Re: [SA] cleanup for DNSBLs

[Bjoern Sikora]

Hi folks,

  Unless there are objections, I'm going to add two tests to my sandbox:
 
  RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as
  the original [N]iXhash zone, with results on intra2net that look quite
  promising:  72.98:0.12 spam:ham (PSBL has 48.69:0.36),
  http://www.intra2net.com/en/support/antispam/blacklist.php_dnsbl=RCVD_IN
 _NIX_SPAM.html
 
  Is intra2net measuring the blacklists without lastexternal as their
  suggested spamassassin config suggests?  If so then their results are
  suspect.

yes, you are right, at the moment we show some results with deep header 
checks. The stats belong to the corresponding Spamassassin config. If you use 
the -lastexternal with a appropriate trust path, the False Positive rate may 
decrease.

 It's probably similar to http://stats.dnsbl.com/ in that it doesn't do a
 good job of its ham numbers but its relative spam counts are fair.  Only
 one way to find out...

I wouldn't say so ;-). We try to provide proper results for ham measurement 
corresponding to the displayed Spamassassin config and of course we are useing 
live data and update the statistics every monday.  Some RBL's are currently 
shown with the -lastexternal option, like Spamhaus or CBL as explicitly 
recommended on the blacklist webpage.

If you would like us to show the -lastexternal results for all lists,
please let me know.

Regards,

Bjoern

-- 
Björn Sikora

Intra2net AG
Mömpelgarder Weg 8
72072 Tübingen
Germany

Tel: +49-7071-56510-19
Fax: +49-7071-56510-50
Email: bjoern.sik...@intra2net.com
http://www.intra2net.com

Vorstand: Steffen Jarosch
Aufsichtsratsvorsitzender: Ulrich Emmert
Registergericht: HRB 382270 Stuttgart
USt-IdNr: DE216036710


Intranator Business Server - Jetzt 30 Tage testen
http://www.intra2net.com/de/download/

Re: Other DNSBL's

[Bjoern Sikora]

 I'm looking to add other DNSBL's to tomorrow's weekly mass check.  I
 realize most of them probably are too broken to bother, but it would be
 nice to get some real numbers to confirm it so since the Internet lacks
 any real DNSBL comparisons that include Ham FP safety.

If you are looking for real numbers, this should be helpful for you:

Blacklists Compared - weekly reports of DNS blacklists lookups
http://www.sdsc.edu/~jeff/spam/cbc.html

Blacklist Monitor - accuracy and inaccuracy rates of various blacklists
http://www.intra2net.com/en/support/antispam/

Please pay attention that some blacklists do only list IP addresses for hours.
When running the mass check you need realtime data to get reliable results.

--
Bjoern Sikora