Hi Kevin, >> I'm using Kevin's KAM_FROM_URIBL_PCCC rules for the multi.pccc.com >> URIBL. Why is it designed to be a poison pill? It caught cvent.com, >> causing a bunch of mail to FP. >> >> I'm just curious if this URIBL is indeed this trustworthy, if these >> KAM rules are still used, and how it is working for you? > > I use those rules ;-) And currently that RBL is in testing stages where I am > personally vetting all the data. So I believe the trustability is quite > high. Please email if you have questions and we do look at them. > > cvent-munge.com was added on 9-24 and cventsurveys-munge.com added on 10-1.
How about just cvent.com? I've uploaded the headers from one FP here: http://pastebin.com/UDuDcp4F > I personally received the spam from them from what appears to be scraped > whois data: http://pastebin.com/Q0knc6ei has the headers for the two emails. > > So if cvent is legit, they are being abused by people sending spam and I > consider them candidates for the list but I'm open to suggestions. They're a huge event planning company, but also apparently are email marketers. Somehow I forgot this was your RBL. How many entries are on it? What's your procedure for adding them? > I also might recommend you consider lowering the scores I am using. I often > write poison pill rules that the project would never allow but they are > based on careful analysis of my corpora. YMMV and I'm open to feedback as I > mentioned. Just don't expect to always like my decisions. We had one user complain, and after investigating, realized there are hundreds of messages in the quarantine from this sender. They mostly appear to be just e-marketing crap, but there are a few where people have actually planned events and missed their confirmation emails, etc., so I can't just block them. With a poison pill attitude towards them, wouldn't it just be better to reject them outright? Anyway, I'm hoping you could explain your RBL further, because I value your expertise, and would like to take advantage of this, but will probably have to adapt a bit for my environment. Thanks buddy, Alex
