Skip to content

Spamassassin Rules

Marco Favero edited this page Mar 21, 2017 · 8 revisions

Every DNSBL list can be used to make Spamassassin network rules. We provide here some instances taken from default RBL Manager config.

##
## Custom RBL MANAGER RBLs
##


##{ RCVD_IN_RBLM_SPAMIP ifplugin Mail::SpamAssassin::Plugin::DNSEval

ifplugin Mail::SpamAssassin::Plugin::DNSEval
header RCVD_IN_RBLM_SPAMIP       eval:check_rbl('rbl-lastexternal','spamip.rbl.example.com')
describe RCVD_IN_RBLM_SPAMIP     IP listed at spamip.rbl.example.com, very dirty spam source
tflags RCVD_IN_RBLM_SPAMIP       net noautolearn
endif
##} RCVD_IN_RBLM_SPAMIP ifplugin Mail::SpamAssassin::Plugin::DNSEval


##{ RCVD_IN_RBLM_WHITEIP ifplugin Mail::SpamAssassin::Plugin::DNSEval

ifplugin Mail::SpamAssassin::Plugin::DNSEval
header  RCVD_IN_RBLM_WHITEIP        eval:check_rbl('rbl-firsttrusted', 'whiteip.rbl.example.com')
describe RCVD_IN_RBLM_WHITEIP       IP listed at whiteip.rbl.example.com, high trust
tflags RCVD_IN_RBLM_WHITEIP         nice net noautolearn
endif
##} RCVD_IN_RBLM_WHITEIP ifplugin Mail::SpamAssassin::Plugin::DNSEval


if can(Mail::SpamAssassin::Plugin::URIDNSBL::has_tflags_domains_only)

urirhssub       URIBL_RBLM_SPAM  spamdomain.rbl.example.com.        A   127.0.0.2
body            URIBL_RBLM_SPAM  eval:check_uridnsbl('URIBL_RBLM_SPAM')
describe        URIBL_RBLM_SPAM  Contains an URL listed in the URIBL gold
tflags          URIBL_RBLM_SPAM  net domains_only
endif

## Score
score RCVD_IN_RBLM_SPAMIP         10.0
score RCVD_IN_RBLM_WHITEIP       -10.0
score URIBL_RBLM_SPAM             6.5
Clone this wiki locally