PHWinfo - Afficher un message - RBLs and mail-abuse.com

04/11/2006, 11h12

In comp.mail.sendmail Robert S <robert.spam.me.senseless@gmail.com>:
> I (like many others) have had a considerable increase in spam in the
> last few months. I've got a few questions about RBLs.

Full ack, the crap seems to raise permanently and anything
getting you rid as cheap as possible from as much ratware as
possible is quite welcome. 1000-2000 rejects hourly on a single
MTA seems common lately. ;(

> I'm currently using an evaluation version of mail-abuse.com. Is this
> likely to be superior to my current list (see below)? Where can I get
> hold of a price list for it, and am interested in subscribing to it.
> The TrendMicro website is rather unful.

> What are the favoured RBLs these days? - I haven't reviewed this for
> some time now. Obviously the priority is avoidance of false positives.

bl.spamcop.net is IMHO one of the very good ones, though false
positive are not impossible, they tend to be quite seldom.

> I currently use the following RBLs:

> combined.njabl.org
> cbl.abuseat.org
> sbl.spamhaus.org

SBL is nice for running from SA to score up, but might produce to
many false positive if rejecting directly based on it, YMMV.

Spamhaus xbl list on the other hand seems a quite sure bet. But
doesn't block much as much as spamcop.

> list.dsbl.org

> Because I run a small organisation I'd like to keep costs to a minimum.

AFAIK most lists are free for light usage? Though it would be
nice to donate a few bucks to those lists if you can, to support
their operations.

I'd look in addition into Greylisting to keep ratware away, the
advantage are zero false positive, any real MTA should be able to
cope with it easily and resend.

Sendmail's greeting pause in recent versions can keep stuff away
without using to much of your resources.

To keep up with all the ratware hammering legitimate MTAs 24/7
you need to combine any possibility. Even multi line HELO messages
seem to confuse some ratware but no real MTA.

Good luck

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo zvpunry@urvzvat.qr | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 453: Rhythmic variations in the voltage reaching
the power supply.

04/11/2006, 11h12	#2
Michael Heiming Messages: n/a Hébergeur:	Re: RBLs and mail-abuse.com In comp.mail.sendmail Robert S <robert.spam.me.senseless@gmail.com>: > I (like many others) have had a considerable increase in spam in the > last few months. I've got a few questions about RBLs. Full ack, the crap seems to raise permanently and anything getting you rid as cheap as possible from as much ratware as possible is quite welcome. 1000-2000 rejects hourly on a single MTA seems common lately. ;( > I'm currently using an evaluation version of mail-abuse.com. Is this > likely to be superior to my current list (see below)? Where can I get > hold of a price list for it, and am interested in subscribing to it. > The TrendMicro website is rather unful. > What are the favoured RBLs these days? - I haven't reviewed this for > some time now. Obviously the priority is avoidance of false positives. bl.spamcop.net is IMHO one of the very good ones, though false positive are not impossible, they tend to be quite seldom. > I currently use the following RBLs: > combined.njabl.org > cbl.abuseat.org > sbl.spamhaus.org SBL is nice for running from SA to score up, but might produce to many false positive if rejecting directly based on it, YMMV. Spamhaus xbl list on the other hand seems a quite sure bet. But doesn't block much as much as spamcop. > list.dsbl.org > Because I run a small organisation I'd like to keep costs to a minimum. AFAIK most lists are free for light usage? Though it would be nice to donate a few bucks to those lists if you can, to support their operations. I'd look in addition into Greylisting to keep ratware away, the advantage are zero false positive, any real MTA should be able to cope with it easily and resend. Sendmail's greeting pause in recent versions can keep stuff away without using to much of your resources. To keep up with all the ratware hammering legitimate MTAs 24/7 you need to combine any possibility. Even multi line HELO messages seem to confuse some ratware but no real MTA. Good luck -- Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94) mail: echo zvpunry@urvzvat.qr \| perl -pe 'y/a-z/n-za-m/' #bofh excuse 453: Rhythmic variations in the voltage reaching the power supply.