Configuring spamhaus datafeed in rspamd?

[Sophie Lo]

Hi,

Did anybody add spamhaus datafeeds into rspamd? I think the config is like this, but would love if someone could confirm or deny.

I took this from https://rspamd.com/doc/modules/surbl.html

Where xxx is the API key.

# local.d/surbl.conf
rules {
"DBL" {
suffix = "xxx.dbl.dq.spamhaus.net";
# Do not check numeric URL's
noip = true;
}
"SBL" {
suffix = "xxx.sbl. dq.spamhaus.net";
}
"XBL" {
suffix = "xxx.xbl. dq.spamhaus.net";
}
"ZEN" {
suffix = " xxx.zen. dq.spamhaus.net";
}
}


Best, Sophie
Sent from a mobile. Excuse my brevity.

[Philip Paeps]

On 2018-07-02 13:01:51 (+0200), Sophie Lo wrote:
> Did anybody add spamhaus datafeeds into rspamd? I think the config is
> like this, but would love if someone could confirm or deny.

Yes. It's working fine for me.

I have this:

# local.d/surbl.conf
rules {
"DBL" {
suffix = "xxx.dbl.dq.spamhaus.net";
}

"SBL_URIBL" {
suffix = "xxx.sbl.dq.spamhaus.net.";
}
}
redirector_hosts_map = "$LOCAL_CONFDIR/redirectors.inc";

# local.d/rbl.conf
rbls {
spamhaus {
rbl = "xxx.zen.dq.spamhaus.net";
}
spamhaus_xbl {
rbl = "xxx.zen.dq.spamhaus.net";
}
}

You should not put zen and xbl in surbl.conf. They belong in rbl.conf.
They're different modules.

Philip

--
Philip Paeps
Senior Reality Engineer
Ministry of Information

[Sophie Lo]

Thanks. I'll enable this config this evening.

-- 
You received this message because you are subscribed to the Google Groups "rspamd" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rspamd+u

[Sophie Loe]

Tried this and got:

2018-07-02 20:59:50 #6526(rspamd_proxy) <53ca32>; lua; rbl.lua:161: error looking up 169.128.85.209.MyAPIkey.zen.dq.spamhaus.net: server fail

So, I checked with postfix usinf this as an rbl:

Jul 2 21:04:53 mx10 postfix/smtpd[6856]: warning: 173.128.85.209.MyAPIkey.sbl-xbl.dq.spamhaus.net: RBL lookup error: Host or domain name not found. Name service error for name=173.128.85.209.MyAPIkey.sbl-xbl.dq.spamhaus.net type=A: Host not found, try again

My Hetzner VM cannot lookup anything to do with spamhaus anymore.
It seems to lookup everything else.


more investigation…..

> --
> You received this message because you are subscribed to the Google Groups "rspamd" group.

> To unsubscribe from this group and stop receiving emails from it, send an email to rspamd+un...@googlegroups.com.
> Visit this group at https://groups.google.com/group/rspamd.

[Sophie Loe]

Maybe it’s late and I mixed up the API keys :-) Working now. Thx.


> On 2 Jul 2018, at 23:10, Bjoern Franke <b...@nord-west.org> wrote:
>
> Hi,

>
>>
>> 2018-07-02 20:59:50 #6526(rspamd_proxy) <53ca32>; lua; rbl.lua:161: error looking up 169.128.85.209.MyAPIkey.zen.dq.spamhaus.net: server fail
>>
>> So, I checked with postfix usinf this as an rbl:
>>
>> Jul 2 21:04:53 mx10 postfix/smtpd[6856]: warning: 173.128.85.209.MyAPIkey.sbl-xbl.dq.spamhaus.net: RBL lookup error: Host or domain name not found. Name service error for name=173.128.85.209.MyAPIkey.sbl-xbl.dq.spamhaus.net type=A: Host not found, try again
>>
>> My Hetzner VM cannot lookup anything to do with spamhaus anymore.
>> It seems to lookup everything else.
>

> Maybe you could point your PowerDNS to lookup spamhaus-requestes via
> 8.8.8.8 or 1.1.1.1?
>
> Regards
> Bjoern