> -----Original Message-----
> From: Michael Scheidell
> Sent: Wednesday, October 18, 2006 8:29 AM
> To: 'OpenDNS First Responders'
> Cc: users@spamassassin.apache.org
> Subject: RE: [OpenDNS #KMP-79041-857]: Michael Scheidell
Correction:
> uridnsbl URIBL_PHISHBL phishing.opendns.com. A 2
> body URIBL_PHISHBL
> eval:check_uridnsbl('URIBL_PHISHBL')
> describe URIBL_PHISHBL Contains a VERIFIED URL
> listed in the PHISHNET blocklist
> tflags URIBL_PHISHBL net
>
> score URIBL_PHISHBL 5.0
>
Correction: (don't use blocked.secnap.net. It returns positive on
anything)
urirhssub URIBL_PHISHBL blocked.secnap.net. A 2
body URIBL_PHISHBL eval:check_uridnsbl('URIBL_PHISHBL')
describe URIBL_PHISHBL Contains a VERIFIED URL listed in
the PHISHNET blocklist
tflags URIBL_PHISHBL net
score URIBL_PHISHBL 0.1
Now, all you need is to parse the url database, put it into a rhs dns
zone and decide on a score.
