# blarson 2005-01-28 see which return part 2005-02-26 ajust scores
score RCVD_IN_SBLXBL 2
header RCVD_IN_SBLXBL_SBL eval:check_rbl_sub('SBLXBL', '127.0.0.2')
+tflags RCVD_IN_SBLXBL_SBL net
score RCVD_IN_SBLXBL_SBL 1.5
header RCVD_IN_SBLXBL_CBL eval:check_rbl_sub('SBLXBL', '127.0.0.4')
score RCVD_IN_SBLXBL_CBL 1
+tflags RCVD_IN_SBLXBL_CBL net
header RCVD_IN_SBLXBL_5 eval:check_rbl_sub('SBLXBL', '127.0.0.5')
score RCVD_IN_SBLXBL_5 1
+tflags RCVD_IN_SBLXBL_5 net
header RCVD_IN_SBLXBL_OPM eval:check_rbl_sub('SBLXBL', '127.0.0.6')
score RCVD_IN_SBLXBL_OPM 1
+tflags RCVD_IN_SBLXBL_OPM net
header RCVD_IN_NIX1 eval:check_rbl('NiX', 'ix.dnsbl.manitu.net.')
describe RCVD_IN_NIX1 Received in NiX filter http://www.ix.de/nixspam/dnsbl/
# blarson 2007-09-14
+# blarson 2010-09-14 reduce score due to false positives
uridnsbl URIBL_CNKR cn-kr.blackholes.us. A
body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR')
describe URIBL_CNKR china or korea hosted web site
tflags URIBL_CNKR net
-score URIBL_CNKR 2.5
+score URIBL_CNKR 1.5
+
+# disable the SECURITYSAGE RBL
+score DNS_FROM_SECURITYSAGE 0.0
# blarson 2007-09-14
uridnsbl_skip_domain debian.org debian.net yahoo.com google.com
body URIBL_SURBL eval:check_uridnsbl('URIBL_SURBL')
describe URIBL_SURBL Contains an URL listed in the mutli surbl blocklist
score URIBL_SURBL 3.5
-
+tflags URIBL_SURBL net