David - On the topic of updates (for a newbie), the release notes for 4.3.40 mention that you "removed the following IP4R tests". However, my cfg file still has them. Are these just suggested changes? I always wondered how the cfg file is updated without overwriting my changes, but also getting yours. I am on the very latest and greatest version and am wondering what else I am missing. Thanks! Todd PS - I also was having the same issue with UCEPROTECT 1/2 and just now lowered the weights to the suggested values.
_____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, April 19, 2007 9:50 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases Different reasons, slow performance etc, in the case of ORDB it shut down. _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Thursday, April 19, 2007 10:23 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases Hi, Just read the release notes and noticed that you deleted some tests as well. Why were those deleted? Ineffective of deprecated lists? p.s. Just reduced the weight on UCEPROTEC 1 a 2 to the new level. I'll install the latest version this evening, I'm still running 4.3.23 but I have 2 other virus test. ;-) Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] / <http://www.tio.nl> www.tio.nl ----- Original Message ----- From: David <mailto:[EMAIL PROTECTED]> Barker To: declude.junkmail@declude.com Sent: Thursday, April 19, 2007 3:06 PM Subject: RE: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases Also if you check our release notes http://www.declude.com/searchresults.asp?Cat=89 you will see that we had suggested lowering the weights on UCEPROTECT1 and UCEPROTECT2 David Barker Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED] ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, April 19, 2007 7:04 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases Yeah, UCEPROTECT in particular seems to have added a lot of major ISPs recently. We started counterweighting ISPs by REVDNS, but we were spending too much time doing that, so we reduced the weight of the UCEPROTECT1 and UCEPROTECT2 tests. Darin. ----- Original Message ----- From: Bonno Bloksma <mailto:[EMAIL PROTECTED]> To: Declude.JunkMail@declude.com Sent: Thursday, April 19, 2007 6:57 AM Subject: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases Hi, How do you guys deal with it, LOTS of legit mailservers are listed in what used to be reliable spamsender databases. X-RBL-Warning: SPAMBAG: 109.176.216.212.blacklist.spambag.org. X-RBL-Warning: SPAMCANNIBAL: "blocked, See: http://www.spamcannibal.org/cannibal.cgi?page=lookup <http://www.spamcannibal.org/cannibal.cgi?page=lookup&lookup=212.216.176.109 > &lookup=212.216.176.109" X-RBL-Warning: UCEPROTECT-1: "Sorry 212.216.176.109 is Level 1 listed at UCEPROTECT-NETWORK. See http://www.uceprotect.net/rblcheck.php?ipr=212.216.176.109"; X-RBL-Warning: UCEPROTECT-2: "Sorry 212.216.176.109 is Level 2 listed at UCEPROTECT-NETWORK. See http://www.uceprotect.net/rblcheck.php?ipr=212.216.176.109"; But 212.216.176.109 is a normail mailserver vsmtp21.tin.it and is trying to deliver mail from a "customer" to us. Have spammers won this race, can we no longer trust these databases? Is there a ip list with "all" legitimate mailservers for most ISP that I can use to reduce points? For the hotmail mailservers it was easy to reduce the points, it's a lot harder to do for all the other "real" mailservers. Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> / www.tio.nl <http://www.tio.nl> --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
