Spam Filter ISP Forums : SFDB not as effective? https://www.logsat.com/spamfilter/forums/ Sat, 13 Jun 2026 08:56:12 +0000 Thu, 29 Nov 2007 14:19:39 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6309 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[SFDB not as effective? : Desperado, Would you mind sending...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11224&title=sfdb-not-as-effective#11224 Author: jerbo128
Subject: 6309
Posted: 29 November 2007 at 2:19pm

Desperado,
 
Would you mind sending me a screenshot of your SF Admin page?  I am always looking for cool ideas.  jerbo128 / hotmail
 
Thanks
 
Jeremy
]]> Thu, 29 Nov 2007 14:19:39 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11224&title=sfdb-not-as-effective#11224 <![CDATA[SFDB not as effective? : My admin interface does a zillion...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11223&title=sfdb-not-as-effective#11223 Author: Desperado
Subject: 6309
Posted: 29 November 2007 at 12:23pm

My admin interface does a zillion SQL queries and formats the results.  This is a cut from that page.

]]> Thu, 29 Nov 2007 12:23:30 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11223&title=sfdb-not-as-effective#11223 <![CDATA[SFDB not as effective? : How did you pull this up, Desperado? ...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11221&title=sfdb-not-as-effective#11221 Author: Stupid
Subject: 6309
Posted: 29 November 2007 at 12:13pm

How did you pull this up, Desperado?]]> Thu, 29 Nov 2007 12:13:38 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11221&title=sfdb-not-as-effective#11221 <![CDATA[SFDB not as effective? : Lee, I do not recall saying...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11219&title=sfdb-not-as-effective#11219 Author: Desperado
Subject: 6309
Posted: 29 November 2007 at 11:15am

Lee,
 
I do not recall saying anything about 25% but the blocking stats are about the same as "normal". Below is our normal breakout.
 
Current Msg. total:124,442Marked for deletion:149
No Reverse DNS:13,802MX Record Fail:4,874
SPF Fail:2,333IP in MAPS B/L:69,539
Exc'd max RCPT TO:1,821Banned Keywords:2,996
Email From B/L:1,060Email TO B/L:0
Domain B/L:7IP B/L:40
Banned Attachment:2Unident/Banned Country:312
Bayesian Filter:0Anti-Virus Filter:200
HonyPot Filter:1SURBL Filter:9,472
Image Signature:30SFDB Filter:17,969
Empty w/ Attachment:1Max Subject Spaces20
]]> Thu, 29 Nov 2007 11:15:27 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11219&title=sfdb-not-as-effective#11219 <![CDATA[SFDB not as effective? : Mine is only 4%. Majority of them...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11218&title=sfdb-not-as-effective#11218 Author: Stupid
Subject: 6309
Posted: 29 November 2007 at 10:58am

Mine is only 4%. Majority of them (>90%) are caught by Honeypot.]]> Thu, 29 Nov 2007 10:58:23 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11218&title=sfdb-not-as-effective#11218 <![CDATA[SFDB not as effective? : It&#039;s returning the right...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11215&title=sfdb-not-as-effective#11215 Author: Lee_H
Subject: 6309
Posted: 28 November 2007 at 6:17pm

It's returning the right IP.
 
The only change I've made in many months is to put in sfdb.logsat.com instead of an IP in the ini file!
 
If I understand you, your are seeing 25% caught by SFDB too?
]]> Wed, 28 Nov 2007 18:17:38 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11215&title=sfdb-not-as-effective#11215 <![CDATA[SFDB not as effective? : Lee, FYI ... I just looked...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11211&title=sfdb-not-as-effective#11211 Author: Desperado
Subject: 6309
Posted: 28 November 2007 at 11:25am

Lee,
 
FYI ... I just looked at my SpamFilter stats for the last 30 days and see nearly the exact same percentage of blocks by the SFDB with the exception of Nov-9 (way higher due to several spam attacks).  Did you change any of your SFDB options?
]]> Wed, 28 Nov 2007 11:25:22 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11211&title=sfdb-not-as-effective#11211 <![CDATA[SFDB not as effective? : Lee,Only the hosting facility...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11209&title=sfdb-not-as-effective#11209 Author: LogSat
Subject: 6309
Posted: 28 November 2007 at 10:44am

Lee,

Only the hosting facility has changed, not the rules. As you can see, we still have on average between 300 and 500 thousand IPs blacklisted at anytime.
Can you please try to ping, from the server running SpamFilter, the address:

sfdb.logsat.com

and ensure it returns 66.181.198.something
and not the old addresses 209.26.140.something

]]> Wed, 28 Nov 2007 10:44:04 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11209&title=sfdb-not-as-effective#11209 <![CDATA[SFDB not as effective? : This past week it seems that the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11206&title=sfdb-not-as-effective#11206 Author: Lee_H
Subject: 6309
Posted: 28 November 2007 at 10:03am

This past week it seems that the SFDB is far less effective then it used to be! In the past That feature caught the majority of Spam (2/3) now it only accounts for 1/4, how come? I know you changed your server location but have you changed the rules? If so, how can I get them back?
 
Also, the listed IP's in the config is close to whats on your site here....
 
Lee
]]> Wed, 28 Nov 2007 10:03:58 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6309&PID=11206&title=sfdb-not-as-effective#11206