SpamAssassin 3.2.5 and Barracuda RBL ?

[Phibee Network Operation Center <no...@phibee.net>]

Hi

Barracuda RBL Test are included into SpamAssassin 3.2.5 or only
when we have into local.cf:

header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'bb.barracudacentral.org')
describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
tflags IN_BCUDA_RBL net

header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda', 
'127.0.0.2')
describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
tflags RCVD_IN_BCUDA_RELAY net

score RCVD_IN_BCUDA_RELAY 1.00


thanks
jerome

Re: SpamAssassin 3.2.5 and Barracuda RBL ?

[mouss <mo...@ml.netoyen.net>]

Phibee Network Operation Center a écrit :
> Hi
> 
> Barracuda RBL Test are included into SpamAssassin 3.2.5 or only
> when we have into local.cf:
> 

$ grep barracudacentral
/var/db/spamassassin/3.002005/updates_spamassassin_org/*cf
$

so no, it's not included.

> header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'bb.barracudacentral.org')
> describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
> tflags IN_BCUDA_RBL net
> 
> header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda',
> '127.0.0.2')
> describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
> tflags RCVD_IN_BCUDA_RELAY net
> 
> score RCVD_IN_BCUDA_RELAY 1.00
> 
> 

I think BRBL also lists dynamic (residential) IPs, which you should not
reject if they submit via their ISP.

I use:

header   RCVD_IN_BRBL  eval:check_rbl('brbl-lastexternal',
'bb.barracudacentral.org.')

describe RCVD_IN_BRBL  Received via a relay in Barracuda BRBL

tflags   RCVD_IN_BRBL  net


so that only the first "external" IP is checked.