Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: domain of hege@hege.li designates
 84.34.147.73 as permitted sender)
Date: Mon, 2 Jun 2008 15:14:08 +0300
From: Henrik K <hege@hege.li>
To: users@spamassassin.apache.org
Subject: Re: DNS ISP Host List Available
Message-ID: <20080602121408.GA28304@posti.hege.li>
Reply-To: users@spamassassin.apache.org
References: <4840257F.6070804@perkel.com>
 <00ce01c8c28c$9657b700$0605a8c0@tank> <20080602112821.GA27279@fantomas.sk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20080602112821.GA27279@fantomas.sk>
User-Agent: Mutt/1.5.18 (2008-05-17)

On Mon, Jun 02, 2008 at 01:28:21PM +0200, Matus UHLAR - fantomas wrote:
> On 30.05.08 15:37, Larry Ludwig wrote:
> > IMHO regex setups are even more reliable we do this with our postfix setup.
> >  
> > For example:
> > /^c-.+-.+-.+-.+\..+\..+\.comcast\.net$/                         REJECT
> > dynamic ip address use isp for outgoing email - access.regex
> > 
> > I think is more reliable than just by name or especially by IP since IP
> > allocations do change.
> 
> looking at 20_dynrdns.cf we see that there are MANY forms of marking
> dynamically allocated space. The score of RDNS_DYNAMIC dropped in the past
> (there were FP's reportet iirc) and now it's mostly used in conjuction with
> other rules.
> 
> If your regexp's are THAT efficient, share them with us please.

20_dynrdns is lame and no one is really updating it. It doesn't even strip
domains, resulting in hosts like smtp.dynamic1.com to match. It's pretty
cumbersome to use the meta headers too. It needs some revamping to be more
useful.

That's why there are plugins like Botnet and my BadRelay[1] (which handles
domains properly). My tool is pretty outdated too, I haven't updated it
since I started blocking and greylisting suspicious hosts directly at MTA.
Not much passes through.

For a really big regexp list, have a look at [2].

[1] http://sa.hege.li/
[2] http://www.linuxmagic.com/opensource/anti_spam/dynamic_regex/