At 07:48 AM 1/25/2005, Johan Segernäs wrote:
Hello!
We receive around 500.000 mails every day and I'm wondering which net-check I should use. I guess we can't just use pyzor/razor/dcc out of the box because of large amount of queries against there servers?
You could use DCC more-or-less out of the box, but sites with 100,000 or more messages/day are suggested to run a local server and use the "flooding" feature to exchange signatures en-masse with the servers. The standard DCC distro comes with the tools you need to do this.
As for other net checks, many DNSBLs are available for local rsync transfer of the zone file. This allows you to download the zonefile to a local machine and run it on a local DNS server.. VERY preferable for high-bandwidth sites.
Many DNSBLs require you to contact the admin and get approval first. (This is mostly because rsyncs are large, and issuing them to smaller sites is a bit of a waste of the DNSBL's resources)
Here's some links of interest:
DSBL seems to have open rsync access:
http://dsbl.org/usageCBL seems to be free access (not directly used by SA, as SA gets this data in agregate with XBL, but it is one that's open transfer):
http://cbl.abuseat.org/faq.html
Surbl by request:
http://www.surbl.org/rsync-signup.htmlSorbs by request:
http://www.dnsbl.us.sorbs.net/support/transfer.shtmlSpamhaus offers the service, but charges a fee to help support itself:
http://www.spamhaus.org/datafeed/