So you want to accept RBL entries that have A records but not TXT
records, then use SpamAssassin to score them higher? Interesting.
With spamdyke, you could still do this. Normally it checks for both A
and TXT records, but you can use the "dns-query-type-rbl" option to only
check TXT records. Then keep your existing SpamAssassin configuration
to put the higher score on messages that have A records on the RBL.
http://www.spamdyke.org/documentation/README.html#DNS_QUERIES
Note, however, that some RBLs only use A records, so using this option
will render those RBLs useless.
-- Sam Clippinger
On 5/10/11 12:27 PM, Niamh Holding wrote:
>
> Hello,
>
> I uinderstand that spamdyke's RBL checking is fundamentally different
> to the system that RBLSMTPD uses in that spamdyke checks for any
> record whereas RBLSMTPD checks only for a TXT record.
>
> Were I to use spamdyke then IPs would be blocked that I wish to accept
> but spamassassin score as past offenders like this one for example-
>
> dig 23.114.74.212.rbl.holtain.net txt
>
> ;<<>> DiG 9.5.2<<>> 23.114.74.212.rbl.holtain.net txt
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4354
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;23.114.74.212.rbl.holtain.net. IN TXT
>
> ;; AUTHORITY SECTION:
> rbl.holtain.net. 3600 IN SOA ns2.holtain.net.
> niamh.holtain.net. 1305045513 7200 7200 604800 3600
>
> dig 23.114.74.212.rbl.holtain.net a
>
> ;<<>> DiG 9.5.2<<>> 23.114.74.212.rbl.holtain.net a
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8550
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
>
> ;; QUESTION SECTION:
> ;23.114.74.212.rbl.holtain.net. IN A
>
> ;; ANSWER SECTION:
> 23.114.74.212.rbl.holtain.net. 2016 IN A 127.0.0.3
>
> ;; AUTHORITY SECTION:
> rbl.holtain.net. 236 IN NS ns2.holtain.net.
> rbl.holtain.net. 236 IN NS ns3.crosswell.holtain.net.
>
> ;; ADDITIONAL SECTION:
> ns2.holtain.net. 3600 IN A 217.146.107.58
> ns3.crosswell.holtain.net. 3600 IN A 94.30.54.246
>
>
>
> So I can score this address with this rule-
>
> header NH_HOLTRBL_TWICE
> eval:check_rbl_sub('holtrbl-lastexternal','127.0.0.3')
> describe NH_HOLTRBL_TWICE Received from a source listed twice
> at rbl.holtain.net
> tflags NH_HOLTRBL_TWICE net
> score NH_HOLTRBL_TWICE 1.6
>
>
>
>
>
>
>
> _______________________________________________
> spamdyke-users mailing list
> [email protected]
> http://www.spamdyke.org/mailman/listinfo/spamdyke-users
>
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
