Hi
I found some extra RBL to put in the local.cf of spamassassin. Might help pick up extra spamming IP's
Change the scores how you wish
#--------------------------------------------
#Extra Real Time BlackHoles
#--------------------------------------------
header ARIX_DF rbleval:check_rbl('arix-df', 'fresh.dict.rbl.arix.com.')
describe ARIX_DF Recent dictionary spammer
tflags ARIX_DF net
header ARIX_DS rbleval:check_rbl('arix-ds', 'stale.dict.rbl.arix.com.')
describe ARIX_DS Sender has a history of dictionary spamming
tflags ARIX_DS net
score ARIX_DF 3.0
score ARIX_DS 0.5
header DYNABLOCK rbleval:check_rbl('dynablock', 'dynablock.easynet.nl.')
describe DYNABLOCK spamming IP
tflags DYNABLOCK net
score DYNABLOCK 5.0
header EASYNET rbleval:check_rbl('easynet', 'blackholes.easynet.nl.')
describe EASYNET spamming IP
tflags EASYNET net
score EASYNET 5.0
header ABUSEAT rbleval:check_rbl('abuseat', 'cbl.abuseat.org.')
describe ABUSEAT spamming IP
tflags ABUSEAT net
score ABUSEAT 5.0
header SPAMHAUS rbleval:check_rbl('spamhaus', 'sbl-xbl.spamhaus.org.')
describe SPAMHAUS spamming IP
tflags SPAMHAUS net
score SPAMHAUS 5.0
header BLITZED rbleval:check_rbl('blitzed', 'opm.blitzed.org.')
describe BLITZED spamming IP
tflags BLITZED net
score BLITZED 5.0
header DSBL rbleval:check_rbl('dsbl', 'list.dsbl.org.')
describe DSBL spamming IP
tflags DSBL net
score DSBL 5.0
Restart spamassassin when done and they should start picking up any spam orginating from the IP's
It seems to work for me fine.
2 Replies
1319 Views