A collaborative spam filter

Alessandro Zattoni | 5 Jun 2007 14:03

Removing Ferretti server ip from your spamming list

Hi *,

my company (Ferretti Group) is tryng to send an email to a supplier. This supplier uses "Razor" to check the incoming emails. They can't receive any email from our server because my server is in your "spam list".

The information of my server are :

sullivan.ferrettigroup.com | 82.187.87.27

Could you please remove it from your spam list, or explain me how to do by myself?

Best Regards

Alessandro Zattoni
SysAdmin <at> Ferretti Group

CONFIDENTIALITY NOTICE: This e-mail message from FERRETTI Group (including all attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Please note that any opinions expressed in this e-mail are those of the author personally and not of the FERRETTI Group, who does not accept responsibility for the contents of the message. Any unauthorised review, use, disclosure, copying or distribution is strictly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and its attachments

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

headers

Mike Burger | 7 Jun 2007 05:09

Re: Removing Ferretti server ip from your spamming list

Allesandro:

I'm afraid you are mistaken.

Razor does not blacklist IP addresses or servers.  Razor's "spam list", 
as you put it, consists of messages that have been submitted as spam, 
against which incoming messages, to other servers, are compared.  If 
your server's messages match messages that have been submitted to the 
Razor system as spam, then the message is flagged as such.

If your server, instead, is blacklisted, it is not by way of the Razor 
system.  I would suggest, instead, that if your messages are being 
bounced back to you as being rejected due to spam, you contact the 
maintainers of the blacklist in question. I can't find any RBLs that are 
listing you, so I would, instead, look at the content of your messages.

Alessandro Zattoni wrote:
>
> Hi *,
>
> my company (Ferretti Group) is tryng to send an email to a supplier. 
> This supplier uses "Razor" to check the incoming emails. They can't 
> receive any email from our server because my server is in your "spam 
> list".
>
> The information of my server are :
>
> sullivan.ferrettigroup.com | 82.187.87.27
>
>
> Could you please remove it from your spam list, or explain me how to 
> do by myself?
>
> Best Regards
>
>
>   Alessandro Zattoni
> SysAdmin  <at>  Ferretti Group
>
>
>
>
>
>
>
>
> CONFIDENTIALITY NOTICE: This e-mail message from FERRETTI Group 
> (including all attachments) is for the sole use of the intended 
> recipient(s) and may contain confidential and privileged information. 
> Please note that any opinions expressed in this e-mail are those of 
> the author personally and not of the FERRETTI Group, who does not 
> accept responsibility for the contents of the message. Any 
> unauthorised review, use, disclosure, copying or distribution is 
> strictly prohibited. If you are not the intended recipient, please 
> contact the sender by reply e-mail and destroy all copies of the 
> original message and its attachments
>
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> ------------------------------------------------------------------------
>
> _______________________________________________
> Razor-users mailing list
> Razor-users <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/razor-users
>   

-- 
--
Mike Burger
http://www.bubbanfriends.org

Visit the Dog Pound II BBS
telnet://dogpound2.citadel.org or http://dogpound2.citadel.org

To be notified of updates to the web site, visit:

https://www.bubbanfriends.org/mailman/listinfo/site-update

or send a blank email to:

site-update-subscribe <at> bubbanfriends.org

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

Gary V | 7 Jun 2007 06:03

Re: Removing Ferretti server ip from your spamming list

Mike wrote:

> Allesandro:

> I'm afraid you are mistaken.

> Razor does not blacklist IP addresses or servers.  Razor's "spam list", 
> as you put it, consists of messages that have been submitted as spam, 
> against which incoming messages, to other servers, are compared.  If 
> your server's messages match messages that have been submitted to the 
> Razor system as spam, then the message is flagged as such.

> If your server, instead, is blacklisted, it is not by way of the Razor 
> system.  I would suggest, instead, that if your messages are being 
> bounced back to you as being rejected due to spam, you contact the 
> maintainers of the blacklist in question. I can't find any RBLs that are 
> listing you, so I would, instead, look at the content of your messages.

> Alessandro Zattoni wrote:
>>
>> Hi *,
>>
>> my company (Ferretti Group) is tryng to send an email to a supplier. 
>> This supplier uses "Razor" to check the incoming emails. They can't 
>> receive any email from our server because my server is in your "spam 
>> list".
>>
>> The information of my server are :
>>
>> sullivan.ferrettigroup.com | 82.187.87.27
>>
>>
>> Could you please remove it from your spam list, or explain me how to 
>> do by myself?
>>
>> Best Regards
>>
>>
>>   Alessandro Zattoni
>> SysAdmin  <at>  Ferretti Group
>>
>>
>> CONFIDENTIALITY NOTICE: This e-mail message from FERRETTI Group 
>> (including all attachments) is for the sole use of the intended 
>> recipient(s) and may contain confidential and privileged information. 
>> Please note that any opinions expressed in this e-mail are those of 
>> the author personally and not of the FERRETTI Group, who does not 
>> accept responsibility for the contents of the message. Any 
>> unauthorised review, use, disclosure, copying or distribution is 
>> strictly prohibited. If you are not the intended recipient, please 
>> contact the sender by reply e-mail and destroy all copies of the 
>> original message and its attachments
>>

It's possibly this CONFIDENTIALITY NOTICE. You include this text with
every mail you send. It's possible some people submit your messages to
Razor as spam and this text is triggering a hit. You might consider
changing this text slightly and then sending a message to the same
recipient to see if you no longer get a razor hit.

Gary V

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

John Andersen | 7 Jun 2007 07:16

Re: Removing Ferretti server ip from your spamming list

On Wednesday 06 June 2007, Gary V wrote:
> Mike wrote:
> > Allesandro:
> >
> > I'm afraid you are mistaken.
> >
> > Razor does not blacklist IP addresses or servers.  Razor's "spam list",
> > as you put it, consists of messages that have been submitted as spam,
> > against which incoming messages, to other servers, are compared.  If
> > your server's messages match messages that have been submitted to the
> > Razor system as spam, then the message is flagged as such.
> >
> > If your server, instead, is blacklisted, it is not by way of the Razor
> > system.  I would suggest, instead, that if your messages are being
> > bounced back to you as being rejected due to spam, you contact the
> > maintainers of the blacklist in question. I can't find any RBLs that are
> > listing you, so I would, instead, look at the content of your messages.
> >
> > Alessandro Zattoni wrote:
> >> Hi *,
> >>
> >> my company (Ferretti Group) is tryng to send an email to a supplier.
> >> This supplier uses "Razor" to check the incoming emails. They can't
> >> receive any email from our server because my server is in your "spam
> >> list".
> >>
> >> The information of my server are :
> >>
> >> sullivan.ferrettigroup.com | 82.187.87.27
> >>
> >>
> >> Could you please remove it from your spam list, or explain me how to
> >> do by myself?
> >>
> >> Best Regards
> >>
> >>
> >>   Alessandro Zattoni
> >> SysAdmin  <at>  Ferretti Group
> >>
> >>
> >> CONFIDENTIALITY NOTICE: This e-mail message from FERRETTI Group
> >> (including all attachments) is for the sole use of the intended
> >> recipient(s) and may contain confidential and privileged information.
> >> Please note that any opinions expressed in this e-mail are those of
> >> the author personally and not of the FERRETTI Group, who does not
> >> accept responsibility for the contents of the message. Any
> >> unauthorised review, use, disclosure, copying or distribution is
> >> strictly prohibited. If you are not the intended recipient, please
> >> contact the sender by reply e-mail and destroy all copies of the
> >> original message and its attachments
>
> It's possibly this CONFIDENTIALITY NOTICE. You include this text with
> every mail you send. It's possible some people submit your messages to
> Razor as spam and this text is triggering a hit. You might consider
> changing this text slightly and then sending a message to the same
> recipient to see if you no longer get a razor hit.
>
> Gary V

More to the point, you should tell your clueless lawyers that such
confidentiality notices mean nothing, and only serve to exhibit the
stupidity and incompetence of those who insist upon its presence
on every outgoing mail.  Its unenforceable in every court in every 
country.

But I digress...

--

-- 
_____________________________________
John Andersen

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

Aaron Sherman | 7 Jun 2007 21:54

Re: Removing Ferretti server ip from your spamming list

Gary V wrote:

Mike wrote:
Allesandro:

[...snip...]

CONFIDENTIALITY NOTICE: This e-mail message from FERRETTI Group (including all attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Please note that any opinions expressed in this e-mail are those of the author personally and not of the FERRETTI Group, who does not accept responsibility for the contents of the message. Any unauthorised review, use, disclosure, copying or distribution is strictly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and its attachments

It's possibly this CONFIDENTIALITY NOTICE. You include this text with every mail you send. It's possible some people submit your messages to Razor as spam and this text is triggering a hit. You might consider changing this text slightly and then sending a message to the same recipient to see if you no longer get a razor hit

Almost certainly. When you have a LONG blurb like that, and very little text, "e.g. if you send a one sentence message to someone with a long disclaimer at the end," then to a system like Razor it looks like you tacked on some random noise at the head of a bulk message (which is actually exactly what you've done, though you didn't think of it that way).

Par the disclaimer WAY down or remove it. I'd suggest something like, "This e-mail is from FERRETTI Group, may contain confidential and privileged information, and opinions expressed are those of the author." All of the rest of the boilerplate is just noise anyway, and doesn't serve to actually protect you (as it's not a binding document). By reducing its length drastically, you increase the ratio of actual message text to boilerplate and increase the accuracy of systems like Razor on very short messages.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Razor-users mailing list
Razor-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

headers

Matt Kettler | 7 Jun 2007 23:57

Re: Removing Ferretti server ip from your spamming list

Alessandro Zattoni wrote:
> Hi *,
> 
> my company (Ferretti Group) is tryng to send an email to a supplier.
> This supplier uses "Razor" to check the incoming emails. They can't
> receive any email from our server because my server is in your "spam list".

Razor isn't a blacklist that lists email servers.

Razor lists checksums of the message body (aka e4 signatures) or checksums of
URLs in the message (aka e8 signatures).

e4 essentially treats each mime portion of the message as a separate item. For
each one it grabs a subset of the bytes and does a SHA hash on them, and that's
the signature.

e8 works a bit differently, pulling out URLs. It's mostly focused on the site
portion of the URL, but does appear to have some fuzzy-match checksum of the
rest of the URL that can cause the signature to change.

> 
> The information of my server are :
> 
> sullivan.ferrettigroup.com | 82.187.87.27

That would not matter to razor. You need to look at the content of the problem
message, not the server that sent it.

My guess is either:

1) it's an HTML message with a bunch of embedded images, one of which is a
spacer of some sort that a lot of spammers use.

2) you've got a URL in the message that's listed.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

Dennis Krul | 26 Jun 2007 12:06

Local razor2 database possible?

Lads,

We run several high volume mailservers and would like to add razor2 to
our collective of anti-spam measures. We don't like to have external
dependencies for service availability reasons and we don't want to
overload the razor2 servers.

I've read several posts in the mailinglist archive from people asking if
it's possible to run a local server, but the replies are hidden from the
public. I can not find an answer to my question on the site or in the
FAQ, so I guess this is the right place to go :)

So I'll ask again: Is it possible to run a local server and mirror the
razor2 database? 

TIA for your reply.

-- Dennis Krul

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

Ved Prakash Vipul | 27 Jun 2007 09:13

Re: Local razor2 database possible?

Dennis,

Local Razor2 dbs are available as a commercial product from Cloudmark  
in form of a SpamAssassin plugin[1] .

[1] http://cloudmark.com/serviceproviders/authority/spamassassin/

cheers,
vipul

On Jun 26, 2007, at 3:06 AM, Dennis Krul wrote:

> Lads,
>
> We run several high volume mailservers and would like to add razor2 to
> our collective of anti-spam measures. We don't like to have external
> dependencies for service availability reasons and we don't want to
> overload the razor2 servers.
>
> I've read several posts in the mailinglist archive from people  
> asking if
> it's possible to run a local server, but the replies are hidden  
> from the
> public. I can not find an answer to my question on the site or in the
> FAQ, so I guess this is the right place to go :)
>
> So I'll ask again: Is it possible to run a local server and mirror the
> razor2 database?
>
> TIA for your reply.
>
> -- Dennis Krul
>
>
>
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Razor-users mailing list
> Razor-users <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/razor-users

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

headers

Jon Morby | 30 Jun 2007 18:12

Re: Local razor2 database possible?


On 27 Jun 2007, at 08:13, Ved Prakash Vipul wrote:

> Dennis,
>
> Local Razor2 dbs are available as a commercial product from Cloudmark
> in form of a SpamAssassin plugin[1] .
>
> [1] http://cloudmark.com/serviceproviders/authority/spamassassin/
>
> cheers,
> vipul

Don't know if I'm just blind, but I can't see any indications of  
pricing on there.  Is it a case of "the bigger you are the more you  
pay" or is there a published pricing scheme somewhere that I missed?

I'd be interested in implementing this if it was cost effective

--

-- 
Jon Morby
FidoNet Registration Services Ltd
tel: 0845 004 3050 / fax: 0845 004 3051
web: http://www.fido.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

Mon	Tue	Wed	Thu	Fri	Sat	Sun

				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30

4	December 2012
1	June 2012
2	November 2011
3	September 2011
2	August 2011
8	June 2011
1	May 2010
1	February 2010
1	November 2009
2	May 2009
1	March 2009
3	December 2008
2	October 2008
2	August 2008
1	June 2008
1	March 2008
8	February 2008
11	January 2008
4	December 2007
4	November 2007
6	October 2007
4	September 2007
5	August 2007
4	July 2007
9	June 2007
15	May 2007
16	April 2007
6	March 2007
2	February 2007
28	January 2007
21	December 2006
14	November 2006
19	October 2006
20	September 2006
54	August 2006
6	July 2006
9	June 2006
32	May 2006
8	April 2006
17	March 2006
2	February 2006
1	January 2006
2	December 2005
28	November 2005
1	October 2005
13	September 2005
15	August 2005
12	July 2005
64	June 2005
16	May 2005
9	April 2005
11	March 2005
22	February 2005
20	January 2005
22	December 2004
18	November 2004
39	October 2004
40	September 2004
57	August 2004
62	July 2004
78	June 2004
32	May 2004
103	April 2004
99	March 2004
64	February 2004
60	January 2004
71	December 2003
79	November 2003
58	October 2003
98	September 2003
114	August 2003
29	July 2003
71	June 2003
83	May 2003
73	April 2003
63	March 2003
262	February 2003
107	January 2003
96	December 2002
108	November 2002
216	October 2002
110	September 2002
284	August 2002
235	July 2002
345	June 2002
134	May 2002
117	April 2002
50	March 2002