You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Nicola Piazzi <Ni...@gruppocomet.it> on 2016/11/09 16:53:49 UTC
Additional great BlackList to use
Here some results of some 'unconventional' rbl that worked great in my system,
I tested spam/ham in the most true mode possible, adding the score that each rule give to consider a spam in count
For example, if a rule that have a score of 5 i count spam emails that have this rule and a score of 4 (default) + 5 (rule score) = 9
Here in order :
[McAfee] (Absolutely the best, and I think that very few people know it)
Total Hit 10.779
Spam 10.766
Ham 13
Accuracy Very High 99,9%
Volume Very High 5,0%
header C_RBL_MCAFEE eval:check_rbl('mcafee-lastexternal', 'cidr.bl.mcafee.com.')
describe C_RBL_MCAFEE Listed in cidr.bl.mcafee.com
tflags C_RBL_MCAFEE net
score C_RBL_MCAFEE 7.00
[imp.ch]
Total Hit 330
Spam 329
Ham 1
Accuracy Very High 99,7%
Volume Very Low 0,2%
header C_RBL_IMP_SPAMLIST eval:check_rbl('spamrbl-lastexternal', 'spamrbl.imp.ch.', '127.0.0.5')
describe C_RBL_IMP_SPAMLIST Listed in spamrbl.imp.ch
tflags C_RBL_IMP_SPAMLIST net
score C_RBL_IMP_SPAMLIST 3.00
[psky]
Total Hit 13.027
Spam 12.939
Ham 88
Accuracy Very High 99,3%
Volume Very High 6,0%
header __C_RBL_PSKY eval:check_rbl('bad-psky-me-lastexternal','bad.psky.me.')
describe __C_RBL_PSKY Check bad.psky.me
tflags __C_RBL_PSKY net
reuse __C_RBL_PSKY
header C_RBL_PSKY_BAD eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.3')
describe C_RBL_PSKY_BAD Listed in psky.me - Bad
score C_RBL_PSKY_BAD 2.80
tflags C_RBL_PSKY_BAD net
reuse C_RBL_PSKY_BAD
header C_RBL_PSKY_POOR eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.2')
describe C_RBL_PSKY_POOR Listed in psky.me - Poor
score C_RBL_PSKY_POOR 0.80
tflags C_RBL_PSKY_POOR net
reuse C_RBL_PSKY_POOR
[Gbudb]
Total Hit 4.946
Spam 4.891
Ham 55
Accuracy High 98,9%
Volume High 2,3%
header C_RBL_GBUDB eval:check_rbl('truncate-lastexternal', 'truncate.gbudb.net.')
describe C_RBL_GBUDB Listed in truncate.gbudb.net
tflags C_RBL_GBUDB net
score C_RBL_GBUDB 5.00
[Inps.de]
Total Hit 7.963
Spam 7.774
Ham 189
Accuracy High 97,6%
Volume High 3,7%
header C_RBL_DNSBL_INPS_DE eval:check_rbl('inps-de-lastexternal','dnsbl.inps.de.')
describe C_RBL_DNSBL_INPS_DE Received via a relay in inps.de DNSBL
tflags C_RBL_DNSBL_INPS_DE net
score C_RBL_DNSBL_INPS_DE 3.00
[Blocklist.de]
Total Hit 330
Spam 321
Ham 9
Accuracy High 97,3%
Volume Very Low 0,2%
header C_RBL_BLOCKLIST_DE eval:check_rbl('bl.blocklist.de-lastexternal','bl.blocklist.de.')
describe C_RBL_BLOCKLIST_DE Listed in bl.blocklist.de
tflags C_RBL_BLOCKLIST_DE net
score C_RBL_BLOCKLIST_DE 1.00
[Wpbl]
Total Hit 7.404
Spam 7.092
Ham 312
Accuracy High 95,8%
Volume Very High 3,4%
header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50
[NiX Spam]
Total Hit 6.375
Spam 6.056
Ham 319
Accuracy Medium 95,0%
Volume High 2,9%
header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50
Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna - Italia
Tel. +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.gruppocomet.it<http://www.gruppocomet.it/>
[Descrizione: gc]
Re: Additional great BlackList to use
Posted by "Christoffer G. Thomsen" <li...@cgt.name>.
I'm pretty sure McAfee's DNSBL is just a mirror of Spamhaus Zen, which
of course is highly effective. I'm a bit wary of psky. Delisting is
"coming soon", and it's not clear who is behind it.
I am using the NiX DNSBL as well as their ixhash service and they both
work well for me. I am also using all.s5h.net, which seems very reliable
and frequently catches spam senders that no one else does. I have not
had any false positives with it on my single-user mail server.
Christoffer G. Thomsen
On 2016-11-09 17:53, Nicola Piazzi wrote:
> Here some results of some 'unconventional' rbl that worked great in my
> system,
>
> I tested spam/ham in the most true mode possible, adding the score that
> each rule give to consider a spam in count
>
> For example, if a rule that have a score of 5 i count spam emails that
> have this rule and a score of 4 (default) + 5 (rule score) = 9
>
>
>
> Here in order :
>
>
>
> [McAfee] (Absolutely the best, and I think that very few people know it)
>
> Total Hit 10.779
>
> Spam 10.766
>
> Ham 13
>
> Accuracy Very High 99,9%
>
> Volume Very High 5,0%
>
> header C_RBL_MCAFEE eval:check_rbl('mcafee-lastexternal',
> 'cidr.bl.mcafee.com.')
>
> describe C_RBL_MCAFEE Listed in cidr.bl.mcafee.com
>
> tflags C_RBL_MCAFEE net
>
> score C_RBL_MCAFEE 7.00
>
>
>
> [imp.ch]
>
> Total Hit 330
>
> Spam 329
>
> Ham 1
>
> Accuracy Very High 99,7%
>
> Volume Very Low 0,2%
>
> header C_RBL_IMP_SPAMLIST eval:check_rbl('spamrbl-lastexternal',
> 'spamrbl.imp.ch.', '127.0.0.5')
>
> describe C_RBL_IMP_SPAMLIST Listed in spamrbl.imp.ch
>
> tflags C_RBL_IMP_SPAMLIST net
>
> score C_RBL_IMP_SPAMLIST 3.00
>
>
>
> [psky]
>
> Total Hit 13.027
>
> Spam 12.939
>
> Ham 88
>
> Accuracy Very High 99,3%
>
> Volume Very High 6,0%
>
> header __C_RBL_PSKY
> eval:check_rbl('bad-psky-me-lastexternal','bad.psky.me.')
>
> describe __C_RBL_PSKY Check bad.psky.me
>
> tflags __C_RBL_PSKY net
>
> reuse __C_RBL_PSKY
>
> header C_RBL_PSKY_BAD
> eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.3')
>
> describe C_RBL_PSKY_BAD Listed in psky.me - Bad
>
> score C_RBL_PSKY_BAD 2.80
>
> tflags C_RBL_PSKY_BAD net
>
> reuse C_RBL_PSKY_BAD
>
> header C_RBL_PSKY_POOR
> eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.2')
>
> describe C_RBL_PSKY_POOR Listed in psky.me - Poor
>
> score C_RBL_PSKY_POOR 0.80
>
> tflags C_RBL_PSKY_POOR net
>
> reuse C_RBL_PSKY_POOR
>
>
>
>
>
> [Gbudb]
>
> Total Hit 4.946
>
> Spam 4.891
>
> Ham 55
>
> Accuracy High 98,9%
>
> Volume High 2,3%
>
> header C_RBL_GBUDB eval:check_rbl('truncate-lastexternal',
> 'truncate.gbudb.net.')
>
> describe C_RBL_GBUDB Listed in truncate.gbudb.net
>
> tflags C_RBL_GBUDB net
>
> score C_RBL_GBUDB 5.00
>
>
>
> [Inps.de]
>
> Total Hit 7.963
>
> Spam 7.774
>
> Ham 189
>
> Accuracy High 97,6%
>
> Volume High 3,7%
>
> header C_RBL_DNSBL_INPS_DE
> eval:check_rbl('inps-de-lastexternal','dnsbl.inps.de.')
>
> describe C_RBL_DNSBL_INPS_DE Received via a relay in inps.de DNSBL
>
> tflags C_RBL_DNSBL_INPS_DE net
>
> score C_RBL_DNSBL_INPS_DE 3.00
>
>
>
> [Blocklist.de]
>
> Total Hit 330
>
> Spam 321
>
> Ham 9
>
> Accuracy High 97,3%
>
> Volume Very Low 0,2%
>
> header C_RBL_BLOCKLIST_DE
> eval:check_rbl('bl.blocklist.de-lastexternal','bl.blocklist.de.')
>
> describe C_RBL_BLOCKLIST_DE Listed in bl.blocklist.de
>
> tflags C_RBL_BLOCKLIST_DE net
>
> score C_RBL_BLOCKLIST_DE 1.00
>
>
>
> [Wpbl]
>
> Total Hit 7.404
>
> Spam 7.092
>
> Ham 312
>
> Accuracy High 95,8%
>
> Volume Very High 3,4%
>
> header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal',
> 'db.wpbl.info.')
>
> describe C_RBL_WPBL Listed in db.wpbl.info
>
> tflags C_RBL_WPBL net
>
> score C_RBL_WPBL 2.50
>
>
>
>
>
> [NiX Spam]
>
> Total Hit 6.375
>
> Spam 6.056
>
> Ham 319
>
> Accuracy Medium 95,0%
>
> Volume High 2,9%
>
> header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal',
> 'db.wpbl.info.')
>
> describe C_RBL_WPBL Listed in db.wpbl.info
>
> tflags C_RBL_WPBL net
>
> score C_RBL_WPBL 2.50
>
>
>
>
>
> Nicola Piazzi
> CED - Sistemi
> COMET s.p.a.
> Via Michelino, 105 - 40127 Bologna Italia
> Tel. +39 051.6079.293
> Cell. +39 328.21.73.470
> Web: www.gruppocomet.it <http://www.gruppocomet.it/>
> Descrizione: gc
>
>
>