Spam scoring for SBL+XBL

[Randal, Phil]

# The new Spamhaus - Composite Blocking List
header  RCVD_IN_SPAMHAUS_SBL+XBL
eval:check_rbl_txt('sbl-xbl','sbl-xbl.spamhaus.org.')
describe        RCVD_IN_SPAMHAUS_SBL+XBL        Listed in SPAMHAUS SBL+XBL
tflags  RCVD_IN_SPAMHAUS_SBL+XBL                net
score   RCVD_IN_SPAMHAUS_SBL+XBL                4.0

Note, that's 5 lines in total - were you a victim of wordwrap?

I needed to add

  score RCVD_IN_SPAMHAUS_SBL 0

to spam.assassin.prefs.conf to disable the SBL check.

Have you enabled RBL checking in spamassassin?

Cheers,

Phil
---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Declan Grady
> Sent: 23 March 2004 10:43
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Spam scoring for SBL+XBL
>
>
> Hi,
> (Using MailScanner-4.29.2+ F-prot+ SpamAssassin-2.55)
> From searching the archives I found that to get the SBL+XBL
> to add to the
> spamassassin score, I added the lines:
>
> header RCVD_IN_SPAMHAUS_SBL+XBL eval:check_rbl_txt('sbl-xbl',
> 'sbl-xbl.spamhaus.org.')
> describe RCVD_IN_SPAMHAUS_SBL+XBL Listed in SPAMHAUS SBL+XBL
> tflags RCVD_IN_SPAMHAUS_SBL+XBL net
> score RCVD_IN_SPAMHAUS_SBL+XBL 4
>
> to my '/etc/mail/spamassassin/local.cf' file, and restarted
> MailScanner.
> My MailScanner.conf contains the line:
> SpamAssassin Site Rules Dir = /etc/mail/spamassassin
>
> and it does seem to pickup the bigevil.cf rules file from there.
>
> SInce then, I got another spam (surprise surprise) which
> should have triggered
> this rule, but doesnt seem to have.
>
> X-mycompanyname-MailScanner-SpamCheck: spam, SBL+XBL,
> SpamAssassin (score=13,
>         required 4.1, BAYES_90 3.00, BigEvilList_29 3.00,
>         BigEvilList_41 3.00, CLICK_BELOW 0.00, HTML_70_80 0.33,
>         HTML_IMAGE_ONLY_04 1.41, HTML_LINK_CLICK_HERE 0.10,
>         HTML_WEB_BUGS 0.10, MAILTO_TO_REMOVE 0.27,
> MAILTO_WITH_SUBJ 0.57,
>         MAILTO_WITH_SUBJ_REMOVE 0.50, MIME_HTML_ONLY 0.10,
> SUBJ_REMOVE 0.62)
>
> I thought I should see the extra score of 4.
>
> What am I missing ?
>
>
> Thanks,
> Declan
>