OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: A few good RBL's

From: Harvey Smith (harveybuskers.org)
Date: Tue Jan 09 2007 - 12:47:42 CST


On Tue, Jan 09, 2007 at 05:17:03PM +0100, mouss wrote:
> Udo Rader wrote:
> >On Mon, 2007-01-08 at 15:46 -0700, Warner, Steve wrote:
> >
> >>Here at the university we are a small department with about 85 users on
> >>exchange behind a unix postfix machine. I want to start using some
> >>RBL's. I have noticed mention of some recently on this list. I have seen
> >>the zen.spamhaus.org RBL spoken here on the list with relatively
> >>favorable comments. What are some other perhaps good free (the boss
> >>likes free) or perhaps low cost RBL's. We have trend micro systems
> >>pc-cillen on the micro*&%$ boxes. I called them and they appear to want
> >>about $2.25 per user for the RBL+ product, does anybody have good or bad
> >>comments on this pay service? I know I will need to research the
> >>policies of RBL's to see if they fit our shop.
> >>
> >
> >we've not used it so far, but obviously it is not free (it would be for
> >your 85 users, but that's certainly not much :-).
> >
> >from the www.spamhaus.org/zen homepage:
> >
> >-------CUT-------
> >Zen Usage
> >Use of the Spamhaus DNSBLs via DNS queries to our public DNSBL mirrors
> >is free for low-traffic mail servers serving less than 100 users. Use of
> >the Spamhaus DNSBLs by commercial users, including corporate networks,
> >ISPs and ESPs, requires a subscription to Spamhaus's Data Feed service.
> >-------CUT-------
> >
> >Pricing starts at 300 USD for <= 100 users.
> >
> >
>
> the issue is if you do a lot of queries, you should get their flow, and
> pay. otherwise, use it directly for free.

Yes I agree because also on their site they say
"""
 The first stage is to install the Spamhaus blocklists SBL and XBL on
 your incoming mail relay(s). These will identify and reject more than
 half of a normal mail relay's incoming mail traffic (in our experience
 approx 63% combined: SBL 12%, XBL 51%).
""" -- www.spamhaus.org/effective_filtering.html

On my server SBL+XBL only blocked 0.6% in the last 2 days, ie. not even
1% and way less then 63%! I can only assume that greylisting and all the
other checks + my own blocklists which all come before are catching stuff
that would also be caught later by Spamhaus and that I am also sending
them an order of magnitude less queries than I would if I didn't place
them at then end of the list after all the other checks.

--
Harvey