Re: Dynamic Host Filters

Two observations and a question:

1) trapping on something like *.tw* is risky since you will trap
mail.tweetybird.com and other domains that have tw in them. One way around
this is to use the form *.tw\s which will tell the grep filter to only match
on .tw that ends with a space effectively catching only .tw domains. I have
not tested this theory, but Anita from tenon suggested it a few weeks ago
covering the general task of word fragment filtering.

2) I too have multiple blackhole accounts set up which allow me to count
which rbl is doing the best job for the species of spam we get. however, i
find it cumbersome to add exceptions to all 7 of these accounts.

Does anyone have a way around this problem? Should i just wait for
importable filters?

dan


On 6/16/03 12:56 PM, "John Sievert" <john@xxxxxxxxxxxxxxx> wrote:

> You need a * after the domain name too - like *somedomain.com* or
> alternatively, *somedomain*  then the NOT.  I have had problems when I
> didn't have the trailing star.
> 
> Actually, I am not sure this logic is right.  Because of the OR then any
> item being true will satisfy the logic so anytime it is not somedomain.com
> it will be true.  You don't get to use parenthesis in these filters to
> specify hierarchy.  What you would want would be
> 
> relays.ordb.org        OR
> bl.spamcop.net             OR
> relays.osirusoft.com    AND
> *somedomain.com             NOT
> 
> I don't do it this way, and I am not sure of the precedence.   This presumes
> that the Ors are calculated first and then anded with the NOT.  If this is
> the precedence it will work.  If not, you will need to go to separate
> filters.
> 
> I have separate filters set up for each of my blackholes so that I can see
> which are trapping what email - helps in responding to those rejected in
> telling them what blackhole doesn't like them.  The other reason I have
> separate filters for blackholes is that they are very hard to test unless
> you have a known and listed open relay handy.
> 
> J
> 
> On 6/16/03 11:09a, "Marc Kaiwi" <marc@xxxxxxxxx> wrote:
> 
>> I apologize if this is a redundant question but I can't figure this
>> thing out.
>> 
>> I'm using three DHost filters set up like this;
>> 
>> relays.ordb.org        OR
>> bl.spamcop.net             OR
>> relays.osirusoft.com
>> 
>> and I want to exclude a source address, i.e.: server.somedomain.com
>> (which is blacklisted by relays.osirusoft.com). Do I set it up like
>> this:
>> 
>> relays.ordb.org        OR
>> bl.spamcop.net             OR
>> relays.osirusoft.com OR
>> *somedomain.com    NOT
>> 
>> 
>> 
>> Thanks in advance,
>> 
>> Signed: Marc Kaiwi
>> 
>> ---------
>> Tenon Intersystems' Post.Office Mailing List
>> To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
>> with the body only containing:
>> unsubscribe
>> Find the searchable mailing list archives at:
>> http://postoffice.computeroil.com/

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/