New SpamFilter build now supports SURBL |
Post Reply 
|
| Author | |
LogSat 
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: New SpamFilter build now supports SURBLPosted: 14 May 2005 at 5:10pm |
|
Finally, after popular request, a new version of SpamFilter is available to support SURBL blacklists.
Starting with version 2.5.2.454, SpamFilter will scan thru the entire email contents and extract all URLs embedded in the email. It then compares them with any user-specified SURBL blacklists (please go to http://www.surbl.org for a list) to see if any of them have been reported in spam. If so, the email is blocked. Please note that you will need to copy the file ccTLDs.txt in the zip file to the SpamFilter directory. As always, this version will automatically update the database to add the new blocked filter category. This latest version is available for download in the registered user area as a pre-release build as it's still being tested and is not yet officially released. |
|
 |
|
|
Dan B
Senior Member 
Joined: 09 February 2005 Location: United States Status: Offline Points: 105 |
Post Options
Thanks(0)
Quote Reply
Posted: 16 May 2005 at 1:19pm |
|
Roberto, By entering the list servers of choice, are they same format as the other black lists? sc.surbl.org, true Thanks, Dan B |
|
|
|
|
Dwight
Guest Group 
|
Post Options
Thanks(0)
Quote Reply
Posted: 16 May 2005 at 3:40pm |
|
I entered my surbl as "multi.surbl.org" it's working based on log entries. I can't see it as a "reject" option in sawmill however - probally nees an update.
Dwight
|
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 16 May 2005 at 7:06pm |
|
The ini setting will look like the following: [SURBL] Regards, |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 16 May 2005 at 11:20pm |
|
Dan B.,
It's better to add the SURBL entries directly from SpamFilter's GUI, all that is needed is the list name, for ex: multi.surbl.org unlike the MAPS entries, there is no need to add a trailing "true" or "false" as SURBL has slightly different rules than MAPS. If you wish to edit the ini file directly, then Desperado has the right syntax! Edited by LogSat |
|
|
|
|
_Eric
Newbie 
Joined: 13 May 2005 Location: Netherlands Status: Offline Points: 14 |
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 6:32am |
|
anyone has this problem too ?
i had it but now it is back with version 454 : 05/17/05 12:29:52:594 -- (1608) Connection from: 194.109.24.33 - Originating country : Netherlands 05/17/05 12:29:52:719 -- (1608) Resolving 194.109.24.33 - smtp-vbr13.xs4all.nl 05/17/05 12:29:52:813 -- (1608) Mail from: Marjo@Burggolf.nl 05/17/05 12:29:53:969 -- (796) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 05/17/05 12:29:54:016 -- (796) Disconnect 05/17/05 12:29:54:125 -- (1232) - MAPS search done... 05/17/05 12:29:54:125 -- (1232) RCPT TO: paulus.groenendijk@grontmij.nl accepted 05/17/05 12:29:54:360 -- (1232) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 05/17/05 12:29:54:391 -- (1232) Disconnect 05/17/05 12:29:54:641 -- (1608) - MAPS search done... 05/17/05 12:29:54:641 -- (1608) RCPT TO: leo.hamers@grontmij.nl accepted 05/17/05 12:29:55:078 -- (1608) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000 what might be the cause of it ? it is just upgraded from .441, and that ran rock solid .... Edited by _Eric |
|
|
|
|
Dwight
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 10:05am |
|
Your new features include added support for the :Honeypot tag in some blacklists to automatically blacklist sender's IP if it triggers the blacklist entry. My question is where do the honeypot blacklisted addresses reside when triggered? I understand how to place a honeypot email address in the GUI, but I am not clear as to where spamfilter builds the honeypot blacklist. Can you help?
Dwight |
|
|
|
|
RedSpyder
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 11:57am |
|
The honeypot lists go in the honeypot themselves. You can add an email address and then it builds IP addresses under that email address.
|
|
|
|
|
Harvey
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 2:41pm |
|
2.5.2.454
Everything is working as advertised but since we switched to the above version, our Statistics are no updating properly.
If we have "Remember stats on restart" checked, the counts will increase for a few connections and then revert back to a previous number.
|
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 2:48pm |
|
Harvey, This issue is a known issue and has been addressed in a "beta" that I am now testing. Logsat will post the update one they are sure it is both stable and working. Regards |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 17 May 2005 at 4:56pm |
|
_Eric,
That exception error is occurring somewhere during the test of your *whitelisted* keywords (not the blacklist keywords), or so it seems at first sight from the logs. Could you verify that this is the case by disabling your whitelist keywords to see if the problem goes away? If so, we can pinpoint the issue and try to find out what the problem is. I'll be sending you a link via private message in the forum for the latest pre-release build. We've not released it on the registered user area as we're finalizing its testing, but I'd like to solve your issue before doing so. |
|
|
|
|
_Eric
Newbie
Joined: 13 May 2005 Location: Netherlands Status: Offline Points: 14 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2005 at 4:30am |
|
ok, thank you for the fast reply,
i am testing right now. 05/18/05 14:21:41:988 -- (1272) - MAPS search done... 05/18/05 14:21:41:988 -- (1272) RCPT TO: matt@kw-groep.nl accepted 05/18/05 14:21:42:504 -- (1272) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 005739E6 in module 'SpamFilter.exe'. Read of address 00000000 05/18/05 14:21:42:535 -- (1272) Disconnect well without any config file, exept the local domains the error remains, the refresh database error while using the access database is fixed in 455.... could you please explain what kind of error it is ? it looks like some kind of timer function between the rcpt to and data <.> which has an incorrect function or timeout, not to worry, i am using the stable old version again. Edited by _Eric |
|
|
|
|
_Eric
Newbie
Joined: 13 May 2005 Location: Netherlands Status: Offline Points: 14 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2005 at 3:42pm |
|
my crashing spamfilter config runs fine on another server,
it must be hardware related, and again its a dell 2850 .... this is not the first time i see spamfilter run crappy/buggy on a dell... sorry to bother, the fault is on my side / dell |
|
|
|
|
Dwight
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2005 at 4:33pm |
|
Eric, Mine is running fine on a Dell 2650.
Dwight |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2005 at 4:40pm |
|
Eric,
We output those "weird" numbers in the log as it helps pinpointing the code where the error occurred. In this case, with your latest address location "005739E6", we were able to pinpoint the code wehre this happened, and it indeed is during the keyword check. What is *very* strange is that if you configured SpamFilter not to use the whitelist keyword file then this code should never be executed, so it's still a bit of a mistery to us... If you can zip and send us your SpamFilter.ini and your local blacklist/whitelist keywords we'll take another look to make sure it's not software-related. |
|
|
|
|
_Eric
Newbie
Joined: 13 May 2005 Location: Netherlands Status: Offline Points: 14 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2005 at 5:00pm |
|
please note it runs *fine* on a 2650 but not on a 2850,
its another model. i`ll try to remove all txt files completely, and if the error doesn`t occur, thats the case. i also see some weird circumstances that the dell tools and apps use an dell compiled version of comsvcs, the other 2650 server is plain installed, the 2850 was oem pre installed by dell. |
|
|
|
|
_Eric
Newbie
Joined: 13 May 2005 Location: Netherlands Status: Offline Points: 14 |
Post Options
Thanks(0)
Quote Reply
Posted: 19 May 2005 at 9:44am |
|
the problem is solved, after a format of the server, and an install by myself, spamfilter runs fine.
there is a dll conflict with the default openmanage en drac files from dell, which overwrite the ms$ default files, and spamfilter behaves weird. i reinstalled all dell software and the problem is back. easy as dell.... solution : format your dell, and do what you had to do when it came out the box, format it and reinstall windows as/by default. i cannot see which files, because it`s a closed exe and msi file from dell. Edited by _Eric |
|
|
|
|
Dwight
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 May 2005 at 10:13am |
|
Just some feeback on this new release. Between the honeypot and the surbl features we have been able to clean up a lot of spam that was getting through the filters. As system administrator I get non-delivery report notices. When I see NDR's to invalid email addressses where it is apparent that someone was fishing for valid email addresses -- I add that email address to the honeypot. Dwight |
|
|
|
|
Ronny*
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 06 July 2005 at 7:26am |
|
There is no ccTLDs.txt in the spamfilter.zip file
|
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 06 July 2005 at 7:59pm |
|
Ronny,
Can you please let us know which version/build of SpamFilter you downloaded? |
|
|
|
|
Ronny
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 15 July 2005 at 10:07am |
|
Hi I downloaded v.2.5.2.457 (registered) Also, I am trying to delete mails rejected by the surbl filter, but the checkbox "check" dissapears when I try to save the "do not quarantene emails from this blacklist (surbl)
|
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 15 July 2005 at 11:17pm |
|
Ronny,
That bug has been patched in subsequent pre-release versions available in the registered user area. We'll be releasing a new official version of SpamFilter within the next few days. The release notes pertaining to the problem you reported are as follows: // New to VersionNumber = '2.5.2.459'; {TODO -cFix : SURBL Do Not Quarantine setting was saving, but the mail was still not being quarantined} // New to VersionNumber = '2.5.2.458'; {TODO -cFix : Could save the SURBL Do Not Quarantine setting} {TODO -cFix : Could not empty the SURBL list, the default multi.surbl.org list was re-added automatically} {TODO -cFix : AutoWhiteList was not always case-insensitive} |
|
|
|
|
Ronny
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 22 July 2005 at 6:45am |
|
Thanks, I am running pre release now and all is well
|
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 29 April 2006 at 10:43am |
|
Spam an Anti-Spam forum? How freaking stupid can you possibly be? I support capital punishment for Spammers. Oh ... and BTW ... your url has been added to my SUBL List. Edited by Desperado |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
hank_freid
Newbie
Joined: 03 April 2008 Location: USA Status: Offline Points: 1 |
Post Options
Thanks(0)
Quote Reply
Posted: 03 April 2008 at 12:57am |
|
I have been using v.2.5.2.457 for 3 months and i found it very nice.
there are also other versions from different Software Houses but v.2.5.2.457 is the best. |
|
|
the developer hank freid redefines the chic hotel experince
|
|
|
|
|
jerbo128
Senior Member
Joined: 06 March 2006 Status: Offline Points: 178 |
Post Options
Thanks(0)
Quote Reply
Posted: 03 April 2008 at 7:56pm |
|
Version 4.x.x.x is the best. Quit being so cheap and buy it! You won't regret.
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.336 seconds.