i agree that spamhaus is a big hammer. i'm open to suggestions. preferably ones that do not require daily maintence.
> Things like SPF don't catch as much spam (yet; it'll improve as the > acceptance improves), but have a very attractive false hit rate. the rate just isn't good enough for me. here's a tabulation of date, total rejections (other than invalid helo -- that would add another zero to the first column) and spf rejections over the past 4 days for me: May 9 335 0 May 10 237 2 May 11 137 0 May 12 140 2 unfortunately, 2 of the spf rejections were actually 451's due to dns timeout. (one thing i forgot to mention before is that spf does not protect against bots sending through legit (according to spf) mail servers.) spf can be a very good tool. around apr 15th, spf was pretty good at bouncing email proporting to be from irs.gov that was not caught by spamhaus. > This is what I'm doing now, since many of these folks assume that > everyone on the end of a DSL or cable line are spammers, and many > provide no way for me to tell them I'm not. It sucks; my ISPs mail > server is okay, but certainly not 100% reliable, and adds another > hop I'd rather not worry about. i've successfully gotten static cidrs off spamhaus' black lists. i believe they have a link right off their home page. - erik
