Milter-greylist

Tomasz Baranowski wrote:
> 
> 
> What DNSRBL settings do you recommend ? (What servers are most trustable).
> 
> Regards,
> Blizbor

The most reliable dnsrbl I've seen is zen.spamhaus.org ( 
http://www.spamhaus.org/zen/index.lasso ).  Very few apparent false 
positives (I've checked this against over 220,000 emails).  It's good 
enough to be used to block at the MTA level.  zen.spamhaus.org includes 
cbl.abuseat.org, which is also good enough to use at MTA level.

But, for greylisting, it doesn't matter that much if there are a few 
"bad" entries, the only effect is for emails to be delayed by 15 minutes 
(if you set short greylist periods).

Others I'm happy to greylist with are:

dul.dnsbl.sorbs.net - Dynamic IP Address ranges (NOT a Dial Up list!)

bl.spamcop.net

psbl.surriel.com

combined.njabl.org (127.0.0.3)

Country-specific greylisting by using the lists from countries.nerd.dk 
might also be worthwhile.  99.99% (or more) of the emails we receive 
which originate in China are spam, for example.

Cheers,

Phil