Sombody can post here more Realtime (SBL) Blacklists ?
Iworx by default use bl.spamcop.net
Sombody have complete or relaible list for add ?
Best regards.
I don’t have much knowledge/experience with this, but I guess I could post this.
Thankyou for the repply but not have relation to my question : )
If sombody have list of servers for add like bl.spamcop.net the default antispam blacklist server, please post here.
Doesn’t spam assassin use a couple of RBLs for it’s realtime spamfiltering?!
[quote=Dj-Grobe;11121]Sombody can post here more Realtime (SBL) Blacklists ?
Iworx by default use bl.spamcop.net
Sombody have complete or relaible list for add ?
Best regards.[/quote]
Spamcop is a little sctrict. But anyway, here’s a list of blacklists; just make sure to check them first, as some are no longer around:
http://www.kloth.net/services/dnsbl.php
well here the list i createde today.
If usefull for sombody !! : )
This fianlly kill spam of your server, just need add on iworx, but turn in very very restrictive servers, but really kill the spam : )
All tested and working : )
bl.spamcop.net
sbl.spamhaus.org
spammers.v6net.org
access.redhawk.org
assholes.madscience.nl
badconf.rhsbl.sorbs.net
bl.csma.biz
bl.deadbeef.com
bl.spamcannibal.org
bl.starloop.com
bl.technovision.dk
blackholes.five-ten-sg.com
blackholes.intersil.net
blackholes.mail-abuse.org
blackholes.sandes.dk
blackholes.uceb.org
blacklist.sci.kun.nl
blacklist.spambag.org
block.dnsbl.sorbs.net
blocked.hilli.dk
blocklist.squawk.com
blocklist2.squawk.com
bogons.dnsiplists.completewhois.com
cart00ney.surriel.com
cbl.abuseat.org
dev.null.dk
dialup.blacklist.jippg.org
dialups.mail-abuse.org
dialups.visi.com
dnsbl-1.uceprotect.net
dnsbl.ahbl.org
dnsbl.antispam.or.id
dnsbl.cyberlogic.net
dnsbl.jammconsulting.com
dnsbl.kempt.net
dnsbl.njabl.org
list.dsbl.org
multihop.dsbl.org
unconfirmed.dsbl.org
dsbl.dnsbl.net.au
duinv.aupads.org
dul.maps.vix.com
dul.orca.bc.ca
dul.ru
dun.dnsrbl.net
fl.chickenboner.biz
flowgoaway.com
forbidden.icm.edu.pl
hijacked.dnsiplists.completewhois.com
hil.habeas.com
http.dnsbl.sorbs.net
http.opm.blitzed.org
images.rbl.msrbl.net
intruders.docs.uu.se
korea.services.net
l1.spews.dnsbl.sorbs.net
l2.spews.dnsbl.sorbs.net
lbl.lagengymnastik.dk
mail-abuse.blacklist.jippg.org
map.spam-rbl.com
misc.dnsbl.sorbs.net
msgid.bl.gweep.ca
combined.rbl.msrbl.net
nomail.rhsbl.sorbs.net
ohps.dnsbl.net.au
okrelays.nthelp.com
omrs.dnsbl.net.au
opm.blitzed.org
orid.dnsbl.net.au
orvedb.aupads.org
osps.dnsbl.net.au
osrs.dnsbl.net.au
owfs.dnsbl.net.au
owps.dnsbl.net.au
pdl.dnsbl.net.au
phishing.rbl.msrbl.net
probes.dnsbl.net.au
proxies.exsilia.net
proxy.bl.gweep.ca
psbl.surriel.com
pss.spambusters.org.ar
rbl-plus.mail-abuse.org
rbl.cluecentral.net
rbl.efnet.org
rbl.jp
rbl.maps.vix.com
rbl.schulte.org
rbl.snark.net
rbl.triumf.ca
rdts.dnsbl.net.au
relays.bl.gweep.ca
relays.bl.kundenserver.de
relays.mail-abuse.org
relays.nether.net
relays.nthelp.com
relays.radparker.com
rhsbl.sorbs.net
ricn.dnsbl.net.au
rmst.dnsbl.net.au
rsbl.aupads.org
satos.rbl.cluecentral.net
sbl-xbl.spamhaus.org
sbl.csma.biz
smtp.dnsbl.sorbs.net
socks.dnsbl.sorbs.net
socks.opm.blitzed.org
sorbs.dnsbl.net.au
spam.dnsbl.sorbs.net
spam.dnsrbl.net
spam.exsilia.net
spam.olsentech.net
spam.wytnij.to
spamguard.leadmon.net
spamsites.dnsbl.net.au
spamsources.dnsbl.info
spamsources.fabel.dk
spews.dnsbl.net.au
t1.dnsbl.net.au
ucepn.dnsbl.net.au
virbl.dnsbl.bit.nl
virus.rbl.msrbl.net
virus.rbl.jp
web.dnsbl.sorbs.net
whois.rfc-ignorant.org
will-spam-for-food.eu.org
wingate.opm.blitzed.org
xbl.spamhaus.org
zombie.dnsbl.sorbs.net
dnsbl-2.uceprotect.net
dnsbl-3.uceprotect.net
dnsbl.sorbs.net
dul.dnsbl.sorbs.net
dynablock.njabl.org
no-more-funn.moensted.dk
What’s your CPU utilization and load average at with those settings?
Load it ok, not changed, and not mail dleayed etc etc, its very transparent, but this its super and absolutly restrictive, any e-mail from IP in the world used for make spam in the last 7 days cant reach your server.
I tested for one day, and kill all the spam, but create troubles, so i make a depuration of this list, based on what i need blocked and what i not need blocked.
Best regards.
Good luck receiving mail when some of those stop responding… Connect process will start and time out! Boom, lost mail. :mad:
Well and I’d like to see the cpu usage when somebody send 5000 mails in one shot !
I think that a maximum of 5 is already a lot, so 100 !!!
Good luck too
Pascal
Honestly, I don’t trust a lot of DNSBLs. I would go for a remote solution that filters mail before it even hits your mail solution. In particular, a solution that is so accurate you can turn off Spam Assassin on your server in addition to removing all your RBLs, such as Postini or Mailfoundry. This can lower your CPU/Memory usage by a lot if you handle a lot of mail.
This is exactly what we have done and it works very well 
Yes work very well, and using all list not create server load…
Under servers with 200 sites i not see any load increase.
First try, and then you cna now if this work or no.
For me its exelente, the amount of spam its incredible low now.
sorry. I was referring to sliqua’s message in terms of moving the ‘raw’ mail out to a dedicated spam/virus filtering box before returning it to the mail server.
Works very well
I tried to enter this in the global blacklist, and received the following error:
? Invalid blacklist e-mail : bl.spamcop.net
? Invalid blacklist e-mail : sbl.spamhaus.org
? Invalid blacklist e-mail : bl.spamcannibal.org
? Invalid blacklist e-mail : blackholes.mail-abuse.org
? Invalid blacklist e-mail : blacklist.spambag.org
? Invalid blacklist e-mail : dialups.mail-abuse.org
? Invalid blacklist e-mail : map.spam-rbl.com
? Invalid blacklist e-mail : rbl-plus.mail-abuse.org
? Invalid blacklist e-mail : relays.mail-abuse.org
? Invalid blacklist e-mail : sbl-xbl.spamhaus.org
? Invalid blacklist e-mail : xbl.spamhaus.org
What did I do wrong?
I use only bl.spamcop.net and sbl-xbl.spamhaus.org - the combination works quite nicely, blocking several million sessions a day on my server.
I have used MailFoundry, and we’ve compared it to the iworx spamassassin installation + 3 RBLs (bl.spamcop.net sbl-xbl.spamhaus.org multi.surbl.org)
Iworx + spamassassin ON + 3 RBLs = more spam stopped than MailFoundry
Pascal
What about the false positives? (mailfoundry claims almost no false positives as it works on spam signatures).
BTW, spamassassin seems to be ON and OFF on catching spam from time to time (between versions). Now, even the latest (3.1.7) doesn’t catch about 30% of spam.
No false positives, at both : spamassassin and mailfoundry.
BTW, spamassassin seems to be ON and OFF on catching spam from time to time (between versions). Now, even the latest (3.1.7) doesn’t catch about 30% of spam.
Well, we use the learn Spam/ham, so we have trained spamassassin, and we have much more than 30%… 90% for us
Pascal
I’ve been very dis-satisfied with the performance of spamassassin on interworx, it lets through more than it catches even though we are constantly training it.
I use a commercial software on my other mail server that is so much better it’s hard to even relate it except by relating one test I made.
My email address for that server gets a lot of spam, I’ve had it for 6 years or so, vendors have gotten it, and who knows how many times it’s been sold. I turned off spam filtering for 1 week. In that week I received on the order of 400 to 500 spam messages per day.
When I re-enabled the commercial software package I went to something on the order of 3-5 un-marked spams per WEEK. Not per day, per WEEK.
False positives? basically none as far as I can tell, we’ve been using the software for more than a year now and I can think of only about 5 cases of having to whitelist things because they were being marked as false positives. All were massive opt-in distribution lists that look like SPAM to any kind of automatic analysis, even though they aren’t.
Contrasted to my interworx machine which only uses spamassassin, in which my relatively non-published email address gets about 20-30 spams per day unmarked and about 10-15 marked