I'm using most of the ones you mention, and the ones I'm using all work.  He's 
what I have in my global.config that matches your list:

AHBL            ip4r    dnsbl.ahbl.org          *       7       0
DSBL            ip4r    list.dsbl.org                   *       8       0
MAILPOLICE-BULK rhsbl   bulk.rhs.mailpolice.com         127.0.0.2       7       0
MAILPOLICE-PORN rhsbl   porn.rhs.mailpolice.com         127.0.0.2       7       0
FIVETEN-SPAM    ip4r    blackholes.five-ten-sg.com      127.0.0.2       5       0
FIVETEN-BULK    ip4r    blackholes.five-ten-sg.com      127.0.0.4       5       0
FIVETEN-MULTISTAGE      ip4r    blackholes.five-ten-sg.com      127.0.0.5       
5       0
FIVETEN-SINGLESTAGE     ip4r    blackholes.five-ten-sg.com      127.0.0.6       
5       0
FIVETEN-SPAM-SUPPORT    ip4r    blackholes.five-ten-sg.com      127.0.0.7       
5       0
FIVETEN-WEBFORM ip4r    blackholes.five-ten-sg.com      127.0.0.8       5       0
FIVETEN-MISC    ip4r    blackholes.five-ten-sg.com      127.0.0.9       5       0
FIVETEN-CR              ip4r    blackholes.five-ten-sg.com      127.0.0.13      
5       0
NJABL-OPENRELAY ip4r    dnsbl.njabl.org         127.0.0.2       3       0
NJABL-DUL               ip4r    dnsbl.njabl.org         127.0.0.3       3       0
NJABL-SPAMSRC   ip4r    dnsbl.njabl.org         127.0.0.4       3       0
NJABL-MULTI     ip4r    dnsbl.njabl.org         127.0.0.5       3       0
NJABL-BADHOST   ip4r    dnsbl.njabl.org         127.0.0.6       3       0
NJABL-CGI               ip4r    dnsbl.njabl.org         127.0.0.8       3       0
NJABL-PROXY     ip4r    dnsbl.njabl.org         127.0.0.9       3       0
NJABL-DYNA      ip4r    dynablock.njabl.org             127.0.0.3       5       0

If you really want a breakdown on what each one does, you will have to go to 
their individual web sites.  For example, I'm just using the one AHBL test 
which includes all of that blacklist rolled into one.  You can break AHBL into 
several tests based on what they have on their web site.
http://www.ahbl.org/docs/dnsbl.php

The same can be said for the others:
http://dsbl.org/usage
http://rhs.mailpolice.com/usage.php
http://www.five-ten-sg.com/blackhole.php
http://dnsbl.njabl.org/use.html

Using DLanalyzer, here is a breakdown of what percentage of spam on my server 
was hit by the tests mentioned for the past week:

AHBL    3.64%
DSBL    9.83%
MAILPOLICE-BULK 0.18%
MAILPOLICE-PORN 0.29%
FIVETEN-SPAM    46.89%
FIVETEN-BULK    0.30%
FIVETEN-MULTISTAGE      0.00%
FIVETEN-SINGLESTAGE     0.00%
FIVETEN-SPAM-SUPPORT    0.11%
FIVETEN-WEBFORM 0.00%
FIVETEN-MISC    0.16%
FIVETEN-CR      0.00%
NJABL-OPENRELAY 0.06%
NJABL-DUL       1.41%
NJABL-SPAMSRC   0.09%
NJABL-MULTI     0.00%
NJABL-BADHOST   0.00%
NJABL-CGI       0.00%
NJABL-PROXY     3.69%
NJABL-DYNA      31.30%

You may get different results.  Just because a test gets a low percentage of 
hits doesn't necessarily mean it is a bad test.  I suggest you download a copy 
of the free lite version of DLanalyzer and run it on your logs.  This will give 
you an idea as to which tests are getting hits on your setup and which are not.
http://www.invariantsystems.com/dlanalyzer/

Good luck,

Gary


-------- Original Message --------
> From: "Brian T." <[EMAIL PROTECTED]>
> Sent: Wednesday, November 01, 2006 7:21 PM
> To: [email protected]
> Subject: [Declude.JunkMail] Upgrading Declude Configs - Which Tests are valid?
> 
> I spent this afternoon cleaning up my global.cfg file and I still have some 
> tests listed that no longer show up in the latest config file from Declude.
> 
> I was wondering which of the following, if any are still active tests?
> 
> DSBL , SENDERDB-BLACK, SENDERDB-SUSPICIOUS, MAILPOLICE-BULK, 
> MAILPOLICE-PORN, FIVETEN-SPAM, FIVETEN-BULK, FIVETEN-MULTISTAGE, 
> FIVETEN-SPAMSUPPORT, FIVETEN-MISC, FIVETEN-SINGLESTAGE, FIVETEN-FREE, 
> AHBL-RELAYS, AHBL-PROXIES, AHBL-SOURCES, AHBL-PROVISIONAL, AHBL-FORMMAIL, 
> AHBL-DUL, NJABL-DYNABLOCK, NJABL-RELAYS, NJABL-DUL, NJABL-SOURCES, 
> NJABL-MULTI, NJABL-FORMMAIL, and NJABL-PROXIES
> Are any of these tests duplicates, as in basically using the same data or 
> basically the same test?
> 
> Thanks for the help,
> 
> Brian T.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com. 










---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to