Skipping SpamAssassin if sender is on an RBL

Vlad Mazek v at vladville.com
Fri Feb 8 12:33:25 GMT 2008


Running MailScanner 4.62.9

-Vlad

On 2/8/08, Vlad Mazek <v at vladville.com> wrote:
>
> Richard,
>
> You're right - it did hit the cache! I totally missed that. Spam actions
> are to store, both spam and high scoring spam.
>
> But still, it passes it through SA:
>
> RBL checks: m18CFjRV010282 found in SBL+XBL
> Feb  8 07:31:56 MailScanner[16681]: Message m18CFjRV010282 from
> 220.70.102.23 (volunteereda6 at tahitiantreasure.com) to
> severnsidefabrics.co.uk is spam, SBL+XBL, SpamAssassin (not cached, score=
> 27.932, required 5, autolearn=disabled, OUTLOOK_3416 1.70,
> RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E8_51_100 1.50, RAZOR2_CHECK
> 0.50, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL 2.90, RDNS_NONE 0.10,
> TVD_SPACE_RATIO 2.90, URIBL_AB_SURBL 1.61, URIBL_BLACK 1.96,
> URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, URIBL_SBL 2.47, URIBL_SC_SURBL
> 2.52, URIBL_WS_SURBL 2.10)
>
> That one was not cached, same result...
>
> -Vlad
>
> On 2/7/08, Richard Frovarp <Richard.Frovarp at sendit.nodak.edu> wrote:
> >
> > Vlad Mazek wrote:
> > > Nope, still gets processed by MailScanner:
> > >
> > > Feb  7 17:18:45 MailScanner[18224]: RBL checks: m17M9lxS016045 found
> > > in SBL+XBL
> > > Feb  7 17:18:46 inbound42 MailScanner[18224]: SpamAssassin cache hit
> > > for message m17M9lxS016045
> > > Feb  7 17:18:46 MailScanner[18224]: Message m17M9lxS016045 from
> > > *MailScanner warning: numerical links are often malicious:*
> > > 75.63.44.11 <http://75.63.44.11> (ka at creativeholidays.com.au
> > > <mailto:ka at creativeholidays.com.au>) to rmel.org <http://rmel.org> is
> > > spam, SBL+XBL, SpamAssassin (cached, score=23.378, required 5,
> > > autolearn=disabled, RAZOR2_CF_RANGE_51_100 0.50,
> > > RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CF_RANGE_E8_51_100 1.50,
> > > RAZOR2_CHECK 0.50, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL 2.90,
> > > STOX_REPLY_TYPE 0.00, TVD_FINGER_02 2.72, URIBL_BLACK 1.96,
> > > URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, URIBL_SC_SURBL 2.52,
> > > URIBL_WS_SURBL 2.10)
> > >
> > > Notice that it still passes it through SpamAssassin.
> > >
> > > I have the the following in my MailScanner.conf:
> > >
> > > Spam List = SBL+XBL
> > > Spam Lists To Be Spam = 1
> > > Spam Lists To Reach High Score = 1
> > >
> > > -Vlad
> >
> > Actually, that one didn't get passed through SpamAssassin. It hit the
> > cache. Not sure how that is handled differently. What version of
> > MailScanner? What are your High Scoring Spam Actions?
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
>
>
>
> --
>
> -Vlad




-- 

-Vlad
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080208/73fffe2c/attachment.html


More information about the MailScanner mailing list