[EMAIL PROTECTED] wrote:
Do you know if there is a list of RBL's and where I can get it from.
I have a customer who is getting alot of spam and I need to cut it
down alot, he seems to be getting alot from drug companies and medical
extension companies.
Dave,
I recommend the following 5 "1st tier" Sender's IP blacklist (or "RBLs",
as you described them):
(NOT in any particular order)
*****************
SENDER'S IP BLACKLISTS:
*****************
THE FIVE "1ST TIER" DNSBLs:
(1) zen.spamhaus.org (may require subscription if volume is high)
ALSO: cbl.abuseat.org (already included in zen, so don't use both.)
(2) psbl.surriel.com (I recommend using their free RSYNC access.)
(3) bl.spamcop.net (used to have some FPs of legit newletters. But not
anymore.. so don't believe anything bad you read about this one because
it is now really high quality and has extreme low FPs.)
(4) list.dsbl.org (I recommend using their free RSYNC access)
(5) invaluement.com's SIP list (**requires subscription for RSYNC access
to files. ivmSIP will NOT impress based on % of spam blocked... but it
WILL impress based on the spam it catches which ALL the other 1st tier
lists miss... and it has a 1st-tier extreme-low-FP rate.)
Contact me off-list for a free test of ivmSIP.
FOUR "HONORABLE MENTIONS":
(1) dnsbl.ahbl.org (really good, but I've seen a few too many FPs to
consider this in the 1st tier. But when I say "a few".. I mean a tiny,
tiny fraction of a percent.)
(2) dnsbl.njabl.org (really good, but I've seen a few too many FPs to
consider this in the 1st tier. But when I say "a few".. I mean a tiny,
tiny fraction of a percent.)
(3) hostkarma.junkemailfilter.com (might be a 1st tier list.. but I
haven't test it myself. Like ivmSIP, it catches lots of spam that other
lists miss. I know its FPs are overall at least very low, but I haven't
verified yet that it's FPs are low enough to be considered a 1st tier
RBL. This one might very well be 1st tier... I just can't personally
verify that.)
(4) dnsbl-1.uceprotect.net (used to have too many FPs... but under new
management and FPs are getting lower and lower... if the improvement
keeps up, this might just be 1st tier very soon, if not already!)
Again, the FP rates on at least three of these "honorable mentions" are
really just a hair below those of the 1st tier lists. I'm insanely
committed to having zero FPs.... so, again, don't take my "few FPs"
comments too far. I hear that some ISPs outright block on various
combinatinos of these "honorable mentions" with extreme few complains
about FPs.
*****************
URI BLACKLISTS:
*****************
There are three that stand head and shoulders above the rest. There
isn't a close 4th. These three have (1) extreme low FP rates... and (2)
each of these three catch many spammer's URIs that the other two miss.
Outside of these three, no other (publicly available) URI-dnsbl in
existence can come close to making those two claims.
These are (A) SURBL.org, (B) URIBL.COM, and (C) ivmURI.com
SURBL and URIBL are generally free. URIBL is starting to requiring a
paid subscription to RSYNC access for organizations with large volumes
of queries. Also, ivmURI is subscription-only (again, contact me
off-list for more info). BTW - check out http://invaluement.com/results.txt
SURBL can be queried with "multi.surbl.org"
URIBL can be queried with "multi.uribl.com"
ivmURI requires a subscription to get the data via RSYNC
Hope this helps!
BTW - a good place for looking at catch rates and FPs for the various
Sender's IP blacklists is Al Iverson's web site:
http://www.dnsbl.com/
But ivmSIP isn't listed there because Al Iverson hates me. :(
(a) I bugged Al one too many times last summer when Al had found a
single FP on my ivmSIP and wouldn't tell me what it was. I didn't mind
that he wouldn't tell me... but I'd e-mail him about once a week to ask
him if it was still there and, apparently, this eventually angered him.
(b) I tried to explain to Al that ivmSIP is suppose to have a catch rate
of only about 20% (at that time, it is higher now)... but that it was
still far superior to other lists that have a much higher catch rate
since ivmSIP had an overall 1st tier FP rate and ivmSIP catches spams
that other 1st tier lists miss. IOW, suppose that ivmSIP had a catch
rate of 80%, but was ONLY listing stuff that Zen *already* caught. What
good would a list like that be? Such a hypothetical list would superior
to ivmSIP according to Al's and his ratings ratings, but would be
absolute worthless in the real world! But since ivmSIP catches MANY
spams that all other 1st tier lists above miss... it is, instead,
extremely valuable and useful. After repeated attempts, Al NEVER even
acknowledged this logic and eventually told me to.... well... nevermind.
I guess he hates me... but he does a jam up job with his web site... He
is a true expert in this field and gives very good advice. His web sites
are chalk full of excellent analysis and review. Highly recommended!
(Though his site would do better if he factored in "unique" catches
among the 1st tier extreme-low-FP lists.)
Rob McEwen
[EMAIL PROTECTED]
