[Bug 3146] New: Please add rules for the ISIPP Accreditation Database

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=3146

           Summary: Please add rules for the ISIPP Accreditation Database
           Product: Spamassassin
           Version: unspecified
          Platform: Other
               URL: http://www.isipp.com/iadb.php
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: amitchell@isipp.com


Hello,

Can you please add rules to query the ISIPP Accreditation Database?  We hope that by default query can 
be "off".

The ISIPP Accreditation Database (IADB) is a DNS list of the domains and/or IP addresses of senders who 
either a) meet ISIPP's criteria as determined by background, reference, and other checks ("non-vouched 
listings"), or b) are personally known to ISIPP to meet the criteria and to be good Internet mailing 
citizens, and for whom we will thus vouch ("vouched listings"). The IADB is unique in that it allows for 
listing of domains as well as IP addresses under certain circumstances (such as where the listee 
publishes a SPF record).  More general information about IADB can be found at http://www.isipp.com/
iadb.php).


The zone is at iadb.isipp.com, and here is some information about it:

The ISIPP Accreditation Database is an in-addr prefix style DNS list which resides at iadb.isipp.com.

When queried, the IADB will return one or more A records for any site which is listed in the IADB. These 
are as follows:

127.0.0.1  Listed in IADB

127.0.0.2 Vouched listing

127.0.0.3 Publishes SPF record

Note that a query can return more than one response for any given listing; each response is option-
specific. For example 127.0.0.1 means that the site is listed in IADB, and 127.0.0.2 means that the 
listing is a vouched listing. Thus for a site which is listed in IADB and which is a vouched listing, a query 
will return "127.0.0.1; 127.0.0.2", providing the querying site with the very specific information that the 
site is listed in IADB, and that the listing is a vouched listing.

This level of granularity allows querying sites to make decisions based on precise information regarding 
a listing in the IADB.

---------

Here is some sample rule code which Craigh Hughes wrote for it (although we need to think about 
scores a bit more):

# ISIPP IADB
header RCVD_IN_IADB eval:rbl_check('iadb', 'iadb.isipp.com.', '127.0.0.1')
describe RCVD_IN_IADB The sender is listed in the ISIPP IADB of trusted senders
header RCVD_IN_IADB_VOUCHED eval:rbl_check_sub('iadb', '127.0.0.2')
describe RCVD_IN_IADB_VOUCHED The sender is a vouched sender in IADB
header RCVD_IN_IADB_SPF eval:rbl_check_sub('iadb','127.0.0.3')
describe RCVD_IN_IADB_SPF The sender is in IADB as a publisher of SPF records

tflags RCVD_IN_IADB net nice
tflags RCVD_IN_IADB_VOUCHED net nice
tflags RCVD_IN_IADB_SPF net nice
score RCVD_IN_IADB 0 -2 0 -2
score RCVD_IN_IADB_VOUCHED 0 -2 0 -2
score RCVD_IN_IADB_SPF 0 -1 0 -1

Thank you!

Anne P. Mitchell, Esq.
President/CEO
Institute for Spam and Internet Public Policy



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.