On Thu, 2012-05-24 at 11:11 +0100, Jeremy Morton wrote:
> Where would the rules for these blocklists be, so I can check my rules
> files to see whether they're there?
>
In later rulesets (forget when they added it) it looks something like
this:
ifplugin Mail::SpamAssassin::Plugin::DNSEval
header RCVD_IN_BRBL_LASTEXT
eval:check_rbl('brbl-lastexternal','bb.barracudacentral.org')
tflags RCVD_IN_BRBL_LASTEXT net
endif
And tends to live in 72_active.cf
Grep for it with:
grep -Hl -r "RCVD_IN_BRBL_LASTEXT" /usr/share/spamassassin/*
or
grep -Hl -r "RCVD_IN_BRBL_LASTEXT" /*
if you get stuck (it's slow this way, but if you don't know where your
rules are, this will tell you if it's there or not)
If it's not there just add it to your local.cf file with something like
this:
header BARRACUDA_BL eval:check_rbl('Barracuda',
'b.barracudacentral.org.')
describe BARRACUDA_BL listed by BARRACUDA
tflags BARRACUDA_BL net
score BARRACUDA_BL 4.5
It's also worth adding that taking out the Spamhaus WHITELIST is worth
doing - it's rubbish and wastes a DNS lookup:
score DKIMDOMAIN_IN_DWL 0
On the subject of Spamhaus, if you are using big name resolvers (like
Google DNS servers or similar) then you will not get reliable results.
Spamhaus decided to block these and always return clear even if the IP
address is on one of their lists. Personally I've lost most of my
respect for Spamhaus, and find the Barracuda list much, much better in
any case.
