George Georgalis wrote: > it would seem the following rule is not being used... > > header __RCVD_IN_SBL_XBL eval:check_rbl('sblxbl', > 'sbl-xbl.spamhaus.org.') > describe __RCVD_IN_SBL_XBL Received via a relay in Spamhaus SBL+XBL > tflags __RCVD_IN_SBL_XBL net > > I do have Mail::SpamAssassin::Plugin::URIDNSBL but maybe I need another > plugin? > > What's missing?
1) that's an RBL, not a URIDNSBL. You don't need anything but a reasonably recent version of Net::DNS 2) That's a RBL parent test. You can pick it out by the fact that it's name begins with double underscore (__), which means it will run with no score. You'll never see it in a hit list for a message. Instead, you'll see it's children matching messages: header RCVD_IN_SBL eval:check_rbl_sub('sblxbl', '127.0.0.2') header RCVD_IN_XBL eval:check_rbl('sblxbl-notfirsthop', 'sbl-xbl.spamhaus.org.', '127.0.0.[456]') The parent test exists to perform a single DNS query that the two children will later check against. This saves the overhead of doing a separate DNS query for each child.