spamassassin & msrbl

["sebastian@debianfan.de" <se...@debianfan.de>]

Hello,

how to integrate the msrbl.com - lists in spamassassin?


***************
We currently provide the following RBLs:

* virus.rbl.msrbl.net - Hosts found sending virus mails
* phishing.rbl.msrbl.net - Hosts found sending phishing mails
* images.rbl.msrbl.net - Hosts found sending mail contaning spam images
* spam.rbl.msrbl.net - Hosts found sending mail contaning spam *new*
* combined.rbl.msrbl.net - All the above lists combined


***************

I don't want to implement the RBL's into my postfix-configuration 
because of false positives.

Thnx

Sebastian

Re: spamassassin & msrbl

[mouss <mo...@netoyen.net>]

sebastian@debianfan.de a écrit :
> Hello,
> 
> how to integrate the msrbl.com - lists in spamassassin?
> 
> 
> ***************
> We currently provide the following RBLs:
> 
> * virus.rbl.msrbl.net - Hosts found sending virus mails
> * phishing.rbl.msrbl.net - Hosts found sending phishing mails
> * images.rbl.msrbl.net - Hosts found sending mail contaning spam images
> * spam.rbl.msrbl.net - Hosts found sending mail contaning spam *new*
> * combined.rbl.msrbl.net - All the above lists combined
> 


does combined.* return different results depending on which sublist
(virus, phishing, ...) the IP is in? or does one need to query each
sublist individually?


to integrate the aggregate zone, you can use something like this:

ifplugin Mail::SpamAssassin::Plugin::DNSEval

header   RCVD_IN_MSRBL          eval:check_rbl('msrbl',
'combined.rbl.msrbl.net.')
describe RCVD_IN_MSRBL          Received via a relay in MSRBL
tflags   RCVD_IN_MSRBL          net
score    RCVD_IN_MSRBL          0 0.1 0 0.1

endif

adjust the score(s).

Look at 20_dnsbl_tests.cf for more...


> 
> ***************
> 
> I don't want to implement the RBL's into my postfix-configuration
> because of false positives.
>