Configuring SpamRATS on Exim
How to configure SpamRATS RBLs on Exim MTA through WHM (cPanel) interface
Please note that due to the complex and varied nature of Exim configurations, we can only provide configuration instructions for the cPanel / WHM implementation of Exim as having a known format and approach. If you are running Exim as a standalone implementation, you will need to consult the Exim documentation on how to add RBL lists.
SpamRATS RBLs can be configured through the Exim Configuration Manager in the WHM Admin Panel:
WHM Admin Panel >> Exim Configuration Manager >> Basic Editor >> RBLs >> Manage Custom RBLs [Manage]
#RATS-Dyna
RBL Name: ratsdyna
RBL Info URL: https://spamrats.com
DNS List: [YOUR_API_KEY].dyna.spamrats.com
#RATS-NoPtr
RBL Name: ratsnoptr
RBL Info URL: https://spamrats.com
DNS List: [YOUR_API_KEY].noptr.spamrats.com
#RATS-Spam
RBL Name: ratsspam
RBL Info URL: https://spamrats.com
DNS List: [YOUR_API_KEY].spam.spamrats.com
How to configure SpamRATS RBLs on Exim MTA through CLI
If you want to add or remove RBLs through the command line – do not edit the exim.conf file, as it can be overwritten. Instead, list the desired RBLs in /etc/exim.strings.conf.custom. Create the file if not already present, and add the SpamRATS RBLs to the list:
RBL_DNS_LIST==dyna.spamrats.com : noptr.spamrats.com : spam.spamrats.com
After saving the changes, restart exim service by running following terminal command as root:
/scripts/restartsrv_exim
Warning: Please remember that you MAY not be able to query from some DNS servers, especially without an API key. You should use a DNS servers that clearly identifies who is making the query (PTR Record). Consider using your own local resolver if you have troubles. With a subscription, there are alternative ways to get data.
Caveats and Testing that it Works
RBL's work using DNS, and you should ALWAYS look for the correct IP Address being returned. Simply getting a "result" doesn't always mean the IP is listed. It should return the specific IP address, anything else might mean an error, and should be ignored and NOT rejected. Also, your DNS needs to be able to correctly query our mirrors. Bad firewall rules that prevent you from reaching our mirrors, means that you are not protected. You can always test at the command line first. A simple..
host 36.0.0.127.[YOUR_API_KEY].dyna.spamrats.com host 1.0.0.127.[YOUR_API_KEY].dyna.spamrats.com
.. the first example should work and return 127.0.0.36, while the second example should return NXDOMAIN. (IP Not found). If that doesn't work, check your firewalls first, and check which DNS servers you are using, and finally test/check your API key is correct, and active before reaching out to us for support.
Blocked Users
You may find that your ability to query the SpamRATS DNSBL Public Mirrors has been restricted. This could be due to the usage not falling within our Terms of Service. Before restricting any queries we try to reach out via email. Please check to see if you received an email from sales@mthreat.com at your public email address. If you have received the message, please reply to it.
If you would like to continue using the SpamRATS RBLs, please contact us and include the IP(s) that you used to query in your email.
Many thanks to our Sponsors, Subscription Holders, Users and Contributors.
