Re: [SAtalk] RBL-PLUS screws with SA intent

2003-06-19 Thread Daniel Quinlan
Jason Haar <[EMAIL PROTECTED]> writes:

> Has anyone using rbl-plus got a better way of integrating it with SA other
> than manually separating it back out into separate DUL, RSS, etc feeds again?
>
> The problem with rbl-plus is that it lists all DUL,RSS,etc DNS domains
> within it's one domain - which means that when you activate RCVD_IN_RBL in
> SA, you end up with SA tagging as spam messages sent from DUL users via
> their home company to you. SA only "thinks" it's doing RBL lookups - not DUL
> - but with rbl-plus it's actually doing both.
>
> I was wondering if there's a way to tell SA to ignore RBL matches if the
> returned IP address is 127.1.0.2 - which is the one assosiated with DUL?

SA 2.60 will have RBL+ rules that you can use (uncomment them and
comment out the standard MAPS rules).  The syntax of the rules is
different, so unless you're willing to figure out how to use them in
2.55, you might as well just wait.

And yes, since I don't have RBL+, I have no idea whether they'll
actually work, so if you want to try 2.60-cvs and see if it works now,
it might not be a bad idea.

Daniel

-- 
Daniel Quinlan anti-spam (SpamAssassin), Linux, and open
http://www.pathname.com/~quinlan/   source consulting (looking for new work)


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


[SAtalk] RBL-PLUS screws with SA intent

2003-06-17 Thread Jason Haar
Hi there

Has anyone using rbl-plus got a better way of integrating it with SA other
than manually separating it back out into separate DUL, RSS, etc feeds again?

The problem with rbl-plus is that it lists all DUL,RSS,etc DNS domains
within it's one domain - which means that when you activate RCVD_IN_RBL in
SA, you end up with SA tagging as spam messages sent from DUL users via
their home company to you. SA only "thinks" it's doing RBL lookups - not DUL
- but with rbl-plus it's actually doing both.

I was wondering if there's a way to tell SA to ignore RBL matches if the
returned IP address is 127.1.0.2 - which is the one assosiated with DUL?

[man, could I use any more acronyms? (AKA: MCIUAMA?)]

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk