Re: [Exim] Re: Re: Need a bit of help with Exim 4

Pàgina inicial
Delete this message
Reply to this message
Autor: William Thompson
Data:  
A: patrick-d-1057131560.f1756e
CC: exim-users
Assumpte: Re: [Exim] Re: Re: Need a bit of help with Exim 4
> >> I wouldn't use spamcop as a primary choice of DNS blacklists.
> >
> > FYI, I've used spamcop.net for some time now and I've rarely ever seen
> > a false positive.
>
> Well for me it was more the situation that some of the DNSBL get a bit
> *too* aggressive, when you look at their "mission statement" it's more a
> hate statement (SpamCop excluded).


For me, most RBLed sites are caught by list.dsbl.org. Some are from
dnsbl.njabl.org as well. As far as what spamcop catches is low because it's
lower on the chain.

> I was recently using blackholes.easynet.nl but heard that they block whole
> netblocks which have just one spammer in the netblock. Philosophically I
> can't agree with that, and practically I am not going to block mail from an
> innocent company just because some ratbag is spamming from the same
> netblock and the ISP is not moving fast enough to suit some black list
> maintainer with a "manifesto".


I had a thing with management about a host that used verio and was blocked
by spews because they were in the same range as a well known spammer (and
from what I've read, verio is spammer friendly). One IP in a netblock
spamming and block the netblock isn't right. I don't use ANY rbl unless
they'll give information on a specific IP which states why it was added.

> For example we got put on SpamCop because some reseller of our products
> (who had **requested** to go on a closed mailing list) got annoyed with a
> mailout and instead of clicking "Unsubscribe" or calling us on the phone
> (he had the number) and saying "take me off" 'reported' us to SpamCop. Boom
> no recourse, no notification from SpamCop to confirm - we're just
> blacklisted. Trial without jury. That's why I don't use SpamCop.


I can understand. But the way I see it, the spammers are a bigger problem
because they are the reason RBLs exist.

I don't use wirehub or whatever it is now because I couldn't get any
information on why an IP was listed. They always direct you to the same
static page for every blocked ip.

> We traced it back through logs and gave the reseller a piece of our mind,
> but that does not help getting yourself (quickly) off a blacklist like
> SpamCop.
>
> For a corporate environment I prefer lists which are _factual_ - you either
> are a *verifiable* open proxy or not, an open relay or not, dial up user or
> not etc.


I don't really want to block solely on the fact you're a dialup user. I
have a mailserver on a dialup (static ip) and I don't want it blocked just
because someone has a hair up their ass about dialup users. However, if
there's so much spam seen from a user port (like some ISPs that have cable
or dsl connections), I will consider blocking those 'dialup' ranges.