I should have clarified, the example I give below is for SA 3.0.1, since
they changed the action from "header" to the more appropriate "body" setting
between SA 3.0.0 & 3.0.1. So, you have it correct if you are using anything
before 3.0.1.
Bill
----- Original Message -----
From: "Bill Landry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 09, 2004 11:12 AM
Subject: Re: [Declude.JunkMail] anyone know how to stop this? topic change
> ----- Original Message -----
> From: "Nick" <[EMAIL PROTECTED]>
>
> > A little SpamAssassin help please -
> >
> > > It does, but it can also be used with Declude as an RHSBL now:
> > > MAILPOLICE-FRAUD fraud.rhs.mailpolice.com 127.0.0.2 3 0
> >
> > to see if I have this correct for SA 3x
> >
> > In my local.cf
> >
> > urirhsbl URIBL_MP fraud.rhs.mailpolice.com. A
> > # A reecord lookup
> > header URIBL_MP eval:check_uridnsbl('URIBL_MP')
> > describe URIBL_MP Contains a URL listed in the MP SURBL blocklist
> > tflags URIBL_MP net
> > score URIBL_MP 2.0
> > #value returned to SA
> >
> > I can use and RHSBL I like - correct?
>
> Not quite. Here's a sample of how to setup URIRHSBL support in SA:
>
> urirhsbl URIBL_MP_RHSBL block.rhs.mailpolice.com. A
> body URIBL_MP_RHSBL eval:check_uridnsbl('URIBL_MP_RHSBL')
> describe URIBL_MP_RHSBL Contains a URL listed in the MP RHSBL blocklist
> tflags URIBL_MP_RHSBL net
> score URIBL_MP_RHSBL 2.0
>
> This is for the MailPolice "block" list, which also incorporate the
"fraud"
> list. If you want to use "fraud" only, change the hostname above from
> "block" to "fraud".
>
> Bill
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
