David,
I simply installed the rbldnsd (http://www.corpit.ru/mjt/rbldnsd.html) package on a CentOS linux server and started adding addresses/blocks. My /etc/sysconfig/rbldnsd configuration file is as follows.
BLDNSD="- -4 -b x.x.x.x/5353 -r /var/lib/rbldns \
block.xxxxxxxxx:ip4set:block \
rbl.xxxxxxxx:ip4set:spam \
rbl.xxxxxxxx:ip4set:watch \
"
I also added the following to the SurgeMail configuration.
---------- surgemail.ini ----------
g_orbs_list name="block.xxxxxxxx" action="deny" stamp=""
g_orbs_list name="rbl.xxxxxxxx" action="stamp" stamp="127.0.0.2=ImagineNet_Spam~127.0.0.10=ImagineNet_Watch"
---------- sf_mfilter_local.txt ----------
if(isin("X-ORBS-Stamp", "ImagineNet_Spam")) then
call feature_manual(1, "Imagine Net Spam RBL")
end if
---------- mfilter.rul ----------
if (isin("X-ORBS-Stamp", "ImagineNet_Watch")) then
call report(HIDDEN@e@somewhere.tld", "ImagineNet_Watch RBL Hit")
end if
If you use a score of 1 for feature_manual, you will need to use SurgeMail 6.4b-47 or later and, according to NetWin, g_sf_binary must be enabled (g_sf_binary "TRUE").
This configuration provides the following.
1. Block IP's, CIDR subnets, or ranges and put comments in the file (when, who, why, etc.).
2. The first RBL is a hard block (deny).
3. The second RBL either tells SurgeMail to classify a message as spam (result of 127.0.0.2) OR sends me a report if the IP is on my watch list (result of 127.0.0.10).
Hope this helps.
Jim Lohiser
Imagine Net, Inc.
On Oct 14, 2013, at 2:15 PM, David Camm HIDDEN@advwebsys.com> wrote:
> jim -
>
> interesting. how'd you do that?
>
> david camm
> advanced web systems
> keller, tx
> On 10/9/2013 10:55 AM, JDL wrote:
>> I have started maintaining our own RBL. Is there are tellmail command to force SurgeMail to clear its RBL cache? I have reduced g_orbs_cache_life from the default of 7200 to 3600. However, if I add a spammer to my RBL, it can take quite a while for SurgeMail to see the change. I was looking for a way to clear the RBL cache without restarting SurgeMail.
>>
>> Thanks,
>>
>> Jim Lohiser
>> Imagine Net, Inc.
>>
>
>
|
