|
WS is the heaviest hitter. You could add all of these
lists as a single test which will hit on any response from any of the
lists:
SURBL rhsbl multi.surbl.org * 1
0
Bill
----- Original Message -----
Sent: Tuesday, November 23, 2004 7:15
AM
Subject: Re: [Declude.JunkMail] SURBL as
RHSBL
I would rather not add six new tests to my config. Would
you recommend a
single SURBL test? Which one seems to work
better?
Regards,
Jason
----- Original Message -----
From: "Darin Cox" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent:
Tuesday, November 23, 2004 8:02 AM
Subject: Re: [Declude.JunkMail] SURBL as
RHSBL
> Hi Bill,
>
> You seem to always be one of
the first to share new blacklists. Where do
> you find this
info? Is there another list that would be worth joining?
>
>
Thanks, man.
>
> Darin.
>
>
> ----- Original
Message -----
> From: "Bill Landry" <[EMAIL PROTECTED]>
> To:
<[EMAIL PROTECTED]>
>
Sent: Tuesday, November 23, 2004 5:04 AM
> Subject: Re:
[Declude.JunkMail] SURBL as RHSBL
>
>
> Modification, since
I was not thinking, but Declude JunkMail does not
> support bitmasked
responses. So instead of using the multi zone, you will
> need to
use:
>
> SURBL_AB rhsbl ab.surbl.org
127.0.0.2 1 0
> SURBL_JP rhsbl jp.surbl.org
127.0.0.2 1 0
> SURBL_OB rhsbl ob.surbl.org
127.0.0.2 1 0
> SURBL_PH rhsbl ph.surbl.org
127.0.0.2 1 0
> SURBL_SC rhsbl sc.surbl.org
127.0.0.2 1 0
> SURBL_WS rhsbl ws.surbl.org
127.0.0.2 1 0
>
> Which will require six different queries if you
want to use all SURBL
lists.
>
> Bill
> ----- Original
Message -----
> From: Bill Landry
> To: [EMAIL PROTECTED]
>
Sent: Tuesday, November 23, 2004 12:47 AM
> Subject: Re:
[Declude.JunkMail] SURBL as RHSBL
>
>
> Markus, if you want
to test against all of the SURBLs, since it's only a
> single query to
the multi zone, use:
>
> SURBL_AB rhsbl
multi.surbl.org 127.0.0.32 1 0
> SURBL_JP rhsbl
multi.surbl.org 127.0.0.64 1 0
> SURBL_OB rhsbl
multi.surbl.org 127.0.0.16 1 0
> SURBL_PH rhsbl
multi.surbl.org 127.0.0.8 1 0
> SURBL_SC rhsbl
multi.surbl.org 127.0.0.2 1 0
> SURBL_WS rhsbl
multi.surbl.org 127.0.0.4 1 0
>
> AB =
AbuseButler data
> JP = Combination of Prolocation data & Joe Wein's
SpamSpy data
> OB = OutBlaze data
> PH = Combination of MailPolice
"Fraud" list data & MailSecurity "Phishing"
> list data
> SC =
SpamCop top 200 hits data
> WS = William Stearns & submitter
data
>
> I have been testing this for about an hour, and am
getting a few hits.
> We'll see how it goes over the next 24
hours...
>
>
> Bill
> ----- Original Message -----
> From: Markus Gufler
> To: [EMAIL PROTECTED]
>
Sent: Monday, November 22, 2004 11:41 PM
> Subject: RE:
[Declude.JunkMail] SURBL as RHSBL
>
>
> Is this the correct
configruation line for doing this?
>
> SURBLS-RHSBL rhsbl
%MAILFROM%.sc.surbl.org 127.0.0.2 5 0
>
>
>
Markus
>
>
> ---
> [This E-mail was scanned for
viruses by Declude Virus
> (http://www.declude.com)]
>
>
---
> This E-mail came from the Declude.JunkMail mailing list.
To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type
"unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
>
---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
>
---
> This E-mail came from the Declude.JunkMail mailing list.
To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type
"unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
>
---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
>
---
> This E-mail came from the Declude.JunkMail mailing list.
To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type
"unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
---
[This
E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This
E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type
"unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
|
