.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "Mail::SpamAssassin::Plugin::DNSEval 3pm"
.TH Mail::SpamAssassin::Plugin::DNSEval 3pm 2024-01-21 "perl v5.38.2" "User Contributed Perl Documentation"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
DNSEVAL \- look up URLs against DNS blocklists
.SH SYNOPSIS
.IX Header "SYNOPSIS"
.Vb 1
\& loadplugin Mail::SpamAssassin::Plugin::DNSEval
\&
\& rbl_headers EnvelopeFrom,Reply\-To,Disposition\-Notification\-To
\& header     RBL_IP    eval:check_rbl_headers(\*(Aqrbl\*(Aq, \*(Aqrbl.example.com.\*(Aq, \*(Aq127.0.0.2\*(Aq)
\& describe   RBL_IP    From address associated with spam domains
\& tflags     RBL_IP    net
\& reuse      RBL_IP
\&
\& Supported extra tflags from SpamAssassin 3.4.3:
\&  domains_only \- only non\-IP\-address "host" components are queried
\&  ips_only \- only IP addresses as the "host" component will be queried
.Ve
.SH DESCRIPTION
.IX Header "DESCRIPTION"
The DNSEval plugin queries dns to see if a domain or an ip address
present on one of email's headers is on a particular rbl.
.SH "USER PREFERENCES"
.IX Header "USER PREFERENCES"
The following options can be used in both site-wide (\f(CW\*(C`local.cf\*(C'\fR) and
user-specific (\f(CW\*(C`user_prefs\*(C'\fR) configuration files to customize how
SpamAssassin handles incoming email messages.
.IP rbl_headers 4
.IX Item "rbl_headers"
.Vb 7
\& This option tells SpamAssassin in which headers to check for content
\& used to query the specified rbl.
\& If on the headers content there is an email address, an ip address
\& or a domain name, it will be checked on the specified rbl.
\& The configuration option can be overridden by passing an headers list as
\& last parameter to check_rbl_headers.
\& The default headers checked are:
.Ve
.IP \(bu 4
EnvelopeFrom
.IP \(bu 4
Reply-To
.IP \(bu 4
Disposition-Notification-To
.IP \(bu 4
X\-WebmailclientIP
.IP \(bu 4
X\-Source-IP
.IP check_rbl_from_domain 4
.IX Item "check_rbl_from_domain"
This checks all the from addrs domain names as an alternate to
check_rbl_from_host.  As of v3.4.1, it has been improved to include a
subtest for a specific octet.
.IP check_rbl_ns_from 4
.IX Item "check_rbl_ns_from"
This checks the dns server of the from addrs domain name.
It is possible to include a subtest for a specific octet.
.IP check_rbl_rcvd 4
.IX Item "check_rbl_rcvd"
This checks all received headers domains or ip addresses against a specific rbl.
It is possible to include a subtest for a specific octet.