(OT) Mail got blocked because of SORBS/DYNABLOCK

MKlinke mklinke at axsi.com
Thu Apr 1 05:31:43 UTC 2004


 
Below is part of the FAQ from njabl.org.  It shows a sample of a 
spamassassin configuration.  If you query the njabl.org database it 
will return one or more of the 127.0.0.x IP address strings if the 
address of interest is in the database. For example, to query your 
address simply reverse your IP address and type: (x = your real 
numbers)

# host 103.28.xx.xxx.dnsbl.njabl.org 
# host 103.28.xx.xxx.dnsbl.sorbs.net (for the sorbs database)

Notice that you can temper scores base on whether a DUL, OPEN RELAY, 
PROXY, or etc. is found within spamassassin.

Plug your friend's address in to see what happens. 

Regards,  Mike Klinke

====================== from the njabl.org FAQ ======

Our dnsbl can also be used to tag potential spam messages (letting 
individual users decide what action to take) using Spamassassin. 
After you have Spamassassin properly installed, add the following to 
your local.cf, probably /etc/mail/spamassassin/local.cf: (note: 
according to the Spamassassin developers, these rules will only work 
with Spamassassin up to version 2.5x and will not work properly with 
Spamassassin >= 2.6x)

header IN_NJABL_ORG    rbleval:check_rbl('njabl','dnsbl.njabl.org.')
describe IN_NJABL_ORG  Received via a relay in dnsbl.njabl.org
tflags IN_NJABL_ORG    net 

header NJABL_OPEN_RELAY         rbleval:check_rbl_results_for('njabl', 
'127.0.0.2')
describe NJABL_OPEN_RELAY       DNSBL: sender is Confirmed Open Relay
tflags NJABL_OPEN_RELAY         net

header NJABL_DUL                rbleval:check_rbl_results_for('njabl', 
'127.0.0.3')
describe NJABL_DUL              DNSBL: sender ip address in in a 
dialup block
tflags NJABL_DUL                net

header NJABL_SPAM_SRC           rbleval:check_rbl_results_for('njabl', 
'127.0.0.4')
describe NJABL_SPAM_SRC         DNSBL: sender is Confirmed Spam Source
tflags NJABL_SPAM_SRC           net

header NJABL_MULTI_STAGE        rbleval:check_rbl_results_for('njabl', 
'127.0.0.5')
describe NJABL_MULTI_STAGE      DNSBL: sent through multi-stage open 
relay
tflags NJABL_MULTI_STAGE        net 

header NJABL_CGI        rbleval:check_rbl_results_for('njabl', 
'127.0.0.8')
describe NJABL_CGI      DNSBL: sender is an open formmail
tflags NJABL_CGI        net

header NJABL_PROXY      rbleval:check_rbl_results_for('njabl', 
'127.0.0.9')
describe NJABL_PROXY    DNSBL: sender is an open proxy
tflags NJABL_PROXY      net

score IN_NJABL_ORG              0.38
score NJABL_DUL                 0.62
score NJABL_MULTI_STAGE         0.75
score NJABL_PROXY               3.00
score NJABL_OPEN_RELAY          3.00
score NJABL_CGI                 1.50
score NJABL_SPAM_SRC            3.00

 
 





More information about the redhat-list mailing list