Just looking for a quick confirmation before I break everything....I purchased the proper level of paid service from Spamhaus since we are a commercial email host. I'm guessing I just replace the spamhaus.org RBLs with the private spamhaus.net URLs I was provided. This appears to be in /usr/share/spamassassin/20_dnsbl_tests.cf.
Can I safely just modify that file and restart spamassassin?
Thanks for your time.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Spamhaus.org should provide a more appropriate support in this case.
However, in my opinion, you could create a separate dedicated file for their service having in mind 2 aspects:
spamassassin update will overwrite your changes in its default location.
using a paid notorious RBL service is more reliable on long term.
1) Create a file in /etc/mail/spamassassin/paid_rbl.cf with the following content:
header PAID_RBL_SHAUS eval:check_rbl('paid-spamhaus', 'uniq-id.zen.dq.spamhaus.net')
describe PAID_RBL_SHAUS IP listed in paid Spamhaus
tflags PAID_RBL_SHAUS net
score PAID_RBL_SHAUS 2.0
Later edit: Paid Spamhaus is uniq-id.zen.dq.spamhaus.net, instead .org.
run this command to make sure spamassassin configuration is not corrupted:
spamassassin --lint
no output = the config is ok.
2) Supplementary (optional), if the service is 100% accurate, you can use spamhaus to eliminate malicious messages at connection level.
In GUI > Secure click the arrow near to Connection filter.
In the first text area add: uniq-id.zen.dq.spamhaus.net*2
note the *2 at the end.
HW resources and bandwidth will be saved, if no legit message is rejected (as false positive) at SMTP connection.
Last edit: Marius Gologan 2016-12-29
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Just looking for a quick confirmation before I break everything....I purchased the proper level of paid service from Spamhaus since we are a commercial email host. I'm guessing I just replace the spamhaus.org RBLs with the private spamhaus.net URLs I was provided. This appears to be in /usr/share/spamassassin/20_dnsbl_tests.cf.
Can I safely just modify that file and restart spamassassin?
Thanks for your time.
Hi Dave,
Spamhaus.org should provide a more appropriate support in this case.
However, in my opinion, you could create a separate dedicated file for their service having in mind 2 aspects:
1) Create a file in /etc/mail/spamassassin/paid_rbl.cf with the following content:
Later edit: Paid Spamhaus is uniq-id.zen.dq.spamhaus.net, instead .org.
run this command to make sure spamassassin configuration is not corrupted:
spamassassin --lint
no output = the config is ok.
2) Supplementary (optional), if the service is 100% accurate, you can use spamhaus to eliminate malicious messages at connection level.
In GUI > Secure click the arrow near to Connection filter.
In the first text area add:
uniq-id.zen.dq.spamhaus.net*2note the *2 at the end.
HW resources and bandwidth will be saved, if no legit message is rejected (as false positive) at SMTP connection.
Last edit: Marius Gologan 2016-12-29
Thanks for the quick reply. I probably won't have time to try this until tomorrow night (7:50pm here now)