2017-11-11 14:52:02 +01:00
|
|
|
# URIBL rules scores
|
|
|
|
#
|
|
|
|
# Please don't modify this file as your changes might be overwritten with
|
|
|
|
# the next update.
|
|
|
|
#
|
|
|
|
# You can modify '$LOCAL_CONFDIR/rspamd.conf.local.override' to redefine
|
|
|
|
# parameters defined on the top level
|
|
|
|
#
|
|
|
|
# You can modify '$LOCAL_CONFDIR/rspamd.conf.local' to add
|
|
|
|
# parameters defined on the top level
|
|
|
|
#
|
|
|
|
# For specific modules or configuration you can also modify
|
|
|
|
# '$LOCAL_CONFDIR/local.d/file.conf' - to add your options or rewrite defaults
|
|
|
|
# '$LOCAL_CONFDIR/override.d/file.conf' - to override the defaults
|
|
|
|
#
|
|
|
|
# See https://rspamd.com/doc/tutorials/writing_rules.html for details
|
|
|
|
|
2019-08-12 14:52:01 +02:00
|
|
|
description = "URL DNS lists";
|
2017-11-11 14:52:02 +01:00
|
|
|
|
|
|
|
max_score = 12.5;
|
|
|
|
|
|
|
|
symbols = {
|
|
|
|
"SURBL_BLOCKED" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "SURBL: blocked by policy/overusage";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["surblorg", "blocked"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"PH_SURBL_MULTI" {
|
|
|
|
weight = 5.5;
|
|
|
|
description = "SURBL: Phishing sites";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["surblorg", "phishing"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"MW_SURBL_MULTI" {
|
|
|
|
weight = 5.5;
|
|
|
|
description = "SURBL: Malware sites";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["surblorg"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"ABUSE_SURBL" {
|
|
|
|
weight = 5.5;
|
|
|
|
description = "SURBL: ABUSE";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["surblorg"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"CRACKED_SURBL" {
|
|
|
|
weight = 4.0;
|
|
|
|
description = "SURBL: cracked site";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["surblorg"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
2018-02-19 17:45:16 +01:00
|
|
|
"RSPAMD_URIBL" {
|
2017-11-11 14:52:02 +01:00
|
|
|
weight = 4.5;
|
2018-02-19 17:45:16 +01:00
|
|
|
description = "Rspamd uribl, bl.rspamd.com";
|
2017-11-11 14:52:02 +01:00
|
|
|
one_shot = true;
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["rspamdbl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
|
2018-02-19 17:45:16 +01:00
|
|
|
"RSPAMD_EMAILBL" {
|
2019-07-22 18:00:00 +02:00
|
|
|
weight = 2.5;
|
2018-02-20 07:34:58 +01:00
|
|
|
description = "Rspamd emailbl, bl.rspamd.com";
|
2017-11-11 14:52:02 +01:00
|
|
|
one_shot = true;
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["rspamdbl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
"MSBL_EBL" {
|
|
|
|
weight = 7.5;
|
|
|
|
description = "MSBL emailbl";
|
|
|
|
one_shot = true;
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["ebl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
|
2018-05-14 15:00:49 +02:00
|
|
|
"MSBL_EBL_GREY" {
|
|
|
|
weight = 0.5; # TODO: test it
|
|
|
|
description = "MSBL emailbl grey list";
|
|
|
|
one_shot = true;
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["ebl"];
|
2018-05-14 15:00:49 +02:00
|
|
|
}
|
|
|
|
|
2017-11-11 14:52:02 +01:00
|
|
|
"SEM_URIBL_UNKNOWN" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "Spameatingmonkey uribl: unknown result";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["sem"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"SEM_URIBL" {
|
|
|
|
weight = 3.5;
|
|
|
|
description = "Spameatingmonkey uribl";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["sem"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
"SEM_URIBL_FRESH15_UNKNOWN" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "Spameatingmonkey Fresh15 uribl: unknown result";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["sem"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"SEM_URIBL_FRESH15" {
|
|
|
|
weight = 3.0;
|
|
|
|
description = "Spameatingmonkey uribl. Domains registered in the last 15 days (.AERO,.BIZ,.COM,.INFO,.NAME,.NET,.PRO,.SK,.TEL,.US)";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["sem"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
"DBL" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "DBL unknown result";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_SPAM" {
|
|
|
|
weight = 6.5;
|
|
|
|
description = "DBL uribl spam";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_PHISH" {
|
|
|
|
weight = 6.5;
|
|
|
|
description = "DBL uribl phishing";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_MALWARE" {
|
|
|
|
weight = 6.5;
|
|
|
|
description = "DBL uribl malware";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_BOTNET" {
|
|
|
|
weight = 5.5;
|
|
|
|
description = "DBL uribl botnet C&C domain";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_ABUSE" {
|
|
|
|
weight = 6.5;
|
|
|
|
description = "DBL uribl abused legit spam";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_ABUSE_REDIR" {
|
|
|
|
weight = 1.5;
|
|
|
|
description = "DBL uribl abused spammed redirector domain";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_ABUSE_PHISH" {
|
|
|
|
weight = 7.5;
|
|
|
|
description = "DBL uribl abused legit phish";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_ABUSE_MALWARE" {
|
|
|
|
weight = 7.5;
|
|
|
|
description = "DBL uribl abused legit malware";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_ABUSE_BOTNET" {
|
|
|
|
weight = 5.5;
|
|
|
|
description = "DBL uribl abused legit botnet C&C";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"DBL_PROHIBIT" {
|
2019-03-05 17:18:36 +01:00
|
|
|
weight = 0.0;
|
2017-11-11 14:52:02 +01:00
|
|
|
description = "DBL uribl IP queries prohibited!";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["spamhaus"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
2019-10-11 10:13:05 +02:00
|
|
|
"DBL_BLOCKED_OPENRESOLVER" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "You are querying Spamhaus from an open resolver, please see https://www.spamhaus.org/returnc/pub/";
|
|
|
|
groups = ["spamhaus"];
|
|
|
|
}
|
|
|
|
"DBL_BLOCKED" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "You are exceeding the query limit, please see https://www.spamhaus.org/returnc/vol/";
|
|
|
|
groups = ["spamhaus"];
|
|
|
|
}
|
2017-11-11 14:52:02 +01:00
|
|
|
"URIBL_MULTI" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "uribl.com: unrecognised result";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["uribl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"URIBL_BLOCKED" {
|
|
|
|
weight = 0.0;
|
|
|
|
description = "uribl.com: query refused";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["uribl", "blocked"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"URIBL_BLACK" {
|
|
|
|
weight = 7.5;
|
|
|
|
description = "uribl.com black url";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["uribl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"URIBL_RED" {
|
|
|
|
weight = 3.5;
|
|
|
|
description = "uribl.com red url";
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["uribl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
|
|
|
"URIBL_GREY" {
|
|
|
|
weight = 1.5;
|
|
|
|
description = "uribl.com grey url";
|
|
|
|
one_shot = true;
|
2019-03-18 18:40:29 +01:00
|
|
|
groups = ["uribl"];
|
2017-11-11 14:52:02 +01:00
|
|
|
}
|
2019-09-02 17:36:45 +02:00
|
|
|
#"SPAMHAUS_ZEN_URIBL" {
|
|
|
|
# weight = 0.0;
|
|
|
|
# description = "Spamhaus ZEN URIBL: Filtered result";
|
|
|
|
# groups = ["spamhaus"];
|
|
|
|
#}
|
|
|
|
#"URIBL_SBL" {
|
|
|
|
# weight = 6.5;
|
|
|
|
# description = "A domain in the message body resolves to an IP listed in Spamhaus SBL";
|
|
|
|
# one_shot = true;
|
|
|
|
# groups = ["v"];
|
|
|
|
#}
|
|
|
|
#"URIBL_SBL_CSS" {
|
|
|
|
# weight = 6.5;
|
|
|
|
# description = "A domain in the message body resolves to an IP listed in Spamhaus SBL CSS";
|
|
|
|
# one_shot = true;
|
|
|
|
# groups = ["spamhaus"];
|
|
|
|
#}
|
|
|
|
#"URIBL_XBL" {
|
|
|
|
# weight = 1.5;
|
|
|
|
# description = "A domain in the message body resolves to an IP listed in Spamhaus XBL";
|
|
|
|
# one_shot = true;
|
|
|
|
# groups = ["spamhaus"];
|
|
|
|
#}
|
|
|
|
#"URIBL_PBL" {
|
|
|
|
# weight = 0.01;
|
|
|
|
# description = "A domain in the message body resolves to an IP listed in Spamhaus PBL";
|
|
|
|
# groups = ["spamhaus"];
|
|
|
|
#}
|
|
|
|
#"URIBL_DROP" {
|
|
|
|
# weight = 5.0;
|
|
|
|
# description = "A domain in the message body resolves to an IP listed in Spamhaus DROP";
|
|
|
|
# one_shot = true;
|
|
|
|
# groups = ["spamhaus"];
|
|
|
|
#}
|
|
|
|
#"RBL_SARBL_BAD" {
|
|
|
|
# weight = 2.5;
|
|
|
|
# description = "A domain in the message body is blacklisted in SARBL";
|
|
|
|
# one_shot = true;
|
|
|
|
#}
|
2018-02-20 07:34:58 +01:00
|
|
|
}
|