Re: [exim] FW: dnslists : Mysql Lookup

Top Page
Delete this message
Reply to this message
Author: Alan J. Flavell
Date:  
To: 'exim'
Subject: Re: [exim] FW: dnslists : Mysql Lookup
On Thu, 27 Jan 2005, Bill Hacker wrote:

> BTW - not overly impressed with SpamCop ... falsing a lot?


I wouldn't say so: it does pretty much what it says on the tin. It
would be inadvisable to reject on that alone. They pretty-much make
that clear on their documentation.

We have two areas where spamcop features.

After the tests of dnsRBLs on which we reject outright (which does not
include spamcop), we have some tests which feature two dnsRBL
conditions. One condition is a bunch of RBLs which register technical
issues such as probable-dialup, open mail relay, open web/mail relay,
open proxy, trojan infestation and so on. The other condition is some
RBLs which register, basically, "spam has been sighted" (currently we
do that with spamcop and with spam.sorbs, but this can change
according to experience). If *both* conditions trigger, then it's an
outright reject. If only one triggers, then it's points in the
spamassassin bucket (e.g 4), and we hope for SA to catch them on some
other criteria and hit the rejection threshold.

So, spamcop features in a rejection rule, but only if one of the
technical blacklists also triggers; and it features in the dnsRBLs
which toss some points into the spamassassin bucket.

hth