From c83818fd386beeaee866928308a3019dd50e4011 Mon Sep 17 00:00:00 2001
From: twesterhever <40121680+twesterhever@users.noreply.github.com>
Date: Wed, 2 Aug 2023 13:09:29 +0000
Subject: [PATCH] [Minor] Increase score of URIBL_XBL

This aids with detecting FQDNs hosted on hacked machines, such as used
in Fast Flux-style botnet spam.
---
 conf/scores.d/surbl_group.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/scores.d/surbl_group.conf b/conf/scores.d/surbl_group.conf
index 00e0be8ae..b7cf7d1e6 100644
--- a/conf/scores.d/surbl_group.conf
+++ b/conf/scores.d/surbl_group.conf
@@ -237,7 +237,7 @@ symbols = {
     }
     "URIBL_XBL" {
         ignore = true;
-        weight = 1.5;
+        weight = 3.0;
         description = "A domain in the message body resolves to an IP listed in Spamhaus XBL";
         one_shot = true;
         groups = ["spamhaus"];
-- 
2.39.5