RES: Re: Osirusoft question

[Daniel Bird]

Matthew Bowman wrote:

>Thank you for the tips on osirusoft.
>
>Matthew
>
>
>
Just seen a post on the SA list. It Sounds like it's best to comment out
the rbl checks  for osirusoft in

/usr/share/spamassassin/20_head_tests.cf

as it will a) reduce the network load on Osirusoft and b) help speed
things up a bit.

These are the ones I've commented out:

# Osirusoft, like MAPS RBL+ is a multi-meaning BL, so it is treated
separately
#header RCVD_IN_OSIRUSOFT_COM   rbleval:check_rbl('osirusoft',
'relays.osirusoft.com.')
#describe RCVD_IN_OSIRUSOFT_COM Received via a relay in relays.osirusoft.com
#tflags RCVD_IN_OSIRUSOFT_COM    net

# X prefix was used to insure that it was run at the end, but it's not
needed
# anymore since we run the rule with rblreseval -- Marc
#header X_OSIRU_OPEN_RELAY
rbleval:check_rbl_results_for('osirusoft', '127.0.0.2')
#describe X_OSIRU_OPEN_RELAY    DNSBL: sender is Confirmed Open Relay
#tflags X_OSIRU_OPEN_RELAY      net

#header X_OSIRU_DUL
rbleval:check_rbl_results_for('osirusoft', '127.0.0.3')
#describe X_OSIRU_DUL           DNSBL: sender ip address in in a dialup
block
#tflags X_OSIRU_DUL             net

#header X_OSIRU_SPAM_SRC
rbleval:check_rbl_results_for('osirusoft', '127.0.0.4')
#describe X_OSIRU_SPAM_SRC      DNSBL: sender is Confirmed Spam Source
#tflags X_OSIRU_SPAM_SRC         net

#header X_OSIRU_SPAMWARE_SITE
rbleval:check_rbl_results_for('osirusoft', '127.0.0.6')
#describe X_OSIRU_SPAMWARE_SITE DNSBL: sender is a Spamware site or vendor
#tflags X_OSIRU_SPAMWARE_SITE    net

#header X_OSIRU_DUL_FH
rbleval:check_rbl('osirusoft-dul-firsthop', 'relays.osirusoft.com.')
#describe X_OSIRU_DUL_FH                Received from first hop dialup
listed in relays.osirusoft.com
#tflags X_OSIRU_DUL_FH           net nice

--
____________________________________

Daniel Bird
Network and Systems Manager
Department Of Information Services
St. George's Hospital Medical School
Tooting
London SW17 0RE

P: +44 20 8725 2897
F: +44 20 8725 3583
E: dan at sghms.ac.uk
____________________________________

Everything is possible....except skiing through a revolving door




--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.