Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

[Benny Pedersen]

David Jones skrev den 2018-02-05 15:09:

ifplugin Mail::SpamAssassin::Plugin::DNSEval
header          __RCVD_IN_BRBL  eval:check_rbl('brbl',
'bb.barracudacentral.org')
tflags          __RCVD_IN_BRBL  net

header          __RCVD_IN_BRBL_2        eval:check_rbl_sub('brbl', 
'127.0.0.2')
meta            RCVD_IN_BRBL    __RCVD_IN_BRBL_2 && 
!RCVD_IN_BRBL_LASTEXT
describe        RCVD_IN_BRBL    Received is listed in Barracuda RBL
bb.barracudacentral.org
score           RCVD_IN_BRBL    1.2
tflags          RCVD_IN_BRBL    net

header          RCVD_IN_BRBL_LASTEXT
eval:check_rbl('brbl-lastexternal', 'bb.barracudacentral.org')
describe        RCVD_IN_BRBL_LASTEXT    Last external is listed in
Barracuda RBL bb.barracudacentral.org
score           RCVD_IN_BRBL_LASTEXT    2.2
tflags          RCVD_IN_BRBL_LASTEXT    net

endif

this rule makes 2 dns querys, waste of cpu performance, i would suggest 
to drop the lastextnal, so its only if ip is listed yes or no, 50% dns 
querys saved, and still same hits on listed ips, why do we need to help 
spammers ?

anyway i dont use it, above rule is only optimized for datafeeds, it 
will drain non datafeed clients into hell

can lastexternal be solved to only use one query ?

as is i think spamassassin should be changed so it can if not already