I would rather not add six new tests to my config. Would you recommend a single SURBL test? Which one seems to work better?
Regards, Jason ----- Original Message ----- From: "Darin Cox" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 23, 2004 8:02 AM Subject: Re: [Declude.JunkMail] SURBL as RHSBL > Hi Bill, > > You seem to always be one of the first to share new blacklists. Where do > you find this info? Is there another list that would be worth joining? > > Thanks, man. > > Darin. > > > ----- Original Message ----- > From: "Bill Landry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, November 23, 2004 5:04 AM > Subject: Re: [Declude.JunkMail] SURBL as RHSBL > > > Modification, since I was not thinking, but Declude JunkMail does not > support bitmasked responses. So instead of using the multi zone, you will > need to use: > > SURBL_AB rhsbl ab.surbl.org 127.0.0.2 1 0 > SURBL_JP rhsbl jp.surbl.org 127.0.0.2 1 0 > SURBL_OB rhsbl ob.surbl.org 127.0.0.2 1 0 > SURBL_PH rhsbl ph.surbl.org 127.0.0.2 1 0 > SURBL_SC rhsbl sc.surbl.org 127.0.0.2 1 0 > SURBL_WS rhsbl ws.surbl.org 127.0.0.2 1 0 > > Which will require six different queries if you want to use all SURBL lists. > > Bill > ----- Original Message ----- > From: Bill Landry > To: [EMAIL PROTECTED] > Sent: Tuesday, November 23, 2004 12:47 AM > Subject: Re: [Declude.JunkMail] SURBL as RHSBL > > > Markus, if you want to test against all of the SURBLs, since it's only a > single query to the multi zone, use: > > SURBL_AB rhsbl multi.surbl.org 127.0.0.32 1 0 > SURBL_JP rhsbl multi.surbl.org 127.0.0.64 1 0 > SURBL_OB rhsbl multi.surbl.org 127.0.0.16 1 0 > SURBL_PH rhsbl multi.surbl.org 127.0.0.8 1 0 > SURBL_SC rhsbl multi.surbl.org 127.0.0.2 1 0 > SURBL_WS rhsbl multi.surbl.org 127.0.0.4 1 0 > > AB = AbuseButler data > JP = Combination of Prolocation data & Joe Wein's SpamSpy data > OB = OutBlaze data > PH = Combination of MailPolice "Fraud" list data & MailSecurity "Phishing" > list data > SC = SpamCop top 200 hits data > WS = William Stearns & submitter data > > I have been testing this for about an hour, and am getting a few hits. > We'll see how it goes over the next 24 hours... > > > Bill > ----- Original Message ----- > From: Markus Gufler > To: [EMAIL PROTECTED] > Sent: Monday, November 22, 2004 11:41 PM > Subject: RE: [Declude.JunkMail] SURBL as RHSBL > > > Is this the correct configruation line for doing this? > > SURBLS-RHSBL rhsbl %MAILFROM%.sc.surbl.org 127.0.0.2 5 0 > > > Markus > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
