Re: MSBL Email Blocklist (EBL) SA usage query

2017-10-15 Thread Michael Grant
Hi Keven

I will tell you in the many months we’ve been using the EBL SA Plug in, we
have yet to see a FP, and thus have raised its initial SA scoring of 1 up
to 5 and then again presently to 9.  The EBL has been wildly successful for
us at catching and now blocking this type of drop box spam at the SMTP
level for which we do with SA  that score at 15 or greater.

This would definitely be a good thing to include in the spamassassin
distribution if possible!

Michael

On 15 October 2017 at 13:22, Kevin A. McGrail 
wrote:

> I use a private plugin that does the same thing and have asked a few times
> for them to consider contributing it.
>
> Perhaps this will encourage them to finally do so. I will take a look at
> msbl and ping the other.
>
> Thanks for pointing this out.
> Regards,
> KAM
>
>
> On October 15, 2017 6:01:31 AM EDT, Michael Grant 
> wrote:
>>
>> Has anyone tried out the the MSBL Email Blocklist (EBL) HashBL.pm with
>> Spamassassin from msbl.org and possibly considered packaging this module
>> (available from this page: http://msbl.org/ebl-implementation.html) with
>> SpamAssassin (perhaps in a forthcoming release)?  rSpamD already has
>> internal support for the EBL. So I believe the MSBL folks are for this sort
>> of thing in general.
>>
>> This plugin looks through the message (not just headers) for email
>> addresses which have been identified as email drop boxes for scams like 419
>> advance fee fraud.  It then looks hashes of these addresses up in a
>> blocklist.
>>
>> I'm not affiliated with these folks.  I do however use this module in my
>> setup though and find it catches a bunch of things we wouldn't have
>> otherwise caught.
>>
>> Michael Grant
>>
>


Re: MSBL Email Blocklist (EBL) SA usage query

2017-10-15 Thread Kevin A. McGrail
I use a private plugin that does the same thing and have asked a few times for 
them to consider contributing it.  

Perhaps this will encourage them to finally do so.  I will take a look at msbl 
and ping the other.

Thanks for pointing this out.
Regards,
KAM

On October 15, 2017 6:01:31 AM EDT, Michael Grant  
wrote:
>Has anyone tried out the the MSBL Email Blocklist (EBL) HashBL.pm with
>Spamassassin from msbl.org and possibly considered packaging this
>module
>(available from this page: http://msbl.org/ebl-implementation.html)
>with
>SpamAssassin (perhaps in a forthcoming release)?  rSpamD already has
>internal support for the EBL. So I believe the MSBL folks are for this
>sort
>of thing in general.
>
>This plugin looks through the message (not just headers) for email
>addresses which have been identified as email drop boxes for scams like
>419
>advance fee fraud.  It then looks hashes of these addresses up in a
>blocklist.
>
>I'm not affiliated with these folks.  I do however use this module in
>my
>setup though and find it catches a bunch of things we wouldn't have
>otherwise caught.
>
>Michael Grant


MSBL Email Blocklist (EBL) SA usage query

2017-10-15 Thread Michael Grant
Has anyone tried out the the MSBL Email Blocklist (EBL) HashBL.pm with
Spamassassin from msbl.org and possibly considered packaging this module
(available from this page: http://msbl.org/ebl-implementation.html) with
SpamAssassin (perhaps in a forthcoming release)?  rSpamD already has
internal support for the EBL. So I believe the MSBL folks are for this sort
of thing in general.

This plugin looks through the message (not just headers) for email
addresses which have been identified as email drop boxes for scams like 419
advance fee fraud.  It then looks hashes of these addresses up in a
blocklist.

I'm not affiliated with these folks.  I do however use this module in my
setup though and find it catches a bunch of things we wouldn't have
otherwise caught.

Michael Grant