After reading Mike's emailing about AOL, this stuck out:
I reject mail at the MTA level that's from IPs or domains listed in
Spamhaus (both SBL and
XBL) and bogusmx.rfc-ignorant.org (the only one of their lists I trust
not
to cause false positives when used in this manner).
I think xbl-sbl is GREAT ! Anybody else have good results with
bogusmx.rfc-ignorant.org? FP's are my biggest worry.
I've had one that I know of - the local newspaper. They were using a CNAME
for their MX server. Fortunately, I know the people responsible for their
DNS and cajoled them into fixing it. What I see it catch mostly is the lame
spammers who set their MX to something that resolves to localhost.
