RBLs

Mikael Syska mikael at syska.dk
Thu Sep 13 21:17:29 IST 2007


Hi,

Just wondering ... is this a busy system or private home server ? What 
are the mail flow ?

// ouT

Scott Silva wrote:
> Gareth spake the following on 9/12/2007 6:33 AM:
>> Has anyone configured spamassassin to use additional RBLs other than
>> what comes in the default configuration?
>>
>> I use Spamhaus and Spamcop in postfix but there are lots of alternatives
>> available and the best way to test them would be to configure them in
>> spamassassin and use the mailwatch report to see the % of ham and spam
>> it matches.
>>
> I have a few.
>
> ---snip----
>
>
> header   RCVD_IN_PSBL          eval:check_rbl('psbl', 
> 'psbl.surriel.com.')
> describe RCVD_IN_PSBL          Received via a relay in PSBL
> tflags   RCVD_IN_PSBL          net
> score    RCVD_IN_PSBL          0 1.50 0 1.50
>
> header   RCVD_IN_UCE_PFSM_1          eval:check_rbl('UCE_PFSM_1', 
> 'dnsbl-1.uceprotect.net')
> describe RCVD_IN_UCE_PFSM_1          Received via a relay in UCE_PFSM_1
> tflags   RCVD_IN_UCE_PFSM_1          net
> score    RCVD_IN_UCE_PFSM_1          0 1.50 0 1.50
>
> header   RCVD_IN_UCE_PFSM_2          eval:check_rbl('UCE_PFSM_2', 
> 'dnsbl-2.uceprotect.net')
> describe RCVD_IN_UCE_PFSM_2          Received via a relay in UCE_PFSM_2
> tflags   RCVD_IN_UCE_PFSM_2          net
> score    RCVD_IN_UCE_PFSM_2          0 1.50 0 1.50
>
> header   RCVD_IN_UCE_PFSM_3          eval:check_rbl('UCE_PFSM_3', 
> 'dnsbl-3.uceprotect.net')
> describe RCVD_IN_UCE_PFSM_3          Received via a relay in UCE_PFSM_3
> tflags   RCVD_IN_UCE_PFSM_3          net
> score    RCVD_IN_UCE_PFSM_3          0 1.50 0 1.50
>
>
> header   DNS_FROM_MPBULK_RHSBL    eval:check_rbl_from_host('mprhs', 
> 'bulk.rhs.mailpolice.com.')
> describe DNS_FROM_MPBULK_RHSBL    From: sender listed in 
> bulk.rhs.mailpolice.com
> tflags   DNS_FROM_MPBULK_RHSBL    net
> score    DNS_FROM_MPBULK_RHSBL    2.0
>
>
> urirhsbl  URIBL_BULK_MPRHS  bulk.rhs.mailpolice.com.   A
> body      URIBL_BULK_MPRHS  eval:check_uridnsbl('URIBL_BULK_MPRHS')
> describe  URIBL_BULK_MPRHS  Contains a URL listed in the MailPolice 
> bulk senders list
> tflags    URIBL_BULK_MPRHS  net
> score     URIBL_BULK_MPRHS  2.0
>
>
> urirhsbl  URIBL_PORN_MPRHS  porn.rhs.mailpolice.com.   A
> body      URIBL_PORN_MPRHS  eval:check_uridnsbl('URIBL_PORN_MPRHS')
> describe  URIBL_PORN_MPRHS  Contains a URL listed in the MailPolice 
> porn domains list
> tflags    URIBL_PORN_MPRHS  net
> score     URIBL_PORN_MPRHS  2.0
>
>
> urirhsbl  URIBL_FRAUD_MPRHS  fraud.rhs.mailpolice.com.   A
> body      URIBL_FRAUD_MPRHS  eval:check_uridnsbl('URIBL_FRAUD_MPRHS')
> describe  URIBL_FRAUD_MPRHS  Contains a URL listed in the MailPolice 
> fraud domains list
> tflags    URIBL_FRAUD_MPRHS  net
> score     URIBL_FRAUD_MPRHS  2.0
>
> header   RCVD_IN_SPAMCANNIBAL          eval:check_rbl('spamcannibal', 
> 'bl.spamcannibal.org.')
> describe RCVD_IN_SPAMCANNIBAL          Received via a relay in 
> SpamCannibal
> tflags   RCVD_IN_SPAMCANNIBAL          net
> score    RCVD_IN_SPAMCANNIBAL          0 1.50 0 1.50
>
> header   RCVD_IN_MSRBL          eval:check_rbl('msrbl', 
> 'combined.rbl.msrbl.net.')
> describe RCVD_IN_MSRBL          Received via a relay in MSRBL
> tflags   RCVD_IN_MSRBL          net
> score    RCVD_IN_MSRBL          0 1.50 0 1.50
>
> ---snip---
>
>
> Some are better than others, as I haven't had time to evaluate them 
> for a while.
>



More information about the MailScanner mailing list