spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matus UHLAR - fantomas <uh...@fantomas.sk>
Subject Re: DNS ISP Host List Available
Date Mon, 02 Jun 2008 13:29:44 GMT
> > On 30.05.08 15:37, Larry Ludwig wrote:
> > > IMHO regex setups are even more reliable we do this with our postfix setup.
> > >  
> > > For example:
> > > /^c-.+-.+-.+-.+\..+\..+\.comcast\.net$/                         REJECT
> > > dynamic ip address use isp for outgoing email - access.regex
> > > 
> > > I think is more reliable than just by name or especially by IP since IP
> > > allocations do change.

> On Mon, Jun 02, 2008 at 01:28:21PM +0200, Matus UHLAR - fantomas wrote:
> > looking at 20_dynrdns.cf we see that there are MANY forms of marking
> > dynamically allocated space. The score of RDNS_DYNAMIC dropped in the past
> > (there were FP's reportet iirc) and now it's mostly used in conjuction with
> > other rules.
> > 
> > If your regexp's are THAT efficient, share them with us please.

On 02.06.08 15:14, Henrik K wrote:
> 20_dynrdns is lame and no one is really updating it. It doesn't even strip
> domains, resulting in hosts like smtp.dynamic1.com to match. It's pretty
> cumbersome to use the meta headers too. It needs some revamping to be more
> useful.

Is there a bugreport for this? Or do youfind it better to whine and not try
to make it better?

> That's why there are plugins like Botnet and my BadRelay[1] (which handles
> domains properly). My tool is pretty outdated too, I haven't updated it
> since I started blocking and greylisting suspicious hosts directly at MTA.
> Not much passes through.

BotNet was afaik reported to have FP's for ISPs. That's why I do not use it.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.

Mime
View raw message