You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2018/02/10 21:46:29 UTC
[Bug 7548] New: Add the MSBL hashbl.pm to SA Plugins
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Bug ID: 7548
Summary: Add the MSBL hashbl.pm to SA Plugins
Product: Spamassassin
Version: 3.4.2
Hardware: PC
OS: Windows NT
Status: NEW
Severity: normal
Priority: P2
Component: Plugins
Assignee: dev@spamassassin.apache.org
Reporter: kmcgrail@apache.org
Target Milestone: Undefined
Michael Grant: Has anyone tried out the the MSBL Email Blocklist (EBL)
HashBL.pm with Spamassassin from msbl.org and possibly considered packaging
this module (available from this page: http://msbl.org/ebl-implementation.html)
with SpamAssassin (perhaps in a forthcoming release)? rSpamD already has
internal support for the EBL. So I believe the MSBL folks are for this sort of
thing in general.
This plugin looks through the message (not just headers) for email addresses
which have been identified as email drop boxes for scams like 419 advance fee
fraud. It then looks hashes of these addresses up in a blocklist.
I'm not affiliated with these folks. I do however use this module in my setup
though and find it catches a bunch of things we wouldn't have otherwise caught.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Kevin A. McGrail <km...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kmcgrail@apache.org
--- Comment #1 from Kevin A. McGrail <km...@apache.org> ---
Permission from Steve Freegard:
I'm already on file [re: ICLA]... so feel free to add it.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Giovanni Bechis <gi...@paclan.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #5536|0 |1
is obsolete| |
--- Comment #12 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 5537
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5537&action=edit
Removed 25_hashbl.cf rule from diff
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #5 from Dave Jones <da...@apache.org> ---
Just noticed that ebl.msbl.org is hosted on CloudFlare so I would say they are
ready to handle the load. :)
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #13 from Giovanni Bechis <gi...@paclan.it> ---
Ping....
Is it ok to import the plugin without adding any rule ?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Giovanni Bechis <gi...@paclan.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|NEW |RESOLVED
--- Comment #15 from Giovanni Bechis <gi...@paclan.it> ---
Committed in r1825724.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Dave Jones <da...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |davej@apache.org
--- Comment #4 from Dave Jones <da...@apache.org> ---
+1
Been using this plugin with good results for a few months.
We need to make sure we aren't going to overload their servers with the huge
install base of SA.
Someone with good contact info should reach out to them and make sure they are
ready to handle this load.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Giovanni Bechis <gi...@paclan.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |giovanni@paclan.it
--- Comment #3 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 5536
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5536&action=edit
HashBL plugin
I am using this plugin for few weeks and is working fine, I would like to add
it as an official plugin.
I added an 25_hashbl.cf in rules, a new v342.pre file to load the plugin and
added few lines of pod documentation to the plugin, is there something
more/wrong or we could add the plugin in spamassassin ?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #14 from Kevin A. McGrail <km...@apache.org> ---
Yes, that's my intention of how to add it.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #9 from Benny Pedersen <me...@junc.eu> ---
is thay ready to handle corpus testing ?
could dns ttl be 86400 for this dns data ?
or do we as free riders like 1 ?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #6 from Kevin A. McGrail <km...@apache.org> ---
(In reply to Dave Jones from comment #5)
> Just noticed that ebl.msbl.org is hosted on CloudFlare so I would say they
> are ready to handle the load. :)
I don't know that we are adding the rules, just the plugin to be clear.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #8 from Kevin A. McGrail <km...@apache.org> ---
(In reply to Dave Jones from comment #7)
> Ok. Just looked at the proposed patch and noticed that the loadplugin would
> be commented by default in the v342.pre.
>
> The proposed patch with 25_hashbl.cf would enable the rule HASHBL_EMAIL
> inside an ifplugin statement so I guess that would be a default score of 1.0.
Likely need to look at that. My proposal is SOLELY for the plugin.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #11 from AXB <ax...@gmail.com> ---
(In reply to Benny Pedersen from comment #9)
> is thay ready to handle corpus testing ?
>
> could dns ttl be 86400 for this dns data ?
>
> or do we as free riders like 1 ?
that would also apply to negative TTL which would render it useless.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #10 from Dave Jones <da...@apache.org> ---
Not sure what that question is about the DNS TTL. Please clarify. Cloudflare
can handle the DNS query load of low TTLs. If this hash information doesn't
change often, the msbl.org owner could increase the TTLs but I suspect it's
safer to go with a lower TTL so he/she can remove entries quickly.
My ena-weekX is the majority of the masscheck corpus and I only see a few hits
on HASHBL_EMAIL each day. When I do get hits, these email already score in the
50's and 60's so they would have been blocked anyway with my custom rules and
settings.
I understand that this could help others in different locations with default SA
and different mail flow/languages so I am all for it.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
--- Comment #7 from Dave Jones <da...@apache.org> ---
Ok. Just looked at the proposed patch and noticed that the loadplugin would be
commented by default in the v342.pre.
The proposed patch with 25_hashbl.cf would enable the rule HASHBL_EMAIL inside
an ifplugin statement so I guess that would be a default score of 1.0.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7548] Add the MSBL hashbl.pm to SA Plugins
Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7548
Benny Pedersen <me...@junc.eu> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |me@junc.eu
--- Comment #2 from Benny Pedersen <me...@junc.eu> ---
if dns ttl will be minimal to 3600 it would be ok, too many dns provider that
like to drop there problems into spamassassin does not care much there
--
You are receiving this mail because:
You are the assignee for the bug.