Below is part of the FAQ from njabl.org. It shows a sample of a spamassassin configuration. If you query the njabl.org database it will return one or more of the 127.0.0.x IP address strings if the address of interest is in the database. For example, to query your address simply reverse your IP address and type: (x = your real numbers) # host 103.28.xx.xxx.dnsbl.njabl.org # host 103.28.xx.xxx.dnsbl.sorbs.net (for the sorbs database) Notice that you can temper scores base on whether a DUL, OPEN RELAY, PROXY, or etc. is found within spamassassin. Plug your friend's address in to see what happens. Regards, Mike Klinke ====================== from the njabl.org FAQ ====== Our dnsbl can also be used to tag potential spam messages (letting individual users decide what action to take) using Spamassassin. After you have Spamassassin properly installed, add the following to your local.cf, probably /etc/mail/spamassassin/local.cf: (note: according to the Spamassassin developers, these rules will only work with Spamassassin up to version 2.5x and will not work properly with Spamassassin >= 2.6x) header IN_NJABL_ORG rbleval:check_rbl('njabl','dnsbl.njabl.org.') describe IN_NJABL_ORG Received via a relay in dnsbl.njabl.org tflags IN_NJABL_ORG net header NJABL_OPEN_RELAY rbleval:check_rbl_results_for('njabl', '127.0.0.2') describe NJABL_OPEN_RELAY DNSBL: sender is Confirmed Open Relay tflags NJABL_OPEN_RELAY net header NJABL_DUL rbleval:check_rbl_results_for('njabl', '127.0.0.3') describe NJABL_DUL DNSBL: sender ip address in in a dialup block tflags NJABL_DUL net header NJABL_SPAM_SRC rbleval:check_rbl_results_for('njabl', '127.0.0.4') describe NJABL_SPAM_SRC DNSBL: sender is Confirmed Spam Source tflags NJABL_SPAM_SRC net header NJABL_MULTI_STAGE rbleval:check_rbl_results_for('njabl', '127.0.0.5') describe NJABL_MULTI_STAGE DNSBL: sent through multi-stage open relay tflags NJABL_MULTI_STAGE net header NJABL_CGI rbleval:check_rbl_results_for('njabl', '127.0.0.8') describe NJABL_CGI DNSBL: sender is an open formmail tflags NJABL_CGI net header NJABL_PROXY rbleval:check_rbl_results_for('njabl', '127.0.0.9') describe NJABL_PROXY DNSBL: sender is an open proxy tflags NJABL_PROXY net score IN_NJABL_ORG 0.38 score NJABL_DUL 0.62 score NJABL_MULTI_STAGE 0.75 score NJABL_PROXY 3.00 score NJABL_OPEN_RELAY 3.00 score NJABL_CGI 1.50 score NJABL_SPAM_SRC 3.00 -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list