Re: Usage mistake with dnswl.org

["Bernd H. Steiner" <mail@xxxxxxxxxxxxx>]

Am 19.12.2022 um 21:10 schrieb Greg Troxel:

> You said "suspect" but do you have any evidence?

And "negative lookup-scores in spam-filters" can also be "unspammy" as 
e.g. spamassassin scores negative in sense of "good" or HAM

> As I understand it, DNSWL lists IP addresses, not domains, but it only
> lists addresses associated with validated domains. From the query
> viewpoint, though, you just look up an address.

yes, queries are ip-based.

See dnswl.org doc:

"The query must always go to the zone “list.dnswl.org” in standard DNSBL 
format, ie with a reversed dotted quad IP address. To query whether the 
IP address “1.2.3.4” is listed, the query would thus be

4.3.2.1.list.dnswl.org"

(no domain query at all)

> I do know that you can't associate an IP address with a domain, if those
> IP addresses are already associated with some other domain. 

correct. would also cause problems with PTR, wouldn't it?

> It seems that you can associate multiple domains with a single dnswl id,

Correct too.

regards
bernd