On 22.01.09 14:54, RobertH wrote: > would those of you in the know please comment based upon your data re: the > below rules and their effectiveness in hitting spam vrs ham and/or false > readings in diverse or fairly diverse large scale isp and/or corporate > installations please
I think they all have scores set according to thei effectiveness and FP-rate. Note that _DUL and _PBL only apply on last external IP, thus it's important to have trusted_networks and internal_networks set up correctly. > RCVD_IN_BL_SPAMCOP_NET > RCVD_IN_DSBL this one is obsolete (dsbl is dead) . run sa-update to get fresh versions of all rules. > RCVD_IN_NJABL_CGI > RCVD_IN_NJABL_MULTI > RCVD_IN_NJABL_PROXY > RCVD_IN_NJABL_RELAY > RCVD_IN_NJABL_SPAM > RCVD_IN_SBL > RCVD_IN_SORBS_BLOCK > RCVD_IN_SORBS_DUL > RCVD_IN_SORBS_HTTP > RCVD_IN_SORBS_MISC > RCVD_IN_SORBS_SMTP > RCVD_IN_SORBS_SOCKS > RCVD_IN_SORBS_WEB > RCVD_IN_SORBS_ZOMBIE > RCVD_IN_XBL > RCVD_IN_PBL > DNS_FROM_AHBL_RHSBL > RCVD_IN_MAPS_RBL > RCVD_IN_MAPS_DUL > RCVD_IN_MAPS_RSS > RCVD_IN_MAPS_NML These are non-standard and I don't know if anyone published some investigations and measurements here. Try searching... > we are just wondering if we should use them or not, and specifically which > ones are the best, if any at all. I happily use them as they are distributed with SA (and sa-update). I don't use MAPS*. So does our company (only I'm maintaining SA for last months) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. If Barbie is so popular, why do you have to buy her friends?