Hi, Alex - Check out the FROM_FMBLA_NEWDOM rules. Are you seeing any emails > hitting them? >
Yes, got them, from here: https://github.com/fmbla/spamassassin/blob/master/FMBLA.cf Didn't hit. Jul 8 18:02:53.537 [4189153] dbg: dnseval: checking [sendersrv.com] / FROM_NEWDOMAIN_FMBLA / blfmbla / bl.fmb.la Jul 8 18:02:53.537 [4189153] dbg: dns: launching rule FROM_NEWDOMAIN_FMBLA, set blfmbla, type A, subtest 127.0.0.2 Jul 8 18:02:53.537 [4189153] dbg: async: query 41110/IN/A/ sendersrv.com.bl.fmb.la already underway, adding no.4, rules: FROM_NEWDOMAIN_FMBLA Jul 8 18:02:53.537 [4189153] dbg: dnseval: checking [smartlendingclub.com] / FROM_NEWDOMAIN_FMBLA / blfmbla / bl.fmb.la Jul 8 18:02:53.538 [4189153] dbg: dns: launching rule FROM_NEWDOMAIN_FMBLA, set blfmbla, type A, subtest 127.0.0.2 Jul 8 18:02:53.538 [4189153] dbg: async: query 43398/IN/A/ smartlendingclub.com.bl.fmb.la already underway, adding no.4, rules: FROM_NEWDOMAIN_FMBLA Jul 8 18:02:53.638 [4189153] dbg: async: calling callback on key A/ sendersrv.com.bl.fmb.la, rules: FROM_NEWDOMAIN_FMBLA Jul 8 18:02:53.639 [4189153] dbg: async: calling callback on key A/ smartlendingclub.com.bl.fmb.la, rules: FROM_NEWDOMAIN_FMBLA Jul 8 18:02:53.782 [4189153] dbg: async: completed in 0.137 s: DNSBL, A/ sendersrv.com.bl.fmb.la, rules: FROM_URIBL_COMMUNICADO_FMBLA, FROM_URIBL_FMBLA, FROM_NEWDOMAIN_14_FMBLA, FROM_NEWDOMAIN_FMBLA Jul 8 18:02:53.787 [4189153] dbg: async: completed in 0.137 s: DNSBL, A/ smartlendingclub.com.bl.fmb.la, rules: FROM_URIBL_FMBLA, BODY_NEWDOMAIN_14_FMBLA, BODY_NEWDOMAIN_FMBLA, FROM_URIBL_COMMUNICADO_FMBLA, FROM_NEWDOMAIN_FMBLA, FROM_NEWDOMAIN_14_FMBLA, BODY_URIBL_FMBLA, BODY_URIBL_COMMUNICADO_FMBLA In my case, URIBL_RHS_DOB is no longer working at all. Is this still > working? - Mark > > It doesn't appear to be working here, either. ifplugin Mail::SpamAssassin::Plugin::URIDNSBL urirhssub URIBL_RHS_DOB dob.sibl.support-intelligence.net A 2 body URIBL_RHS_DOB eval:check_uridnsbl('URIBL_RHS_DOB') describe URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) tflags URIBL_RHS_DOB net endif $ spamassassin -t -D plugin < notice-lending-spam 2>&1|grep URIDNSBL Jul 8 18:16:22.404 [480] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC Jul 8 18:16:28.366 [480] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x558387e6dea0) implements 'check_dnsbl', priority 0
