Am 31.05.2016 um 00:49 schrieb Alex:
Hi,So I created the RCVD_IN_XBL_ALL "deep header" rule and have since reduced its score. However, there's still RCVD_IN_BL_SPAMCOP_NET as part of the default ruleset, which I could of course change, but it's scored 1.3 by default for that same "deep header" IP address. Does that rule deserve some attention to determine whether it should also be reduced by default for the same reason as the SBL/XBL rule?DUNNO - we disabled all internal RBL's (exepct mailspike) from start because we feed postscreen and spamassassin from the same webinterface with different scores for both but same lists (and some of them are mirrored on the local rbldnsd with different names in the own domain)So then what were all those RBLs you listed initially with their weights? bl.spamcop.net was among them...
can't say initailly - maintained starting summer 2014 - current statedon't use anything ending with "thelounge.net", our public nameservers answers always with 127.0.0.2 to stop users which blind copy&paste because they have no access to that zones and there was a lot of useless response-rate-limitings
in case of mirrored zones the alias contains the real list hopefully that get somehow useable displayed in the mail +-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+| name | weight | resp | alias | sa_weigt | sa_resp |
+-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+| dnsbl.thelounge.net | 16 | 127.0.0.2 | dnsbl.thelounge.net | 7 | ^127\.0\.0\.2$ | | dnsbl.sorbs.net | 9 | 127.0.0.10 | dul.dnsbl.sorbs.net | 6.5 | ^127\.0\.0\.10$ | | dnsbl.sorbs.net | 9 | 127.0.0.14 | noserver.dnsbl.sorbs.net | 6.5 | ^127\.0\.0\.14$ | | zen.spamhaus.org | 8 | 127.0.0.[10;11] | pbl.spamhaus.org | 6.5 | ^127\.0\.0\.1[01]$ | | zen.spamhaus.org | 7 | 127.0.0.[4..7] | xbl.spamhaus.org | 5.5 | ^127\.0\.0\.[4-7]$ | | dnsbl.sorbs.net | 7 | 127.0.0.5 | smtp.dnsbl.sorbs.net | 5.5 | ^127\.0\.0\.5$ | | b.barracudacentral.org | 7 | 127.0.0.2 | b.barracudacentral.org | 5 | ^127\.0\.0\.2$ | | zen.spamhaus.org | 7 | 127.0.0.3 | css.spamhaus.org | 5 | ^127\.0\.0\.3$ | | dnsbl.inps.de | 7 | 127.0.0.2 | dnsbl.inps.de | 5 | ^127\.0\.0\.2$ | | dnsbl-ix.thelounge.net | 4 | 127.0.0.2 | ix.dnsbl.manitu.net | 2.5 | ^127\.0\.0\.2$ | | dnsbl.sorbs.net | 4 | 127.0.0.7 | web.dnsbl.sorbs.net | 4.5 | ^127\.0\.0\.7$ | | bl.spamcop.net | 4 | 127.0.0.2 | bl.spamcop.net | 2.5 | ^127\.0\.0\.2$ | | bl.mailspike.net | 4 | 127.0.0.2 | z.mailspike.net | 0 | | | bl.mailspike.net | 4 | 127.0.0.[10;11;12] | bl.mailspike.net | 0 | | | hostkarma.junkemailfilter.com | 4 | 127.0.0.2 | hostkarma.junkemailfilter.com | 3.5 | ^127\.0\.0\.2$ | | dnsbl-surriel.thelounge.net | 4 | 127.0.0.2 | psbl.surriel.com | 2.5 | ^127\.0\.0\.2$ | | bl.spameatingmonkey.net | 4 | 127.0.0.[2;3] | bl.spameatingmonkey.net | 2.5 | ^127\.0\.0\.[23]$ | | dnsrbl.swinog.ch | 4 | 127.0.0.3 | dnsrbl.swinog.ch | 2.5 | ^127\.0\.0\.3$ | | dnsbl-spamcannibal.thelounge.net | 3 | 127.0.0.2 | bl.spamcannibal.org | 1.5 | ^127\.0\.0\.2$ | | dnsbl.sorbs.net | 3 | 127.0.0.6 | spam.dnsbl.sorbs.net | 1.5 | ^127\.0\.0\.6$ | | score.senderscore.com | 3 | 127.0.4.[0..20] | senderscore.com High | 1.5 | ^127\.0\.4\.(1?[0-9]|20)$ | | zen.spamhaus.org | 3 | 127.0.0.2 | sbl.spamhaus.org | 1.5 | ^127\.0\.0\.2$ | | hostkarma.junkemailfilter.com | 2 | 127.0.0.4 | hostkarma.junkemailfilter.com | 1.5 | ^127\.0\.0\.4$ | | dnsbl-uce.thelounge.net | 2 | 127.0.0.2 | dnsbl-1.uceprotect.net | 1 | ^127\.0\.0\.2$ | | dnsbl.sorbs.net | 2 | 127.0.0.9 | zombie.dnsbl.sorbs.net | 1.5 | ^127\.0\.0\.9$ | | dnsbl.sorbs.net | 2 | 127.0.0.8 | block.dnsbl.sorbs.net | 1.5 | ^127\.0\.0\.8$ | | all.spamrats.com | 2 | 127.0.0.38 | spam.spamrats.com | 1 | ^127\.0\.0\.38$ | | dnsbl.sorbs.net | 1 | 127.0.0.4 | misc.dnsbl.sorbs.net | 1 | ^127\.0\.0\.4$ | | dnsbl.sorbs.net | 1 | 127.0.0.3 | socks.dnsbl.sorbs.net | 1 | ^127\.0\.0\.3$ | | dnsbl.sorbs.net | 1 | 127.0.0.2 | http.dnsbl.sorbs.net | 1 | ^127\.0\.0\.2$ | | dnsbl-uce-2.thelounge.net | 1 | 127.0.0.2 | dnsbl-2.uceprotect.net | 1 | ^127\.0\.0\.2$ | | score.senderscore.com | 1 | 127.0.4.[0..69] | senderscore.com Medium | 1 | ^127\.0\.4\.(0?[0-6]?[0-9])$ | | dnsbl-backscatterer.thelounge.net | 1 | 127.0.0.2 | ips.backscatterer.org | 0.1 | ^127\.0\.0\.2$ | | dnsbl.sorbs.net | 1 | 127.0.0.15 | virus.dnsbl.sorbs.net | 0.5 | ^127\.0\.0\.15$ | | bl.nszones.com | 1 | 127.0.0.[2;3] | bl.nszones.com | 1 | ^127\.0\.0\.[23]$ | | hostkarma.junkemailfilter.com | 1 | 127.0.1.2 | hostkarma.junkemailfilter.com | 0.5 | ^127\.0\.1\.2$ | | score.senderscore.com | -1 | 127.0.4.[90..100] | Low Trust | -0.1 | ^127\.0\.4\.(9[0-9]|100)$ | | bl.nszones.com | -1 | 127.0.0.5 | Low Trust | -0.1 | ^127\.0\.0\.5$ | | hostkarma.junkemailfilter.com | -2 | 127.0.0.1 | Low Trust | -0.1 | ^127\.0\.0\.1$ | | list.dnswl.org | -2 | 127.0.[0..255].0 | No Trust | -0.1 | ^127\.0\.\d+\.0$ | | wl.mailspike.net | -2 | 127.0.0.[18;19;20] | Good Reputation | 0 | | | dnswl-whitelisted-org.thelounge.net | -2 | 127.0.0.2 | No Trust | -0.1 | ^127\.0\.0\.2$ | | dnswl.inps.de | -2 | 127.0.[0;1].[2..10] | Low Trust | -0.3 | ^127\.0\.[01]\.[2-9]$ | | dnswl-aggregate.thelounge.net | -3 | 127.0.0.5 | Low Trust | -0.6 | ^127\.0\.0\.5$ | | dnswl-aggregate.thelounge.net | -3 | 127.0.0.6 | No Trust | -0.2 | ^127\.0\.0\.6$ | | list.dnswl.org | -3 | 127.0.[0..255].1 | Low Trust | -0.1 | ^127\.0\.\d+\.1$ | | list.dnswl.org | -4 | 127.0.[0..255].2 | Medium Trust | -0.3 | ^127\.0\.\d+\.2$ | | list.dnswl.org | -5 | 127.0.[0..255].3 | High Trust | -0.5 | ^127\.0\.\d+\.3$ | | dnswl-aggregate.thelounge.net | -8 | 127.0.0.4 | Medium Trust | -1.5 | ^127\.0\.0\.4$ | | dnswl-aggregate.thelounge.net | -16 | 127.0.0.3 | High Trust | -3.5 | ^127\.0\.0\.3$ | | dnswl-aggregate.thelounge.net | -24 | 127.0.0.2 | Full Trust | -4.5 | ^127\.0\.0\.2$ |
+-------------------------------------+--------+---------------------+-------------------------------+----------+------------------------------+ 51 rows in set (0.00 sec)
signature.asc
Description: OpenPGP digital signature
