Differences between revisions 2 and 3
Revision 2 as of 2008-09-01 00:55:16
Size: 868
Editor: LeeMaguire
Comment: copy description from spamhaus and add links
Revision 3 as of 2009-09-20 23:16:18
Size: 877
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 8: Line 8:
The mail was received from a server listed in the [http://www.spamhaus.org/xbl/ Spamhaus Exploits Block List] [:DnsBlocklists:DNSBL], which lists hijacked PCs infected by illegal 3rd party exploits. The mail was received from a server listed in the [[http://www.spamhaus.org/xbl/|Spamhaus Exploits Block List]] [[DnsBlocklists|DNSBL]], which lists hijacked PCs infected by illegal 3rd party exploits.
Line 11: Line 11:
    * the CBL (Composite Block List) from [http://cbl.abuseat.org cbl.abuseat.org]
    * the NJABL Open Proxy IPs list from [http://www.njabl.org www.njabl.org].
    * the CBL (Composite Block List) from [[http://cbl.abuseat.org|cbl.abuseat.org]]
    * the NJABL Open Proxy IPs list from [[http://www.njabl.org|www.njabl.org]].
Line 17: Line 17:
The default scores for this rule can be found [http://spamassassin.apache.org/tests.html in the online list of tests]. The default scores for this rule can be found [[http://spamassassin.apache.org/tests.html|in the online list of tests]].

SpamAssassin Rule: RCVD_IN_XBL

Standard description: Received via a relay in Spamhaus XBL

Explanation

The mail was received from a server listed in the Spamhaus Exploits Block List DNSBL, which lists hijacked PCs infected by illegal 3rd party exploits.

  • The XBL wholly incorporates data from two highly-trusted DNSBL sources, with tweaks by Spamhaus to maximise the data efficiency and lower False Positives. The main components are:

Further Info

The default scores for this rule can be found in the online list of tests.


CategoryRule

Rules/RCVD_IN_XBL (last edited 2009-09-20 23:16:18 by localhost)