Ok thanks.  I think I will just comment out HOPHIGH.

 

Kyle

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, April 15, 2005 10:44 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] DSBL Road Runner

 

The HOPHIGH setting in combination I believe will result in the last 3 hops being scanned.  In your config that is set to 2.

It is advisable that you either comment out HOPHIGH, or take a bunch of time to work out how to score differently the open relay type tests on hops besides the last.  Here's an example of how to do this with DSBL:

DSBL(LAST)        dnsbl    %IP4R%.list.dsbl.org            127.0.0.2    5    0
DSBL(ALL)        ip4r    list.dsbl.org                127.0.0.2    2    0

Note that this technique only needs to be applied to what you currently list as ip4r tests, and only lists that will tag residential IP space, which are primarily open relay type lists (generally spamtrap driven, or ones that test), but SBL and AHBL-SOURCES will also do this sometimes, primarily with international IP space.

Matt



Kyle Fisher wrote:

This is what I have

 

 

#=========================================    LOGS    ==========================================

# "####" in the LOGFILE option, if present, automatically gets replaced with the month/date.

# Log Level options: WARN / LOW / MID / HIGH / DEBUG / ERROR

 

LOGFILE         d:\imail\spool\dec####.log

LOGLEVEL        MID

HOP             0

#HOPHIGH        1

 

 

 

#=========================================    HEADERS ==========================================

 

 

 

XSENDER                    ON

XSPOOLNAME ON

 

 

XINHEADER     X-Note: This E-mail was scanned by Region 5 ESC using Declude JunkMail for spam.

XINHEADER     X-Country-Chain: %COUNTRYCHAIN%

XINHEADER     X-Note: Total spam weight of this E-mail is %WEIGHT%

XINHEADER     X-Note: Spam tests: %TESTSFAILED%

XINHEADER     X-Note: Reverse DNS: %REVDNS% ([%REMOTEIP%])

XINHEADER     X-Note: HELO/EHLO Received: %HELO%

XINHEADER       X-Note: Header code: %HEADERCODE%

XINHEADER       X-Note: Queue name: %QUEUENAME%

 

XOUTHEADER  X-Note: This E-mail was scanned by Region 5 ESC using Declude JunkMail for spam.

XOUTHEADER      X-Note: Queue name: %QUEUENAME%

XOUTHEADER      X-Note: Spam tests: %TESTSFAILED%

XOUTHEADER      X-Note: Total spam weight of this e-mail is %WEIGHT%

XOUTHEADER      X-Note: Reverse DNS: %REVDNS% ([%REMOTEIP%])

XOUTHEADER  X-Note: HELO/EHLO Received: %HELO%

XOUTHEADER      X-Note: Header code: %HEADERCODE%

XOUTHEADER      X-Country-Chain: %COUNTRYCHAIN%

 

 

#=========================================    ADVANCED OPTIONS   =================================

 

HIDETESTS      CATCHALLMAILS

#IPNOTINMX NOLEGITCONTENT Rem out 2-25-05 For testing to see all test.

HOP             0

# reduced from 3 to 2 to see if dns improves

HOPHIGH                     2

 

### Orignal Settings Below ###

#HOP             0

#HOPHIGH        1

 

#=========================================    WHITELISTS   ==

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Friday, April 15, 2005 10:13 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] DSBL Road Runner

 

You might be scanning on multiple hops, and this might be picking up the client PC instead of the connecting server.  Look for the HOP setting and see if it is anything besides 0, and if so, you are scanning on multiple hops.  Prior hops are much more often listed in open relay lists such as DSBL, and it isn't wise to score DSBL on multiple hops at the same score as the last hop.  DSBL doesn't like to delist IP's, and their automated removal process will not work with residential broadband IP's.  They have no interest in changing this.

Matt



Kyle Fisher wrote:

I am trying to determine why some email from Road Runner is getting picked up by DSBL.  When I query DSBL for 24.93.47.42 it says Status  Ip not listed by DSBL.

 

Here is the line in my global.cfg

 

DSBL                           ip4r       list.dsbl.org                                          *                       8          0

 

Is the * picking up something since it looks for anything maybe some other record on their list?

 

Kyle




-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================



-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

Reply via email to