At 2:36 PM -0800 2/10/04, Global Homes Webmaster wrote: >The amount of spam getting through my defenses decreased dramatically when >I added dul.dnsbl.sorbs.net to my RBL server list. Unfortunately, I started >to get some reports of false positives from my users so I removed it and >the false positives seem to have gone away (at least I haven't gotten any >reports since removing dul.dnsbl.sorbs.net). I couldn't get anyone to send >me any relevant bounce messages or even enough information to find rejected >messages in my logs, though, so I'm still a little skeptical that SORBS was >really to blame.
Interesting. I just got a "positive" report that I tracked down to dul.dnsbl.sorbs.net. I am not sure they received a bounce message either but my SIMS log shows the bounce. Normally I just assume they don't see the bounce or delete it without recognizing it, maybe it hits their junk filter for instance. In this case the sending server is a relay farm at qwest "63.231.195.115 / 32". For now I'm going to disable dul.dnsbl.sorbs.net and see what happens. I don't really mind overagressive RBL lists for my purposes but I need to be confident that the bounce message isn't somehow getting swallowed up. SORBS reports that they were cuaght spamming in July and their removal process is fairly unusual (you have to pay a $50 fine to one of several charities they recommend). ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
