Here's the options and their highpoints.
Declude is going to test the IP of each hop in the delivery chain (unless
IPBYPASS specified) through that DNS query.
The maximum number of hops to check defined by the HOPHIGH parameter
XBL ip4r xbl.spamhaus.org * 3 0
One DNS query per IP, most efficent.
Fewest scoring options.
Can't get simpler than this.
Or
XBL-SBL ip4r sbl-xbl.spamhaus.org 127.0.0.2 3 0
XBL-CBL ip4r sbl-xbl.spamhaus.org 127.0.0.4 3 0
XBL-NJABL ip4r sbl-xbl.spamhaus.org 127.0.0.5 2 0
XBL-Blitzed ip4r sbl-xbl.spamhaus.org 127.0.0.6 3 0
Since the dns name is the same this will still make only one DNS query per
IP, also being most efficient.
You could also weight the results differently.
The XBL-NJABL is listed as a "time-expired NJABL open proxy" so it is a
subset of the full NJABL list.
Or
SBL ip4r sbl.spamhaus.org 127.0.0.2 3 0
BLITZEDALL ip4r opm.blitzed.org * 3 0
CBL ip4r cbl.abuseat.org 127.0.0.2 3 0
NJABL dnsbl.njabl.org * 2 0
4 DNS queries per IP, being less efficient.
You'd get the full NJABL although scoring this at one weight.
In my own opinion, I think using the individual lists offers the best chance
at getting the most fresh results. I don't know if this can be proven with
the results.
Also allows for a potential overlap of lists. If somebody is on NJABL and
Blitzedall they could get scored twice.
Or
SBL ip4r sbl.spamhaus.org 127.0.0.2 3 0
BLITZEDALL ip4r opm.blitzed.org * 3 0
CBL ip4r cbl.abuseat.org 127.0.0.2 3 0
NJABL-RELAYS ip4r dnsbl.njabl.org 127.0.0.2 3 0
NJABL-DUL ip4r dnsbl.njabl.org 127.0.0.3 2 0
NJABL-SOURCES ip4r dnsbl.njabl.org 127.0.0.4 3 0
NJABL-MULTISTAGE-RELAY ip4r dnsbl.njabl.org 127.0.0.5 02 0
NJABL-FORMMAIL_RELAY ip4r dnsbl.njabl.org 127.0.0.8 2 0
NJABL-PROXIES ip4r dnsbl.njabl.org 127.0.0.9 3 0
4 DNS quries per IP, being less efficient.
You'd get the full NJABL with the ability to score them at different
weights. Most flexible for scoring.
In my own opinion, I think using the individual lists offers the best chance
at getting the most fresh results. I don't know if this can be proven with
the results.
Also allows for a potential overlap of lists. If somebody is on NJABL and
Blitzedall they could get scored twice.
----- Original Message -----
From: "Travis Sullivan" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, September 21, 2005 11:35 AM
Subject: [Declude.JunkMail] dnsbl locations explained???
SBL+XBL sbl-xbl.spamhaus.org 127.0.0.2-6 Combined zone to reduce
queries
Includes both SBL and XBL zones
I have:
sbl-xbl.spamhaus.org *
But I am wondering on the downside of such a wildcard. Will the system
check ANY/ALL IPs belonging to that domain, or just the first response?
Anyone know? I am thinking perhaps we should list all IPs to cut down on
"system hunting"?
Travis
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
