>All three tests are not shown in the log.  Here's an example:


>I searched Declude logs from 7/1 - today and did NOT find failed tests
>for: RBL+DUL, RBL+RSS and MAPSALL.

That's probably not unusual.  For example, RBL+DUL (and MAPSALL) would only 
catch mail from a dialup line that also happened to be bad enough to get 
listed in RBL, which would be rare.

>The reason I'm going down this path is that the MAPSALL (RBL+ Service)
>test is suppose to include all three databases, so that only one (as
>opposed to 7) lookups is required.  However, since there is no log entry 
>for MAPSALL, I am
>hesitant to Remark out all of the other tests.

MAPSALL is actually the test that will fail is the E-mail comes from an IP 
listed in all the MAPS databases ("RBL+DUL+RSS" would be another way of 
describing it).

>All contracts say essentially the same thing, with the
>exception of what is queried:
>  RBL  - blackholes.mail-abuse.org
>  DUL  - dialups.mail-abuse.org
>  RSS  - relays.mail-abuse.org.
>  RBL+ - rbl-plus.mail-abuse.org

That is correct.  With just RBL, DUL, or RSS, one of the individual zones 
is queried (which returns a single result).  For RBL+, only one zone is 
queried, but it can return one of 7 responses (for all combinations of the 
3 tests).

>It looks like the Declude config file only queries
>rbl-plus.mail-abuse.org,

As it should, for RBL+.  :)

>but does it seven times in order to repor exactly why it failed.

Correct, that is the current design, and will likely be changed for a 
future release.  When changed, the end result will be exactly the same, but 
with a slight increase in performance.

>How can I test to make sure MAPSALL will work, so I can remark out the
>other six tests?

You can't.

If you want to have one test, you would need the definition to look like:

         RBLPLUSANY      ip4r    rbl-plus.mail-abuse.org *

That will get triggered if an E-mail comes from an IP listed in any of the 
MAPS databases.  However, you have less control, as all 3 tests (and 
combinations of them) will get treated equally.  With this one, you could 
safely remark out the other tests.
                        -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to