Introduction: SURBL - Spam URI Realtime Blocklists

For more information: [http://www.surbl.org/]

SURBLs are DNS RBLs (blacklists) of domains. They are very useful for detecting known spammy websites in Spam, while not requiring large rulesets containing list of spammer domains (such as sa-blacklist by WilliamStearns).

Installing

SURBLs and SpamAssassin 2.6x

Using SURBLs with SpamAssassin 2.6x requires a patch to Mail::SpamAssassin::Conf be installed (it's available on CPAN) - the name of the CPAN distribution is Mail::SpamAssassin::SpamCopURI. A new version of Mail::SpamAssassin::SpamCopURI is released for every new release of SpamAssassin 2.6x. Remember to update Mail::SpamAssassin::SpamCopURI everytime you update SpamAssassin.

Once you've got Mail::SpamAssassin::SpamCopURI installed, all you need is a rules file tellling SpamAssassin what SURBL lists to query. Then you're off.

More details instructions are available from the SURBL homepage.

SURBLs and SpamAssassin 3.x

SpamAssassin 3.0 and higher come with SURBL support.

Rulesets

• sc.surbl.org - SpamCop spamvertised sites
• ws.surbl.org - This is the SURBL of WilliamStearns sa-blacklist.cf. Using this in favour of the ruleset will significantly reduce your spamd memory usage!
• ob.surbl.org - OutBlaze spamvertised sites
• ab.surbl.org - AbuseButler top 425 spamvertised sites
• jp.surbl.org - jwSpamSpy and Prolocation spam URI data
• ph.surbl.org - phishing spam URI data
• multi.surbl.org - preferred combined list of all of the above. Some data sources are only available in multi. Use multi with urirhssub, as is the default in SpamAssassin 3.X.