Hi Keven I will tell you in the many months we’ve been using the EBL SA Plug in, we have yet to see a FP, and thus have raised its initial SA scoring of 1 up to 5 and then again presently to 9. The EBL has been wildly successful for us at catching and now blocking this type of drop box spam at the SMTP level for which we do with SA that score at 15 or greater.
This would definitely be a good thing to include in the spamassassin distribution if possible! Michael On 15 October 2017 at 13:22, Kevin A. McGrail <kevin.mcgr...@mcgrail.com> wrote: > I use a private plugin that does the same thing and have asked a few times > for them to consider contributing it. > > Perhaps this will encourage them to finally do so. I will take a look at > msbl and ping the other. > > Thanks for pointing this out. > Regards, > KAM > > > On October 15, 2017 6:01:31 AM EDT, Michael Grant <michael.gr...@gmail.com> > wrote: >> >> Has anyone tried out the the MSBL Email Blocklist (EBL) HashBL.pm with >> Spamassassin from msbl.org and possibly considered packaging this module >> (available from this page: http://msbl.org/ebl-implementation.html) with >> SpamAssassin (perhaps in a forthcoming release)? rSpamD already has >> internal support for the EBL. So I believe the MSBL folks are for this sort >> of thing in general. >> >> This plugin looks through the message (not just headers) for email >> addresses which have been identified as email drop boxes for scams like 419 >> advance fee fraud. It then looks hashes of these addresses up in a >> blocklist. >> >> I'm not affiliated with these folks. I do however use this module in my >> setup though and find it catches a bunch of things we wouldn't have >> otherwise caught. >> >> Michael Grant >> >
