New blocklist from Spamhaus

[Daniel Bird]

Michele Neylon :: Blacknight Solutions wrote:

>Should this be showing up in the maillog? I can't see it anywhere :(
>
>
I would think so ;-)  I only see it listed when it matches, and when the
mail is flagged as spam by MS/SA
i.e

Jan  5 22:46:21 mailhub4 MailScanner[8777]: Message 1AddUJ-0000Jb-Pq
from 24.7.51.155 (tracey_stephensor at carleton.ca) to sghms.ac.uk is spam,
SpamAssassin (score=14.042, required 5, BAYES_99 4.00,
FORGED_OUTLOOK_TAGS 1.00, HTML_50_60 0.10, HTML_IMAGE_ONLY_02 1.23,
HTML_MESSAGE 0.10, RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_DSBL 0.71,
RCVD_IN_DYNABLOCK 1.00, RCVD_IN_SORBS 0.10, RCVD_IN_SORBS_HTTP 1.10,
RCVD_IN_SORBS_SOCKS 1.20, RCVD_SPAMHAUS_XBL 1.50)

Dan

PS. Just in case, although I'm sure you have already, make run a
spamassassin --lint on your spam.assassin.prefs.conf to make sure you
don't have any typo's for the rule.

>Mr. Michele Neylon
>Blacknight Internet Solutions Ltd
>http://www.blacknightsolutions.ie/
>http://www.search.ie/
>Tel. + 353 (0)59 9137101
>Lowest price domains in Ireland
>
>
>
>>-----Original Message-----
>>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>>Behalf Of Daniel Bird
>>Sent: 02 January 2004 11:19
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: New blocklist from Spamhaus
>>
>>
>>Julian Field wrote:
>>
>>
>>
>>>Spamhaus have started up a list of known machines which are
>>>
>>>
>>open proxies,
>>
>>
>>>spam zombies, etc.
>>>
>>>To use it, edit you /etc/MailScanner/spam.lists.conf or
>>>/opt/MailScanner/etc/spam.lists.conf and add a line that looks
>>>
>>>
>>like this:
>>
>>
>>>spamhaus-XBL                    xbl.spamhaus.org.
>>>
>>>(Don't forget the "." at the end of the line!)
>>>
>>>Then edit your MailScanner.conf and add
>>>spamhaus-XBL
>>>to your "Spam List =" setting.
>>>
>>>Then just restart or reload MailScanner and it will start using the
>>>new list.
>>>
>>>
>>For those that prefer to use SA to bump up the score instead of
>>MailScanner's RBL's, something like:
>>
>>header          RCVD_SPAMHAUS_XBL
>>rbleval:check_rbl('spamhaus-xbl','xbl.spamhaus.org.')
>>describe        RCVD_SPAMHAUS_XBL       Found in SpamHaus XBL
>>tflags          RCVD_SPAMHAUS_XBL       net
>>score           RCVD_SPAMHAUS_XBL       1.5
>>
>>in spam.assassin.prefs.conf should do the trick...
>>
>>Dan
>>
>>
>>
>>>--
>>>Julian Field
>>>www.MailScanner.info
>>>Professional Support Services at www.MailScanner.biz
>>>MailScanner thanks transtec Computers for their support
>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>
>>>
>>>
>>--
>>____________________________________
>>
>>Daniel Bird
>>Network and Systems Manager
>>Department Of Information Services
>>St. George's Hospital Medical School
>>Tooting
>>London SW17 0RE
>>
>>P: +44 20 8725 2897
>>F: +44 20 8725 3583
>>E: dan at sghms.ac.uk
>>____________________________________
>>
>>Everything is possible....except skiing through a revolving door
>>
>>
>>
>>
>>--
>>This message has been scanned for viruses and
>>dangerous content by MailScanner, and is
>>believed to be clean.
>>
>>
>>
>
>
>


--
____________________________________

Daniel Bird
Network & Systems Manager
St. George's Hospital  Medical School
Tooting
London SW17 0RE

P: +44 20 8725 2897
F: +44 20 8725 3583
E: dan at sghms.ac.uk
____________________________________

Hex dump: Where witches put used curses...
"#define QUESTION ((bb) || !(bb)) - Shakespeare."



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.