mirror of
https://github.com/rspamd/rspamd.git
synced 2024-08-29 17:54:54 +02:00
283 lines
6.3 KiB
Plaintext
283 lines
6.3 KiB
Plaintext
# Rspamd modules configuration
|
|
fuzzy_check {
|
|
min_bytes = 300;
|
|
rule {
|
|
servers = "highsecure.ru:11335";
|
|
symbol = "FUZZY_UNKNOWN";
|
|
mime_types = "application/pdf";
|
|
max_score = 20.0;
|
|
read_only = yes;
|
|
skip_unknown = yes;
|
|
fuzzy_map = {
|
|
FUZZY_DENIED {
|
|
max_score = 20.0;
|
|
flag = 1
|
|
}
|
|
FUZZY_PROB {
|
|
max_score = 10.0;
|
|
flag = 2
|
|
}
|
|
FUZZY_WHITE {
|
|
max_score = 2.0;
|
|
flag = 3
|
|
}
|
|
}
|
|
}
|
|
}
|
|
forged_recipients {
|
|
symbol_sender = "FORGED_SENDER";
|
|
symbol_rcpt = "FORGED_RECIPIENTS";
|
|
}
|
|
maillist {
|
|
symbol = "MAILLIST";
|
|
}
|
|
surbl {
|
|
whitelist = "file://$CONFDIR/surbl-whitelist.inc";
|
|
exceptions = "file://$CONFDIR/2tld.inc";
|
|
|
|
rule {
|
|
suffix = "multi.surbl.org";
|
|
symbol = "SURBL_MULTI";
|
|
bits {
|
|
JP_SURBL_MULTI = 64;
|
|
AB_SURBL_MULTI = 32;
|
|
MW_SURBL_MULTI = 16;
|
|
PH_SURBL_MULTI = 8;
|
|
WS_SURBL_MULTI = 4;
|
|
SC_SURBL_MULTI = 2;
|
|
}
|
|
}
|
|
rule {
|
|
suffix = "multi.uribl.com";
|
|
symbol = "URIBL_MULTI";
|
|
bits {
|
|
URIBL_BLACK = 2;
|
|
URIBL_GREY = 4;
|
|
URIBL_RED = 8;
|
|
}
|
|
}
|
|
rule {
|
|
suffix = "uribl.rambler.ru";
|
|
symbol = "RAMBLER_URIBL";
|
|
}
|
|
rule {
|
|
suffix = "dbl.spamhaus.org";
|
|
symbol = "DBL";
|
|
options = "noip";
|
|
}
|
|
rule {
|
|
suffix = "uribl.spameatingmonkey.net";
|
|
symbol = "SEM_URIBL_UNKNOWN";
|
|
bits {
|
|
SEM_URIBL = 2;
|
|
}
|
|
options = "noip";
|
|
}
|
|
rule {
|
|
suffix = "fresh15.spameatingmonkey.net";
|
|
symbol = "SEM_URIBL_FRESH15_UNKNOWN";
|
|
bits {
|
|
SEM_URIBL_FRESH15 = 2;
|
|
}
|
|
options = "noip";
|
|
}
|
|
}
|
|
rbl {
|
|
|
|
default_from = true;
|
|
default_received = false;
|
|
default_exclude_users = true;
|
|
|
|
private_ips = "127.0.0.0/8 10.0.0.0/8 192.168.0.0/16 169.254.0.0/16 172.16.0.0/12 100.64.0.0/10 fc00::/7 fe80::/10 fec0::/10 ::1";
|
|
|
|
rbls {
|
|
|
|
spamhaus {
|
|
symbol = "RBL_SPAMHAUS";
|
|
rbl = "zen.spamhaus.org";
|
|
ipv6 = true;
|
|
returncodes {
|
|
RBL_SPAMHAUS_SBL = "127.0.0.2";
|
|
RBL_SPAMHAUS_CSS = "127.0.0.3";
|
|
RBL_SPAMHAUS_XBL = "127.0.0.4";
|
|
RBL_SPAMHAUS_XBL = "127.0.0.5";
|
|
RBL_SPAMHAUS_XBL = "127.0.0.6";
|
|
RBL_SPAMHAUS_XBL = "127.0.0.7";
|
|
RBL_SPAMHAUS_PBL = "127.0.0.10";
|
|
RBL_SPAMHAUS_PBL = "127.0.0.11";
|
|
}
|
|
}
|
|
|
|
spamhaus_xbl {
|
|
symbol = "RECEIVED_SPAMHAUS_XBL";
|
|
rbl = "xbl.spamhaus.org";
|
|
ipv6 = true;
|
|
received = true;
|
|
from = false;
|
|
}
|
|
|
|
spamhaus_swl {
|
|
symbol = "RWL_SPAMHAUS_WL";
|
|
rbl = "swl.spamhaus.org";
|
|
ipv6 = true;
|
|
returncodes {
|
|
RWL_SPAMHAUS_WL_IND = "127.0.2.2";
|
|
RWL_SPAMHAUS_WL_TRANS = "127.0.2.3";
|
|
RWL_SPAMHAUS_WL_IND_EXP = "127.0.2.102";
|
|
RWL_SPAMHAUS_WL_TRANS_EXP = "127.0.2.103";
|
|
}
|
|
}
|
|
|
|
mailspike {
|
|
symbol = "RBL_MAILSPIKE";
|
|
rbl = "rep.mailspike.net";
|
|
returncodes {
|
|
#http://mailspike.net/usage.html
|
|
RBL_MAILSPIKE_WORST = "127.0.0.10"
|
|
RBL_MAILSPIKE_VERYBAD = "127.0.0.11"
|
|
RBL_MAILSPIKE_BAD = "127.0.0.12"
|
|
RBL_MAILSPIKE_SUSP = "127.0.0.13"
|
|
RBL_MAILSPIKE_PROB = "127.0.0.14"
|
|
RWL_MAILSPIKE_POSSIBLE = "127.0.0.17"
|
|
RWL_MAILSPIKE_GOOD = "127.0.0.18"
|
|
RWL_MAILSPIKE_VERYGOOD = "127.0.0.19"
|
|
RWL_MAILSPIKE_EXCELLENT = "127.0.0.20"
|
|
}
|
|
}
|
|
|
|
senderscore {
|
|
symbol = "RBL_SENDERSCORE";
|
|
rbl = "bl.score.senderscore.com";
|
|
}
|
|
|
|
abusech {
|
|
symbol = "RBL_ABUSECH";
|
|
rbl = "spam.abuse.ch";
|
|
}
|
|
|
|
uceprotect1 {
|
|
symbol = "RBL_UCEPROTECT_LEVEL1";
|
|
rbl = "dnsbl-1.uceprotect.net";
|
|
}
|
|
|
|
sorbs {
|
|
symbol = "RBL_SORBS";
|
|
rbl = "dnsbl.sorbs.net";
|
|
returncodes {
|
|
#http://www.sorbs.net/general/using.shtml
|
|
RBL_SORBS_HTTP = "127.0.0.2"
|
|
RBL_SORBS_SOCKS = "127.0.0.3"
|
|
RBL_SORBS_MISC = "127.0.0.4"
|
|
RBL_SORBS_SMTP = "127.0.0.5"
|
|
RBL_SORBS_RECENT = "127.0.0.6"
|
|
RBL_SORBS_WEB = "127.0.0.7"
|
|
RBL_SORBS_DUL = "127.0.0.10"
|
|
RBL_SORBS_BLOCK = "127.0.0.8"
|
|
RBL_SORBS_ZOMBIE = "127.0.0.9"
|
|
}
|
|
}
|
|
|
|
sem {
|
|
symbol = "RBL_SEM";
|
|
rbl = "bl.spameatingmonkey.net";
|
|
}
|
|
|
|
semIPv6 {
|
|
symbol = "RBL_SEM_IPV6";
|
|
rbl = "bl.ipv6.spameatingmonkey.net";
|
|
ipv4 = false;
|
|
ipv6 = true;
|
|
}
|
|
|
|
dnswl {
|
|
symbol = "RCVD_IN_DNSWL";
|
|
rbl = "list.dnswl.org";
|
|
ipv6 = true;
|
|
returncodes {
|
|
RCVD_IN_DNSWL_NONE = "127.0.%d+.0";
|
|
RCVD_IN_DNSWL_LOW = "127.0.%d+.1";
|
|
RCVD_IN_DNSWL_MED = "127.0.%d+.2";
|
|
RCVD_IN_DNSWL_HI = "127.0.%d+.3";
|
|
DNSWL_BLOCKED = "127.0.0.255";
|
|
}
|
|
}
|
|
|
|
rambleremails {
|
|
symbol = RAMBLER_EMAILBL;
|
|
rbl = email-bl.rambler.ru;
|
|
from = false;
|
|
emails = true;
|
|
exclude_users = false;
|
|
exclude_private_ips = false;
|
|
exclude_local = false;
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
chartable {
|
|
threshold = 0.300000;
|
|
symbol = "R_MIXED_CHARSET";
|
|
}
|
|
once_received {
|
|
good_host = "mail";
|
|
bad_host = "static";
|
|
bad_host = "dynamic";
|
|
symbol_strict = "ONCE_RECEIVED_STRICT";
|
|
symbol = "ONCE_RECEIVED";
|
|
}
|
|
|
|
#multimap {
|
|
#}
|
|
|
|
phishing {
|
|
symbol = "PHISHING";
|
|
}
|
|
#emails {
|
|
#}
|
|
spf {
|
|
spf_cache_size = 2k;
|
|
spf_cache_expire = 1d;
|
|
}
|
|
dkim {
|
|
dkim_cache_size = 2k;
|
|
dkim_cache_expire = 1d;
|
|
time_jitter = 6h;
|
|
trusted_only = false;
|
|
skip_multi = false;
|
|
}
|
|
|
|
ratelimit {
|
|
limit = "to:100:0.033333333";
|
|
limit = "to_ip:30:0.025";
|
|
limit = "to_ip_from:20:0.01666666667";
|
|
limit = "bounce_to:10:0.000555556";
|
|
limit = "bounce_to_ip:5:0.000277778";
|
|
limit = "user:20:0.01666666667";
|
|
whitelisted_rcpts = "postmaster,mailer-daemon";
|
|
max_rcpt = 5;
|
|
}
|
|
|
|
regexp {
|
|
max_size = 1M;
|
|
}
|
|
|
|
ip_score {
|
|
# servers = "localhost";
|
|
# treshold = 100;
|
|
# reject_score = 3;
|
|
# no_action_score = -2;
|
|
# add_header_score = 1;
|
|
# whitelist = "file:///ip_map";
|
|
}
|
|
|
|
hfilter {
|
|
helo_enabled = true;
|
|
hostname_enabled = true;
|
|
url_enabled = true;
|
|
from_enabled = true;
|
|
rcpt_enabled = true;
|
|
mid_enabled = true;
|
|
rcpt_enabled = true;
|
|
}
|