We use:
  relays.ordb.org,
  dnsbl.njabl.org,
  relays.osirusoft.com,
  dynablock.wirehub.net,
  blackholes.wirehub.net,
  sbl.spamhaus.org,
  formmail.relays.monkeys.com,
  proxies.relays.monkeys.com,
  korea.services.net,
  opm.blitzed.org,
  bl.spamcop.net

but most of our fp's come from header and body checks from what i can tell.

At 09:25 AM 3/31/2003 -0500, you wrote:

>Sunday, March 30, 2003, 6:17:35 PM, [EMAIL PROTECTED] wrote:
>
> > Anyone here using IMGate to provide spam filtering for paying Internet
> > customers?  I'm looking for some guidance on what should be changed in
> > IMGate to help make it less likely to get false positives.
>
>Find the right RBLs and header/body checks that don't give too many false
>positives.  For example, here's what we use for RBLs:
>
>blackholes.wirehub.net
>dnsbl.njabl.org
>list.dsbl.org
>relays.ordb.org
>dynablock.wirehub.net
>proxies.relays.monkeys.com
>orbs.dorkslayers.com
>relays.visi.com
>opm.blitzed.org
>
>For body/header checks we reject on the following extensions (including
>nested extensions up to six levels deep):
>(exe|msi|pif|com|vbs|scr|dll|lnk|hta|vbe|js|jse|bat|vxd|shm)
>
>Also in the header/body checks are blocks for commonly used virus subjects
>and commonly used spam mailers.
>
>With these I get about one reported false positive a month for the twenty or
>so domains currently using that server.
>
>
>--
>Chris Scott
>Host Orlando, Inc.
>http://www.hostorlando.com/

Keith J. Kikta
[EMAIL PROTECTED]
voice: 1.800.697.7088
fax: 713.868.2268
http://www.iland.com - iland Internet Solutions Corporation

----------
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, re-transmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this in error, please contact the sender and delete the material from any
computer.



Reply via email to