You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/10/12 15:04:50 UTC
svn commit: r463236 - /spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf
Author: jm
Date: Thu Oct 12 06:04:49 2006
New Revision: 463236
URL: http://svn.apache.org/viewvc?view=rev&rev=463236
Log:
bug 4945: cause some of the openwhois ruleset to be published in updates
Modified:
spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf?view=diff&rev=463236&r1=463235&r2=463236
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_openwhois.cf Thu Oct 12 06:04:49 2006
@@ -1,32 +1,75 @@
# http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4945
# http://open-whois.org/01_openwhois.cf
-ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
+# ---------------------------------------------------------------------------
+# high hit-rates
-urirhssub WHOIS_1AND1PR bl.open-whois.org. A 127.0.0.2
-body WHOIS_1AND1PR eval:check_uridnsbl('WHOIS_1AND1PR')
-describe WHOIS_1AND1PR URL registered to 1&1 Private Registration
-tflags WHOIS_1AND1PR net
-# score WHOIS_1AND1PR 1.0
+# if you want to use bl.open-whois.org. as an RHSBL as well
+header DNS_FROM_OPENWHOIS eval:check_rbl_envfrom('openwhois', 'bl.open-whois.org.')
+describe DNS_FROM_OPENWHOIS From: sender listed in bl.open-whois.org.
+tflags DNS_FROM_OPENWHOIS net
+publish DNS_FROM_OPENWHOIS
+# score DNS_FROM_OPENWHOIS 1.0
+ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
+
+publish WHOIS_PRIVPROT
urirhssub WHOIS_PRIVPROT bl.open-whois.org. A 127.0.0.3
body WHOIS_PRIVPROT eval:check_uridnsbl('WHOIS_PRIVPROT')
describe WHOIS_PRIVPROT URL registered to WHOIS Privacy Protection
tflags WHOIS_PRIVPROT net
# score WHOIS_PRIVPROT 2.5
-urirhssub WHOIS_NETSOLPR bl.open-whois.org. A 127.0.0.4
-body WHOIS_NETSOLPR eval:check_uridnsbl('WHOIS_NETSOLPR')
-describe WHOIS_NETSOLPR URL registered as a NetSol Private Registration
-tflags WHOIS_NETSOLPR net
-# score WHOIS_NETSOLPR 0.4
-
+publish WHOIS_SECUREWHOIS
urirhssub WHOIS_SECUREWHOIS bl.open-whois.org. A 127.0.0.5
body WHOIS_SECUREWHOIS eval:check_uridnsbl('WHOIS_SECUREWHOIS')
describe WHOIS_SECUREWHOIS Contains URL registered to SecureWhois
tflags WHOIS_SECUREWHOIS net
# score WHOIS_SECUREWHOIS 2.5
+publish WHOIS_REGISTERFLY
+urirhssub WHOIS_REGISTERFLY bl.open-whois.org. A 127.0.0.14
+body WHOIS_REGISTERFLY eval:check_uridnsbl('WHOIS_REGISTERFLY')
+describe WHOIS_REGISTERFLY Contains URL registered to RegisterFly
+tflags WHOIS_REGISTERFLY net
+# score WHOIS_REGISTERFLY 3.0
+
+publish WHOIS_WHOISGUARD
+urirhssub WHOIS_WHOISGUARD bl.open-whois.org. A 127.0.0.18
+body WHOIS_WHOISGUARD eval:check_uridnsbl('WHOIS_WHOISGUARD')
+describe WHOIS_WHOISGUARD URL registered to WhoisGuard
+tflags WHOIS_WHOISGUARD net
+# score WHOIS_WHOISGUARD 2.5
+
+publish WHOIS_1AND1PR
+urirhssub WHOIS_AITPRIV bl.open-whois.org. A 127.0.0.19
+body WHOIS_AITPRIV eval:check_uridnsbl('WHOIS_AITPRIV')
+describe WHOIS_AITPRIV URL registered as an AIT Private Registration
+tflags WHOIS_AITPRIV net
+# score WHOIS_AITPRIV 1.5
+
+publish WHOIS_NAMEKING
+urirhssub WHOIS_NAMEKING bl.open-whois.org. A 127.0.0.35
+body WHOIS_NAMEKING eval:check_uridnsbl('WHOIS_NAMEKING')
+describe WHOIS_NAMEKING URL registered to NameKing
+tflags WHOIS_NAMEKING net
+# score WHOIS_NAMEKING 2.7
+
+# ---------------------------------------------------------------------------
+# not as good
+
+urirhssub WHOIS_1AND1PR bl.open-whois.org. A 127.0.0.2
+body WHOIS_1AND1PR eval:check_uridnsbl('WHOIS_1AND1PR')
+describe WHOIS_1AND1PR URL registered to 1&1 Private Registration
+tflags WHOIS_1AND1PR net
+# score WHOIS_1AND1PR 1.0
+
+urirhssub WHOIS_NETSOLPR bl.open-whois.org. A 127.0.0.4
+body WHOIS_NETSOLPR eval:check_uridnsbl('WHOIS_NETSOLPR')
+describe WHOIS_NETSOLPR URL registered as a NetSol Private Registration
+tflags WHOIS_NETSOLPR net
+# score WHOIS_NETSOLPR 0.4
+
urirhssub WHOIS_MONIKER_ROLE bl.open-whois.org. A 127.0.0.6
body WHOIS_MONIKER_ROLE eval:check_uridnsbl('WHOIS_MONIKER_ROLE')
describe WHOIS_MONIKER_ROLE URL registered to Moniker Privacy Services
@@ -75,12 +118,6 @@
tflags WHOIS_UNLISTED net
# score WHOIS_UNLISTED 2.7
-urirhssub WHOIS_REGISTERFLY bl.open-whois.org. A 127.0.0.14
-body WHOIS_REGISTERFLY eval:check_uridnsbl('WHOIS_REGISTERFLY')
-describe WHOIS_REGISTERFLY Contains URL registered to RegisterFly
-tflags WHOIS_REGISTERFLY net
-# score WHOIS_REGISTERFLY 3.0
-
urirhssub WHOIS_DMNBYPROXY bl.open-whois.org. A 127.0.0.15
body WHOIS_DMNBYPROXY eval:check_uridnsbl('WHOIS_DMNBYPROXY')
describe WHOIS_DMNBYPROXY Contains URL registered to Domains by Proxy
@@ -99,18 +136,6 @@
tflags WHOIS_MYPRIVREG net
# score WHOIS_MYPRIVREG 0.5
-urirhssub WHOIS_WHOISGUARD bl.open-whois.org. A 127.0.0.18
-body WHOIS_WHOISGUARD eval:check_uridnsbl('WHOIS_WHOISGUARD')
-describe WHOIS_WHOISGUARD URL registered to WhoisGuard
-tflags WHOIS_WHOISGUARD net
-# score WHOIS_WHOISGUARD 2.5
-
-urirhssub WHOIS_AITPRIV bl.open-whois.org. A 127.0.0.19
-body WHOIS_AITPRIV eval:check_uridnsbl('WHOIS_AITPRIV')
-describe WHOIS_AITPRIV URL registered as an AIT Private Registration
-tflags WHOIS_AITPRIV net
-# score WHOIS_AITPRIV 1.5
-
urirhssub WHOIS_WHOISPROT bl.open-whois.org. A 127.0.0.20
body WHOIS_WHOISPROT eval:check_uridnsbl('WHOIS_WHOISPROT')
describe WHOIS_WHOISPROT URL registered to WhoisProtector
@@ -168,6 +193,7 @@
urirhssub WHOIS_REGISTER4LESS bl.open-whois.org. A 127.0.0.30
body WHOIS_REGISTER4LESS eval:check_uridnsbl('WHOIS_REGISTER4LESS')
describe WHOIS_REGISTER4LESS URL registered to R4L Privacy
+tflags WHOIS_REGISTER4LESS net
# score WHOIS_REGISTER4LESS 2.2
urirhssub WHOIS_KATZ bl.open-whois.org. A 127.0.0.31
@@ -194,12 +220,6 @@
tflags WHOIS_MAPNAME net
# score WHOIS_MAPNAME 2.2
-urirhssub WHOIS_NAMEKING bl.open-whois.org. A 127.0.0.35
-body WHOIS_NAMEKING eval:check_uridnsbl('WHOIS_NAMEKING')
-describe WHOIS_NAMEKING URL registered to NameKing
-tflags WHOIS_NAMEKING net
-# score WHOIS_NAMEKING 2.7
-
urirhssub WHOIS_NOMINET bl.open-whois.org. A 127.0.0.36
body WHOIS_NOMINET eval:check_uridnsbl('WHOIS_NOMINET')
describe WHOIS_NOMINET URL registered to Nominet Private Registrant
@@ -243,10 +263,3 @@
# score WHOIS_NETID 0.8
endif # Mail::SpamAssassin::Plugin::URIDNSBL
-
-# if you want to use bl.open-whois.org. as an RHSBL as well
-header DNS_FROM_OPENWHOIS eval:check_rbl_envfrom('openwhois', 'bl.open-whois.org.')
-describe DNS_FROM_OPENWHOIS From: sender listed in bl.open-whois.org.
-tflags DNS_FROM_OPENWHOIS net
-# score DNS_FROM_OPENWHOIS 1.0
-