URI blacklists are certainly making up the difference on my system. But far more important, Sniffer from SortMonster.com is making the biggest difference on my network.
Sniffer has the advantage of both URI filtering and traditional content filters because Sniffer is picking up the content that is the same across spam runs, whether that happens to be a URI, a phone number, the GIF attachment that is a drug billboard, or the HTML text that describes the GIF attachment, or the obfuscation of a URI or HTML itself. Sniffer is easily worth a buck a day. Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick > Sent: Tuesday, July 26, 2005 10:57 AM > To: Declude. JunkMail > Subject: [Declude.JunkMail] RBL's becoming worthless... > > In the last several months we have seen large quantity of > spam coming from IP blocks that never seem to get listed on > any RBL. Spamcop is about the only one that picks some of > them up and once in awhile spamhaus. There was a block last > night that sent several hundred and sendbase.org showed they > had detected no email from that block. > > The reason I bring this up is because when we first started > blocking spam I would say the blacklists would catch almost > 90% so we relied heavily on the blacklist. With the > blacklists not being as effective we need to rely on other > tests like sniffer but that misses alot also. > > Chuck Schick > Warp 8, Inc. > (303)-421-5140 > www.warp8.com > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
