false positives from spamcop.net?

Martin Hepworth martinh at SOLID-STATE-LOGIC.COM
Thu Feb 3 16:09:28 GMT 2005


I find it better to do the RBL's in SA, so if they break/stop etc you
don't end up with a massive blacklist, merely added weight to the SA score.


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Jeff A. Earickson wrote:
> I've had a rash of spamcop blocks from sites deemed too critical
> for sendmail DNSBL blockage (eg Maine State Government, Yahoo lists,
> a local ISP) so I had to demote spamcop from a sendmail DNSBL down
> to the "Spam List =" line in MailScanner.  I replaced spamcop in my
> DNSBL with sbl-xbl.spamhaus.org, no complaints so far.
>
> Jeff Earickson
> Colby College
>
> On Thu, 3 Feb 2005, Matt Kettler wrote:
>
>> Date: Thu, 3 Feb 2005 10:39:23 -0500
>> From: Matt Kettler <mkettler at EVI-INC.COM>
>> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Re: false positives from spamcop.net?
>>
>> At 09:10 AM 2/3/2005, Tom Combs wrote:
>>
>>> Have there been any reports of problems with the spamcop.net RBL
>>> returning false positives on Feb 2? I had some email sent from
>>> mail.magnet.fsu.edu to an internal magnet.fsu.edu address that got
>>> tagged as spam by spamcop. I checked their website and we are not
>>> listed in their database.
>>
>>
>> Any chance you got reported to spamcop and wound up listed by them for a
>> short period of time?
>>
>> Given the latest trend in spam, zombies that use the proper relay, it's
>> going to be common for spamcop to wind up with short-lived listings
>> for the
>> legitimate mailservers of ISPs. At least, until the spamcop guys clean
>> things up in their reporting engine, which they may have already done.
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list