[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: blacklists



Michael Loftis wrote:



--On Monday, December 06, 2004 09:34 +0100 Adrian 'Dagurashibanipal' von Bidder <avbidder@fortytwo.ch> wrote:


Various AOL mailservers, the Debian mailservers, and other servers
sending  out lots of regular mail get listed in spamcop regularly, so my
recommendation (and that of spamcop.net themselves, btw) is not to use
bl.spamcop.net for blacklisting. Use it in spamassassin to score points.


Odd, since we don't see this. And when it does happen to 'big' mail senders it's never AOL for one (they're on the whitelist). And it's totally automatic so if they do end up on it's usually for less than a day.

And how to deal with legitimate email sent via webmail (eg. yahoo) where the IP of the sender is inside a RBL, typicall for dsl or dialup ip-classes?
This is part of the headers from a mail i received:

	Mon, 29 Nov 2004 19:12:38 +0100 (CET)
Received: from web60309.mail.yahoo.com (web60309.mail.yahoo.com [216.109.118.120])
	by -snip- (Postfix) with SMTP id 474D8249E74
	for <snip>; Mon, 29 Nov 2004 19:12:38 +0100 (CET)
Received: (qmail 47653 invoked by uid 60001); 29 Nov 2004 18:12:36 -0000
Message-ID: <20041129181236.47651.qmail@web60309.mail.yahoo.com>
Received: from [217.226.195.183] by web60309.mail.yahoo.com via HTTP; Mon, 29 Nov 2004 19:12:36 CET
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, hits=4.2 tagged_above=0.0 required=4.5 tests=BAYES_50,
	RCVD_IN_DSBL, RCVD_IN_NJABL, RCVD_IN_SORBS,
	RCVD_IN_SORBS_HTTP, RCVD_IN_SORBS_SOCKS

if i would have used rbl checks in postfix instead of spamassim i would never receive that mail, right? the tracked ip is of course 217.226.195.186 and not the yahoo ip 216.109.118.120.
Or i didn't understand? :(



Reply to: