efa-project.org

Here some results of some 'unconventional' rbl that worked great in my system,
I tested spam/ham in the most true mode possible, adding the score that each rule give to consider a spam in count
For example, if a rule that have a score of 5 i count spam emails that have this rule and a score of 4 (default) + 5 (rule score) = 9

Here in order :

[McAfee] (Absolutely the best, and I think that very few people know it)
Total Hit 10.779
Spam 10.766
Ham 13
Accuracy Very High 99,9%
Volume Very High 5,0%
header C_RBL_MCAFEE eval:check_rbl('mcafee-lastexternal', 'cidr.bl.mcafee.com.')
describe C_RBL_MCAFEE Listed in cidr.bl.mcafee.com
tflags C_RBL_MCAFEE net
score C_RBL_MCAFEE 7.00

[imp.ch]
Total Hit 330
Spam 329
Ham 1
Accuracy Very High 99,7%
Volume Very Low 0,2%
header C_RBL_IMP_SPAMLIST eval:check_rbl('spamrbl-lastexternal', 'spamrbl.imp.ch.', '127.0.0.5')
describe C_RBL_IMP_SPAMLIST Listed in spamrbl.imp.ch
tflags C_RBL_IMP_SPAMLIST net
score C_RBL_IMP_SPAMLIST 3.00

[psky]
Total Hit 13.027
Spam 12.939
Ham 88
Accuracy Very High 99,3%
Volume Very High 6,0%
header __C_RBL_PSKY eval:check_rbl('bad-psky-me-lastexternal','bad.psky.me.')
describe __C_RBL_PSKY Check bad.psky.me
tflags __C_RBL_PSKY net
reuse __C_RBL_PSKY
header C_RBL_PSKY_BAD eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.3')
describe C_RBL_PSKY_BAD Listed in psky.me - Bad
score C_RBL_PSKY_BAD 2.80
tflags C_RBL_PSKY_BAD net
reuse C_RBL_PSKY_BAD
header C_RBL_PSKY_POOR eval:check_rbl_sub('bad-psky-me-lastexternal', '127.0.0.2')
describe C_RBL_PSKY_POOR Listed in psky.me - Poor
score C_RBL_PSKY_POOR 0.80
tflags C_RBL_PSKY_POOR net
reuse C_RBL_PSKY_POOR


[Gbudb]
Total Hit 4.946
Spam 4.891
Ham 55
Accuracy High 98,9%
Volume High 2,3%
header C_RBL_GBUDB eval:check_rbl('truncate-lastexternal', 'truncate.gbudb.net.')
describe C_RBL_GBUDB Listed in truncate.gbudb.net
tflags C_RBL_GBUDB net
score C_RBL_GBUDB 5.00

[Inps.de]
Total Hit 7.963
Spam 7.774
Ham 189
Accuracy High 97,6%
Volume High 3,7%
header C_RBL_DNSBL_INPS_DE eval:check_rbl('inps-de-lastexternal','dnsbl.inps.de.')
describe C_RBL_DNSBL_INPS_DE Received via a relay in inps.de DNSBL
tflags C_RBL_DNSBL_INPS_DE net
score C_RBL_DNSBL_INPS_DE 3.00

[Blocklist.de]
Total Hit 330
Spam 321
Ham 9
Accuracy High 97,3%
Volume Very Low 0,2%
header C_RBL_BLOCKLIST_DE eval:check_rbl('bl.blocklist.de-lastexternal','bl.blocklist.de.')
describe C_RBL_BLOCKLIST_DE Listed in bl.blocklist.de
tflags C_RBL_BLOCKLIST_DE net
score C_RBL_BLOCKLIST_DE 1.00

[Wpbl]
Total Hit 7.404
Spam 7.092
Ham 312
Accuracy High 95,8%
Volume Very High 3,4%
header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50


[NiX Spam]
Total Hit 6.375
Spam 6.056
Ham 319
Accuracy Medium 95,0%
Volume High 2,9%
header C_RBL_NIX eval:check_rbl('ix.dnsbl.manitu.net-lastexternal','ix.dnsbl.manitu.net.')
describe C_RBL_NIX Listed in NiX Spam
tflags C_RBL_NIX net
score C_RBL_NIX 2.00


header C_RBL_WPBL eval:check_rbl('wpbl-lastexternal', 'db.wpbl.info.')
describe C_RBL_WPBL Listed in db.wpbl.info
tflags C_RBL_WPBL net
score C_RBL_WPBL 2.50

nicola.piazzi wrote:Here some results of some 'unconventional' rbl that worked great in my system,
I tested spam/ham in the most true mode possible, adding the score that each rule give to consider a spam in count
For example, if a rule that have a score of 5 i count spam emails that have this rule and a score of 4 (default) + 5 (rule score) = 9

Thanks for this Nicola. Some very interesting results. Can you describe the steps you took in implementing these RBLs into your setup please.

Steps ? simply copy lines that i put here in local.cf or create a file of the name that you want with .cf extension

PS: i removed MCAFEE because is a copy of SPAMHAUS

Okay. Don't know you could do lookups from there. Cool. But aren't some of those included in the postfix rbl lookups prior to SA?

my Postfix doesnt do any rbl check, peraphs initially is configured to check zen.spamhaus but i removed it because postfix doesnt give a score but block immediately

I suggest my 2 plugins if your system is used both for sending and receiving
It recognize incoming email that are from known people and learn day by day
After 1 month now i have a hit of 80% of incoming ham
http://saplugin.16mb.com/

nicola.piazzi wrote:PS: i removed MCAFEE because is a copy of SPAMHAUS

Thanks for that info, I didn't know.

@nicola

your last two entries: [NiX Spam] + [Wpbl] are exactly the same, can you please correct them?

corrected

Thanks Nicola,

I've implemented this and I'll see what it does for me.

Hi Nicola

I tried to download the file but the page cannot be displayed.

Will this block google/outlook.com as i implement two rbl's today and had to remove them as Microsoft and Google IP's are blacklisted.

viper407 wrote: 24 Mar 2022 16:13 Hi Nicola

I tried to download the file but the page cannot be displayed.

viewtopic.php?f=14&t=4652&p=17446#p17446