From bbc852b1d56fcfa29d339e78fe17093878c93b58 Mon Sep 17 00:00:00 2001 From: Daniel Berteaud Date: Mon, 5 Jun 2017 10:21:20 +0200 Subject: [PATCH] Add some blacklists (DNSBL/RHSBL) to spamassassin --- .../etc/mail/spamassassin/local.cf/95Blacklists | 129 +++++++++++++++++++++ 1 file changed, 129 insertions(+) create mode 100644 root/etc/e-smith/templates/etc/mail/spamassassin/local.cf/95Blacklists diff --git a/root/etc/e-smith/templates/etc/mail/spamassassin/local.cf/95Blacklists b/root/etc/e-smith/templates/etc/mail/spamassassin/local.cf/95Blacklists new file mode 100644 index 0000000..21964fd --- /dev/null +++ b/root/etc/e-smith/templates/etc/mail/spamassassin/local.cf/95Blacklists @@ -0,0 +1,129 @@ +# Check someblacklists + +header RCVD_IN_GBUDB eval:check_rbl('gbudb', 'truncate.gbudb.net.', '127.0.0.2') +describe RCVD_IN_GBUDB Listed in truncate.gbudb.net +tflags RCVD_IN_GBUDB net +score RCVD_IN_GBUDB 1.5 + +header RCVD_IN_IMP_SPAMLIST eval:check_rbl('spamrbl-lastexternal','spamrbl.imp.ch.','127.0.1.5') +describe RCVD_IN_IMP_SPAMLIST Listed in spamrbl.imp.ch +tflags RCVD_IN_IMP_SPAMLIST net +score RCVD_IN_IMP_SPAMLIST 1.5 + +header RCVD_IN_INPS eval:check_rbl('inps-de-lastexternal','dnsbl.inps.de.') +describe RCVD_IN_INPS Received via a relay in inps.de DNSBL +tflags RCVD_IN_INPS net +score RCVD_IN_INPS 1.5 + +header RCVD_IN_JMF_BL eval:check_rbl_sub('JMF-lastexternal','hostkarma.junkemailfilter.com','127.0.0.2') +describe RCVD_IN_JMF_BL Sender listed in JMF-BLACK +tflags RCVD_IN_JMF_BL net +score RCVD_IN_JMF_BL 1.5 + +header RCVD_IN_NIX_SPAM eval:check_rbl('nix-spam-lastexternal','ix.dnsbl.manitu.net.') +describe RCVD_IN_NIX_SPAM Listed in NIX-SPAM DNSBL (heise.de) +tflags RCVD_IN_NIX_SPAM net +score RCVD_IN_NIX_SPAM 1.5 + +header RCVD_IN_SORBS eval:check_rbl('sorbscombined','dnsbl.sorbs.net.') +describe RCVD_IN_SORBS Sender listed at http://www.sorbs.net +tflags RCVD_IN_SORBS net +score RCVD_IN_SORBS 1.5 + +header RCVD_IN_SEM_BLACK eval:check_rbl('semblack-lastexternal','bl.spameatingmonkey.net') +tflags RCVD_IN_SEM_BLACK net +describe RCVD_IN_SEM_BLACK Received from an IP listed by SEM-BLACK +score RCVD_IN_SEM_BLACK 1.5 + +header RCVD_IN_SEMNETBLACK eval:check_rbl('semnetblack-lastexternal', 'netbl.spameatingmonkey.net') +tflags RCVD_IN_SEMNETBLACK net +describe RCVD_IN_SEMNETBLACK Received from an IP listed by SEM-NETBLACK +score RCVD_IN_SEMNETBLACK 1.5 + +urirhssub SEM_URIRED urired.spameatingmonkey.net. A 2 +body SEM_URIRED eval:check_uridnsbl('SEM_URIRED') +describe SEM_URIRED Contains a URI listed by SEM-URIRED +tflags SEM_URIRED net +score SEM_URIRED 1.5 + +urirhssub SEM_FRESH fresh.spameatingmonkey.net. A 2 +body SEM_FRESH eval:check_uridnsbl('SEM_FRESH') +describe SEM_FRESH Contains a domain registered less than 5 days ago +tflags SEM_FRESH net +score SEM_FRESH 1.5 + +header RCVD_IN_SPAMRATS_DYNA eval:check_rbl('spamratsdyna-lastexternal','dyna.spamrats.com.') +describe RCVD_IN_SPAMRATS_DYNA Sender listed in spamratsdyna +tflags RCVD_IN_SPAMRATS_DYNA net +score RCVD_IN_SPAMRATS_DYNA 1.5 + +header RCVD_IN_SPAMRATS_NOPTR eval:check_rbl('spamratsnoptr-lastexternal','noptr.spamrats.com.') +describe RCVD_IN_SPAMRATS_NOPTR Sender listed in spamratsnoptr +tflags RCVD_IN_SPAMRATS_NOPTR net +score RCVD_IN_SPAMRATS_NOPTR 1.5 + +urirhsbl URIBL_SC_SWINOG uribl.swinog.ch. A +body URIBL_SC_SWINOG eval:check_uridnsbl('URIBL_SC_SWINOG') +describe URIBL_SC_SWINOG URI's listed in uribl.swinog.ch. +tflags URIBL_SC_SWINOG net +score URIBL_SC_SWINOG 1.5 + +header RCVD_IN_UCEPROTECT1 eval:check_rbl_txt('uceprotect1-lastexternal','dnsbl-1.uceprotect.net.') +describe RCVD_IN_UCEPROTECT1 Listed in dnsbl-1.uceprotect.net (open relay/proxy/dialup) +tflags RCVD_IN_UCEPROTECT1 net +score RCVD_IN_UCEPROTECT1 1.5 + +header RCVD_IN_UNSUBSCORE eval:check_rbl('unsubscore-lastexternal','ubl.unsubscore.com.') +describe RCVD_IN_UNSUBSCORE Listed in Lashback unsubscore.com +tflags RCVD_IN_UNSUBSCORE net +score RCVD_IN_UNSUBSCORE 1.5 + +header RCVD_IN_WPBL eval:check_rbl('wpbl-lastexternal','db.wpbl.info.','127.0.0.2') +describe RCVD_IN_WPBL Listed in wpbl +tflags RCVD_IN_WPBL net +score RCVD_IN_WPBL 1.5 + +header RCVD_IN_S5HBL eval:check_rbl_txt('s5hbl', 'all.s5h.net') +describe RCVD_IN_S5HBL Listed in all.s5h.net +tflags RCVD_IN_S5HBL net +score RCVD_IN_S5HBL 1.5 + +header RCVD_IN_SPAMCANNIBAL eval:check_rbl('spamcannibal', 'bl.spamcannibal.org') +describe RCVD_IN_SPAMCANNIBAL Listed in bl.spamcannibal.org +tflags RCVD_IN_SPAMCANNIBAL net +score RCVD_IN_SPAMCANNIBAL 1.5 + +header RCVD_IN_BACKSCATTERER eval:check_rbl('backscatterer', 'ips.backscatterer.org') +describe RCVD_IN_BACKSCATTERER Listed in ips.backscatterer.org +tflags RCVD_IN_BACKSCATTERER net +score RCVD_IN_BACKSCATTERER 1.5 + +header RCVD_IN_FABEL eval:check_rbl('fabel', 'spamsources.fabel.dk.') +describe RCVD_IN_FABEL Received via a relay in spamsources.fabel.dk +tflags RCVD_IN_FABEL net +score RCVD_IN_FABEL 1.5 + +header RCVD_IN_DRONEBL eval:check_rbl('dronebl', 'dnsbl.dronebl.org') +describe RCVD_IN_DRONEBL Listed in dnsbl.dronebl.org +tflags RCVD_IN_DRONEBL net +score RCVD_IN_DRONEBL 1.5 + +header RCVD_IN_MANITU eval:check_rbl('manitu', 'ix.dnsbl.manitu.net') +describe RCVD_IN_MANITU Listed in ix.dnsbl.manitu.net +tflags RCVD_IN_MANITU net +score RCVD_IN_MANITU 1.5 + +header RCVD_IN_SINGULAR eval:check_rbl('singular', 'singular.ttk.pte.hu') +describe RCVD_IN_SINGULAR Listed in singular.ttk.pte.hu +tflags RCVD_IN_SINGULAR net +score RCVD_IN_SINGULAR 1.5 + +header RCVD_IN_SPAMBOT_DIGIBASE eval:check_rbl('spambot-digibase', 'spambot.bls.digibase.ca') +describe RCVD_IN_SPAMBOT_DIGIBASE Listed in spambot.bls.digibase.ca +tflags RCVD_IN_SPAMBOT_DIGIBASE net +score RCVD_IN_SPAMBOT_DIGIBASE 1.5 + +header RCVD_IN_OPENPROXY_DIGIBASE eval:check_rbl('openproxy-digibase', 'openproxy.bls.digibase.ca') +describe RCVD_IN_OPENPROXY_DIGIBASE Listed in openproxy.bls.digibase.ca +tflags RCVD_IN_OPENPROXY_DIGIBASE net +score RCVD_IN_OPENPROXY_DIGIBASE 1.5