Since our services initially was not made for handling spam, we decided to set up our spamassassin-control (examples) with a lower score than normal (at our local servers we are touching the limits of 5 with the score which is a default value for the scanner tools and spamassassin that we are using). Mostly because we cover a lot more hosts than only mailservers and this can actually lead to false positives.
...
This first code block has been expired inspired by usenix s5h rules which can be seen at http://www.usenix.org.uk/content/rbl.html
| Code Block | ||||
|---|---|---|---|---|
| ||||
header RCVD_IN_TORNEBL eval:check_rbl('tornebl', 'dnsbl.tornevall.org')
describe RCVD_IN_TORNEBL Listed at dnsbl.tornevall.org
tflags RCVD_IN_TORNEBL net
score RCVD_IN_TORNEBL 0 2.0 0 2.0 |
FraudBL
...
| Code Block | ||||
|---|---|---|---|---|
| ||||
header RCVD_IN_TORNEBLTORNEFRAUDBL eval:check_rbl('fraudbl', 'bl.fraudbl.org') describe RCVD_IN_TORNEBLTORNEFRAUDBL Listed at Tornevall Networks FraudBLbl.fraudbl.org tflags RCVD_IN_TORNEBLTORNEFRAUDBL net score RCVD_IN_TORNEBLTORNEFRAUDBL 0 6.0 0 6.0 |