[OT] Re: ORDB.org is shutting down

[Emmanuel Lesouef <el...@zubrowka.org>]

Thanks Ian, I didn't know rbl-plus.mail-abuse.ja.net. I therefore added
rbl-plus.mail-abuse.org as I'm outside of Janet.

This gives me for my postfix based installlation :

reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client rbl-plus.mail-abuse.org,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client dnsbl.sorbs.net

Thanks a lot.

Ian Eiloart a écrit :
> 
> 
> --On 19 December 2006 18:01:31 +0100 Emmanuel Lesouef
> <el...@zubrowka.org> wrote:
> 
>> I was using it but with postfix checking sender restrictions.
>>
>> I think it is not used in SA but by mail servers.
>>
>> Anyone got a replacement ?
>>
> 
> We've been using this list of RBLs:
>    sbl-xbl.spamhaus.org
>    list.dsbl.org
>    rbl-plus.mail-abuse.ja.net
>    relays.ordb.org
> 
> In that order, and get just a few emails a day that get as far as the
> last check, with tens of thousands rejected by the earlier tests.
> 


-- 
Emmanuel Lesouef

Re: [OT] Re: ORDB.org is shutting down

[Matthias Leisi <ma...@leisi.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Nigel Frankcom wrote:
> On Thu, 21 Dec 2006 11:16:43 +0100, Emmanuel Lesouef
> <el...@zubrowka.org> wrote:
>>
>> reject_rbl_client sbl-xbl.spamhaus.org,
>> reject_rbl_client list.dsbl.org,
>> reject_rbl_client rbl-plus.mail-abuse.org,
>> reject_rbl_client cbl.abuseat.org,
>> reject_rbl_client dnsbl.sorbs.net
>
> I thought sbl-xbl used cbl as well? Is using them twice a waste of
> resource?

Yes and no. XBL has some delay until updates are propagated from CBL, so
querying XBL first and then CBL gives you two advantages:

* You profit from the high reliability and low response times of
Spamhaus' DNS setup

* After SBL-XBL filtered out the bulk, CBL can kick in to "catch the
rest", ie those not yet propagated from CBL to XBL.

I use such a setup on my production system where we have an SBL+XBL feed
- -- this incurs another delay (CBL -> XBL -> local rsync), so adding the
CBL improves the detection rate slightly.

- -- Matthias

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFFimS4xbHw2nyi/okRAiTPAKDOpNJ2muPuUnAFGatHJVVOTrjpQgCfdLox
q5TNsxrmn3yLUCnowM1ZwtM=
=KOaZ
-----END PGP SIGNATURE-----

Re: [OT] Re: ORDB.org is shutting down

[Nigel Frankcom <ni...@blue-canoe.net>]

On Thu, 21 Dec 2006 11:16:43 +0100, Emmanuel Lesouef
<el...@zubrowka.org> wrote:

>Thanks Ian, I didn't know rbl-plus.mail-abuse.ja.net. I therefore added
>rbl-plus.mail-abuse.org as I'm outside of Janet.
>
>This gives me for my postfix based installlation :
>
>reject_rbl_client sbl-xbl.spamhaus.org,
>reject_rbl_client list.dsbl.org,
>reject_rbl_client rbl-plus.mail-abuse.org,
>reject_rbl_client cbl.abuseat.org,
>reject_rbl_client dnsbl.sorbs.net
>
>Thanks a lot.
>
>Ian Eiloart a écrit :
>> 
>> 
>> --On 19 December 2006 18:01:31 +0100 Emmanuel Lesouef
>> <el...@zubrowka.org> wrote:
>> 
>>> I was using it but with postfix checking sender restrictions.
>>>
>>> I think it is not used in SA but by mail servers.
>>>
>>> Anyone got a replacement ?
>>>
>> 
>> We've been using this list of RBLs:
>>    sbl-xbl.spamhaus.org
>>    list.dsbl.org
>>    rbl-plus.mail-abuse.ja.net
>>    relays.ordb.org
>> 
>> In that order, and get just a few emails a day that get as far as the
>> last check, with tens of thousands rejected by the earlier tests.
>> 

I thought sbl-xbl used cbl as well? Is using them twice a waste of
resource?

Nigel