Except you will never know how a test will work in your environment without trying it. What works for one person in their environment may not work for someone else, and vise versa. I guess that's the beauty of a weighted system like Declude.
Also, because you can try different tests without causing any problems by simply using the LOG and/or IGNORE actions, there should be no hesitation to see how a particular test will work in your environment. If the results looks good, change the action to WARN, and if not, remove the test, all the while you have not negatively impacted your mail flow in any way during your testing. Again, just my two cents... Bill ----- Original Message ----- From: "Chuck Schick" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 8:55 AM Subject: RE: [Declude.JunkMail] Spam lists > Very true, Bill. > > I just tend to be very careful about making changes. Usually adding one > test at a time. Also, good feedback tends to keep me from reinventing the > wheel. If I was told from this list that a test had high false positives, I > would avoid the test or weigh it low. Just plunging ahead is something I do > from time to time but is not my preferred course. > > Chuck Schick > Warp 8, Inc. > 303-421-5140 > www.warp8.com > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Bill Landry > > Sent: Thursday, September 25, 2003 5:48 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Spam lists > > > > > > Everybody's experiences with spam test, including DNS based > > tests, are going > > to be different. Why be so hesitant to try a test to see how > > it works for > > you. Simply setup the test in your global.cfg and set the > > action to IGNORE > > or LOG, that way you can evaluate the test results without > > impacting your > > customers or your e-mail flow. > > > > Bill > > ----- Original Message ----- > > From: "Chuck Schick" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Thursday, September 25, 2003 4:38 PM > > Subject: RE: [Declude.JunkMail] Spam lists > > > > > > > John: > > > > > > You actually are using some I was not so thanks for posting > > that. About > > the > > > only one that I am using that you are not is NJABL (see > > entry below). It > > > does not catch very many per day - about the same amount as ORDB. > > > > > > NJABL ip4r dnsbl.njabl.org 127.0.0.2 5 0 > > > > > > I have been toying with testing Reynolds. But have not gotten any > > feedback. > > > > > > Chuck Schick > > > Warp 8, Inc. > > > 303-421-5140 > > > www.warp8.com > > > > > > > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] Behalf Of John > > > > Tolmachoff > > > > (Lists) > > > > Sent: Thursday, September 25, 2003 12:05 PM > > > > To: [EMAIL PROTECTED] > > > > Subject: [Declude.JunkMail] Spam lists > > > > > > > > > > > > With the loss in the last month of several spam lists, I am > > > > reviewing what I > > > > have been using. > > > > > > > > This is the current list. Any recommendations on additions? > > > > > > > > > > > > DSBL ip4r list.dsbl.org * > > > > 6 0 > > > > ORDB ip4r relays.ordb.org * > > > > 2 0 > > > > SPAMCOP ip4r bl.spamcop.net > > > > 127.0.0.2 > > > > 15 0 > > > > EASYNET-DNSBL ip4r blackholes.easynet.nl > > > > 127.0.0.2 > > > > 7 0 > > > > EASYNET-PROXIES ip4r > > > > proxies.blackholes.easynet.nl 127.0.0.2 > > > > 7 0 > > > > BLITZEDALL ip4r opm.blitzed.org * > > > > 7 0 > > > > > > > > SORBS-HTTP ip4r dnsbl.sorbs.net > > > > 127.0.0.2 > > > > 5 0 > > > > SORBS-SOCKS ip4r dnsbl.sorbs.net > > > > 127.0.0.3 > > > > 5 0 > > > > SORBS-MISC ip4r dnsbl.sorbs.net > > > > 127.0.0.4 > > > > 5 0 > > > > SORBS-SMTP ip4r dnsbl.sorbs.net > > > > 127.0.0.5 > > > > 5 0 > > > > SORBS-WEB ip4r dnsbl.sorbs.net > > > > 127.0.0.7 > > > > 5 0 > > > > SORBS-ZOMBIE ip4r dnsbl.sorbs.net > > > > 127.0.0.9 > > > > 5 0 > > > > SORBS-DUL ip4r dnsbl.sorbs.net > > > > 127.0.0.10 > > > > 5 0 > > > > SORBS-NOMAIL ip4r dnsbl.sorbs.net > > > > 127.0.0.12 > > > > 5 0 > > > > > > > > DSN rhsbl dsn.rfc-ignorant.org > > > > 127.0.0.2 > > > > 10 0 > > > > NOABUSE rhsbl abuse.rfc-ignorant.org > > > > 127.0.0.4 > > > > 3 0 > > > > NOPOSTMASTER rhsbl postmaster.rfc-ignorant.org > > > > 127.0.0.3 > > > > 3 0 > > > > MAILPOLICE-BULK rhsbl bulk.rhs.mailpolice.com > > > > 127.0.0.2 > > > > 7 0 > > > > MAILPOLICE-PORN rhsbl porn.rhs.mailpolice.com > > > > 127.0.0.2 > > > > 10 0 > > > > DNSFRAUD rhsbl in.dnsbl.org > > > > 127.0.0.3 > > > > 10 0 > > > > DNSILLEGAL rhsbl in.dnsbl.org > > > > 127.0.0.5 > > > > 10 0 > > > > DNSPROMO rhsbl in.dnsbl.org > > > > 127.0.0.4 > > > > 10 0 > > > > > > > > John Tolmachoff MCSE CSSA > > > > Engineer/Consultant > > > > eServices For You > > > > www.eservicesforyou.com > > > > > > > > > > > > > > > > --- > > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
