New SpamFilter build now supports SURBL
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5163
Printed Date: 05 February 2025 at 10:51am
Topic: New SpamFilter build now supports SURBL
Posted By: LogSat
Subject: New SpamFilter build now supports SURBL
Date Posted: 14 May 2005 at 5:10pm
|
Finally, after popular request, a new version of SpamFilter is available to support SURBL blacklists. Starting with version 2.5.2.454, SpamFilter will scan thru the entire email contents and extract all URLs embedded in the email. It then compares them with any user-specified SURBL blacklists (please go to http://www.surbl.org for a list) to see if any of them have been reported in spam. If so, the email is blocked. Please note that you will need to copy the file ccTLDs.txt in the zip file to the SpamFilter directory. As always, this version will automatically update the database to add the new blocked filter category. This latest version is available for download in the registered user area as a pre-release build as it's still being tested and is not yet officially released. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Replies:
Posted By: Dan B
Date Posted: 16 May 2005 at 1:19pm
|
Roberto, By entering the list servers of choice, are they same format as the other black lists? sc.surbl.org, true Thanks, Dan B |
Posted By: Guests
Date Posted: 16 May 2005 at 3:40pm
|
I entered my surbl as "multi.surbl.org" it's working based on log entries. I can't see it as a "reject" option in sawmill however - probally nees an update.
Dwight
|
Posted By: Desperado
Date Posted: 16 May 2005 at 7:06pm
|
The ini setting will look like the following: [SURBL] Regards, ------------- The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
Posted By: LogSat
Date Posted: 16 May 2005 at 11:20pm
|
Dan B., It's better to add the SURBL entries directly from SpamFilter's GUI, all that is needed is the list name, for ex: multi.surbl.org unlike the MAPS entries, there is no need to add a trailing "true" or "false" as SURBL has slightly different rules than MAPS. If you wish to edit the ini file directly, then Desperado has the right syntax! ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: _Eric
Date Posted: 17 May 2005 at 6:32am
|
anyone has this problem too ?
i had it but now it is back with version 454 : 05/17/05 12:29:52:594 -- (1608) Connection from: 194.109.24.33 - Originating country : Netherlands 05/17/05 12:29:52:719 -- (1608) Resolving 194.109.24.33 - smtp-vbr13.xs4all.nl 05/17/05 12:29:52:813 -- (1608) Mail from: Marjo@Burggolf.nl 05/17/05 12:29:53:969 -- (796) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 05/17/05 12:29:54:016 -- (796) Disconnect 05/17/05 12:29:54:125 -- (1232) - MAPS search done... 05/17/05 12:29:54:125 -- (1232) RCPT TO: paulus.groenendijk@grontmij.nl accepted 05/17/05 12:29:54:360 -- (1232) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 05/17/05 12:29:54:391 -- (1232) Disconnect 05/17/05 12:29:54:641 -- (1608) - MAPS search done... 05/17/05 12:29:54:641 -- (1608) RCPT TO: leo.hamers@grontmij.nl accepted 05/17/05 12:29:55:078 -- (1608) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 what might be the cause of it ? it is just upgraded from .441, and that ran rock solid .... |
Posted By: Guests
Date Posted: 17 May 2005 at 10:05am
|
Your new features include added support for the :Honeypot tag in some blacklists to automatically blacklist sender's IP if it triggers the blacklist entry. My question is where do the honeypot blacklisted addresses reside when triggered? I understand how to place a honeypot email address in the GUI, but I am not clear as to where spamfilter builds the honeypot blacklist. Can you help?
Dwight |
Posted By: Guests
Date Posted: 17 May 2005 at 11:57am
| The honeypot lists go in the honeypot themselves. You can add an email address and then it builds IP addresses under that email address. |
Posted By: Guests
Date Posted: 17 May 2005 at 2:41pm
|
2.5.2.454
Everything is working as advertised but since we switched to the above version, our Statistics are no updating properly.
If we have "Remember stats on restart" checked, the counts will increase for a few connections and then revert back to a previous number.
|
Posted By: Desperado
Date Posted: 17 May 2005 at 2:48pm
|
Harvey, This issue is a known issue and has been addressed in a "beta" that I am now testing. Logsat will post the update one they are sure it is both stable and working. Regards ------------- The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
Posted By: LogSat
Date Posted: 17 May 2005 at 4:56pm
|
_Eric, That exception error is occurring somewhere during the test of your *whitelisted* keywords (not the blacklist keywords), or so it seems at first sight from the logs. Could you verify that this is the case by disabling your whitelist keywords to see if the problem goes away? If so, we can pinpoint the issue and try to find out what the problem is. I'll be sending you a link via private message in the forum for the latest pre-release build. We've not released it on the registered user area as we're finalizing its testing, but I'd like to solve your issue before doing so. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: _Eric
Date Posted: 18 May 2005 at 4:30am
|
ok, thank you for the fast reply,
i am testing right now. 05/18/05 14:21:41:988 -- (1272) - MAPS search done... 05/18/05 14:21:41:988 -- (1272) RCPT TO: matt@kw-groep.nl accepted 05/18/05 14:21:42:504 -- (1272) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 005739E6 in module 'SpamFilter.exe'. Read of address 00000000 05/18/05 14:21:42:535 -- (1272) Disconnect well without any config file, exept the local domains the error remains, the refresh database error while using the access database is fixed in 455.... could you please explain what kind of error it is ? it looks like some kind of timer function between the rcpt to and data <.> which has an incorrect function or timeout, not to worry, i am using the stable old version again. |
Posted By: _Eric
Date Posted: 18 May 2005 at 3:42pm
|
my crashing spamfilter config runs fine on another server,
it must be hardware related, and again its a dell 2850 .... this is not the first time i see spamfilter run crappy/buggy on a dell... sorry to bother, the fault is on my side / dell |
Posted By: Guests
Date Posted: 18 May 2005 at 4:33pm
|
Eric, Mine is running fine on a Dell 2650.
Dwight |
Posted By: LogSat
Date Posted: 18 May 2005 at 4:40pm
|
Eric, We output those "weird" numbers in the log as it helps pinpointing the code where the error occurred. In this case, with your latest address location "005739E6", we were able to pinpoint the code wehre this happened, and it indeed is during the keyword check. What is *very* strange is that if you configured SpamFilter not to use the whitelist keyword file then this code should never be executed, so it's still a bit of a mistery to us... If you can zip and send us your SpamFilter.ini and your local blacklist/whitelist keywords we'll take another look to make sure it's not software-related. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: _Eric
Date Posted: 18 May 2005 at 5:00pm
|
please note it runs *fine* on a 2650 but not on a 2850,
its another model. i`ll try to remove all txt files completely, and if the error doesn`t occur, thats the case. i also see some weird circumstances that the dell tools and apps use an dell compiled version of comsvcs, the other 2650 server is plain installed, the 2850 was oem pre installed by dell. |
Posted By: _Eric
Date Posted: 19 May 2005 at 9:44am
|
the problem is solved, after a format of the server, and an install by myself, spamfilter runs fine.
there is a dll conflict with the default openmanage en drac files from dell, which overwrite the ms$ default files, and spamfilter behaves weird. i reinstalled all dell software and the problem is back. easy as dell.... solution : format your dell, and do what you had to do when it came out the box, format it and reinstall windows as/by default. i cannot see which files, because it`s a closed exe and msi file from dell. |
Posted By: Guests
Date Posted: 19 May 2005 at 10:13am
|
Just some feeback on this new release. Between the honeypot and the surbl features we have been able to clean up a lot of spam that was getting through the filters. As system administrator I get non-delivery report notices. When I see NDR's to invalid email addressses where it is apparent that someone was fishing for valid email addresses -- I add that email address to the honeypot. Dwight |
Posted By: Guests
Date Posted: 06 July 2005 at 7:26am
| There is no ccTLDs.txt in the spamfilter.zip file |
Posted By: LogSat
Date Posted: 06 July 2005 at 7:59pm
|
Ronny, Can you please let us know which version/build of SpamFilter you downloaded? ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Guests
Date Posted: 15 July 2005 at 10:07am
|
Hi I downloaded v.2.5.2.457 (registered) Also, I am trying to delete mails rejected by the surbl filter, but the checkbox "check" dissapears when I try to save the "do not quarantene emails from this blacklist (surbl)
|
Posted By: LogSat
Date Posted: 15 July 2005 at 11:17pm
|
Ronny, That bug has been patched in subsequent pre-release versions available in the registered user area. We'll be releasing a new official version of SpamFilter within the next few days. The release notes pertaining to the problem you reported are as follows: // New to VersionNumber = '2.5.2.459'; {TODO -cFix : SURBL Do Not Quarantine setting was saving, but the mail was still not being quarantined} // New to VersionNumber = '2.5.2.458'; {TODO -cFix : Could save the SURBL Do Not Quarantine setting} {TODO -cFix : Could not empty the SURBL list, the default multi.surbl.org list was re-added automatically} {TODO -cFix : AutoWhiteList was not always case-insensitive} ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Guests
Date Posted: 22 July 2005 at 6:45am
Thanks, I am running pre release now and all is well 
|
Posted By: Desperado
Date Posted: 29 April 2006 at 10:43am
|
Spam an Anti-Spam forum? How freaking stupid can you possibly be? I support capital punishment for Spammers. Oh ... and BTW ... your url has been added to my SUBL List. ------------- The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
Posted By: hank_freid
Date Posted: 03 April 2008 at 12:57am
|
I have been using v.2.5.2.457 for 3 months and i found it very nice. there are also other versions from different Software Houses but v.2.5.2.457 is the best. ------------- the developer http://www.hank-freid.com - hank freid redefines the chic hotel experince |
Posted By: jerbo128
Date Posted: 03 April 2008 at 7:56pm
| Version 4.x.x.x is the best. Quit being so cheap and buy it! You won't regret. |