You could also use check_rbl_headers Add this to init.pre or in your favorite .pre file: loadplugin Mail::SpamAssassin::Plugin::DNSEval
Then add this rule: if (version >= 3.004003) ifplugin Mail::SpamAssassin::Plugin::DNSEval header HEADERBL_URIBL eval:check_rbl_headers('hdrbl-uribl', 'multi.uribl.com.', '127.0.0.2') describe HEADERBL_URIBL Header contains domain listed in URIBL tflags HEADERBL_URIBL net endif endif You can define in which headers it should look for domains using "rbl_headers". Have a look a the documentation with: perldoc Mail::SpamAssassin::Plugin::DNSEval Good luck, Laurent S.