Date: Wed, 24 May 2006 09:03:00 -0400
From: CHRISTOPHER WEIS
To: all
Subject: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1148475780.46.0@winserver.com>
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 5

Is there a way to filter a particular DNS server in the sapfilter? I have been seeing alot of spam starting to pass that the CIP is totally different but the DNS is always the same.

-Chris
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Sat, 12 Aug 2006 19:57:13 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155427269.46.1148475780@winserver.com>
References: <1148475780.46.0@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 15

<CHRISTOPHER WEIS> wrote in message

Is there a way to filter a particular DNS server in
the sapfilter? I have been seeing alot of spam starting to
pass that the CIP is totally different but the DNS is
always the same.

I missed this message.

I don't understand the description, but are you still seeing this?

If so, provide an log snippet showing what you seeing so I can understand.

---
HLS
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Sun, 13 Aug 2006 23:07:37 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155524857.46.1155427269@winserver.com>
References: <1155427269.46.1148475780@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 34

I'm doing ok now. I was going through a few days of log files trying to find more methods to block spamers, and though about looking at the DNS which
me not paying attention was always my own DNS. My bad.


At CEC we use Ironmail by Ciphertrust to fight spam in front of our mailserver,

and the biggest surge we have been seeing lately is messages with a single
gif image attached and a very small amount of text. My question here is...
The possibility of wcSAP being able to have rules that can detect file attachment types and sizes along with text content (Amount of text <> characters) without causing too much overhead in processing time.




On 8/12/06 7:57 PM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

| <CHRISTOPHER WEIS> wrote in message
|
| > Is there a way to filter a particular DNS server in
| > the sapfilter? I have been seeing alot of spam starting to
| > pass that the CIP is totally different but the DNS is
| > always the same.
|
| I missed this message.
|
| I don't understand the description, but are you still seeing this?
|
| If so, provide an log snippet showing what you seeing so I can understand.
|
| ---
| HLS


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Mon, 14 Aug 2006 02:36:14 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155537613.46.1155524857@winserver.com>
References: <1155524857.46.1155427269@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 56


<CHRISTOPHER WEIS> wrote in message

At CEC we use Ironmail by Ciphertrust to fight spam in front of
our mailserver, and the biggest surge we have been seeing lately
is messages with a single gif image attached and a very small
amount of text. My question here is...

Same here. Everyone is seeing this growth of garbage.

The possibility of wcSAP being able to have rules that can detect file attachment types and sizes along with text content (Amount of text <> characters) without causing too much overhead in processing time.

Do you think its worth for us to explore?

We are trying to keep WCSAP as the "envelope checker" before the DATA is received.

Once the envelope is checked with WCSAP, the DATA is received.

At the DATA stage, this is when and where SMTPFILTER WCX applications can be used to analyze the message data itself.

WCBASIC does allow customers with programming capabilities to create their
own "SMTPFILTER-CHECKGIF.WCX" application.

Do you have someone on board that can write an WCBASIC "SMTPFILTER" application?

I can explore it at SMTPFILTER. What would be the specific rule again?

Have you tried the Wildcat! GreyListing System BETA version?

See WCGL100B.ZIP posted on the BBS.

GreyListing is highly effective in eliminating the non-compliant SMTP mail abusers who don't follow standard "SMTP Mail Outbound Retry Logic" as
expected by all standard compliant mail systems. WCGL will kill most of the type of mail abuse, if not all. We hardly get any more spam at Santronics
with the new Wildcat! GreyListing system. We put it into Public Beta a few days ago.

However, you need to develop your whitelist tables quickly to minimal any initial (but no harm done) rejection surprises by first time, unsolicited
but good vendor/customer contacts.

--
Hector Santos, Santronics Software, Inc.
http://www.santronics.com





--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Mon, 14 Aug 2006 14:17:25 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155579445.46.1155537613@winserver.com>
References: <1155537613.46.1155524857@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 66

Thanks. I'll check the greylisting beta. Sounds interesting.

I have no idea how long the gif image spam will be around, and I agree, I don't think it's Wildcat's job to do full spam checking -Though, it does an incredible job on it's own!

The rule would be:
If message contains attachment type (File type -.gif .png) AND
If message text < "Number of characters" (Or message file size).

I am trying to get the actual update release notes from Ironmail that contains the above rule information. I have also attached the last two posted release notes I received. I update my spamwords and sapfilter with information I
learn from these documents in the, "User Defined Header" and "System
Defined Header" sections.

I have several programmers here, and they could probably work with a wcx to
do the same function..Just finding time to task them, as I am sure it is the same with you.


Thanks
-Chris




On 8/14/06 2:36 AM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

|
| Do you think its worth for us to explore?
|
| We are trying to keep WCSAP as the "envelope checker" before the DATA is
| received.
|
| Once the envelope is checked with WCSAP, the DATA is received.
|
| At the DATA stage, this is when and where SMTPFILTER WCX applications
can be
| used to analyze the message data itself.
|
| WCBASIC does allow customers with programming capabilities to create their
| own "SMTPFILTER-CHECKGIF.WCX" application.
|
| Do you have someone on board that can write an WCBASIC "SMTPFILTER"
| application?
|
| I can explore it at SMTPFILTER. What would be the specific rule again?
|
| Have you tried the Wildcat! GreyListing System BETA version?
|
| See WCGL100B.ZIP posted on the BBS.
|
| GreyListing is highly effective in eliminating the non-compliant SMTP mail
| abusers who don't follow standard "SMTP Mail Outbound Retry Logic" as
| expected by all standard compliant mail systems. WCGL will kill most of the | type of mail abuse, if not all. We hardly get any more spam at Santronics
| with the new Wildcat! GreyListing system. We put it into Public Beta a few
| days ago.
|
| However, you need to develop your whitelist tables quickly to minimal any
| initial (but no harm done) rejection surprises by first time, unsolicited
| but good vendor/customer contacts.
|


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Tue, 15 Aug 2006 07:54:31 -0400
From: CHRISTOPHER WEIS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155642871.46.1155579445@winserver.com>
References: <1155579445.46.1155537613@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 7

I am getting an error running the greylisting program. The error is:

"No Access to Save Configuration. Stop WCCONFIG, if running. Password
required maybe? "

I do not have wcconfig running, nor do I have any password assigned to it.
Any ideas?
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Tue, 15 Aug 2006 08:05:03 -0400
From: CHRISTOPHER WEIS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155643503.46.1155579445@winserver.com>
References: <1155579445.46.1155537613@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 10

I was getting the following error message until I made the check in wcConfig to, "Allow WCX Configuration".

"No Access to Save Configuration. Stop WCCONFIG, if running. Password
required maybe? "

Now when I save an address in the greylisting form box, the message at the
top says: Edit File: Empty. When I save an address in the form, the
mesage "file empty saved". But I do not see anything added to the wcgreylist.ini or the form when I select it again.
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Tue, 15 Aug 2006 08:14:14 -0400
From: CHRISTOPHER WEIS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155644054.46.1155579445@winserver.com>
References: <1155579445.46.1155537613@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 13

I was getting the following error message until I made the check in wcConfig to, "Allow WCX Configuration".

"No Access to Save Configuration. Stop WCCONFIG, if running. Password
required maybe? "

Now when I save an address in the greylisting form box, the message at the
top says: Edit File: Empty. When I save an address in the form, the
mesage "file empty saved". But I do not see anything added to the wcgreylist.ini or the form when I select it again.

A file called ,"empty" is being saved in my WC5 directory. It does have the contents of the form that I submitted.
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Tue, 15 Aug 2006 17:50:07 -0400
From: CHRISTOPHER WEIS
To: all
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155678607.46.1155644054@winserver.com>
References: <1155644054.46.1155579445@winserver.com>
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 24

I guess if I'd quit replying to myself people would have seen my posts.

-Chris :)



On 8/15/06 8:14 AM, CHRISTOPHER WEIS wrote to CHRISTOPHER WEIS:

| I was getting the following error message until I made the check in
wcConfig
| to, "Allow WCX Configuration".
|
| "No Access to Save Configuration. Stop WCCONFIG, if running. Password
| required maybe? "
|
| Now when I save an address in the greylisting form box, the message at the
| top says: Edit File: Empty. When I save an address in the form, the
| mesage "file empty saved". But I do not see anything added to the
| wcgreylist.ini or the form when I select it again.
|
| A file called ,"empty" is being saved in my WC5 directory. It does have the | contents of the form that I submitted.


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Tue, 15 Aug 2006 23:20:15 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155698658.46.1155678607@winserver.com>
References: <1155678607.46.1155644054@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 37

Yes, I figured you would be reading the mail with others having the same results you did. :-)

Did you add the ini file?

---


<CHRISTOPHER WEIS> wrote in message news:1155678607.46.1155644054@winserver.com...

I guess if I'd quit replying to myself people would have seen my posts.

-Chris :)

On 8/15/06 8:14 AM, CHRISTOPHER WEIS wrote to CHRISTOPHER WEIS:

| I was getting the following error message until I made the check in wcConfig
| to, "Allow WCX Configuration".
|
| "No Access to Save Configuration. Stop WCCONFIG, if running. Password
| required maybe? "
|
| Now when I save an address in the greylisting form box, the message at

the

| top says: Edit File: Empty. When I save an address in the form, the
| mesage "file empty saved". But I do not see anything added to the
| wcgreylist.ini or the form when I select it again.
|
| A file called ,"empty" is being saved in my WC5 directory. It does have

the

| contents of the form that I submitted.

* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Wed, 16 Aug 2006 02:31:45 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155709905.46.1155698658@winserver.com>
References: <1155698658.46.1155678607@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 30

I did. Made all the difference!

I am seeing addresses being added to the auto-whitelist that are being sent outbound which is a really nice feature.

The statistics page never seems to change. I see both WCX's being called in the smtpfilter log and the auto-whitelist populating, so I am assumming I
have functionality.

Speaking of the hookloader. Do you have any preferences in the order of calling the greylister and spamwords? The order I have is:

smtpfilter-autowhite
smtpfilter-greylist
smtpfilter-checkwords


-Chris



On 8/15/06 11:20 PM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

| Yes, I figured you would be reading the mail with others having the same
| results you did. :-)
|
| Did you add the ini file?
|
| ---

--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Wed, 16 Aug 2006 07:25:46 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155727795.46.1155709905@winserver.com>
References: <1155709905.46.1155698658@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 55


<CHRISTOPHER WEIS> wrote in message news:1155709905.46.1155698658@winserver.com...

I am seeing addresses being added to the auto-whitelist that
are being sent outbound which is a really nice feature.

Yes, it can grow pretty fast. :-)

The statistics page never seems to change. I see both WCX's
being called in the smtpfilter log and the auto-whitelist
populating, so I am assumming I have functionality.

Is it giving you totals but the listing is blank? Nothing pending?

I'm not comfortable with the way that is being done. Its working, but I was trying to do a quick way to "pack" expired records when you clicked
statistics to get the beta out.

Some days I see some. But then I don't. So now I am thinking that it just works and I am not getting an more spam :-)

Let me check what mine says today, yesterday it said there were 45 records,
but none were pending.

Ok, it looks good today: 10 records, 6 passed, 4 pending.

Just watch occasionally to see how it builds up.

Speaking of the hookloader. Do you have any preferences in the order of calling the greylister and spamwords? The order I have is:

smtpfilter-autowhite
smtpfilter-greylist
smtpfilter-checkwords

I suggest:

smtpfilter-autowhite
smtpfilter-checkwords
smtpfilter-greylist

Go ahead and take care any of your auto-white listing of the mail you write
to people.

Then checkwords to get rid of the junk and also AlwaysAccept or AlwayReject.

Then check for greylist does you want to check.

Did I have it other way in the zip? or documented it that way?

---
HLS

* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Wed, 16 Aug 2006 08:29:04 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155731344.46.1155727795@winserver.com>
References: <1155727795.46.1155709905@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 26

Everything is still all zero's. I'll wait to see how it builds up.
|
|
| Is it giving you totals but the listing is blank? Nothing pending?
|
| Just watch occasionally to see how it builds up.
|

I noticed the pages do not always update when a link is clicked (Unless I right-click and select refresh). I think there is a javascript we used here at CEC to ensure a page isn't cached. I was going to look it up and add it to the templates and see if that helped.

|
| I suggest:
|
| smtpfilter-autowhite
| smtpfilter-checkwords
| smtpfilter-greylist
|
| Did I have it other way in the zip? or documented it that way?

Only the checkwords was not listed, so I originally had it at the end. Just wanted to match your preferences.

-Chris
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 00:22:02 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155788522.46.1155727795@winserver.com>
References: <1155727795.46.1155709905@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 40

I think I see why my totals never change. I am getting errors in the wcHostFault.log everytime the SmtpFilterHookLoader is called:

! wcBASIC Program Error (smtpfilter-greylist.wcx, at address 0x003B)
! Function not found "SFGETMAILHEADER@S@S@S@S4" in library
smtpfilterhlp ! Calling Program: smtpfilter-greylist
Date : 8/16/2006 11:12:26 PM
Computer : WILDCAT
Node : 0
User :
Exception : Function not found (10)
WCX Address : 0x003B
WCX Module : wc:\code\smtpfilter-greylist.wcx
WCX Params : &ver=1.62&state=data&psf=spool\defaulthost\new\smt1c6.tmp&rsp=c:\windo ws\temp\prespool\&ip=68.142.207.134&cdn=web32203.mail.mud.yahoo.com&h dn=web32203.mail.mud.yahoo.com&from=<dcbanning@yahoo.com>&rcpt=<chr is@megabytecoffee.com>&ruid=1&trcpt=1
---- application call stack ----
Address : 0x09A4 | wc:\code\SmtpFilterHookLoader.wcx


Not sure what to do next. Your suggesstions?

-Chris





On 8/16/06 7:25 AM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

| > The statistics page never seems to change. I see both WCX's
| > being called in the smtpfilter log and the auto-whitelist
| > populating, so I am assumming I have functionality.
|
| Is it giving you totals but the listing is blank? Nothing pending?
|


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 00:44:49 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155790136.46.1155788522@winserver.com>
References: <1155788522.46.1155727795@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 63

- Make sure you are upto par with 451.8 (atleast 451.7)

- Delete any SMTPFILTERHLP.WCX you may have.

It use to be separate when SMTPFILTER was first released. But it was put
into the base system (WILDCAT.WCL) library a few versions back.

SMTPFILTER-GREYLIST.WCX is using a new function sfGetMailHeader() that is
now part of the base system but is lost with the override.

Need to add that note to the readme.

Thanks

---





<CHRISTOPHER WEIS> wrote in message news:1155788522.46.1155727795@winserver.com...

I think I see why my totals never change. I am getting errors in the wcHostFault.log everytime the SmtpFilterHookLoader is called:

! wcBASIC Program Error (smtpfilter-greylist.wcx, at address 0x003B)
! Function not found "SFGETMAILHEADER@S@S@S@S4" in library
smtpfilterhlp ! Calling Program: smtpfilter-greylist
Date : 8/16/2006 11:12:26 PM
Computer : WILDCAT
Node : 0
User :
Exception : Function not found (10)
WCX Address : 0x003B
WCX Module : wc:\code\smtpfilter-greylist.wcx
WCX Params : &ver=1.62&state=data&psf=spool\defaulthost\new\smt1c6.tmp&rsp=c:\windo ws\temp\prespool\&ip=68.142.207.134&cdn=web32203.mail.mud.yahoo.com&h dn=web32203.mail.mud.yahoo.com&from=<dcbanning@yahoo.com>&rcpt=<chr is@megabytecoffee.com>&ruid=1&trcpt=1
---- application call stack ----
Address : 0x09A4 | wc:\code\SmtpFilt

Date: Thu, 17 Aug 2006 01:19:31 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155791971.46.1155790136@winserver.com>
References: <1155790136.46.1155788522@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 14

File deleted, Now I'm seeing things! Definitely working now.

Thanks
-Chris



On 8/17/06 12:44 AM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

| - Make sure you are upto par with 451.8 (atleast 451.7)
|
| - Delete any SMTPFILTERHLP.WCX you may have.


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 01:38:53 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155793133.46.1155790136@winserver.com>
References: <1155790136.46.1155788522@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 5

In the wcgreylist.htm, I updated the path to the stylesheet to: /services/avs/style.css



--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 03:32:04 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155800443.46.1155793133@winserver.com>
References: <1155793133.46.1155790136@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 8

<CHRISTOPHER WEIS> wrote in message

In the wcgreylist.htm, I updated the path to the stylesheet to: /services/avs/style.css

Ahhhh, thanks.

--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 09:01:05 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155819665.46.1155800443@winserver.com>
References: <1155800443.46.1155793133@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 19

I disabled the RBL check in wcSap just to get more stuff to hit the Greylister,

and not one piece of junk came through. Definitely working, and very well at that. 80% blocked so far, no false positives!




On 8/17/06 3:32 AM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:

| <CHRISTOPHER WEIS> wrote in message
|
| > In the wcgreylist.htm, I updated the path to the stylesheet to:
| > /services/avs/style.css
|
| Ahhhh, thanks.
|
|


--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 09:19:20 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155821008.46.1155819665@winserver.com>
References: <1155819665.46.1155800443@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 31


<CHRISTOPHER WEIS> wrote in message

I disabled the RBL check in wcSap just to get more stuff to
hit the Greylister, and not one piece of junk came through.
Definitely working, and very well at that. 80% blocked so far,
no false positives!

I had did the same too to get some transactions to test it.

Isn't it amazing? Its scary! :-)

What I need to decide if I should move the recorded data into a SQL
database, but gee, after awhile you just walk away and know that is working just fine.

Why have a database? What can you pull from a database?

With all the SMTPFILTER hooks, you want it to be FAST.

But I still want to see if its valid to do it. That was the big hold back because I see from the GREYLIST mailing list many other systems use a SQL database.

---
HLS




* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 09:45:09 -0400
From: CHRISTOPHER WEIS
To: HECTOR SANTOS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155822309.46.1155821008@winserver.com>
References: <1155821008.46.1155819665@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 16

I think using SQL is nice if the mailserver is using it in the first place. My other question would be the typical amount of mail being processed on a WC system. If you start implementing a SQL or MySQL database, does that start leading the way to move more and more stuff to SQL -Messages, forums, file libraries, user info, etc?




On 8/17/06 9:19 AM, HECTOR SANTOS wrote to CHRISTOPHER WEIS:
|
| What I need to decide if I should move the recorded data into a SQL
| database, but gee, after awhile you just walk away and know that is
working
| just fine.

--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)

Date: Thu, 17 Aug 2006 09:58:58 -0400
From: HECTOR SANTOS
To: CHRISTOPHER WEIS
Subject: Re: Filter DNS Server
Newsgroups: win.server.smtp.&.avs
Message-ID: <1155823138.46.1155822309@winserver.com>
References: <1155822309.46.1155821008@winserver.com>
X-WcMsg-Attr: Rcvd
X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
Lines: 30

Good point.

Well, you want to start small probably. The mail system would not be
involved in this case.

But its a valid point in that when begin to look at a "bigger picture" it
would make more sense to do it if its already in place.

It would be a scalability issue. For a larger system, it may pay off, for a small system, it might be too much. Sounds like the opposite, but the
larger system would benefit with already having larger scalability needs
and they are setup for it. So a GreyList SQL data processor of many transactions probably would be negliable. While for the small system, he might see the difference.

Anyway, it might happen. It might not. I have to explore it. :-)

---



On 8/17/06 9:45 AM, CHRISTOPHER WEIS wrote to HECTOR SANTOS:

I think using SQL is nice if the mailserver is using it in the first

place. My

other question would be the typical amount of mail being processed on a WC system. If you start implementing a SQL or MySQL database, does that start leading the way to move more and more stuff to SQL -Messages, forums, file libraries, user info, etc?

* Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)