[ILUG] SPAM domain blacklist

ollie at eillo.org ollie at eillo.org
Sun Jul 19 21:21:05 IST 2009


Thanks everyone - very helpfull.

How can I verify the effectiveness of the blocklist?

regarding spamasassin I have the spam score set at the default 7 after  
trying the higher numbers first.

What do you consider a reasonable figure?

- Ollie


Quoting Paul Murray <paulinuxmurray at gmail.com>:

> ollie at eillo.org wrote:
>> Im looking at getting spam under control by using a DNS blacklist.
>
> Strictly speaking this is a bad thing to do, you should only use it to
> weight a spam detection algorithm, but that said, I use them raw so I
> shouldn't really be talking, but blocking stuff at the smtp stage is
> preferable so direct implementation is excusable, just watch
> blacklisting local isp's, might want to whitelist their server ip
> ranges.
>
>> A browse of the web indicates that there a re different ones and    
>> mileage varies. . .
>
> I use the following list, with a couple of allow overides to keep me
> from blacklisting ISP's,  I know admins with up to 36 lists but the
> lookup overhead -v- current crud getting through doesn't make it worth
> it.
>
> bl.spamcop.net
> dnsbl.ahbl.org
> db.wpbl.info
> korea.services.net
> zen.spamhaus.org
> cbl.abuseat.org
>
>> Can anyone recommend one?
>
> Generally takes more than one to get things under control, but if you
> want to cut down on lookup times and work from cached entries, run a
> localhost copy of bind, and hook it to the above authorative hosts for
> answers, and then you'll have one localhost lookup which will cache
> results from the above you'll get faster results and be kinder to the
> bandwidth of the blacklist providers.
>
> Paul.





More information about the ILUG mailing list