On Sat, 2 Mar 2019 08:45:57 -0600 John Schmerold wrote: > I subscribed to uribl's datafeed service and have read their usage > documentation on http://uribl.com/usage.shtml > > I think I understand how it works, but I am confused by how things > work with the default 25_uribl.cf file if I want to change the > rhsbl_zone to _CUSTID.df.uribl.com > > We don't want the URIBL rules in 25_uribl and my custom rules to fire > because that would cause 2x the lookup causing inefficient resource > utilization. If I use local.cf to set: > score URIBL_* 0.00 > Will this stop the URIBL rules from firing? > > OR, using BLACK as an example, if I put this in local.cf , will it > over-ride 25_uribl.cf: > urirhssub URIBL_BLACK _CUSTID.df.uribl.com. A 2 > body URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK') > describe URIBL_BLACK Contains an URL listed in the URIBL > blacklist > tflags URIBL_BLACK net > score URIBL_BLACK 6.00 > reuse URIBL_BLACK >
Either way should work. Overriding is cleaner if you want to keep the default score for one or more rules. You don't need to override the describe line. 6.00 seems a bit high to me since it doesn't a negligible FP rate.
