Updating Block lists

[plusmore]

Is it possible to update/add block lists in Spam Monitor in the same way as Spampal? SM uses the Spamhaus SBL+XBL but Spamhaus recommend using the Zen DNSBL (zen.spamhaus.org) and say this should be the only one to use. Any ideas how I can update the SM config for this?

Regards,
Peter

[AChen]

Hi plusmore,

If you wish to update/add/block lists in Spam Monitor, you can do this by going to c:\Program Files\Spam Monitor and modifying default_dnsbl.dat manually. You can manually add the URL's you wish and follow the template setup, eg, NAME ZONE WEBSITE DESCRIPTION etc. Please note that we do not support this manual procedure. But this is just some info to answer your question.

[plusmore]

That seems to be working thanks, if anyone is interested in updating their file to use the Spamhaus Zen repository (as recommended by Spamhaus) the change to the file is:


LIST ZEN
ENABLED_IN_SCHEME MEDIUM
ENABLED_IN_SCHEME AGGRESSIVE
NAME Spamhaus Zen
ZONE zen.spamhaus.org
WEBSITE http://www.spamhaus.org/zen/
DESCRIPTION ZEN is the combination of all Spamhaus DNSBLs into one single
powerful and comprehensive blocklist to make querying faster and simpler. It
contains the SBL, the XBL and the PBL blocklist.
RESULT_CODE 127.0.0.2 # Spamhaus Block List
RESULT_CODE 127.0.0.4 # Exploits Block List
RESULT_CODE 127.0.0.5 # Exploits Block List
RESULT_CODE 127.0.0.6 # Exploits Block List
RESULT_CODE 127.0.0.7 # Exploits Block List
RESULT_CODE 127.0.0.8 # Exploits Block List
RESULT_CODE 127.0.0.10 # Policy Block List
RESULT_CODE 127.0.0.11 # Policy Block List

LIST SBL+XBL
ENABLED_IN_SCHEME MEDIUM
ENABLED_IN_SCHEME AGGRESSIVE
NAME Spamhaus SBL+XBL
ZONE sbl-xbl.spamhaus.org
WEBSITE http://www.spamhaus.org
DESCRIPTION Combination of the Spamhaus SBL and XBL lists; contains known
spammers & spam-support services, plus systems infected with illegal 3rd
party exploits such as open proxies & spamming worms/viruses.
RESULT_CODE 127.0.0.2 # In sbl.spamhaus.org
RESULT_CODE 127.0.0.4 # In xbl.spamhaus.org
RESULT_CODE 127.0.0.5 # In xbl.spamhaus.org
RESULT_CODE 127.0.0.6 # In xbl.spamhaus.org
SUBSUMED_BY ZEN

In addition, it seems that ORDB has shut down (see http://securitywatch.eweek.com/spam/ordborg_calls_it_quits.html and so this needs to be disabled to prevent slow responses.

Hope this helps.

Peter