Barracuda Networks provides a Realtime Block List (RBL) that is by default added to the Spam Filter service rules. If you want to modify the RBL configuration, you can use the instructions below.
How to Edit the RBL in the Spam Filter Rules
- Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > SPAM-Filter > SPAM Filter Settings.
- Click Lock.
- Next to RULES, click Edit.
- After modifying the code, click OK.
- Click Send Changes and Activate.
Code for Directly Checking Sender IP Addresses
header IN_BCUDA_HOP rbleval:check_rbl('bcuda-notfirsthop', 'b.barracudacentral.org')
describe IN_BCUDA_HOP Received via a relay listed by Barracuda BRBL
tflags IN_BCUDA_HOP net
score RCVD_IN_BCUDA_HOP 1.00
Code for Checking Sender IP Addresses via Next Hop
header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'b.barracudacentral.org')
describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
tflags IN_BCUDA_RBL net
header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda', '127.0.0.2')
describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
tflags RCVD_IN_BCUDA_RELAY net
score RCVD_IN_BCUDA_RBL 1.00
score RCVD_IN_BCUDA_RELAY 1.00
This entry will be used when querying against DNS lists that contain dial-up IP addresses.
Example Script
In this example, the score value of "1" is used when the RBL matches. To make sure that the RBL is used, you may check the mail gateway log file for the following messages:
201003 31 11:54:06 Info +0200 212.227.126.171:51619 SPAM Report: * 1.0 IN_BCUDA_RBL RBL: Received via a relay listed by Barracuda BRBL
201003 31 11:54:06 Info +0200 212.227.126.171:51619 SPAM Report: * [xx.xx.xx.xx listed in b.barracudacentral.org]
201003 31 11:54:06 Info +0200 212.227.126.171:51619 SPAM Report: * 1.0 RCVD_IN_BCUDA_RELAY RBL: BCUDA: relay ip is convicted spammer
201003 31 11:54:06 Info +0200 212.227.126.171:51619 SPAM Report: * 0.0 HTML_MESSAGE BODY: HTML included in message