Hi, On Wed, 21 Jul 2004 09:00:03 -0400 (EDT) Pat Traynor <[EMAIL PROTECTED]> wrote:
> On Wed, 21 Jul 2004, Ryan Thompson wrote: > > > Thomas Kinghorn wrote to [EMAIL PROTECTED]: > > > > [ ... ] > > > > http://www.surbl.org/ > > > > Please. > [...] > That said... We could probably give you a more useful, less terse response. SURBL's had a lot of discussion lately so I can see how you'd get a two word response. > Like the starter of this thread, a lot of spam has been getting through, > lately. I'm running SA version 2.60. From the www.surbl.org website: > > "The SpamAssassin 3.0 plug-in URIDNSBL, [ ... ]" > > But looking on spamassassin.apache.org, it says: > > "Latest (non-ASF) release: 2.63" Anyway, I searched Google for "SURBL SpamAssassin 2.63", the second link pointed at http://www.surbl.org/quickstart.html which linked to the SA 2.63 plugin (patch actually; SA 2.63 doesn't support plugins) at http://sourceforge.net/projects/spamcopuri/ Once that's installed, you need to adjust /etc/mail/spamassassin/spamcop_uri.cf to point at a few RHSBLs and restart spamd if you use spamc/spamd. I use the following: ---- ##### SpamCop uri SC_URI_RBL eval:check_spamcop_uri_rbl('sc.surbl.org','127.0.0.2') describe SC_URI_RBL URI's domain appears in spamcop database at sc.surbl.org tflags SC_URI_RBL net score SC_URI_RBL 4.0 ##### Bill Stearn's blacklist uri WS_URI_RBL eval:check_spamcop_uri_rbl('ws.surbl.org','127.0.0.2') describe WS_URI_RBL URI's domain appears in ws.surbl.org tflags WS_URI_RBL net score WS_URI_RBL 3.0 ##### Outblaze uri OB_URI_RBL eval:check_spamcop_uri_rbl('ob.surbl.org','127.0.0.2') describe OB_URI_RBL URI's domain appears in ob.surbl.org tflags OB_URI_RBL net score OB_URI_RBL 4.0 ##### AbuseButler uri AB_URI_RBL eval:check_spamcop_uri_rbl('ab.surbl.org','127.0.0.2') describe AB_URI_RBL URI's domain appears in ab.surbl.org tflags AB_URI_RBL net score AB_URI_RBL 5.0 ##### BigEvil uri BE_URI_RBL eval:check_spamcop_uri_rbl('be.surbl.org','127.0.0.2') describe BE_URI_RBL URI's domain appears in be.surbl.org tflags BE_URI_RBL net score BE_URI_RBL 4.0 ---- There's probably a more efficient way of doing this by querying a combined list and checking for different responses (127.0.0.x) but I haven't looked into that yet. hth, -- Bob
