Plugins/Add-Ons

« Back to the plugin index site

A Blacklist Filter

Apr/17/2007, 343 KB, 329995 hits
by Mark Edwards


Obsolete! Does not work with latest version of Spamihilator!

Blacklist Filter eliminates loads of junk mail automatically by using public blacklists! It’s fast, powerful, flexible, intelligent, and very easy to use.

The filter gathers all IP addresses in email headers, and IP addresses and domain names listed in URLs in the message body. The IP addresses and URLs are then are checked with third-party blacklist service providers to determine if they are listed in the configured blacklists. The IP addresses from mail headers are also checked to determine if the sender tried to use a spoofed (fake) IP address to send the email message.

If the URLs in the body of a message are encoded then this plugin will decode the URLs. The URLs can be used to determine if a particular domain is known to send spam or known to not adhere to acceptable opt-in mailing list policies.

If any of the IP addresses or domain names in a particular message are listed in any of the defined third-party blacklist service providers’ blacklists, or if address spoofing is detected, then the message is considered to be spam and is moved to the Spamihilator Recycle Bin. If you define any “whitelist” URL Exceptions and the exceptions match a message’s content then the message will not be considered spam. If you define any “blacklist” URL Exceptions and the exceptions match a message’s content then the message will be considered spam and is moved to the Spamihilator Recycle Bin.

It works by integrating any number of blacklist service providers into the filter system of Spamihilator. This is a summary of its features:

Feature Summary

* Filters all IP addresses listed in each message header

* Filters all URLs listed in each message body

* Decodes all encoded URLs

* Checks all IP addresses and URLs against third-party blacklist service databases

* Detects IP address spoofing attempts

* Filters out all email with blacklisted IP addresses or URL domain names or spoofed addresses

* Caches DNS blacklist queries to enhance performance * Automatically tunes its performance based on statisitical tracking

* Shows which blacklist services work better than others based on the spam you receive

* Provides user-defineable domain name whitelists and blacklists that use pattern matching in URLs to act as exceptions that override third-party blacklist service databases

* Filters out all email that contain domains that match user-defined blacklist exception patterns

* Passes through all email that contain domains that match user-defined whitelist exception patterns

* Allows the user to specific a list of complete or partial IP addresses that will not be checked against blacklists when parsing email headers. This features allows you to bypass blacklist checking for mail servers that might inadvertantly become listed in a blacklist database.

* Allows for the user to define the spam probability percentage value returned by the plugin.

* Allows the user to determine whether a potential spam message is moved to the Recycle Bin or the Training Area.

* Comes with complete documentation in the help file

Visit the Dev Blog to learn about the latest plugin updates: http://edwards.org/blacklistfilter

Version history:

v0.9.0:

- fixed bug where some email headers caused false positive detection of spoofed addresses;

- fixed a problem where certain chars in email headers might cause inaccurate detection;

- fixed bugs in the “Test Server” option that tests blacklist servers for operability;

- added user-requested feature that allows specific IP addresses to be excluded from blacklist checks

- added user-requested feature to allow caching of DNS blacklist queries for faster performance

0.8.0 – fixed a minor problem where IP addresses prefixed by an @ sign in mail headers were not parsed properly; fixed a broken link in the Help/About section

0.7.9 – added user-requested feature to select whether potential spam is sent to the Recycle Bin or Training Area

0.7.8 – adjusted URL parsing and log file viewer

0.7.7 – initial public release



Download now (http://edwards.org/blacklistfilter)



User opinions: Submit your vote:
User opinions:
(167 votes)
 
best (5) very good (4) good (3)
medium (2) bad (1) very bad (0)


« Back to the plugin index site