blackholes.five-ten-sg.com

[wolfgang <me...@gmx.net>]

after viewing http://www.five-ten-sg.com/blackhole.php?221.143.43.231 I would 
like to use the 127.0.0.2 section of blackholes.five-ten-sg.com in a 
Received: header rule in SpamAssassin 3.0.2.

what would be the syntax for a rule that does such a PTR lookup like

$ host 231.43.143.221.blackholes.five-ten-sg.com
231.43.143.221.blackholes.five-ten-sg.com is an alias for 
korea.spam.blackholes.five-ten-sg.com.
korea.spam.blackholes.five-ten-sg.com has address 127.0.0.2



regards,

wolfgang

RE: blackholes.five-ten-sg.com

[martin smith <ma...@ntlworld.com>]

M>-----Original Message-----
M>From: wolfgang [mailto:mewolf1@gmx.net] 
M>Sent: 08 May 2005 21:19
M>To: users@spamassassin.apache.org
M>Subject: blackholes.five-ten-sg.com
M>
M>after viewing 
M>http://www.five-ten-sg.com/blackhole.php?221.143.43.231 I 
M>would like to use the 127.0.0.2 section of 
M>blackholes.five-ten-sg.com in a
M>Received: header rule in SpamAssassin 3.0.2.
M>
M>what would be the syntax for a rule that does such a PTR lookup like
M>
M>$ host 231.43.143.221.blackholes.five-ten-sg.com
M>231.43.143.221.blackholes.five-ten-sg.com is an alias for 
M>korea.spam.blackholes.five-ten-sg.com.
M>korea.spam.blackholes.five-ten-sg.com has address 127.0.0.2
M>
M>
M>
M>regards,
M>
M>wolfgang
M>
I think this should do what you want, just change the score to what you
want.
Bare in mind this may get word wrapped.

header __RCVD_IN_BLACKHOLES    eval:check_rbl('blackholes',
'blackholes.five-ten-sg.com.')
describe __RCVD_IN_BLACKHOLES  Received via a relay in
blackholes.five-ten-sg.com
tflags __RCVD_IN_BLACKHOLES    net

header RCVD_IN_BLACKHOLES    eval:check_rbl_sub('blackholes', '127.0.0.2')
describe RCVD_IN_BLACKHOLES  Received via a spam relay in
blackholes.five-ten-sg.com
tflags RCVD_IN_BLACKHOLES    net
score RCVD_IN_BLACKHOLES     2

Martin