On 3/3/2010 6:40 PM, Noel Jones wrote:
On 3/3/2010 6:13 PM, Stan Hoeppner wrote:
What's the best way to integrate the Spamhaus DBL for folks not already
using SA et al?
Will the following work, or does it check only the entire hostname,
and not
the domain portion in isolation as well?
smtpd_recipient_restrictions =
reject_rhsbl_client dbl.spamhaus.org
(note for the archives: that's not a complete
smtpd_recipient_restrictions statement.)
With reject_rhsbl_client, the query is for the full client name, not
substrings. Spamhaus DBL may be more useful with reject_rhsbl_sender,
which checks the Right Hand Side of the email address; everything after
the "@", or maybe reject_rhsbl_helo, which checks the full HELO name.
-- Noel Jones
additionally, it appears that dbl.spamhaus.org lists wildcard
subdomains. So for example if dbl lists "spammer.tld" and the
HELO name is random.foo.spammer.tld it should still be caught
by reject_rhsbl_helo.
This is good; looking forward to seeing results.
As with any new (or newly added to your config) RBL, it's
prudent to try it out for a while with warn_if_reject to
prevent accidents.
-- Noel Jones