Cbl is a subset of zen.spamhaus.org so you could be double scoring that.

UCEPROTECT-2 and UCEPROTECT-1 overlap considerable. You are probably double
scoring there.

DNSBL and IADB are whitelists. They would have lower scores.

SORBS is shutting down. Might want to remove that http://www.au.sorbs.net/

Mxrate-suspicious comes along with the same DNS test as MXRate-black. So no
need to disable that as it doesn't induce extra dns traffic.


-----Original Message-----
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Cummins
Sent: Friday, July 10, 2009 1:58 PM
To: declude.junkmail@declude.com
Subject: RE: Re[2]: [Declude.JunkMail] Cutting down on DNS


> And my other recommendation stands -- look into which BLs will let you
> replicate their zone/s locally.

Thank you for your advice.

Among other things, I've been reviewing the spam tests I've enabled.  I
thought I might share my observations with the list here, as a sounding
board.  Perhaps I will help someone, perhaps I will expose a poor decision.

I deactivated the following tests, because my DLAnalyzer told me that they
fetched less than 3% positives over the last 9 days (an arbitrary
selection):

AHBL 
AHBL-DOMAINS
DNSBL
IADB
LNG
MAILPOLICE-BLOCK
MAILPOLICE-DOMAIN
MAILPOLICE-FRAUD
MAILPOLICE-HELO
MAILPOLICE-REVDNS
MAILPOLICE-REVWEBMAIL
MXRATE-SUSPICIOUS
NJABL
VIRBL

I noticed that these tests had returned the largest number of hits (for this
type of test), so I thought I'd mention them:

BARRACUDA
HOSTKARMA-BLACK
ZEN
UCEPROTECT-2
UCEPROTECT-3
CBL 
SORBS 
UCEPROTECT-1
SPAMCOP
MXRATE-BLOCK

How does one go about replicating a zone locally to begin with?  Can you
replicate multiple zones locally?  Should you do this on the machine that is
hosting SmarterMail/Declude, or on another?

Sniffer is my best test.  INVURIBL used to be fantastic, but it doesn't fare
quite as well these days.  Does anyone recommend anything else?


Thanks for the discussion!

-- Michael Cummins





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to