Modification, since I was not thinking, but Declude JunkMail does not
support bitmasked responses.  So instead of using the multi zone, you will
need to use:

SURBL_AB  rhsbl ab.surbl.org    127.0.0.2 1 0
SURBL_JP  rhsbl jp.surbl.org    127.0.0.2 1 0
SURBL_OB  rhsbl ob.surbl.org    127.0.0.2 1 0
SURBL_PH  rhsbl ph.surbl.org    127.0.0.2 1 0
SURBL_SC  rhsbl sc.surbl.org    127.0.0.2 1 0
SURBL_WS  rhsbl ws.surbl.org    127.0.0.2 1 0

Which will require six different queries if you want to use all SURBL lists.

Bill
----- Original Message ----- 
From: Bill Landry
To: [EMAIL PROTECTED]
Sent: Tuesday, November 23, 2004 12:47 AM
Subject: Re: [Declude.JunkMail] SURBL as RHSBL


Markus, if you want to test against all of the SURBLs, since it's only a
single query to the multi zone, use:

SURBL_AB  rhsbl multi.surbl.org    127.0.0.32 1 0
SURBL_JP  rhsbl multi.surbl.org    127.0.0.64 1 0
SURBL_OB  rhsbl multi.surbl.org    127.0.0.16 1 0
SURBL_PH  rhsbl multi.surbl.org    127.0.0.8 1 0
SURBL_SC  rhsbl multi.surbl.org    127.0.0.2 1 0
SURBL_WS  rhsbl multi.surbl.org    127.0.0.4 1 0

AB = AbuseButler data
JP = Combination of Prolocation data & Joe Wein's SpamSpy data
OB = OutBlaze data
PH = Combination of MailPolice "Fraud" list data & MailSecurity "Phishing"
list data
SC = SpamCop top 200 hits data
WS = William Stearns & submitter data

I have been testing this for about an hour, and am getting a few hits.
We'll see how it goes over the next 24 hours...


Bill
----- Original Message ----- 
From: Markus Gufler
To: [EMAIL PROTECTED]
Sent: Monday, November 22, 2004 11:41 PM
Subject: RE: [Declude.JunkMail] SURBL as RHSBL


Is this the correct configruation line for doing this?

SURBLS-RHSBL  rhsbl %MAILFROM%.sc.surbl.org  127.0.0.2 5 0


Markus


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to