RBL - score rather than block?

[blazeking]

Hello all - I want my RBL (bl.spamcop.net) to score SA rather than block at the MTA level. Would I do this by removing "reject_rbl_client bl.spamcop.net" from main.cf, and instead configure it within "20_dnsbl_tests.cf" in ~/conf/spamassassin?

[FritzBrause]

Postfix will reject every message from a sender IP listed at one ore more RBLs configured. Using this configuration Amavis / Spamassassin will be not involved at all.

Using Spamassassin only you may want to tweak /opt/zimbra/conf/spamassassin/20_dnsbl_tests.cf to your needs.

I recommend one of the following configurations:

• Configure 3-5 RBLs with postfix (Admin GUI)
• Delete 20_dnsbl_tests.cf

or

• Do not configure any RBLs with postfix (Admin GUI)
• Tweak 20_dnsbl_tests.cf

The latter may cause a lot more CPU usage and disk IOPS. So use wit care.

[blazeking]

So the only way to avoid the reject at MTA is by configuring SA, which causes a lot of CPU/disk use? We reject ~6000/day by RBL... not sure how much strain that will put on the system if it has to pass through SA.

[FritzBrause]

6000 per day will be no problem with todays hardware. If we would be talking about 150000 or more E-Mails per day it may become noticeable.

[blazeking]

Thanks! I'll try it out and see if my hardware can handle it.