HowTo: Find what RBLs it is using

[ramtech]

Another Newb Question I am sorry...
How do I find out what RBLs the system is using. My pet favourite (even after all their recent issues) is Spamhaus. But I never see it mentioned in the scores. So how do I find out which ones it is using and edit that list.

Thanks again in anticipation.

[shawniverson]

Post removed (bad advice)

[ramtech]

Hi again Shawn,
So does this mean that I need to change

Code: Select all

Spam List = # spamhaus-ZEN # You can un-comment this to enable them

to read

Code: Select all

Spam List =  spamhaus-ZEN 

in order to use zen.spamhaus.org, or does this mean that it is already in use? (It doesn't appear to be)

Cheers,
Roger

[shawniverson]

Post removed (bad advice)

[ramtech]

Ta mate,

sorry for the dumb questions.

So by default it uses no RBLs? Why is that?

[shawniverson]

Post removed (bad advice)

[ramtech]

That make a bit more sense.
the logs show up to 30 emails per minute being rejected and I can't see what they're getting rejected on in prima facie if not some RBLs.

[ramtech]

OK I'm Seriously in over my head now...
So I am looking into what RBLs SpamAssassin uses by default, and it seems it depends on Version. So I go trying to discover what SA version we are running.
it appears to be 3.003001!!! Which according to the SA Site is now way past unsupported and old.

So my question is, What SA version does it run? How do i find out what that is?
if it is 3.00xxx how to update it?

[shawniverson]

E.F.A. is on SA version 3.3.1

[ramtech]

E.F.A. is on SA version 3.3.1

OK! Now I get the 3.003001 directory listing.

So I also assume that the EFA updates handle the SA updates and I need to just stop being nosey hey?

[darky83]

Don't just enable RBL' s in mailscanner.

Doing this on the MTA level (postfix) is much faster, and we already enable spamhaus by default (see /etc/postfix/main.cf)

So if you enable this in mailscanner you will be double checking and thus only slowing your system down..

[ramtech]

Don't just enable RBL' s in mailscanner.
Doing this on the MTA level (postfix) is much faster, and we already enable spamhaus by default (see /etc/postfix/main.cf)
So if you enable this in mailscanner you will be double checking and thus only slowing your system down..

Great. Thanks for weighing in darky83.
That make more sense again.

[ovizii]

Don't just enable RBL' s in mailscanner.

Doing this on the MTA level (postfix) is much faster, and we already enable spamhaus by default (see /etc/postfix/main.cf)

So if you enable this in mailscanner you will be double checking and thus only slowing your system down..

Is it safe to rely on having spamhaus in postfix or should one rather remove that one and rely on all the RBL checks that SA does?
Talking about an EFA installation for incoming emails only as I see somewarnings about using zen.spamhaus on outgoing servers => https://www.spamhaus.org/zen/

Caution: Because ZEN includes the XBL and PBL lists, do not use ZEN on smarthosts or SMTP AUTH outbound servers for your own customers (or you risk blocking your own customers). Do not use ZEN in filters that do any ‘deep parsing’ of Received headers, or for anything other than checking IP addresses that hand off to your mailservers.

but seeing its used with smtpd_client_restrictions only it should be safe especially since permit_sasl_authenticated is set, right?

[shawniverson]

Is it safe to rely on having spamhaus in postfix or should one rather remove that one and rely on all the RBL checks that SA does?

Depends on what you are trying to accomplish. As a general rule, the more you block at the MTA level, the better. However, if your are concerned about false positive RBLs, blocking using SA will give you an opportunity to see the mail that was blocked at the rather large expense of scanning masses of actual RBL'ed email.

[ovizii]

However, if your are concerned about false positive RBL

that was my main concern...