common/common_rbl

   1 # spamassasin rules duplicate
   2 score RCVD_IN_XBL 0
   3 score RCVD_IN_SBL 0
   4
   5 # blarson 2004-11-20
   6 header RCVD_IN_SBLXBL   eval:check_rbl('SBLXBL', 'sbl-xbl.spamhaus.org')
   7 describe RCVD_IN_SBLXBL listed in spamhaus.org sbl-xbl
   8 tflags RCVD_IN_SBLXBL   net
   9 # blarson 2005-01-28 see which return part 2005-02-26 ajust scores
  10 score RCVD_IN_SBLXBL    2
  11 header RCVD_IN_SBLXBL_SBL eval:check_rbl_sub('SBLXBL', '127.0.0.2')
  12 score RCVD_IN_SBLXBL_SBL 1.5
  13 header RCVD_IN_SBLXBL_CBL eval:check_rbl_sub('SBLXBL', '127.0.0.4')
  14 score RCVD_IN_SBLXBL_CBL 1
  15 header RCVD_IN_SBLXBL_5 eval:check_rbl_sub('SBLXBL', '127.0.0.5')
  16 score RCVD_IN_SBLXBL_5 1
  17 header RCVD_IN_SBLXBL_OPM eval:check_rbl_sub('SBLXBL', '127.0.0.6')
  18 score RCVD_IN_SBLXBL_OPM 1
  19
  20 header  RCVD_IN_NIX1            eval:check_rbl('NiX', 'ix.dnsbl.manitu.net.')
  21 describe RCVD_IN_NIX1           Received in NiX filter http://www.ix.de/nixspam/dnsbl/
  22 tflags  RCVD_IN_NIX1            net
  23 score   RCVD_IN_NIX1            1.5
  24
  25
  26 # blarson 2007-09-14
  27 # blarson 2010-09-14 reduce score due to false positives
  28 uridnsbl URIBL_CNKR     cn-kr.blackholes.us.    A
  29 body    URIBL_CNKR      eval:check_uridnsbl('URIBL_CNKR')
  30 describe URIBL_CNKR     china or korea hosted web site
  31 tflags  URIBL_CNKR      net
  32 score URIBL_CNKR        1.5
  33
  34 # disable the SECURITYSAGE RBL
  35 score DNS_FROM_SECURITYSAGE 0.0
  36
  37 # blarson 2007-09-14
  38 uridnsbl_skip_domain    debian.org debian.net yahoo.com google.com
  39
  40 # blarson 2007-09-14
  41 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
  42 body            URIBL_SBL       eval:check_uridnsbl('URIBL_SBL')
  43 describe        URIBL_SBL       Contains an URL listed in the SBL blocklist
  44 tflags          URIBL_SBL       net
  45 #reuse          URIBL_SBL
  46 score           URIBL_SBL       3.5
  47
  48 # don 2008-03-24
  49 uridnsbl        URIBL_SURBL     multi.surbl.org.       A
  50 body            URIBL_SURBL     eval:check_uridnsbl('URIBL_SURBL')
  51 describe        URIBL_SURBL     Contains an URL listed in the mutli surbl blocklist
  52 score           URIBL_SURBL     3.5
  53