Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> CEPROTECT3 just lumps ISPs into the list even though an address has never sent spam.

But this is by design[0]

> This blacklist has been created for HARDLINERS. It can, and probably will cause collateral damage to innocent users when used to block email.

And it makes for a perfectly usable blocklist. If you use postfix, the postscreen_dnsbl_threshold and postscreen_dnsbl_sites parameters let you create a simple scoring system:

  postscreen_dnsbl_threshold      = 10
  postscreen_dnsbl_sites          =
    zen.spamhaus.org*5,
    bl.spameatingmonkey.net*5,
    dnsbl.sorbs.net*4,
    bl.spamcop.net*4,
    dnsbl-3.uceprotect.net*3
I made up the numbers, because you will need to monitor your system for a while to see if they make sense, but the principle holds. Also make sure that the dnsbl you are using are working for you.

But it isn't really a problem with uceprotect, it's about how DNSBLs are used.

[0] https://www.uceprotect.net/en/index.php?m=3&s=5 [1] http://www.postfix.org/postconf.5.html#postscreen_dnsbl_site...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: