SPAMHAUS-DBL1 DNSBL %RHSBL%.dbl.spamhaus.org * 10 0 SPAMHAUS-DBL2 DNSBL %REVDNS%.dbl.spamhaus.org * 10 0 SPAMHAUS-DBL3 DNSBL %HELO%.dbl.spamhaus.org * 10 0 SPAMHAUS-DBL4 DNSBL %SENDERHOST%.dbl.spamhaus.org * 10 0
The script will only download filters that have been updated by MBF.
We have a working prototype called the Gauntlet. Right now it holds the message for a x period of time determined by the administrator, and will re-run the message though Message Sniffer. We should have a version 2.0 soon that will re-run the tests through Declude as suggested.
Currently, this utility only works with SmarterMail. If you are running IMail or pre-tested spam continues to be a problem for you please contact us as we have a few other options for you to consider.
The all_list .dat file located in the \Declude directory. This file contains all the IP address geo-locations, this is used by Declude to identify the country chain displayed as part of the X-Country-Chain within the header. We are working on having a new all_list.dat available every day for download. You do not need to update this file every day, however it is there for your convenience. We suggest updating this file on a periodic basis of about once every 30-90 days.
New files available from Downloads page:
The NOHIT test is used to determine which tests did NOT trigger. The main purpose of this implementation was to create a feedback system to Message Sniffer ARM research to improve spam catch rates on new spam. The new test syntax below and is located in the global.cfg:
TEST-NAME1 NOHIT TEST-NAME2 WEIGHT 0 0 TEST-NAME1 Your given name of the test NOHIT Test Type TEST-NAME2 The name of the test you are tracking that did NOT trigger WEIGHT The weight => when you would like this test to trigger
Example of use (This test will trigger if SNIFFER is NOT triggered for emails over 30 points):
SNF-FEEDBACK NOHIT SNIFFER 30 0 0
Using this test we can identify messages that scored more than 30 points and did NOT trigger sniffer. We then use either a COPYTO or ROUTETO Action in the $default$.junkmail file to have these messages go to a specific inbox where ARM research periodically retrieves these messages and writes new rules to distribute to other Message Sniffer users.
The entry in the $default$.junkmail would be:
SNF-FEEDBACK ROUTETO email@example.com
Where xxxx is your license key for Message Sniffer. Be sure to setup an email user with firstname.lastname@example.org on your server and provide ARM research email@example.com with the POP account details to access the account to retrieve messages.
I am sure there are other great ways the NOHIT test can be used. Let us know if you have some ideas.
MBF has released an interim version of Decludeproc 4.12.03 for SmarterMail it can be found on the Downloads page. We added Improved Hijack by monitoring the Authenticated user rather than the mailfrom address. Let us know if you have any questions.
KNow (http://know.mailsbestfriend.com/) has growing collection of answers to the questions email administrators face every day including helpful tips; useful settings and configuration tweaks for various email platforms; errors, faults, failure conditions - and how to get out of them; pointers to tools, utilities, and data for stopping spam, and other abuse; and useful bits of conversations about email and making email systems work. If you work with email, you need Mail's Best Friend, and you'll find our knowledge base handy too!
Thanks to Pete McNeil of www.microneil.com and MBF has secured the Intellectual property rights and assets of Declude. MBF has the rights to distribute all versions of Declude and users are free to run Declude versions up to 4.12.02 without restriction. MBF is able to provide updates and fixes in the future. All current downloads can be found on the Downloads page.
Mail’s Best Friend, an e-mail solutions company, is pleased to announce their partnership with SmarterTools Inc. Mail’s Best Friend resells SmarterMail, for small business, ISP's, and hosting companies looking to enhance value.
Mail's Best Friend is proud to announce our reseller partnership with AppRiver. We chose AppRiver as partner as they received the highest published scores in Service/Support, Product Reliability and Channel Friendliness and were selected by Everything Channel for its "Five-Star Partner Program Guide Certification." AppRiver's successful track record was a major reason why the company is one of only five companies in North America to be selected by Microsoft as an Office 365 syndication partner. Being an Appriver reseller enables MBF to offer our customers hosted exchange and email security solutions with a provider who we know, will meet our level of commitment, reliability and service to our customers.