You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michelle Konzack <li...@tamay-dogan.net> on 2012/02/22 12:59:20 UTC
HOW to setup an URIBL?
Hi Experts (Mark?),
I was some days in hostpital and in the meantime I was hit be several
million spams which where not detected by spamassassin. My secondary
stage of spamfilter (procmail based) has found nearly all without any
False-Positives, but this mean, I have to filter AFTER my MTA has accept
the message and consumes very huge resources on my storage servers.
OK, I have already "bind9" installed, because it is my master for nearly
300.000 domains and now I like to setup additionaly an URIBL.
Can somone tell me how I have to setup "bind9" to serve as URIBL please?
My current procmail scripts are updated using ssh from inside my "mutt"
configuration and can easily changed to use "nsupdate" to install new
URIs in my URIBL.
However, I do not know, how to setup "bind9" to do this and how to
change spamassassin to use my URIBL additionaly.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
Internet Service Provider, Cloud Computing
<http://www.itsystems.tamay-dogan.net/>
itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
Owner Michelle Konzack
Gewerbe Strasse 3 Tel office: +49-176-86004575
77694 Kehl Tel mobil: +49-177-9351947
Germany Tel mobil: +33-6-61925193 (France)
USt-ID: DE 278 049 239
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Re: HOW to setup an URIBL?
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Wed, 22 Feb 2012, Michelle Konzack wrote:
> Hello Axb,
>
> Am 2012-02-22 13:33:11, hacktest Du folgendes herunter:
>> This is a pretty good guide to start off with:
>> http://www.surbl.org/surbl-nameserver-setup
>
> Sorry, but this is not what I need, because the list is to slow with
> updates... It takes 6-8 hourt to get new URIs ito the zone...
>
> I need my own independant working URIBL server where I can add my own
> captured URIs.
Michelle,
You can use rbldnsd to serve up zones you get from surbl and/or
your own private zones. As a matter of fact I'm running a public
mirror of "multi.surbl.org" and my own private dnsbls (both IP and
hostname based) on the same server, just different config files.
So start with the surbl instructions for setting up a private
rbldnsd server, then ignore their rsync instructions, just put your
own zone data files in the rbldnsd config rather than theirs.
Let me know if you need more detailed instructions or help.
Dave
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Re: HOW to setup an URIBL?
Posted by Axb <ax...@gmail.com>.
On 02/22/2012 10:59 PM, Plant It Web Hosting Administrator wrote:
> I created this a while back. Not sure this is what you want, but it
> works with Spamassassin.
>
> http://www.my-webz.net/MyLocalURIBLInstall.html
FTR, rbldnsd is VERY lighweight and optimized for BL serving
- doesn't need zone reloads
- faster than Bind
- uses lots less memory and CPU
- a domain/line format makes it easy to feed it data
- dead easy to configure
- zero security issues
I'd dare say 99.99999% of BL ops use rbldnsd so if you ever want to run
a mirror for someone, you're compatible to their data.
there are RPM and Debian packages around.
Re: HOW to setup an URIBL?
Posted by Plant It Web Hosting Administrator <ad...@plantitweb.com>.
I created this a while back. Not sure this is what you want, but it works
with Spamassassin.
http://www.my-webz.net/MyLocalURIBLInstall.html
Gene
-----Original Message-----
From: Michelle Konzack
Sent: Wednesday, February 22, 2012 3:26 PM
To: users@spamassassin.apache.org
Subject: Re: HOW to setup an URIBL?
Re: HOW to setup an URIBL?
Posted by Per Jessen <pe...@computer.org>.
Michelle Konzack wrote:
> Hello Axb,
>
> Am 2012-02-22 13:33:11, hacktest Du folgendes herunter:
>> This is a pretty good guide to start off with:
>> http://www.surbl.org/surbl-nameserver-setup
>
> Sorry, but this is not what I need, because the list is to slow
> with updates... It takes 6-8 hourt to get new URIs ito the zone...
>
> I need my own independant working URIBL server where I can add my
> own captured URIs.
That is what is being suggested - follow the guide, but use it for your
own data.
--
Per Jessen, Zürich (1.7°C)
Re: Sorry for the misunderstanding [WAS: HOW to setup an URIBL?]
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Thu, 23 Feb 2012, Michelle Konzack wrote:
> Hi guys,
>
> I was not aware, that I can run "bind9" and "rbldnsd" at the same time
> on the same machine, exactly, I was thinking they will conflict with
> each other... ;-)
>
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
As long as they use different IP addresses (alias address) or different
ports. (I've got mine using different ports).
One trick, if you only need the rbldnsd for local use, bind it to an
alias of the localhost address (EG 127.0.0.3).
EG: in your rbldnsd config add a non-standard port specifier (say '57')
RBLDNSD="- -u spamd \
-r $RBLDNSD_CHROOT \
-b 173.255.255.24/57 -a \
-b 127.0.0.3 \
-c2m -f \
-s /log/stats \
-w data \
dbf-surbl.mydomain.org:dnset:dbf-surbl.rbldnsd \
dbfbl.mydomain.org:ip4set:dbfbl.rbldnsd"
Then in your bind9 config file create a 'type forward' zone that
points to that non-standard port:
zone "dbf-surbl.mydomain.org" {
type forward;
forward only;
forwarders {
173.255.255.24 port 57;
};
};
More detailed example available upon request.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Sorry for the misunderstanding [WAS: HOW to setup an URIBL?]
Posted by Michelle Konzack <li...@tamay-dogan.net>.
Hi guys,
I was not aware, that I can run "bind9" and "rbldnsd" at the same time
on the same machine, exactly, I was thinking they will conflict with
each other... ;-)
Thanks, Greetings and nice Day/Evening
Michelle Konzack
--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
Internet Service Provider, Cloud Computing
<http://www.itsystems.tamay-dogan.net/>
itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
Owner Michelle Konzack
Gewerbe Strasse 3 Tel office: +49-176-86004575
77694 Kehl Tel mobil: +49-177-9351947
Germany Tel mobil: +33-6-61925193 (France)
USt-ID: DE 278 049 239
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Re: HOW to setup an URIBL?
Posted by Axb <ax...@gmail.com>.
On 02/22/2012 10:26 PM, Michelle Konzack wrote:
> Hello Axb,
>
> Am 2012-02-22 13:33:11, hacktest Du folgendes herunter:
>> This is a pretty good guide to start off with:
>> http://www.surbl.org/surbl-nameserver-setup
>
> Sorry, but this is not what I need, because the list is to slow with
> updates... It takes 6-8 hourt to get new URIs ito the zone...
>
> I need my own independant working URIBL server where I can add my own
> captured URIs.
excatly,
That howto shows you how to use rbldnsd with bind (if you chose to)
for many, many reasons, rbldnsd is much more appropiate to run that kind
of data.
(http://www.corpit.ru/mjt/rbldnsd.html)
Re: HOW to setup an URIBL?
Posted by Benny Pedersen <me...@junc.org>.
Den 2012-02-22 22:26, Michelle Konzack skrev:
> I need my own independant working URIBL server where I can add my
> own
> captured URIs.
install rbldnsd, make domains urla listed there, next step is:
a: dump zone into bind zone file, uses more ram, but is more
performance
b: run rbldnsd binded to 127.0.0.2 and use this server as forward in
named.conf, remember pr zone
Re: HOW to setup an URIBL?
Posted by Michelle Konzack <li...@tamay-dogan.net>.
Hello Axb,
Am 2012-02-22 13:33:11, hacktest Du folgendes herunter:
> This is a pretty good guide to start off with:
> http://www.surbl.org/surbl-nameserver-setup
Sorry, but this is not what I need, because the list is to slow with
updates... It takes 6-8 hourt to get new URIs ito the zone...
I need my own independant working URIBL server where I can add my own
captured URIs.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
Internet Service Provider, Cloud Computing
<http://www.itsystems.tamay-dogan.net/>
itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
Owner Michelle Konzack
Gewerbe Strasse 3 Tel office: +49-176-86004575
77694 Kehl Tel mobil: +49-177-9351947
Germany Tel mobil: +33-6-61925193 (France)
USt-ID: DE 278 049 239
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Re: HOW to setup an URIBL?
Posted by Axb <ax...@gmail.com>.
On 02/22/2012 12:59 PM, Michelle Konzack wrote:
> Hi Experts (Mark?),
>
> I was some days in hostpital and in the meantime I was hit be several
> million spams which where not detected by spamassassin. My secondary
> stage of spamfilter (procmail based) has found nearly all without any
> False-Positives, but this mean, I have to filter AFTER my MTA has accept
> the message and consumes very huge resources on my storage servers.
>
> OK, I have already "bind9" installed, because it is my master for nearly
> 300.000 domains and now I like to setup additionaly an URIBL.
>
> Can somone tell me how I have to setup "bind9" to serve as URIBL please?
>
> My current procmail scripts are updated using ssh from inside my "mutt"
> configuration and can easily changed to use "nsupdate" to install new
> URIs in my URIBL.
>
> However, I do not know, how to setup "bind9" to do this and how to
> change spamassassin to use my URIBL additionaly.
This is a pretty good guide to start off with:
http://www.surbl.org/surbl-nameserver-setup