> You can test with: > > header SURBL_MULTI_HDR eval:check_hashbl_emails('multi.surbl.org', > 'raw/max=10/shuffle/host', 'ALLFROM/Reply-To', '^127\.0\.0\.\d+$') > priority SURBL_MULTI_HDR -100 > describe SURBL_MULTI_HDR Domain in email headers found in > surbl multi
Raymond, thank you! This works. But I'm having an issue using this with multi.surbl.org and multi.uribl.org. The response addr needs to be bit-masked. The \d+ in 127.0.0.\d+ is in fact a bitmap. If I want to assign different scores for different entries in their databases, I'd need to mask the \d+. Is there any easier way to do this than this? header URIBL_BLACK eval:check_hashbl_emails('multi.uribl.com', 'raw/max=10/shuffle/host', 'ALLFROM/Reply-To', '^127\.0\.0\.(2|3|6|7|10|11|14|15|18|19|22|23|26|27|30|31|34|35|38|39|42|43|46|47|50|51|54|55|58|59|62|63|66|67|70|71|74|75|78|79|82|83|86|87|90|91|94|95|98|99|102|103|106|107|110|111|114|115|118|119|122|123|126|127|130|131|134|135|138|139|142|143|146|147|150|151|154|155|158|159|162|163|166|167|170|171|174|175|178|179|182|183|186|187|190|191|194|195|198|199|202|203|206|207|210|211|214|215|218|219|222|223|226|227|230|231|234|235|238|239|242|243|246|247|250|251|254)$') check_uridnsbl() handles bitmaps with the urirhssub parameter (the "2) below: urirhssub URIBL_BLACK multi.uribl.com. A 2 Is there something like the mask arg in urirhssub with check_hashbl? I did have a look at the source of check_hashbl but I couldn't spot it right off. I get the feeling there's got to be a more straight forward way than above! Michael Grant
signature.asc
Description: PGP signature