Fwd: The Spamhaus CSS list

[Julian Field]

Here is one you might all be interested in (with thanks to Tony Finch):

Spamhaus have announced a new blacklist aimed specifically at showshoe
spammers. "Snowshoe" is a technique where spammers use large numbers of
superficially legitimate hosts that each send a small quantitiy of spam,
in an attempt to spread the spam load and keep each host below the radar.

The new CSS list is a component of the SBL (and therefore also the sbl-xbl
and ZEN lists) so many setups will use it automatically.

http://www.spamhaus.org/news.lasso?article=646

However note that SpamAssassin will not, since its current rules do not
recognise a 127.0.0.3 result from the ZEN blacklist. You can add the
following to your local.cf to treat CSS matches as equivalent to other SBL
matches.

header RCVD_IN_SBL eval:check_rbl_sub('zen', '127.0.0.[23]')


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.