RSPAMD: add more DNSBL like b.barracudacentral.org

Feature
1

Hello @mrmarkuz
Please advice to add more DNSBL like a zen.spamhaus.org b.barracudacentral.org

Thank you

2

Here’s some info about how to add a blacklist:

http://docs.nethserver.org/projects/nethserver-devel/en/v7/nethserver-mail-filter.html#rbl-server-list

3

zen.spamhaus and barracudacentral are pretty the most common DNSBL list.

here a comparative

By aware, some list are free but have a quota of queries per day/month, when you reach this quota, it’s like if you don’t have them.

By experience, you don’t really need to have more than 2.
After that it’s depend how you configure your services;
IE: it is ban the email if it is matching at least two lists or ban the email if it is matching at least once may do a big difference. (but i’m not sure rspamd offer this)

4

Hello @mrmarkuz
Not found the link
Anyway, there are some IP like a 200.125.24.162 can passed RSPAMD but the IP is Blacklist in BARRACUDA. So, I would like add [b.barracudacentral.org] in /etc/rspamd/modules.d/emails.conf
Please help

Thank you

5

I don’t know what’s the best way to add a DNSBL to rspamd… @stephdl do you have an idea?

6

There is a gh issue https://github.com/rspamd/rspamd/issues/539

Please let us know if it works/fails we probably miss a piece of doc

7

the doc we have on rspamd http://docs.nethserver.org/en/latest/rspamd.html, after that we are compatible with the rspamd documentation itself

8

Take a look to the comment of @JOduMonT about the number of rbl, some are pre-configured in rspamd, check /etc/rspamd/modules.d/rbl.conf

Anyway this is the generic way to implement a RBL in rspamd, please read also https://rspamd.com/doc/modules/rbl.html

# cat /etc/rspamd/local.d/rbl.conf
rbls {
    brbl {
        symbol = BARRACUDA_RBL;
        rbl = "b.barracudacentral.org";
        received = true;
    }
}

and

# cat /etc/rspamd/local.d/rbl_group.conf
symbols = {

    "BARRACUDA_RBL" {
        weight = 0.0;
        description = "Resolver blocked due to barracuda rbl";
    }
}

adapt the weight to increase the spamd score when the rule matches

9

Hi
Just add into /etc/rspamd/modules.d/rbl.conf, right ?
.
cat /etc/rspamd/modules.d/rbl.conf

rbls {
brbl {
symbol = BARRACUDA_RBL;
rbl = “b.barracudacentral.org”;
received = true
}
}

    spamhaus {
        symbol = "RBL_SPAMHAUS";
        rbl = "zen.spamhaus.org";
        ipv6 = true;
        returncodes {

.
.
Thank you

10

do not put this in the config file, it is to show you which file to create

11

Hi

Please help to add in the Nethserver, I will be testing

Thank you

12

ssh to your server
use an editor : nano could be easier (install it if necessary)

nano /etc/rspamd/local.d/rbl_group.conf

paste

symbols = {

    "BARRACUDA_RBL" {
        weight = 0.0;
        description = "Resolver blocked due to barracuda rbl";
    }
}

save

nano /etc/rspamd/local.d/rbl.conf

paste

rbls {
    brbl {
        symbol = BARRACUDA_RBL;
        rbl = "b.barracudacentral.org";
        received = true;
    }
}

save

restart rspamd

systemctl restart rspamd

check your configuration

rspamadm configdump | less

search and find your configuration changes to check if it is good

1 Like
13

you could use also one of my module nethserver-shellinabox if you are not at ease with ssh

14

Hi

Thank you so much but how to check the BARRACUDA_RBL working or not ?

15

good question, I think you must check about the symbol BARRACUDA_RBL in the history tab of rspamd UI, maybe you could forward an email that you receive previously and you know it is blacklisted

16

Thank you again.

17

you could paste the source email in the scan tab, if you match the symbol, you will see it there with the associated score