IP address filtering

[FieldDir121]

The latest is that my ISP seems to relay a very few messages internally such that my ISP's ip address is the most recent in the e-mail header. This has caused a few non-spam messages to be trapped by the ip address filter when they were not actually spam.

Since my position is that false positives should not be tolerated, not even one, and it has happened at least twice, I am disabling the ip address filter. Ip address filtering might still work for you but my ISP has recently changed something that makes it unreliable for me.

I recently implemented a new filter for specific subject text. I did this to trap the high number of e-mails with pdf attachments, usually stock tips. The file extension filter didn't seem to be able to stop them. Filtering using a text file containing text from subject lines has work well, at least for now (until they read this).

In the last four days the subject filter has trapped 46 e-mails out of 422 (all spam) while the spam address filter only caught 17. The SpamEntire filter caught 157 so losing the ip address filter will not result in too many additional messages getting through. A little more diligence with the other filters will probably make up the difference.

Scott

[FieldDir121]

After some thought it occurred to me that the false positives were occurring because I used ip addresses from one ISP to filter incoming messages from another ISP.

Since 90% of the spam comes in from one ISP I stopped adding ip addresses of incoming e-mail from other ISPs. The filter seems to be reliable again.

I had to do something since my new subject filter hit rate dropped to only one in three days. Whoever they are they got smarter.

Scott

[tribble]

I still use your IP filter and it still works. I have about 3500 addresses from spammers and have no performance issues.

I'm glad to see you're also staying on top of it

[FieldDir121]

I am glad that someone is using it and that it is working well for you.

Did you add buttons to add and remove addresses from the list?
I have:
1) AdrAdr
4) RemoveAdr
5) LocateAdr
9) OpenStats

I have 38407 adddresses and frequently get address matches above 10,000. There are currently two in the list above 30,000.

The SpamEntire filter still catches the most but it also requires the most manual attention. It is amazing how many ways they can spell viagra and other spam words.

Scott

[FieldDir121]

I used the filters I wrote for a couple of years. Lots of spam still got through, 50 to 100 per day.

Eventually I had my work e-mail forwarded to a gmail account I created just for that purpose. My personal accounts get very little spam since their e-mail addresses aren't posted on any web sites.

I read my e-mail from the gmail account. They eliminate 99 out of 100 spam e-mails and I don't have to do anything. I don't run any filters.

Scott

[tribble]

Still using it after all these years...

Now-a-days though, it becomes the "final" filter. When all other filters are run with no action taken, this filter is fired, adds the I.P. address to the text file and moves the email. This forces me to take care of every good email and by default, anything that's left is bad. If I find it in the Spam I.P. address folder, I decide what action to take (it's spam and leave it or it's good so add a filter). I previously had over 3500 addresses, now I have about 350.

Using K-9, Barca Bayesian filters, filters for each good email (in my address book, specific emails that are routed to specific folders etc) my Junk Mail Filter statistics in Barca are at 96.99%. It only took me four years to get there!!

[FieldDir121]

Glad they are still working for you.

I wasn't willing to spend any more time improving my other filters. The gmail solution works for both my personal and work accounts,

Scott