On Mon, 13 Dec 2010 13:47:14 +0000 Cedric Knight <ced...@gn.apc.org> wrote:
> GBUdb.com's truncated list (http://www.gbudb.com/truncate/) went > public in May and seems to work very well, catching a lot of things > missed by other RBLs, with <1% false positives. YMMV. It's related > to Message Sniffer, a commercial anti-spam package, and is fully > automated (no user submissions). I'd hazard that a starting score of > 2.0 might be appropriate. > > header RCVD_IN_GBUDB_TRUNC eval:check_rbl('trunc-firsttrusted', > 'truncate.gbudb.net.') That should be "-lastexternal" - assuming that the list contains a lot of dynamic addresses. Blacklists run on either the last external address or run deep, whitelists run on first-trusted.
