Re: Which DNSBLs do you use?

2016-06-17 Thread David Jones
>> On Jun 17, 2016, at 7:25 AM, Vincent Fox wrote: >> >> Greylisting imo helps a lot with RBL lag. Greylisting is a must and it definitely helps with RBL lag. >It can, but it's definitely a double edge sword. Depending on the way the >remote MTA works, I've experienced

Re: Which DNSBLs do you use?

2016-06-17 Thread Reindl Harald
Am 17.06.2016 um 16:37 schrieb Shawn Bakhtiar: On Jun 17, 2016, at 7:25 AM, Vincent Fox wrote: Greylisting imo helps a lot with RBL lag. It can, but it's definitely a double edge sword. Depending on the way the remote MTA works, I've experienced emails being delayed for

Re: Which DNSBLs do you use?

2016-06-17 Thread Shawn Bakhtiar
> On Jun 17, 2016, at 7:25 AM, Vincent Fox wrote: > > Greylisting imo helps a lot with RBL lag. It can, but it's definitely a double edge sword. Depending on the way the remote MTA works, I've experienced emails being delayed for quite sometime. I had a lot of users

Re: Which DNSBLs do you use?

2016-06-17 Thread Vincent Fox
Greylisting imo helps a lot with RBL lag. Delay suspect IP long enough that by the time they retry, if they do, they are on half a dozen RBL and score high and reject. Sent from my iPhone > On Jun 17, 2016, at 13:23, Reindl Harald wrote: > > > > Am 17.06.2016 um

Re: Which DNSBLs do you use?

2016-06-17 Thread Reindl Harald
Am 17.06.2016 um 02:54 schrieb Alex: On Thu, Jun 16, 2016 at 6:35 PM, David Jones wrote: We were also using the senderscore RBL based on Reindel and others recommendations, but disabled it after it just rejected too much ham. The senderscore.org RBL scores for low

Re: Which DNSBLs do you use?

2016-06-17 Thread Reindl Harald
Am 17.06.2016 um 02:57 schrieb Alex: For example, 212.227.126.135, scores 4 out of a 100 on senderscore. It also currently hits just sorbs. The individual score for each would have to be so low, even with such a poor reputation, that it hardly makes it worthwhile. I can't reject just on the

Re: Which DNSBLs do you use?

2016-06-16 Thread David Jones
>> For example, 212.227.126.135, scores 4 out of a 100 on senderscore. It >> also currently hits just sorbs. The individual score for each would >> have to be so low, even with such a poor reputation, that it hardly >> makes it worthwhile. I can't reject just on the almost worst >> reputation as

Re: Which DNSBLs do you use?

2016-06-16 Thread Alex
Hi, > For example, 212.227.126.135, scores 4 out of a 100 on senderscore. It > also currently hits just sorbs. The individual score for each would > have to be so low, even with such a poor reputation, that it hardly > makes it worthwhile. I can't reject just on the almost worst > reputation as

Re: Which DNSBLs do you use?

2016-06-16 Thread Alex
Hi, On Thu, Jun 16, 2016 at 6:35 PM, David Jones wrote: >>We were also using the senderscore RBL based on Reindel and others > >>recommendations, but disabled it after it just rejected too much ham. > > The senderscore.org RBL scores for low reputation are a pain sometimes > but

Re: Which DNSBLs do you use?

2016-06-16 Thread Reindl Harald
Am 17.06.2016 um 00:20 schrieb Alex: Hi, On Thu, Jun 16, 2016 at 10:16 AM, wrote: Fwiw, I've moved the DNSBL issue out of SA and put it 'in front' with Postfix's postscreen. Instead of just *one* DNSBL, which is imo always a risk, I use multiple dnsbls, and

Re: Which DNSBLs do you use?

2016-06-16 Thread Reindl Harald
Am 16.06.2016 um 16:43 schrieb Shawn Bakhtiar: On Jun 16, 2016, at 7:31 AM, Reindl Harald wrote: Am 16.06.2016 um 16:21 schrieb Shawn Bakhtiar: Agreed. We use sendmail, and check our DNSBL's their, it is much more efficient to use them before we ever engage SA.

Re: Which DNSBLs do you use?

2016-06-16 Thread David Jones
>We were also using the senderscore RBL based on Reindel and others >recommendations, but disabled it after it just rejected too much ham. The senderscore.org RBL scores for low reputation are a pain sometimes but those senders need to know how to filter outbound email properly and detect

Re: Which DNSBLs do you use?

2016-06-16 Thread Alex
Hi, On Thu, Jun 16, 2016 at 10:16 AM, wrote: > Fwiw, I've moved the DNSBL issue out of SA and put it 'in front' with > Postfix's postscreen. > > Instead of just *one* DNSBL, which is imo always a risk, I use multiple > dnsbls, and weight them in scoring. > > In my

Re: Which DNSBLs do you use?

2016-06-16 Thread Curtis Maurand
We use zen.spamhaus.org bl.spamcop.net b.barracudacentral.org Some statistics since Sunday's logrotation for a handful of domains. Some spam still gets through. Overall, though... 370 messages blocked by rbl zen.spamhaus.org 108 messages blocked by rbl bl.spamcop.net 63 messages blocked

Re: Which DNSBLs do you use?

2016-06-16 Thread Kris Deugau
Alessio Cecchi wrote: > Hi, we use www.invaluement.com > > - ivmSIP to block IPs at SMTP level > - ivmSIP24 and ivmURI in Spamassassin with custom score > > Also b.barracudacentral.org is good and with low FP. > > Probably zen.spamhaus.org is the best dnsbl but is too expensive for us. >

Re: Which DNSBLs do you use?

2016-06-16 Thread Shawn Bakhtiar
> On Jun 16, 2016, at 7:54 AM, Merijn van den Kroonenberg > wrote: > >> Agreed. >> >> We use sendmail, and check our DNSBL's their, it is much more efficient to >> use them before we ever engage SA. It is extremely rare to find an IP that >> lands on a reputable DNSBL and

Re: Which DNSBLs do you use?

2016-06-16 Thread Merijn van den Kroonenberg
> Agreed. > > We use sendmail, and check our DNSBL's their, it is much more efficient to > use them before we ever engage SA. It is extremely rare to find an IP that > lands on a reputable DNSBL and in those cases we can whitelist. Of course > most of our traffic is B2B, not sure how effective

Re: Which DNSBLs do you use?

2016-06-16 Thread Shawn Bakhtiar
> On Jun 16, 2016, at 7:31 AM, Reindl Harald wrote: > > > Am 16.06.2016 um 16:21 schrieb Shawn Bakhtiar: >> Agreed. >> >> We use sendmail, and check our DNSBL's their, it is much more efficient to >> use them before we ever engage SA. It is extremely rare to find an

Re: Which DNSBLs do you use?

2016-06-16 Thread Reindl Harald
Am 16.06.2016 um 16:21 schrieb Shawn Bakhtiar: Agreed. We use sendmail, and check our DNSBL's their, it is much more efficient to use them before we ever engage SA. It is extremely rare to find an IP that lands on a reputable DNSBL and in those cases we can whitelist. Of course most of our

Re: Which DNSBLs do you use?

2016-06-16 Thread Shawn Bakhtiar
Agreed. We use sendmail, and check our DNSBL's their, it is much more efficient to use them before we ever engage SA. It is extremely rare to find an IP that lands on a reputable DNSBL and in those cases we can whitelist. Of course most of our traffic is B2B, not sure how effective this would

Re: Which DNSBLs do you use?

2016-06-16 Thread jasonsu
Fwiw, I've moved the DNSBL issue out of SA and put it 'in front' with Postfix's postscreen. Instead of just *one* DNSBL, which is imo always a risk, I use multiple dnsbls, and weight them in scoring. In my experience, it works fantastically well. A great write up on the approach is here

Re: Which DNSBLs do you use?

2016-06-16 Thread Rob McEwen
On 6/16/2016 9:49 AM, Alessio Cecchi wrote: Probably zen.spamhaus.org is the best dnsbl but is too expensive for us. Invaluement SIP is almost comparable to Zen as performance but much less expensive. Thanks, Alessio, for the recommendation. But I need to make one clarification... SIP and

Re: Which DNSBLs do you use?

2016-06-16 Thread Bowie Bailey
On 6/16/2016 9:49 AM, Alessio Cecchi wrote: Il 14/06/2016 13:46, Heinrich Boeder ha scritto: Hi Folks, I have been on this list for quiet some time now and the topic "DNSBL" was discussed pretty often, but I was still wondering which DNSBLs you guys use for your mail environment. So here are

Re: Which DNSBLs do you use?

2016-06-16 Thread Alessio Cecchi
Il 14/06/2016 13:46, Heinrich Boeder ha scritto: Hi Folks, I have been on this list for quiet some time now and the topic "DNSBL" was discussed pretty often, but I was still wondering which DNSBLs you guys use for your mail environment. So here are my questions: Which DNSBLs do you use? Which

Re: Which DNSBLs do you use?

2016-06-14 Thread Shawn Bakhtiar
zen.spamhaus.org bl.spamcop.net b.barracudacentral.org dnsbl.inksystems.com <-- private internal one derived from honeypot email address we have. I have disabled dnsbl.sorbs.net as they are too aggressive for our purposes, they block a lot of Gmail et al, which a lot of our customers and

Re: Which DNSBLs do you use?

2016-06-14 Thread Reindl Harald
Am 14.06.2016 um 13:46 schrieb Heinrich Boeder: Hi Folks, I have been on this list for quiet some time now and the topic "DNSBL" was discussed pretty often, but I was still wondering which DNSBLs you guys use for your mail environment. So here are my questions: Which DNSBLs do you use? Which