I am adding addresses that expire in the pending queue.  Then I have a
python program I wrote that I run as a cron job once a week.  It takes the
blacklisted email list and counts the domains into a dictionary with domain
and count.  If the domain is blacklisted over a certain number of times (say
20) then it adds the domain to the blacklist and deletes the individual
entries in the blacklist which come from that domain.  It does not however
add any domains to the blacklist that appear in a whitelist.  Instead it
leaves the original blacklisted email addresses.

So for example...  if in the blacklist you had

[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

and the threshold number was set to ten... the entries would be deleted and
replaced with
bsmcompany.cjb.net

But if this domain appeared in any whitelist then it is skipped and the
original emails remain in the blacklist.

Currently there are a few users that have over 130,000 .msg files in the
pending queue on the mail server I am working with.
The only thing that I may still need to address in my program is include a
list of domains that are not a good idea to blacklist even if not in your
whitelist.
Domains such as hotmail.com, yahoo.com, mail.com, juno.net, etc.  Mainly
just the big free email providers.



----- Original Message ----- 
From: "Kyle Hasselbacher" <[EMAIL PROTECTED]>
To: "sean" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, December 01, 2003 8:38 PM
Subject: Re: How many blacklisted emails and domains?


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Mon, Dec 01, 2003 at 04:34:33PM -0800, sean wrote:
> >How many blacklisted emails and domains do you have?  What about
whitelisted?
>
>  37 addresses added themselves via confirmations.
> 261 addresses on the whitelist I maintain.
>  46 of those have a wildcard in them.
>  28 blacklisted responders, 21 with wildcards.  These are either spammers
>     who confirmed a message or sites that sent bounce messages in response
>     to a challenge.
>  22 blacklisted as spammers and for responding to challenges.  Guess I'm
>     disorganized.
>
> Final scores (arithmetic done in my head and subject to error):
>
> 298 whitelist
>  50 blacklist
>
> Now that I'm in a numbers mood, in the month of November 2003...
>
> 9557 incoming mails
> 2830 filtered responses to forged spam
> 1288 dropped by procmail rules
> 1323 delivered before reaching TMDA
> 4104 sent to TMDA
> 2270 held without challenge
> 1791 challenged
>    3 confirmed (1 spam, 2 responses to forged spam)
>
> There may be a little overlap.  Like, I think confirmed messages are
> counted twice.
>
> Anyway, "The Tonight Show" is starting, and "Headlines" is more
> entertaining than spam.
> - -- 
> Kyle Hasselbacher         "If you can use a remote, you can use WebTV."
> [EMAIL PROTECTED]                             -- WebTV commercial
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
>
> iD8DBQE/zBcu10sofiqUxIQRAplGAJwOqspqFsPP/jgumR0mC4UpeXhKjwCgmsN+
> HfttNDygWAP1VrLZ2NGOQgE=
> =PWfq
> -----END PGP SIGNATURE-----
> _____________________________________________
> tmda-users mailing list ([EMAIL PROTECTED])
> http://tmda.net/lists/listinfo/tmda-users

_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to