spamassassin-users January 2011 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: spamhaus dbl considered safe for mta blo

Re: spamhaus dbl considered safe for mta blocking?

From: Michael Scheidell <michael.scheidell_at_nospam>
Date: Thu Jan 27 2011 - 14:12:37 GMT
To: <users@spamassassin.apache.org>

On 1/26/11 11:58 PM, Sahil Tandon wrote:
>> reject_rhsbl_sender dbl.spamhaus.org=127.0.1.2,
> Sound advice to advocate good practices, but in more recent version of
> Postfix, this should not be required.
eh?

reject_rhsbl_sender dbl.spamhaus.org can return (potentially) one of
several 127.* values.
'1.2' for spam, and the others are reserved for phishing, etc.

what does cleaning up postfix code have to do about FP's?
its not a FP if it returns 127.0.2.5, it just means something different
than 127.0.1.2, and if you block on any 127* return, then you are
blocking on more than just spam.

-- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300 >*| *SECNAP Network Security Corporation * Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________