[Gross] which dnsbls?

[Jesse Thompson]

Justin Piszcz wrote:
> 
> 
> On Fri, 12 Dec 2008, Jesse Thompson wrote:
> 
>> Which dnsbls are people using with gross?
>>
>> we're using:
>> bl.spamcop.net
>> cbl.abuseat.org
>> dnsbl.sorbs.net
>> dnsbl-1.uceprotect.net
>> dnsbl-2.uceprotect.net
>> dnsbl-3.uceprotect.net
>> dnsbl.njabl.org
>> and the sophos blocker
>>
>> However, I'm thinking of disabling njabl, since we've had three cases 
>> of semi-legitimate mass mailers being listed on njabl.  Since we also 
>> do connection limiting, the greylisting was causing these large 
>> mailers to reconnect enough to run into our connection limiting.  Does 
>> anyone have any additional thoughts on njabl?
> 
> Hi Jesse,
> 
> -> bhnc.njabl.org
> 
> This one is a bit safer, I have also seen false-positives with the one 
> you mention.

Cool.  I'll try it.


> In addition, dnsbl-1.uceprotect.net has also blocked IBM once, but you just
> need to set the tolerances higher if using dnsbl-X.uce*.

Yeah, I knew that was an aggressive one.  But, we haven't had any 
complaints about it yet.


> cbl.abuseat.org also false positives occasionally
> 
> bl.spamcop.net & dnsbl.sorbs.net very accurate and result in few false 
> positives (in my experience)
> 
> As far as the sophos blocker, I have not tried/used it.

You have to be running Sophos PureMessage (or maybe a related product) 
to use it.

Jesse

-- 
   Jesse Thompson
   Division of Information Technology, University of Wisconsin-Madison
   Email/IM: jesse.thompson at doit.wisc.edu
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.utu.fi/pipermail/gross/attachments/20081212/cb822bfd/attachment.bin>