You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by ax...@apache.org on 2014/06/17 14:10:40 UTC
svn commit: r1603142 - in /spamassassin/trunk/rules: 25_uribl.cf 50_scores.cf
Author: axb
Date: Tue Jun 17 12:10:40 2014
New Revision: 1603142
URL: http://svn.apache.org/r1603142
Log:
Changes in Spamhaus DBL DNSBL return codes as per
http://www.spamhaus.org/news/article/713/
Effective July 1st, 2014
Modified:
spamassassin/trunk/rules/25_uribl.cf
spamassassin/trunk/rules/50_scores.cf
Modified: spamassassin/trunk/rules/25_uribl.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/25_uribl.cf?rev=1603142&r1=1603141&r2=1603142&view=diff
==============================================================================
--- spamassassin/trunk/rules/25_uribl.cf (original)
+++ spamassassin/trunk/rules/25_uribl.cf Tue Jun 17 12:10:40 2014
@@ -50,16 +50,60 @@ if (version >= 3.004000)
endif
# DBL, http://www.spamhaus.org/dbl/
+# changes axb 05-17-2014: as per http://www.spamhaus.org/news/article/713/
+# SH changes effective 06-01-2014
if can(Mail::SpamAssassin::Plugin::URIDNSBL::has_tflags_domains_only)
-urirhssub URIBL_DBL_SPAM dbl.spamhaus.org. A 127.0.1.2
-body URIBL_DBL_SPAM eval:check_uridnsbl('URIBL_DBL_SPAM')
-describe URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
-tflags URIBL_DBL_SPAM net domains_only
-
-urirhssub URIBL_DBL_REDIR dbl.spamhaus.org. A 127.0.1.3
-body URIBL_DBL_REDIR eval:check_uridnsbl('URIBL_DBL_REDIRECTOR')
-describe URIBL_DBL_REDIR Contains a URL listed in the DBL as a spammed redirector domain
-tflags URIBL_DBL_REDIR net domains_only
+
+urirhssub URIBL_DBL_SPAM dbl.spamhaus.org. A 127.0.1.2
+body URIBL_DBL_SPAM eval:check_uridnsbl('URIBL_DBL_SPAM')
+describe URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
+tflags URIBL_DBL_SPAM net domains_only
+
+urirhssub URIBL_DBL_REDIR dbl.spamhaus.org. A 127.0.1.3
+body URIBL_DBL_REDIR eval:check_uridnsbl('URIBL_DBL_REDIRECTOR')
+describe URIBL_DBL_REDIR Contains a URL listed in the DBL as a spammed redirector domain
+tflags URIBL_DBL_REDIR net domains_only
+
+urirhssub URIBL_DBL_PHISH dbl.spamhaus.org. A 127.0.1.4
+body URIBL_DBL_PHISH eval:check_uridnsbl('URIBL_DBL_PHISH')
+describe URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
+tflags URIBL_DBL_PHISH net domains_only
+
+urirhssub URIBL_DBL_MALWARE dbl.spamhaus.org. A 127.0.1.5
+body URIBL_DBL_MALWARE eval:check_uridnsbl('URIBL_DBL_MALWARE')
+describe URIBL_DBL_MALWARE Contains a malware URL listed in the DBL blocklist
+tflags URIBL_DBL_MALWARE net domains_only
+
+urirhssub URIBL_DBL_BOTNETCC dbl.spamhaus.org. A 127.0.1.6
+body URIBL_DBL_BOTNETCC eval:check_uridnsbl('URIBL_DBL_BOTNETCC')
+describe URIBL_DBL_BOTNETCC Contains a botned C&C URL listed in the DBL blocklist
+tflags URIBL_DBL_BOTNETCC net domains_only
+
+urirhssub URIBL_DBL_ABUSE_SPAM dbl.spamhaus.org. A 127.0.1.102
+body URIBL_DBL_ABUSE_SPAM eval:check_uridnsbl('URIBL_DBL_ABUSE_SPAM')
+describe URIBL_DBL_ABUSE_SPAM Contains an abused spamvertized URL listed in the DBL blocklist
+tflags URIBL_DBL_ABUSE_SPAM net domains_only
+
+urirhssub URIBL_DBL_ABUSE_REDIR dbl.spamhaus.org. A 127.0.1.103
+body URIBL_DBL_ABUSE_REDIR eval:check_uridnsbl('URIBL_DBL_ABUSE_REDIR')
+describe URIBL_DBL_ABUSE_REDIR Contains an abused redirector URL listed in the DBL blocklist
+tflags URIBL_DBL_ABUSE_REDIR net domains_only
+
+urirhssub URIBL_DBL_ABUSE_PHISH dbl.spamhaus.org. A 127.0.1.104
+body URIBL_DBL_ABUSE_PHISH eval:check_uridnsbl('URIBL_DBL_ABUSE_PHISH')
+describe URIBL_DBL_ABUSE_PHISH Contains an abused phishing URL listed in the DBL blocklist
+tflags URIBL_DBL_ABUSE_PHISH net domains_only
+
+urirhssub URIBL_DBL_ABUSE_MALW dbl.spamhaus.org. A 127.0.1.105
+body URIBL_DBL_ABUSE_MALW eval:check_uridnsbl('URIBL_DBL_ABUSE_MALW')
+describe URIBL_DBL_ABUSE_MALW Contains an abused malware URL listed in the DBL blocklist
+tflags URIBL_DBL_ABUSE_MALW net domains_only
+
+urirhssub URIBL_DBL_ABUSE_BOTCC dbl.spamhaus.org. A 127.0.1.106
+body URIBL_DBL_ABUSE_BOTCC eval:check_uridnsbl('URIBL_DBL_ABUSE_BOTCC')
+describe URIBL_DBL_ABUSE_BOTCC Contains an abused botnet C&C URL listed in the DBL blocklist
+tflags URIBL_DBL_ABUSE_BOTCC net domains_only
+
# this indicates that IP-address queries were sent to DBL, and should
# never appear; if it does, something is wrong with SpamAssassin
Modified: spamassassin/trunk/rules/50_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/50_scores.cf?rev=1603142&r1=1603141&r2=1603142&view=diff
==============================================================================
--- spamassassin/trunk/rules/50_scores.cf (original)
+++ spamassassin/trunk/rules/50_scores.cf Tue Jun 17 12:10:40 2014
@@ -799,8 +799,19 @@ score URIBL_WS_SURBL 0 1.659 0 1.608 # n
score URIBL_MW_SURBL 0 1.263 0 1.263
score URIBL_BLACK 0 1.7 0 1.7 # n=0 n=2
score URIBL_GREY 0 1.084 0 0.424 # n=0 n=2
-score URIBL_DBL_SPAM 0 2.5 0 2.5
+score URIBL_DBL_SPAM 0 2.5 0 2.5
+score URIBL_DBL_PHISH 0 2.5 0 2.5
+score URIBL_DBL_MALWARE 0 2.5 0 2.5
+score URIBL_DBL_BOTNETCC 0 2.5 0 2.5
+score URIBL_DBL_ABUSE_SPAM 0 2.0 0 2.0
+score URIBL_DBL_ABUSE_REDIR 0 0.001 0 0.001
+score URIBL_DBL_ABUSE_PHISH 0 2.5 0 2.5
+score URIBL_DBL_ABUSE_MALW 0 2.5 0 2.5
+score URIBL_DBL_ABUSE_BOTCC 0 2.5 0 2.5
+
+# PURGE AFTER 06-01-2014
score URIBL_DBL_REDIR 0 0.001 0 0.001
+
# </gen:mutable>
# score URIBL_GREY 0.25
score URIBL_RED 0 0.001 0 0.001