NAME

DNSEVAL - look up URLs against DNS blocklists

SYNOPSIS

loadplugin Mail::SpamAssassin::Plugin::DNSEval

rbl_headers EnvelopeFrom,Reply-To,Disposition-Notification-To
header     RBL_IP    eval:check_rbl_headers('rbl', 'rbl.example.com.', '127.0.0.2')
describe   RBL_IP    From address associated with spam domains
tflags     RBL_IP    net
reuse      RBL_IP

Supported extra tflags from SpamAssassin 3.4.3:
 domains_only - only non-IP-address "host" components are queried
 ips_only - only IP addresses as the "host" component will be queried

DESCRIPTION

The DNSEval plugin queries dns to see if a domain or an ip address present on one of email's headers is on a particular rbl.

USER PREFERENCES

The following options can be used in both site-wide (local.cf) and user-specific (user_prefs) configuration files to customize how SpamAssassin handles incoming email messages.

rbl_headers

This option tells SpamAssassin in which headers to check for content
used to query the specified rbl.
If on the headers content there is an email address, an ip address
or a domain name, it will be checked on the specified rbl.
The configuration option can be overridden by passing an headers list as
last parameter to check_rbl_headers.
The default headers checked are:

• EnvelopeFrom

• Reply-To

• Disposition-Notification-To

• X-WebmailclientIP

• X-Source-IP

check_rbl_from_domain

This checks all the from addrs domain names as an alternate to check_rbl_from_host. As of v3.4.1, it has been improved to include a subtest for a specific octet.

check_rbl_ns_from

This checks the dns server of the from addrs domain name. It is possible to include a subtest for a specific octet.

check_rbl_rcvd

This checks all received headers domains or ip addresses against a specific rbl. It is possible to include a subtest for a specific octet.