At 11:30 AM -0500 1/8/04, Timothy Binder wrote:
>Also, I'm using many of the standard blacklist servers discussed on this list. I
>started small, but kept adding more as spam slipped through. At this point, the only
>major one I'm not using is spamcop & it's getting awfully tempting to start using it,
>despite the warnings I recall from this list. Can I get some current opinions on this
>list?
Hi Tim,
I use spamcop, currently near the bottom of my list, and have very little false alarms
from it. When spam gets through my other filters, especially the ones that my e-mail
client doesn't catch, I always report it to spamcop. This is a pretty mechanical
process that I can do in the morning without a lot of thinking. The neat thing about
this is that then the spamcop blacklist will be more likely to start blocking that
address for a while using it's dynamic blocking. I encourage other users to do the
same.
As far as manual blacklists, when I have more time & energy I scan through my SIMS
logs and pick out harversters, adding them to my manual blacklist since they never
appear as spams to report to spamcop. You can catch it by seeing the pattern in "bad
address" rejections from a dictionary attack, or (when it comes from a single IP) you
can look for SIMS' "tempban" notice.
- Paul
p.s. I have a small user base and almost all of them encourage me to be pretty
aggressive when I have the time/energy. The ones who don't like it I whitelist and
instead educate them about the junk filtering features of their local client software
as a final line of defense. Works for me but I can see how those of you who have a
more diverse user base might have to be a lot more conservative about which block
lists you use. I particularly like the spamhaus lists and anything from list guru
Bill Cole (although I don't need to be as conservative as he usually advocates),
including his own manual blacklist (read his caveats before using it!!!!).
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
