RE: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Andy Schmidt
The replacements that I'm using are marked up red with the results for the
last few hours.

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.


Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0

With?
>

<>

RE: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Andy Schmidt
Hm - may be this list doesn't support HTML mail (or doesn't support
attachments), here is that screen shot again, this time as a BMP file.

The replacements that I'm using are marked up red with the results for the
last few hours

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Wednesday, August 27, 2003 11:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY Replacement question.


Here is the replacements that I'm using (marked up red) with the results for
the last few hours:

 



Best Regards
Andy Schmidt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.


Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0

With?
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.


[280K attachment removed]


RE: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread R. Scott Perry

Hm - may be this list doesn't support HTML mail (or doesn't support
attachments), here is that screen shot again, this time as a BMP file.
The problem is that you are trying to send a 250K attachment, which is 
clogging up our Internet connection.  Perhaps you could convert it to a 
small .jpg file?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread [EMAIL PROTECTED]
Anyone have the command line to use SPEWS?

Thanks,

Todd



At 01:07 PM 8/27/2003 -0400, you wrote:
And here's my newly edited file:

DSBLip4rlist.dsbl.org*50
MONKEYPROXIESip4rproxies.relays.monkeys.com   *
50
ORDBip4rrelays.ordb.org*40
SPAMCOPip4rbl.spamcop.net127.0.0.2100
EASYNET-DNSBLip4rblackholes.easynet.nl127.0.0.2
70
EASYNET-PROXIESip4rproxies.blackholes.easynet.nl
127.0.0.2 70
FIVETEN-SPAMip4rblackholes.five-ten-sg.com127.0.0.2
50
FIVETEN-BULKip4rblackholes.five-ten-sg.com127.0.0.4
100
FIVETEN-MULTISTAGEip4rblackholes.five-ten-sg.com127.0.0.5
50
FIVETEN-SPAMSUPPORTip4rblackholes.five-ten-sg.com
127.0.0.750
FIVETEN-MISCip4rblackholes.five-ten-sg.com127.0.0.9
70
BLITZEDALLip4ropm.blitzed.org*70
SBLip4rsbl.spamhaus.org127.0.0.2100
MONKEYFORMMAILip4rformmail.relays.monkeys.com*40
FIVETEN-SINGLESTAGEip4rblackholes.five-ten-sg.com
127.0.0.650
FIVETEN-FREEip4rblackholes.five-ten-sg.com127.0.0.12
50
MAILPOLICE-BULKrhsblbulk.rhs.mailpolice.com
127.0.0.2100
MAILPOLICE-PORNrhsblporn.rhs.mailpolice.com
127.0.0.2100
DSNrhsbldsn.rfc-ignorant.org127.0.0.210
NOABUSErhsblabuse.rfc-ignorant.org127.0.0.4
10
NOPOSTMASTERrhsblpostmaster.rfc-ignorant.org127.0.0.3
10
BONDEDSENDERip4rquery.bondedsender.org127.0.0.10
-200
BADHEADERSbadheadersxx30
BASE64base64xx30
HELOBOGUShelovalidxx50
MAILFROMenvfromxx70
IPNOTINMXipnotinmxxx0-2
PERCENTpercentxx20
#REVDNSrevdnsexistsxx00
ROUTINGspamroutingxx70
SPAMHEADERSspamheadersxx50
ALLIGATEexternalnonzero"C:\IMail\Alligate\NoXMail.exe"30
#SNIFFERexternalnonzero"C:\IMail\Declude\Sniffer\sniffer.exe 
authentication"70
#CATCHALLMAILScatchallmailsxx00

WEIGHT10weightxx100



Andy Schmidt wrote:

Here is the replacements that I'm using (marked up red) with the results for
the last few hours:


Best Regards
Andy Schmidt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.
Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0
With?



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Mark Smith
The fact that SPEWS is gone is not a bad thing!



> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Matthew Bramble
> Sent: Wednesday, August 27, 2003 1:11 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] OSRELAY Replacement question.
> 
> 
> Let me also correct one thing.  I mentioned SPEWS as an 
> alternative to 
> Osirusoft, but that one also comes from their servers :)  In 
> otherwords, 
> don't use that either (as noted in Hank's recent message).
> 
> Matt
> 
> 
> 
> Andy Schmidt wrote:
> 
> >Here is the replacements that I'm using (marked up red) with the 
> >results for the last few hours:
> >
> > 
> >
> >
> >
> >Best Regards
> >Andy Schmidt
> >
> >
> >-Original Message-
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
> >Sent: Wednesday, August 27, 2003 09:44 AM
> >To: [EMAIL PROTECTED]
> >Subject: RE: [Declude.JunkMail] OSRELAY question.
> >
> >
> >Anyone have any recommendations on what to replace:
> >
> >#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
> >5   0
> >#OSFORM ip4rrelays.osirusoft.com127.0.0.8
> >5   0
> >#OSLIST ip4rrelays.osirusoft.com127.0.0.7
> >5   0
> >#OSRELAYip4rrelays.osirusoft.com
> >127.0.0.2   5   0
> >#OSSMARTip4rrelays.osirusoft.com
> >127.0.0.5   5   0
> >#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
> >5   0
> >#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
> >5   0
> >
> >With?
> >  
> >
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the 
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Andy Schmidt
Here is the replacements that I'm using (marked up red) with the results for
the last few hours:

 



Best Regards
Andy Schmidt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.


Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0

With?
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.


[280K attachment removed]


Re: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Matthew Bramble
Let me also correct one thing.  I mentioned SPEWS as an alternative to 
Osirusoft, but that one also comes from their servers :)  In otherwords, 
don't use that either (as noted in Hank's recent message).

Matt



Andy Schmidt wrote:

Here is the replacements that I'm using (marked up red) with the results for
the last few hours:




Best Regards
Andy Schmidt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.
Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0
With?
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Matthew Bramble
And here's my newly edited file:

DSBLip4rlist.dsbl.org*50
MONKEYPROXIESip4rproxies.relays.monkeys.com   *
50
ORDBip4rrelays.ordb.org*40
SPAMCOPip4rbl.spamcop.net127.0.0.2100
EASYNET-DNSBLip4rblackholes.easynet.nl127.0.0.2 
70
EASYNET-PROXIESip4rproxies.blackholes.easynet.nl
127.0.0.2 70
FIVETEN-SPAMip4rblackholes.five-ten-sg.com127.0.0.2
50
FIVETEN-BULKip4rblackholes.five-ten-sg.com127.0.0.4
100
FIVETEN-MULTISTAGEip4rblackholes.five-ten-sg.com127.0.0.5
50
FIVETEN-SPAMSUPPORTip4rblackholes.five-ten-sg.com
127.0.0.750
FIVETEN-MISCip4rblackholes.five-ten-sg.com127.0.0.9
70
BLITZEDALLip4ropm.blitzed.org*70
SBLip4rsbl.spamhaus.org127.0.0.2100

MONKEYFORMMAILip4rformmail.relays.monkeys.com*40
FIVETEN-SINGLESTAGEip4rblackholes.five-ten-sg.com
127.0.0.650
FIVETEN-FREEip4rblackholes.five-ten-sg.com127.0.0.12
50

MAILPOLICE-BULKrhsblbulk.rhs.mailpolice.com
127.0.0.2100
MAILPOLICE-PORNrhsblporn.rhs.mailpolice.com
127.0.0.2100
DSNrhsbldsn.rfc-ignorant.org127.0.0.210
NOABUSErhsblabuse.rfc-ignorant.org127.0.0.4
10
NOPOSTMASTERrhsblpostmaster.rfc-ignorant.org127.0.0.3
10

BONDEDSENDERip4rquery.bondedsender.org127.0.0.10
-200

BADHEADERSbadheadersxx30
BASE64base64xx30
HELOBOGUShelovalidxx50
MAILFROMenvfromxx70
IPNOTINMXipnotinmxxx0-2
PERCENTpercentxx20
#REVDNSrevdnsexistsxx00
ROUTINGspamroutingxx70
SPAMHEADERSspamheadersxx50
ALLIGATEexternalnonzero"C:\IMail\Alligate\NoXMail.exe"30
#SNIFFERexternalnonzero"C:\IMail\Declude\Sniffer\sniffer.exe 
authentication"70
#CATCHALLMAILScatchallmailsxx00

WEIGHT10weightxx100



Andy Schmidt wrote:

Here is the replacements that I'm using (marked up red) with the results for
the last few hours:




Best Regards
Andy Schmidt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.
Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0
With?
 



Re: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread xavier monvoisin
I can't see your replacement suggestion 
Best regards
Xavier

- Original Message - 
From: "Andy Schmidt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 27, 2003 5:51 PM
Subject: RE: [Declude.JunkMail] OSRELAY Replacement question.


> Here is the replacements that I'm using (marked up red) with the results
for
> the last few hours:
>
>
>
>
>
> Best Regards
> Andy Schmidt
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
> Sent: Wednesday, August 27, 2003 09:44 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] OSRELAY question.
>
>
> Anyone have any recommendations on what to replace:
>
> #OSDUL  ip4rrelays.osirusoft.com127.0.0.3
> 5   0
> #OSFORM ip4rrelays.osirusoft.com127.0.0.8
> 5   0
> #OSLIST ip4rrelays.osirusoft.com127.0.0.7
> 5   0
> #OSRELAYip4rrelays.osirusoft.com
> 127.0.0.2   5   0
> #OSSMARTip4rrelays.osirusoft.com
> 127.0.0.5   5   0
> #OSSOFT ip4rrelays.osirusoft.com127.0.0.6
> 5   0
> #OSSRC  ip4rrelays.osirusoft.com127.0.0.4
> 5   0
>
> With?
> >
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
> Declude.JunkMail".  The archives can be found at
> http://www.mail-archive.com.
>
>
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OSRELAY Replacement question.

2003-08-27 Thread Matthew Bramble
FYI Andy, Netscape 7's mail program can't see your information 
(winmail.dat problem).

Regarding the discussion, I included several of the FIVETEN tests a few 
months back when I saw that Ipswitch was including them in their default 
configuration file (figured this would help that source's popularity and 
effectiveness).  I've found them to be over-zealous though so I don't 
score them high (they have tagged this discussion group with their 
FIVETENSPAM test, and FIVETENSPAMSUPPORT was blocking Yahoo/SBC 
customers).  FIVETEN has a few tests that work well with others because 
they apparently don't replicate blocks, but they don't hardly catch 
anything.  The ones that score the most hits are FIVETENSPAM, 
FIVETENSPAMSUPPORT, and FIVETENBULK, the others are hardly a blip..

I think you can search Scott's DNS-based test page for replacements for 
each of the individual Osirusoft tests by searching for commonalties in 
the descriptions.   I'm thinking that BLITZED, DSBL, SBL, MAILPOLICE, 
EASYNET and MONKEYPROXIES, which I am currently using, replicate most of 
the Osirusoft tests, so increasing the scores a little or maybe leaving 
them alone might be a good choice for me.

My stats from the 20th show that the OSPROXY and OSSRC Osirusoft tests 
were the most common flunked, but none really made big numbers, and the 
others hardly made an impact (less than 1%).  So increasing the scores 
of other proxy tests by a few points might handle OSPROXY and OSSRC was 
noted to be very similar to SPEWS, or maybe use the FIVETEN tests that I 
noted above, but score low.

Matt



Andy Schmidt wrote:

Here is the replacements that I'm using (marked up red) with the results for
the last few hours:




Best Regards
Andy Schmidt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.
Anyone have any recommendations on what to replace:

#OSDUL  ip4rrelays.osirusoft.com127.0.0.3
5   0
#OSFORM ip4rrelays.osirusoft.com127.0.0.8
5   0
#OSLIST ip4rrelays.osirusoft.com127.0.0.7
5   0
#OSRELAYip4rrelays.osirusoft.com
127.0.0.2   5   0
#OSSMARTip4rrelays.osirusoft.com
127.0.0.5   5   0
#OSSOFT ip4rrelays.osirusoft.com127.0.0.6
5   0
#OSSRC  ip4rrelays.osirusoft.com127.0.0.4
5   0
With?