sockets handeling or socket processing (or whatever).
Therefore, I can't help but wonder if there is any 3rd party tool to enhance
and/or speed up window's built-in sockets?
Any suggestions?
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475-9032
Is there ever a legit reason to Base64 encode plain text?
For various reasons which I won't go into now, I'm thinking about decoding and
overwriting the original Base64 encoded text with its decoded text and then
leaving the message that way (whether caught spam or ham).
Any thoughts?
Rob
former
employee. If the date/time stamp they provide is **recent**, they'd be
caught red handed as well... but the problem here is that I would then
have provided this e-mail address to the spammer for listwashing...
something I'm reluctant to do.
Any comments/suggestions welcome!
Rob McEwen
with, even if the client left that
checkbox checked on that form they filled out... probably 5 years ago!
--Rob McEwen
of the educational value of your message.
Can I have your permission (at some point in the future) to do a blog entry
about this particular spam and reference your comments about it? (I'll give you
credit, of course)
Thanks very much!
Rob McEwen
PowerView Systems
RE: rbldnsd ported to windows?
Does anyone know if rbldnsd has ever been ported to windows? If not, is there
an easy way to do this?
Thanks,
Rob McEwen
PowerView Systems
. The client is simply downloading
duplicate copies over and over again.
(Most often, good filters will block any such message that would choke
outlook, but you never know!)
I recommend making sure that this isn't the actual problem (if you haven't
already)
--Rob McEwen
-Original Message-
From
] promote your own
products/services/business, too.)
Time is short... try to reply back within the hour, if possible.
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475-9032
:)
In fact, this system has proven tremendously successful!
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475-9032
will
find their filters failing big time.
Rob McEwen
place to be at considering the listing I demonstrated today with regard to
DSBL)
Rob McEwen
,
Rob McEwen
[EMAIL PROTECTED]
by the time you read
this)
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475-9032
... and I do plan to soon expand to a few other scanners to augment ClamAV)
Maybe I'm just seeing the beginning of a new strain?
Thanks,
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
will return 03 for good servers. I'm looking
for any other similar type of good DNS-based list.
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
basis as these things come up... but I'm still hoping to find a
good list of frequently used official DNS server for large established ISPs
(either in list form or as a DNS list)
--Rob McEwen
for the major ISPs... but it is NOT my goal to whitelist dynamic IPs
assigned by the ISPs to the individual computers using that service... a
very important distinction.
--Rob McEwen
in (closed loop) subscription already
occurred? I can't quite decifer this.
If THAT is their claim, I can then verify that some kind of fraud has occurred
here. Any opinions on this?
(also, I obfuscated any info in that e-mail that might easily give away the
recipient e-mail address)
Rob
overloaded
or mis-configured.
--Rob McEwen
into account all of the
good valid point point you brought up.
Rob McEwen
PowerView Systems
you describe is
exactly that happened. But, since then, I've gotten some mixed results...
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475-9032
of each letter came
from a generic template.
Maybe there are no hard simple rules... but I'd sure love some additional
advice?
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
-mail we ever received
were personally typed solicitations and all other spam were eliminated, then
there would have never been a need for SpamAssassin and 99.% of all spam
would be gone.
--Rob McEwen
nature
...I was trying to point out that it is sometimes harder to define and/or
rely upon commercial than it is to define and/or rely upon bulk as a
criteria for being considered spam.
--Rob McEwen
PowerView Systems
OBSERVATION:
Could some of us be treating unsolicited Business-to-Consumer and
unsolicited Business-To-Business the same? Should they be treated the same?
If not, the perhaps some people's irritation about getting called at
dinner-time for the 10th time by the same phone company be influencing
unsolicited e-mail to be somehow above
or more respective than bulk spam.
--Rob McEwen
... but somehow I think that this
is already taken care of in spite of what some of the more aggressive mail
administrators have said today.
Rob McEwen
... but they will never get
anywhere near a true hand-typed e-mail that is very personalized and
specific to the recipient... and THAT is the kind of unsolicited e-mail I've
asked about today.
--Rob McEwen
on this thread if received
only once?
--Rob McEwen
their Unsolicited Bulk
Email standard as being the industry standard. (see last paragraph on
http://www.spamhaus.org/definition.html )
--Rob McEwen
client-side software programs for spam filtering e-mail in outlook. It too
plays the catch every spam game and I found the FP rate to be alarmingly
high.
--Rob McEwen
previously added that IP to it's no reverse DNS nameserver
database.
(4) And, of course, I understand that it is NOT a good idea to block
**solely** due to a sending server's IP not having a reverse DNS lookup.
Rather, I'm using this for auditing, testing, and other things.
Thanks,
Rob McEwen
in a browser. Turns out, from
other's input, it seems that SpamHaus has been having intermittent problems
with their web site (or web site connectivity??) over the past couple of
days. However, I am now able to access their web site.
Thanks to all for the feedback.
Rob McEwen
What ever happened to Louisville CO 80027 spam?
Did they change their scheme? Get Prosecuted?
Rob McEwen
PowerView Systems
on a Staples web site.
More likely... they bought something from Staples or elsewhere and failed to
uncheck receive special offers... and I'm still somewhat giving them the
benefit of the doubt in that scenario.
Any other thoughts? Anyone?
Rob McEwen
PowerView Systems
[EMAIL PROTECTED]
(478) 475
in this same category that sent at this
frequency?
(just want to compare notes)
Rob McEwen
PowerView Systems
filter is missing.
I know this isn't something that you could do instantly, but you could look
for such opportunities in the future.
Rob McEwen
PowerView Systems
which makes it past the spam filter on a case-by-case
basis. (as I do in this situation)
Rob McEwen
PowerView Systems
sending mail server (of course, I know that additional testing, like rules
and SURBL are also good... I'm wondering if there are any other things to
prevent FPs when relying on this method...)
Rob McEwen
Be sure to add the JP list. It's very good:
Also, isn't it somewhat of a wasteful resource drain on SURBL's server for
people to use each list separately instead of just using the multi.surbl.org
list?
--Rob McEwen
with geocities.com URLs hit my server
than legit mail with geocities.com URLs.
Rob McEwen
) and THEN returns the
temporary rejection code?
Thanks,
Rob McEwen
PowerView Systems
like Chris or Jeff. Plus, Dvorak will recognize my name from other
very unrelated topics that I've posted on his blog in the past and I
wouldn't want to confuse issues with him by using my name.)
Rob McEwen
PowerView Systems
a message to that page.
Also, if you do so, you might want to let him know that this situation has
been going on for a while and that there is not much time left before more
drastic measures will have to be taken.
http://www.dvorak.org/blog/?p=1437
Thanks,
Rob McEwen
.
Of course, this would be a tedious task... but one that could be developed
little-by-little.
Rob McEwen
PowerView Systems
... But I just feel a need to rethink the way that this should be
implemented. Any suggestions?
Rob McEwen
PowerView Systems
don't think
that my reply was from my own mail server reporting back on SMTP responses,
but I could be mistaken).
Rob McEwen
which has been
able to do this?
Rob McEwen
or resource where the largest of these are listed
with guidelines for whitelisting them (send server IP, etc).
Thanks,
Rob McEwen
PowerView Systems
not including attachments), and
(4) X number of e-mail addresses found in the body of the message.
Perhaps this kind of rule could whitelist the messages at highest risk of
being a FP message without whitelisting the occasional list spam?
Rob McEwen
of such (i.e.
sma|| caps)... but I haven't had the chance to make such improvements
(yet).
Perhaps you could use what I've done as a starting point for writing the SA
rule.
Rob McEwen
rule result=reject_InvestmentSpam
titlephrases found in investment spam/title
scope
headerall/header
bodyall/body
, note that it is easy to add/remove particular extensions as desired.
Rob McEwen
problems. (many people don't know
this). In fact, I was one of these... I thought my old provider, Cingular,
really, really sucked... but it turns out that it was my ignorance.
Rob McEwen
of each subject line (when not already there).
Any thoughts? Suggestions?
Rob McEwen
Thanks Bob Joseph. Good suggestions!
Rob McEwen
rather it open a
new window and not interfere. Is there a way to change the default behavior for
this?
Rob McEwen
of FPs to see if anyone
has any ideas... it kinda gets off topic to discuss these on this thread. But,
nevertheless, try to cut the poor guy some slack. Nobody is perfect and, like I
said, I found him to be very competent and helpful.
Rob McEwen
to whitelist the leading, most frequently
used groups. Of course, it would have to be a ruleset which checks a number of
factors to ensure that it doesn't get tricked into whitelisting a clever spam
message impersonating a list.
Rob McEwen
for any e-mail that
mentions Geocities
(I'll include the stats in this e-mail to back me up.)
Rob McEwen
there is top notch...)
Rob McEwen
-connected computers which would then
send/receive at specified intervals?
Thank,
Rob McEwen
authentication for SMTP
server usage. (of course, my spam filter alone would help in this situation)
Thanks,
Rob McEwen
301 - 362 of 362 matches
Mail list logo
