You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

rbl_group.conf 5.1KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173
  1. # RBL rules scores
  2. #
  3. # Please don't modify this file as your changes might be overwritten with
  4. # the next update.
  5. #
  6. # You can modify '$LOCAL_CONFDIR/rspamd.conf.local.override' to redefine
  7. # parameters defined on the top level
  8. #
  9. # You can modify '$LOCAL_CONFDIR/rspamd.conf.local' to add
  10. # parameters defined on the top level
  11. #
  12. # For specific modules or configuration you can also modify
  13. # '$LOCAL_CONFDIR/local.d/file.conf' - to add your options or rewrite defaults
  14. # '$LOCAL_CONFDIR/override.d/file.conf' - to override the defaults
  15. #
  16. # See https://rspamd.com/doc/tutorials/writing_rules.html for details
  17. symbols = {
  18. "DNSWL_BLOCKED" {
  19. weight = 0.0;
  20. description = "Resolver blocked due to excessive queries";
  21. }
  22. "RCVD_IN_DNSWL" {
  23. weight = 0.0;
  24. description = "Unrecognised result from https://www.dnswl.org";
  25. }
  26. "RCVD_IN_DNSWL_NONE" {
  27. weight = 0.0;
  28. description = "Sender listed at https://www.dnswl.org, no trust";
  29. }
  30. "RCVD_IN_DNSWL_LOW" {
  31. weight = -0.1;
  32. description = "Sender listed at https://www.dnswl.org, low trust";
  33. }
  34. "RCVD_IN_DNSWL_MED" {
  35. weight = -0.2;
  36. description = "Sender listed at https://www.dnswl.org, medium trust";
  37. }
  38. "RCVD_IN_DNSWL_HI" {
  39. weight = -0.5;
  40. description = "Sender listed at https://www.dnswl.org, high trust";
  41. }
  42. "RBL_SPAMHAUS" {
  43. weight = 0.0;
  44. description = "Unrecognised result from Spamhaus ZEN";
  45. }
  46. "RBL_SPAMHAUS_SBL" {
  47. weight = 2.0;
  48. description = "From address is listed in ZEN SBL";
  49. }
  50. "RBL_SPAMHAUS_CSS" {
  51. weight = 2.0;
  52. description = "From address is listed in ZEN CSS";
  53. }
  54. "RBL_SPAMHAUS_XBL" {
  55. weight = 4.0;
  56. description = "From address is listed in ZEN XBL";
  57. }
  58. "RBL_SPAMHAUS_XBL_ANY" {
  59. weight = 4.0;
  60. description = "From or received address is listed in ZEN XBL (any list)";
  61. }
  62. "RBL_SPAMHAUS_PBL" {
  63. weight = 2.0;
  64. description = "From address is listed in ZEN PBL (ISP list)";
  65. }
  66. "RBL_SPAMHAUS_DROP" {
  67. weight = 7.0;
  68. description = "From address is listed in ZEN DROP BL";
  69. }
  70. "RECEIVED_SPAMHAUS_SBL" {
  71. weight = 1.0;
  72. description = "Received address is listed in ZEN SBL";
  73. one_shot = true;
  74. }
  75. "RECEIVED_SPAMHAUS_CSS" {
  76. weight = 1.0;
  77. description = "Received address is listed in ZEN CSS";
  78. one_shot = true;
  79. }
  80. "RECEIVED_SPAMHAUS_XBL" {
  81. weight = 3.0;
  82. description = "Received address is listed in ZEN XBL";
  83. one_shot = true;
  84. }
  85. "RECEIVED_SPAMHAUS_PBL" {
  86. weight = 0.0;
  87. description = "Received address is listed in ZEN PBL (ISP list)";
  88. one_shot = true;
  89. }
  90. "RECEIVED_SPAMHAUS_DROP" {
  91. weight = 6.0;
  92. description = "Received address is listed in ZEN DROP BL";
  93. one_shot = true;
  94. }
  95. "RBL_SENDERSCORE" {
  96. weight = 2.0;
  97. description = "From address is listed in senderscore.com BL";
  98. }
  99. "RBL_ABUSECH" {
  100. weight = 1.0;
  101. description = "From address is listed in ABUSE.CH BL";
  102. }
  103. "MAILSPIKE" {
  104. weight = 0.0;
  105. description = "Unrecognised result from Mailspike";
  106. }
  107. "RWL_MAILSPIKE_NEUTRAL" {
  108. weight = 0.0;
  109. description = "Neutral result from Mailspike";
  110. }
  111. "RBL_MAILSPIKE_WORST" {
  112. weight = 2.0;
  113. description = "From address is listed in RBL - worst possible reputation";
  114. }
  115. "RBL_MAILSPIKE_VERYBAD" {
  116. weight = 1.5;
  117. description = "From address is listed in RBL - very bad reputation";
  118. }
  119. "RBL_MAILSPIKE_BAD" {
  120. weight = 1.0;
  121. description = "From address is listed in RBL - bad reputation";
  122. }
  123. "RWL_MAILSPIKE_POSSIBLE" {
  124. weight = 0.0;
  125. description = "From address is listed in RWL - possibly legit";
  126. }
  127. "RWL_MAILSPIKE_GOOD" {
  128. weight = 0.0;
  129. description = "From address is listed in RWL - good reputation";
  130. }
  131. "RWL_MAILSPIKE_VERYGOOD" {
  132. weight = 0.0;
  133. description = "From address is listed in RWL - very good reputation";
  134. }
  135. "RWL_MAILSPIKE_EXCELLENT" {
  136. weight = 0.0;
  137. description = "From address is listed in RWL - excellent reputation";
  138. }
  139. "RBL_SEM" {
  140. weight = 1.0;
  141. description = "From address is listed in Spameatingmonkey RBL";
  142. }
  143. "RBL_SEM_IPV6" {
  144. weight = 1.0;
  145. description = "From address is listed in Spameatingmonkey RBL (IPv6)";
  146. }
  147. "RBL_VIRUSFREE_BOTNET" {
  148. weight = 2.0;
  149. description = "From address is listed in virusfree.cz BL";
  150. }
  151. "RBL_NIXSPAM" {
  152. weight = 4.0;
  153. description = "From address is listed in NiX Spam (http://www.dnsbl.manitu.net/)";
  154. }
  155. "RBL_BLOCKLISTDE" {
  156. weight = 4.0;
  157. description = "From address is listed in Blocklist (https://www.blocklist.de/)";
  158. }
  159. "RECEIVED_BLOCKLISTDE" {
  160. weight = 3.0;
  161. description = "Received address is listed in Blocklist (https://www.blocklist.de/)";
  162. one_shot = true;
  163. }
  164. }