RE: [Declude.JunkMail] URIBL vs. SURBL

2008-10-17 Thread Andy Schmidt
Hi,

 

Thanks - yep, I found out they are blocking both my DNS servers - my other
systems can query their test points.  Oh well...

 

If you mail volume is low, we really don't care if you query the public
mirrors. But if your hardware or software is hammering our public mirrors
with 100's of thousands of queries, then we will ACL off your host. At that
point you can either do without our service, or request a data feed. Feel
free to raise your concerns with your vendor, as we would be happy to work
with them to provide their own resolvers for their customers to hit.

The same applies for free software. If you are using SpamAssassin, then
great. Since URIBL is part of default SpamAssassin installs, you
automatically benefit from our service. However, if you run a large mail
system with SpamAssassin, then there is a chance we will block your queries
on the public mirrors. We understand you may not realize you are querying
URIBL since it is enabled by default, and we will take the necessary steps
to notify you, if possible, before blocking your queries from our public
mirrors. 

So my option is their commercial (for fee) feed service.

 

Best Regards,

Andy

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, October 17, 2008 3:29 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] URIBL vs. SURBL

 

I get good hits from both lists with invURIBL.  uribl.com is more 

aggressive (IMO) than surbl.

 

I query SURBL first and than uribl second.  Even with that config (and 

skip weights set) I still get more hits on URIBL.

 

F:\Logs\invURIBL>grep -i "message body found in multi.uribl.com" 

uribl-logfile1017.txt | wc -l

2030

 

F:\Logs\invURIBL>grep -i "message body found in multi.surbl.org" 

uribl-logfile1017.txt | wc -l

1328

 

Check your test points for URIBL.com.  They have been know to block dns 

serves that have high query rates since they now offer a data feed service.

 

Darrell

-- 

--

Check out http://www.invariantsystems.com for utilities for Declude, 

Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 

SURBL/URI integration, MRTG Integration, and Log Parsers.

 

 

Andy Schmidt wrote:

> Hi,

> 

> I checked two of my systems and noticed that apparently multi.uribl.com
does

> not have any hits for its black and red lists EVER? I find that hard to

> believe.

> 

> My systems DOES check SURBL first, and only would pass a good message to

> URIBL. Is it really possible that URIBL is fully redundant to SURBL (I
would

> have expected SOME overlap, but not 100%).

> 

> Does anyone have any experience with multi.uribl.com?

> 

> Best Regards,

> Andy

> 

> 

> 

> ---

> This E-mail came from the Declude.JunkMail mailing list.  To

> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and

> type "unsubscribe Declude.JunkMail".  The archives can be found

> at http://www.mail-archive.com.

> 

 

 

 

 

---

This E-mail came from the Declude.JunkMail mailing list.  To

unsubscribe, just send an E-mail to [EMAIL PROTECTED], and

type "unsubscribe Declude.JunkMail".  The archives can be found

at http://www.mail-archive.com.

 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] URIBL vs. SURBL

2008-10-17 Thread Darrell ([EMAIL PROTECTED])
I get good hits from both lists with invURIBL.  uribl.com is more 
aggressive (IMO) than surbl.


I query SURBL first and than uribl second.  Even with that config (and 
skip weights set) I still get more hits on URIBL.


F:\Logs\invURIBL>grep -i "message body found in multi.uribl.com" 
uribl-logfile1017.txt | wc -l

   2030

F:\Logs\invURIBL>grep -i "message body found in multi.surbl.org" 
uribl-logfile1017.txt | wc -l

   1328

Check your test points for URIBL.com.  They have been know to block dns 
serves that have high query rates since they now offer a data feed service.


Darrell
--
--
Check out http://www.invariantsystems.com for utilities for Declude, 
Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.



Andy Schmidt wrote:

Hi,

I checked two of my systems and noticed that apparently multi.uribl.com does
not have any hits for its black and red lists EVER? I find that hard to
believe.

My systems DOES check SURBL first, and only would pass a good message to
URIBL. Is it really possible that URIBL is fully redundant to SURBL (I would
have expected SOME overlap, but not 100%).

Does anyone have any experience with multi.uribl.com?

Best Regards,
Andy



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] URIBL vs. SURBL

2008-10-17 Thread Andy Schmidt
Hi,

I checked two of my systems and noticed that apparently multi.uribl.com does
not have any hits for its black and red lists EVER? I find that hard to
believe.

My systems DOES check SURBL first, and only would pass a good message to
URIBL. Is it really possible that URIBL is fully redundant to SURBL (I would
have expected SOME overlap, but not 100%).

Does anyone have any experience with multi.uribl.com?

Best Regards,
Andy



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.