Payal Rathod wrote:
On Fri, Mar 10, 2006 at 04:07:34PM +0530, Dhawal Doshy wrote:
Do you use SURBL (surbl.org), URIBL (uribl.com) and collaborative
network tests like razor/pyzor/dcc?
No, can you please tell in short how to use surbl exactly? I am very new
to SA.
What is your SA version? You'll need a recent Net::DNS installed for any
network tests. You can also add 'dns_available yes' to your local.cf if
you have Net::DNS installed. If you're using spamd, make sure it's
started without the -L or --local flags.
SURBL support is built into spamassassin version 3.x onwards.. (see
Jeff's reply)
For URIBL, see http://www.uribl.com/usage.shtml OR add this to your local.cf
urirhssub URIBL_BLACK multi.uribl.com. A 2
body URIBL_BLACK eval:check_uridnsbl('URIBL_BLACK')
describe URIBL_BLACK Contains an URL listed in the URIBL blacklist
tflags URIBL_BLACK net
score URIBL_BLACK 3.0
urirhssub URIBL_GREY multi.uribl.com. A 4
body URIBL_GREY eval:check_uridnsbl('URIBL_GREY')
describe URIBL_GREY Contains an URL listed in the URIBL greylist
tflags URIBL_GREY net
score URIBL_GREY 0.25
Also the pasted spam originates from a korean IP address.. you could
try scoring mails from korea a bit more.. using either
countries.nerds.dk OR korea.services.net
Which file do I put it exactly?
Add something like this to your local.cf
# This part will add +2.0 for mail from korea
header X_KOREAN_RELAY eval:check_rbl('relay','korea.services.net.')
describe X_KOREAN_RELAY Received via a relay in Korea
score X_KOREAN_RELAY 2.0
Finally, get around to training your bayesian database to 200 or more
spam and ham mails each..
We have trained 40,000+ of each.
That ought to be good enough for a start..
Do a lint test 'spamassassin -D --lint' before you make your changes
production.
Hope that helps,
- dhawal
With warm regards,
-Payal
--
**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely
for the use of the addressee(s). If you are not the intended recipient, please
notify the sender by e-mail and delete the original message. Further, you are
not to copy, disclose, or distribute this e-mail or its contents to any other
person and any such actions are unlawful. This e-mail may contain viruses.
NetMagic Solutions Pvt. Ltd. has taken every reasonable precaution to minimize
this risk, but is not liable for any damage you may sustain as a result of any
virus in this e-mail. You should carry out your own virus checks before
opening the e-mail or attachment. NetMagic Solutions Pvt. Ltd. reserves the
right to monitor and review the content of all messages sent to or from this
e-mail address.
Messages sent to or from this e-mail address may be stored on the NetMagic
Solutions Pvt. Ltd.'s e-mail system.
***************** End of Disclaimer *******************
