Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - New SpamFilter build now supports SURBL
  FAQ FAQ  Forum Search   Register Register  Login Login

New SpamFilter build now supports SURBL

 Post Reply Post Reply
Author
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Topic: New SpamFilter build now supports SURBL
    Posted: 14 May 2005 at 5:10pm
Finally, after popular request, a new version of SpamFilter is available to support SURBL blacklists.

Starting with version 2.5.2.454, SpamFilter will scan thru the entire email contents and extract all URLs embedded in the email. It then compares them with any user-specified SURBL blacklists (please go to http://www.surbl.org for a list) to see if any of them have been reported in spam. If so, the email is blocked.

Please note that you will need to copy the file ccTLDs.txt in the zip file to the SpamFilter directory.

As always, this version will automatically update the database to add the new blocked filter category.

This latest version is available for download in the registered user area as a pre-release build as it's still being tested and is not yet officially released.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Dan B View Drop Down
Senior Member
Senior Member
Avatar

Joined: 09 February 2005
Location: United States
Status: Offline
Points: 104
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dan B Quote  Post ReplyReply Direct Link To This Post Posted: 16 May 2005 at 1:19pm

Roberto,

By entering the list servers of choice, are they same format as the other black lists?

sc.surbl.org, true

Thanks,

Dan B

Back to Top
Dwight View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dwight Quote  Post ReplyReply Direct Link To This Post Posted: 16 May 2005 at 3:40pm

I entered my surbl as "multi.surbl.org" it's working based on log entries.  I can't see it as a "reject" option in sawmill however - probally nees an update. 

 

Dwight

 

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 16 May 2005 at 7:06pm

The ini setting will look like the following:

[SURBL]
site1=multi.surbl.org

Regards,

The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 16 May 2005 at 11:20pm
Dan B.,

It's better to add the SURBL entries directly from SpamFilter's GUI, all that is needed is the list name, for ex:

multi.surbl.org

unlike the MAPS entries, there is no need to add a trailing "true" or "false" as SURBL has slightly different rules than MAPS.

If you wish to edit the ini file directly, then Desperado has the right syntax!


Edited by LogSat
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
_Eric View Drop Down
Newbie
Newbie


Joined: 13 May 2005
Location: Netherlands
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote _Eric Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 6:32am
anyone has this problem too ?
i had it but now it is back with version 454 :

05/17/05 12:29:52:594 -- (1608) Connection from: 194.109.24.33 - Originating country : Netherlands
05/17/05 12:29:52:719 -- (1608) Resolving 194.109.24.33 - smtp-vbr13.xs4all.nl
05/17/05 12:29:52:813 -- (1608) Mail from: Marjo@Burggolf.nl
05/17/05 12:29:53:969 -- (796) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000
05/17/05 12:29:54:016 -- (796) Disconnect
05/17/05 12:29:54:125 -- (1232) - MAPS search done...
05/17/05 12:29:54:125 -- (1232) RCPT TO: paulus.groenendijk@grontmij.nl accepted
05/17/05 12:29:54:360 -- (1232) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000
05/17/05 12:29:54:391 -- (1232) Disconnect
05/17/05 12:29:54:641 -- (1608) - MAPS search done...
05/17/05 12:29:54:641 -- (1608) RCPT TO: leo.hamers@grontmij.nl accepted
05/17/05 12:29:55:078 -- (1608) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 0056967A in module 'SpamFilterSvc.exe'. Read of address 00000000

what might be the cause of it ? it is just upgraded from .441, and that ran rock solid ....

Edited by _Eric
Back to Top
Dwight View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dwight Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 10:05am

Your new features include added support for the :Honeypot tag in some blacklists to automatically blacklist sender's IP if it triggers the blacklist entry.  My question is where do the honeypot blacklisted addresses reside when triggered?  I understand how to place a honeypot email address in the GUI, but I am not clear as to where spamfilter builds the honeypot blacklist.  Can you help? 

 

Dwight

Back to Top
RedSpyder View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote RedSpyder Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 11:57am
The honeypot lists go in the honeypot themselves.  You can add an email address and then it builds IP addresses under that email address.
Back to Top
Harvey View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Harvey Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 2:41pm
2.5.2.454
 
Everything is working as advertised but since we switched to the above version, our Statistics are no updating properly.
 
If we have "Remember stats on restart" checked, the counts will increase for a few connections and then revert back to a previous number.
 
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 2:48pm

Harvey,

This issue is a known issue and has been addressed in a "beta" that I am now testing.  Logsat will post the update one they are sure it is both stable and working.

Regards

The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 17 May 2005 at 4:56pm
_Eric,

That exception error is occurring somewhere during the test of your *whitelisted* keywords (not the blacklist keywords), or so it seems at first sight from the logs. Could you verify that this is the case by disabling your whitelist keywords to see if the problem goes away? If so, we can pinpoint the issue and try to find out what the problem is.

I'll be sending you a link via private message in the forum for the latest pre-release build. We've not released it on the registered user area as we're finalizing its testing, but I'd like to solve your issue before doing so.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
_Eric View Drop Down
Newbie
Newbie


Joined: 13 May 2005
Location: Netherlands
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote _Eric Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2005 at 4:30am
ok, thank you for the fast reply,
i am testing right now.

05/18/05 14:21:41:988 -- (1272) - MAPS search done...
05/18/05 14:21:41:988 -- (1272) RCPT TO: matt@kw-groep.nl accepted
05/18/05 14:21:42:504 -- (1272) Exception occurred during RECEIVEMESSAGE: ( 1 2 3 4 5 6 7 8 9 11 12 13 15 16 17 18 19 111) Access violation at address 005739E6 in module 'SpamFilter.exe'. Read of address 00000000
05/18/05 14:21:42:535 -- (1272) Disconnect

well without any config file, exept the local domains the error remains,
the refresh database error while using the access database is fixed in 455....

could you please explain what kind of error it is ?
it looks like some kind of timer function between the rcpt to and data <.> which has an incorrect function or timeout,

not to worry, i am using the stable old version again.

Edited by _Eric
Back to Top
_Eric View Drop Down
Newbie
Newbie


Joined: 13 May 2005
Location: Netherlands
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote _Eric Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2005 at 3:42pm
my crashing spamfilter config runs fine on another server,
it must be hardware related, and again its a dell 2850 ....

this is not the first time i see spamfilter run crappy/buggy on a dell... sorry to bother, the fault is on my side / dell
Back to Top
Dwight View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dwight Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2005 at 4:33pm

Eric,

Mine is running fine on a Dell 2650.

 

Dwight

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2005 at 4:40pm
Eric,

We output those "weird" numbers in the log as it helps pinpointing the code where the error occurred. In this case, with your latest address location "005739E6", we were able to pinpoint the code wehre this happened, and it indeed is during the keyword check. What is *very* strange is that if you configured SpamFilter not to use the whitelist keyword file then this code should never be executed, so it's still a bit of a mistery to us... If you can zip and send us your SpamFilter.ini and your local blacklist/whitelist keywords we'll take another look to make sure it's not software-related.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
_Eric View Drop Down
Newbie
Newbie


Joined: 13 May 2005
Location: Netherlands
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote _Eric Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2005 at 5:00pm
please note it runs *fine* on a 2650 but not on a 2850,
its another model.

i`ll try to remove all txt files completely,
and if the error doesn`t occur, thats the case.

i also see some weird circumstances that the dell tools and apps use an dell compiled version of comsvcs,
the other 2650 server is plain installed, the 2850 was oem pre installed by dell.
Back to Top
_Eric View Drop Down
Newbie
Newbie


Joined: 13 May 2005
Location: Netherlands
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote _Eric Quote  Post ReplyReply Direct Link To This Post Posted: 19 May 2005 at 9:44am
the problem is solved, after a format of the server, and an install by myself, spamfilter runs fine.

there is a dll conflict with the default openmanage en drac files from dell, which overwrite the ms$ default files, and spamfilter behaves weird.

i reinstalled all dell software and the problem is back.
easy as dell....

solution : format your dell, and do what you had to do when it came out the box, format it and reinstall windows as/by default.

i cannot see which files, because it`s a closed exe and msi file from dell.

Edited by _Eric
Back to Top
Dwight View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dwight Quote  Post ReplyReply Direct Link To This Post Posted: 19 May 2005 at 10:13am

Just some feeback on this new release.  Between the honeypot and the surbl features we have been able to clean up a lot of spam that was getting through the filters.  As system administrator I get non-delivery report notices.  When I see NDR's to invalid email addressses where it is apparent that someone was fishing for valid email addresses -- I add that email address to the honeypot.

Dwight  

Back to Top
Ronny* View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Ronny* Quote  Post ReplyReply Direct Link To This Post Posted: 06 July 2005 at 7:26am
There is no ccTLDs.txt in the spamfilter.zip file
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 06 July 2005 at 7:59pm
Ronny,

Can you please let us know which version/build of SpamFilter you downloaded?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Ronny View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Ronny Quote  Post ReplyReply Direct Link To This Post Posted: 15 July 2005 at 10:07am

Hi

I downloaded v.2.5.2.457 (registered)

Also, I am trying to delete mails rejected by the surbl filter, but the checkbox "check" dissapears when I try to save the "do not quarantene emails from this blacklist (surbl)

 

 

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 3934
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 15 July 2005 at 11:17pm
Ronny,

That bug has been patched in subsequent pre-release versions available in the registered user area. We'll be releasing a new official version of SpamFilter within the next few days. The release notes pertaining to the problem you reported are as follows:

// New to VersionNumber = '2.5.2.459';
{TODO -cFix : SURBL Do Not Quarantine setting was saving, but the mail was still not being quarantined}

// New to VersionNumber = '2.5.2.458';
{TODO -cFix : Could save the SURBL Do Not Quarantine setting}
{TODO -cFix : Could not empty the SURBL list, the default multi.surbl.org list was re-added automatically}
{TODO -cFix : AutoWhiteList was not always case-insensitive}

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Ronny View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Ronny Quote  Post ReplyReply Direct Link To This Post Posted: 22 July 2005 at 6:45am
Thanks, I am running pre release now and all is well
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 29 April 2006 at 10:43am

Spam an Anti-Spam forum?  How freaking stupid can you possibly be?  I support capital punishment for Spammers.

Oh ... and BTW ... your url has been added to my SUBL List. 



Edited by Desperado
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
hank_freid View Drop Down
Newbie
Newbie
Avatar

Joined: 03 April 2008
Location: USA
Status: Offline
Points: 1
Post Options Post Options   Thanks (0) Thanks(0)   Quote hank_freid Quote  Post ReplyReply Direct Link To This Post Posted: 03 April 2008 at 12:57am
I have been using v.2.5.2.457  for 3 months and i found it very nice.
there are also other versions from different Software Houses but v.2.5.2.457 is the best.
the developer hank freid redefines the chic hotel experince
Back to Top
jerbo128 View Drop Down
Senior Member
Senior Member
Avatar

Joined: 06 March 2006
Status: Offline
Points: 178
Post Options Post Options   Thanks (0) Thanks(0)   Quote jerbo128 Quote  Post ReplyReply Direct Link To This Post Posted: 03 April 2008 at 7:56pm
Version 4.x.x.x is the best.   Quit being so cheap and buy it!  You won't regret.
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.109 seconds.

Spam Filter ISP - Copyright © 2002-2013 LogSat Software LLC - PO BOX 916340 Longwood, FL 32791 USA

 Sales: sales@LogSat.com - Support: support@LogSat.com - Tel. (sales only): +1 407-650-3008