Re: Honeypot email addresses

[Reindl Harald]

Am 03.12.2014 um 02:32 schrieb LuKreme:

another recent example:
Spamhaus blocked GMX/1&1/Web.de completly *by a mistake*, no problem in case of 
scoring, a ruined weekend if we had used it as only source

The extremely occasional mistaken black is more than made up for by the vast 
quantities of spam that are blocked every day. I reject at SMTP based on zen. 
If zen is mistaken, at least the sender doesn’t think the mail as delivered and 
f they (and their MUA) are competent, they know WHY their mail didn’t go 
through.

what is "based on zen"?
that is a aggregate list and sensible to use it score-based



postscreen_dnsbl_ttl = 5m
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_dnsbl_sites =
 b.barracudacentral.org=127.0.0.2*7
 dnsbl.inps.de=127.0.0.2*7
 bl.mailspike.net=127.0.0.2*5
 bl.mailspike.net=127.0.0.[10;11;12]*4
 dnsbl.sorbs.net=127.0.0.10*8
 dnsbl.sorbs.net=127.0.0.5*6
 dnsbl.sorbs.net=127.0.0.7*3
 dnsbl.sorbs.net=127.0.0.8*2
 dnsbl.sorbs.net=127.0.0.6*2
 dnsbl.sorbs.net=127.0.0.9*2
 zen.spamhaus.org=127.0.0.[10;11]*8
 zen.spamhaus.org=127.0.0.[4..7]*6
 zen.spamhaus.org=127.0.0.3*4
 zen.spamhaus.org=127.0.0.2*3
 wl.mailspike.net=127.0.0.[18;19;20]*-2
 list.dnswl.org=127.0.[0..255].0*-2
 list.dnswl.org=127.0.[0..255].1*-3
 list.dnswl.org=127.0.[0..255].2*-4
 list.dnswl.org=127.0.[0..255].3*-5

which the simple settings below you catch *much more* then with "zen" alone *and* reduce false-positives greatly

signature.asc
Description: OpenPGP digital signature