[Declude.JunkMail] Additional IP4R RHSBL tests
I have been running these tests for a while (as well as other that were producing little or not results), and they have been producing good results for me. However, my philosophy is different from some others on this list in that I like to test lots of IP4R and RHSBL databases and apply relatively low weights to many tests. I feel that you get a better balance and fewer FPs this way. The more tests that flag the source the more likely it is to be spam and the higher weight that gets applied to the message. Also, since all DNS based tests get spanned simultaneously (rather than consecutively), there is no performance nor latency hit (unless one of the test sites is not responding - Scott, are you still planning to add a configurable time-out setting for the DNS based tests?). Anyway, here are the additional DNS based tests I've been using, in case you are interested in trying any of them out: * These IP4R test sites are listed on Scott's spam databases site, but without the test info: BORDERWORLD ip4r bl.borderworlds.dk * 2 0 BRAINERD ip4r blackholes.brainerd.net * 2 0 * These IP4R test sites are not yet listed on Scott's spam databases site: COMPLETEWHOIS ip4r bogons.dnsiplists.completewhois.com * 2 0 INTRUDERS ip4r intruders.docs.uu.se * 2 0 NJABL-DYNA ip4r dynablock.njabl.org * 2 0 REDHAWK ip4r access.redhawk.org * 2 0 SNARK ip4r rbl.snark.net* 2 0 SOLID ip4r dnsbl.solid.net* 2 0 SPAMRBL ip4r map.spam-rbl.com * 2 0 SPAMSOURCES ip4r spamsources.dnsbl.info * 2 0 * These RHSBL test sites are not yet listed on Scott's spam databases site: ISOC-RHSBL rhsbl dnsbl.isoc.bg* 2 0 ZONEEDIT rhsbl zebl.zoneedit.com * 2 0 Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Additional IP4R RHSBL tests
Bill, Thanks for this additl list. I too agree to run lots of tests scored low sooo here are two more: PSBLip4rpsbl.surriel.com* 1 0 DNSBL-T1ip4rt1.dnsbl.net.au * 2 0 -Nick Hayer From: Bill Landry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject:[Declude.JunkMail] Additional IP4R RHSBL tests Date sent: Tue, 23 Dec 2003 11:21:45 -0800 Send reply to: [EMAIL PROTECTED] I have been running these tests for a while (as well as other that were producing little or not results), and they have been producing good results for me. However, my philosophy is different from some others on this list in that I like to test lots of IP4R and RHSBL databases and apply relatively low weights to many tests. I feel that you get a better balance and fewer FPs this way. The more tests that flag the source the more likely it is to be spam and the higher weight that gets applied to the message. Also, since all DNS based tests get spanned simultaneously (rather than consecutively), there is no performance nor latency hit (unless one of the test sites is not responding - Scott, are you still planning to add a configurable time-out setting for the DNS based tests?). Anyway, here are the additional DNS based tests I've been using, in case you are interested in trying any of them out: * These IP4R test sites are listed on Scott's spam databases site, but without the test info: BORDERWORLD ip4r bl.borderworlds.dk * 2 0 BRAINERD ip4r blackholes.brainerd.net * 2 0 * These IP4R test sites are not yet listed on Scott's spam databases site: COMPLETEWHOIS ip4r bogons.dnsiplists.completewhois.com * 2 0 INTRUDERS ip4r intruders.docs.uu.se * 2 0 NJABL-DYNA ip4r dynablock.njabl.org * 2 0 REDHAWK ip4r access.redhawk.org * 2 0 SNARK ip4r rbl.snark.net* 2 0 SOLID ip4r dnsbl.solid.net * 2 0 SPAMRBL ip4r map.spam-rbl.com * 2 0 SPAMSOURCES ip4r spamsources.dnsbl.info * 2 0 * These RHSBL test sites are not yet listed on Scott's spam databases site: ISOC-RHSBL rhsbl dnsbl.isoc.bg* 2 0 ZONEEDIT rhsbl zebl.zoneedit.com * 2 0 Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Additional IP4R RHSBL tests
- Original Message - From: Nick Hayer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 23, 2003 11:40 AM Subject: Re: [Declude.JunkMail] Additional IP4R RHSBL tests Bill, Thanks for this additl list. I too agree to run lots of tests scored low sooo here are two more: PSBL ip4r psbl.surriel.com * 1 0 DNSBL-T1 ip4r t1.dnsbl.net.au * 2 0 These are both listed on Scott's spam database site (t1.dnsbl.net.au is the same as t1.bl.reynolds.net.au). I run many of the tests on Scott's site, I just wanted to provide a list of some of the test sites that do not appear on Scott's site yet. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Additional IP4R RHSBL tests
I just wanted to provide a list of some of the test sites that do not appear on Scott's site yet. FYI, we list *all* known spam databases at http://www.declude.com/junkmail/support/ip4r.htm . However, since most spam databases are run by individuals and small organizations, and often know little about spam control, it's quite common for them to appear very, very slowly. Typically it starts by someone posting about their DNSBL to a mailing list, which gets largely ignored since nobody is using it, and then someone finds it and reports it to one of the 2-3 main lists of spam databases, and so on. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Additional IP4R RHSBL tests
Also, since all DNS based tests get spanned simultaneously (rather than consecutively), there is no performance nor latency hit (unless one of the test sites is not responding - Scott, are you still planning to add a configurable time-out setting for the DNS based tests?). Yes, that is still something we plan to add. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
