Here's one for which I can't find an answer in the archive. Recently Matt K repeated the common advice:
>You can turn various RBLs on and off by changing the score of the rule. >Setting it to a score of 0 disables the rule entirely, and it will not be >queried. While optimizing my new SA 3.1.0 installation, I set the scores for many of the RCVD_IN_* network tests to zero. However, the DNS lookups keep right on going; here's a capture of the DNS lookups generated by a single email: 11:00:10.820999 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7455+ A? 122.3.220.66.sa-accredit.habeas.com. (53) (DF) 11:00:10.822458 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7456+ A? 122.3.220.66.sbl-xbl.spamhaus.org. (51) (DF) 11:00:10.824122 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7457+ A? 122.3.220.66.combined.njabl.org. (49) (DF) 11:00:10.825615 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7458+ A? 122.3.220.66.combined-HIB.dnsiplists.completewhois.com. (72) (DF) 11:00:10.826931 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7459+ TXT? 122.3.220.66.list.dsbl.org. (44) (DF) 11:00:10.828009 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7460+ TXT? 122.3.220.66.bl.spamcop.net. (45) (DF) 11:00:10.831065 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7461+ TXT? 122.3.220.66.sa-trusted.bondedsender.org. (58) (DF) 11:00:10.832606 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7462+ A? 122.3.220.66.dnsbl.sorbs.net. (46) (DF) 11:00:10.833767 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7463+ A? 122.3.220.66.iadb.isipp.com. (45) (DF) and from my local.cf: score RCVD_IN_IADB_VOUCHED 0 score RCVD_IN_NJABL_CGI 0 score RCVD_IN_NJABL_DUL 0 score RCVD_IN_NJABL_MULTI 0 score RCVD_IN_NJABL_PROXY 0 score RCVD_IN_NJABL_RELAY 0 score RCVD_IN_NJABL_SPAM 0 score RCVD_IN_SBL 0 score RCVD_IN_SORBS_BLOCK 0 score RCVD_IN_SORBS_DUL 0 score RCVD_IN_SORBS_HTTP 0 score RCVD_IN_SORBS_MISC 0 score RCVD_IN_SORBS_SMTP 0 score RCVD_IN_SORBS_SOCKS 0 score RCVD_IN_SORBS_WEB 0 score RCVD_IN_SORBS_ZOMBIE 0 score RCVD_IN_WHOIS_BOGONS 0 score RCVD_IN_WHOIS_INVALID 0 score RCVD_IN_XBL 0 In 20_dnsbl_tests.cf there are some non-scored tests: __RCVD_IN_NJABL, __RCVD_IN_SBL_XBL, __RCVD_IN_SORBS etc. Are these the culprits? I can't disable them by scoring zero, since they are non-scored tests, right? So what's the recommended procedure to toally eliminate these tests? Pierre Thomson BIC
