-----Original Message----- From: Tim A [mailto:tim-surbl@kosmo.com] Sent: Thursday, December 16, 2004 4:37 PM To: discuss@lists.surbl.org Subject: RE: [SURBL-Discuss] Thunderbird and SURBL?
-----Original Message----- From: Jeff Chan jeffc@surbl.org Date: Mon, 13 Dec 2004 17:21:59 -0800 Subject: Re: [SURBL-Discuss] Thunderbird and SURBL? To: "SURBL Discussion list (E-mail)" discuss@lists.surbl.org
On Monday, December 13, 2004, 8:14:51 AM, Chris Santerre wrote:
Thinking out loud....
Anyone have contact with thunderbird devs? Could a pop
proxy be used to
check emails being downloaded by thunderbird on SURBL,
then decline to
download the ones that hit? Obviously with whitelist bypasses?
Then the user could use a web client to delete spams without downloading? Or whatever.....
That's an interesting idea, but it could generate more DNS traffic than our name servers can handle. It's probably better to do these kinds of things in a centralized way on mail servers to take advantage of DNS caching, etc. more strongly.
Since we provide a service to do just this using SURBL hopefully this isn't taken as a spam to this list. I thought it would be useful for folks at SURBL and list members to know who use SURBL. Perhaps a list should be kept somewhere listing folks making use of SURBL.
We have high regards for the SURBL folks and it is in the mix of many methods we use to combat spam at SimpleFilter. We have a POP3 and SMTP service that uses the same backend anti-spam engine and can be used from Thunderbird as it works with any POP3 email client. The SMTP service has some additional features I won't go into here.
Hi Tim!
Are you saying you will check during download and not download the messege if it thinks it is spam? Cause that would give you an A+ in my book!
And secondly, please make sure you have a local whitelist! We have seen other companies using SURBL that don't whitelist the top doamins, like yahoo.com, w3.org, google.com,........ Those kinds of domains should be skipped from being looked up.
We do have a list on surbl.org. Granted it isn't very prominent. :) Perhaps Jeff will add you?
--Chris
On Thursday, December 16, 2004, 2:07:29 PM, Chris Santerre wrote:
-----Original Message----- From: Tim A [mailto:tim-surbl@kosmo.com] Sent: Thursday, December 16, 2004 4:37 PM To: discuss@lists.surbl.org Subject: RE: [SURBL-Discuss] Thunderbird and SURBL?
-----Original Message----- From: Jeff Chan jeffc@surbl.org Date: Mon, 13 Dec 2004 17:21:59 -0800 Subject: Re: [SURBL-Discuss] Thunderbird and SURBL? To: "SURBL Discussion list (E-mail)" discuss@lists.surbl.org
On Monday, December 13, 2004, 8:14:51 AM, Chris Santerre wrote:
Thinking out loud....
Anyone have contact with thunderbird devs? Could a pop
proxy be used to
check emails being downloaded by thunderbird on SURBL,
then decline to
download the ones that hit? Obviously with whitelist bypasses?
Then the user could use a web client to delete spams without downloading? Or whatever.....
That's an interesting idea, but it could generate more DNS traffic than our name servers can handle. It's probably better to do these kinds of things in a centralized way on mail servers to take advantage of DNS caching, etc. more strongly.
Since we provide a service to do just this using SURBL hopefully this isn't taken as a spam to this list. I thought it would be useful for folks at SURBL and list members to know who use SURBL. Perhaps a list should be kept somewhere listing folks making use of SURBL.
We have high regards for the SURBL folks and it is in the mix of many methods we use to combat spam at SimpleFilter. We have a POP3 and SMTP service that uses the same backend anti-spam engine and can be used from Thunderbird as it works with any POP3 email client. The SMTP service has some additional features I won't go into here.
Hi Tim!
Are you saying you will check during download and not download the messege if it thinks it is spam? Cause that would give you an A+ in my book!
And a D+ in my book. It's more efficient to do these checks in the mail server. If every POP3 user started checking all of their mail against SURBLs (or other RBLs) our name servers would start melting.
Tim, If you're going to do this, please make sure your program is internally caching the lookups pretty heavily. For example, make sure it's not checking the same domain more than once per message (if it appears multiple times in the same message for example).
And secondly, please make sure you have a local whitelist! We have seen other companies using SURBL that don't whitelist the top doamins, like yahoo.com, w3.org, google.com,........ Those kinds of domains should be skipped from being looked up.
Yes, please whitelist (don't check) say the top 100-200 of our most often hit whitelist entries:
http://www.surbl.org/dns-queries.whitelist.counts.txt
That will save many unnecessary DNS queries.
We do have a list on surbl.org. Granted it isn't very prominent. :) Perhaps Jeff will add you?
We add the ones we hear about. There are mentions in the Quick Start, News and Links sections. I've added a link for SimpleFilter.
Jeff C. -- "If it appears in hams, then don't list it."
On Thursday, December 16, 2004, 4:35:20 PM, Jeff Chan wrote:
It's more efficient to do these checks in the mail server. If every POP3 user started checking all of their mail against SURBLs (or other RBLs) our name servers would start melting.
Tim, If you're going to do this, please make sure your program is internally caching the lookups pretty heavily. For example, make sure it's not checking the same domain more than once per message (if it appears multiple times in the same message for example).
OK Minor correction, I see that SimpleFilter is a POP3 proxy service and not a client program. In other words, it is a centralized server through which POP traffic passes. Please still do:
1. Whitelist common whitehats. There's no point in querying the SURBL nameservers for yahoo.com millions of times a day, right?
http://www.surbl.org/dns-queries.whitelist.counts.txt
2. Cache. If you are using DNS lookups make sure it's caching locally at least somewhat.
Jeff C. -- "If it appears in hams, then don't list it."
-
Chris Santerre -
Jeff Chan