On Jul 8, 2013, at 6:03 PM, Franck Martin <[email protected]> wrote:
> Resurrecting an old thread. > > As DMARC act on direct domain spoofing, I looked at how spamassassin could > help on non-direct domain spoofing. I noticed none of the rules in > http://spamassassin.apache.org/tests_3_3_x.html verify that domains found in > various part of an email are in spamhaus DBL or SURBL. > > An oversight or I missed something? I believe you are looking for this plugin: https://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html If you search the page you referred to for 'URI', you'll find a number of scores that utilize the URIDNSBL plugin and assign various scores. IIRC, the false positive rate on URIBL plugins is quite high, which is why the scores assigned are generally pretty low. Matt _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
