How to tell wich url that triggered in SURBL?

[Denis Beauchemin]

Alex Broens a écrit :
> On 9/21/2006 12:04 AM, Furnish, Trever G wrote:
>>> -----Original Message-----
>>> From: mailscanner-bounces at lists.mailscanner.info 
>>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin
>>> Sent: Monday, September 11, 2006 4:04 AM
>>> To: mailscanner at lists.mailscanner.info
>>> Subject: Re: How to tell wich url that triggered in SURBL?
>>>
>>> Alex Broens wrote:
>>>
>>>> Seems its a MailScanner special.
>>>> (makes it hard to debug when you have a FP but that's the way it is)
>>> Humm.. but how do people define in the configs that the actual 
>>> domain should be listed in the header of the message? All i want is 
>>> SA or MS to add the following to my header:
>>>
>>> Contains an URL listed in the JP blocklist
>>>  >>    *      [URIs: site.com]  < ----- This line
>>>
>>> Today i only see the actual points, but i want to know what site 
>>> triggered those points. How can i do that?
>>
>> Unless I'm misunderstanding what Alex was trying to tell you, he meant
>> that you can't do that via MailScanner+SpamAssassin.  If you're seeing
>> signs that people are doing that using SA on the SA lists, then they're
>> probably using SpamAssassin without using MailScanner.
>>
>> MailScanner uses SpamAssassin as a set of perl libraries, which is very
>> different -- much of what you might read on the SA lists or in the SA
>> manual pages doesn't apply.
>
> Trever,
>
> that indeed is what I meant.
>
> Maybe Julian is willling to add (if technically possible) support for 
> these multiline reports.
>
> There's a couple of other report features which are ignored by 
> MailScanner which could come in very handy, eg:
>
> add_header all Relays-Untrusted _RELAYSUNTRUSTED_  # Makes good info 
> for rules.
>
> Alex
>
>
You can get that listing with MailScanner.  As I said earlier, I get the 
following in my emails:

4.0 URIBL_JP_SURBL         Has URI in JP at http://www.surbl.org/lists.html
                           [URIs: asreco.com]

You have to modify spam.assassin.prefs.conf:
clear-report-template
report Details from message:   (_HITS_ points, _REQD_ reqd)
report _SUMMARY_

The previous text is not complete but it shows most variables I use there.

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x62252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3595 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060921/b298e320/smime.bin