On Friday, February 10, 2006, 1:53:19 PM, Joey Joey wrote:
> OK on this web site http://spamcheck.freeapp.net/ they have a list located
> here http://spamcheck.freeapp.net/top-sites-domains which contains info from
> http://www.surbl.org/.
> I wrote a script to download the list and put into body_checks (postfix) and
> reject the message that meet the criteria.

PLEASE DO NOT DO THAT!  I will take down the data or access if I
find people using it that way.  The proper way to use the data is
with DNSBL queries as described at:

  http://www.surbl.org/implementation.html

> This method gets us around 10K rejects a month which is a pretty good
> number.
> However this method only works with text based email and not html.
 
> Is there a way to use these surbl lists via SA and instead of scoring them
> high, actually have them reject/delete the message for this rule and not
> just score it for tagging?
> I guess I am asking if there is a way to have both delete & tag options
> within the same SA.....
 
As Theo mentions, recent versions of SpamAssassin have built in
support for SURBLs and correctly deobfuscate and parse URIs in
message bodies.

If you want to block at the MTA level, there are ways to do that
with Exim, qpsmtpd, sendmail and others mentioned at:

  http://www.surbl.org/links.html

Probably someone has done it with postfix also.

But you really need a sophisticated deobfuscater, HTML renderer
and URI parser like SpamAssassin to catch many of the spams that
MTA's can't catch looking only at plain text messages.  So
MTA-level URI filtering alone is probably insufficient.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/

Reply via email to