On Wed, 12 Nov 2014, Igor Chudov wrote:

Hello, how can I enable thos DOB URIBL? I have spamassassin --version
SpamAssassin version 3.4.0  running on Perl version 5.14.2. It does
not seem to trigger. Thanks

URIBL_RHS_DOB should be enabled by default in 3.4.0.

Are you by chance running with network tests disabled? Do you see URIBL or DNSBL rule hits on other messages?

It's possible that the maintainers of DOB don't have access to the .eu or .link TLD registrar feeds. If you come across one of these again, try:

  dig A fnord.link.dob.sibl.support-intelligence.net

or

  dig A fnord.eu.dob.sibl.support-intelligence.net

(replacing "fnord" with the actual domain you saw) to see whether DOB lists that domain.

However...

Your initial email said:

I am receiving a torrent of spam coming from dot-eu and dot-link
domains. They also are all based on domains less than one day old.

URIBL_RHS_DOB only checks whether URIs in the message body reference such a domain. If you're reporting that the message is *from* such a domain my suggestion might not have much utility.

KAM, AXB: do we have a way to check the From: and envelope from domains against DOB or other domain-name BLs? If we can do that and aren't, might it be useful to do so?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Users mistake widespread adoption of Microsoft Office for the
  development of a document format standard.
-----------------------------------------------------------------------
 895 days since the first successful private support mission to ISS (SpaceX)

Reply via email to