Re: emailreg.org - permission to spamassassin masscheck?

2009-12-14 Thread Mike Cardwell

Warren Togami wrote:

I'm pretty sure this only queries only by IP address.  IP address and 
domain name combined can be significantly more fine grained on some mail 
providers, so we might be better off waiting until spamassassin is 
capable of querying in their preferred manner before adding it to 
masschecks.


Apparently you can't query the list until you've registered the IP 
address of your DNS resolvers with them. This means, it can't be 
included as standard in SpamAssassin.


However, I can't figure out how to do that... On 
http://www.emailreg.org/index.cgi?p=policy it says:


The Registered Email Sender List is available to everyone that would 
like to utilize it. In order to obtain access you need to register a 
domain. Once you have registered a domain you will be able to specify 
the IP addresses that you would like to have query the RESL.


So you have to register a domain before you can register your IPs...

It then goes on to say:

Note that there is no charge for USE of the RESL data via this DNS 
query system. If you would like to use the RESL without registering a 
domain you may do so by registering HERE.


So you don't have to register a domain before you can register your IPs...

Which is it? Do I have to register a domain, or don't I? So I signed up 
for an account and all I see is an option to register my domains with 
them, and that costs money... I see no option for registering the IPs of 
my resolvers.


--
Mike Cardwell - IT Consultant and LAMP developer
Cardwell IT Ltd. (UK Reg'd Company #06920226) http://cardwellit.com/
Technical Blog: https://secure.grepular.com/blog/


Re: emailreg.org - permission to spamassassin masscheck?

2009-12-14 Thread Bob O'Brien

Mike Cardwell wrote:

So you don't have to register a domain before you can register your IPs...

Which is it? Do I have to register a domain, or don't I? So I signed up 
for an account and all I see is an option to register my domains with 
them, and that costs money... I see no option for registering the IPs of 
my resolvers.
  



I don't know for sure whether my own access account is typical or not, but
once you are logged into your free account, you should be able to choose
My Domains from the top menu, and then Edit RESL Access IPs from the
navigation panel on the left.

If that doesn't work, email me directly if you wish. 
Given some specifics, I can encourage the emailreg folks to improve the

user interface.




   Bob
--


Re: emailreg.org - permission to spamassassin masscheck?

2009-12-14 Thread Warren Togami

On 12/14/2009 05:06 AM, Mike Cardwell wrote:

Warren Togami wrote:


I'm pretty sure this only queries only by IP address. IP address and
domain name combined can be significantly more fine grained on some
mail providers, so we might be better off waiting until spamassassin
is capable of querying in their preferred manner before adding it to
masschecks.


Apparently you can't query the list until you've registered the IP
address of your DNS resolvers with them. This means, it can't be
included as standard in SpamAssassin.

However, I can't figure out how to do that... On
http://www.emailreg.org/index.cgi?p=policy it says:

The Registered Email Sender List is available to everyone that would
like to utilize it. In order to obtain access you need to register a
domain. Once you have registered a domain you will be able to specify
the IP addresses that you would like to have query the RESL.

So you have to register a domain before you can register your IPs...

It then goes on to say:

Note that there is no charge for USE of the RESL data via this DNS
query system. If you would like to use the RESL without registering a
domain you may do so by registering HERE.

So you don't have to register a domain before you can register your IPs...

Which is it? Do I have to register a domain, or don't I? So I signed up
for an account and all I see is an option to register my domains with
them, and that costs money... I see no option for registering the IPs of
my resolvers.



Good point.  spamassassin masschecks can happen on arbitrary hosts on 
the Internet.  If they require registration for DNS lookups, then 
emailreg.org cannot be tested by weekly masscheck.  I personally am 
against adding anything to spamassassin that cannot be tested.


Warren Togami
wtog...@redhat.com


emailreg.org - permission to spamassassin masscheck?

2009-12-13 Thread Warren Togami

On 12/12/2009 12:42 AM, Marc Perkel wrote:

Been using emailreg.org for several months now and it seems like a
really good white list. Anyone else using it?



Would they object to spamassassin's weekly masscheck testing their 
accuracy every Saturday?  How do we contact them?


http://www.emailreg.org/index.cgi?p=usage
(from domain).(ip).resl.emailreg.org

It seems the preferred method of querying includes both From domain and 
IP address, which is different from other whitelists.  Would we need a 
new plugin for spamassassin to query in this fashion?


Warren Togami
wtog...@redhat.com


Re: emailreg.org - permission to spamassassin masscheck?

2009-12-13 Thread Robert Fleming
--On December 13, 2009 10:56:32 AM -0500 Warren Togami is rumoured to have
written:

 http://www.emailreg.org/index.cgi?p=usage
 (from domain).(ip).resl.emailreg.org
 
 It seems the preferred method of querying includes both From domain and
 IP address, which is different from other whitelists.  Would we need a
 new plugin for spamassassin to query in this fashion?

From further down the same page, they suggest the following for SA

Add the following rules to your SpamAssassin configuration

header __RCVD_IN_EMAILREG eval:check_rbl('emailreg-trusted',
'resl.emailreg.org.')

header RCVD_IN_EMAILREG_0 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.0')
describe RCVD_IN_EMAILREG_0   Sender listed at http://www.emailreg.org/
tflags RCVD_IN_EMAILREG_0 nice net

header RCVD_IN_EMAILREG_1 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.1')
describe RCVD_IN_EMAILREG_1   Sender listed at http://www.emailreg.org/
tflags RCVD_IN_EMAILREG_1 nice net

score RCVD_IN_EMAILREG_0 -100
score RCVD_IN_EMAILREG_1 -100

Not sure if the combination of rbl and rbl_sub does exactly what their
preferred query method is, but nice of them to give sample code.

Rob




Re: emailreg.org - permission to spamassassin masscheck?

2009-12-13 Thread Warren Togami

On 12/13/2009 09:34 PM, Robert Fleming wrote:

 Add the following rules to your SpamAssassin configuration

 header __RCVD_IN_EMAILREG eval:check_rbl('emailreg-trusted',
'resl.emailreg.org.')

 header RCVD_IN_EMAILREG_0 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.0')
 describe RCVD_IN_EMAILREG_0   Sender listed at http://www.emailreg.org/
 tflags RCVD_IN_EMAILREG_0 nice net

 header RCVD_IN_EMAILREG_1 eval:check_rbl_sub('emailreg-trusted',
'127.0.\d+.1')
 describe RCVD_IN_EMAILREG_1   Sender listed at http://www.emailreg.org/
 tflags RCVD_IN_EMAILREG_1 nice net

 score RCVD_IN_EMAILREG_0 -100
 score RCVD_IN_EMAILREG_1 -100

Not sure if the combination of rbl and rbl_sub does exactly what their
preferred query method is, but nice of them to give sample code.

Rob




I'm pretty sure this only queries only by IP address.  IP address and 
domain name combined can be significantly more fine grained on some mail 
providers, so we might be better off waiting until spamassassin is 
capable of querying in their preferred manner before adding it to 
masschecks.


Furthermore, I suspect we want firsttrusted instead of trusted?

Warren