I noticed a problem just now that I really hadn't though about before. I recently added a number of DNSBLs to my sa-mimedefang.cf that weren't in the stock SA (2.6.0-cvs).
proxy.relays.osirusoft.com socks.relays.osirusoft.com all of blackholes.us's country zones, not providers 7 SORBS BLs proxies.relays.monkeys.com proxies.blackholes.easynet.nl dynablock.blackholes.easynet.nl multihop.dsbl.org dialups.visi.com I noticed a reply that was apparently sent to a reply someone sent me on the Procmail list. I couldn't seem to find that reply for some reason. I checked my >= spambox and found it. That message received a score of 5.787. It received .6 for being in the ORSS, 1 for being in the NJABL, and 1 for being in dialups.visi (1 is the score I used for all the BLs I added). His IP was listed in those lists as a dialin IP. He effectively received a score of 2.6 just for being a dialin user and not SmartHosting to his provider's MTA. He also received 3.3 for a Forged Outlook MUA rule which I haven't sorted out yet (stock rule and score). This got me wondering. Is it a bad idea to call more than 1 DNSBL of a given type? For example, would it be wise querying 4 direct-to-MX BLs, 4 proxy lists, 5 open relay lists, etc? I'm wondering if there's a better way to handle this. For example, group all direct-to-mx lists together. Query the first. If it matches, skip the rest. If it doesn't match, query the next. So on and so forth for the rest of the lists until the end. Is that a more logical way to handle it? Justin ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
