From: Vsevolod Stakhov Date: Tue, 28 Jun 2016 16:29:37 +0000 (+0100) Subject: [Doc] Document how to use phishtank feed X-Git-Tag: 1.3.0~227 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=bfc724c71bd89a99ee3270cbd9bde6ae259fa532;p=rspamd.git [Doc] Document how to use phishtank feed --- diff --git a/doc/markdown/modules/phishing.md b/doc/markdown/modules/phishing.md index 98f688837..5218cc908 100644 --- a/doc/markdown/modules/phishing.md +++ b/doc/markdown/modules/phishing.md @@ -81,3 +81,31 @@ phishing { openphish_premium = false; } ~~~ + +## Phishtank support + +There is also [phishtank](https://phishtank.com) support in rspamd since 1.3. Unlike +openphish feed, phishtank's one is not enabled by default since it has quite a big size (about 50Mb) so +you might want to setup some reverse proxy (e.g. nginx) to cache that data among rspamd instances: + +~~~nginx +proxy_cache_path /data/nginx/cache levels=1:2 keys_zone=phish:10m; + +server { + listen 8080; + location / { + proxy_pass http://data.phishtank.com:80; + proxy_cache phish; + proxy_cache_lock on; + } +} +~~~ + + +To enable phishtank feed, you can edit `local.d/phishing.conf` file and add the following lines there: + +~~~ucl +phishtank_enabled = true; +# Where nginx is installed +phishtank_map = "http://localhost:8080/data/online-valid.json"; +~~~ \ No newline at end of file