You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Warren Togami <wt...@redhat.com> on 2009/12/13 16:56:32 UTC
emailreg.org - permission to spamassassin masscheck?
On 12/12/2009 12:42 AM, Marc Perkel wrote:
> Been using emailreg.org for several months now and it seems like a
> really good white list. Anyone else using it?
>
Would they object to spamassassin's weekly masscheck testing their
accuracy every Saturday? How do we contact them?
http://www.emailreg.org/index.cgi?p=usage
(from domain).(ip).resl.emailreg.org
It seems the preferred method of querying includes both From domain and
IP address, which is different from other whitelists. Would we need a
new plugin for spamassassin to query in this fashion?
Warren Togami
wtogami@redhat.com
Re: emailreg.org - permission to spamassassin masscheck?
Posted by Warren Togami <wt...@redhat.com>.
On 12/14/2009 05:06 AM, Mike Cardwell wrote:
> Warren Togami wrote:
>
>> I'm pretty sure this only queries only by IP address. IP address and
>> domain name combined can be significantly more fine grained on some
>> mail providers, so we might be better off waiting until spamassassin
>> is capable of querying in their preferred manner before adding it to
>> masschecks.
>
> Apparently you can't query the list until you've registered the IP
> address of your DNS resolvers with them. This means, it can't be
> included as standard in SpamAssassin.
>
> However, I can't figure out how to do that... On
> http://www.emailreg.org/index.cgi?p=policy it says:
>
> "The Registered Email Sender List is available to everyone that would
> like to utilize it. In order to obtain access you need to register a
> domain. Once you have registered a domain you will be able to specify
> the IP addresses that you would like to have query the RESL."
>
> So you have to register a domain before you can register your IPs...
>
> It then goes on to say:
>
> "Note that there is no charge for USE of the RESL data via this DNS
> query system. If you would like to use the RESL without registering a
> domain you may do so by registering HERE."
>
> So you don't have to register a domain before you can register your IPs...
>
> Which is it? Do I have to register a domain, or don't I? So I signed up
> for an account and all I see is an option to register my domains with
> them, and that costs money... I see no option for registering the IPs of
> my resolvers.
>
Good point. spamassassin masschecks can happen on arbitrary hosts on
the Internet. If they require registration for DNS lookups, then
emailreg.org cannot be tested by weekly masscheck. I personally am
against adding anything to spamassassin that cannot be tested.
Warren Togami
wtogami@redhat.com
Re: emailreg.org - permission to spamassassin masscheck?
Posted by Bob O'Brien <bo...@barracuda.com>.
Mike Cardwell wrote:
> So you don't have to register a domain before you can register your IPs...
>
> Which is it? Do I have to register a domain, or don't I? So I signed up
> for an account and all I see is an option to register my domains with
> them, and that costs money... I see no option for registering the IPs of
> my resolvers.
>
I don't know for sure whether my own access account is typical or not, but
once you are logged into your free account, you should be able to choose
"My Domains" from the top menu, and then "Edit RESL Access IPs" from the
navigation panel on the left.
If that doesn't work, email me directly if you wish.
Given some specifics, I can encourage the emailreg folks to improve the
user interface.
Bob
--
Re: emailreg.org - permission to spamassassin masscheck?
Posted by Mike Cardwell <sp...@lists.grepular.com>.
Warren Togami wrote:
> I'm pretty sure this only queries only by IP address. IP address and
> domain name combined can be significantly more fine grained on some mail
> providers, so we might be better off waiting until spamassassin is
> capable of querying in their preferred manner before adding it to
> masschecks.
Apparently you can't query the list until you've registered the IP
address of your DNS resolvers with them. This means, it can't be
included as standard in SpamAssassin.
However, I can't figure out how to do that... On
http://www.emailreg.org/index.cgi?p=policy it says:
"The Registered Email Sender List is available to everyone that would
like to utilize it. In order to obtain access you need to register a
domain. Once you have registered a domain you will be able to specify
the IP addresses that you would like to have query the RESL."
So you have to register a domain before you can register your IPs...
It then goes on to say:
"Note that there is no charge for USE of the RESL data via this DNS
query system. If you would like to use the RESL without registering a
domain you may do so by registering HERE."
So you don't have to register a domain before you can register your IPs...
Which is it? Do I have to register a domain, or don't I? So I signed up
for an account and all I see is an option to register my domains with
them, and that costs money... I see no option for registering the IPs of
my resolvers.
--
Mike Cardwell - IT Consultant and LAMP developer
Cardwell IT Ltd. (UK Reg'd Company #06920226) http://cardwellit.com/
Technical Blog: https://secure.grepular.com/blog/
Re: emailreg.org - permission to spamassassin masscheck?
Posted by Warren Togami <wt...@redhat.com>.
On 12/13/2009 09:34 PM, Robert Fleming wrote:
> Add the following rules to your SpamAssassin configuration
>
> header __RCVD_IN_EMAILREG eval:check_rbl('emailreg-trusted',
> 'resl.emailreg.org.')
>
> header RCVD_IN_EMAILREG_0 eval:check_rbl_sub('emailreg-trusted',
> '127.0.\d+.0')
> describe RCVD_IN_EMAILREG_0 Sender listed at http://www.emailreg.org/
> tflags RCVD_IN_EMAILREG_0 nice net
>
> header RCVD_IN_EMAILREG_1 eval:check_rbl_sub('emailreg-trusted',
> '127.0.\d+.1')
> describe RCVD_IN_EMAILREG_1 Sender listed at http://www.emailreg.org/
> tflags RCVD_IN_EMAILREG_1 nice net
>
> score RCVD_IN_EMAILREG_0 -100
> score RCVD_IN_EMAILREG_1 -100
>
> Not sure if the combination of rbl and rbl_sub does exactly what their
> preferred query method is, but nice of them to give sample code.
>
> Rob
>
>
I'm pretty sure this only queries only by IP address. IP address and
domain name combined can be significantly more fine grained on some mail
providers, so we might be better off waiting until spamassassin is
capable of querying in their preferred manner before adding it to
masschecks.
Furthermore, I suspect we want firsttrusted instead of trusted?
Warren
Re: emailreg.org - permission to spamassassin masscheck?
Posted by Robert Fleming <ro...@flemish.org>.
--On December 13, 2009 10:56:32 AM -0500 Warren Togami is rumoured to have
written:
> http://www.emailreg.org/index.cgi?p=usage
> (from domain).(ip).resl.emailreg.org
>
> It seems the preferred method of querying includes both From domain and
> IP address, which is different from other whitelists. Would we need a
> new plugin for spamassassin to query in this fashion?
>>From further down the same page, they suggest the following for SA
Add the following rules to your SpamAssassin configuration
header __RCVD_IN_EMAILREG eval:check_rbl('emailreg-trusted',
'resl.emailreg.org.')
header RCVD_IN_EMAILREG_0 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.0')
describe RCVD_IN_EMAILREG_0 Sender listed at http://www.emailreg.org/
tflags RCVD_IN_EMAILREG_0 nice net
header RCVD_IN_EMAILREG_1 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.1')
describe RCVD_IN_EMAILREG_1 Sender listed at http://www.emailreg.org/
tflags RCVD_IN_EMAILREG_1 nice net
score RCVD_IN_EMAILREG_0 -100
score RCVD_IN_EMAILREG_1 -100
Not sure if the combination of rbl and rbl_sub does exactly what their
preferred query method is, but nice of them to give sample code.
Rob