Additional great BlackList to use

Questions and answers about how to do stuff
Post Reply
nicola.piazzi
Posts: 388
Joined: 23 Apr 2015 09:45

Additional great BlackList to use

Post by nicola.piazzi »

Here some results of some 'unconventional' rbl that worked great in my system,
I tested spam/ham in the most true mode possible, adding the score that each rule give to consider a spam in count
For example, if a rule that have a score of 5 i count spam emails that have this rule and a score of 4 (default) + 5 (rule score) = 9

Here in order :

[McAfee] (Absolutely the best, and I think that very few people know it)
Total Hit 10.779
Spam 10.766
Ham 13
Accuracy Very High 99,9%
Volume Very High 5,0%
header C_RBL_MCAFEE eval:check_rbl('mcafee-lastexternal', 'cidr.bl.mcafee.com.')
describe C_RBL_MCAFEE Listed in cidr.bl.mcafee.com
tflags C_RBL_MCAFEE net
score C_RBL_MCAFEE 7.00

[imp.ch]
Total Hit 330
Spam 329
Ham 1
Accuracy Very High 99,7%
Volume Very Low 0,2%
header C_RBL_IMP_SPAMLIST eval:check_rbl('spamrbl-lastexternal', 'spamrbl.imp.ch.', '127.0.0.5')
describe C_RBL_IMP_SPAMLIST Listed in spamrbl.imp.ch
tflags C_RBL_IMP_SPAMLIST net
score C_RBL_IMP_SPAMLIST 3.00

[psky]
Total Hit 13.027
Spam 12.939
Ham 88
Accuracy Very High 99,3%
Volume Very High 6,0%
header __C_RBL_PSKY eval:check_rbl('bad-psky-me-lastexternal','bad.psky.me.')
describe __C_RBL_PSKY Check bad.psky.me
tflags __C_RBL_PSKY net
reuse __C_RBL_PSKY
header C_RBL_PSKY_BAD eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.3')
describe C_RBL_PSKY_BAD Listed in psky.me - Bad
score C_RBL_PSKY_BAD 2.80
tflags C_RBL_PSKY_BAD net
reuse C_RBL_PSKY_BAD
header C_RBL_PSKY_POOR eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.2')
describe C_RBL_PSKY_POOR Listed in psky.me - Poor
score C_RBL_PSKY_POOR 0.80
tflags C_RBL_PSKY_POOR net
reuse C_RBL_PSKY_POOR


[Gbudb]
Total Hit 4.946
Spam 4.891
Ham 55
Accuracy High 98,9%
Volume High 2,3%
header C_RBL_GBUDB eval:check_rbl('truncate-lastexternal', 'truncate.gbudb.net.')
describe C_RBL_GBUDB Listed in truncate.gbudb.net
tflags C_RBL_GBUDB net
score C_RBL_GBUDB 5.00

[Inps.de]
Total Hit 7.963
Spam 7.774
Ham 189
Accuracy High 97,6%
Volume High 3,7%
header C_RBL_DNSBL_INPS_DE eval:check_rbl('inps-de-lastexternal','dnsbl.inps.de.')
describe C_RBL_DNSBL_INPS_DE Received via a relay in inps.de DNSBL
tflags C_RBL_DNSBL_INPS_DE net
score C_RBL_DNSBL_INPS_DE 3.00

[Blocklist.de]
Total Hit 330
Spam 321
Ham 9
Accuracy High 97,3%
Volume Very Low 0,2%
header C_RBL_BLOCKLIST_DE eval:check_rbl('bl.blocklist.de-lastexternal','bl.blocklist.de.')
describe C_RBL_BLOCKLIST_DE Listed in bl.blocklist.de
tflags C_RBL_BLOCKLIST_DE net
score C_RBL_BLOCKLIST_DE 1.00

[Wpbl]
Total Hit 7.404
Spam 7.092
Ham 312
Accuracy High 95,8%
Volume Very High 3,4%
header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50


[NiX Spam]
Total Hit 6.375
Spam 6.056
Ham 319
Accuracy Medium 95,0%
Volume High 2,9%
header C_RBL_NIX eval:check_rbl('ix.dnsbl.manitu.net-lastexternal','ix.dnsbl.manitu.net.')
describe C_RBL_NIX Listed in NiX Spam
tflags C_RBL_NIX net
score C_RBL_NIX 2.00


header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50
Last edited by nicola.piazzi on 11 Nov 2016 11:32, edited 1 time in total.
ramtech
Posts: 56
Joined: 20 Sep 2013 01:31

Re: Additional great BlackList to use

Post by ramtech »

nicola.piazzi wrote:Here some results of some 'unconventional' rbl that worked great in my system,
I tested spam/ham in the most true mode possible, adding the score that each rule give to consider a spam in count
For example, if a rule that have a score of 5 i count spam emails that have this rule and a score of 4 (default) + 5 (rule score) = 9
Thanks for this Nicola. Some very interesting results. Can you describe the steps you took in implementing these RBLs into your setup please.
nicola.piazzi
Posts: 388
Joined: 23 Apr 2015 09:45

Re: Additional great BlackList to use

Post by nicola.piazzi »

Steps ? simply copy lines that i put here in local.cf or create a file of the name that you want with .cf extension

PS: i removed MCAFEE because is a copy of SPAMHAUS
ramtech
Posts: 56
Joined: 20 Sep 2013 01:31

Re: Additional great BlackList to use

Post by ramtech »

Okay. Don't know you could do lookups from there. Cool. But aren't some of those included in the postfix rbl lookups prior to SA?
nicola.piazzi
Posts: 388
Joined: 23 Apr 2015 09:45

Re: Additional great BlackList to use

Post by nicola.piazzi »

my Postfix doesnt do any rbl check, peraphs initially is configured to check zen.spamhaus but i removed it because postfix doesnt give a score but block immediately

I suggest my 2 plugins if your system is used both for sending and receiving
It recognize incoming email that are from known people and learn day by day
After 1 month now i have a hit of 80% of incoming ham
http://saplugin.16mb.com/
ovizii
Posts: 463
Joined: 11 May 2016 08:08

Re: Additional great BlackList to use

Post by ovizii »

nicola.piazzi wrote:PS: i removed MCAFEE because is a copy of SPAMHAUS
Thanks for that info, I didn't know.
ovizii
Posts: 463
Joined: 11 May 2016 08:08

Re: Additional great BlackList to use

Post by ovizii »

@nicola

your last two entries: [NiX Spam] + [Wpbl] are exactly the same, can you please correct them?
nicola.piazzi
Posts: 388
Joined: 23 Apr 2015 09:45

Re: Additional great BlackList to use

Post by nicola.piazzi »

corrected
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Additional great BlackList to use

Post by pdwalker »

Thanks Nicola,

I've implemented this and I'll see what it does for me.
viper407
Posts: 25
Joined: 09 Mar 2022 09:55

Re: Additional great BlackList to use

Post by viper407 »

Hi Nicola

I tried to download the file but the page cannot be displayed.

Will this block google/outlook.com as i implement two rbl's today and had to remove them as Microsoft and Google IP's are blacklisted.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Additional great BlackList to use

Post by pdwalker »

viper407 wrote: 24 Mar 2022 16:13 Hi Nicola

I tried to download the file but the page cannot be displayed.
viewtopic.php?f=14&t=4652&p=17446#p17446
Post Reply