Who does RBL checks - MailScanner or SpamAssassin?
Martin Hepworth
martinh at solid-state-logic.com
Fri Jun 9 09:10:48 IST 2006
Budi
Ah you're confusing RBL checks with URIRBL checks.
RBL checks where the message has come from (via the headers).
URIRBL checks within the message body for known http: locations that hold
spam info - eg all those drug adds that are just jpegs or gifs.
IHMO the URIRBLs are extremely useful at blocking spam. I'd leave them on
and watch the spam detection levels increase..
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Budi Febrianto
> Sent: 09 June 2006 03:35
> To: MailScanner discussion
> Subject: RE: Who does RBL checks - MailScanner or SpamAssassin?
>
> Thanks Martin.
>
> My fault:
> I set dns_available no in spam.assassin.pref.conf file.
> After I changed it into dns_available test, I see the dns: checking entry
> in spamassassin --lint -D.
>
> Now SA check the RBL.
>
> But, even I only enable SBL_XBL in the spam.assassin.pref.conf file, it
> seem that SA still checking others RBL.
>
> score __RCVD_IN_SBL_XBL 4
> #score RCVD_IN_BL_SPAMCOP_NET 4
> # These next 3 will cost you money, see mailscanner.conf.
> #score RCVD_IN_RBL 10
> #score RCVD_IN_RSS 1
> #score RCVD_IN_DUL 1
>
> Spam report taken from mailwatch.
> 4.09 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
> 3.01 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
> 1.64 URIBL_SBL Contains an URL listed in the SBL blocklist
>
> Should I disable all the RBL by setting the score to 0?
>
> Best Regards
>
>
> mailscanner-bounces at lists.mailscanner.info wrote on 06/08/2006 05:42:42
> PM:
>
> > Budi
> >
> > Should see lines like
> >
> > dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
> >
> >
> >
> > --
> > Martin Hepworth
> > Snr Systems Administrator
> > Solid State Logic
> > Tel: +44 (0)1865 842300
> >
> > > -----Original Message-----
> > > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> > > bounces at lists.mailscanner.info] On Behalf Of Budi Febrianto
> > > Sent: 08 June 2006 11:23
> > > To: MailScanner discussion
> > > Subject: RE: Who does RBL checks - MailScanner or SpamAssassin?
> > >
> > > Martin,
> > >
> > > Is there any specifi string that i have to look for? to find out if
> the
> > > rbl
> > > works in SA or not?
> > >
> > > mailscanner-bounces at lists.mailscanner.info wrote on 06/08/2006
> 03:59:20
> > > PM:
> > >
> > > > Hi
> > > >
> > > > Do a a "spamassassin -D --lint" and see if the tests being called.
> > > >
> > > > It could be the DNS module or something isn't installed properly..
> > > >
> > > > --
> > > > Martin Hepworth
> > > > Snr Systems Administrator
> > > > Solid State Logic
> > > > Tel: +44 (0)1865 842300
> > > >
> > > > > -----Original Message-----
> > > > > From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-
> > > > > bounces at lists.mailscanner.info] On Behalf Of Budi Febrianto
> > > > > Sent: 08 June 2006 09:51
> > > > > To: MailScanner discussion
> > > > > Subject: Re: Who does RBL checks - MailScanner or SpamAssassin?
> > > > >
> > > > >
> > > > > Dumb question:
> > > > > I changed the configuration in MailScanner.conf
> > > > > from
> > > > > Spam List = SBL+XBL # You can un-comment this to enable them
> > > > >
> > > > > To
> > > > > Spam List = # SBL+XBL # You can un-comment this to enable them
> > > > >
> > > > > And in spam.assassin.pref.conf
> > > > > from
> > > > > #score RCVD_IN_BL_SPAMCOP_NET 4
> > > > > # These next 3 will cost you money, see mailscanner.conf.
> > > > > #score RCVD_IN_RBL 10
> > > > > #score RCVD_IN_RSS 1
> > > > > #score RCVD_IN_DUL 1
> > > > >
> > > > > To
> > > > > score __RCVD_IN_SBL_XBL 4
> > > > > #score RCVD_IN_BL_SPAMCOP_NET 4
> > > > > # These next 3 will cost you money, see mailscanner.conf.
> > > > > #score RCVD_IN_RBL 10
> > > > > #score RCVD_IN_RSS 1
> > > > > #score RCVD_IN_DUL 1
> > > > >
> > > > > Do the spamassassin --lint result OK.
> > > > > Then do MailScanner reload.
> > > > > Now, how do I know if the RBL works in SA? Because in the log (I
> use
> > > > > mailwatch), I don't see any tag in spam report. I can see the
> > > pyzor_check
> > > > > score.
> > > > >
> > > > > I use SA 3.1.0 and MailScanner 4.52.2
> > > > >
> > > > > Thanks
> > > > >
> > > > > mailscanner-bounces at lists.mailscanner.info wrote on 06/07/2006
> > > 10:57:25
> > > >
> > > >
> > > >
> > > >
> **********************************************************************
> > > >
> > > > This email and any files transmitted with it are confidential and
> > > > intended solely for the use of the individual or entity to whom they
> > > > are addressed. If you have received this email in error please
> notify
> > > > the system manager.
> > > >
> > > > This footnote confirms that this email message has been swept
> > > > for the presence of computer viruses and is believed to be clean.
> > > >
> > > >
> **********************************************************************
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > >
> > > > Before posting, read http://wiki.mailscanner.info/posting
> > > >
> > > > Support MailScanner development - buy the book off the website!
> > > >
> > > > --
> > > > This message has been scanned for viruses and
> > > > dangerous content by MailScanner, and is
> > > > believed to be clean.
> > > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > > Before posting, read http://wiki.mailscanner.info/posting
> > >
> > > Support MailScanner development - buy the book off the website!
> >
> >
> > **********************************************************************
> >
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the system manager.
> >
> > This footnote confirms that this email message has been swept
> > for the presence of computer viruses and is believed to be clean.
> >
> > **********************************************************************
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
More information about the MailScanner
mailing list