nl.easynet.net/pub/av/aup/en (english) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Well that sucks, I bet if he asked for help Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, November 21, 2003 5:52 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] EASYNET tests going away December 1 FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work throughout December. It may drop dead after that. Hope I won't. Goodbye all. It was invigorating, it was fun, it was necessary. Don't give up. Ben. -- easynet.nl abuse handling dept. -- [EMAIL PROTECTED] - blacklists/dnsbls: http://abuse.easynet.nl/spamstats.html - - aup: http://www.nl.easynet.net/pub/av/aup/nl (dutch) -- - aup: http://www.nl.easynet.net/pub/av/aup/en (english) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses
RE: [Declude.JunkMail] EASYNET tests going away December 1
Bummer. So we need to take those out of our global.cfg. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, November 21, 2003 5:52 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] EASYNET tests going away December 1 FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work throughout December. It may drop dead after that. Hope I won't. Goodbye all. It was invigorating, it was fun, it was necessary. Don't give up. Ben. -- easynet.nl abuse handling dept. -- [EMAIL PROTECTED] - blacklists/dnsbls: http://abuse.easynet.nl/spamstats.html - - aup: http://www.nl.easynet.net/pub/av/aup/nl (dutch) -- - aup: http://www.nl.easynet.net/pub/av/aup/en (english) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list
RE: [Declude.JunkMail] EASYNET tests going away December 1
Bummer. So we need to take those out of our global.cfg. Yes, but what to replace them with? I'm running the defaults at this point (DSBL, ORDB, SPACOP, BLITZEDALL, SBL). Scott, what will replace the EASYNETs in the new install .CFG? ~Brad --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
