Thanks for the clarification.
Dirk
Rob Skedgell schrieb:
On Saturday 13 Aug 2005 12:29, Dirk Bonengel wrote:
FYI:
rfc-ignorant.org has .de listed in whois.rfc-ignorant.com.
http://www.rfc-ignorant.org/tools/detail.php?domain=de&submitted=1120996396&table=whois
In a standard 3.0.x install, DNS_FROM_RFC_WHOIS gives a score of 0.492
(net) or 0.296 (net+bayes).
This shouldn't cause problems as RFCI whois returns 127.0.0.7 for entire
TLD based domains, and 127.0.0.5 for others and SA (at least 3.0.4)
only tests for 127.0.0.5. See the listing policy at
<http://www.rfc-ignorant.org/policy-whois.php>.
$ grep DNS_FROM_RFC_WHOIS /usr/share/spamassassin/*
/usr/share/spamassassin/20_dnsbl_tests.cf:header DNS_FROM_RFC_WHOIS
eval:check_rbl_sub('rfci_envfrom', '127.0.0.5')
/usr/share/spamassassin/20_dnsbl_tests.cf:describe DNS_FROM_RFC_WHOIS
Envelope sender in whois.rfc-ignorant.org
/usr/share/spamassassin/20_dnsbl_tests.cf:tflags DNS_FROM_RFC_WHOIS
net
/usr/share/spamassassin/30_text_de.cf:lang de describe
DNS_FROM_RFC_WHOIS Absender in whois-Liste von www.rfc-ignorant.org
/usr/share/spamassassin/50_scores.cf:score DNS_FROM_RFC_WHOIS 0 0.492 0
0.296
e.g.:
$ host de.whois.rfc-ignorant.org
de.whois.rfc-ignorant.org has address 127.0.0.7
$ host wot-2.com.whois.rfc-ignorant.org
wot-2.com.whois.rfc-ignorant.org has address 127.0.0.5
