How to set up RBLs
Added almost 2 years ago
RBLs are Real time Black Lists. That is to say several different entities over the world are doing lists of domains they think are spammers. We selected some of those lists which you can enable at different stages of MailCleaner analyze. Here is what you need to know to use them with the best efficiency in MailCleaner :
RBLs can be used at several stages (the stages are given in the analyze order)
- in SMTP level will directly refuse the email => you spare CPU/RAM and Diskspace in case the mail would have been sent to quarantine. At this stage only the IP currently giving the messsage to your mail server is checked versus the RBL.
- in PreRBL level will send email to quarantine. At this level you can decide how many RBLs need to "hit" to send the mail to quarantine. 1 will make each RBL decisive when 2 may let more spams go trough but also avoids false positives. In the case, you decide to use more than 1 RBLs to hit the spam, please check several RBLs. All the IPs which relayed the message are checked at this stage
- in SpamC level will add score for an email, if the email score reaches 5.0, the mail will go to quarantine. All the IPs which relayed the message are checked at this stage
If you check a RBL in SMTP stage, you still can reuse it in PreRBLs as SMTP stage only checks the IP currently giving the mail to MailCleaner versus the RBL while the tests from PreRBLs chack all IPs from the mail header "Received From" that is to say all mail servers which have relayed the message. At this stage, you should only check RBLs that have a very low percentage of false positives.
If you check a RBL in PreRBL,
- if you choosed to use only one RBL hit to be decisive, dont use the same RBL in SpamC for the same reason as above
- if you choosed to use several RBL hits to be decisive, you can reuse the same RBLs in SpamC for a RBL to add score without being decisive by itself.
Please note that the RBLs used in the module Trusted Sources are in fact Whitelists for the AntiSpam section of MailCleaner.
Any RBL containing the string "wl" is in fact a whitelisting RBL.