On 22.01.09 14:54, RobertH wrote:
> would those of you in the know please comment based upon your data re: the
> below rules and their effectiveness in hitting spam vrs ham and/or false
> readings in diverse or fairly diverse large scale isp and/or corporate
> installations please

I think they all have scores set according to thei effectiveness and
FP-rate.

Note that _DUL and _PBL only apply on last external IP, thus it's important
to have trusted_networks and internal_networks set up correctly.

>   RCVD_IN_BL_SPAMCOP_NET 
>   RCVD_IN_DSBL          

this one is obsolete (dsbl is dead) . run sa-update to get fresh versions of
all rules.

>   RCVD_IN_NJABL_CGI      
>   RCVD_IN_NJABL_MULTI  
>   RCVD_IN_NJABL_PROXY    
>   RCVD_IN_NJABL_RELAY      
>   RCVD_IN_NJABL_SPAM    
>   RCVD_IN_SBL             
>   RCVD_IN_SORBS_BLOCK        
>   RCVD_IN_SORBS_DUL         
>   RCVD_IN_SORBS_HTTP         
>   RCVD_IN_SORBS_MISC         
>   RCVD_IN_SORBS_SMTP        
>   RCVD_IN_SORBS_SOCKS        
>   RCVD_IN_SORBS_WEB           
>   RCVD_IN_SORBS_ZOMBIE      
>   RCVD_IN_XBL                  
>   RCVD_IN_PBL              
>   DNS_FROM_AHBL_RHSBL        

>   RCVD_IN_MAPS_RBL            
>   RCVD_IN_MAPS_DUL            
>   RCVD_IN_MAPS_RSS           
>   RCVD_IN_MAPS_NML       

These are non-standard and I don't know if anyone published some
investigations and measurements here. Try searching...

> we are just wondering if we should use them or not, and specifically which
> ones are the best, if any at all.

I happily use them as they are distributed with SA (and sa-update). I don't
use MAPS*. So does our company (only I'm maintaining SA for last months)

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
If Barbie is so popular, why do you have to buy her friends? 

Reply via email to