At 7:55 PM -0400 7/25/2003, Bill Cole wrote:At 8:37 AM -0700 7/25/03, Warren Michelsen imposed structure on a stream of electrons, yielding:I read recently, on another list, that relays.osirusoft.com is a composite list that includes SPEWS.
I recall readying elsewhere that SPEWS is too aggressive and (I think) I recall too that someone else said that relays.osirusoft.com does not include SPEWS.
What's the truth of the matter?
relays.osirusoft.com is a composite list. The FAQ says:
[ BEGIN QUOTE ]
What are all these zones?
* Relays.OsiruSoft.com contains all zones, except for outputs and blocktest. Effectively, it�s the master list containing the minimum casualties subzones.
* Inputs.relays.OsiruSoft.com contains only insecure mail servers.
* Dialups.relays.OsiruSoft.com contains only sources of direct-to-mx spam which are obviously in dynamic IP pools.
* Spamsites.relays.OsiruSoft.com contains only sites from spamsites.org.
* Spamhaus.relays.OsiruSoft.com contains only sites from spamhaus.org.
* Spews.relays.OsiruSoft.com contains only sites from spews.org.
Nothing in the FAQ indicates that any particular result is specifically for SPEWS. It lists 127.0.0.4 as "Confirmed Spam Sources". Does that mean SPEWS and ONLY SPEWS?
No.
And in fact that is not an accurate description of what returns a 127.0.0.4. That is returned for SPEWS (which is far more than spam sources if you are thinking of 'spam sources' as meaning specific IP addresses from which spam has come) and for other addresses that Joe Jared of osirusoft has added himself manually, which has at times included such things as the personal link of someone who was working for a mailing house with sloppy practices and tried mailing him about a listing and all of the UUNet's 65.240.0.0 - 65.253.255.255 block.
If so, it's easy enough to leave 127.0.0.4 out of my blacklist, but if that would render my other RBL entries impotent, then I need to leave 127.0.0.4 in and specifically query: Inputs.relays.OsiruSoft.com Dialups.relays.OsiruSoft.com Spamsites.relays.OsiruSoft.com Spamhaus.relays.OsiruSoft.com spamsources.relays.osirusoft.com
rather than relays.OsiruSoft.com. Is that right?
Yes, and I'd recommend the latter approach, but only leave in the 'spamsources' zone if you don't mind capricious listings of addresses that never send spam but might well send legitimate mail.
-- Bill Cole [EMAIL PROTECTED]
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
