As many of you know, I do front end spam filtering and I block a lot of
spam. I have been feeding some of this blocked spam to others who can
use it to mine for information like IPs to block, virus infected hosts,
URIBL etc. I also have several feeds as to what kind of spam you want
and I add headers storing the IP address and host name of the server
that sent it to me.
If you are running a service that provides free services to the world I
will give you this data for free. If you are a commercial filtering
business that doesn't provide free services to the world then I have
these feeds for sale. Several of the blacklists some of you already use
gets spam from me. I hate spam and want to help fight it.
I have 3 feeds. One feed is spambots and can be used for blacklisting IP
addresses. The next feed is general spam that can be mined for URIBL
lists or other content based information. The third feed is phishing
which is people trying to impersonate banks.
I deliver these feeds by email in real time so you would need to have
the capacity to receive a lot of email.
So - if anyone is interested in my feeds let me know and I can set you up.
Also - I have 3 public DNS lists that people can use.
http://wiki.ctyme.com/index.php/Spam_DNS_Lists
The black list are IPs that you can just block. The white list are IPs
that you can just pass. The yellow list are IP addresses of mixed source
hosts like yahoo, hotmail. aol and others that if they are on this list
you should skip all other white list or black list testing.
Here's some code.
header __RCVD_IN_JMFILTER
eval:check_rbl('JMFILTER','hostkarma.junkemailfilter.com.')
describe __RCVD_IN_JMFILTER Sender listed in JMFILTER
tflags __RCVD_IN_JMFILTER net
header RCVD_IN_JMFILTER_W eval:check_rbl_sub('JMFILTER', '127.0.0.1')
describe RCVD_IN_JMFILTER_W Sender listed in JMFILTER-WHITE
tflags RCVD_IN_JMFILTER_W net nice
score RCVD_IN_JMFILTER_W -5
header RCVD_IN_JMFILTER_B eval:check_rbl_sub('JMFILTER', '127.0.0.2')
describe RCVD_IN_JMFILTER_B Sender listed in JMFILTER-BLACK
tflags RCVD_IN_JMFILTER_B net
score RCVD_IN_JMFILTER_B 4.0
I also have raw IP list text files of these lists. Contact me privately
if you want them. And I'm also looking for large ISPs to do cooperative
work with or do consulting on advanced ways to block spam and reduce the
load SpamAssassin puts on your servers.
Marc Perkel
http://www.junkemailfilter.com
