A bit confused after reading all the mail.  Would the following rule
score 2.0 points and reduce FP?

ifplugin Mail::SpamAssassin::Plugin::DNSEval

header __RCVD_IN_BRBL   eval:check_rbl('brbl','bb.barracudacentral.org')
tflags __RCVD_IN_BRBL   net

header RCVD_IN_BRBL     eval:check_rbl_sub('brbl','127.0.0.2')
describe RCVD_IN_BRBL   Received via a relay in Barracuda BRBL
tflags RCVD_RCVD_IN_BRBL net
score RCVD_RCVD_IN_BRBL 2.0 
endif

Regards



Sujit Choudhury


-----Original Message-----
From: Henrik K [mailto:[EMAIL PROTECTED] 
Sent: 11 November 2008 15:38
To: users@spamassassin.apache.org
Subject: Re: Barracuda RBL

On Tue, Nov 11, 2008 at 05:34:28PM +0200, Henrik K wrote:
> On Tue, Nov 11, 2008 at 08:30:26AM -0700, Chris wrote:
> > On Tuesday 11 November 2008 8:15:26 am Sujit Acharyya-Choudhury
wrote:
> > > I would like to use the "free" barracuda RBL with SpamAssassin.
Is
> > > there any rule for that yet?
> > 
> > Easy enough to create one. I created /etc/mail/spamassassin/brbl.cf
with the 
> > content:
> > 
> > # BarracudaCental.org RBL
> > header BARRACUDA_BRBL
rbleval:check_rbl('b-rbl','b.barracudacentral.org.')
> > describe BARRACUDA_BRBL             Listed: Barracuda Reputation
Block List (BRBL)
> > score BARRACUDA_BRBL                1.35
> 
> It's been in SA rules long time if you use sa-update.
> 
> I advice not to use it without '-lastexternal'. Or score them
separately
> like current SA.
> 
> RCVD_IN_BRBL
> RCVD_IN_BRBL_LASTEXT

Oh correction, only if you use SVN (3.3). I though it's already active.

Here is are the rules in 72_active.cf:

header RCVD_IN_BRBL     eval:check_rbl_sub('brbl','127.0.0.2')
describe RCVD_IN_BRBL   Received via a relay in Barracuda BRBL
tflags RCVD_IN_BRBL net

header RCVD_IN_BRBL_LASTEXT
eval:check_rbl('brbl-lastexternal','bb.barracudacentral.org')
tflags RCVD_IN_BRBL_LASTEXT   net


--
The University of Westminster is a charity and a company limited by
guarantee.  Registration number: 977818 England.  Registered Office:
309 Regent Street, London W1B 2UW, UK.

Reply via email to