I've seen tons of email on this list about surbl and uribl, but I haven't really made sense of it yet.
Is ther a FAQ on this stuff for SA users? Does it deal with performance issues?
thanks, -chuck
----- Original Message ----- From: "Chuck Campbell" campbell@accelinc.com
I've seen tons of email on this list about surbl and uribl, but I haven't really made sense of it yet.
Is ther a FAQ on this stuff for SA users? Does it deal with performance issues?
Sure, check-out www.surbl.org for lots of info about surbl/uribl. If you are using any of the custom URI rulesets, then switching to the DNS based URI tests instead should provide a nice performance increase.
Bill
On Tue, Jun 15, 2004 at 02:47:27PM -0700, Bill Landry wrote:
----- Original Message ----- From: "Chuck Campbell" campbell@accelinc.com
I've seen tons of email on this list about surbl and uribl, but I haven't really made sense of it yet.
Is ther a FAQ on this stuff for SA users? Does it deal with performance issues?
Sure, check-out www.surbl.org for lots of info about surbl/uribl. If you are using any of the custom URI rulesets, then switching to the DNS based URI tests instead should provide a nice performance increase.
I don't believe I'm using any custom URI rulesets (I've never added anything but chickenpox, popcorn, bigevil). If these are custom URI rulesets, then I just learned some new vocabulary :-)
I read the whole site, and I have a fuzzy picture now, but I don't really know how to jump into this pool.
If I elect to stay with SA 2.63, then I should download and install spamcopuri v0.18?? I assume I would find detailed instructions therein for setting it up?
If I choose to go with SA 3.x, I first need to upgrade to teh new SA, and then use uridnsbl or uribl or urirhsbl or ... This is where my confusion lies at the moment. Then of course there is the ws.surbl and the be.surbl and all of the talk about setting up dns, etc.
I was hoping for a howto kind of document, but maybe I'm the one who has to write it as I learn???
-chuck
----- Original Message ----- From: "Chuck Campbell" campbell@accelinc.com
Sure, check-out www.surbl.org for lots of info about surbl/uribl. If
you
are using any of the custom URI rulesets, then switching to the DNS
based
URI tests instead should provide a nice performance increase.
I don't believe I'm using any custom URI rulesets (I've never added
anything
but chickenpox, popcorn, bigevil). If these are custom URI rulesets, then I just learned some new vocabulary :-)
bigevil is a URI based ruleset. If you view the file contents, you will note that each test begins with "uri". This means that the test is looking for specific URIs in the message body.
I read the whole site, and I have a fuzzy picture now, but I don't really
know
how to jump into this pool.
There are additional requirements and setup instructions included in the spamcop_uri plug-in tar file.
If I elect to stay with SA 2.63, then I should download and install spamcopuri v0.18?? I assume I would find detailed instructions therein for setting it up?
Yes, and instructions are included.
If I choose to go with SA 3.x, I first need to upgrade to teh new SA, and
then
use uridnsbl or uribl or urirhsbl or ... This is where my confusion lies at the moment. Then of course there is the ws.surbl and the be.surbl and all of the talk about setting up dns, etc.
The basic spamcop_uri.cf included with the spamcopuri v0.18 tar file will get you started. If you need help setting up any additional tests after the install, let us know.
I was hoping for a howto kind of document, but maybe I'm the one who has to write it as I learn???
Check out the instructions in the included INSTALL file and let us know if you need more help.
Bill
On Tuesday, June 15, 2004, 3:50:42 PM, Chuck Campbell wrote:
If I elect to stay with SA 2.63, then I should download and install spamcopuri v0.18??
Yes, SpamCopURI is a program that can be used with all SURBLs in SA 2.63.
If I choose to go with SA 3.x, I first need to upgrade to teh new SA, and then use uridnsbl or uribl or urirhsbl or ...
uridnsbl is the SA 3 program that checks message body URIs against numeric RBLs, i.e. by resolving the URI domain names into IP addresses then checking those IP addresses against the RBL.
urirhsbl is the SA 3 program that checks message body URIs against SURBLs, i.e., it compares (mostly) domain names found in message bodies against (mostly) domain names in SURBLs.
In fact the sample configurations shipped with uribl (which is the pm that contains both uridnsbl and urirhsbl) has those programs using sbl.spamhaus.org and SURBLs respectively:
http://www.spamassassin.org/full/3.0.x/dist/rules/25_uribl.cf
uridnsbl URIBL_SBL sbl.spamhaus.org. TXT header URIBL_SBL eval:check_uridnsbl('URIBL_SBL') describe URIBL_SBL Contains a URL listed in the SBL blocklist tflags URIBL_SBL net
urirhsbl URIBL_SC_SURBL sc.surbl.org. A header URIBL_SC_SURBL eval:check_uridnsbl('URIBL_SC_SURBL') describe URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist tflags URIBL_SC_SURBL net
I'm adding the above to the SURBL FAQ. If anyone spots any errors with the above, please let me know.
Then of course there is the ws.surbl and the be.surbl and all of the talk about setting up dns, etc.
You only need to set up a local mirror to cache the RBL zone files if you have a high volume mail system, say more than 100k inbound messages per day. For less volume it's ok to use the public nameservers.
At present [sc] and [ws] would be the lists to use. [be] is being deprecated in favor of [ws].
Jeff C.
-
Bill Landry -
Chuck Campbell -
Jeff Chan