On 9 Nov 2004 at 11:12, Bill Landry wrote:
Bill,

How do you handle if a particular rhsbl returns multiple return codes 
like 127.0.0 2; 127.0.0 4, etc and you want to pick which one to use -
 is it:
urirhsbl URIBL_EX  multiple.example.com. A 127.0.0.4
or 
urirhssub URIBL_EX  multiple.example.com. A 127.0.0.4
or
urirhssub URIBL_EX  multiple.example.com. A 8

I read the docs and am confused! 

Again - thanks

-Nick
 

From:                   "Bill Landry" <[EMAIL PROTECTED]>
To:                     <[EMAIL PROTECTED]>
Subject:                Re: [Declude.JunkMail] anyone know how to stop this? 
topic change
Date sent:              Tue, 9 Nov 2004 11:12:15 -0800
Send reply to:          [EMAIL PROTECTED]

> ----- Original Message ----- 
> From: "Nick" <[EMAIL PROTECTED]>
> 
> > A little SpamAssassin help please -
> >
> > > It does, but it can also be used with Declude as an RHSBL now:
> > > MAILPOLICE-FRAUD    fraud.rhs.mailpolice.com   127.0.0.2    3    0
> >
> > to see if I have this correct  for SA 3x
> >
> > In my local.cf
> >
> > urirhsbl URIBL_MP fraud.rhs.mailpolice.com. A
> > # A reecord lookup
> > header URIBL_MP eval:check_uridnsbl('URIBL_MP')
> > describe URIBL_MP Contains a URL listed in the MP SURBL blocklist
> > tflags URIBL_MP net score URIBL_MP 2.0
> > #value returned to SA
> >
> > I can use and RHSBL I like - correct?
> 
> Not quite.  Here's a sample of how to setup URIRHSBL support in SA:
> 
> urirhsbl  URIBL_MP_RHSBL block.rhs.mailpolice.com.   A
> body      URIBL_MP_RHSBL eval:check_uridnsbl('URIBL_MP_RHSBL')
> describe  URIBL_MP_RHSBL Contains a URL listed in the MP RHSBL
> blocklist tflags    URIBL_MP_RHSBL net score     URIBL_MP_RHSBL 2.0
> 
> This is for the MailPolice "block" list, which also incorporate the
> "fraud" list.  If you want to use "fraud" only, change the hostname
> above from "block" to "fraud".
> 
> Bill
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to