George Georgalis wrote:
> it would seem the following rule is not being used...
> 
> header __RCVD_IN_SBL_XBL        eval:check_rbl('sblxbl', 
> 'sbl-xbl.spamhaus.org.')
> describe __RCVD_IN_SBL_XBL      Received via a relay in Spamhaus SBL+XBL
> tflags __RCVD_IN_SBL_XBL        net
> 
> I do have Mail::SpamAssassin::Plugin::URIDNSBL but maybe I need another 
> plugin?
> 
> What's missing?

1) that's an RBL, not a URIDNSBL. You don't need anything but a reasonably
recent version of Net::DNS

2) That's a RBL parent test. You can pick it out by the fact that it's name
begins with double underscore (__), which means it will run with no score.

You'll never see it in a hit list for a message. Instead, you'll see it's
children matching messages:

header RCVD_IN_SBL            eval:check_rbl_sub('sblxbl', '127.0.0.2')
header RCVD_IN_XBL            eval:check_rbl('sblxbl-notfirsthop',
'sbl-xbl.spamhaus.org.', '127.0.0.[456]')

The parent test exists to perform a single DNS query that the two children will
later check against. This saves the overhead of doing a separate DNS query for
each child.


Reply via email to