Re: [SAtalk] Rbl checks

[Matt Kettler]

At 08:28 PM 9/8/03 -0400, Scott Kopel wrote:
It's clear that my SA is now performing rbl checks
and I apologize for being slow, but I still don't see how to configure my 
local.cf to get SA to perform checks at specific rbl lists eg spamcop.net

I checked the suggested urls, but none of them shows how they work in SA

if someone could paste in or attach a sample local.cf with some rbls 
configured, I think that would help.
thanks
Well, spamcop is already in SA, but is turned off by default because it's 
not free for everyone to use without making a donation.

Spamcop can be turned on just by setting the score to something that's not 0.

        score RCVD_IN_BL_SPAMCOP_NET 1.5

If you're qualified to use MAPS's RBLs you can turn those on the same way:

        score RCVD_IN_DUL 0.5
        score RCVD_IN_DUL_FH 0.5
        score RCVD_IN_RBL 1.5
        score RCVD_IN_RSS 1.5
Adding other ones is a bit tricky, but if you name a specific BL someone 
can probably post a rule that works for it. However by default SA has a lot 
of blacklists enabled. as of 2.55 the list is:

        RCVD_IN_SBL
        RCVD_IN_ORBS
        RCVD_IN_OPM
        RCVD_IN_DSBL
        RCVD_IN_RFCI
        HABEAS_HIL
        RCVD_IN_NJABL
        X_NJABL_OPEN_PROXY
These two are enabled, but if you have bayes they got a zero score from the 
GA (ie: they were not significant to the results)
        RCVD_IN_UNCONFIRMED_DSBL
        X_NJABL_DIALUP

These two are supported, but zero by default. I suspect due to poor accuracy.
        RCVD_IN_RELAYS_ORDB_ORG
        RCVD_IN_MULTIHOP_DSBL
And the following BL's are enabled in 2.55 but should be manually 0'ed out 
since OSIRUSOFT is no more (note: these are gone in 2.60 rc3)
        RCVD_IN_OSIRUSOFT_COM
        X_OSIRU_OPEN_RELAY
        X_OSIRU_SPAMWARE_SITE

These three OSIRUSOFT lists are in the code but are zero by default so you 
shouldn't have to manually do that.
        X_OSIRU_DUL
        X_OSIRU_DUL_FH
        X_OSIRU_SPAM_SRC

Also one "good sender" DNS whitelist is included
        RCVD_IN_BONDEDSENDER
btw I am using SA with Mailscanner and local.cf is linked to their file 
called spam.assassin.prefs.conf
That's unnecessary. The MailScanner spam.assasssin.prefs.conf takes place 
of user_prefs, the /etc/mail/spamassassin/local.cf is still parsed normally 
even when run under MailScanner.

By linking the two you are forcing SA to parse the same config file twice. 
While this won't cause problems, it's completely pointless.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk