potential blacklist stats

[hermit921]

I intend to block at the MTA level when I add another blacklist.  But I
want to get an idea of the effects before I start using it.

I thought about extracting all the IP addresses that delivered mail and
running a script to check each of those against various lists, but I hoped
to find an easier way.

hermit921


At 03:48 PM 7/12/2004, Stephen Swaney wrote:
> > -----Original Message-----
> > Subject: potential blacklist stats
> >
> > I put one IP blacklist in place (postfix) and it is blocking about 20% of
> > incoming mail attempts.  A good start.  Now I want to find the next most
> > effective (and well documented, low false positive rate, etc)
> > blacklist.  Is there a way for MailScanner to do a check against several
> > blacklists such as XBL, CBL, SORBS, etc. and report how many connections
> > come from an IP address on each list?  Then pick the best one and block
> > that in postfix.  Repeat cycle as feasible.
>
>
>We recommend blocking at the MTA level - on one RBL,
>
>         sbl.xbl.spamhaus.org (see www.spamhaus.org)
>
>Blocking reduces the load on MailScanner / SpamAssassin much more than
>blacklisting. The email is never accepted for delivery so it never hits
>MailScanner, SpamAssassin or the virus scanner(s).
>
>Stephen Swaney
>President
>Fortress Systems Ltd.
>Steve.Swaney at FSL.com
>
> > This could provide us with some good data to persuade powers that be to
> > allow us to use more blacklists.  What I really want is to show that [make
> > up a number here] 30% of what we tag as spam would have been rejected
> > before it was allowed onto our mail server.
> >
> > hermit921
> >

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html