On 2/14/2017 11:04 PM, Ian Zimmerman wrote:
Given a piece of horrible spam, on which RBL is the sending IP address
likely to appear first?
I want to rationally decide which RBL/s to consult at SMTP time. Afraid
to use all of them, not just due to false positives, but also due to
negative caching in DNS, which could affect the result when the spam is
seen by SA a bit later.
I find zen.spamhaus.org to be the most reliable RBL to use for blacklisting.
I wouldn't worry too much about negative caching. It looks like the TTL
for negative results with Spamhaus is 10 seconds.
--
Bowie
