209 lines
5.3 KiB
Plaintext
209 lines
5.3 KiB
Plaintext
|
symbols = {
|
||
|
"RECEIVED_SPAMHAUS_SBL" {
|
||
|
weight = 6.0;
|
||
|
}
|
||
|
"RECEIVED_SPAMHAUS_CSS" {
|
||
|
weight = 3.0;
|
||
|
}
|
||
|
"RECEIVED_SPAMHAUS_XBL" {
|
||
|
weight = 0;
|
||
|
}
|
||
|
"SPAMHAUS_ZEN" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"SH_AUTHBL_RECEIVED" {
|
||
|
weight = 4.0;
|
||
|
}
|
||
|
"RBL_DBL_SPAM" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"RBL_DBL_PHISH" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"RBL_DBL_MALWARE" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"RBL_DBL_BOTNET" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"RBL_DBL_ABUSED_SPAM" {
|
||
|
weight = 3.0;
|
||
|
}
|
||
|
"RBL_DBL_ABUSED_PHISH" {
|
||
|
weight = 3.0;
|
||
|
}
|
||
|
"RBL_DBL_ABUSED_MALWARE" {
|
||
|
weight = 3.0;
|
||
|
}
|
||
|
"RBL_DBL_ABUSED_BOTNET" {
|
||
|
weight = 3.0;
|
||
|
}
|
||
|
"RBL_ZRD_VERY_FRESH_DOMAIN" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"RBL_ZRD_FRESH_DOMAIN" {
|
||
|
weight = 4.0;
|
||
|
}
|
||
|
"ZRD_VERY_FRESH_DOMAIN" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"ZRD_FRESH_DOMAIN" {
|
||
|
weight = 4.0;
|
||
|
}
|
||
|
"SH_EMAIL_DBL" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"SH_EMAIL_DBL_ABUSED" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"SH_EMAIL_ZRD_VERY_FRESH_DOMAIN" {
|
||
|
weight = 7.0;
|
||
|
}
|
||
|
"SH_EMAIL_ZRD_FRESH_DOMAIN" {
|
||
|
weight = 4.0;
|
||
|
}
|
||
|
"RBL_DBL_DONT_QUERY_IPS" {
|
||
|
weight = 0.0;
|
||
|
}
|
||
|
"RBL_ZRD_DONT_QUERY_IPS" {
|
||
|
weight = 0.0;
|
||
|
}
|
||
|
"SH_EMAIL_ZRD_DONT_QUERY_IPS" {
|
||
|
weight = 0.0;
|
||
|
}
|
||
|
"SH_EMAIL_DBL_DONT_QUERY_IPS" {
|
||
|
weight = 0.0;
|
||
|
}
|
||
|
"DBL" {
|
||
|
weight = 0.0;
|
||
|
description = "DBL unknown result";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_SPAM" {
|
||
|
weight = 7;
|
||
|
description = "DBL uribl spam";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_PHISH" {
|
||
|
weight = 7;
|
||
|
description = "DBL uribl phishing";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_MALWARE" {
|
||
|
weight = 7;
|
||
|
description = "DBL uribl malware";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_BOTNET" {
|
||
|
weight = 7;
|
||
|
description = "DBL uribl botnet C&C domain";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
|
||
|
|
||
|
"DBLABUSED_SPAM_FULLURLS" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit spam";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBLABUSED_PHISH_FULLURLS" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit phish";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBLABUSED_MALWARE_FULLURLS" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit malware";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBLABUSED_BOTNET_FULLURLS" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit botnet";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
|
||
|
|
||
|
"DBL_ABUSE" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit spam";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_ABUSE_REDIR" {
|
||
|
weight = 1.5;
|
||
|
description = "DBL uribl abused spammed redirector domain";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_ABUSE_PHISH" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit phish";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_ABUSE_MALWARE" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit malware";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_ABUSE_BOTNET" {
|
||
|
weight = 5.5;
|
||
|
description = "DBL uribl abused legit botnet C&C";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_PROHIBIT" {
|
||
|
weight = 0.0;
|
||
|
description = "DBL uribl IP queries prohibited!";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_BLOCKED_OPENRESOLVER" {
|
||
|
weight = 0.0;
|
||
|
description = "You are querying Spamhaus from an open resolver, please see https://www.spamhaus.org/returnc/pub/";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"DBL_BLOCKED" {
|
||
|
weight = 0.0;
|
||
|
description = "You are exceeding the query limit, please see https://www.spamhaus.org/returnc/vol/";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"SPAMHAUS_ZEN_URIBL" {
|
||
|
weight = 0.0;
|
||
|
description = "Spamhaus ZEN URIBL: Filtered result";
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"URIBL_SBL" {
|
||
|
weight = 6.5;
|
||
|
description = "A domain in the message body resolves to an IP listed in Spamhaus SBL";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"URIBL_SBL_CSS" {
|
||
|
weight = 6.5;
|
||
|
description = "A domain in the message body resolves to an IP listed in Spamhaus SBL CSS";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"URIBL_PBL" {
|
||
|
weight = 0.01;
|
||
|
description = "A domain in the message body resolves to an IP listed in Spamhaus PBL";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"URIBL_DROP" {
|
||
|
weight = 6.5;
|
||
|
description = "A domain in the message body resolves to an IP listed in Spamhaus DROP";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"URIBL_XBL" {
|
||
|
weight = 5.0;
|
||
|
description = "A domain in the message body resolves to an IP listed in Spamhaus XBL";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
"SPAMHAUS_SBL_URL" {
|
||
|
weight = 6.5;
|
||
|
description = "A numeric URL in the message body is listed in Spamhaus SBL";
|
||
|
one_shot = true;
|
||
|
groups = ["spamhaus"];
|
||
|
}
|
||
|
.include(try=true,priority=1,duplicate=merge) "$LOCAL_CONFDIR/local.d/sh_rbl_group_hbl.conf"
|
||
|
}
|