Jörg Zieren | 2 Aug 2006 09:42
Picon

Java Razor Client

Dear all,

this may be of interest to some: The current version of Camel's Eye, a 
GPL'd client-side Java POP3/SMTP proxy, has support for Razor. Credits to 
the Spamato team for the original implementation. More info is available 
on http://zieren.de/ce

-Jörg

--

-- 
Jörg Zieren           http://www.zieren.de            +49 170 7516134
For a list of common abbreviations, see http://www.zieren.de/abk.html
Please do not communicate my address to *any* website/service/company

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
Vipul Ved Prakash | 2 Aug 2006 15:44

Re: Java Razor Client

Cool! 

cheers,
vipul

-----Original Message-----
From: razor-users-bounces <at> lists.sourceforge.net on behalf of Jörg Zieren
Sent: Wed 8/2/2006 12:42 AM
To: razor-users <at> lists.sourceforge.net
Subject: [Razor-users] Java Razor Client

Dear all,

this may be of interest to some: The current version of Camel's Eye, a
GPL'd client-side Java POP3/SMTP proxy, has support for Razor. Credits to
the Spamato team for the original implementation. More info is available
on http://zieren.de/ce

-Jörg

--
Jörg Zieren           http://www.zieren.de            +49 170 7516134
For a list of common abbreviations, see http://www.zieren.de/abk.html
Please do not communicate my address to *any* website/service/company

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
Thomas Jarosch | 9 Aug 2006 12:08
Favicon

Reporting known spam

Hello,

I justed started using Razor and must say I'm
very pleased with the results :-)

If nevertheless a spam message ends up in my inbox, I just hit a button
to execute razor-report and then automatically delete the message.
Let's assume the spam mail is already known to the Razor network,
but the spam score wasn't sufficent for marking the mail as spam. 

Is it ok or even desired to report the mail again to the Razor network?
IMHO this will boost the spam confidence of the message, right?
So one can be lazy and use a single filter/shortcut to
report and delete the message.

Best regards,
Thomas Jarosch

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Kelson | 9 Aug 2006 18:09
Favicon

Re: Reporting known spam

Thomas Jarosch wrote:
> Let's assume the spam mail is already known to the Razor network,
> but the spam score wasn't sufficent for marking the mail as spam. 
> 
> Is it ok or even desired to report the mail again to the Razor network?
> IMHO this will boost the spam confidence of the message, right?

Yes on both counts.

--

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jörg Zieren | 9 Aug 2006 18:27
Picon

Re: Reporting known spam

Kelson wrote:
> Thomas Jarosch wrote:
>> Let's assume the spam mail is already known to the Razor network,
>> but the spam score wasn't sufficent for marking the mail as spam. 
>>
>> Is it ok or even desired to report the mail again to the Razor network?
>> IMHO this will boost the spam confidence of the message, right?
> 
> Yes on both counts.

Wouldn't that mean that Razor was vulnerable against spammers simply 
revoking their messages again and again until they were classified as ham?

I somewhat assumed that each report counts only once per account, and that 
newly created accounts start with zero credibility, so the above scenario 
or close derivatives would be impossible. This is just speculation 
though... Maybe it's best if the gory details remain undisclosed, so as 
not to encourage spammers working around them.

-Jörg

--

-- 
Jörg Zieren           http://www.zieren.de            +49 170 7516134
For a list of common abbreviations, see http://www.zieren.de/abk.html
Please do not communicate my address to *any* website/service/company

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Theo Van Dinter | 9 Aug 2006 18:52

Re: Reporting known spam

On Wed, Aug 09, 2006 at 06:27:11PM +0200, Jörg Zieren wrote:
> I somewhat assumed that each report counts only once per account, and that 
> newly created accounts start with zero credibility, so the above scenario 
> or close derivatives would be impossible. This is just speculation 
> though... Maybe it's best if the gory details remain undisclosed, so as 
> not to encourage spammers working around them.

My understanding is that yes, you're correct.  A report from the same user
over and over only counts once.  Each account has an associated trust level,
so it takes more votes from untrusted people than trusted people.

As to what's to stop spammers from abusing this ...  There's nothing, really,
except that they'd have to report spam to get their trust rating up before
their revokes were useful.  I guess someone could report another spammer's
mails and revoke their own, but then if they all do that, they'd all end up
with low trust and all the spam reported.

Letting spammers fight with each other isn't necessarily bad IMO. :)

--

-- 
Randomly Generated Tagline:
"If you know the enemy and know yourself, you need not fear the result
 of a hundred battles.  If you know yourself but not the enemy, for every
 victory gained you will also suffer a defeat. If you know neither the
 enemy nor yourself, you will succumb in every battle." - Sun Tzu
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
Vipul Ved Prakash | 9 Aug 2006 21:48

Re: Reporting known spam

Hi,

Razor uses a trust metric to assign reputations to reporters. New reporters
start at 0 and have to build up trust by exhibiting agreement with existing
trusted reporters. This protects against various forms of "ballot stuffing"
attacks that spammers can (and do) mount.

ceers,
vipul


-----Original Message-----
From: razor-users-bounces <at> lists.sourceforge.net on behalf of Jörg Zieren
Sent: Wed 8/9/2006 9:27 AM
To: razor-users <at> lists.sourceforge.net
Subject: Re: [Razor-users] Reporting known spam

Kelson wrote:
> Thomas Jarosch wrote:
>> Let's assume the spam mail is already known to the Razor network,
>> but the spam score wasn't sufficent for marking the mail as spam.
>>
>> Is it ok or even desired to report the mail again to the Razor network?
>> IMHO this will boost the spam confidence of the message, right?
>
> Yes on both counts.

Wouldn't that mean that Razor was vulnerable against spammers simply
revoking their messages again and again until they were classified as ham?

I somewhat assumed that each report counts only once per account, and that
newly created accounts start with zero credibility, so the above scenario
or close derivatives would be impossible. This is just speculation
though... Maybe it's best if the gory details remain undisclosed, so as
not to encourage spammers working around them.

-Jörg

--
Jörg Zieren           http://www.zieren.de            +49 170 7516134
For a list of common abbreviations, see http://www.zieren.de/abk.html
Please do not communicate my address to *any* website/service/company

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
Mark Bucciarelli | 9 Aug 2006 22:58

Unable to connect, operation in progress

Hi,

First post, so I'd like to start by saying thanks for making a
great idea free software.

I have setup razor to check outgoing mail using a Courier Perl
filter.  Things worked fine for about the first six hours, at
which point the log shows the following:

check[41617]: [ 2]  Razor-Agents v2.82 starting razor-check -home=/home/razor
check[41617]: [ 3] mail 1 is not known spam.
check[41620]: [ 2] [bootup] Logging initiated LogDebugLevel=3 to file:/home/razor/razor-agent.log
check[41620]: [ 2]  Razor-Agents v2.82 starting razor-check -home=/home/razor
check[41620]: [ 3] Unable to connect to shock.cloudmark.com:2703; Reason: Operation now in progress.
check[41620]: [ 3] Unable to connect to discovery.spamnet.com:2703; Reason: Operation now in progress.
check[41620]: [ 3] Unable to connect to discovery.spamnet.com:2703; Reason: Operation now in progress.
check[41620]: [ 1] razor-check error: connect1: nextserver: Bootstrap discovery failed. Giving up.

>From that point on, anytime the process 41620 (one of the Courier
perlfilters) tried to process a message, the razor log said:

check[41620]: [ 1] razor-check error: nextserver: No Razor servers available at this time

Any idea what happened?  The three other Courier Perl filter
processes happily went about their business while PID 41620 was
not working.

Regards,

--

-- 
Mark Bucciarelli
GAIA Host Collective, LLC

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Vipul Ved Prakash | 9 Aug 2006 23:17

Re: Unable to connect, operation in progress

Mark,

Looks like you are unable to connect on port 2703.  Try telnet d1.cloudmark.com 2703 and see if you can go out. Perhaps you/your admin is blocking outgoing connections on port 2703.

cheers,
vipul


-----Original Message-----
From: razor-users-bounces <at> lists.sourceforge.net on behalf of Mark Bucciarelli
Sent: Wed 8/9/2006 1:58 PM
To: razor-users <at> lists.sourceforge.net
Subject: [Razor-users] Unable to connect, operation in progress

Hi,

First post, so I'd like to start by saying thanks for making a
great idea free software.

I have setup razor to check outgoing mail using a Courier Perl
filter.  Things worked fine for about the first six hours, at
which point the log shows the following:

check[41617]: [ 2]  Razor-Agents v2.82 starting razor-check -home=/home/razor
check[41617]: [ 3] mail 1 is not known spam.
check[41620]: [ 2] [bootup] Logging initiated LogDebugLevel=3 to file:/home/razor/razor-agent.log
check[41620]: [ 2]  Razor-Agents v2.82 starting razor-check -home=/home/razor
check[41620]: [ 3] Unable to connect to shock.cloudmark.com:2703; Reason: Operation now in progress.
check[41620]: [ 3] Unable to connect to discovery.spamnet.com:2703; Reason: Operation now in progress.
check[41620]: [ 3] Unable to connect to discovery.spamnet.com:2703; Reason: Operation now in progress.
check[41620]: [ 1] razor-check error: connect1: nextserver: Bootstrap discovery failed. Giving up.

>From that point on, anytime the process 41620 (one of the Courier
perlfilters) tried to process a message, the razor log said:

check[41620]: [ 1] razor-check error: nextserver: No Razor servers available at this time

Any idea what happened?  The three other Courier Perl filter
processes happily went about their business while PID 41620 was
not working.

Regards,

--
Mark Bucciarelli
GAIA Host Collective, LLC

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
Mark Bucciarelli | 9 Aug 2006 23:34

Re: Unable to connect, operation in progress

On Wed, Aug 09, 2006 at 02:17:05PM -0700, Vipul Ved Prakash wrote:

> Looks like you are unable to connect on port 2703.  Try telnet
> d1.cloudmark.com 2703 and see if you can go out. Perhaps
> you/your admin is blocking outgoing connections on port 2703.

pf is configured to allow all outgoing connections.

root <at> spaminator# telnet d1.cloudmark.com 2703
Trying 66.151.150.12...
Connected to d1.cloudmark.com.
Escape character is '^]'.
sn=D&srl=514&a=l&a=cg&ep4=7542-10
^]
telnet> quit
Connection closed.
root <at> spaminator#

m

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

Gmane