On Tue, Feb 03, 2004 at 10:44:03AM +0100, Andy Spiegl wrote:
> Hi,
> 
> I am living in Germany and all the dynamic IPs of the large ISP
> T-Online seem to be listed in NJABL and SORBS as DIALUP ips.  That's
> okay of course, but I don't understand why the default score for that
> is so high:
>  score RCVD_IN_NJABL_DIALUP 0 0.525 0 3.536
> 
> And why only in combination with Bayes (i.e. the last score number)?
> 
> This results in lots of false positives on my system. :-(

We had to lower this rule's score here because it was catching our SMTP
AUTH'd clients' mail with our spam threshold at 6.  Both this rule
and DYNABLOCK were firing on a significant portion of my SMTP AUTH'd
clients.
 
> I am tempted to change it to something like this:
>  score RCVD_IN_NJABL_DIALUP 0 0.525 0 1.0
> but I assume there is a valid reason for 3.536.
> Could some kind soul please try to explain this to me?

The valid reason is probably that you can catch a lot of spam with just
the dial-up RBLs.  I've had several slip through since I lowerred the
scores.

-- 
Scott Lambert                    KC5MLE                       Unix SysAdmin
[EMAIL PROTECTED]      

Reply via email to