Title: Message
|
Browsing for low
total weights through the 638 messages which triggered CBL so
far today I'm not seeing any obvious errors, mostly very high
total weights.
Two that I've
definitely seen before were mail servers for comcast.net and bizmailsrvs.net
(Verizon - no angel), which were tested as open relays and found to be
closed by other ip4r services.
... and hey, I'm
not disagreeing, just sharing my own experience. To heck with YMMV, your
mileage WILL vary!
Andrew
8)
Well, if no
one every disagreed with me, I wouldn't learn nearly as much.
I watched
this for a full week recently and didn't find any problems. The site
says that it is only spamtraps and they expire automatically, but keep alive
for longer in association with repeat spamming.
I've seen that many
take recently active and subscribed accounts and turn them into spamtraps,
which will produce FP's on things like Yahoo, PayPal, Ebay, etc. I was
expecting to find some of that with CBL but to my amazement, didn't.
Maybe they get some regional FP's that I just don't see.
Could you
describe the types of FP's that you've seen with CBL. Exact names of
sites aren't that important if you can't remember, but the types of things
that are being falsely tagged there would be
helpful.
Thanks,
Matt
Colbeck, Andrew wrote:
(sigh) Again
I'm the voice of dissent... I find that CBL merits no higher than a weight
of 5 out of my HOLD weight of 20. I find that it includes a
lot of ISP mail servers that get used by spammers. They do seem
to work at removing them, but meanwhile, it's throwing the baby out with the
bath water. I'm sure glad that Declude gives me a weighted system to
work with.
Andrew
8)
Maybe it was just down on the day I tested
it...
I like pure spamtrap RBL's because clean ones have no false
positives. CBL is a good one to add if you haven't checked it out,
and it produces a lot of hits (with no FP's in a week of
monitoring).
Bill Landry wrote:
----- Original Message -----
From: "Matthew Bramble" <[EMAIL PROTECTED]>
Maybe other "unlisted" entries reflect similar circumstances
(not available under normal circumstances)?
All of the DNSBLs (ip4r) and RHSBLs listed on the Declude spam databases
site (http://www.declude.com/Junkmail/support/ip4r.htm) are publicly
accessible, unless it has been noted otherwise in the comments (e.g., MAPS
tests). The "SBBL" spam database can be access by using:
SBBL ip4r sbbl.they.com * 3 0
So far today I have flagged over 900 messages as spam using the SBBL test.
Bill
|
