Re: EmailBL plugin released

2009-05-20 Thread Justin Mason
On Tue, May 19, 2009 at 13:24, Steve Freegard wrote: > Justin Mason wrote: >> http://ruleqa.spamassassin.org/20090516-r775436-n/T_EMAILBL_TEST_LEM/detail > > Would be interesting to see if the 5 ham hits really were ham or whether > they were accidentally misclassified and what the e-mail address

Re: EmailBL plugin released - I like it!

2009-05-19 Thread Jesse Thompson
Yet Another Ninja wrote: from the descriptions you are using, you are speaking about a totally different BL... this is not the one "in googlegroups". ah, my bad. I didn't know that the term 'EmailBL' was used generically. Jesse -- Jesse Thompson Division of Information Technology, Univer

Re: EmailBL plugin released - I like it!

2009-05-19 Thread Yet Another Ninja
On 5/19/2009 4:02 PM, Jesse Thompson wrote: Henrik K wrote: First we should test if there actually are such FPs and not speculate. ;) There are FPs by nature. Some of the accounts are legitimate accounts co-opted by spammers to send the phishing attempts to compromise more accounts. Use t

Re: EmailBL plugin released - I like it!

2009-05-19 Thread Jesse Thompson
Henrik K wrote: First we should test if there actually are such FPs and not speculate. ;) There are FPs by nature. Some of the accounts are legitimate accounts co-opted by spammers to send the phishing attempts to compromise more accounts. Use the list with caution, and pay attention to th

Re: EmailBL plugin released

2009-05-19 Thread Steve Freegard
Justin Mason wrote: > http://ruleqa.spamassassin.org/20090516-r775436-n/T_EMAILBL_TEST_LEM/detail Would be interesting to see if the 5 ham hits really were ham or whether they were accidentally misclassified and what the e-mail address was. Cheers, Steve.

Re: EmailBL plugin released

2009-05-19 Thread Justin Mason
http://ruleqa.spamassassin.org/20090516-r775436-n/T_EMAILBL_TEST_LEM/detail --j. On Tue, May 12, 2009 at 15:54, Justin Mason wrote: > I've added it to SVN for testing -- my sandbox for now, but I'll move > it to Alex's once his acct is set up ;) > > is there a test entry for this zone? > > --j.

Re: EmailBL plugin released

2009-05-14 Thread Marc Perkel
I would like to offer my help for your project. So far it's working well. I can offer you any of the following: Data - I have tons of spam if you need to harvest data. Computers - I have a lot of processing power if you need a VPS. Bandwidth - I have some bandwidth to spare rbldnsd servers - I c

Re: EmailBL plugin released - I like it!

2009-05-13 Thread Charles Gregory
On Wed, 13 May 2009, Henrik K wrote: Still no description of how an address is chosen for inclusion in the RBL blacklist itself. Still wouldn't mind knowing this, unless you fear it would sharing a secret with spammers that they could use to get around this test... First we should test if ther

Re: EmailBL plugin released - I like it!

2009-05-13 Thread Henrik K
On Tue, May 12, 2009 at 05:23:07PM -0400, Charles Gregory wrote: > > Still no description of how an address is chosen for inclusion in > the RBL blacklist itself. Particularly where the (often forged) > "From" header is being used, how does the list avoid FP's? First we should test if there actual

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Charles Gregory
On Tue, 12 May 2009, Yet Another Ninja wrote: Oh.. you must have skipped the first 52 lines of EmailBL.pm No I can *now* see the two lines that say where the module gathers addresses from. If they were there before, my apologies. But I read that section of the module pretty closely. St

Re: EmailBL plugin released

2009-05-12 Thread Henrik K
On Tue, May 12, 2009 at 04:47:25PM +0200, Wolfgang Zeikat wrote: > Hi > > On 05/12/2009 11:20 AM, Henrik K wrote: >> http://sa.hege.li/EmailBL.pm (see inside for documentation) > > ### About: > # > # This plugin creates rbl style DNS lookups for emails. > > does this plugin handle emails in the se

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Yet Another Ninja
On 5/12/2009 5:45 PM, Charles Gregory wrote: I haven't been following the long thread about this plugin. When I followed the links and examined the code/docs, I found that I really didn't have a sense of WHAT this plugin does. At first I thought it was checking for spam 'reply' e-mail addresses

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Charles Gregory
I haven't been following the long thread about this plugin. When I followed the links and examined the code/docs, I found that I really didn't have a sense of WHAT this plugin does. At first I thought it was checking for spam 'reply' e-mail addresses within the body of an e-mail (the often used

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Yet Another Ninja
On 5/12/2009 5:37 PM, Charles Gregory wrote: On Tue, 12 May 2009, Marc Perkel wrote: > Here's how you do it in Exim your idea is a has a MASSIVE drawback. It queries the mailbl for EVERY address... That's not the whole code that I'm using. I'm just demonstrating the concept of how you would

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Charles Gregory
On Tue, 12 May 2009, Marc Perkel wrote: > Here's how you do it in Exim your idea is a has a MASSIVE drawback. It queries the mailbl for EVERY address... That's not the whole code that I'm using. I'm just demonstrating the concept of how you would make it usable from Exim. I have a lot of othe

Re: EmailBL plugin released

2009-05-12 Thread Yet Another Ninja
On 5/12/2009 5:02 PM, Marc Perkel wrote: Do you need more mirrors? I can offer you 4 additional servers. This is all a proof of concept thing and nobody knows what the outcome may be. This zone will disappear in +- 30 days. and unless the mirrors complain that the load is rising a lot, I d

Re: EmailBL plugin released

2009-05-12 Thread Marc Perkel
Do you need more mirrors? I can offer you 4 additional servers. Henrik K wrote: Hi, EmailBL plugin is now available for testing. Small test zone has been running for a while, it contains trapped addresses from some of the most popular freemail domains. http://sa.hege.li/EmailBL.pm (see inside

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Marc Perkel
Yet Another Ninja wrote: On 5/12/2009 4:32 PM, Marc Perkel wrote: I'm not using your plugin yet but using it from Exim instead and it's working well. Lots of hist. I suppose we'll find out if there's any false positives. Here's how you do it in Exim set acl_c_from_address = ${lc:${address:

Re: EmailBL plugin released

2009-05-12 Thread Justin Mason
I've added it to SVN for testing -- my sandbox for now, but I'll move it to Alex's once his acct is set up ;) is there a test entry for this zone? --j. On Tue, May 12, 2009 at 11:26, Yet Another Ninja wrote: > On 5/12/2009 11:20 AM, Henrik K wrote: >> >> Hi, >> >> EmailBL plugin is now availabl

Re: EmailBL plugin released

2009-05-12 Thread Wolfgang Zeikat
Hi On 05/12/2009 11:20 AM, Henrik K wrote: http://sa.hege.li/EmailBL.pm (see inside for documentation) ### About: # # This plugin creates rbl style DNS lookups for emails. does this plugin handle emails in the sense of "email addresses"? Or does it make md5hashes of emails in the sense of "

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Yet Another Ninja
On 5/12/2009 4:32 PM, Marc Perkel wrote: I'm not using your plugin yet but using it from Exim instead and it's working well. Lots of hist. I suppose we'll find out if there's any false positives. Here's how you do it in Exim set acl_c_from_address = ${lc:${address:$h_From:}} set acl_c_from_ad

Re: EmailBL plugin released - I like it!

2009-05-12 Thread Marc Perkel
I'm not using your plugin yet but using it from Exim instead and it's working well. Lots of hist. I suppose we'll find out if there's any false positives. Here's how you do it in Exim set acl_c_from_address = ${lc:${address:$h_From:}} set acl_c_from_address_hash = ${md5:$acl_c_from_address} dn

Re: EmailBL plugin released

2009-05-12 Thread Yet Another Ninja
On 5/12/2009 11:20 AM, Henrik K wrote: Hi, EmailBL plugin is now available for testing. Small test zone has been running for a while, it contains trapped addresses from some of the most popular freemail domains. http://sa.hege.li/EmailBL.pm (see inside for documentation) http://sa.hege.li/Emai

EmailBL plugin released

2009-05-12 Thread Henrik K
Hi, EmailBL plugin is now available for testing. Small test zone has been running for a while, it contains trapped addresses from some of the most popular freemail domains. http://sa.hege.li/EmailBL.pm (see inside for documentation) http://sa.hege.li/EmailBL.cf (contains the test zone) http://