> I've been using RBLDNS for many years. My setup always is > block once ip was listed. However, I just notice that it has Neutral. > What is the difference between DNSBL Failed Score and DNSBL > Neutral Score?
as Fritz wrote, there's plenty of infos on his site page; at any rate, ASSP uses a "weighted" DNSBL approach; this means that if you (e.g.) have something like this zen.spamhaus.org=>1 bl.spamcop.net=>1 safe.dnsbl.sorbs.net=>1 combined.njabl.org=>1 bogons.cymru.com=>1 ix.dnsbl.manitu.net=>1 dnsbl-1.uceprotect.net=>2 dnsbl-2.uceprotect.net=>2 psbl.surriel.com=>2 l2.apews.org=>3 blackholes.five-ten-sg.com=>3 dnsbl-3.uceprotect.net=>3 and assuming your RBLmaxweight is 50; the above will mean that one hit on any list at "level 1" (e.g. spamhaus) will result in a spamscore increment of 50 one hit on any list at "level 2" (e.g. surriel) will result in a spam score increment of 25 (50/2) one hit on any list at "level 3" (e.g. apews) will result in a spam score increment of 16 (50/3 - rounded) so, if for example a given IP gets two hits at level 3 and one hit at level 2 its spamscore will be increased to 57 and the message will be rejected, same thing in case one hit from a list from level 1 will be met; but... let's say you get a level3 and a level2 hit; the message score will be increased of 41 and the message may get through due to "low spam score" If you want a "one hit one block" you'll need to put the DNSBLs which you want to use for blocking at level 1 ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
