Menu

Enabling Paid Spamhaus *BLs

Get Help
davestahr
2014-06-29
2014-06-30
  • davestahr

    davestahr - 2014-06-29

    Just looking for a quick confirmation before I break everything....I purchased the proper level of paid service from Spamhaus since we are a commercial email host. I'm guessing I just replace the spamhaus.org RBLs with the private spamhaus.net URLs I was provided. This appears to be in /usr/share/spamassassin/20_dnsbl_tests.cf.

    Can I safely just modify that file and restart spamassassin?

    Thanks for your time.

     
  • Marius Gologan

    Marius Gologan - 2014-06-29

    Hi Dave,

    Spamhaus.org should provide a more appropriate support in this case.
    However, in my opinion, you could create a separate dedicated file for their service having in mind 2 aspects:

    • spamassassin update will overwrite your changes in its default location.
    • using a paid notorious RBL service is more reliable on long term.

    1) Create a file in /etc/mail/spamassassin/paid_rbl.cf with the following content:

    header PAID_RBL_SHAUS              eval:check_rbl('paid-spamhaus', 'uniq-id.zen.dq.spamhaus.net')
    describe PAID_RBL_SHAUS            IP listed in paid Spamhaus
    tflags PAID_RBL_SHAUS              net
    score  PAID_RBL_SHAUS              2.0
    

    Later edit: Paid Spamhaus is uniq-id.zen.dq.spamhaus.net, instead .org.

    run this command to make sure spamassassin configuration is not corrupted:
    spamassassin --lint
    no output = the config is ok.

    2) Supplementary (optional), if the service is 100% accurate, you can use spamhaus to eliminate malicious messages at connection level.
    In GUI > Secure click the arrow near to Connection filter.
    In the first text area add:
    uniq-id.zen.dq.spamhaus.net*2
    note the *2 at the end.

    HW resources and bandwidth will be saved, if no legit message is rejected (as false positive) at SMTP connection.

     

    Last edit: Marius Gologan 2016-12-29
  • davestahr

    davestahr - 2014-06-30

    Thanks for the quick reply. I probably won't have time to try this until tomorrow night (7:50pm here now)

     

Log in to post a comment.

MongoDB Logo MongoDB