add more matches for shipping spam
[spamassassin_config.git] / common / common_rbl
1 # -*- mode: spamassassin -*-
2 # spamassasin rules duplicate
3 score RCVD_IN_XBL 0
4 score RCVD_IN_SBL 0
5
6 # blarson 2004-11-20
7 header RCVD_IN_SBLXBL   eval:check_rbl('SBLXBL', 'sbl-xbl.spamhaus.org')
8 describe RCVD_IN_SBLXBL listed in spamhaus.org sbl-xbl
9 tflags RCVD_IN_SBLXBL   net
10 # blarson 2005-01-28 see which return part 2005-02-26 ajust scores
11 score RCVD_IN_SBLXBL    2
12 header RCVD_IN_SBLXBL_SBL eval:check_rbl_sub('SBLXBL', '127.0.0.2')
13 tflags RCVD_IN_SBLXBL_SBL       net
14 score RCVD_IN_SBLXBL_SBL 1.5
15 header RCVD_IN_SBLXBL_CBL eval:check_rbl_sub('SBLXBL', '127.0.0.4')
16 score RCVD_IN_SBLXBL_CBL 1
17 tflags RCVD_IN_SBLXBL_CBL net
18 header RCVD_IN_SBLXBL_5 eval:check_rbl_sub('SBLXBL', '127.0.0.5')
19 score RCVD_IN_SBLXBL_5 1
20 tflags RCVD_IN_SBLXBL_5 net
21 header RCVD_IN_SBLXBL_OPM eval:check_rbl_sub('SBLXBL', '127.0.0.6')
22 score RCVD_IN_SBLXBL_OPM 1
23 tflags RCVD_IN_SBLXBL_OPM net
24
25 header  RCVD_IN_NIX1            eval:check_rbl('NiX', 'ix.dnsbl.manitu.net.')
26 describe RCVD_IN_NIX1           Received in NiX filter http://www.ix.de/nixspam/dnsbl/
27 tflags  RCVD_IN_NIX1            net
28 score   RCVD_IN_NIX1            1.5
29
30
31 # blarson 2007-09-14
32 # blarson 2010-09-14 reduce score due to false positives
33 uridnsbl URIBL_CNKR     cn-kr.blackholes.us.    A
34 body    URIBL_CNKR      eval:check_uridnsbl('URIBL_CNKR')
35 describe URIBL_CNKR     china or korea hosted web site
36 tflags  URIBL_CNKR      net
37 score URIBL_CNKR        1.5
38
39 # disable the SECURITYSAGE RBL
40 score DNS_FROM_SECURITYSAGE 0.0
41
42 # blarson 2007-09-14
43 uridnsbl_skip_domain    debian.org debian.net yahoo.com google.com
44
45 # blarson 2007-09-14
46 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
47 body            URIBL_SBL       eval:check_uridnsbl('URIBL_SBL')
48 describe        URIBL_SBL       Contains an URL listed in the SBL blocklist
49 tflags          URIBL_SBL       net
50 #reuse          URIBL_SBL
51 score           URIBL_SBL       3.5
52
53 # don 2008-03-24
54 uridnsbl        URIBL_SURBL     multi.surbl.org.       A
55 body            URIBL_SURBL     eval:check_uridnsbl('URIBL_SURBL')
56 describe        URIBL_SURBL     Contains an URL listed in the mutli surbl blocklist
57 score           URIBL_SURBL     3.5
58 tflags          URIBL_SURBL     net
59
60 # don 2015-01-11 ahbl is no more
61 score DNS_FROM_AHBL_RHSBL 0