This is a request for folks to please test the MailPolice fraud list and jp.surbl.org:
MailPolice Fraud list with SpamCopURI:
uri MP_URI_RBL eval:check_spamcop_uri_rbl('fraud.rhs.mailpolice.com','127.0.0.2') describe MP_URI_RBL URI's domain appears in MailPolice fraud list tflags MP_URI_RBL net score MP_URI_RBL 3.0
And for SA 3.0 with the URIDNSBL plug-in:
urirhsbl URIBL_MP fraud.rhs.mailpolice.com. A header URIBL_MP eval:check_uridnsbl('URIBL_MP') describe URIBL_MP URI's domain appears in MailPolice fraud list tflags URIBL_MP net score URIBL_MP 3.0
(Note that the above is a separate, external list, so it can't be used like multi.)
JP SA 2.63 and 2.64 rule and score using SpamCopURI 0.22 or later:
uri JP_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+64') describe JP_URI_RBL URI's domain appears in JP at http://www.surbl.org/lists.html tflags JP_URI_RBL net score JP_URI_RBL 4.0
JP SA 3.0 rule and score using URIBL's urirhssub:
urirhssub URIBL_JP_SURBL multi.surbl.org. A 64 header URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') describe URIBL_JP_SURBL Contains a URL listed in JP at http://www.surbl.org/lists.html tflags URIBL_JP_SURBL net score URIBL_JP_SURBL 4.0
In particular we'd like to hear about any false positives on either list. If the MailPolice fraud data looks good, we'll add it to PH, but we need your help in testing it.
You can test these on hand selected test corpora or live mail, but please try not to melt the MailPolice name servers. ;-)
Please give these a try and let us know what you find. Note that you'll probably want to remove the MailPolice fraud list after testing as a separate list if we add it to PH.
Jeff C. -- "If it appears in hams, then don't list it."