On 2014-05-19 19:39, Ian Zimmerman wrote:
Ok, I installed a local bind instance on Saturday. But it is not helping: out of about 100 spams I got today (counting both those that got flagged and those that didn't, but not counting the "horrible" spams with score > 15 that go directly to /dev/null), _none_ scored on URIBL_RHS_DOB. And I know for a fact that most of them contain fresh domains :-( Btw, all those domains are registered with enom. Wth?
Have you checked the domains to see if they're listed on DOB? Or can you at least verify that test domains can be queried on DOB?
Did you leave your local BIND instance acting as a full resolver, or did you set forwarders? If so, removing the forwarder configuration should help.
-- Dave Warren http://www.hireahit.com/ http://ca.linkedin.com/in/davejwarren