On 11/6/10 3:19 AM, Bill Landry wrote:
On 11/5/2010 11:40 PM, Dan Mahoney, System Admin wrote:
All,

Has anyone come up with a ruleset yet to score against the new spamhaus
whitelists, and deduct points appropriately?

You could try something like:
don't forget the tflag 'noautolearn' since there are HIGHLY LIKELY to send emails that would otherwise trigger SA.
(which is why they are in this list.)


header   SPAMHAUS_SWL eval:check_rbl('SPAMHAUS_SWL', 'swl.spamhaus.org.')
describe SPAMHAUS_SWL Sender is whitelised by Spamhaus
tflags   SPAMHAUS_SWL net nice
score    SPAMHAUS_SWL -2.5

urirhsbl SPAMHAUS_DWL _vouch.dwl.spamhaus.org. A
body     SPAMHAUS_DWL eval:check_uridnsbl('SPAMHAUS_DWL')
describe SPAMHAUS_DWL Domain is whitelisted by Spamhaus
tflags   SPAMHAUS_DWL net nice
score    SPAMHAUS_DWL -2.5

Set the scores to your own liking.

Bill


--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation

   * Certified SNORT Integrator
   * 2008-9 Hot Company Award Winner, World Executive Alliance
   * Five-Star Partner Program 2009, VARBusiness
   * Best in Email Security,2010: Network Products Guide
   * King of Spam Filters, SC Magazine 2008

______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________

Reply via email to