Mailing List Archive: SpamAssassin: users

emailBL devel ?

Index | Next | Previous | View Threaded

lists07 at abbacomm

Nov 24, 2009, 9:22 AM

Post #1 of 8 (801 views)
Permalink

emailBL devel ?

didnt anyone think that the emailBL project was good enough in adding an
extra factor of protection to continue development?

- rh

sa-list at alexb

Nov 24, 2009, 9:30 AM

Post #2 of 8 (758 views)
Permalink

Re: emailBL devel ? [In reply to]

On 11/24/2009 6:22 PM, R-Elists wrote:
> didnt anyone think that the emailBL project was good enough in adding an
> extra factor of protection to continue development?
>
> - rh

Freemail.pm plugin does it pretty well without the overhead and cron'd
replication lag...

me at junc

Nov 24, 2009, 9:30 AM

Post #3 of 8 (762 views)
Permalink

Re: emailBL devel ? [In reply to]

On tir 24 nov 2009 18:22:25 CET, R-Elists wrote
> didnt anyone think that the emailBL project was good enough in adding an
> extra factor of protection to continue development?

+1

even without more devel on it, what does miss ?

so far i have just seen one big problem with it, dns servers / mirrors

and maybe we like to kick that user on web :)

--
xpoint

me at junc

Nov 24, 2009, 9:34 AM

Post #4 of 8 (762 views)
Permalink

Re: emailBL devel ? [In reply to]

On tir 24 nov 2009 18:30:15 CET, Yet Another Ninja wrote
> Freemail.pm plugin does it pretty well without the overhead and
> cron'd replication lag...

just one problem with freemail it should list all domain as freemail
as default, unless there is a clear sign of payment to get it

otherway around is to easy for spammers

--
xpoint

Dan.McDonald at austinenergy

Nov 24, 2009, 9:49 AM

Post #5 of 8 (764 views)
Permalink

Re: emailBL devel ? [In reply to]

On Tue, 2009-11-24 at 09:22 -0800, R-Elists wrote:
> didnt anyone think that the emailBL project was good enough in adding an
> extra factor of protection to continue development?

I'm using it with a locally sourced set of "bad actors". Unfortunately,
I don't believe I'm allow to share the data.

--
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com

Attachments:

signature.asc (0.19 KB)

sa-list at alexb

Nov 24, 2009, 10:02 AM

Post #6 of 8 (759 views)
Permalink

Re: emailBL devel ? [In reply to]

On 11/24/2009 6:34 PM, Benny Pedersen wrote:
> On tir 24 nov 2009 18:30:15 CET, Yet Another Ninja wrote
>> Freemail.pm plugin does it pretty well without the overhead and cron'd
>> replication lag...
>
> just one problem with freemail it should list all domain as freemail as
> default, unless there is a clear sign of payment to get it
>
> otherway around is to easy for spammers
>

you mean a rhsdnsbl?
iirc, there's a bunch of them around.

seems simpler than adding 100000000 domains to freemail's config .-)

me at junc

Nov 24, 2009, 10:10 AM

Post #7 of 8 (763 views)
Permalink

Re: emailBL devel ? [In reply to]

On tir 24 nov 2009 19:02:29 CET, Yet Another Ninja wrote
> seems simpler than adding 100000000 domains to freemail's config .-)

that why i like to change it to be paidmail.pm with lists of paid domains

got it now ? :)

spammers can get any free domain and it can continue as a freemail,
but when some have to paid, oh well

intresting part is that i see most spam comes from freemail domains,
and when i see spam from paid domains its content in body that is
spam, not the sender domain, so far i see a pattern there

--
xpoint

sa-list at alexb

Nov 24, 2009, 11:04 AM

Post #8 of 8 (762 views)
Permalink

Re: emailBL devel ? [In reply to]

On 11/24/2009 7:10 PM, Benny Pedersen wrote:
> On tir 24 nov 2009 19:02:29 CET, Yet Another Ninja wrote
>> seems simpler than adding 100000000 domains to freemail's config .-)
>
> that why i like to change it to be paidmail.pm with lists of paid domains
>
> got it now ? :)
>
> spammers can get any free domain and it can continue as a freemail, but
> when some have to paid, oh well
>
> intresting part is that i see most spam comes from freemail domains, and
> when i see spam from paid domains its content in body that is spam, not
> the sender domain, so far i see a pattern there
>

sounds like a great idea.. let us know when you're ready so we can start
testing...

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads