Am 31.05.2016 um 00:57 schrieb Reindl Harald:
Am 31.05.2016 um 00:49 schrieb Alex:
Hi,

So I created the RCVD_IN_XBL_ALL "deep header" rule and have since
reduced its score. However, there's still RCVD_IN_BL_SPAMCOP_NET as
part of the default ruleset, which I could of course change, but it's
scored 1.3 by default for that same "deep header" IP address.

Does that rule deserve some attention to determine whether it should
also be reduced by default for the same reason as the SBL/XBL rule?

DUNNO - we disabled all internal RBL's (exepct mailspike) from start
because
we feed postscreen and spamassassin from the same webinterface with
different scores for both but same lists (and some of them are
mirrored on
the local rbldnsd with different names in the own domain)

So then what were all those RBLs you listed initially with their
weights? bl.spamcop.net was among them...

can't say initailly - maintained starting summer 2014 - current state

don't use anything ending with "thelounge.net", our public nameservers
answers always with 127.0.0.2 to stop users which blind copy&paste
because they have no access to that zones and there was a lot of useless
response-rate-limitings

in case of mirrored zones the alias contains the real list

hopefully that get somehow useable displayed in the mail

did not - attached as textfile this time

+-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+
| name                                | weight | resp                | alias    
                     | sa_weigt | sa_resp                      |
+-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+
| dnsbl.thelounge.net                 |     16 | 127.0.0.2           | 
dnsbl.thelounge.net           |        7 | ^127\.0\.0\.2$               |
| dnsbl.sorbs.net                     |      9 | 127.0.0.10          | 
dul.dnsbl.sorbs.net           |      6.5 | ^127\.0\.0\.10$              |
| dnsbl.sorbs.net                     |      9 | 127.0.0.14          | 
noserver.dnsbl.sorbs.net      |      6.5 | ^127\.0\.0\.14$              |
| zen.spamhaus.org                    |      8 | 127.0.0.[10;11]     | 
pbl.spamhaus.org              |      6.5 | ^127\.0\.0\.1[01]$           |
| zen.spamhaus.org                    |      7 | 127.0.0.[4..7]      | 
xbl.spamhaus.org              |      5.5 | ^127\.0\.0\.[4-7]$           |
| dnsbl.sorbs.net                     |      7 | 127.0.0.5           | 
smtp.dnsbl.sorbs.net          |      5.5 | ^127\.0\.0\.5$               |
| b.barracudacentral.org              |      7 | 127.0.0.2           | 
b.barracudacentral.org        |        5 | ^127\.0\.0\.2$               |
| zen.spamhaus.org                    |      7 | 127.0.0.3           | 
css.spamhaus.org              |        5 | ^127\.0\.0\.3$               |
| dnsbl.inps.de                       |      7 | 127.0.0.2           | 
dnsbl.inps.de                 |        5 | ^127\.0\.0\.2$               |
| dnsbl-ix.thelounge.net              |      4 | 127.0.0.2           | 
ix.dnsbl.manitu.net           |      2.5 | ^127\.0\.0\.2$               |
| dnsbl.sorbs.net                     |      4 | 127.0.0.7           | 
web.dnsbl.sorbs.net           |      4.5 | ^127\.0\.0\.7$               |
| bl.spamcop.net                      |      4 | 127.0.0.2           | 
bl.spamcop.net                |      2.5 | ^127\.0\.0\.2$               |
| bl.mailspike.net                    |      4 | 127.0.0.2           | 
z.mailspike.net               |        0 |                              |
| bl.mailspike.net                    |      4 | 127.0.0.[10;11;12]  | 
bl.mailspike.net              |        0 |                              |
| hostkarma.junkemailfilter.com       |      4 | 127.0.0.2           | 
hostkarma.junkemailfilter.com |      3.5 | ^127\.0\.0\.2$               |
| dnsbl-surriel.thelounge.net         |      4 | 127.0.0.2           | 
psbl.surriel.com              |      2.5 | ^127\.0\.0\.2$               |
| bl.spameatingmonkey.net             |      4 | 127.0.0.[2;3]       | 
bl.spameatingmonkey.net       |      2.5 | ^127\.0\.0\.[23]$            |
| dnsrbl.swinog.ch                    |      4 | 127.0.0.3           | 
dnsrbl.swinog.ch              |      2.5 | ^127\.0\.0\.3$               |
| dnsbl-spamcannibal.thelounge.net    |      3 | 127.0.0.2           | 
bl.spamcannibal.org           |      1.5 | ^127\.0\.0\.2$               |
| dnsbl.sorbs.net                     |      3 | 127.0.0.6           | 
spam.dnsbl.sorbs.net          |      1.5 | ^127\.0\.0\.6$               |
| score.senderscore.com               |      3 | 127.0.4.[0..20]     | 
senderscore.com High          |      1.5 | ^127\.0\.4\.(1?[0-9]|20)$    |
| zen.spamhaus.org                    |      3 | 127.0.0.2           | 
sbl.spamhaus.org              |      1.5 | ^127\.0\.0\.2$               |
| hostkarma.junkemailfilter.com       |      2 | 127.0.0.4           | 
hostkarma.junkemailfilter.com |      1.5 | ^127\.0\.0\.4$               |
| dnsbl-uce.thelounge.net             |      2 | 127.0.0.2           | 
dnsbl-1.uceprotect.net        |        1 | ^127\.0\.0\.2$               |
| dnsbl.sorbs.net                     |      2 | 127.0.0.9           | 
zombie.dnsbl.sorbs.net        |      1.5 | ^127\.0\.0\.9$               |
| dnsbl.sorbs.net                     |      2 | 127.0.0.8           | 
block.dnsbl.sorbs.net         |      1.5 | ^127\.0\.0\.8$               |
| all.spamrats.com                    |      2 | 127.0.0.38          | 
spam.spamrats.com             |        1 | ^127\.0\.0\.38$              |
| dnsbl.sorbs.net                     |      1 | 127.0.0.4           | 
misc.dnsbl.sorbs.net          |        1 | ^127\.0\.0\.4$               |
| dnsbl.sorbs.net                     |      1 | 127.0.0.3           | 
socks.dnsbl.sorbs.net         |        1 | ^127\.0\.0\.3$               |
| dnsbl.sorbs.net                     |      1 | 127.0.0.2           | 
http.dnsbl.sorbs.net          |        1 | ^127\.0\.0\.2$               |
| dnsbl-uce-2.thelounge.net           |      1 | 127.0.0.2           | 
dnsbl-2.uceprotect.net        |        1 | ^127\.0\.0\.2$               |
| score.senderscore.com               |      1 | 127.0.4.[0..69]     | 
senderscore.com Medium        |        1 | ^127\.0\.4\.(0?[0-6]?[0-9])$ |
| dnsbl-backscatterer.thelounge.net   |      1 | 127.0.0.2           | 
ips.backscatterer.org         |      0.1 | ^127\.0\.0\.2$               |
| dnsbl.sorbs.net                     |      1 | 127.0.0.15          | 
virus.dnsbl.sorbs.net         |      0.5 | ^127\.0\.0\.15$              |
| bl.nszones.com                      |      1 | 127.0.0.[2;3]       | 
bl.nszones.com                |        1 | ^127\.0\.0\.[23]$            |
| hostkarma.junkemailfilter.com       |      1 | 127.0.1.2           | 
hostkarma.junkemailfilter.com |      0.5 | ^127\.0\.1\.2$               |
| score.senderscore.com               |     -1 | 127.0.4.[90..100]   | Low 
Trust                     |     -0.1 | ^127\.0\.4\.(9[0-9]|100)$    |
| bl.nszones.com                      |     -1 | 127.0.0.5           | Low 
Trust                     |     -0.1 | ^127\.0\.0\.5$               |
| hostkarma.junkemailfilter.com       |     -2 | 127.0.0.1           | Low 
Trust                     |     -0.1 | ^127\.0\.0\.1$               |
| list.dnswl.org                      |     -2 | 127.0.[0..255].0    | No Trust 
                     |     -0.1 | ^127\.0\.\d+\.0$             |
| wl.mailspike.net                    |     -2 | 127.0.0.[18;19;20]  | Good 
Reputation               |        0 |                              |
| dnswl-whitelisted-org.thelounge.net |     -2 | 127.0.0.2           | No Trust 
                     |     -0.1 | ^127\.0\.0\.2$               |
| dnswl.inps.de                       |     -2 | 127.0.[0;1].[2..10] | Low 
Trust                     |     -0.3 | ^127\.0\.[01]\.[2-9]$        |
| dnswl-aggregate.thelounge.net       |     -3 | 127.0.0.5           | Low 
Trust                     |     -0.6 | ^127\.0\.0\.5$               |
| dnswl-aggregate.thelounge.net       |     -3 | 127.0.0.6           | No Trust 
                     |     -0.2 | ^127\.0\.0\.6$               |
| list.dnswl.org                      |     -3 | 127.0.[0..255].1    | Low 
Trust                     |     -0.1 | ^127\.0\.\d+\.1$             |
| list.dnswl.org                      |     -4 | 127.0.[0..255].2    | Medium 
Trust                  |     -0.3 | ^127\.0\.\d+\.2$             |
| list.dnswl.org                      |     -5 | 127.0.[0..255].3    | High 
Trust                    |     -0.5 | ^127\.0\.\d+\.3$             |
| dnswl-aggregate.thelounge.net       |     -8 | 127.0.0.4           | Medium 
Trust                  |     -1.5 | ^127\.0\.0\.4$               |
| dnswl-aggregate.thelounge.net       |    -16 | 127.0.0.3           | High 
Trust                    |     -3.5 | ^127\.0\.0\.3$               |
| dnswl-aggregate.thelounge.net       |    -24 | 127.0.0.2           | Full 
Trust                    |     -4.5 | ^127\.0\.0\.2$               |
+-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+
51 rows in set (0.00 sec)

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to