From: twesterhever <40121680+twesterhever@users.noreply.github.com>
Date: Wed, 2 Aug 2023 13:09:29 +0000 (+0000)
Subject: [Minor] Increase score of URIBL_XBL
X-Git-Tag: 3.7.1~73^2~1
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=c83818fd386beeaee866928308a3019dd50e4011;p=rspamd.git

[Minor] Increase score of URIBL_XBL

This aids with detecting FQDNs hosted on hacked machines, such as used
in Fast Flux-style botnet spam.
---

diff --git a/conf/scores.d/surbl_group.conf b/conf/scores.d/surbl_group.conf
index 00e0be8ae..b7cf7d1e6 100644
--- a/conf/scores.d/surbl_group.conf
+++ b/conf/scores.d/surbl_group.conf
@@ -237,7 +237,7 @@ symbols = {
     }
     "URIBL_XBL" {
         ignore = true;
-        weight = 1.5;
+        weight = 3.0;
         description = "A domain in the message body resolves to an IP listed in Spamhaus XBL";
         one_shot = true;
         groups = ["spamhaus"];