On Friday, December 29, 2006, 1:25:10 PM, Larry Nedry wrote: > On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: >>What are you using?
> Currently I am using only zen.spamhaus.org. The rest of the RBLs that I > have tried have had too many false positives to be useful for my > requirements. > Which RBLs do the rest of you folks feel comfortable using? > Nedry zen.spamhaus.org is the only RBL I recommend using for outright blocking at the MTA level. Of the spamhaus lists, zen is the only one people should be using going forward, as already mentioned from the Spamhaus site: http://www.spamhaus.org/faq/answers.lasso?section=DNSBL%20Technical#186 Be aware that zen will include the new PBL list in addition to SBL and XBL: http://www.spamhaus.org/pbl/index.lasso The PBL list should be quite effective, but it is a different, new list. It is a "Policy Black List" that lists network spaces that ISPs say should not be emitting mail, such as dialup spaces, DHCP spaces, DSL, cable modem, etc. Many of the mail emitters in such spaces tend to be botnets sending spam. Also note that MTA level blocking is not the same as the way SpamAssassin uses RBLs. SpamAssassin uses many blacklists in addition to Spamhaus: http://wiki.apache.org/spamassassin/UsingNetworkTests http://wiki.apache.org/spamassassin/DnsBlocklists in order to score the senders of messages. It scores different blacklists differently, essentially depending on how accurate they are. The more accurate lists get a higher score, etc. SpamAssassin also uses some RBLs to check message body URIs, including using Spamhaus and SURBLs: http://spamassassin.apache.org/full/3.1.x/dist/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html Blocking in an MTA means not allowing the message to even get to SpamAssassin for checking. This is the normal way most mail servers are set up since the volume of all spam could generally overwhelm SpamAssassin without MTA blocking. Blocking by sener IP is much more efficient, so it's generally used as a fast pre-filter before SpamAssassin even sees a message. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
