Importing my Blacklist

[dd_uk]

I loaded the new version of the program - looks very nice, time wil tell if it is any better.

The program transfered my friends list but not my blacklist, please advise how I can do this please.

I would also add my name to the list of people who would like bounce back on screen.

David

[Sidewinder]

I loaded the new version of the program - looks very nice, time wil tell if it is any better.

The program transfered my friends list but not my blacklist, please advise how I can do this please.

I would also add my name to the list of people who would like bounce back on screen.

David

Some have had luck moving the Blacklist.txt file from the old version into the User Files folder (see path from Help).

[rusticdog]

We don't import the blacklist automatically, however under Settings >> Spam Tools >> Blacklist >> there is an import button which will read the old MailWasher blacklist file.

[dd_uk]

Thanks for answer.

Why do you not import the blacklist?

David

[rusticdog]

Thanks for answer.

Why do you not import the blacklist?

David

Because we feel it's an ineffective tool to use. So much spam now is forged it's uncommon to see the same senders unless it's spoofed to reflect your own address. However importing it is a very common question so I would think it likely we alter this

[stan_qaz]

A lot of v6 users blacklist all the addresses they see in spam and keep them forever, that used to be a decent idea. Spammers though started to see a problem with their income stream and traced it back to folks blacklisting their addresses, they also had to deal with a massive pile of bounce messages every day. Spammers are crooks but not necessarily stupid ones and they thought on this a bit and came up with a plan that makes blacklisting and bouncing nearly worthless or even harmful to the user. Now the spammers are happy, their mail is getting past the blacklists, the bounces don't bother them and can even be used to attack others. What they did to solve their problems was to use a forged address as the from and return address on their spam now the bounces go where the spammer wants and since they don't have to reuse an address, just fake another the blacklist doesn't do much good.

Today in v6 it appears that if you do blacklist it is best to only keep blacklisted addresses for a week or so. And unless you have multiple accounts getting the same spam even that is of little real value.

In 2010 it is really better to save blacklisting for addresses that are not forged, way under 5% of my spam isn't obviously forged and sorting out that small amount can take 5-10 minutes per message. With the new way the tools work the accuracy when not bothering to blacklist is still as good or better than v6 and it will save you time and hassle to skip most blacklisting.

[Digital Drummer]

A lot of v6 users blacklist all the addresses they see in spam and keep them forever, that used to be a decent idea.

Today in v6 it appears that if you do blacklist it is best to only keep blacklisted addresses for a week or so. And unless you have multiple accounts getting the same spam even that is of little real value.

In 2010 it is really better to save blacklisting for addresses that are not forged, way under 5% of my spam isn't obviously forged and sorting out that small amount can take 5-10 minutes per message. With the new way the tools work the accuracy when not bothering to blacklist is still as good or better than v6 and it will save you time and hassle to skip most blacklisting.

Yes but the problem for me (& probably others) is although the new MW may be better at filtering I still don't understand them or really have much time to figure things out by reading through forum links. How about some videos?

I get almost 200 spam emails a day and it's just easier to BList them rather than figure these damn filters out. This newest thing they do with making it look like their Spam is coming from My email address (the same email they're sending to) is real annoying. I've tried using the Filter Suggestions..."Not to me, Not from me, and From me" to cut back on these types of Spam from getting through but none of them seem to work right for me. When using those filters as suggested my legit mail gets sorted into the "Not to me or Not from me" column. Like I said - there's just no time to sit down for a few hrs to learn and troubleshoot this stuff. So I will probably always be a domain Blister.

[stan_qaz]

Take a look at my suggested blacklist if you want to block spammy domains, it isn't a bad start but keep in mind it only blocks dumb spammers that don't forge a good domain on their messages. The classify column is much more effective in sorting good and bad mail once you have processed a few days worth.

http://forum.firetrust.com/viewtopic.ph ... 689#p19689

I couldn't survive without my filters, being able to filter and then group the incoming messages by the filter they hit saves me more time every week that creating the filters did in the first place. It is well worth your time to get at least the basics working, recycled, not from me, not to me and from me. There shouldn't be any problem with any of these, you just switch to source view on a good message and copy/paste the info from the message source into the filter.

From topic: http://forum.firetrust.com/download/file.php?id=1579

[rusticdog]

Yes but the problem for me (& probably others) is although the new MW may be better at filtering I still don't understand them or really have much time to figure things out by reading through forum links. How about some videos?

I get almost 200 spam emails a day and it's just easier to BList them rather than figure these damn filters out. This newest thing they do with making it look like their Spam is coming from My email address (the same email they're sending to) is real annoying. I've tried using the Filter Suggestions..."Not to me, Not from me, and From me" to cut back on these types of Spam from getting through but none of them seem to work right for me. When using those filters as suggested my legit mail gets sorted into the "Not to me or Not from me" column. Like I said - there's just no time to sit down for a few hrs to learn and troubleshoot this stuff. So I will probably always be a domain Blister.

I don't have any issue with the Classification, once trained it's getting emails spot on. No blacklisting required.

[Digital Drummer]

There shouldn't be any problem with any of these, you just switch to source view on a good message and copy/paste the info from the message source into the filter.

Ok, so i looked at the source on several emails and this is what i got...

Envelope-to: [email protected]

Received: from localhost (mx.servershost.net)
by mx.servershost.net (Postfix)
for <[email protected]>; Wed, 21 Jul 2010 14:22:01 -0400 (EDT)

X-Apparently-To: [email protected]

To: D T <[email protected]>

So on a couple I got mail being sent to just my plain email, on another < > surrounding my email, then lastly my initials followed by my email again in < >. Does this mean I must input each variation of my email into the filter?

[stan_qaz]

So on a couple I got mail being sent to just my plain email, on another < > surrounding my email, then lastly my initials followed by my email again in < >. Does this mean I must input each variation of my email into the filter?

Right, that's all you need to do. However your comment concerns me, are you looking at messages you have sent to yourself or at ones others are sending you? This filter set is just for messages you are sending yourself, first filter and ones spammers are sending you second filter.

If you are looking at messages you are sending yourself then you seem to have your mail sending programs set up differently so you'll need to enter the format each one uses in sending mail. This is in addition to the multiple rules used if sending from different addresses. I avoid the hassle by using the same data on each mail sending program, that makes it easier for friends to filter my mail to them too.

I find it a bad idea to send any messages with just a bare address as that is quite often exactly what a spammer does. You'd be wise to fix that setting in each mail program you send from so that it includes your name or other semi-unique information in addition to the basic e-mail address as I showed being used in the filter I posted. If you don't it will pass every spam message that uses the bare address.

[Digital Drummer]

I pulled all the above info from 3-4 emails that others (Friends list) has sent me. That's what I thought I was to do. Now you're saying I should send mail to myself and look at the source on those emails? Then copy my email exactly like it looks from the source into the filter?

See, this is why I'm so confused with this stuff.

[stan_qaz]

The filters I posted above are titled "From me" and "not from me" and are intended to protect all messages you have sent yourself and to detect almost all forgeries where a spammer is attempting to bypass your friends list by pretending to be you.

The topic with more detailed explanations is at the top of this forum, http://forum.firetrust.com/viewtopic.php?f=50&t=5575 if you want to give it a look.