[spamdyke-users] RBLs

2014-03-06 Thread BC
One of the RBLs I'm using is bl.mailspike.net. Today they started listing an IP which 100 other blacklists don't have listed. Then it delisted it, then it put it back, then delisted it again - all over the course of a couple of hours. Now blacklisted again. What other free, RBL services are

Re: [spamdyke-users] RBLs

2014-03-07 Thread Sam Clippinger
Honestly, the RBL that seems to do the most good these days for me is the Barracuda Central list (b.barracudacentral.org). I also use Spamhaus, Spamcop and Spam Eating Monkey, but together those three don't catch even a tenth of what Barracuda catches. -- Sam Clippinger On Mar 6, 2014, at

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Thank you so much, Sam! On 3/7/2014 2:02 PM, Sam Clippinger wrote: Honestly, the RBL that seems to do the most good these days for me is the Barracuda Central list (b.barracudacentral.org ). I also use Spamhaus, Spamcop and Spam Eating Monkey, but together thos

Re: [spamdyke-users] RBLs

2014-03-07 Thread Gary Gendel
I tend to agree, however, it does depend on the ordering. I found that there are a lot of duplications on the list so the first one tends to get the most hits. My list consists of b.barracudacentral.org zen.spamhause.org I've tried others, but the others I've added only add a very small add

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Do I need to sign up to use b.barracudacentral.org? I've been looking around their website... On 3/7/2014 2:11 PM, Gary Gendel wrote: I tend to agree, however, it does depend on the ordering. I found that there are a lot of duplications on the list so the first one tends to get the most hi

Re: [spamdyke-users] RBLs

2014-03-07 Thread Sam Clippinger
No, it's publicly available. Just add "dns-blacklist-entry=b.barracudacentral.org" to your spamdyke config file. -- Sam Clippinger On Mar 7, 2014, at 3:23 PM, BC wrote: > > Do I need to sign up to use b.barracudacentral.org? I've been looking around > their website... > > On 3/7/2014 2

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Okay, thanks. It told me to register, which I did... then it disappeared into a black hole (probably preparing to spam me into the next century :). The "about" info said if you don't register the IPs from which you'll be making inqueries, they might add that IP to the blacklist. Gulp. I'

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
Okay, it all worked. Interesting that nowhere did they tell me to use the URL you listed below, butin 15 minutes I'll try it. Sounds like you andGary recommend putting it as the first RBL in the spamdyke.conf file, right? On 3/7/2014 2:32 PM, Sam Clippinger wrote: No, it's publicly availa

Re: [spamdyke-users] RBLs

2014-03-07 Thread BC
On 3/7/2014 3:25 PM, Sam Clippinger wrote: Actually, the order of the options doesn't matter. spamdyke queries all of the RBLs simultaneously and uses the first positive response it gets from the DNS server. Okay, thanks for that bit. ___ spamdyke

Re: [spamdyke-users] RBLs

2014-03-07 Thread Sam Clippinger
Actually, the order of the options doesn't matter. spamdyke queries all of the RBLs simultaneously and uses the first positive response it gets from the DNS server. -- Sam Clippinger On Mar 7, 2014, at 3:42 PM, BC wrote: > > Okay, it all worked. Interesting that nowhere did they tell m

Re: [spamdyke-users] RBLs

2014-03-07 Thread Dossy Shiobara
My list: dns-blacklist-entry=b.barracudacentral.org dns-blacklist-entry=bl.spamcop.net dns-blacklist-entry=cbl.abuseat.org dns-blacklist-entry=opm.tornevall.org dns-blacklist-entry=torexit.dan.me.uk dns-blacklist-entry=sbl.spamhaus.org #dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=dnsb

Re: [spamdyke-users] RBLs

2014-03-08 Thread Gary Gendel
Almost all of my uncaught spam comes from two domains: colocrossing.com hostnoc.net The latter usually has the ip address in the rdns so you can trap it that way, but I just block them entirely. With these two out of the way, and barracudacentral and zen.spamhaus, my users see almost no spam.

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
On Mar 8, 2014, at 6:52 AM, Gary Gendel wrote: > Almost all of my uncaught spam comes from two domains: > > colocrossing.com > hostnoc.net Color me unsurprised. I even think I know which spammer you're referring to. HostNoc/BurstNet has long had a reputation of being a spam-friendly hosting

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amount of spam you see. Angus, To what does the "TL;DR" refer? How are you "null-routing" all those IPs? With spamdyke somehow? Bucky PS - this is

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
> My list consists of > > b.barracudacentral.org > zen.spamhause.org Barracuda is not a relevant Blacklist. The most serious in (in this Order) are: zen.spamhaus.org bl.spamcop.net bl.mailspike.net ___ spamdyke-users mailing list spamdyke-users@

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
Again - do not use barracudacentral.org ! Instead make this spamdyke.conf Settings: dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net dns-blacklist-entry=bl.mailspike.net rhs-blacklist-entry=dbl.spamhaus.org reject-empty-rdns _

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:18 AM, Lutz Petersen wrote: Instead make this spamdyke.conf Settings: dns-blacklist-entry=bl.mailspike.net This is the one causing all sorts of mischief lately - blacklisting and unblacklisting legit and non-spamming IPs rapidly. What is wrong with barracuda? You said it is

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
> What is wrong with barracuda? You said it isn't "relevant". What > does that mean? The barracuda list is not maintained as the other lists. Beware - ist needs _huge_ manpower to produce good lists. Spamhaus and Spamcop have worldwide offices working 24/7. Barracuda not; the only usage of

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
BC wrote: > On 3/8/2014 7:03 AM, Angus McIntyre wrote: >> TL;DR: if you null-route every IP that HostNoc owns, it will make a >> dramatic difference to the amount of spam you see. > > To what does the "TL;DR" refer? "TL;DR" is Internet slang for 'Too Long; Didn't Read'. As it's used now, it's a w

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
Funny, based on my own empirical evidence, Barracuda Central's DNSBL yields the best results. As with anything on the Internet, be skeptical and collect your own data. Доверяй, но проверяй (doveryai, no proveryai). *** 9373 92.80% DENIED_RBL_MATCH --- Breakdown --- 6956 8

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
And, anyone who wants to do just this, here's a handy list of hostnoc snowshoe netblocks documented: http://www.spamhaus.org/sbl/listings/hostnoc.net On 3/8/14 9:58 AM, Angus McIntyre wrote: > Basically, my "TL;DR" was saying "If you refuse to accept any > communication whatsoever from this enti

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
Okay, thanks for the excellent explanation and I know how to "null route" an IP at the firewall. On 3/8/2014 7:58 AM, Angus McIntyre wrote: BC wrote: On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amo

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
> Funny, based on my own empirical evidence, Barracuda Central's DNSBL > yields the best results. 99% of this Hits are false positives: > 6956 81.35% b.barracudacentral.org You are talking simply nonsense ! ___ spamdyke-users mailing list spamdyk

Re: [spamdyke-users] RBLs

2014-03-09 Thread Lutz Petersen
> Again - do not use barracudacentral.org ! > Instead make this spamdyke.conf Settings: > dns-blacklist-entry=zen.spamhaus.org > dns-blacklist-entry=bl.spamcop.net > dns-blacklist-entry=bl.mailspike.net > rhs-blacklist-entry=dbl.spamhaus.org A good result of the configurations would look like t

Re: [spamdyke-users] RBLs

2014-03-09 Thread Dossy Shiobara
Again, as I said: this is from my own personal experience, but after having started using since 2 Dec 2013, it's consistently been giving good results, and I have yet to encounter a single false positive. I'm not saying anyone else should use the DNSBL, but I will say that anyone who blindly liste

Re: [spamdyke-users] RBLs

2014-03-09 Thread Gary Gendel
I tend to agree. The lists I've chosen have been the result of many years of tuning. Actually shlink.org wasn't even in my radar and isn't on many of the multi-rbl test sites so I need to test it. I'd be curious to hear about Sam's blacklist setup. Gary On 03/09/2014 09:24 AM, Dossy Shiobara

Re: [spamdyke-users] RBLs

2014-03-09 Thread Sam Clippinger
I only use b.barracudacentral.org, zen.spamhaus.org and fresh.spameatingmonkey.com, plus my private list that's generated by the hunter_seeker script. My logs from just today show Barracuda is responsible for 90% of the RBL rejections. Spamhaus generated 10% and Spam Eating Monkey is 0%. My

Re: [spamdyke-users] RBLs

2014-03-09 Thread BC
On 3/9/2014 1:21 PM, Sam Clippinger wrote: plus my private list that's generated by the hunter_seeker script. My private list has blocked about 4.5 times more connections today than the DNS RBLs. Sam - Is a functionality that could be built into spamdyke with a .conf configuration option?

Re: [spamdyke-users] RBLs

2014-03-09 Thread mohaa
, but there are some. But i cant block their mailservers. I will give barracudecentral a try. Regards, Arne Original-Nachricht Betreff: Re: [spamdyke-users] RBLs Von: Sam Clippinger An: spamdyke users Datum: Sonntag, 9. März 2014 20:21:03 > I only use b.barracudacentral.