First thing I did :) There doesn't seem to be anything, not even check_uridnsbl or anything even with the rbl pattern search.<br><br>I am at a loss as to what is launching these queries but its sure trashing this one site for some reason.
<br><br>-Vlad<br><br><div><span class="gmail_quote">On 8/14/07, <b class="gmail_sendername">Richard Frovarp</b> <<a href="mailto:Richard.Frovarp@sendit.nodak.edu">Richard.Frovarp@sendit.nodak.edu</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
grep through the rules. URIBLs seem to be in 25_uribl.cf and DNSBLs seem<br>to be in 20_dnsbl_tests.cf<br><br>Vlad Mazek wrote:<br>> Thing is, skip_rbl_checks =1 would skip them all, I just want to<br>> restrict which ones are being queried.
<br>><br>> Here are the queries that are launched by MailScanner:<br>> [2351] dbg: dns: URIBL_RED lookup start<br>> [2351] dbg: dns: URIBL_GREY lookup start<br>> [2351] dbg: dns: WHOIS_SECUREWHOIS lookup start
<br>> [2351] dbg: dns: WHOIS_MYPRIVREG lookup start<br>> [2351] dbg: dns: WHOIS_NETSOLPR lookup start<br>> [2351] dbg: dns: WHOIS_AITPRIV lookup start<br>> [2351] dbg: dns: URIBL_SC_SURBL lookup start<br>> [2351] dbg: dns: URIBL_AB_SURBL lookup start
<br>> [2351] dbg: dns: WHOIS_CONTACTPRIV lookup start<br>> [2351] dbg: dns: WHOIS_NAMEKING lookup start<br>> [2351] dbg: dns: WHOIS_PRIVPROT lookup start<br>> [2351] dbg: dns: WHOIS_WHOISGUARD lookup start<br>
> [2351] dbg: dns: URIBL_PH_SURBL lookup start<br>> [2351] dbg: dns: URIBL_BLACK lookup start<br>> [2351] dbg: dns: WHOIS_PRIVACYPOST lookup start<br>> [2351] dbg: dns: URIBL_RHS_DOB lookup start<br>> [2351] dbg: dns: URIBL_JP_SURBL lookup start
<br>> [2351] dbg: dns: URIBL_WS_SURBL lookup start<br>> [2351] dbg: dns: URIBL_OB_SURBL lookup start<br>> [2351] dbg: dns: WHOIS_DMNBYPROXY lookup start<br>> [2351] dbg: dns: WHOIS_REGISTERFLY lookup start<br>
> [2351] dbg: dns: WHOIS_UNLISTED lookup start<br>> [2351] dbg: dns: WHOIS_MONIKER_PRIV lookup start<br>> [2351] dbg: dns: URIBL_SBL lookup start<br>><br>> How do I find out which rule/definition is causing all these lookups
<br>> to launch?<br>><br>> -Vlad<br>><br>> On 8/9/07, *Steve Campbell* <<a href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</a><br>> <mailto:<a href="mailto:campbell@cnpapers.com">campbell@cnpapers.com
</a>>> wrote:<br>><br>> I believe you can do this, but my versions are a little old:<br>><br>> In MailScanner.conf, try setting the following:<br>><br>> Spam List =<br>> Spam Domain List =
<br>><br>> This turns off RBLs and the like in MS.<br>><br>> In either <a href="http://mailscanner.cf">mailscanner.cf</a> <<a href="http://mailscanner.cf">http://mailscanner.cf</a>>, <a href="http://local.cf">
local.cf</a><br>> <<a href="http://local.cf">http://local.cf</a>>, or spam.assassin.prefs.conf, set the<br>> following:<br>> skip_rbl_checks = 1<br>><br>> This turns off RBLs in SA.<br>
><br>> Make sure they are not commented if they already exist.<br>><br>> I may be wrong on this, so anyone can correct me if I am.<br>><br>> Steve Campbell<br>><br>> Mikael Syska wrote:
<br>> > Scott Silva wrote:<br>> >> Vlad Mazek spake the following on 8/9/2007 9:59 AM:<br>> >><br>> >>> I'm sorry I am just not following; my <a href="http://mailscanner.cf">
mailscanner.cf</a><br>> <<a href="http://mailscanner.cf">http://mailscanner.cf</a>><br>> >>> <<a href="http://mailscanner.cf">http://mailscanner.cf</a>> has only one line:<br>> >>>
<br>> >>> dns_available yes<br>> >>><br>> >>> Yet, it seems to be querying the external RBL's:<br>> >>> SpamAssassin (not cached, score= 16.885, required 5,
<br>> >>> autolearn=disabled,<br>> >>> FH_RELAY_NODNS 1.25, HELO_EQ_IP_ADDR 1.12, HTML_MESSAGE 0.00,<br>> >>> HTML_OBFUSCATE_05_10 0.57, MIME_HTML_ONLY 1.67,<br>> RCVD_IN_BL_SPAMCOP_NET
<br>> >>> 2.19, RCVD_IN_PBL 0.51, RDNS_NONE 0.10, URIBL_BLACK 1.96,<br>> >>> URIBL_JP_SURBL<br>> >>> 2.86, URIBL_OB_SURBL 2.13, URIBL_SC_SURBL 2.52<br>> >>><br>
> >>> My question is simply where/what is telling SpamAssassin to<br>> query all<br>> >>> these RBLs because my MailScanner.cf doesn't list any RBLs to<br>> be called<br>> >>> (line is commented out completely)
<br>> >>><br>> >> Spamassassin has several tests it does all by itself that are<br>> >> indepentent of<br>> >> mailscanner. Spamassassin tests rbl's and gives a score that is
<br>> added<br>> >> together. When you use rbl's in mailscanner they are just<br>> flagged as<br>> >> spam if<br>> >> they hit, independent of how reliable a rbl might be.
<br>> >><br>> >> As you were told in the last mail, if you do not want rbl tests in<br>> >> spamassassin, you have to add a line for each one in<br>> <a href="http://mailscanner.cf">
mailscanner.cf</a> <<a href="http://mailscanner.cf">http://mailscanner.cf</a>>.<br>> >> As an example, if you didn't want to test for<br>> RCVD_IN_BL_SPAMCOP_NET<br>> >> you add the following line;
<br>> >> score RCVD_IN_BL_SPAMCOP_NET 0<br>> >><br>> >> Does this clear things up a little more?<br>> >><br>> > Little off-topic:<br>> > Can't the lookups be completely disabled, so its possible to
<br>> avoid the<br>> > the DNS query ?<br>> ><br>> > As I understand SA, it will still make the lookup even if the<br>> score is<br>> > 0 ... or am I wrong here ?<br>> >
<br>> > // ouT<br>><br><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">
http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br><br>Support MailScanner development - buy the book off the website!
<br></blockquote></div><br><br clear="all"><br>-- <br>-Vlad