From bfc724c71bd89a99ee3270cbd9bde6ae259fa532 Mon Sep 17 00:00:00 2001 From: Vsevolod Stakhov Date: Tue, 28 Jun 2016 17:29:37 +0100 Subject: [PATCH] [Doc] Document how to use phishtank feed --- doc/markdown/modules/phishing.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/doc/markdown/modules/phishing.md b/doc/markdown/modules/phishing.md index 98f688837..5218cc908 100644 --- a/doc/markdown/modules/phishing.md +++ b/doc/markdown/modules/phishing.md @@ -81,3 +81,31 @@ phishing { openphish_premium = false; } ~~~ + +## Phishtank support + +There is also [phishtank](https://phishtank.com) support in rspamd since 1.3. Unlike +openphish feed, phishtank's one is not enabled by default since it has quite a big size (about 50Mb) so +you might want to setup some reverse proxy (e.g. nginx) to cache that data among rspamd instances: + +~~~nginx +proxy_cache_path /data/nginx/cache levels=1:2 keys_zone=phish:10m; + +server { + listen 8080; + location / { + proxy_pass http://data.phishtank.com:80; + proxy_cache phish; + proxy_cache_lock on; + } +} +~~~ + + +To enable phishtank feed, you can edit `local.d/phishing.conf` file and add the following lines there: + +~~~ucl +phishtank_enabled = true; +# Where nginx is installed +phishtank_map = "http://localhost:8080/data/online-valid.json"; +~~~ \ No newline at end of file -- 2.39.5