Re: Hostkarma whitelist FP

2010-02-01 Thread Marc Perkel
Alex wrote: Hi, They are the kind of people I email about these problems because it could signal they've been hacked. And that's a bad thing for hospitals. The sooner they know the sooner they can clean house. That's a bad thing for anyone, not just hospitals, but I doubt if the sys

Re: Hostkarma whitelist FP

2010-02-01 Thread Marc Perkel
Mike Cardwell wrote: On 01/02/2010 17:31, Marc Perkel wrote: Yep - sutterhealth.org is a hospital. Making sure good email gets through is more important than a little bit of occasional spam. http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists "And if you never send sp

Re: Hostkarma whitelist FP

2010-02-01 Thread Marc Perkel
Yep - sutterhealth.org is a hospital. Making sure good email gets through is more important than a little bit of occasional spam. Bowie Bailey wrote: Even if they are emailing me regarding the amazingly large sum of money some unknown person apparently left me in his will? :) Marc Perkel

Re: Hostkarma whitelist FP

2010-02-01 Thread Marc Perkel
That's the outgoing email gateway for a hospital. It stays whitelisted. Bowie Bailey wrote: This was listed in the Hostkarma whitelist: [198.217.64.52 listed in hostkarma.junkemailfilter.com] Can we get this IP removed? (I was going to report this directly, but I lost the email address and wa

Re: Should I block Experian/Free Credit Report

2010-01-23 Thread Marc Perkel
Alex wrote: Hi, This is a tricky decision. What they Free Credit Report / Experian is doing is fraudulent. Although they aren't stealing they way phishers are, just Have they ever been prosecuted or fined for this fraud? What are the mail servers and address information they use? I

Re: Should I block Experian/Free Credit Report

2010-01-23 Thread Marc Perkel
jdow wrote: From: "Marc Perkel" Sent: Friday, 2010/January/22 13:58 Generally I'm paid to protect my customers from fraud scams. Does that include fraud scams that are advertised on TV? The Experian/Free Credit Report is such a scam and I was personally ripped off b

Should I block Experian/Free Credit Report

2010-01-22 Thread Marc Perkel
Generally I'm paid to protect my customers from fraud scams. Does that include fraud scams that are advertised on TV? The Experian/Free Credit Report is such a scam and I was personally ripped off by them and I'm thinking about blocking their email. What they do isn't any different than a 419 n

Re: Bayes stopped working

2010-01-17 Thread Marc Perkel
. Casartello, Jr. Staff Assistant - Wireless/Linux Administrator Information Technology Wilson 105A Westfield State College Red Hat Certified Technician (RHCT) *From:* Marc Perkel [mailto:m...@perkel.com] *Sent:* Sunday, January 17, 2010 11:46 AM *To:* Casartello, Thomas *Cc:* users

Re: Bayes stopped working

2010-01-17 Thread Marc Perkel
MySQL has changed. I think there's a script called mysql-upgrade that you need to run. Casartello, Thomas wrote: I recently updated my machine from Fedora 11 to Fedora 12 and I noticed Bayes has stopped working. Couldn't get anything revealing from Spamassassin --D --lint . I use Mysql based

Haiti Spam

2010-01-13 Thread Marc Perkel
I'm not seeing any yet but expecting it soon.

Re: pill image spam learns to walk - best way to block it - hostkarma

2010-01-11 Thread Marc Perkel
For what it's worth my Lunk Email Filter service block 100% of virus generated spam such as this pill image spam. But anyone can tap into this for free by doing 2 things. First - add tarbaby.junkemailfilter.com as you highest numbered MX record. Second - use the hostkarma.junkemailfilter.com b

Re: hostkarma false positive

2010-01-11 Thread Marc Perkel
Christian Brel wrote: On Mon, 11 Jan 2010 09:35:37 +0100 Michael Monnerie wrote: Another FP on hostkarma: bsmtp5.bon.at[195.3.86.187] Please investigate and fix. And put them on YELLOW, they are an ISP here in Austria. Please check bsmtp[1-9] also. It's also listed in: 195.3.86.1

Re: hostkarma false positive

2010-01-11 Thread Marc Perkel
Fixed Michael Monnerie wrote: Another FP on hostkarma: bsmtp5.bon.at[195.3.86.187] Please investigate and fix. And put them on YELLOW, they are an ISP here in Austria. Please check bsmtp[1-9] also.

Re: junkemailfilter FP - impressive speed of resolving

2010-01-06 Thread Marc Perkel
Thanks - however I don't guarantee that kind of response time. :) Greg Troxel wrote: Lest people think I object to all whitelists, I'd like to point out that tonight I got spam from reachmail.net that was listed in HOSTKARMA_WL. I sent it off to supp...@junkemailfilter.com and SEVEN AND A HALF M

Re: PH_DATE_PAST_20XX

2010-01-01 Thread Marc Perkel
Can we call this the "Y2010" bug? :) I was just thinking back 10 years ago today wondering if there would be a 2010 related date bug. Charles Gregory wrote: Holy !!! I am SO glad that I read my e-mail first thing this morning! THANKS for spotting this! - Charles On F

Re: Cooperative data gathering project.

2009-12-17 Thread Marc Perkel
Jason Haar wrote: On 12/17/2009 03:30 PM, Marc Perkel wrote: Then the third filed is NONE. That's how I do it. But the idea is that any kind of daya can be collectively gathered and distributed. Instead of a TCP channel (which means software), what about using DNS? If the SA client

Re: Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
Then the third filed is NONE. That's how I do it. But the idea is that any kind of daya can be collectively gathered and distributed. R-Elists wrote: marc, what if there is no RDNS ? ;-) - rh

Re: Museum piece...

2009-12-16 Thread Marc Perkel
jdow wrote: From: "Charles Gregory" Sent: Wednesday, 2009/December/16 07:49 On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I sti

Re: Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
Mike Cardwell wrote: On 16/12/2009 15:37, Marc Perkel wrote: I have an idea for a cooperative data gathering project and it's similar to what we at Junk Email Filter are doing internally. The idea to that a number of you on the list who run a large spam filtering operation send one

Re: HTML in Messages

2009-12-16 Thread Marc Perkel
Charles Gregory wrote: On Tue, 15 Dec 2009, Marc Perkel wrote: I found the text only list and I originally had it set to just spamassassin.org rather that spamassassin.apache.org so this should help those on the list reading their email with a KSR33 teletype on a 110 baud acoustic modem use

Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
I have an idea for a cooperative data gathering project and it's similar to what we at Junk Email Filter are doing internally. The idea to that a number of you on the list who run a large spam filtering operation send one line messages reporting IP addresses with a key word like spam, ham, or o

Bug in Hostkarma black list found

2009-12-16 Thread Marc Perkel
I found a bug in the way my Hostkarna blacklist generates the list which led to some false positives. There are servers that look like spammers sometimes but lomg term data and white listing and nobl listing was supposed to keep these servers off our black list. However what was happening is th

Whitelists in SA

2009-12-16 Thread Marc Perkel
Res wrote: no whitelist should ever become default part of SA the day it is, is the day I look elsewhere. Why shouldn't white lists become part of SA? Blacklists are part of SA. My hostkarma whitelists are one of the things that keeps me in business because my false positive rates are f

Re: HTML in Messages

2009-12-15 Thread Marc Perkel
I found the text only list and I originally had it set to just spamassassin.org rather that spamassassin.apache.org so this should help those on the list reading their email with a KSR33 teletype on a 110 baud acoustic modem use less paper when reading their email. http://www.vintage-computer.

Re: HTML in Messages

2009-12-15 Thread Marc Perkel
If you can't handle HTML then filter it on your end.

HTML in Messages

2009-12-15 Thread Marc Perkel
LuKreme wrote: On 15-Dec-2009, at 06:11, Kai Schaetzl wrote: Mark, can you *please* stop sending HTML-only messages to the list? And just in case the response is "no one else complains" Yes. Stop doing this. Bad list subscriber. Bad! Bad! Get a modern email clie

Proper Processing of White Lists

2009-12-15 Thread Marc Perkel
Martin Gregorie wrote: Clarification: I, for one, was only proposing that the whitelisting plugins and rules that query external databases are removed from the standard ruleset and sa_update and placed in a separate library of optional rules. My reasons for making this suggestion are: -

Re: FP on blacklist hostkarma

2009-12-15 Thread Marc Perkel
Get a modern email client. Kai Schaetzl wrote: Mark, can you *please* stop sending HTML-only messages to the list? Kai

Re: emailreg.org - tainted white list

2009-12-14 Thread Marc Perkel
LuKreme wrote: On 14-Dec-2009, at 07:59, Bill Landry wrote: Christian Brel, AKA "rich...@buzzhost.co.uk" (among other aliases), is back… Ah, that explains the tone and typo pattern of that email. While I am suspicious of emailreg.org and Barracuda's ties to each other

Re: emailreg.org - tainted white list

2009-12-14 Thread Marc Perkel
Christian Brel wrote: Last week the blackhats that make up the '$pamAssassin PMC' sought to silence people who object to paid whitelists appearing in the core program which seek to give advantage to certain ESP's. vocal in the odd behaviour of the program. Namely those listed in whitelist 'Habe

Re: emailreg.org - pretty good white list

2009-12-13 Thread Marc Perkel
Rob McEwen wrote: Marc Perkel wrote: I see no reason that everything has to be free. Ultimately we all have to eat and we do something to make a living. There are people in the world who are both ethical and financially successful. So if someone is doing something right and

Re: emailreg.org - pretty good white list

2009-12-12 Thread Marc Perkel
Rob McEwen wrote: Bob O'Brien wrote: But I have to say (and this is just my personal opinion) that all the people shouting "conspiracy!" (even if joking about it) may have done irreparable harm to the potential for corporations (not just Barracuda) supporting this community in th

Re: emailreg.org - pretty good white list

2009-12-12 Thread Marc Perkel
Bob O'Brien wrote: I am "the whitelist guy" at Barracuda, so I work with them. In my opinion, the $20 fee should be considered more like a CAPTCHA. It's not simple "pay to play" either. Reports get investigated, and delistings can happen. As I'm sure many of the volunteers here are all too

Re: emailreg.org - pretty good white list

2009-12-12 Thread Marc Perkel
Sahil Tandon wrote: On Fri, 11 Dec 2009, Marc Perkel wrote: Been using emailreg.org for several months now and it seems like a really good white list. Anyone else using it? Not here. They charge a $20.00 administrative fee per registered domain, purportedly to

emailreg.org - pretty good white list

2009-12-11 Thread Marc Perkel
Been using emailreg.org for several months now and it seems like a really good white list. Anyone else using it?

Re: FP on blacklist hostkarma

2009-12-11 Thread Marc Perkel
Kevin Golding wrote: In article <4b226758.90...@perkel.com>, Marc Perkel writes If you have any other domain names for me to list let me know. I'm always looking to expand my white lists. shop.marksandspencer.com is one I always see hitting

Re: FP on blacklist hostkarma

2009-12-11 Thread Marc Perkel
Michael Monnerie wrote: On Dienstag, 1. Dezember 2009 Marc Perkel wrote: Every list is imperfect. In this case there were about 10 hits on the hi MX record and they didn't use QUIT to close the connection. Generally this indicates a virus. If they had used QUIT they wou

Re: freemail vs dkim / spf

2009-12-07 Thread Marc Perkel
R-Elists wrote:  > perkel wrote:   >  I have yet to find ANY use for SPF. And SPF causes nothing but problems.   Marc,   why nothing but problems?   is a lot of your system "mail forward" orientated?   care to elaborate w/o going into the same old SPF diatribe?  

Re: freemail vs dkim / spf

2009-12-07 Thread Marc Perkel
Matus UHLAR - fantomas wrote: On Sun, 6 Dec 2009, Benny Pedersen wrote: i think it could be added to freemail.pm to test if sender domain have spf or dkim and if no spf and or no dkim consider it as a freemail domain ? On 07.12.09 12:23, Charles G

Re: Language detection in TextCat

2009-12-07 Thread Marc Perkel
Martin Gregorie wrote: On Mon, 2009-12-07 at 08:55 -0800, Marc Perkel wrote: Except for very short messages I would think that if you spell checked the message in several languages and found that 80% was spelled correctly that you have a match. You wouldn't have to check

Re: Language detection in TextCat

2009-12-07 Thread Marc Perkel
Matt Kettler wrote: Marc Perkel wrote: I'm wondering if the language detection in TextCat can be improved. Here's the situation. It appears that TextCat was designed to be inclusive. You list the languages you want and it returns many possibilities so as not to trigge

Language detection in TextCat

2009-12-06 Thread Marc Perkel
I'm wondering if the language detection in TextCat can be improved. Here's the situation. It appears that TextCat was designed to be inclusive. You list the languages you want and it returns many possibilities so as not to trigger unwanted falsely. What I'm doing is extracting the language l

Re: freemail vs dkim / spf

2009-12-06 Thread Marc Perkel
Benny Pedersen wrote: i think it could be added to freemail.pm to test if sender domain have spf or dkim and if no spf and or no dkim consider it as a freemail domain ? i dont know if it require code changes to do this, but it make sense for me atleast to make it, no ? objection, flames

Re: Language Detection

2009-12-05 Thread Marc Perkel
enabled by default. On Dec 5, 2009, at 10:03 AM, "Marc Perkel" wrote: Are there any rules to determine what language a message is in?

Language Detection

2009-12-05 Thread Marc Perkel
Are there any rules to determine what language a message is in?

Re: FP on blacklist hostkarma

2009-12-01 Thread Marc Perkel
Matus UHLAR - fantomas wrote: On tir 01 dec 2009 02:16:04 CET, wrote I believe Raymond's response was addressing the fact a server connection could possibly be interrupted before it had a chance to issue the SMTP QUIT command. I would think being listed for that a

Re: FP on blacklist hostkarma

2009-11-30 Thread Marc Perkel
Michael Monnerie wrote: http://ipadmin.junkemailfilter.com/remove.php?ip=80.245.199.162 I removed that IP now, in order to let pass mail through. But please check it. It seems you easily blacklist a host that connects to your tarbaby MX, but we had a network outage on our primary MX which r

Re: DNSBL Comparison 20091114

2009-11-15 Thread Marc Perkel
Warren Togami wrote: http://mail-archives.apache.org/mod_mbox/spamassassin-users/200910.mbox/%3c4ad11c44.9030...@redhat.com%3e Compare this report to a similar report last month. http://wiki.apache.org/spamassassin/NightlyMassCheck The results below are only as good as the data submitted by

Re: Good reasons to dont use RBLs

2009-11-13 Thread Marc Perkel
Luis Daniel Lucio Quiroz wrote: Hi all, Again me, Well, in the security scope i use a principle that states that you souldnt use a lower layer solution to fix a higher one. So SPAM is a Layer 7 problem that is used to fixed with a Layer 3 solution (RBL). I'd like a brainstorm to convinc

Re: Short URL Providers RBL List

2009-11-05 Thread Marc Perkel
RW wrote: On Thu, 05 Nov 2009 20:05:25 +0100 Jonas Eckerman wrote: Marc Perkel wrote: I don't know if it will be useful but I made a short URL provider list that is DNS readable. Thanks. That could be usuable in my URLRedirect plugin. A cu

Blacklists Compared 17 October 2009

2009-10-23 Thread Marc Perkel
http://www.sdsc.edu/~jeff/spam/cbc.html The races! Big upset for Baracudda as Spamhaus takes back the #1 position and Spam Eating Monkey comes in second. (I don't count apews) Hostkarma pulls ahead of Uceprotect who have been running neck and neck for 5th and 6th place.

Hostname Based Black/White lists

2009-10-23 Thread Marc Perkel
Does SA support host name based black/white lists? I suppose to do it right you might have to pick a specific received line to get the host that sent you the email, do FCrDNS, and then do the lookup. Is something like this available? I'm doing it in Exim on my system, but Exim has the host con

Re: false positive on hostkarma blacklist

2009-10-21 Thread Marc Perkel
Fixed Michael Monnerie wrote: http://ipadmin.junkemailfilter.com/remove.php?ip=62.40.128.130 Just received this FP from a customer. That IP is indeed an MX for kabsi.at, a big cable provider in Austria. Please put it on YELLOW. mfg zmi

Re: Constant Contact

2009-10-17 Thread Marc Perkel
R-Elists wrote: I wouldn't say they are perfect but they try to be. It's close enough for my white list. They shut down abusers and the opt out works. marc, we shouldnt have to opt out... -rh Perhaps, but it doesn't make it spam.

Is there a WANTS_MY_INFO rule?

2009-10-17 Thread Marc Perkel
To catch this: In order to confirm you Web-Mail identity, you are to provide the following data; First Name: Last Name: Username/ID: Password: Date of Birth: Affirm your willingness and cooperation please, by replying me stating your FULL NAME, DATE OF BIRTH, TELEPHONE NUMBER, FAX NUMBER, and

Re: Constant Contact

2009-10-16 Thread Marc Perkel
Tara Natanson wrote: On Fri, Oct 16, 2009 at 12:49 PM, Adam Katz wrote: Does anybody here know anything about the legitimacy of Constant Contact ? Hello, I work for Constant Contact. We take reports of spam very seriously. Complaints are processed through our abus

Re: Constant Contact

2009-10-16 Thread Marc Perkel
One factor in scoring white list like mine is that different people have different definitions as to what is spam. And people have different values as to blocking spam at the expense of blocking good email. In my business if I block a good email it's worse than 100 spams getting through. I am p

Re: Constant Contact

2009-10-16 Thread Marc Perkel
Adam Katz wrote: Does anybody here know anything about the legitimacy of Constant Contact ? In preparing a list of HOSTKARMA_W violators for Marc, I noticed a very large amount of spam, coming from completely different companies, was sent through

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Mike Cardwell wrote: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the same name though.. I put that to my server as ht

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Jari Fredriksson wrote: 14.10.2009 19:17, R-Elists kirjoitti: All I can say is that if these numbers were real or typical I would be out of business. perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base...

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Henrik K wrote: On Wed, Oct 14, 2009 at 03:25:36AM -0700, Marc Perkel wrote: Jari Fredriksson wrote: I just started using Katz's wiki rules and it brought HOSTKARMA with it. I have not yet seen any blacklists of HOSTKARMA, but the whitelists are there.

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Jari Fredriksson wrote: I just started using Katz's wiki rules and it brought HOSTKARMA with it. I have not yet seen any blacklists of HOSTKARMA, but the whitelists are there. RANKRULE NAME COUNT %OFMAIL %OFSPAM %OFHAM 9RCVD_IN_HOSTKARMA_WL 77

Re: SA needs a new paradigm for rule structure

2009-10-13 Thread Marc Perkel
Title: RE: SA needs a new paradigm for rule structure Chris Santerre wrote: > -Original Message- > From: Ted Mittelstaedt [mailto:t...@ipinc.net] > Sent: 2009-10-10 02:40 > To: Marc Perkel > Cc: users@spamassassin.apache.org

Re: White lists and white rules

2009-10-12 Thread Marc Perkel
Warren Togami wrote: On 10/12/2009 09:18 AM, Marc Perkel wrote: For what it's worth there are really only 3 serious white lists on the planet. I'm surprised no one is testing the emailreg list. There are dozens of black lists. Doing white lists is actually easier than doing b

White lists and white rules

2009-10-12 Thread Marc Perkel
Henrik K wrote: On Sun, Oct 11, 2009 at 01:10:17PM -0400, Adam Katz wrote: Here are the default scores for the DNSWLs I know of: RCVD_IN_DNSWL_LOW 0 -1 0 -1 RCVD_IN_DNSWL_MED 0 -4 0 -4 RCVD_IN_DNSWL_HI 0 -8 0 -8 RCVD_IN_HOSTKARMA_W -5 # (nondefault rule, Marc's suggested score)

Re: DNSBL Comparison 20091010

2009-10-11 Thread Marc Perkel
Warren Togami wrote: The following is an apples to apples comparisons of DNSBL lastexternal rules against the October 10th, 2009 weekly_mass_check corpora. HOSTKARMA and SEM are new. Hopefully these masscheck results can help to identify problems so list quality can improve over time. http

Re: Spam filtering on outgoing email

2009-10-10 Thread Marc Perkel
Warren Togami wrote: On 10/10/2009 11:27 AM, Marc Perkel wrote: I'm thinking about starting a service to filter spam on outgoing email. I was wondering if anyone has any experience doing this and has some advice on how to do it. These customers will be businesses, not freemail customers

Re: SA needs a new paradigm for rule structure

2009-10-10 Thread Marc Perkel
RW wrote: On Fri, 09 Oct 2009 23:40:01 -0700 Ted Mittelstaedt wrote: I know that it seems like the idea of building up "meta" rules with a lot of small rules will give you a more accurate hit rate, but this is one of those non-intuitive things that can be shown by statistical

Spam filtering on outgoing email

2009-10-10 Thread Marc Perkel
I'm thinking about starting a service to filter spam on outgoing email. I was wondering if anyone has any experience doing this and has some advice on how to do it. These customers will be businesses, not freemail customers, and one of the only real threats is if someone gets hacked or has some

Re: SA needs a new paradigm for rule structure

2009-10-10 Thread Marc Perkel
Ted Mittelstaedt wrote: Marc Perkel wrote: I've brought this idea up over the years but I'll try to explain it in a different way. Maybe we can do this with a lot of meta rules. What we need are rules that combine a lot of simple rules into concepts and then combine those rules

Re: SA needs a new paradigm for rule structure

2009-10-09 Thread Marc Perkel
Karsten Bräckelmann wrote: On Fri, 2009-10-09 at 08:14 -0700, Marc Perkel wrote: I've brought this idea up over the years but I'll try to explain it in a different way. Maybe we can do this with a lot of meta rules. What we need are rules that combine a lot of si

SA needs a new paradigm for rule structure

2009-10-09 Thread Marc Perkel
I've brought this idea up over the years but I'll try to explain it in a different way. Maybe we can do this with a lot of meta rules. What we need are rules that combine a lot of simple rules into concepts and then combine those rules into rules that score - and score big. As an example, lets

Re: Rule and Rule

2009-10-09 Thread Marc Perkel
John Hardin wrote: On Fri, 9 Oct 2009, Marc Perkel wrote: It's essentially Perl logical expression syntax, and basic math expression syntax if you want to count: meta NAME rule1 && (rule2a + rule2b + rule2c + rule2d > 2) When adding rules is it a count of the number

Re: Rule and Rule

2009-10-09 Thread Marc Perkel
John Hardin wrote: On Fri, 9 Oct 2009, Marc Perkel wrote: Starting to write some SA rules again. What is the syntax for a rule where it's true if two other rules are both true? Need a small example. meta NAME (rule1 && rule2) It's essentially Perl logical expression

Rule and Rule

2009-10-09 Thread Marc Perkel
Starting to write some SA rules again. What is the syntax for a rule where it's true if two other rules are both true? Need a small example. Thanks in advance

Re: Hostkarma White list Updated and Improved

2009-10-06 Thread Marc Perkel
Jon Trulson wrote: On Mon, 5 Oct 2009, Marc Perkel wrote: John Hardin wrote: On Mon, 5 Oct 2009, Marc Perkel wrote: Our white list is supposed to be a source of pure good email. So if spam comes for any of the white listed IPs then it's an error. Whose? Yours or theirs? Meaning:

Re: Hostkarma White list Updated and Improved

2009-10-05 Thread Marc Perkel
John Hardin wrote: On Mon, 5 Oct 2009, Marc Perkel wrote: Our white list is supposed to be a source of pure good email. So if spam comes for any of the white listed IPs then it's an error. Whose? Yours or theirs? Meaning: is a single spam reason for an IP to be dropped from the host

Hostkarma White list Updated and Improved

2009-10-05 Thread Marc Perkel
In the last week I've put a lot of effort into improving the accuracy of my white lists. Especially for those of you who are critical of the accuracy of hostkarma white list I'd like you all to test it now and tell me how it works now. I have to admit that I have been less motivated in the past

Re: Spam Eating Monkey?

2009-10-04 Thread Marc Perkel
Warren Togami wrote: http://spameatingmonkey.com Anyone have any experience using these DNSBL and URIBL's? Is anyone from this site on this list? I wonder if we should add these rules to the sandbox for masschecks as well. Warren Togami wtog...@redhat.com I've been using them for a few

Re: DNSWL and JMF White false positives, what to do exactly?

2009-10-02 Thread Marc Perkel
Charles Gregory wrote: On Fri, 2 Oct 2009, RW wrote: However, if you want to be understood you need to speak the Lingua Franca. If you choose to use a term differently than everyone else you WILL be misunderstood and corrected. If everyone calls an apple an orange, then yeah, it's an orange.

Re: Understanding the hostKarma Lists

2009-10-01 Thread Marc Perkel
Updated that as well. R-Elists wrote: marc   dont forget this one   http://wiki.apache.org/spamassassin/MarcPerkelsExperiments    - rh From: Marc Perkel [mailto:m...@perkel.com]   snip  Yes - the wiki is updated.

Re: Hostkarma: to be or not to be in SA defaults

2009-10-01 Thread Marc Perkel
SM wrote: Hi Marc, At 09:32 30-09-2009, Marc Perkel wrote: I have a lot of mighty servers set up ad have servers at 4 locations. I have 50mb bought and using about 30 of it now. I am not sure what it takes to support a default SA inclusion. Does anyone know if what I described sounds like

Re: Understanding the hostKarma Lists

2009-09-30 Thread Marc Perkel
Blaine Fleming wrote: Marc Perkel wrote: I like it. RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR Let's go with it. Marc, have you updated your wiki to reflect the new rules? I think that will pretty well settle any deba

Re: Hostkarma: to be or not to be in SA defaults

2009-09-30 Thread Marc Perkel
LuKreme wrote: On 29-Sep-2009, at 23:41, Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. Slow d

Re: Hostkarma: to be or not to be in SA defaults

2009-09-30 Thread Marc Perkel
Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. - is the BL in question (which ever it may be) pr

Re: Understanding the hostKarma Lists

2009-09-30 Thread Marc Perkel
I like it. RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR Let's go with it. Warren Togami wrote: On 09/29/2009 08:56 PM, Marc Perkel wrote: Could you please decide between the existing JMF rule names or the above proposed HOSTKARMA names? It

Re: Understanding the hostKarma Lists

2009-09-30 Thread Marc Perkel
R-Elists wrote: RCVD_HOSTKARMA_BL Black RCVD_HOSTKARMA_WL White RCVD_HOSTKARMA_YL Yellow RCVD_HOSTKARMA_BR Brown OTOH, I really like these new names. My brain thinks less hard to recognize them. How do other people feel. Should we stick to his old names with JMF in the W

Re: Understanding the hostKarma Lists

2009-09-29 Thread Marc Perkel
Warren Togami wrote: On 09/29/2009 12:50 PM, Warren Togami wrote: On 09/29/2009 12:45 PM, Henrik K wrote: It seems that people have already been using the rules copied from your site. It will be confusing to them if we change the official name. Some will accidentally have your lists twice.

Rule name for hostKarma Lists

2009-09-29 Thread Marc Perkel
I will go along with the consensus of the group. Jari Fredriksson wrote: It seems that people have already been using the rules copied from your site. It will be confusing to them if we change the official name. Some will accidentally have your lists twice. RCVD_HOSTKARMA_BL Black R

Hostkarma white list

2009-09-29 Thread Marc Perkel
For those of you getting spam from IPs/Hostnames on my hostkarma white list, if you could email me a list of false hits (IP or host name) I could probable clean out the bad entries in the white list pretty quick.

Re: Hostkarma Blacklist Climbing the Charts

2009-09-29 Thread Marc Perkel
Blaine Fleming wrote: Marc Perkel wrote: My NoBL list is similar to yellow except that you can skip black list lookup but maybe might be whitelisted somewhere. I keep seeing IPs that are on both the NoBL *and* the blacklist. An example of this 89.206.179.213. That

Re: Hostkarma Blacklist Climbing the Charts

2009-09-29 Thread Marc Perkel
MySQL Student wrote: Hi, Hopefully my comment isn't out of place with the current discussion of JMF/Hostkarma. I think this is not only a really bad default score, but it should be reduced to -0.5 or perhaps not used at all. I have a money/fraud email that hit RCVD_IN_JMF_W that passed throug

Understanding the hostKarma Lists

2009-09-29 Thread Marc Perkel
o.com, gmail.com then you can skip all other IP testing because the IP address tells you nothing about if it is or isn't spam. Warren Togami wrote: On 09/28/2009 10:07 PM, Marc Perkel wrote: I'd like to keep the name HOSTKARMA as standard. If that's so, then we probably wan

Re: Hostkarma Blacklist Climbing the Charts

2009-09-28 Thread Marc Perkel
Warren Togami wrote: On 09/28/2009 06:53 PM, Marc Perkel wrote: Warren Togami wrote: On 09/28/2009 01:32 PM, Marc Perkel wrote: I'd be interested in how well it worked. Is there anything I need to do to help? http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists Could you pr

Re: Hostkarma Blacklist Climbing the Charts

2009-09-28 Thread Marc Perkel
Warren Togami wrote: On 09/28/2009 01:32 PM, Marc Perkel wrote: I'd be interested in how well it worked. Is there anything I need to do to help? http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists Could you provide a URL redirector to this page? This URL is very long. Pe

rbldns help OT

2009-09-28 Thread Marc Perkel
This should be easy but I'm missing something. I have a RBL list (dnset) for host testbl.junkemailfilter.com :2:Test .xx.host.example.com :4: .host.example.com :3: .example.com :9: .com :6: Works fine. But - I want to create an A record for testbl.junkemailfilter.com of 65.49.42.100. How do I

Re: Hostkarma Blacklist Climbing the Charts

2009-09-28 Thread Marc Perkel
Warren Togami wrote: On 09/28/2009 01:32 PM, Marc Perkel wrote: Warren Togami wrote: On 07/09/2009 09:57 PM, Marc Perkel wrote: For what it's worth I'm now ahead of Barracuda on Jeff Makey's blacklist comparison chart. Not a scientific comparison but it's about all

Re: Hostkarma Blacklist Climbing the Charts

2009-09-28 Thread Marc Perkel
Warren Togami wrote: On 07/09/2009 09:57 PM, Marc Perkel wrote: For what it's worth I'm now ahead of Barracuda on Jeff Makey's blacklist comparison chart. Not a scientific comparison but it's about all there is to compare blacklists. Now only abuseat.org and spamhaus

Free MX backup service that hels build my blacklist

2009-09-24 Thread Marc Perkel
I'm giving away a free MX backup service so that if your server goes down our servers will store and forward your email. You will also get some spam reduction especially from virus bots. Setup is automatic and all you have to do is change your MX records. Here's the instructions: http://www.fr

Re: Experimental Plugin: MetaSVM

2009-09-17 Thread Marc Perkel
So - what ever happened to this project? Was it finished? decoder wrote: LuKreme wrote: I don't see any need for the model to be dynamic. Periodic recalculation of it should be just fine. I bet even daily reprocessing will prove to be over zealous. Weekly, perhaps even monthly. This is wha

<    1   2   3   4   5   6   7   8   9   10   >