171 lines
6.2 KiB
CFEngine3
171 lines
6.2 KiB
CFEngine3
# SpamAssassin rules file: default SPF welcomelists
|
|
#
|
|
# Please don't modify this file as your changes will be overwritten with
|
|
# the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead.
|
|
# See 'perldoc Mail::SpamAssassin::Conf' for details.
|
|
#
|
|
# <@LICENSE>
|
|
# Licensed to the Apache Software Foundation (ASF) under one or more
|
|
# contributor license agreements. See the NOTICE file distributed with
|
|
# this work for additional information regarding copyright ownership.
|
|
# The ASF licenses this file to you under the Apache License, Version 2.0
|
|
# (the "License"); you may not use this file except in compliance with
|
|
# the License. You may obtain a copy of the License at:
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
# </@LICENSE>
|
|
|
|
ifplugin Mail::SpamAssassin::Plugin::SPF
|
|
|
|
###########################################################################
|
|
# SPF welcomelist rules
|
|
|
|
# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
|
|
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
|
|
header USER_IN_SPF_WELCOMELIST eval:check_for_spf_welcomelist_from()
|
|
describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist
|
|
tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net
|
|
score USER_IN_SPF_WELCOMELIST -100
|
|
reuse USER_IN_SPF_WELCOMELIST
|
|
|
|
# Backwards compatibility
|
|
# To disable set "enable_compat welcomelist_blocklist" in init.pre
|
|
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
|
|
meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST)
|
|
describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST
|
|
tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net
|
|
score USER_IN_SPF_WHITELIST -100
|
|
reuse USER_IN_SPF_WHITELIST
|
|
score USER_IN_SPF_WELCOMELIST -0.01
|
|
endif
|
|
|
|
header USER_IN_DEF_SPF_WL eval:check_for_def_spf_welcomelist_from()
|
|
describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list
|
|
tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net
|
|
reuse USER_IN_DEF_SPF_WL
|
|
endif
|
|
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
|
|
header USER_IN_SPF_WELCOMELIST eval:check_for_spf_whitelist_from()
|
|
describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist
|
|
tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net
|
|
score USER_IN_SPF_WELCOMELIST -0.01
|
|
reuse USER_IN_SPF_WELCOMELIST
|
|
|
|
meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST)
|
|
describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST
|
|
tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net
|
|
score USER_IN_SPF_WHITELIST -100
|
|
reuse USER_IN_SPF_WHITELIST
|
|
|
|
header USER_IN_DEF_SPF_WL eval:check_for_def_spf_whitelist_from()
|
|
describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list
|
|
tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net
|
|
reuse USER_IN_DEF_SPF_WL
|
|
endif
|
|
|
|
meta ENV_AND_HDR_SPF_MATCH (USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH)
|
|
describe ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match
|
|
tflags ENV_AND_HDR_SPF_MATCH userconf nice noautolearn net
|
|
|
|
###########################################################################
|
|
# Default welcomelists. These should be addresses which send mail that is often
|
|
# tagged (incorrectly) as spam; it also helps that they be addresses of big
|
|
# companies with lots of lawyers, so if spammers impersonate them, they'll get
|
|
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
|
|
#
|
|
# Whitelist and blacklist addresses are now file-glob-style patterns, so
|
|
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
|
|
#
|
|
# Please do not add unmoderated public mailing lists here. They are
|
|
# too easily abused by spammers.
|
|
|
|
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
|
|
|
|
def_welcomelist_from_spf *@nytimes.com
|
|
def_welcomelist_from_spf *@amazon.com
|
|
def_welcomelist_from_spf *@amazon.co.uk
|
|
def_welcomelist_from_spf *@*.amazon.co.uk
|
|
def_welcomelist_from_spf *@ora.com
|
|
def_welcomelist_from_spf *@*.ora.com
|
|
def_welcomelist_from_spf *@mypoints.com
|
|
def_welcomelist_from_spf *@*.mypoints.com
|
|
def_welcomelist_from_spf *@paypal.com
|
|
def_welcomelist_from_spf *@ebay.com
|
|
def_welcomelist_from_spf *@foolsubs.com
|
|
def_welcomelist_from_spf *@match.com
|
|
|
|
# bugtraq: can contain malicious Javascript etc.
|
|
def_welcomelist_from_spf *@securityfocus.com
|
|
|
|
def_welcomelist_from_spf *@mediaunspun.imakenews.net
|
|
|
|
# sender of Cringley newsletter
|
|
def_welcomelist_from_spf *@bdcimail.com
|
|
|
|
# Silicon.com newslettters - we see thousands of these
|
|
def_welcomelist_from_spf *@silicon.com
|
|
|
|
# C|Net news.com newsletters
|
|
def_welcomelist_from_spf *@newsletter.online.com
|
|
|
|
# bug 1348
|
|
def_welcomelist_from_spf *@enews.buy.com
|
|
def_welcomelist_from_spf *@palm.m0.net
|
|
def_welcomelist_from_spf *@handspring.4at1.com
|
|
|
|
endif
|
|
|
|
|
|
###
|
|
### For <4.0 compatibility
|
|
###
|
|
|
|
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
|
|
|
|
def_whitelist_from_spf *@nytimes.com
|
|
def_whitelist_from_spf *@amazon.com
|
|
def_whitelist_from_spf *@amazon.co.uk
|
|
def_whitelist_from_spf *@*.amazon.co.uk
|
|
def_whitelist_from_spf *@ora.com
|
|
def_whitelist_from_spf *@*.ora.com
|
|
def_whitelist_from_spf *@mypoints.com
|
|
def_whitelist_from_spf *@*.mypoints.com
|
|
def_whitelist_from_spf *@paypal.com
|
|
def_whitelist_from_spf *@ebay.com
|
|
def_whitelist_from_spf *@foolsubs.com
|
|
def_whitelist_from_spf *@match.com
|
|
|
|
# bugtraq: can contain malicious Javascript etc.
|
|
def_whitelist_from_spf *@securityfocus.com
|
|
|
|
def_whitelist_from_spf *@mediaunspun.imakenews.net
|
|
|
|
# sender of Cringley newsletter
|
|
def_whitelist_from_spf *@bdcimail.com
|
|
|
|
# Silicon.com newslettters - we see thousands of these
|
|
def_whitelist_from_spf *@silicon.com
|
|
|
|
# C|Net news.com newsletters
|
|
def_whitelist_from_spf *@newsletter.online.com
|
|
|
|
# bug 1348
|
|
def_whitelist_from_spf *@enews.buy.com
|
|
def_whitelist_from_spf *@palm.m0.net
|
|
def_whitelist_from_spf *@handspring.4at1.com
|
|
|
|
endif
|
|
|
|
###
|
|
###
|
|
###
|
|
|
|
endif # Mail::SpamAssassin::Plugin::SPF
|
|
|