Spamhaus

[Brendan Pirie]

I set this up recently on a new mail gateway, with:

score            RCVD_IN_SBL  0.0
score            RCVD_IN_XBL  0.0
score            RCVD_IN_PBL  0.0

in spam.assassin.prefs.conf (mailscanner.cf is a symlink to this file) 
(the whitespace is spaces, not tabs, if it matters, but that appears to 
be the way other entries in the file are formatted)

After reading this, on a whim, I decided to run a mailwatch report on 
each of these rules, via "Spam Report contains 'RCVD_IN_PBL'" and lo and 
behold I got thousands of results for each of the three tests.  I'm 
confused.  Shouldn't these tests be disabled with the above settings?

Brendan


shuttlebox wrote:
> On Thu, Mar 20, 2008 at 4:24 PM, Eric Merkel <merkel at metalink.net> wrote:
>>
>> I got a letter today from spamhaus stating that we are using their DNSBL and
>> need to start paying for it. I wasn't even aware we were using it but then
>> remembered that mailscanner is setup to use. I have a call into them to see
>> what their pricing is so I am not sure it is even worth it at this point.
> 
> Check that you have DNS caching in your network so you don't call them
> unnecessary.
> 
>> So if I want to disable using spamhaus, do I just need to comment out the
>> following lines in the spam.lists.conf?
>>
>> spamhaus.org                    sbl.spamhaus.org.
>> spamhaus-XBL                    xbl.spamhaus.org.
>> spamhaus-PBL                    pbl.spamhaus.org.
>> spamhaus-ZEN                    zen.spamhaus.org.
>> SBL+XBL                         sbl-xbl.spamhaus.org.
> 
> No, that's just the file that defines the spam lists, it's the option
> "Spam List" in MailScanner.conf you want to check. It should be an
> empty line if you're checking RBLs in SA.
> 
>> If I am also using spamassassin, do I need to change it's config to stop
>> using it? I am running a recent copy of MailScanner on Centos 5.1.
> 
> Add this to mailscanner.cf (usually in /etc/mail/spamassassin):
> 
> score RCVD_IN_SBL 0
> score RCVD_IN_XBL 0
> score RCVD_IN_PBL 0
> 
> You may have more of these, grep for RCVD in the file 50_scores.cf in
> the SA rule dir (might be something like /usr/share/spamassassin).
>