FYI - Seen this on another list (SA-Users). David you may want to add
this to the RBL list.
This may interest those playing with RBL checks in SA, we have released
spamrats.com as a free RBL service now.
http://www.spamrats.com
RATS-NoPtr and RATS-Dyna will be the most useful, RATS-Spam is still in
testing phase, so is not available yet.
This data is collected from ISP's all over north america, and is
generated by the most virulant of RATS. Normally in order to become
listed, they will have triggered several checks, including rate
limiters, and conform to signatures that indicate they are Bot or Trojan
orientated.. rather than the more traditional use of Spam traps, so we
do not expect false positives.
We actually recommend that RATS-NoPtr be used to block at the edge
level, however you can use it as you see fit.
(Mail servers should have Reverse DNS right? And they sure should not be
sending excessive amounts of email, to multiple ISP's)
RATS-Dyna might in theory get triggered by a mail server that uses
Non-Conforming Best Practises for Reverse DNS, (but they also have to be
sending abusive levels of email to get listed, and appear to be home PC
style connections)
Have fun :)
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
