Hello, I uinderstand that spamdyke's RBL checking is fundamentally different to the system that RBLSMTPD uses in that spamdyke checks for any record whereas RBLSMTPD checks only for a TXT record.
Were I to use spamdyke then IPs would be blocked that I wish to accept
but spamassassin score as past offenders like this one for example-
dig 23.114.74.212.rbl.holtain.net txt
; <<>> DiG 9.5.2 <<>> 23.114.74.212.rbl.holtain.net txt
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;23.114.74.212.rbl.holtain.net. IN TXT
;; AUTHORITY SECTION:
rbl.holtain.net. 3600 IN SOA ns2.holtain.net.
niamh.holtain.net. 1305045513 7200 7200 604800 3600
dig 23.114.74.212.rbl.holtain.net a
; <<>> DiG 9.5.2 <<>> 23.114.74.212.rbl.holtain.net a
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8550
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;23.114.74.212.rbl.holtain.net. IN A
;; ANSWER SECTION:
23.114.74.212.rbl.holtain.net. 2016 IN A 127.0.0.3
;; AUTHORITY SECTION:
rbl.holtain.net. 236 IN NS ns2.holtain.net.
rbl.holtain.net. 236 IN NS ns3.crosswell.holtain.net.
;; ADDITIONAL SECTION:
ns2.holtain.net. 3600 IN A 217.146.107.58
ns3.crosswell.holtain.net. 3600 IN A 94.30.54.246
So I can score this address with this rule-
header NH_HOLTRBL_TWICE
eval:check_rbl_sub('holtrbl-lastexternal','127.0.0.3')
describe NH_HOLTRBL_TWICE Received from a source listed twice at
rbl.holtain.net
tflags NH_HOLTRBL_TWICE net
score NH_HOLTRBL_TWICE 1.6
--
Best regards,
Niamh mailto:[email protected]
pgpfmNvkBwOWx.pgp
Description: PGP signature
_______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
