Re: [Declude.JunkMail] image spam

2006-05-05 Thread Nick Hayer
Sanford Whiteman wrote: In keeping with the increased CPU demands of such tests, the new version of SPAMC32 will contain the ability to send the request to two (maybe more than two in future) tiered SPAMD daemons. The second daemon -- listening on a different port, or on a different

RE: [Declude.JunkMail] 4.2.3 and an increase in passing spam

2006-05-05 Thread mhiltner
Does declude treat mail to an IMAIL alias any different than a true account? I just noticed that the mails which appear to slip past some or all testing are aliases. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, May

[Declude.JunkMail] Spam referencing sites hosted in China

2006-05-05 Thread Dave Beckstrom
We're getting an annoying amount of Viagra spam which currently contain a link to one of these two sites: lanseislan.com cessofanne.com Both domains resolve to 61.233.42.4 which is owned by CHINA RAILWAY TELECOMMUNICATIONS CENTER The source of the spam is coming from IPs in Italy and

Re: [Declude.JunkMail] Spam referencing sites hosted in China

2006-05-05 Thread Matt
Yes, and places like SBL do in fact list the IP's of spam sites for this very purpose. Unfortunately there is no list dedicated to this classification of IP's and mixing in spam source IP's with website IP's is not universally accurate so it has to be scored lower and combo'd with other

Re: [Declude.JunkMail] Spam referencing sites hosted in China

2006-05-05 Thread Darrell \([EMAIL PROTECTED])
Dave, One of the tests in invURIBL does exactly that. Resolves the IP address and checks them against various RBL's. You can even configure additional RBL checks for the IP against other RBL's. This is how invURIBL is handled that domain on our server today. (Sorry for any wrap).

RE: [Declude.JunkMail] Spam referencing sites hosted in China

2006-05-05 Thread John T \(Lists\)
invURIBL checks the body for URLs. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Friday, May 05, 2006 11:31 AM To: Declude.JunkMail@declude.com Subject: