You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Pedro David Marco <pe...@yahoo.com> on 2016/09/03 06:45:33 UTC
Local mode with some URI checks. Possible??
Hi!
I am using "Local tests only" mode of SA to prevent any network checks, but there is one URIBL i would like to use (as an exception).. is it possible to do this???
I have added this rule lo local.cf:
urirhssub URIBL_BLACK multi.uribl.com. A 2
body URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK')
describe URIBL_BLACK URL listed in URIBL blacklist uribl.com
score URIBL_BLACK 3
but unfortunately it is not working... what am i doing wrong? it works if i call SA without Local tests mode.
Thanks!
PeterD.
Re: Local mode with some URI checks. Possible??
Posted by RW <rw...@googlemail.com>.
On Sun, 4 Sep 2016 12:49:47 +0200
Axb wrote:
> And often forgotten:
> dns_query_restriction deny
>
> for example:
> dns_query_restriction deny sorbs.net
I've not tried it, but it's based on the best match, so you could
presumably make it deny by default like this:
dns_query_restriction allow sorbs.net
dns_query_restriction deny com net org
Re: Local mode with some URI checks. Possible??
Posted by Axb <ax...@gmail.com>.
And often forgotten:
dns_query_restriction deny
for example:
dns_query_restriction deny sorbs.net
On 09/04/2016 11:24 AM, lists@rhsoft.net wrote:
>
>
> Am 04.09.2016 um 11:18 schrieb Pedro David Marco:
>> i have several reasons to disable all networks checks but some:
>> 1.- Some checks are done by my own SMTP proxy
>
> since you should anyways have a local caching resolver it don't matter
> to double them and when a message slips through rbl scroing on smtpd
> it's a good thing to add points in the contentfilter for the listed ones
>
>> 3.- Many RBLs have restrictions for commercial use, and as i want to do
>> fair play i prefer to avoid risks..
>
> skip_rbl_checks 1
> skip_uribl_checks 0
>
> or just disable the ones in question
>
> meta __RCVD_IN_SORBS 0
> meta __RCVD_IN_ZEN 0
> meta __RCVD_IN_DNSWL 0
>
>> ------------------------------------------------------------------------
>> *From:* Matus UHLAR - fantomas <uh...@fantomas.sk>
>> *To:* users@spamassassin.apache.org
>> *Sent:* Saturday, September 3, 2016 1:57 PM
>> *Subject:* Re: Local mode with some URI checks. Possible??
>>
>> On 03.09.16 09:32, Pedro David Marco wrote:
>>> Thans Axb, I already did it, but i could not found any reasonable way
>> to disable all networks checks but one...(not to go one by one, i mean)
>>
>> there's also no reasonable way to disable "all but one" without going
>> one by
>> one.
>>
>> do you have real reason to skip all network tests?
>> most of them are very useful to detect spam...
Re: Local mode with some URI checks. Possible??
Posted by "lists@rhsoft.net" <li...@rhsoft.net>.
Am 04.09.2016 um 11:18 schrieb Pedro David Marco:
> i have several reasons to disable all networks checks but some:
> 1.- Some checks are done by my own SMTP proxy
since you should anyways have a local caching resolver it don't matter
to double them and when a message slips through rbl scroing on smtpd
it's a good thing to add points in the contentfilter for the listed ones
> 3.- Many RBLs have restrictions for commercial use, and as i want to do
> fair play i prefer to avoid risks..
skip_rbl_checks 1
skip_uribl_checks 0
or just disable the ones in question
meta __RCVD_IN_SORBS 0
meta __RCVD_IN_ZEN 0
meta __RCVD_IN_DNSWL 0
> ------------------------------------------------------------------------
> *From:* Matus UHLAR - fantomas <uh...@fantomas.sk>
> *To:* users@spamassassin.apache.org
> *Sent:* Saturday, September 3, 2016 1:57 PM
> *Subject:* Re: Local mode with some URI checks. Possible??
>
> On 03.09.16 09:32, Pedro David Marco wrote:
>>Thans Axb, I already did it, but i could not found any reasonable way
> to disable all networks checks but one...(not to go one by one, i mean)
>
> there's also no reasonable way to disable "all but one" without going one by
> one.
>
> do you have real reason to skip all network tests?
> most of them are very useful to detect spam...
Re: Local mode with some URI checks. Possible??
Posted by Pedro David Marco <pe...@yahoo.com>.
hi!
i have several reasons to disable all networks checks but some:1.- Some checks are done by my own SMTP proxy3.- Many RBLs have restrictions for commercial use, and as i want to do fair play i prefer to avoid risks..
Thanks...
From: Matus UHLAR - fantomas <uh...@fantomas.sk>
To: users@spamassassin.apache.org
Sent: Saturday, September 3, 2016 1:57 PM
Subject: Re: Local mode with some URI checks. Possible??
On 03.09.16 09:32, Pedro David Marco wrote:
>Thans Axb, I already did it, but i could not found any reasonable way to disable all networks checks but one...(not to go one by one, i mean)
there's also no reasonable way to disable "all but one" without going one by
one.
do you have real reason to skip all network tests?
most of them are very useful to detect spam...
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.
Re: Local mode with some URI checks. Possible??
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 03.09.16 09:32, Pedro David Marco wrote:
>Thans Axb, Ialready did it, but i could not found any reasonable way to disable all networks checks but one...(not to go one by one, i mean)
there's also no reasonable way to disable "all but one" without going one by
one.
do you have real reason to skip all network tests?
most of them are very useful to detect spam...
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.
Re: Local mode with some URI checks. Possible??
Posted by Benny Pedersen <me...@junc.eu>.
On 2016-09-05 19:04, lists@rhsoft.net wrote:
> so the answer si just: NO
> that's it
tflags without net option is not a net test
simple ? YES
but depending on how to use its not so simple
if score set have had inbound and outbound score set aswell it would
have being no ned to make the tflags net setting
Re: Local mode with some URI checks. Possible??
Posted by "lists@rhsoft.net" <li...@rhsoft.net>.
Am 05.09.2016 um 19:01 schrieb Benny Pedersen:
> On 2016-09-05 07:29, Pedro David Marco wrote:
>
>> My understanding was that "if there is no net flag, then it could work
>> in local mode", but i was wrong..
>
> score rule sets supports no net tests, simply score 0 on net test, and
> non zero on local tests rule set score
tell him something new
the point is that he want disable *allo* network tests *expect* specific
ones without listing all explicit - just because they may change over
time after "sa-update" and dependencies of meta-rules are also changing
all the time (i know that from expierience from the outbound
submission-instance which has a ton of rules disabled)
so the answer si just: NO
that's it
Re: Local mode with some URI checks. Possible??
Posted by Benny Pedersen <me...@junc.eu>.
On 2016-09-05 07:29, Pedro David Marco wrote:
> My understanding was that "if there is no net flag, then it could work
> in local mode", but i was wrong..
score rule sets supports no net tests, simply score 0 on net test, and
non zero on local tests rule set score
Re: Local mode with some URI checks. Possible??
Posted by Pedro David Marco <pe...@yahoo.com>.
thaks Axb, i agree with you but
tflags MY_URIBL_BLACK net
clearly sets the rule as a "net check rule", exactly what i am trying to avoid, and according to documentation there is no flag to mark the rule a "local check rule".
My understanding was that "if there is no net flag, then it could work in local mode", but i was wrong..
Thanks again,
PedroD.
From: Axb <ax...@gmail.com>
To: users@spamassassin.apache.org
Sent: Monday, September 5, 2016 7:12 AM
Subject: Re: Local mode with some URI checks. Possible??
this should read
urirhssub MY_URIBL_BLACK multi.uribl.com. A 2
body MY_URIBL_BLACK eval:check_uridnsbl('MY_URIBL_BLACK')
describe MY_URIBL_BLACK Contains an URL listed in the URIBL blacklist
tflags MY_URIBL_BLACK net
score MY_URIBL_BLACK 3.0
Syntax is well documented.
On 09/05/2016 06:59 AM, Pedro David Marco wrote:
> Bill you are absolutely right... i have modified it: urirhssub
> MY_URIBL_BLACK multi.uribl.com. A 2 body
> MY_URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') describe
> MY_URIBL_BLACK URL listed in uribl.com score
> MY_URIBL_BLACK 3 but still not working... maybe the function
> "check_uridnsbl" in the eval is considered a net check despite
> anything else... (it would make sense according to its name, i know,
> but...) Thank to all trying to help me!! PedroD
>
> From: Bill Cole <sa...@billmail.scconsult.com> To:
> "users@spamassassin.apache.org" <us...@spamassassin.apache.org> Sent:
> Sunday, September 4, 2016 9:52 PM Subject: Re: Local mode with some
> URI checks. Possible??
>
> On 3 Sep 2016, at 5:32, Pedro David Marco wrote:
>
>> there is a Flag to indicate when a rule is net related or not, so
>> my understanding was thatas my rule did not have that flag, it
>> could work in local only mode.
>
> BUT: URIBL_BLACK is not YOUR rule. It is your redefinition of a rule
> in the default set:
>
> bigsky:updates_spamassassin_org root# grep -r URIBL_BLACK .
> ./25_uribl.cf:urirhssub URIBL_BLACK multi.uribl.com. A
> 2 ./25_uribl.cf:body URIBL_BLACK
> eval:check_uridnsbl('URIBL_BLACK') ./25_uribl.cf:describe
> URIBL_BLACK Contains an URL listed in the URIBL blacklist
> ./25_uribl.cf:tflags URIBL_BLACK net ./25_uribl.cf:reuse
> URIBL_BLACK ./30_text_pt_br.cf:lang pt_BR describe URIBL_BLACK Cont?m
> uma URL listada na blacklist URIBL ./50_scores.cf:score URIBL_BLACK 0
> 1.7 0 1.7 # n=0 n=2
>
> So "your" rule is just restating exactly what that rule already was,
> but you gave it a new score and description. You did not give it a
> new tflags setting.
>
>
>
>
Re: Local mode with some URI checks. Possible??
Posted by Axb <ax...@gmail.com>.
this should read
urirhssub MY_URIBL_BLACK multi.uribl.com. A 2
body MY_URIBL_BLACK eval:check_uridnsbl('MY_URIBL_BLACK')
describe MY_URIBL_BLACK Contains an URL listed in the URIBL blacklist
tflags MY_URIBL_BLACK net
score MY_URIBL_BLACK 3.0
Syntax is well documented.
On 09/05/2016 06:59 AM, Pedro David Marco wrote:
> Bill you are absolutely right... i have modified it: urirhssub
> MY_URIBL_BLACK multi.uribl.com. A 2 body
> MY_URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') describe
> MY_URIBL_BLACK URL listed in uribl.com score
> MY_URIBL_BLACK 3 but still not working... maybe the function
> "check_uridnsbl" in the eval is considered a net check despite
> anything else... (it would make sense according to its name, i know,
> but...) Thank to all trying to help me!! PedroD
>
> From: Bill Cole <sa...@billmail.scconsult.com> To:
> "users@spamassassin.apache.org" <us...@spamassassin.apache.org> Sent:
> Sunday, September 4, 2016 9:52 PM Subject: Re: Local mode with some
> URI checks. Possible??
>
> On 3 Sep 2016, at 5:32, Pedro David Marco wrote:
>
>> there is a Flag to indicate when a rule is net related or not, so
>> my understanding was thatas my rule did not have that flag, it
>> could work in local only mode.
>
> BUT: URIBL_BLACK is not YOUR rule. It is your redefinition of a rule
> in the default set:
>
> bigsky:updates_spamassassin_org root# grep -r URIBL_BLACK .
> ./25_uribl.cf:urirhssub URIBL_BLACK multi.uribl.com. A
> 2 ./25_uribl.cf:body URIBL_BLACK
> eval:check_uridnsbl('URIBL_BLACK') ./25_uribl.cf:describe
> URIBL_BLACK Contains an URL listed in the URIBL blacklist
> ./25_uribl.cf:tflags URIBL_BLACK net ./25_uribl.cf:reuse
> URIBL_BLACK ./30_text_pt_br.cf:lang pt_BR describe URIBL_BLACK Cont?m
> uma URL listada na blacklist URIBL ./50_scores.cf:score URIBL_BLACK 0
> 1.7 0 1.7 # n=0 n=2
>
> So "your" rule is just restating exactly what that rule already was,
> but you gave it a new score and description. You did not give it a
> new tflags setting.
>
>
>
>
Re: Local mode with some URI checks. Possible??
Posted by Pedro David Marco <pe...@yahoo.com>.
Bill you are absolutely right...
i have modified it:
urirhssub MY_URIBL_BLACK multi.uribl.com. A 2 body MY_URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') describe MY_URIBL_BLACK URL listed in uribl.com score MY_URIBL_BLACK 3
but still not working...
maybe the function "check_uridnsbl" in the eval is considered a net check despite anything else... (it would make sense according to its name, i know, but...)
Thank to all trying to help me!!
PedroD
From: Bill Cole <sa...@billmail.scconsult.com>
To: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
Sent: Sunday, September 4, 2016 9:52 PM
Subject: Re: Local mode with some URI checks. Possible??
On 3 Sep 2016, at 5:32, Pedro David Marco wrote:
> there is a Flag to indicate when a rule is net related or not, so my
> understanding was thatas my rule did not have that flag, it could work
> in local only mode.
BUT: URIBL_BLACK is not YOUR rule. It is your redefinition of a rule in
the default set:
bigsky:updates_spamassassin_org root# grep -r URIBL_BLACK .
./25_uribl.cf:urirhssub URIBL_BLACK multi.uribl.com. A
2
./25_uribl.cf:body URIBL_BLACK
eval:check_uridnsbl('URIBL_BLACK')
./25_uribl.cf:describe URIBL_BLACK Contains an URL listed in
the URIBL blacklist
./25_uribl.cf:tflags URIBL_BLACK net
./25_uribl.cf:reuse URIBL_BLACK
./30_text_pt_br.cf:lang pt_BR describe URIBL_BLACK Cont?m uma URL
listada na blacklist URIBL
./50_scores.cf:score URIBL_BLACK 0 1.7 0 1.7 # n=0 n=2
So "your" rule is just restating exactly what that rule already was, but
you gave it a new score and description. You did not give it a new
tflags setting.
Re: Local mode with some URI checks. Possible??
Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 3 Sep 2016, at 5:32, Pedro David Marco wrote:
> there is a Flag to indicate when a rule is net related or not, so my
> understanding was thatas my rule did not have that flag, it could work
> in local only mode.
BUT: URIBL_BLACK is not YOUR rule. It is your redefinition of a rule in
the default set:
bigsky:updates_spamassassin_org root# grep -r URIBL_BLACK .
./25_uribl.cf:urirhssub URIBL_BLACK multi.uribl.com. A
2
./25_uribl.cf:body URIBL_BLACK
eval:check_uridnsbl('URIBL_BLACK')
./25_uribl.cf:describe URIBL_BLACK Contains an URL listed in
the URIBL blacklist
./25_uribl.cf:tflags URIBL_BLACK net
./25_uribl.cf:reuse URIBL_BLACK
./30_text_pt_br.cf:lang pt_BR describe URIBL_BLACK Cont?m uma URL
listada na blacklist URIBL
./50_scores.cf:score URIBL_BLACK 0 1.7 0 1.7 # n=0 n=2
So "your" rule is just restating exactly what that rule already was, but
you gave it a new score and description. You did not give it a new
tflags setting.
Re: Local mode with some URI checks. Possible??
Posted by Pedro David Marco <pe...@yahoo.com>.
Thans Axb, I already did it, but i could not found any reasonable way to disable all networks checks but one...(not to go one by one, i mean)
there is a Flag to indicate when a rule is net related or not, so my understanding was thatas my rule did not have that flag, it could work in local only mode.
From: Axb <ax...@gmail.com>
To: users@spamassassin.apache.org
Sent: Saturday, September 3, 2016 11:06 AM
Subject: Re: Local mode with some URI checks. Possible??
On 09/03/2016 08:45 AM, Pedro David Marco wrote:
> Hi!
>
> I am using "Local tests only" mode of SA to prevent any network
> checks, but there is one URIBL i would like to use (as an
> exception).. is it possible to do this???
>
> I have added this rule lo local.cf:
>
> urirhssub URIBL_BLACK multi.uribl.com. A 2 body
> URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') describe
> URIBL_BLACK URL listed in URIBL blacklist uribl.com score
> URIBL_BLACK 3
>
> but unfortunately it is not working... what am i doing wrong? it
> works if i call SA without Local tests mode.
*Fortunately* it's not working, otherwsie SA would have a bad bug.
You're doing nothing wrong - if you say "Local tests only", SA does that.
If you only want to enable ONE lookup, it's a whole different "problem"
which can be solved via SA documentation and asking Google.
Re: Local mode with some URI checks. Possible??
Posted by Axb <ax...@gmail.com>.
On 09/03/2016 08:45 AM, Pedro David Marco wrote:
> Hi!
>
> I am using "Local tests only" mode of SA to prevent any network
> checks, but there is one URIBL i would like to use (as an
> exception).. is it possible to do this???
>
> I have added this rule lo local.cf:
>
> urirhssub URIBL_BLACK multi.uribl.com. A 2 body
> URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') describe
> URIBL_BLACK URL listed in URIBL blacklist uribl.com score
> URIBL_BLACK 3
>
> but unfortunately it is not working... what am i doing wrong? it
> works if i call SA without Local tests mode.
*Fortunately* it's not working, otherwsie SA would have a bad bug.
You're doing nothing wrong - if you say "Local tests only", SA does that.
If you only want to enable ONE lookup, it's a whole different "problem"
which can be solved via SA documentation and asking Google.