rbls in sendmail

Raymond Dijkxhoorn raymond at PROLOCATION.NET
Fri Apr 9 01:07:21 IST 2004


Hi!

> What does checking Received Headers really do for you? (its a good
> question!). Sendmail is checking the last place that the mail came from
> against various RBLs and blocking it on that basis.
>
> We have found that too much checking below that level can result in lots of
> false hits, since a lot of legitimate email comes from places centered
> around the IPs the RBLs block. So our use of the RBLs where they are
> actually has shown some benefit for us.
> If I wanted to block using RBLs further into the mail header I would likely
> go the Procmail route - though aside from blocking some IP ranges
> (currently, as 2nd level SPAM blocks), that has not seemed to make much of
> a difference here since they change so much.

I disagree, many open proxys send out via their ISP mailers, so called
multiple hopping spammers. I see a lot of SA hits on those. Especially
with lists like DSBL.

Bye,
Raymond



More information about the MailScanner mailing list