CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

New utility for blacklist management
Goto page Previous  1, 2, 3, 4, 5  Next
 
Post new topic   Reply to topic       All -> FavForums -> Mailwasher - Troubleshooting / General [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Mon May 30, 2005 4:20 pm    Post subject:
Reply with quote

Quote:

Most of the addresses that get onto the blacklist are use once, randomly generated addresses that you won't ever see twice.


That is often the case as regards the uname but not so common for the domain. I get spam from joe at spam.com, then pete at spam.com, then jenny at spam.com etc. The blacklist function in Mailwasher as it stands, is not much use in this situation, because when spammers keep changing their names, the blacklist has no effect since the same address doesnt occur again.

However spammers do not change domains with the same tenacity, so by collecting all those supposedly random and useless addresses in the blacklist, tools such as BLScan and others allow the user to wildcard out entire domains. In my case, this practice is very successful with my blacklist alone trapping ~85% of my incoming spam, some nifty filters do the rest. The great thing about doing this, is that I get no false positives whatsoever from my blacklist, ever!

So I only need to look for false positives in mail that was trapped by the filters (I dont use FirstAlert or any blacklist servers anymore, there were just too many false positives).


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
shieber

Trooper
Trooper


Joined: Jan 17, 2004
Posts: 20
Location: USA

PostPosted: Mon May 30, 2005 5:05 pm    Post subject:
Reply with quote

That sounds right on the money to me. My problem isn't false positives but building up the personal blacklist at all becasue the names are rarely used more than once.

Blacklisting domains, is another matter. Certianly worthwhile to blackilist the oddball domains.

I don't get a lot of false positives form the databases -- jsut lucky I guess. I just don't seem to get anything form FirstAlertt that I don't get form the others.

sh

Back to top
View users profile Send private message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Mon May 30, 2005 7:21 pm    Post subject:
Reply with quote

Gary produced a starter blacklist some time ago at;

http://www.w5hq.com/MailWasher/MailWasherFilters.txt

Only thing to beware of is that the number that follows the blacklist entries is a date code, this number should be changed to 38502 (todays date) otherwise they will all immediately time out.

I think FirstAlert and probably other databases should be driven by "consensus", so if >100 people report the address, then it gets added to the list. Otherwise if someone blacklists castlecops.com for instance, then I guess that address ends up in the database and everyones messages from castlecops will be marked as spam. For all I know maybe FirstAlert already does that, but I have found a lot of legitimate mail order companies and shops were being marked as spam.


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon May 30, 2005 10:47 pm    Post subject:
Reply with quote

Toucan wrote:
I think FirstAlert and probably other databases should be driven by "consensus", so if >100 people report the address, then it gets added to the list. Otherwise if someone blacklists castlecops.com for instance, then I guess that address ends up in the database and everyones messages from castlecops will be marked as spam. For all I know maybe FirstAlert already does that, but I have found a lot of legitimate mail order companies and shops were being marked as spam.

First of all, FA! is not a blacklist. Secondly, concensus isn't good enough. There has to be an overwhelming ratio and there must be enough "votes" to constitute a quorum. This of course implies that a msg could be reported as good or bad; not possible currently.

Back to top
View users profile Send private message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Wed Jul 20, 2005 10:09 pm    Post subject:
Reply with quote

Hi All,

I've been a little quiet for a while but Ive been working hard wacko and Im delighted to say that I have completed a new "Pro" version of BLScanPlus Very Happy

This doesnt replace the current version, it is a parallel or alternative version that features a full windows based GUI instead of a console. The current version (what I now call the Classic version) is still available and will continue to be available for free. Very Happy

You can install the Classic and Pro version separately (by installing into different install folders), but dont run both at the same time!

The Pro version is for all of you users who prefer windows GUI's and dialog boxes Evil or Very Mad , it looks totally different to the Classic console version, but existing users will quickly recognize all of the familiar functions and options. Very Happy

This is a Beta release, to read all about it and check it out go to the ProZone at www.dogsbyte.com/prozone.html

Feedback on this Beta version is always appreciated, so let me know if it flies like a dream Very Happy or crashes and burns on first execution Shocked

The Pro version is donationware and you will be reminded of that frequently! The Beta is fully functional (i.e. not crippled in any way). I havent fully documented it yet, but give me time...

See screenshots at www.dogsbyte.com/proscreenshots.html


Note: BLScanPlus Pro requires Microsoft .NET Framework 2.0, which is currently available from microsoft.com as a Beta 2 version. If you dont like using windows Beta releases then probably best to wait until this becomes a full 2.0 release (it will then show up on windows update).


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
RefurbishedData

Captain
Captain
Premium Member

Joined: Feb 08, 2005
Posts: 511

Premium Team F@H

PostPosted: Fri Aug 12, 2005 6:30 am    Post subject: I'm giving the classic a try...
Reply with quote

Thank you for such good idea, I was wondering if there was ever a solution to having such large list of black email. I will let cha know how it goes. I've used now Mailwasher for a few months and find it to be very effective and easy to use. Razz

Back to top
View users profile Send private message
RefurbishedData

Captain
Captain
Premium Member

Joined: Feb 08, 2005
Posts: 511

Premium Team F@H

PostPosted: Fri Aug 19, 2005 7:19 am    Post subject: Update...
Reply with quote

I tried the first part of the project, Shocked I believe assigning wild cards to what's already there in the "black list" and, even though I finished the project with flying colors, I found it very cumbersome to follow and perform the directions, I know that it has nothing to do with what the software or program was designed to do, it is more that for an average user like me, the instructions and or software capabilities might be a little over my head.
I will give it a go with the rest of the instructions at some point, but like I say, dabbing into DOS like instructions really are not my cup of tea...
Thank you though for having developed such great aid to MW. Smile

Back to top
View users profile Send private message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Fri Aug 19, 2005 8:02 pm    Post subject:
Reply with quote

Justed,

This software originally started out as some command line utilities, I later wrapped these in a shell. But the next version (3.0) has a full windows GUI, so I hope you'll find that a lot easier to use.

Pat


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
swad

Cadet
Cadet


Joined: Aug 15, 2005
Posts: 5
Location: USA

PostPosted: Wed Aug 31, 2005 4:04 pm    Post subject: BLScan-BLConv Error: Input File Cannot Be etc
Reply with quote

I continue to get the same BLConv Error:
Input File Cannot Be Called The Same Name as the output File.

Any help on this one?

Back to top
View users profile Send private message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Wed Aug 31, 2005 6:09 pm    Post subject:
Reply with quote

Assuming you have Mailwasher or MailwasherPro selected on the Settings tab, the input file should be shown as being the Mailwasher blacklist file, this is typically something like;

C:\Documents and Settings\YourName\Application Data\MailwasherPro\Blacklist.txt

the output files will be called BLConvF.txt (filters) and BLConvL.txt (log).

I checked the code and that error is written if the blacklist file box is set as either of these names. An easy way to avoid any naming conflicts is to set "Timestamp Output Files" on the Settings tab. You can also select "Always read Blacklist/Trash files from this location" to ensure you pick up the right input file.

PM me if you still have problems.

Pat


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
swad

Cadet
Cadet


Joined: Aug 15, 2005
Posts: 5
Location: USA

PostPosted: Wed Aug 31, 2005 7:14 pm    Post subject:
Reply with quote

wrote:
Assuming you have Mailwasher or MailwasherPro selected on the Settings tab, the input file should be shown as being the Mailwasher blacklist file, this is typically something like;

C:\Documents and Settings\YourName\Application Data\MailwasherPro\Blacklist.txt

the output files will be called BLConvF.txt (filters) and BLConvL.txt (log).

I checked the code and that error is written if the blacklist file box is set as either of these names. An easy way to avoid any naming conflicts is to set "Timestamp Output Files" on the Settings tab. You can also select "Always read Blacklist/Trash files from this location" to ensure you pick up the right input file.

PM me if you still have problems.

Pat
Thanks, Again, Toucan.

I tweaked the settings and created a a pair of files with a new filter that i added to my filters file. (Time stamp had to be unchecked.)

I'll have to wait for some spam to see what happens.

Back to top
View users profile Send private message
irvdk

Trooper
Trooper


Joined: Jun 01, 2005
Posts: 16


PostPosted: Fri Sep 16, 2005 12:09 am    Post subject:
Reply with quote

I have a question please.
I belong to a geneology group that I receive mail from numerous times a day. They first go through a moderator and are then posted to us. The only thing that is the same on every email is the TO: line. THere is also 1 line of text in the body. Other then that they are all different. Mailwasher alway Blacklists them and I have to uncheck them. can this program help me with this? I can forward one of them to you if neccessary.
Thanks for your time,
Irv


_________________
Irv


Last edited by irvdk on Fri Sep 16, 2005 2:54 am, edited 1 time in total
Back to top
View users profile Send private message
stan_qaz

Premium Member


Joined: Mar 31, 2003
Posts: 10635

Premium

PostPosted: Fri Sep 16, 2005 1:03 am    Post subject:
Reply with quote

irvdk, kind of off topic for this discussion that is about blacklist management tools.

Rather than confusing things here why don't you start a new topic in mailwasher troubleshooting/general and you'll get some help.


_________________
Questions? Try the wiki
http://wiki.castlecops.com/MailWasher_Pro
Back to top
View users profile Send private message
irvdk

Trooper
Trooper


Joined: Jun 01, 2005
Posts: 16


PostPosted: Mon Sep 19, 2005 3:17 pm    Post subject:
Reply with quote

Ok, Thanks.
Now I have a question that is on topic! Smile
I just installed BL Scan. I can't figure out how to manually add a domain to the blacklist?
Irv


_________________
Irv
Back to top
View users profile Send private message
Toucan

Sergeant
Sergeant
Premium Member

Joined: Jun 09, 2004
Posts: 110

Premium

PostPosted: Mon Sep 19, 2005 5:17 pm    Post subject:
Reply with quote

To manually add it you can do it two ways;

In Mailwasher, click on Spam Tools -> My Blacklist, then click Add and either put the exact address or specify a wildcard.

The alternative is to edit your blacklist file directly and add the entry into the file, (without disturbing the format of the file). The path to your blacklist file is shown a the bottom of the Help-About dialog box, but make sure that Mailwasher is not running when you edit the file.


_________________
BLScanPlus - A collection of free utilities for use with MailWasher.
Download BLScanPlus from www.dogsbyte.com
Making your blacklist useful again. (Search and decode your trash too).
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Mailwasher - Troubleshooting / General All times are GMT
Goto page Previous  1, 2, 3, 4, 5  Next
Page 4 of 5

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer