Add new rbl list

[Thomas Plant]

Hello,

I'm trying to add 'mailkarma.junkemailfilter.com' to the rbl checks. I added other blacklists and they work, just this one doesn't.

Could it be that the rbl module has problems when a blacklists returns multiple results on a single query?

Here is an example for such a response:

nslookup 59.xxx.xxx.xxx.hostkarma.junkemailfilter.com
Server:  localhost
Address:  127.0.0.1

Nicht autorisierende Antwort:
Name:    59.xxx.xxx.xxx.hostkarma.junkemailfilter.com
Addresses:  127.0.0.2
          127.0.1.1

The second value '127.0.1.1' is an experimantal one according to their wiki.

I inserted in local.d/rbl.conf the following lines (deleted the other definitions I added for better legibility):

rbls {
    rbl_hostkarma {
        symbol = "HOSTKARMA";
        rbl = "hostkarma.junkemailfilter.com";
        ipv6 = false;
        received = true;
        returncodes {
            HOSTKARMA_WL = "127.0.0.1";
            HOSTKARMA_BL = "127.0.0.2";
            HOSTKARMA_YL = "127.0.0.3";
            HOSTKARMA_BR = "127.0.0.4";
        }
    }
}

And in local.d/rbl_group.conf:

symbols = {
    "HOSTKARMA_WL" {
        description = "HOSTKARMA whitelist";
        weight = -1.0;
    }
    "HOSTKARMA_BL" {
        description = "HOSTKARMA blacklist";
        weight = 1.0;
    }
    "HOSTKARMA_YL" {
        description = "HOSTKARMA yellowlist";
        weight = 0.0;
    }
    "HOSTKARMA_BR" {
        description = "HOSTKARMA brownlist";
        weight = 0.0;
    }
}

I'm running rspamd 1.7.5 on Centos 7.

Thanks,

Thomas

[Vsevolod Stakhov]

On 08/06/2018 11:06, Thomas Plant wrote:
> Hello,
>
> I'm trying to add 'mailkarma.junkemailfilter.com' to the rbl checks. I
> added other blacklists and they work, just this one doesn't.
>
> Could it be that the rbl module has problems when a blacklists returns
> multiple results on a single query?
>
> Here is an example for such a response:
> |
> nslookup 59.xxx.xxx.xxx.hostkarma.junkemailfilter.com
> Server: localhost
> Address: 127.0.0.1
>

> Nichtautorisierende Antwort:

That list violates RBL running standards:

% host 1.0.0.127.hostkarma.junkemailfilter.com
1.0.0.127.hostkarma.junkemailfilter.com has address 127.0.0.1
1.0.0.127.hostkarma.junkemailfilter.com has address 127.0.0.5

https://tools.ietf.org/html/rfc5782#section-5

I don't recommend to use this BL it is simply broken. There are no
issues in checking BLs with multiple return codes but Rspamd will not
work with broken RBLs.

[Thomas Plant]

So I will remove it.

Thank you very much for the clarification.

[Emanuel Gonzalez]

Excelent information, regards.!!

2018-06-08 7:21 GMT-03:00 Thomas Plant <blues...@gmail.com>:

So I will remove it.

Thank you very much for the clarification.

--
You received this message because you are subscribed to the Google Groups "rspamd" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rspamd+unsubscribe@googlegroups.com.
Visit this group at https://groups.google.com/group/rspamd.