This is also particularly hurtful when a zombie sends E-mail through one of these servers. I almost never see SpamCop blocking big ISP mail servers, but I see zombies relaying through ISP mail servers every day.
This would actually be a good candidate for a combination test. You could disable SpamCop when it also hit AHBL-GOOD with a net score of 0, but not credit AHBL-GOOD otherwise. Of course, SpamCop could just fix their issues with ISP mail servers. Who knows, maybe their stance is to force ISP's into active defenses against zombies relaying through them???
Matt
Colbeck, Andrew wrote:
I'd recommend all of them but FIVETEN-MULTISTAGE. Always start with a very low weight, like 1. Then evaluate them in your own environment; my results may be interesting, but it's yours that you care about.
I also recommend AHBL-EXEMPTIONS as a whitelisting test, e.g.
AHBL-GOOD ip4r exemptions.ahbl.org 127.0.0.2 -5 0
To reward "known good" servers (whic isn't to say that NO spam comes from them, but does indicate that the baby shouldn't be thrown out with the bathwate).
This is particularly helpful, for example, if SpamCop lists an AOL outbound mail server.
Andrew 8)
-----Original Message-----
From: Brian T [mailto:[EMAIL PROTECTED] Sent: Thursday, January 15, 2004 1:24 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Question about Some Spam Tests
I recently came across the following tests and was wondering if anybody else was using these tests?
What your thoughts are of these tests?
And what kind of results you have received from these tests?
The test are as follows:
AHBL-RELAYS AHBL-PROXIES AHBL-SOURCES AHBL-PROVISIONAL AHBL-FORMMAIL AHBL-DUL
FIVETEN-SPAM FIVETEN-BULK FIVETEN-MULTISTAGE FIVETEN-SPAMSUPPORT FIVETEN-MISC
NJABL-DYNABLOCK NJABL-RELAYS NJABL-DUL NJABL-SOURCES NJABL-MULTI NJABL-FORMMAIL NJABL-PROXIES
Thank you for your time.
Brian Thompson Online Services
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
