RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

2007-07-30 Thread David Barker
This is what I configured but did not find it to be anything out of the
ordinary.

David


#---
---
#http://www.dnswl.org/

#Categories (127.0.X.y):
# 2 - Financial services
# 3 - Newsletters
# 4 - Organisations (both for-profit [ie companies] and non-profit)
# 5 - Service/network providers
# 7 - Travel industry (listed separately since they are known for their high
false-positive rate),
# 8 - governments, administrations and international organisations
# 9 - Media and Tech companies
# 10 - some special cases. 

#Trustworthiness / Score (127.0.x.Y):
# 0 = none - only avoid outright blocking (eg Hotmail, Yahoo mailservers,
-0.1)
# 1 = low - reduce chance of false positives (-1.0)
# 2 = medium - make sure to avoid false positives but allow override for
clear cases (-10.0)
# 3 = high - avoid override (-100.0). 

DNSWL   IP4Rlist.dnswl.org  127.0.0.1
-1  0
DNSWL-PERS  IP4Rlist.dnswl.org  127.0.254.1
-1  0

DNSWL-FIN   IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-FIN-LOW   IP4Rlist.dnswl.org  127.0.2.1   -3
0
#DNSWL-FIN-MID  IP4Rlist.dnswl.org  127.0.2.2   -5
0
DNSWL-FIN-HIGH  IP4Rlist.dnswl.org  127.0.2.3   -10
0

DNSWL-NEWS  IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-NEWS-LOW  IP4Rlist.dnswl.org  127.0.3.1   -3
0
DNSWL-NEWS-MID  IP4Rlist.dnswl.org  127.0.3.2   -5
0
DNSWL-NEWS-HIGH IP4Rlist.dnswl.org  127.0.3.3   -10
0

DNSWL-NPO   IP4Rlist.dnswl.org  127.0.10.1
-1  0
DNSWL-NPO-LOW   IP4Rlist.dnswl.org  127.0.4.1   -3
0
DNSWL-NPO-MID   IP4Rlist.dnswl.org  127.0.4.1   -5
0
DNSWL-NPO-HIGH  IP4Rlist.dnswl.org  127.0.4.1   -10
0

DNSWL-SPIP4Rlist.dnswl.org  127.0.11.1
-1  0
DNSWL-SP-LOWIP4Rlist.dnswl.org  127.0.5.1
-3  0
#DNSWL-SP-MID   IP4Rlist.dnswl.org  127.0.5.2   -5
0
DNSWL-SP-HIGH   IP4Rlist.dnswl.org  127.0.5.3   -10
0

DNSWL-TRAVELIP4Rlist.dnswl.org  127.0.12.2
-1  0
DNSWL-TRAVEL-LOWIP4Rlist.dnswl.org  127.0.7.1
-3  0
DNSWL-TRAVEL-MIDIP4Rlist.dnswl.org  127.0.7.2
-5  0
DNSWL-TRAVEL-HIGH   IP4Rlist.dnswl.org  127.0.7.3
-10 0

DNSWL-GOV   IP4Rlist.dnswl.org  127.0.10.2
-1  0
DNSWL-GOV-LOW   IP4Rlist.dnswl.org  127.0.8.1   -3
0
DNSWL-GOV-MID   IP4Rlist.dnswl.org  127.0.8.2   -5
0
DNSWL-GOV-HIGH  IP4Rlist.dnswl.org  127.0.8.3   -10
0

DNSWL-MEDIA IP4Rlist.dnswl.org  127.0.12.3
-1  0
DNSWL-MEDIA-LOW IP4Rlist.dnswl.org  127.0.9.1   -3
0
DNSWL-MEDIA-MID IP4Rlist.dnswl.org  127.0.9.2   -5
0
DNSWL-MEDIA-HIGHIP4Rlist.dnswl.org  127.0.9.3
-10 0

DNSWL-UNSPECIP4Rlist.dnswl.org  127.0.1.1
-1  0
DNSWL-UNSPEC-LOWIP4Rlist.dnswl.org  127.0.10.1
-3  0
DNSWL-UNSPEC-MIDIP4Rlist.dnswl.org  127.0.10.2
-5  0
DNSWL-UNSPEC-HIGH   IP4Rlist.dnswl.org  127.0.10.3
-10 0

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Saturday, July 28, 2007 11:57 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

I'll give it a try. Here's what I will use/

DNSWL-FINANCIAL-NONEdnsbl   %IP4R%.list.dnswl.org
127.0.2.0   0   0
DNSWL-FINANCIAL-LOW dnsbl   %IP4R%.list.dnswl.org
127.0.2.1   0   0
DNSWL-FINANCIAL-MEDIUM  dnsbl   %IP4R%.list.dnswl.org
127.0.2.2   -10 0
DNSWL-FINANCIAL-HIGHdnsbl   %IP4R%.list.dnswl.org
127.0.2.3   -20 0
DNSWL-NEWSLETTERS-NONE  dnsbl   %IP4R%.list.dnswl.org
127.0.3.0   0   0
DNSWL-NEWSLETTERS-LOW   dnsbl   %IP4R%.list.dnswl.org
127.0.3.1   0   0
DNSWL-NEWSLETTERS-MEDIUMdnsbl   %IP4R%.list.dnswl.org
127.0.3.2   -10 0
DNSWL-NEWSLETTERS-HIGH  dnsbl   %IP4R%.list.dnswl.org
127.0.3.3   -20 0
DNSWL-ORGANIZATIONS-NONEdnsbl   %IP4R%.list.dnswl.org
127.0.4.0   0   0
DNSWL-ORGANIZATIONS-LOW dnsbl   %IP4R%.list.dnswl.org
127.0.4.1   0   0
DNSWL-ORGANIZATIONS-MEDIUM  dnsbl   %IP4R%.list.dnswl.org
127.0.4.2   -10 0
DNSWL-ORGANIZATIONS-HIGHdnsbl   

RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

2007-07-30 Thread Scott Fisher
-David

I think you messed up on all the ones with a 0 in the third octet.

I also chose to run it only on the last header. I wouldn't whitelist/credit
on any information on any previous headers as they could easily be forged.
I did this with the dnsbl test. You could also do it by adding
DUL/DYNA/(there is another one too I think) in the test name. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 7:53 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

This is what I configured but did not find it to be anything out of the
ordinary.

David


#---
---
#http://www.dnswl.org/

#Categories (127.0.X.y):
# 2 - Financial services
# 3 - Newsletters
# 4 - Organisations (both for-profit [ie companies] and non-profit)
# 5 - Service/network providers
# 7 - Travel industry (listed separately since they are known for their high
false-positive rate),
# 8 - governments, administrations and international organisations
# 9 - Media and Tech companies
# 10 - some special cases. 

#Trustworthiness / Score (127.0.x.Y):
# 0 = none - only avoid outright blocking (eg Hotmail, Yahoo mailservers,
-0.1)
# 1 = low - reduce chance of false positives (-1.0)
# 2 = medium - make sure to avoid false positives but allow override for
clear cases (-10.0)
# 3 = high - avoid override (-100.0). 

DNSWL   IP4Rlist.dnswl.org  127.0.0.1
-1  0
DNSWL-PERS  IP4Rlist.dnswl.org  127.0.254.1
-1  0

DNSWL-FIN   IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-FIN-LOW   IP4Rlist.dnswl.org  127.0.2.1   -3
0
#DNSWL-FIN-MID  IP4Rlist.dnswl.org  127.0.2.2   -5
0
DNSWL-FIN-HIGH  IP4Rlist.dnswl.org  127.0.2.3   -10
0

DNSWL-NEWS  IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-NEWS-LOW  IP4Rlist.dnswl.org  127.0.3.1   -3
0
DNSWL-NEWS-MID  IP4Rlist.dnswl.org  127.0.3.2   -5
0
DNSWL-NEWS-HIGH IP4Rlist.dnswl.org  127.0.3.3   -10
0

DNSWL-NPO   IP4Rlist.dnswl.org  127.0.10.1
-1  0
DNSWL-NPO-LOW   IP4Rlist.dnswl.org  127.0.4.1   -3
0
DNSWL-NPO-MID   IP4Rlist.dnswl.org  127.0.4.1   -5
0
DNSWL-NPO-HIGH  IP4Rlist.dnswl.org  127.0.4.1   -10
0

DNSWL-SPIP4Rlist.dnswl.org  127.0.11.1
-1  0
DNSWL-SP-LOWIP4Rlist.dnswl.org  127.0.5.1
-3  0
#DNSWL-SP-MID   IP4Rlist.dnswl.org  127.0.5.2   -5
0
DNSWL-SP-HIGH   IP4Rlist.dnswl.org  127.0.5.3   -10
0

DNSWL-TRAVELIP4Rlist.dnswl.org  127.0.12.2
-1  0
DNSWL-TRAVEL-LOWIP4Rlist.dnswl.org  127.0.7.1
-3  0
DNSWL-TRAVEL-MIDIP4Rlist.dnswl.org  127.0.7.2
-5  0
DNSWL-TRAVEL-HIGH   IP4Rlist.dnswl.org  127.0.7.3
-10 0

DNSWL-GOV   IP4Rlist.dnswl.org  127.0.10.2
-1  0
DNSWL-GOV-LOW   IP4Rlist.dnswl.org  127.0.8.1   -3
0
DNSWL-GOV-MID   IP4Rlist.dnswl.org  127.0.8.2   -5
0
DNSWL-GOV-HIGH  IP4Rlist.dnswl.org  127.0.8.3   -10
0

DNSWL-MEDIA IP4Rlist.dnswl.org  127.0.12.3
-1  0
DNSWL-MEDIA-LOW IP4Rlist.dnswl.org  127.0.9.1   -3
0
DNSWL-MEDIA-MID IP4Rlist.dnswl.org  127.0.9.2   -5
0
DNSWL-MEDIA-HIGHIP4Rlist.dnswl.org  127.0.9.3
-10 0

DNSWL-UNSPECIP4Rlist.dnswl.org  127.0.1.1
-1  0
DNSWL-UNSPEC-LOWIP4Rlist.dnswl.org  127.0.10.1
-3  0
DNSWL-UNSPEC-MIDIP4Rlist.dnswl.org  127.0.10.2
-5  0
DNSWL-UNSPEC-HIGH   IP4Rlist.dnswl.org  127.0.10.3
-10 0

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Saturday, July 28, 2007 11:57 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

I'll give it a try. Here's what I will use/

DNSWL-FINANCIAL-NONEdnsbl   %IP4R%.list.dnswl.org
127.0.2.0   0   0
DNSWL-FINANCIAL-LOW dnsbl   %IP4R%.list.dnswl.org
127.0.2.1   0   0
DNSWL-FINANCIAL-MEDIUM  dnsbl   %IP4R%.list.dnswl.org
127.0.2.2   -10 0
DNSWL-FINANCIAL-HIGHdnsbl   %IP4R%.list.dnswl.org
127.0.2.3   -20 0
DNSWL-NEWSLETTERS-NONE  dnsbl   %IP4R%.list.dnswl.org

RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

2007-07-30 Thread David Barker
Yes looks like I only had 1 with 0 in the 3rd octet, thanks for pointing
this out.

DNSWL   IP4Rlist.dnswl.org  127.0.0.1   -1  0

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, July 30, 2007 10:25 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

-David

I think you messed up on all the ones with a 0 in the third octet.

I also chose to run it only on the last header. I wouldn't whitelist/credit
on any information on any previous headers as they could easily be forged.
I did this with the dnsbl test. You could also do it by adding
DUL/DYNA/(there is another one too I think) in the test name. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, July 30, 2007 7:53 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

This is what I configured but did not find it to be anything out of the
ordinary.

David


#---
---
#http://www.dnswl.org/

#Categories (127.0.X.y):
# 2 - Financial services
# 3 - Newsletters
# 4 - Organisations (both for-profit [ie companies] and non-profit)
# 5 - Service/network providers
# 7 - Travel industry (listed separately since they are known for their high
false-positive rate),
# 8 - governments, administrations and international organisations
# 9 - Media and Tech companies
# 10 - some special cases. 

#Trustworthiness / Score (127.0.x.Y):
# 0 = none - only avoid outright blocking (eg Hotmail, Yahoo mailservers,
-0.1)
# 1 = low - reduce chance of false positives (-1.0)
# 2 = medium - make sure to avoid false positives but allow override for
clear cases (-10.0)
# 3 = high - avoid override (-100.0). 

DNSWL   IP4Rlist.dnswl.org  127.0.0.1
-1  0
DNSWL-PERS  IP4Rlist.dnswl.org  127.0.254.1
-1  0

DNSWL-FIN   IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-FIN-LOW   IP4Rlist.dnswl.org  127.0.2.1   -3
0
#DNSWL-FIN-MID  IP4Rlist.dnswl.org  127.0.2.2   -5
0
DNSWL-FIN-HIGH  IP4Rlist.dnswl.org  127.0.2.3   -10
0

DNSWL-NEWS  IP4Rlist.dnswl.org  127.0.12.1
-1  0
DNSWL-NEWS-LOW  IP4Rlist.dnswl.org  127.0.3.1   -3
0
DNSWL-NEWS-MID  IP4Rlist.dnswl.org  127.0.3.2   -5
0
DNSWL-NEWS-HIGH IP4Rlist.dnswl.org  127.0.3.3   -10
0

DNSWL-NPO   IP4Rlist.dnswl.org  127.0.10.1
-1  0
DNSWL-NPO-LOW   IP4Rlist.dnswl.org  127.0.4.1   -3
0
DNSWL-NPO-MID   IP4Rlist.dnswl.org  127.0.4.1   -5
0
DNSWL-NPO-HIGH  IP4Rlist.dnswl.org  127.0.4.1   -10
0

DNSWL-SPIP4Rlist.dnswl.org  127.0.11.1
-1  0
DNSWL-SP-LOWIP4Rlist.dnswl.org  127.0.5.1
-3  0
#DNSWL-SP-MID   IP4Rlist.dnswl.org  127.0.5.2   -5
0
DNSWL-SP-HIGH   IP4Rlist.dnswl.org  127.0.5.3   -10
0

DNSWL-TRAVELIP4Rlist.dnswl.org  127.0.12.2
-1  0
DNSWL-TRAVEL-LOWIP4Rlist.dnswl.org  127.0.7.1
-3  0
DNSWL-TRAVEL-MIDIP4Rlist.dnswl.org  127.0.7.2
-5  0
DNSWL-TRAVEL-HIGH   IP4Rlist.dnswl.org  127.0.7.3
-10 0

DNSWL-GOV   IP4Rlist.dnswl.org  127.0.10.2
-1  0
DNSWL-GOV-LOW   IP4Rlist.dnswl.org  127.0.8.1   -3
0
DNSWL-GOV-MID   IP4Rlist.dnswl.org  127.0.8.2   -5
0
DNSWL-GOV-HIGH  IP4Rlist.dnswl.org  127.0.8.3   -10
0

DNSWL-MEDIA IP4Rlist.dnswl.org  127.0.12.3
-1  0
DNSWL-MEDIA-LOW IP4Rlist.dnswl.org  127.0.9.1   -3
0
DNSWL-MEDIA-MID IP4Rlist.dnswl.org  127.0.9.2   -5
0
DNSWL-MEDIA-HIGHIP4Rlist.dnswl.org  127.0.9.3
-10 0

DNSWL-UNSPECIP4Rlist.dnswl.org  127.0.1.1
-1  0
DNSWL-UNSPEC-LOWIP4Rlist.dnswl.org  127.0.10.1
-3  0
DNSWL-UNSPEC-MIDIP4Rlist.dnswl.org  127.0.10.2
-5  0
DNSWL-UNSPEC-HIGH   IP4Rlist.dnswl.org  127.0.10.3
-10 0

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Saturday, July 28, 2007 11:57 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

I'll give it a try. Here's what I will use/

DNSWL-FINANCIAL-NONE