John,

I score SBL, XBL and BLITZED-ALL separately, as if they were all from different zones as before.  The change saves two DNS lookups (or more with HOPHIGH modified from the default in Declude Pro).  Just make sure to configure each test for the exact response indicated, i.e. 127.0.0.2, 127.0.0.4 and 127.0.0.6 for the above mentioned respectively.  I score SBL much higher than XBL and BLITZED-ALL, which I score the same, although all 3 are highly accurate and scored higher than almost everything else on my system.  SBL targets primarily static spammers, and both XBL and BLITZED-ALL target zombies or exploited servers.  The fact that SBL is maintained manually makes it only prone to human error and sometimes a lack of purity of reason (like listing some DUL space and random blocks, primarily in places like China, and have acknowledged to me that they do sometimes practice collateral damage in the "interest of the Internet as a whole", but I send them reminders every few weeks with FP's attached to discourage the practice which so far is very limited in that zone).

Matt



John Carter wrote:

Reply to myself. READ THE MESSAGE BETTER AND FOLLOW THE LINKS. When I did get out to the spamhaus page, most of my question as cleared up. Sorry.

 

However Matt, should I adjust the sbl-xbl score up to compensate for removing the other separate tests?

 

Thanks.

John

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Carter
Sent: Wednesday, December 01, 2004 12:32 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Spamhaus

 

Please explain.  BLITZED-ALL and CBL don’t check Spamhaus, do they?  Scott’s spam database page makes it look like BLITZED-ALL goes to opm.blitzed.org and CBL goes to cbl.abuseat.org.  Is there a “relationship” of these to Spamhaus? And if I do drop those two for SBL-XBL, should I increase the SBL-XBL hit score?

 

Thanks,

John

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, December 01, 2004 12:01 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Spamhaus

 

No, that zone is only for SBL entries.  There is a combined zone at sbl-xbl.spamhaus.org that will return a 127.0.0.2 for a SBL hit, a 127.0.0.4 for a XBL/CBL hit, and a 127.0.0.6 for a BLITZED-ALL hit (you should remove BLITZED-ALL's native zone if you use this, just like CBL).  Using the sbl-xbl.spamhaus.org zone instead of three different zones for these purposes will save a couple of DNS lookups for each E-mail since Declude is smart enough to only query the zone once, and it can get as many result codes back from that single query as are needed.







Unfortunately the config information on Spamhaus' site isn't perfectly clear, but what I have described above is accurate.







    http://www.spamhaus.org/xbl/index.lasso







Matt








-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

Reply via email to