At 6:22 PM -0700 8/7/03, Global Homes Webmaster wrote:
>On 08/07/03 at 20:47 -0400, Paul Hess opined:
> > Based on this I'll probably dump ordb, blitzed, and some of the
>> country specific RBL's.
>
>Blitzed has been quite effective for me. Your result could be because it's
>the last entry in your list, after at least one other RBL that lists open
>proxies (relays.osirusoft.com). Also, make sure that you've got the right
>address range for it in your internal blacklist. It's 127.1.0.1-32, not
>127.0.0.2-255.

Thanks ... I had totally missed that!!!  I'm looking forward to seeing how blitzed 
does for me.


>You might try switching the order of SPEWS and SBL and see how they
>compare. SPEWS is one of the worst offenders when it comes to arbitrarily
>assigning guilt by association and blacklisting huge blocks in order to
>catch a handful of hosts that are actually engaged in spamming. If you can
>see your way clear to not using it, you'll probably significantly reduce

I'll try that experiment (switching SPEWS and SBL).  Now that I am just running mail 
for a few small businesses rather than generic "customers" the users have allowed, and 
pretty much demanded, that I take a very aggressive stance against SPAM as long as I 
am willing to work with them to solve any major problems from people they really need 
to correspond with.  So I haven't been as worried about false positives as I used to.


>your risk of false positives. Don't forget to adjust your internal
>blacklist to ignore SPEWS responses from Osirusoft. A similar comment goes
>for Spamcop.

I assume this advice applies only if I get rid of Spews, otherwise it doesn't matter 
right?


> >  53 relays.ordb.org
>> 628 Spews.relays.OsiruSoft.com
>> 142 sbl.spamhaus.org
>> 483 relays.osirusoft.com
>> 451 list.dsbl.org
>>  31 korea.services.net
>> 158 bl.spamcop.net
>>   8 brazil.blackholes.us
>>   3 thailand.blackholes.us
>>   8 china.blackholes.us
> >   0 opm.blitzed.org


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to