I think keeping them separate gives you a little more weighting flexibility.
I weight the sorbs-spam a little lower because it is not quite as effective as the
other tests (dropping into the mere 98%'s:
Test Count Delete SPAM Held SPAM Poss SPAM
Not SPAM
SORBS-BADCONF 867 99.1% 0.9% 0.0%
0.0%
SORBS-DUHL 84527 99.2% 0.8% 0.0%
0.0%
SORBS-FORMMAIL-ALL 1790 99.7% 0.3% 0.0%
0.0%
SORBS-FORMMAIL-LAST 2179 99.9% 0.1% 0.0%
0.0%
SORBS-HTTP-ALL 26376 99.6% 0.1% 0.0%
0.2%
SORBS-HTTP-LAST 26107 99.8% 0.0% 0.0%
0.2%
SORBS-MISC-ALL 15252 99.9% 0.1% 0.0%
0.0%
SORBS-MISC-LAST 15267 99.9% 0.1% 0.0%
0.0%
SORBS-SMTP-ALL 2419 99.5% 0.0% 0.0%
0.5%
SORBS-SMTP-LAST 2421 99.5% 0.0% 0.0%
0.5%
SORBS-SOCKS-ALL 28841 99.8% 0.1% 0.0%
0.1%
SORBS-SOCKS-LAST 28640 100.0% 0.0% 0.0%
0.0%
SORBS-SPAM-ALL 25420 97.0% 1.6% 0.2%
1.2%
SORBS-SPAM-LAST 25287 97.0% 1.6% 0.2%
1.2%
SORBS-ZOMBIE 507 99.2% 0.2% 0.0%
0.6%
Scott Fisher
Director of IT
Farm Progress Companies
>>> [EMAIL PROTECTED] 07/20/04 09:50AM >>>
I currently have 9 sorbs.net lookups:
SORBS-HTTP ip4r dnsbl.sorbs.net 127.0.0.2 5 0
SORBS-SOCKS ip4r dnsbl.sorbs.net 127.0.0.3 5 0
SORBS-MISC ip4r dnsbl.sorbs.net 127.0.0.4 5 0
SORBS-SMTP ip4r dnsbl.sorbs.net 127.0.0.5 5 0
SORBS-SPAM ip4r dnsbl.sorbs.net 127.0.0.6 4 0
SORBS-WEB ip4r dnsbl.sorbs.net 127.0.0.7 5 0
SORBS-BLOCK ip4r dnsbl.sorbs.net 127.0.0.8 5 0
SORBS-ZOMBIE ip4r dnsbl.sorbs.net 127.0.0.9 5 0
SORBS-DUHL ip4r dnsbl.sorbs.net 127.0.0.10 4 0
It seems I can replace these 9 lookups with 1:
rhsbl.sorbs.net - Aggregate zone (contains all RHS zones)
Would the new config file line would look like this? (replacing the ip
numbers with a *)?
SORBS-DUHL ip4r dnsbl.sorbs.net * 4 0
[EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
