[ILUG] SPAM domain blacklist

[Paul Murray]

ollie at eillo.org wrote:
> Im looking at getting spam under control by using a DNS blacklist.

Strictly speaking this is a bad thing to do, you should only use it to 
weight a spam detection algorithm, but that said, I use them raw so I 
shouldn't really be talking, but blocking stuff at the smtp stage is 
preferable so direct implementation is excusable, just watch blacklisting 
local isp's, might want to whitelist their server ip ranges.

> A browse of the web indicates that there a re different ones and  mileage 
> varies. . .

I use the following list, with a couple of allow overides to keep me from 
blacklisting ISP's,  I know admins with up to 36 lists but the lookup 
overhead -v- current crud getting through doesn't make it worth it.

bl.spamcop.net
dnsbl.ahbl.org
db.wpbl.info
korea.services.net
zen.spamhaus.org
cbl.abuseat.org

> Can anyone recommend one?

Generally takes more than one to get things under control, but if you want 
to cut down on lookup times and work from cached entries, run a localhost 
copy of bind, and hook it to the above authorative hosts for answers, and 
then you'll have one localhost lookup which will cache results from the 
above you'll get faster results and be kinder to the bandwidth of the 
blacklist providers.

Paul.