Email Filtering Continues - Page 4

**David** · December 1st, 2004, 5:09 AM

Quote:

Originally Posted by silent

Surreptitiously using customers as a technical test-bed is not the best way. Other hosts are quite capable of solving this issue without this process. Why not do what they are doing?

Oh, I was unaware Surpass is now going to rid the world of spam. lol You’re a funny guy.

How else will they find out if it works in a live working enviroment? If other hosts are capable of solving it, why do they still have spam?

Yes, I am but since I never said or even implied that they were going to do that, the only joke is how far you stretched that.

**Bigjohn** · December 1st, 2004, 11:20 AM

DJ -
they could have asked for volunteers. I guess that the biggest issue is that is was implemented without even announcing the test. That alone angered many (not me).

But the fact that it is bouncing REAL messages, and denying customers access to services that they paid for shows that this method, as tested, failed.

There are tons of half steps that Surpass can take. The Exim users mailing list generates dozens of messages each day talking about the best ways to configure mail servers, and some about how to control spam.

**Bigjohn** · December 1st, 2004, 11:40 AM

Even spam assassin is not perfect. I have SPRINT PCS for my cell service, and the messages I get from them are often scored as spam.

But here is the killer -

Quote:

3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: sprintpd.com]

Someone who does not like sprint reported them as spammers... so they're in a blacklist.... which further underscores my point. Blacklist 'blocking' alone does NOT work. IT can and will block lots of necessary mail, perhaps including someone's cellphone or other "e-bill".

**David** · December 1st, 2004, 6:46 PM

Quote:

Originally Posted by Bigjohn

DJ -
they could have asked for volunteers. I guess that the biggest issue is that is was implemented without even announcing the test. That alone angered many (not me).

But the fact that it is bouncing REAL messages, and denying customers access to services that they paid for shows that this method, as tested, failed.

There are tons of half steps that Surpass can take. The Exim users mailing list generates dozens of messages each day talking about the best ways to configure mail servers, and some about how to control spam.

That's why I was asking about all of this in the first place. I wasn't sure about what exactly was going on. When I read that someone said they actually benefited and it wasn't bouncing real mail from them, it left the whole thing in confusion for me.

**AxE** · December 2nd, 2004, 1:50 AM

Can we switch gears for a moment? Exactly what is it that Surpass has in place to determine if something is spam? Also, even if it is not feasable to send an auto-response to declared spam messages (I would not do that!), is it possible to send a daily report to the resellers/clients that states the subject and sender of all blocked mail? That way, we can at least see what may or may not be blocked.

**Bigjohn** · December 2nd, 2004, 2:08 AM

They're blocking any connection at all from any IP in sorbs, and they're bouncing emails that come from addresses that are in blacklists.

DJ -

Are we benefiting? Sure. I'm not getting 100 spams per day now. I'm getting 10.

BUT

I also know for certain that I've missed more than a dozen emails, and my clients are having trouble sending email IF their current (dynamic) IP address is or has been in any blacklist...

Blacklists are not accurate, nor are they a true measure of SPAM. Example (as if I've not posted enough already....), here is the Spam Assassin score block from a spam I got today. NOTE - there are NO BLACKLIST SCORES! and it still scored almost 30 points!

Quote:

Content analysis details: (29.1 points, 4.5 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.8 MSGID_YAHOO_CAPS Message-ID has ALLCAPS[at]yahoo.com
4.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.8 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
0.1 RCVD_BY_IP Received by mail server with no name
3.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.2 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.8991]
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
0.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
2.1 FRONTPAGE RAW: Frontpage used to create the message
4.1 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
2.2 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
1.1 PRIORITY_NO_NAME Message has priority, but no X-Mailer/User-Agent

**bodypainter** · December 2nd, 2004, 6:40 AM

Emails from my dad weren't coming through so I asked him if he had received any notifications of bounced email. He reminded me that I taught him long ago to ignore those notifications because they often contain viruses or are bogus messages triggered by other spam.

December 1st, 2004, 11:20 AM	#29 (permalink)
Bigjohn minor deity Super #1 Joined in Apr 2004 Lives in Georgia Hosted on XEON 7,387 posts Gave thanks: 28 Thanked 94 times	DJ - they could have asked for volunteers. I guess that the biggest issue is that is was implemented without even announcing the test. That alone angered many (not me). But the fact that it is bouncing REAL messages, and denying customers access to services that they paid for shows that this method, as tested, failed. There are tons of half steps that Surpass can take. The Exim users mailing list generates dozens of messages each day talking about the best ways to configure mail servers, and some about how to control spam. __________________ Proud to be a Surmunity Mod! XEON PASS60 PASS61 Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -*ON WEB* - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does!

December 2nd, 2004, 6:40 AM	#34 (permalink)
bodypainter Prince of Heck Excelling Contributor Joined in Nov 2003 Lives in Sarasota 768 posts Gave thanks: 2 Thanked 6 times	Emails from my dad weren't coming through so I asked him if he had received any notifications of bounced email. He reminded me that I taught him long ago to ignore those notifications because they often contain viruses or are bogus messages triggered by other spam. __________________ Co-Winner: 2004 Surpassies - Ultimate Surpasser Age doesn't always bring wisdom. Sometimes age comes alone.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

December 2nd, 2004, 1:50 AM	#32 (permalink)
AxE Surpass Fan Comfy Contributor Joined in Oct 2003 Lives in Richmond, VA Hosted on PASS2 169 posts Gave thanks: 0 Thanked 0 times	Can we switch gears for a moment? Exactly what is it that Surpass has in place to determine if something is spam? Also, even if it is not feasable to send an auto-response to declared spam messages (I would not do that!), is it possible to send a daily report to the resellers/clients that states the subject and sender of all blocked mail? That way, we can at least see what may or may not be blocked.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)