Koozali.org: home of the SME Server

What's everyone using for RBL lists

Offline edb

  • *
  • 548
  • +0/-0
What's everyone using for RBL lists
« on: August 31, 2006, 08:02:40 PM »
I'm using these but are there any others?

RBL Entry
   
abuse.rfc-ignorant.org  
bogusmx.rfc-ignorant.org  
dnsbl.njabl.org  
dsn.rfc-ignorant.org  
list.dsbl.org
postmaster.rfc-ignorant.org  
relays.ordb.org
sbl-xbl.spamhaus.org  
sbl.spamhaus.org  
whois.rfc-ignorant.org
......

frond

Re: What's everyone using for RBL lists
« Reply #1 on: September 01, 2006, 05:14:58 AM »
edb

> sbl-xbl.spamhaus.org  
> sbl.spamhaus.org  

That is a duplication, remove the sbl.spamhaus.org
The sbl-xbl.spamhaus.org is both the sbl.spamhaus.org  and the xbl.spamhaus.org  combined.
The 4 defaults in sme 7 are a good safe allround  choice unless you have other specific requirements.

Offline albatroz

  • *****
  • 159
  • +0/-0
What's everyone using for RBL lists
« Reply #2 on: September 04, 2006, 11:31:06 AM »
What about its performance?
I used to use RBL in a SME 6.0 server (width Swerts Knudsen contrib)
and as soon as I enabled RBLs the load on the server went to sky!

Offline raem

  • *
  • 3,972
  • +4/-0
What's everyone using for RBL lists
« Reply #3 on: September 05, 2006, 05:14:25 PM »
albatroz

> I used to use RBL in a SME 6.0....as soon as I enabled RBLs the load on the server went to sky

You probably had too many RBL's enabled. If you sent & received a lot of emails then you also had a lot of RBL lookups, which slowed your server down. sme6 did lookups against the local IP for outgoing mail which wasn't really necessary.

sme7 only does RBL checks on incoming mail, and only has 4 RBL's in the default configuration, so performance is reasonable.
RBL is not enabled by deafult so you will need to run the required commands.
...

icpix

What's everyone using for RBL lists
« Reply #4 on: September 05, 2006, 05:50:30 PM »
albatroz----
All depends on your situation (amount of incoming rubbish,
your box's horsepower, link bandwidth etc).

I'm not too fussed how many nanoseconds even minutes it
takes for an email to be delivered (either way) as anything
that 'works' too quickly doesn't give the RBLs time to get
with it and do their things for you. Many's the time I used
to get UCE or a junk email and later, on checking the RBL
database, THEN find it listed whereas when I originally got
the damn thing it hadn't yet been listed.

Obviously if your horsepower isn't up to your situation then
you'll have to prune your lookups' loading by shortening the
RBL string in use. FWIW I made up a helpful pair of files to
more easily install and remove the local rules.

[sh install.sh] (watch the linewrap here and while editing it,
drop the \ and keep the /sbin/ stuff on one line, the actual
RBL addresses are concatenated with no spaces)
Code: [Select]
#!/bin/sh

clear

echo "Starting to install RBL rules..."
/sbin/e-smith/config setprop smtpfront-qmail RBLList \
bl.spamcop.net:bl:spamcannibal.org:dnsbl.ahbl.org:whois.rfc-ignorant.org:psbl.surriel.com:cbl.abuseat.org\
:korea.services.netcombined.njabl.org:sbl.spamhaus.org:xbl.spamhaus.org:dialup.rbl.kropka.net:dnsbl.sorbs.net\
:virbl.dnsbl.bit.nl:dnsbl-3.uceprotect.net:dnsbl.tqmcube.com

echo "   expanding the template"
/sbin/e-smith/expand-template /var/service/smtpfront-qmail/runenv

echo "   smtpfront-qmail"
svc -t /service/smtpfront-qmail

echo "   restarting httpd gracefully"
/etc/rc.d/init.d/httpd-e-smith graceful

echo "...finished installing RBL rules."


[sh remove.sh]
Code: [Select]
#!/bin/sh

clear

echo "Starting to remove existing RBL rules..."
/sbin/e-smith/config delprop smtpfront-qmail RBLList

echo "   expanding the template"
/sbin/e-smith/expand-template /var/service/smtpfront-qmail/runenv

echo "   terminating the smtpfront-qmail service"
svc -t /service/smtpfront-qmail

echo "   restarting httpd gracefully"
/etc/rc.d/init.d/httpd-e-smith graceful

echo "...finished removing the existing RBL rules."


YMMV


Ray----
sme6 did lookups against the local IP for
outgoing mail which wasn't really necessary

Which causes me the collateral damage of not being able to
properly respond to those daft 'standard' email addresses of
info, webmaster, accounts, sales etc all of which I've got
stymied locally;~/ Everytime I need to respond to any of the
above for real I have to temporarily lower the drawbridge
(disable o/g checking or the blocking of the relevant email
addresses). Another good point for me to bear in mind whilst
I continue to have to pluck up courage or otherwise prevaricate
the move from my trusty but ancient SME6 box to the snazzy
new box which is currently testing SME7 on the intranet;~)
----best wishes, Robert