-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
"Pierre Thomson" writes:
> Here's one for which I can't find an answer in the archive. Recently Matt K
> repeated the common advice:
>
> >You can turn various RBLs on and off by changing the score of the rule.
> >Setting it to a score of 0 disables the rule entirely, and it will not be
> >queried.
>
> While optimizing my new SA 3.1.0 installation, I set the scores for many of
> the RCVD_IN_* network tests to zero. However, the DNS lookups keep right on
> going; here's a capture of the DNS lookups generated by a single email:
>
> 11:00:10.820999 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7455+ A?
> 122.3.220.66.sa-accredit.habeas.com. (53) (DF)
> 11:00:10.822458 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7456+ A?
> 122.3.220.66.sbl-xbl.spamhaus.org. (51) (DF)
> 11:00:10.824122 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7457+ A?
> 122.3.220.66.combined.njabl.org. (49) (DF)
> 11:00:10.825615 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7458+ A?
> 122.3.220.66.combined-HIB.dnsiplists.completewhois.com. (72) (DF)
> 11:00:10.826931 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7459+ TXT?
> 122.3.220.66.list.dsbl.org. (44) (DF)
> 11:00:10.828009 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7460+ TXT?
> 122.3.220.66.bl.spamcop.net. (45) (DF)
> 11:00:10.831065 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7461+ TXT?
> 122.3.220.66.sa-trusted.bondedsender.org. (58) (DF)
> 11:00:10.832606 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7462+ A?
> 122.3.220.66.dnsbl.sorbs.net. (46) (DF)
> 11:00:10.833767 AAA.BBB.CCC.DDD.56639 > 64.72.64.10.domain: 7463+ A?
> 122.3.220.66.iadb.isipp.com. (45) (DF)
>
> and from my local.cf:
>
> score RCVD_IN_IADB_VOUCHED 0
> score RCVD_IN_NJABL_CGI 0
> score RCVD_IN_NJABL_DUL 0
> score RCVD_IN_NJABL_MULTI 0
> score RCVD_IN_NJABL_PROXY 0
> score RCVD_IN_NJABL_RELAY 0
> score RCVD_IN_NJABL_SPAM 0
> score RCVD_IN_SBL 0
> score RCVD_IN_SORBS_BLOCK 0
> score RCVD_IN_SORBS_DUL 0
> score RCVD_IN_SORBS_HTTP 0
> score RCVD_IN_SORBS_MISC 0
> score RCVD_IN_SORBS_SMTP 0
> score RCVD_IN_SORBS_SOCKS 0
> score RCVD_IN_SORBS_WEB 0
> score RCVD_IN_SORBS_ZOMBIE 0
> score RCVD_IN_WHOIS_BOGONS 0
> score RCVD_IN_WHOIS_INVALID 0
> score RCVD_IN_XBL 0
>
> In 20_dnsbl_tests.cf there are some non-scored tests: __RCVD_IN_NJABL,
> __RCVD_IN_SBL_XBL, __RCVD_IN_SORBS etc. Are these the culprits? I can't
> disable them by scoring zero, since they are non-scored tests, right? So
> what's the recommended procedure to toally eliminate these tests?
Actually
score __RCVD_IN_SORBS 0
should also do the trick. Good question btw, if that doesn't work we have
a bug ;)
- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Exmh CVS
iD8DBQFDXTjZMJF5cimLx9ARAvNPAJ0R0sqiRSDI2oBaOtoYzv6Q1d3onwCfZeIA
XFwWPruwzMelYPc4CEXeamQ=
=cm9f
-----END PGP SIGNATURE-----
