spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Axb <axb.li...@gmail.com>
Subject Re: writing own rbl rules
Date Tue, 26 Aug 2014 15:18:23 GMT
On 08/26/2014 04:28 PM, Reindl Harald wrote:
>
> Am 26.08.2014 um 15:54 schrieb Axb:
>> On 08/26/2014 03:00 PM, Reindl Harald wrote:
>>> Am 26.08.2014 um 14:25 schrieb Joe Quinn:
>>>> On 8/26/2014 8:04 AM, Reindl Harald wrote:
>>>>> sadly the Wiki don't refer to check_rbl()
>>>>> https://wiki.apache.org/spamassassin/WritingRules
>>>>>
>>>> You can use KAM.cf for reference.
>>>>
>>>> http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
>>>> Search for KAM_FROM_URIBL_PCCC
>>>
>>> thanks, looks like the missing identifier as first
>>> params was the reason for the error but the rule
>>> below still don't fire and the connecting IP is
>>> on the list, recently verified again
>>>
>>> may the problem be that "header" looks in received
>>> headers and not at the connecting physical IP?
>>>
>>> header   RCVD_IN_TL_DNSWL_HIGH eval:check_rbl('custom-dns-1', 'dnswl.thelounge.net.',
'127.0.0.2')
>>> describe RCVD_IN_TL_DNSWL_HIGH Custom DNSBL/DNSWL
>>> tflags   RCVD_IN_TL_DNSWL_HIGH net
>>> score    RCVD_IN_TL_DNSWL_HIGH -5
>>
>> see 20_dnsbl_tests.cf file for a  "lastexternal" sample
>
> if it only would work - see below
>
> the 4 lines are part of "local.cf" where other settings
> are working fine - strange :-(
>
> * example
> * mine
> * log-result
>
> # Return Path Reputation Network Blacklist (RNBL):
> # https://senderscore.org/blacklistlookup/
> header RCVD_IN_RP_RNBL         eval:check_rbl('rnbl-lastexternal','bl.score.senderscore.com.')
> describe RCVD_IN_RP_RNBL       Relay in RNBL, https://senderscore.org/blacklistlookup/
> tflags RCVD_IN_RP_RNBL         net
>
> header   RCVD_IN_RP_TLDNS1 eval:check_rbl('tldns1-lastexternal', 'dnswl.thelounge.net.')
> describe RCVD_IN_RP_TLDNS1 Custom DNSBL/DNSWL
> tflags   RCVD_IN_RP_TLDNS1 net
> score    RCVD_IN_RP_TLDNS1 -5
>
> spamd: result: Y 9 -
> ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,BAYES_99,BAYES_999,DEAR_SOMETHING,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,LOTS_OF_MONEY,SPF_SOFTFAIL,T_MONEY_PERCENT,URG_BIZ
> scantime=0.4,size=8639,user=sa-milt,uid=189,required_score=1.0,rhost=localhost,raddr=127.0.0.1,rport=29655,mid=<762711c0cdde92c967fe5f98b4054c4ceadd18a41409062805@******>,bayes=1.000000,autolearn=disabled
>

assuming your using rbldnsd,  do you have the resolver forwarding to the 
dnswl.thelounge.net zone?
does dnswl.thelounge.net have an A record
have you configured a testpoint in dnswl.thelounge.net? if yes, can you 
resolve it with dig?





Mime
View raw message