Re: [exim] dnslists - how to reject only if sender is in two or more ?

[Hardy via Exim-users]

Hi Gregory,

I want to reject the message completely if sender is in two or more RBLs
and accept if
it hits only one.

# Set counter to zero
warn set acl_m0 = 0

warn    log_message = Listed by $dnslist_domain
        dnslists = 0spam.fusionzero.com
        add_header = X-blacklisted-at: $dnslist_domain 1
        set acl_m0 = ${eval:$acl_m0+1}

warn    log_message = Listed by $dnslist_domain
        dnslists = zen.spamhaus.org
        add_header = X-blacklisted-at: $dnslist_domain 2
        set acl_m0 = ${eval:$acl_m0+2}

warn    log_message = Listed by manitu.net
        dnslists = ix.dnsbl.manitu.net
        add_header = X-blacklisted-at: $dnslist_domain 1
        set acl_m0 = ${eval:$acl_m0+1}

# http://www.sorbs.net/using.shtml
# Very sensitive, false positives prone!
warn    log_message = Listed by $dnslist_domain
        dnslists = dnsbl.sorbs.net
        add_header = X-blacklisted-at: $dnslist_domain 1
        set acl_m0 = ${eval:$acl_m0+1}

warn    log_message = Listed by $dnslist_domain
        dnslists = bl.spamcop.net
        add_header = X-blacklisted-at: $dnslist_domain 2
        set acl_m0 = ${eval:$acl_m0+2}

# raised to 3!
warn    log_message = Listed by $dnslist_domain
        dnslists = cbl.abuseat.org
        add_header = X-blacklisted-at: $dnslist_domain 3
        set acl_m0 = ${eval:$acl_m0+3}

deny    log_message = Listed by spamlists, $acl_m0 points

        condition = ${if gt{$acl_m0}{2}}

regards
Hardy

I check quite some RBLs and also want to have this fine granulated to circumvent false positives. I have a counter, and some RBL have a higher weight (adding 2 points). A certain number of points (3+ in this my case) leads to rejection. So cbl.abuseat.org suffices to reject, all others need a second. "The add_header" is for error hunting, but I actually don't had to look since very long. Of course you can do this more compact, but her is my example: message = rejected because $sender_host_address is in public spamlists

smime.p7s
Description: S/MIME Cryptographic Signature

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/