Given a piece of horrible spam, on which RBL is the sending IP address likely to appear first?
I want to rationally decide which RBL/s to consult at SMTP time. Afraid to use all of them, not just due to false positives, but also due to negative caching in DNS, which could affect the result when the spam is seen by SA a bit later. -- Please *no* private Cc: on mailing lists and newsgroups Personal signed mail: please _encrypt_ and sign Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html