[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Which Spam Block List to use for a network?

On Sat, 19 Jun 2004 00:29, Francisco Borges <frandebo@latt.if.usp.br> wrote:
> SpamCop works fine for my own email, where most people are whitelisted,
> but is said [1] not to be suitable for a production environment and what
> we have here is precisely that...

I know of some ISPs that use SpamCop.  It generally works well and has good 
proceedures for removing bogus entries.  I have had my mail server using the 
SpamCop DNSBL for years and had hardly any problems of legit mail being 

Below is my Postfix configuration line for anti-spam systems.  SpamCop is 
first because it gets the highest hit rate and the majority of spams get 
discarded from it before even having to query other servers (should be good 
for you as you mention having an over-loaded server).  The DNSBL entries 
below are roughly in order of hit rate - the last few entries catch hardly 
any spam due to duplicate entries with other lists.

By far the most false-positive entries I have had are from 
postmaster.rfc-ignorant.org and abuse.rfc-ignorant.org.  The postmaster list 
gets hotmail.com (and many others), and the abuse list gets yahoo.com (with 
many more others).  I was forced to remove the abuse list from my 
configuration as it got so many hits on non-spam email, and the postmaster 
list is a border-line case.

smtpd_client_restrictions = permit_mynetworks, reject_rbl_client 
bl.spamcop.net, reject_rbl_client dnsbl.sorbs.net, reject_rbl_client 
list.dsbl.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client 
dnsbl.njabl.org, reject_rbl_client sbl.spamhaus.org, reject_rbl_client 
relays.ordb.org, reject_rhsbl_client rhsbl.sorbs.net, reject_rhsbl_client 
dsn.rfc-ignorant.org, reject_rhsbl_client postmaster.rfc-ignorant.org

http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

Reply to: