D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
home
/
vblioqus
/
karachi777.vip
/
in
/
106014
/
900508
/
Filename :
spamassassin.zip
back
Copy
PK 8d\Ӧsl� � * 3.004006/updates_spamassassin_org/local.cfnu �[��� # This is the right place to customize your installation of SpamAssassin. # # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # # Only a small subset of options are listed below # ########################################################################### # A 'contact address' users should contact for more info. (replaces # _CONTACTADDRESS_ in the report template) # report_contact youremailaddress@domain.tld # Add *****SPAM***** to the Subject header of spam e-mails # # rewrite_header Subject *****SPAM***** # Save spam messages as a message/rfc822 MIME attachment instead of # modifying the original message (0: off, 2: use text/plain instead) # # report_safe 1 # Set which networks or hosts are considered 'trusted' by your mail # server (i.e. not spammers) # # trusted_networks 212.17.35. # Set file-locking method (flock is not safe over NFS, but is faster) # # lock_method flock # Set the threshold at which a message is considered spam (default: 5.0) # # required_score 5.0 # Use Bayesian classifier (default: 1) # # use_bayes 1 # Bayesian classifier auto-learning (default: 1) # # bayes_auto_learn 1 # Set headers which may provide inappropriate cues to the Bayesian # classifier # # bayes_ignore_header X-Bogosity # bayes_ignore_header X-Spam-Flag # bayes_ignore_header X-Spam-Status # Whether to decode non- UTF-8 and non-ASCII textual parts and recode # them to UTF-8 before the text is given over to rules processing. # # normalize_charset 1 # Textual body scan limit (default: 50000) # # Amount of data per email text/* mimepart, that will be run through body # rules. This enables safer and faster scanning of large messages, # perhaps having very large textual attachments. There should be no need # to change this well tested default. # # body_part_scan_size 50000 # Textual rawbody data scan limit (default: 500000) # # Amount of data per email text/* mimepart, that will be run through # rawbody rules. # # rawbody_part_scan_size 500000 # Some shortcircuiting, if the plugin is enabled # ifplugin Mail::SpamAssassin::Plugin::Shortcircuit # # default: strongly-welcomelisted mails are *really* welcomelisted now, if # the shortcircuiting plugin is active, causing early exit to save CPU # load. Uncomment to turn this on # # SpamAssassin tries hard not to launch DNS queries before priority -100. # If you want to shortcircuit without launching unneeded queries, make # sure such rule priority is below -100. These examples are already: # # shortcircuit USER_IN_WELCOMELIST on # shortcircuit USER_IN_DEF_WELCOMELIST on # shortcircuit USER_IN_ALL_SPAM_TO on # the opposite; blocklisted mails can also save CPU # # shortcircuit USER_IN_BLOCKLIST on # shortcircuit USER_IN_BLOCKLIST_TO on # if you have taken the time to correctly specify your "trusted_networks", # this is another good way to save CPU # # shortcircuit ALL_TRUSTED on # and a well-trained bayes DB can save running rules, too # # shortcircuit BAYES_99 spam # shortcircuit BAYES_00 ham endif # Mail::SpamAssassin::Plugin::Shortcircuit PK 8d\,�0 0 + 3.004006/updates_spamassassin_org/25_spf.cfnu �[��� # SpamAssassin - SPF rules # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### # Requires the Mail::SpamAssassin::Plugin::SPF plugin be loaded. ifplugin Mail::SpamAssassin::Plugin::SPF # SPF support: # "pass" is nice # "neutral" is somewhat bad # "fail" is bad # "softfail" is bad, but not as bad as "fail" # "permerror" is very bad, and means the domain doesn't have a valid spf record # These are more trustworthy results than the SPF_HELO rules. # some are "userconf" so that scores are set by hand? header SPF_PASS eval:check_for_spf_pass() describe SPF_PASS SPF: sender matches SPF record tflags SPF_PASS nice userconf net reuse SPF_PASS header SPF_NEUTRAL eval:check_for_spf_neutral() describe SPF_NEUTRAL SPF: sender does not match SPF record (neutral) tflags SPF_NEUTRAL net reuse SPF_NEUTRAL header SPF_FAIL eval:check_for_spf_fail() describe SPF_FAIL SPF: sender does not match SPF record (fail) tflags SPF_FAIL net reuse SPF_FAIL header SPF_SOFTFAIL eval:check_for_spf_softfail() describe SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) tflags SPF_SOFTFAIL net reuse SPF_SOFTFAIL # NOTE: SPF_HELO_PASS is not incredibly hard to fake, so shouldn't # provide much in the way of points compared to SPF_PASS et al. # However, a *failure* is still a very good spamsign. header SPF_HELO_PASS eval:check_for_spf_helo_pass() describe SPF_HELO_PASS SPF: HELO matches SPF record tflags SPF_HELO_PASS nice userconf net reuse SPF_HELO_PASS header SPF_HELO_NEUTRAL eval:check_for_spf_helo_neutral() describe SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral) tflags SPF_HELO_NEUTRAL net reuse SPF_HELO_NEUTRAL header SPF_HELO_FAIL eval:check_for_spf_helo_fail() describe SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) tflags SPF_HELO_FAIL net reuse SPF_HELO_FAIL header SPF_HELO_SOFTFAIL eval:check_for_spf_helo_softfail() describe SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) tflags SPF_HELO_SOFTFAIL net reuse SPF_HELO_SOFTFAIL # Implementing the Sender Check for No SPF REcord defaulting to disabled so Admins can override header SPF_NONE eval:check_for_spf_none() describe SPF_NONE SPF: sender does not publish an SPF Record tflags SPF_NONE net reuse SPF_NONE header SPF_HELO_NONE eval:check_for_spf_helo_none() describe SPF_HELO_NONE SPF: HELO does not publish an SPF Record tflags SPF_HELO_NONE net reuse SPF_HELO_NONE if can(Mail::SpamAssassin::Plugin::SPF::has_check_for_spf_errors) header T_SPF_PERMERROR eval:check_for_spf_permerror() describe T_SPF_PERMERROR SPF: test of record failed (permerror) tflags T_SPF_PERMERROR net reuse T_SPF_PERMERROR header T_SPF_TEMPERROR eval:check_for_spf_temperror() describe T_SPF_TEMPERROR SPF: test of record failed (temperror) tflags T_SPF_TEMPERROR net reuse T_SPF_TEMPERROR header T_SPF_HELO_PERMERROR eval:check_for_spf_helo_permerror() describe T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror) tflags T_SPF_HELO_PERMERROR net reuse T_SPF_HELO_PERMERROR header T_SPF_HELO_TEMPERROR eval:check_for_spf_helo_temperror() describe T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror) tflags T_SPF_HELO_TEMPERROR net reuse T_SPF_HELO_TEMPERROR endif endif # Mail::SpamAssassin::Plugin::SPF PK 8d\Ts��Q Q / 3.004006/updates_spamassassin_org/20_vbounce.cfnu �[��� # A virus-bounce ruleset, suitable for use by anyone receiving a lot of joe-job # virus-blowback, or spam-blowback bounce messages. # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### # # If you use this, set up procmail or your mail app to spot the # "ANY_BOUNCE_MESSAGE" rule hits in the X-Spam-Status line, and move # messages that match that to a 'vbounce' folder. # # You should also add 'welcomelist_bounce_relays' lines, describing the names of # your own outgoing mail relays, like so: # # welcomelist_bounce_relays dogma.boxhost.net # # This is used to 'rescue' legitimate bounce messages that were generated in # response to mail you really *did* send. If you don't do this, the # "BOUNCE_MESSAGE" rule will not fire. See 'perldoc VBounce.pm' for more # details. # # This ruleset is substantially based on # https://www.timj.co.uk/linux/bogus-virus-warnings.cf ; the main difference is # that I (jm) prefer to keep bounces and spam separate, so it now uses a single # rule for each type of message, instead of having multiple individual rules # with high scores. That way, you can spot the individual rule names, as # described in the paragraph above. There's a couple of rules that were FPing, # too, so I fixed or removed them; and there's been substantial additions, too. # ########################################################################### ifplugin Mail::SpamAssassin::Plugin::VBounce if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) body __MY_SERVERS_FOUND eval:check_welcomelist_bounce_relays() endif if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) body __MY_SERVERS_FOUND eval:check_whitelist_bounce_relays() endif body __HAVE_BOUNCE_RELAYS eval:have_any_bounce_relays() # --------------------------------------------------------------------------- # General bounce messages header __BOUNCE_FROM_DAEMON From =~ /(?:^(?:mail\S+daemon|d[ae][ae]mon|majordomo|postmaster|automated-response|mailadmin|mailmaster|surfcontrol|You_Got_Spammed|SMTP.gateway)\@|scanner\S*\@|<>)/i header __BOUNCE_RPATH_NULL Return-Path =~ /<>/ header __BOUNCE_READ_NOTIFICATION Subject =~ /^Read: / header __BOUNCE_RPATH_MD Return-Path =~ /(?:mailer-(?:daemon|deamon)|quotaagent|pleaseforward|autoresponder|autoresponse-\S+|devnull\S*)\@/i # can appear in non-bounce mails with __XM_VBULLETIN, # or with X-Cron-Env headers, so exclude those cases header __XM_VBULLETIN X-Mailer =~ /^vBulletin Mail/ header __X_CRON_ENV X-Cron-Env =~ /^</ header __AUTO_GEN_MS exists:X-MS-Embedded-Report header __AUTO_GEN_AG exists:X-autogenerated header __AUTO_GEN_CM exists:X-Choicemail-Registration-Request header __AUTO_GEN_3 X-MailScanner =~ /generated/ header __AUTO_GEN_4 X-Mailer =~ /autoresponder/i header __AUTO_GEN_XXSP X-XSP-Msgclass =~ /NOTIFICATION/ header __AUTO_GEN_PREC Precedence =~ /auto/ meta __BOUNCE_AUTO_GENERATED ((__AUTO_GEN_MS||__AUTO_GEN_3||__AUTO_GEN_4||__AUTO_GEN_AG||__AUTO_GEN_XXSP ||__AUTO_GEN_CM||__AUTO_GEN_PREC) && !__XM_VBULLETIN && !__X_CRON_ENV) header __BOUNCE_Y_AUTOGEN Subject =~ /^Yahoo! Auto Response/ header __BOUNCE_SYMANTEC Subject =~ /^Returned mail.{0,5}(?:Error During Delivery|see transcript for details|)$/i header __BOUNCE_X_ERR_STAT X-Error-Status =~ /User unknown/ header __BOUNCE_RETURNED Subject =~ /^Returned mail: (?:User unknown|unreachable recipients)/ header __BOUNCE_MAILDELFAIL Subject =~ /^Mail delivery failed: / header __BOUNCE_MSGDELFAIL Subject =~ /^Message Delivery Failure/ body __BOUNCE_ESMTP /^This messages was created automatically by mail delivery software/ # JM: prev versions used "automaticly", that was a typo body __BOUNCE_NEVER_SEE /\bThis is an autoresponder. I'll never see your message\b/i body __BOUNCE_NONWORKING /\bYou have reached a non.?working address. Please check\b/i header __BOUNCE_UNDELIVERABLE Subject =~ /^Undeliverable(?: -|:) / header __BOUNCE_UNDELIVERABLE_ML Subject =~ /^Undeliver(?:able|ed) Mail\b/ header __BOUNCE_NOTDEL Subject =~ /^MESSAGE NOT DELIVERED: / header __BOUNCE_ADDR_ERR Subject =~ /^e-mail addressing error \(/ header __BOUNCE_NO_VAL Subject =~ /^No valid recipient in / header __BOUNCE_DATA_FORMAT Subject =~ /^Returned mail: Data format error$/ header __BOUNCE_COULD_NOT Subject =~ /^Mail could not be delivered$/ header __BOUNCE_UNDEL_MSG Subject =~ /^Undeliverable (?:Message|Mail)$/ header __BOUNCE_CTYPE Content-Type =~ /\bmultipart\/report\b/ header __BOUNCE_DEL_FAIL Subject =~ /^Delivery Failure Notification/ header __BOUNCE_STAT_FAIL Subject =~ /^Delivery Status Notification/ header __BOUNCE_NOTIF Subject =~ /^Notification d\'.tat de la distribution$/ header __BOUNCE_RET_MAIL Subject =~ /^Returned Mail$/ header __BOUNCE_DEL_FAIL Subject =~ /^DELIVERY FAILURE/i header __BOUNCE_MAIL_DEL_FAIL Subject =~ /^Mail Delivery Failure$/ header __NONBOUNCE_READ_RECEIPT_CTYPE Content-Type =~ /\breport-type=disposition-notification\b/ # bug 6051, some bounces *do* use that ctype header __YESBOUNCE_AUTO_REPLIED_REJ Auto-Submitted =~ /^auto-replied \(rejected\)/ meta __NONBOUNCE_READ_RECEIPT (__NONBOUNCE_READ_RECEIPT_CTYPE && !__YESBOUNCE_AUTO_REPLIED_REJ) # Return-path: <delete@errmail.kagoya.net> # 'Invalid e-mail address.' header __BOUNCE_RPATH_ERRMAIL Return-Path =~ /delete\@errmail\./i header __BOUNCE_AUTO_RESPOND Subject =~ /^(?:Automatically Generated Response from |Auto-Respond E-Mail from )/ header __BOUNCE_AUTO_RESPONSE Subject =~ /^automated response$/i body __BOUNCE_ETRUST /^eTrust Secure Content Manager SMTPMAIL could not deliver the e-mail / header __BOUNCE_INTERSCAN From =~ /\bInterscan MSS Notification\b/ body __BOUNCE_NO_RESEND /\bPlease do not resend your original message\./ header __BOUNCE_AUTO_REPLY Subject =~ /\b(?:automatic reply|AutoReply)\b/ meta BOUNCE_MESSAGE __HAVE_BOUNCE_RELAYS && !OOOBOUNCE_MESSAGE && !__MY_SERVERS_FOUND && !ALL_TRUSTED && !__NONBOUNCE_READ_RECEIPT && (__BOUNCE_FROM_DAEMON || (__BOUNCE_RPATH_NULL && !__BOUNCE_READ_NOTIFICATION) || __BOUNCE_RPATH_MD || __BOUNCE_AUTO_GENERATED || __BOUNCE_Y_AUTOGEN || __BOUNCE_SYMANTEC || __BOUNCE_X_ERR_STAT || __BOUNCE_RETURNED || __BOUNCE_MAILDELFAIL || __BOUNCE_MSGDELFAIL || __BOUNCE_ESMTP || __BOUNCE_NEVER_SEE || __BOUNCE_NONWORKING || __BOUNCE_UNDELIVERABLE || __BOUNCE_UNDELIVERABLE_ML || __BOUNCE_NOTDEL || __BOUNCE_CTYPE || __BOUNCE_DEL_FAIL || __BOUNCE_STAT_FAIL || __BOUNCE_ADDR_ERR || __BOUNCE_NO_VAL || __BOUNCE_DATA_FORMAT || __BOUNCE_COULD_NOT || __BOUNCE_UNDEL_MSG || __BOUNCE_RPATH_ERRMAIL || __BOUNCE_INTERSCAN || __BOUNCE_ETRUST || __BOUNCE_AUTO_RESPONSE || __BOUNCE_AUTO_RESPOND || __BOUNCE_NO_RESEND || __BOUNCE_NOTIF || __BOUNCE_RET_MAIL || __BOUNCE_DEL_FAIL || __BOUNCE_MAIL_DEL_FAIL || __BOUNCE_AUTO_REPLY) describe BOUNCE_MESSAGE MTA bounce message # --------------------------------------------------------------------------- # Out Of Office bounces # Do not use subject/body rules without checking for autoreply headers also header __AUTOREPLY_XAR X-Autoreply =~ /\byes/i header __AUTOREPLY_PRE Precedence =~ /\bauto_reply/i header __AUTOREPLY_XPR X-Precedence =~ /\bauto_reply/i header __AUTOREPLY_ASU Auto-Submitted =~ /\bauto-(?:replied|generated)(?! \(rejected\))/i meta __BOUNCE_OOO_ARHDR __AUTOREPLY_XAR || __AUTOREPLY_PRE || __AUTOREPLY_XPR || __AUTOREPLY_ASU # Standalone subjects that are clearly out of office header __BOUNCE_OOO_S1 Subject =~ /^R.ponse automatique d'absence du bureau/ header __BOUNCE_OOO_S2 Subject =~ / \(away from the office\)$/ header __BOUNCE_OOO_S3 Subject =~ /^Out Of Office\b/ meta __BOUNCE_OOO_SUBJECT __BOUNCE_OOO_S1 || __BOUNCE_OOO_S2 || __BOUNCE_OOO_S3 # Standalone body clauses that are clearly out of office body __BOUNCE_OOO_B1 /\bI ?.m away until .{10,20} and am unable to read your message\b/ body __BOUNCE_OOO_B2 /\bI am currently out of the office\b/ meta __BOUNCE_OOO_BODY __BOUNCE_OOO_B1 || __BOUNCE_OOO_B2 # Combined subject+body checks header __BOUNCE_OOO_CS1 Subject =~ /^Automa(?:tic reply|attinen vastaus|tisch antwoord):/ body __BOUNCE_OOO_CB1 /\bout of (?:the )?office\b/i body __BOUNCE_OOO_CB2 /\bon (?:vacation|holiday)\b/i body __BOUNCE_OOO_CB3 /\bolen lomalla\b/i body __BOUNCE_OOO_CB4 /\breturn to (?:the )?office\b/i meta __BOUNCE_OOO_SUBJBODY __BOUNCE_OOO_CS1 && (__BOUNCE_OOO_CB1 || __BOUNCE_OOO_CB2 || __BOUNCE_OOO_CB3 || __BOUNCE_OOO_CB4) meta OOOBOUNCE_MESSAGE __BOUNCE_OOO_ARHDR && (__BOUNCE_OOO_SUBJECT || __BOUNCE_OOO_BODY || __BOUNCE_OOO_SUBJBODY) describe OOOBOUNCE_MESSAGE Out Of Office bounce message # --------------------------------------------------------------------------- # Challenge/Response bounces header __CRBOUNCE_UOL From =~ /\bAntiSpam UOL\b/ header __CRBOUNCE_VERIF Subject =~ /^(?:Your email requires verification verify:\S|Please Verify Your Email Address)/ header __CRBOUNCE_RP Return-Path =~ /<(?:spamblocker-challenge|spambush|apd\.sspam|spamhippo|devnull-quarantine)\@/i header __CRBOUNCE_RP_2 Return-Path =~ /\@(?:spamstomp\.com|ipermitmail\.com)>$/i header __CRBOUNCE_VANQ From =~ /<confirm-\S+\@spamguard\.vanquish\.com>/ header __CRBOUNCE_QURB Subject =~ /\[Qurb .\d+\]$/ uri __CRBOUNCE_0SPAM1 /^http:\/\/www\.0spam\.com\/v/ header __CRBOUNCE_0SPAM2 From:addr =~ /^verify\@0spam.com$/ meta __CRBOUNCE_0SPAM (__CRBOUNCE_0SPAM1 && __CRBOUNCE_0SPAM2) header __CRBOUNCE_SPAMARREST exists:X-Spamarrest-noauth # https://mailinblack.com , a French C/R system with no other reliable # signatures. annoying! header __CRBOUNCE_MIB Content-Type =~ /mUlTiPaRtBoUnDaRy_MailInBlack/ uri __CRBOUNCE_SI1 m,^http://si20.com/auth, header __CRBOUNCE_SI2 From:addr =~ /^siweb\@si20\.com/ meta __CRBOUNCE_SI (__CRBOUNCE_SI1 && __CRBOUNCE_SI2) # very frequent, using unrelated From lines; either spam or C/R, not yet # sure which header __CRBOUNCE_GETRESP Return-Path =~ /<bounce\S+\@\S+\.getresponse\.com>/ header __CRBOUNCE_TMDA Message-Id =~ /\@\S+\-tmda\-confirm>$/ header __CRBOUNCE_ASK X-AskVersion =~ /\d/ header __CRBOUNCE_SZ X-Spamazoid-MD =~ /\d/ header __CRBOUNCE_SPAMLION Spamlion =~ /\S/ # something called /cgi-bin/notaspammer does this! header __CRBOUNCE_PREC_SPAM Precedence =~ /spam/ header __AUTO_GEN_XBT exists:X-Boxtrapper header __AUTO_GEN_BBTL exists:X-Bluebottle-Request meta __CRBOUNCE_HEADER (__AUTO_GEN_XBT || __AUTO_GEN_BBTL) header __CRBOUNCE_EXI X-ExiSpam =~ /ExiSpam/ header __CRBOUNCE_UNVERIF Subject =~ /^Unverified email to / header __CRBOUNCE_BLOCKED Subject =~ /^\*\*Message you sent blocked by our bulk email filter\*\*$/ meta __CHALLENGE_RESPONSE __CRBOUNCE_UOL || __CRBOUNCE_VERIF || __CRBOUNCE_RP || __CRBOUNCE_VANQ || __CRBOUNCE_HEADER || __CRBOUNCE_QURB || __CRBOUNCE_0SPAM || __CRBOUNCE_GETRESP || __CRBOUNCE_TMDA || __CRBOUNCE_ASK || __CRBOUNCE_EXI || __CRBOUNCE_PREC_SPAM || __CRBOUNCE_SZ || __CRBOUNCE_SPAMLION || __CRBOUNCE_MIB || __CRBOUNCE_SI || __CRBOUNCE_UNVERIF || __CRBOUNCE_RP_2 || __CRBOUNCE_BLOCKED || __CRBOUNCE_SPAMARREST meta CHALLENGE_RESPONSE __MY_SERVERS_FOUND && __CHALLENGE_RESPONSE describe CHALLENGE_RESPONSE Challenge-Response message for mail you sent meta CRBOUNCE_MESSAGE !__MY_SERVERS_FOUND && __CHALLENGE_RESPONSE describe CRBOUNCE_MESSAGE Challenge-Response bounce message # --------------------------------------------------------------------------- # "Virus found in your mail" bounces # source: VirusBounceRules from the exit0 SA wiki body __VBOUNCE_EXIM /a potentially executable attachment / body __VBOUNCE_STRIP_ATTACH /\bhas stripped one or more attachments from the following message\b/ body __VBOUNCE_GUIN /message contains file attachments that are not permitted/ body __VBOUNCE_CISCO /^Found virus \S+ in file \S/m body __VBOUNCE_SMTP /host \S+ said: 5\d\d\s+Error: Message content rejected/ body __VBOUNCE_AOL /TRANSACTION FAILED - Unrepairable Virus Detected. / body __VBOUNCE_DUTCH /bevatte bijlage besmet welke besmet was met een virus/ body __VBOUNCE_MAILMARSHAL /Mail.?Marshal Rule: Inbound Messages : Block Dangerous Attachments/ header __VBOUNCE_MAILMARSHAL2 Subject =~ /^MailMarshal has detected possible spam in your message/ header __VBOUNCE_NAVFAIL Subject =~ /^Norton Anti.?Virus failed to scan an attachment in a message you sent/ header __VBOUNCE_REJECTED Subject =~ /^EMAIL REJECTED$/ header __VBOUNCE_PROBLEME Subject:raw =~ /^=?iso-8859-1?Q?Messagerie_.{1,100}_=3A_probl=E8me_de_s=E9curit=E9=2E?=/ header __VBOUNCE_NAV Subject =~ /^Norton Anti.?Virus detected and quarantined/ header __VBOUNCE_MELDING Subject =~ /^Virusmelding$/ body __VBOUNCE_VALERT /The mail message \S+ \S+ you sent to \S+ contains the virus/ body __VBOUNCE_REJ_FILT /Reason: Rejected by filter/ header __VBOUNCE_YOUSENT Subject =~ /^Warning - You sent a Virus Infected Email to / body __VBOUNCE_MAILSWEEP /MAILsweeper has found that a \S+ \S+ \S+ \S+ one or more virus/ header __VBOUNCE_SCREENSAVER Subject =~ /\b(?:Re: ?)Wicked screensaver\b/i header __VBOUNCE_DISALLOWED Subject =~ /^Disallowed attachment type found/ header __VBOUNCE_FROMPT From =~ /Security.?Scan Anti.?Virus/ header __VBOUNCE_WARNING Subject =~ /^Warning:\s*E-?mail virus(?:es)? detected/i header __VBOUNCE_DETECTED Subject =~ /^Virus detected /i header __VBOUNCE_INTERSCAN Subject =~ /^Failed to clean virus\b/i header __VBOUNCE_VIOLATION Subject =~ /^Content violation/i header __VBOUNCE_ALERT Subject =~ /^Virus Alert\b/i header __VBOUNCE_NAV2 Subject =~ /^NAV detected a virus in a document / body __VBOUNCE_NAV3 /^Reporting-MTA: Norton Anti.?Virus Gateway/ header __VBOUNCE_INTERSCAN2 Subject =~ /^InterScan MSS for SMTP has delivered a message/ header __VBOUNCE_INTERSCAN3 Subject =~ /^InterScan NT Alert/ header __VBOUNCE_ANTIGEN Subject =~ /^Antigen found\b/i header __VBOUNCE_LUTHER From =~ /\blutherh\@stratcom.com\b/ header __VBOUNCE_AMAVISD Subject =~ /^VIRUS IN YOUR MAIL /i body __VBOUNCE_AMAVISD2 /\bV I R U S\b/ header __VBOUNCE_GSHIELD Subject =~ /^McAfee GroupShield Alert/ # off: got an FP in a simple forward # rawbody __VBOUNCE_SUBJ_IN_MAIL /^\s*Subject:\s*(Re: )*((my|your) )?(application|details)/i # rawbody __VBOUNCE_SUBJ_IN_MAIL2 /^\s*Subject:\s*(Re: )*(Thank you!?|That movie|Wicked screensaver|Approved)/i header __VBOUNCE_SCANMAIL Subject =~ /^Scan.?Mail Message: .{0,30} virus found /i header __VBOUNCE_DOMINO1 Subject =~ /^Report to Sender/ body __VBOUNCE_DOMINO2 /^Incident Information:/ header __VBOUNCE_RAV Subject =~ /^RAV Anti.?Virus scan results/ body __VBOUNCE_ATTACHMENT0 /(?:Attachment.{0,40}was Deleted|the infected attachment)/ # Bart says: it appears that _ATTACHMENT0 is an alternate for _NAV -- both match the same messages. body __VBOUNCE_AVREPORT0 /(?:antivirus system report|the antivirus module has|illegal attachment|Unrepairable Virus Detected)/i header __VBOUNCE_SENDER Subject =~ /^Virus to sender/ body __VBOUNCE_MAILSWEEP2 /\bblocked by Mailsweeper\b/i header __VBOUNCE_MAILSWEEP3 From =~ /\bmailsweeper\b/i # Bart says: This one could replace both MAILSWEEP2 and MAILSWEEP as far as I can tell. # Perhaps it's too general? body __VBOUNCE_CLICKBANK /\bvirus scanner deleted your message\b/i header __VBOUNCE_FORBIDDEN Subject =~ /\bFile type Forbidden\b/ header __VBOUNCE_MMS Subject =~ /^MMS Notification/ # added by JoeyKelly header __VBOUNCE_JMAIL Subject =~ /^Message Undeliverable: Possible Junk\/Spam Mail Identified$/ body __VBOUNCE_QUOTED_EXE /> TVqQAAMAAAAEAAAA/ # majordomo is really stupid about this stuff header __MAJORDOMO_SUBJ Subject =~ /^Majordomo results: / rawbody __MAJORDOMO_HELP_BODY /\*\*\*\* Help for [mM]ajordomo\@/ rawbody __MAJORDOMO_HELP_BODY2 /\*\*\*\* Command \'.{0,80}\' not recognized\b/ meta __VBOUNCE_MAJORDOMO_HELP (__MAJORDOMO_SUBJ && __MAJORDOMO_HELP_BODY && __MAJORDOMO_HELP_BODY2) header __VBOUNCE_AV_RESULTS Subject =~ /AntiVirus scan results/ header __VBOUNCE_EMVD Subject =~ /^Warning: E-mail viruses detected/ header __VBOUNCE_UNDELIV Subject =~ /^Undeliverable mail, invalid characters in header/ header __VBOUNCE_BANNED_MAT Subject =~ /^Banned or potentially offensive material/ header __VBOUNCE_NAV_DETECT Subject =~ /^Norton AntiVirus detected and quarantined/ header __VBOUNCE_DEL_WARN Subject =~ /^Delivery (?:warning|error) report id=/ header __VBOUNCE_MIME_INFO Subject =~ /^The MIME information you requested/ header __VBOUNCE_EMAIL_REJ Subject =~ /^EMAIL REJECTED/ header __VBOUNCE_CONT_VIOL Subject =~ /^Content violation/ header __VBOUNCE_SYM_AVF Subject =~ /^Symantec AVF detected / header __VBOUNCE_SYM_EMP Subject =~ /^Symantec E-Mail-Proxy / header __VBOUNCE_VIR_FOUND Subject =~ /^Virus Found in message/ header __VBOUNCE_INFLEX Subject =~ /^Inflex scan report \[/ header __VBOUNCE_BITDEFENDER X-Mailer =~ /^BitDefender VShield/ header __VBOUNCE_INF_ATTACH Subject =~ /^\[Mail Delivery .{20,100} infected attachment *removed/ header __VBOUNCE_RAPPORT Subject =~ /^Spam rapport \/ Spam report \S+ -\s+\(\S+\)$/ header __VBOUNCE_GWAVA Subject =~ /^GWAVA Sender Notification \(RBL block\)$/ header __VBOUNCE_GWAVA2 Subject =~ /Blocked Message \(RBL block\)$/ header __VBOUNCE_EMANAGER Subject =~ /^\[MailServer Notification\]/ header __VBOUNCE_MSGLABS Return-Path =~ /alert\@notification\.messagelabs\.com/i body __VBOUNCE_ATT_QUAR /\bThe attachment was quarantined\b/ body __VBOUNCE_SECURIQ /\bGROUP securiQ.Wall\b/ header __VBOUNCE_PT_BLOCKED Subject =~ /^\*\*\*\s*Mensagem Bloqueada/i meta VBOUNCE_MESSAGE !__MY_SERVERS_FOUND && (__VBOUNCE_MSGLABS || __VBOUNCE_EXIM || __VBOUNCE_GUIN || __VBOUNCE_CISCO || __VBOUNCE_SMTP || __VBOUNCE_AOL || __VBOUNCE_DUTCH || __VBOUNCE_MAILMARSHAL || __VBOUNCE_MAILMARSHAL2 || __VBOUNCE_NAVFAIL || __VBOUNCE_REJECTED || __VBOUNCE_PROBLEME || __VBOUNCE_NAV || __VBOUNCE_MELDING || __VBOUNCE_VALERT || __VBOUNCE_REJ_FILT || __VBOUNCE_YOUSENT || __VBOUNCE_MAILSWEEP || __VBOUNCE_SCREENSAVER || __VBOUNCE_DISALLOWED || __VBOUNCE_FROMPT || __VBOUNCE_WARNING || __VBOUNCE_DETECTED || __VBOUNCE_INTERSCAN || __VBOUNCE_VIOLATION || __VBOUNCE_ALERT || __VBOUNCE_NAV2 || __VBOUNCE_NAV3 || __VBOUNCE_INTERSCAN2 || __VBOUNCE_INTERSCAN3 || __VBOUNCE_ANTIGEN || __VBOUNCE_LUTHER || __VBOUNCE_AMAVISD || __VBOUNCE_AMAVISD2 || __VBOUNCE_SCANMAIL || __VBOUNCE_DOMINO1 || __VBOUNCE_DOMINO2 || __VBOUNCE_RAV || __VBOUNCE_GSHIELD || __VBOUNCE_ATTACHMENT0 || __VBOUNCE_AVREPORT0 || __VBOUNCE_SENDER || __VBOUNCE_MAILSWEEP2 || __VBOUNCE_MAILSWEEP3 || __VBOUNCE_CLICKBANK || __VBOUNCE_FORBIDDEN || __VBOUNCE_MMS || __VBOUNCE_QUOTED_EXE || __VBOUNCE_MAJORDOMO_HELP || __VBOUNCE_AV_RESULTS || __VBOUNCE_EMVD || __VBOUNCE_UNDELIV || __VBOUNCE_BANNED_MAT || __VBOUNCE_NAV_DETECT || __VBOUNCE_DEL_WARN || __VBOUNCE_MIME_INFO || __VBOUNCE_EMAIL_REJ || __VBOUNCE_CONT_VIOL || __VBOUNCE_SYM_AVF || __VBOUNCE_SYM_EMP || __VBOUNCE_ATT_QUAR || __VBOUNCE_SECURIQ || __VBOUNCE_VIR_FOUND || __VBOUNCE_EMANAGER || __VBOUNCE_JMAIL || __VBOUNCE_GWAVA || __VBOUNCE_GWAVA2 || __VBOUNCE_PT_BLOCKED || __VBOUNCE_INFLEX || __VBOUNCE_INF_ATTACH || __VBOUNCE_STRIP_ATTACH || __VBOUNCE_BITDEFENDER) describe VBOUNCE_MESSAGE Virus-scanner bounce message # --------------------------------------------------------------------------- # a catch-all type for all the above meta ANY_BOUNCE_MESSAGE (CRBOUNCE_MESSAGE||BOUNCE_MESSAGE||VBOUNCE_MESSAGE||OOOBOUNCE_MESSAGE) describe ANY_BOUNCE_MESSAGE Message is some kind of bounce message endif # Mail::SpamAssassin::Plugin::VBounce PK 8d\�o�k k 7 3.004006/updates_spamassassin_org/60_welcomelist_spf.cfnu �[��� # SpamAssassin rules file: default SPF welcomelists # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> ifplugin Mail::SpamAssassin::Plugin::SPF ########################################################################### # SPF welcomelist rules # 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_SPF_WELCOMELIST eval:check_for_spf_welcomelist_from() describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net score USER_IN_SPF_WELCOMELIST -100 reuse USER_IN_SPF_WELCOMELIST # Backwards compatibility # To disable set "enable_compat welcomelist_blocklist" in init.pre if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist) meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST) describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net score USER_IN_SPF_WHITELIST -100 reuse USER_IN_SPF_WHITELIST score USER_IN_SPF_WELCOMELIST -0.01 endif header USER_IN_DEF_SPF_WL eval:check_for_def_spf_welcomelist_from() describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net reuse USER_IN_DEF_SPF_WL endif if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_SPF_WELCOMELIST eval:check_for_spf_whitelist_from() describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net score USER_IN_SPF_WELCOMELIST -0.01 reuse USER_IN_SPF_WELCOMELIST meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST) describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net score USER_IN_SPF_WHITELIST -100 reuse USER_IN_SPF_WHITELIST header USER_IN_DEF_SPF_WL eval:check_for_def_spf_whitelist_from() describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net reuse USER_IN_DEF_SPF_WL endif meta ENV_AND_HDR_SPF_MATCH (USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH) describe ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match tflags ENV_AND_HDR_SPF_MATCH userconf nice noautolearn net ########################################################################### # Default welcomelists. These should be addresses which send mail that is often # tagged (incorrectly) as spam; it also helps that they be addresses of big # companies with lots of lawyers, so if spammers impersonate them, they'll get # into big trouble, so it doesn't provide a shortcut around SpamAssassin. # # Whitelist and blacklist addresses are now file-glob-style patterns, so # "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work. # # Please do not add unmoderated public mailing lists here. They are # too easily abused by spammers. if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) def_welcomelist_from_spf *@nytimes.com def_welcomelist_from_spf *@amazon.com def_welcomelist_from_spf *@amazon.co.uk def_welcomelist_from_spf *@*.amazon.co.uk def_welcomelist_from_spf *@ora.com def_welcomelist_from_spf *@*.ora.com def_welcomelist_from_spf *@mypoints.com def_welcomelist_from_spf *@*.mypoints.com def_welcomelist_from_spf *@ebay.com def_welcomelist_from_spf *@foolsubs.com def_welcomelist_from_spf *@match.com # bugtraq: can contain malicious Javascript etc. def_welcomelist_from_spf *@securityfocus.com def_welcomelist_from_spf *@mediaunspun.imakenews.net # sender of Cringley newsletter def_welcomelist_from_spf *@bdcimail.com # Silicon.com newslettters - we see thousands of these def_welcomelist_from_spf *@silicon.com # C|Net news.com newsletters def_welcomelist_from_spf *@newsletter.online.com # bug 1348 def_welcomelist_from_spf *@enews.buy.com def_welcomelist_from_spf *@palm.m0.net def_welcomelist_from_spf *@handspring.4at1.com endif ### ### For <4.0 compatibility ### if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) def_whitelist_from_spf *@nytimes.com def_whitelist_from_spf *@amazon.com def_whitelist_from_spf *@amazon.co.uk def_whitelist_from_spf *@*.amazon.co.uk def_whitelist_from_spf *@ora.com def_whitelist_from_spf *@*.ora.com def_whitelist_from_spf *@mypoints.com def_whitelist_from_spf *@*.mypoints.com def_whitelist_from_spf *@ebay.com def_whitelist_from_spf *@foolsubs.com def_whitelist_from_spf *@match.com # bugtraq: can contain malicious Javascript etc. def_whitelist_from_spf *@securityfocus.com def_whitelist_from_spf *@mediaunspun.imakenews.net # sender of Cringley newsletter def_whitelist_from_spf *@bdcimail.com # Silicon.com newslettters - we see thousands of these def_whitelist_from_spf *@silicon.com # C|Net news.com newsletters def_whitelist_from_spf *@newsletter.online.com # bug 1348 def_whitelist_from_spf *@enews.buy.com def_whitelist_from_spf *@palm.m0.net def_whitelist_from_spf *@handspring.4at1.com endif ### ### ### endif # Mail::SpamAssassin::Plugin::SPF PK 8d\r"H�W+ W+ 8 3.004006/updates_spamassassin_org/60_welcomelist_dkim.cfnu �[��� # SpamAssassin rules file: default DKIM whitelists # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> ifplugin Mail::SpamAssassin::Plugin::DKIM ########################################################################### # DKIM whitelist rules # 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_welcomelist_from() describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf score USER_IN_DKIM_WELCOMELIST -100 reuse USER_IN_DKIM_WELCOMELIST # Backwards compatibility # To disable set "enable_compat welcomelist_blocklist" in init.pre if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist) meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST) describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf score USER_IN_DKIM_WHITELIST -100 reuse USER_IN_DKIM_WHITELIST score USER_IN_DKIM_WELCOMELIST -0.01 endif endif if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_whitelist_from() describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf score USER_IN_DKIM_WELCOMELIST -100 reuse USER_IN_DKIM_WELCOMELIST if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist) meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST) describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf score USER_IN_DKIM_WHITELIST -100 reuse USER_IN_DKIM_WHITELIST score USER_IN_DKIM_WELCOMELIST -0.01 endif endif if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_welcomelist_from() describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list tflags USER_IN_DEF_DKIM_WL nice noautolearn net reuse USER_IN_DEF_DKIM_WL endif if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_whitelist_from() describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list tflags USER_IN_DEF_DKIM_WL nice noautolearn net reuse USER_IN_DEF_DKIM_WL endif ########################################################################### # Default welcomelists. These should be e-mail addresses of authors (i.e. # addresses in the From header field) which send mail that is often # tagged (incorrectly) as spam. DKIM welcomelisting only applies to mail # with a valid DKIM (or older DK) signature. An optional second parameter # can specify a signing domain (the 'd' tag), if different from author's # domain. Please see Mail::SpamAssassin::Plugin::DKIM man page for details. # # Whitelist and blacklist addresses are file-glob-style patterns, so # "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work. if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) def_welcomelist_from_dkim *@*.ebay.com ebay.com def_welcomelist_from_dkim *@ebay.com def_welcomelist_from_dkim *@ebay.co.uk def_welcomelist_from_dkim *@*.ebay.co.uk def_welcomelist_from_dkim *@ebay.at def_welcomelist_from_dkim *@*.ebay.at def_welcomelist_from_dkim *@ebay.be def_welcomelist_from_dkim *@*.ebay.be def_welcomelist_from_dkim *@ebay.de def_welcomelist_from_dkim *@*.ebay.de def_welcomelist_from_dkim *@ebay.es def_welcomelist_from_dkim *@*.ebay.es def_welcomelist_from_dkim *@ebay.fr def_welcomelist_from_dkim *@*.ebay.fr def_welcomelist_from_dkim *@ebay.ie def_welcomelist_from_dkim *@*.ebay.ie def_welcomelist_from_dkim *@ebay.it def_welcomelist_from_dkim *@*.ebay.it def_welcomelist_from_dkim *@ebay.nl def_welcomelist_from_dkim *@*.ebay.nl def_welcomelist_from_dkim *@ebay.pt def_welcomelist_from_dkim *@*.ebay.pt def_welcomelist_from_dkim *@ebay.ca def_welcomelist_from_dkim *@*.ebay.ca def_welcomelist_from_dkim *@cisco.com def_welcomelist_from_dkim *@lh.lufthansa.com def_welcomelist_from_dkim *@*.milesandmore.com def_welcomelist_from_dkim *@mail.hotels.com def_welcomelist_from_dkim *@email.hotels.com def_welcomelist_from_dkim *@alert.bankofamerica.com def_welcomelist_from_dkim *@ealerts.bankofamerica.com def_welcomelist_from_dkim *@cc.yahoo-inc.com yahoo-inc.com def_welcomelist_from_dkim *@cc.yahoo-inc.com def_welcomelist_from_dkim googlealerts-noreply@google.com def_welcomelist_from_dkim *@*.google.com def_welcomelist_from_dkim *@springer.delivery.net def_welcomelist_from_dkim *@sci.scientific-direct.net def_welcomelist_from_dkim *@strongmail.the-scientist.com def_welcomelist_from_dkim *@ealert.nature.com def_welcomelist_from_dkim *@gateways.nature.com def_welcomelist_from_dkim *@information.nature.com def_welcomelist_from_dkim *@newsdesk.world-nuclear-news.org def_welcomelist_from_dkim *@biocompare.com def_welcomelist_from_dkim *@dentalcompare.com def_welcomelist_from_dkim *@medcompare.com def_welcomelist_from_dkim *@itbusinessedge.com def_welcomelist_from_dkim *@nl.reuters.com def_welcomelist_from_dkim *@email.washingtonpost.com def_welcomelist_from_dkim *@washingtontimesmail.com def_welcomelist_from_dkim *@info-aaas.org def_welcomelist_from_dkim *@*.newsmax.com def_welcomelist_from_dkim *@zdnet.online.com def_welcomelist_from_dkim *@m-w.com def_welcomelist_from_dkim *@skype.net def_welcomelist_from_dkim *@*.skype.net def_welcomelist_from_dkim *@*.skype.net skype.net def_welcomelist_from_dkim *@*.skype.com def_welcomelist_from_dkim *@*.skype.com skype.com #consider also: # def_welcomelist_from_dkim *@avaaz.org # def_welcomelist_from_dkim *@techrepublic.online.com # def_welcomelist_from_dkim ezines@arcamax.com # def_welcomelist_from_dkim *@yousendit.com # def_welcomelist_from_dkim *@meetup.com # def_welcomelist_from_dkim *@astrology.com # def_welcomelist_from_dkim *@google.com # def_welcomelist_from_dkim *@amazon.com # def_welcomelist_from_dkim *@amazon.co.uk # def_welcomelist_from_dkim *@amazon.de # def_welcomelist_from_dkim *@amazon.fr def_welcomelist_from_dkim *@imdb.com amazonses.com def_welcomelist_from_dkim *@dhl.com def_welcomelist_from_dkim *@tumblr.com def_welcomelist_from_dkim *@fisglobal.com def_welcomelist_from_dkim *@*.msgfocus.com def_welcomelist_from_dkim *@boredpanda.com mailersend.com endif # if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) # # For older versions of SA, these old entries remain for SA before version 4.0 # if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) def_whitelist_from_dkim *@*.ebay.com ebay.com def_whitelist_from_dkim *@ebay.com def_whitelist_from_dkim *@ebay.co.uk def_whitelist_from_dkim *@*.ebay.co.uk def_whitelist_from_dkim *@ebay.at def_whitelist_from_dkim *@*.ebay.at def_whitelist_from_dkim *@ebay.be def_whitelist_from_dkim *@*.ebay.be def_whitelist_from_dkim *@ebay.de def_whitelist_from_dkim *@*.ebay.de def_whitelist_from_dkim *@ebay.es def_whitelist_from_dkim *@*.ebay.es def_whitelist_from_dkim *@ebay.fr def_whitelist_from_dkim *@*.ebay.fr def_whitelist_from_dkim *@ebay.ie def_whitelist_from_dkim *@*.ebay.ie def_whitelist_from_dkim *@ebay.it def_whitelist_from_dkim *@*.ebay.it def_whitelist_from_dkim *@ebay.nl def_whitelist_from_dkim *@*.ebay.nl def_whitelist_from_dkim *@ebay.pt def_whitelist_from_dkim *@*.ebay.pt def_whitelist_from_dkim *@ebay.ca def_whitelist_from_dkim *@*.ebay.ca def_whitelist_from_dkim *@cisco.com def_whitelist_from_dkim *@lh.lufthansa.com def_whitelist_from_dkim *@*.milesandmore.com def_whitelist_from_dkim *@mail.hotels.com def_whitelist_from_dkim *@email.hotels.com def_whitelist_from_dkim *@alert.bankofamerica.com def_whitelist_from_dkim *@ealerts.bankofamerica.com def_whitelist_from_dkim *@cc.yahoo-inc.com yahoo-inc.com def_whitelist_from_dkim *@cc.yahoo-inc.com def_whitelist_from_dkim googlealerts-noreply@google.com def_whitelist_from_dkim *@*.google.com def_whitelist_from_dkim *@springer.delivery.net def_whitelist_from_dkim *@sci.scientific-direct.net def_whitelist_from_dkim *@strongmail.the-scientist.com def_whitelist_from_dkim *@ealert.nature.com def_whitelist_from_dkim *@gateways.nature.com def_whitelist_from_dkim *@information.nature.com def_whitelist_from_dkim *@newsdesk.world-nuclear-news.org def_whitelist_from_dkim *@biocompare.com def_whitelist_from_dkim *@dentalcompare.com def_whitelist_from_dkim *@medcompare.com def_whitelist_from_dkim *@itbusinessedge.com def_whitelist_from_dkim *@nl.reuters.com def_whitelist_from_dkim *@email.washingtonpost.com def_whitelist_from_dkim *@washingtontimesmail.com def_whitelist_from_dkim *@info-aaas.org def_whitelist_from_dkim *@*.newsmax.com def_whitelist_from_dkim *@zdnet.online.com def_whitelist_from_dkim *@m-w.com def_whitelist_from_dkim *@skype.net def_whitelist_from_dkim *@*.skype.net def_whitelist_from_dkim *@*.skype.net skype.net def_whitelist_from_dkim *@*.skype.com def_whitelist_from_dkim *@*.skype.com skype.com #consider also: # def_whitelist_from_dkim *@avaaz.org # def_whitelist_from_dkim *@techrepublic.online.com # def_whitelist_from_dkim ezines@arcamax.com # def_whitelist_from_dkim *@yousendit.com # def_whitelist_from_dkim *@meetup.com # def_whitelist_from_dkim *@astrology.com # def_whitelist_from_dkim *@google.com # def_whitelist_from_dkim *@amazon.com # def_whitelist_from_dkim *@amazon.co.uk # def_whitelist_from_dkim *@amazon.de # def_whitelist_from_dkim *@amazon.fr def_whitelist_from_dkim *@imdb.com amazonses.com def_whitelist_from_dkim *@dhl.com def_whitelist_from_dkim *@tumblr.com def_whitelist_from_dkim *@fisglobal.com def_whitelist_from_dkim *@*.msgfocus.com def_whitelist_from_dkim *@boredpanda.com mailersend.com endif # if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist) # # # endif # Mail::SpamAssassin::Plugin::DKIM PK 8d\�#|� � - 3.004006/updates_spamassassin_org/25_dnswl.cfnu �[��� # SpamAssassin rules file: DNSWL tests # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### ifplugin Mail::SpamAssassin::Plugin::DNSEval # 0.000 0.0000 0.0000 0.500 1.00 -8.00 T_RCVD_IN_DNSWL_HI # 0.817 0.2509 3.5683 0.066 0.50 1.00 __RCVD_IN_DNSWL # 0.059 0.0000 0.3481 0.000 0.50 -1.00 T_RCVD_IN_DNSWL_LOW # 0.163 0.0000 0.9574 0.000 0.00 -4.00 T_RCVD_IN_DNSWL_MED header __RCVD_IN_DNSWL eval:check_rbl('dnswl-firsttrusted', 'list.dnswl.org.') tflags __RCVD_IN_DNSWL nice net reuse __RCVD_IN_DNSWL header RCVD_IN_DNSWL_NONE eval:check_rbl_sub('dnswl-firsttrusted', '^127\.0\.\d+\.0$') describe RCVD_IN_DNSWL_NONE Sender listed at https://www.dnswl.org/, no trust tflags RCVD_IN_DNSWL_NONE nice net reuse RCVD_IN_DNSWL_NONE header RCVD_IN_DNSWL_LOW eval:check_rbl_sub('dnswl-firsttrusted', '^127\.0\.\d+\.1$') describe RCVD_IN_DNSWL_LOW Sender listed at https://www.dnswl.org/, low trust tflags RCVD_IN_DNSWL_LOW nice net reuse RCVD_IN_DNSWL_LOW header RCVD_IN_DNSWL_MED eval:check_rbl_sub('dnswl-firsttrusted', '^127\.0\.\d+\.2$') describe RCVD_IN_DNSWL_MED Sender listed at https://www.dnswl.org/, medium trust tflags RCVD_IN_DNSWL_MED nice net reuse RCVD_IN_DNSWL_MED header RCVD_IN_DNSWL_HI eval:check_rbl_sub('dnswl-firsttrusted', '^127\.0\.\d+\.3$') describe RCVD_IN_DNSWL_HI Sender listed at https://www.dnswl.org/, high trust tflags RCVD_IN_DNSWL_HI nice net reuse RCVD_IN_DNSWL_HI ## score RCVD_IN_DNSWL_LOW -1 ## score RCVD_IN_DNSWL_MED -4 ## score RCVD_IN_DNSWL_HI -8 header RCVD_IN_DNSWL_BLOCKED eval:check_rbl_sub('dnswl-firsttrusted', '^127\.0\.\d+\.255$') describe RCVD_IN_DNSWL_BLOCKED ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists\#DnsBlocklists-dnsbl-block for more information. tflags RCVD_IN_DNSWL_BLOCKED net noautolearn reuse RCVD_IN_DNSWL_BLOCKED if can(Mail::SpamAssassin::Conf::feature_dns_block_rule) dns_block_rule RCVD_IN_DNSWL_BLOCKED list.dnswl.org endif endif PK 8d\�E5Zw Zw . 3.004006/updates_spamassassin_org/72_scores.cfnu �[��� score ACCT_PHISHING_MANY 2.553 2.999 2.553 2.999 score AC_BR_BONANZA 0.001 0.001 0.001 0.001 score AC_DIV_BONANZA 0.001 0.001 0.001 0.001 score AC_FROM_MANY_DOTS 1.229 2.499 1.229 2.499 score AC_HTML_NONSENSE_TAGS 1.999 0.990 1.999 0.990 score AC_POST_EXTRAS 2.499 1.000 2.499 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS12 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS2 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000 score ADMITS_SPAM 1.999 1.999 1.999 1.999 score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000 score ADVANCE_FEE_2_NEW_FORM 1.999 1.000 1.999 1.000 score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 1.000 1.000 1.000 score ADVANCE_FEE_2_NEW_MONEY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_3_NEW 3.499 3.499 3.499 3.499 score ADVANCE_FEE_3_NEW_FRM_MNY 2.599 2.399 2.599 2.399 score ADVANCE_FEE_3_NEW_MONEY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_4_NEW 2.902 2.074 2.902 2.074 score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_4_NEW_MONEY 2.000 1.049 2.000 1.049 score ADVANCE_FEE_5_NEW 2.799 1.325 2.799 1.325 score ADVANCE_FEE_5_NEW_FRM_MNY 2.275 2.054 2.275 2.054 score ADVANCE_FEE_5_NEW_MONEY 2.490 0.001 2.490 0.001 score AD_PREFS 0.250 0.250 0.250 0.250 score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000 score AMAZON_IMG_NOT_RCVD_AMZN 2.499 2.500 2.499 2.500 score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000 score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000 score ARC_SIGNED 0.001 0.001 0.001 0.001 score ARC_VALID 0.001 0.001 0.001 0.001 score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001 score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.815 0.001 1.815 0.001 score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000 score BIGNUM_EMAILS_FREEM 2.168 1.318 2.168 1.318 score BIGNUM_EMAILS_MANY 2.999 2.999 2.999 2.999 score BITCOIN_BOMB 1.000 1.000 1.000 1.000 score BITCOIN_DEADLINE 2.999 2.347 2.999 2.347 score BITCOIN_EXTORT_01 1.000 1.000 1.000 1.000 score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000 score BITCOIN_IMGUR 1.000 1.000 1.000 1.000 score BITCOIN_MALF_HTML 3.033 2.392 3.033 2.392 score BITCOIN_MALWARE 3.499 0.985 3.499 0.985 score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000 score BITCOIN_ONAN 2.395 1.096 2.395 1.096 score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_02 1.558 2.499 1.558 2.499 score BITCOIN_SPAM_03 2.499 2.499 2.499 2.499 score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_05 0.001 2.499 0.001 2.499 score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_07 1.288 2.616 1.288 2.616 score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_09 1.499 1.248 1.499 1.248 score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000 score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000 score BITCOIN_TOEQFM 3.499 3.499 3.499 3.499 score BITCOIN_VISTA 2.321 0.631 2.321 0.631 score BITCOIN_XPRIO 1.841 0.759 1.841 0.759 score BITCOIN_YOUR_INFO 3.000 2.999 3.000 2.999 score BODY_EMAIL_419_FRAUD_GM_LOOSE 0.999 0.999 0.999 0.999 score BODY_URI_ONLY 1.410 1.269 1.410 1.269 score BOGUS_MIME_VERSION 3.499 3.499 3.499 3.499 score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000 score BOMB_FREEM 1.000 1.000 1.000 1.000 score BOMB_MONEY 1.000 1.000 1.000 1.000 score BTC_ORG 1.000 1.000 1.000 1.000 score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000 score CANT_SEE_AD 1.000 1.000 1.000 1.000 score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000 score CONTENT_AFTER_HTML 1.000 1.000 1.000 1.000 score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000 score CTE_8BIT_MISMATCH 0.999 0.640 0.999 0.640 score DATE_IN_FUTURE_Q_PLUS 3.599 3.699 3.599 3.699 score DAY_I_EARNED 1.000 1.000 1.000 1.000 score DKIMWL_BL 0.001 2.168 0.001 2.168 score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001 score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001 score DKIMWL_WL_MED 0.001 -0.269 0.001 -0.269 score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001 score DOS_BODY_HIGH_NO_MID 3.599 3.660 3.599 3.660 score DOTGOV_IMAGE 1.000 1.000 1.000 1.000 score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999 score DYNAMIC_IMGUR 3.999 3.999 3.999 3.999 score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000 score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999 score END_FUTURE_EMAILS 2.500 2.107 2.500 2.107 score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000 score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000 score FBI_MONEY 1.000 1.000 1.000 1.000 score FBI_SPOOF 0.001 0.414 0.001 0.414 score FILL_THIS_FORM 0.514 0.001 0.514 0.001 score FONT_INVIS_DIRECT 1.000 1.000 1.000 1.000 score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000 score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000 score FONT_INVIS_LONG_LINE 1.350 2.754 1.350 2.754 score FONT_INVIS_MSGID 2.499 2.499 2.499 2.499 score FONT_INVIS_NORDNS 2.497 1.215 2.497 1.215 score FONT_INVIS_POSTEXTRAS 0.001 1.391 0.001 1.391 score FORM_FRAUD 0.999 0.999 0.999 0.999 score FORM_FRAUD_3 1.552 1.068 1.552 1.068 score FORM_FRAUD_5 0.001 0.001 0.001 0.001 score FOUND_YOU 2.669 3.249 2.669 3.249 score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.001 0.001 0.001 score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000 score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000 score FROM_ADDR_WS 2.434 0.001 2.434 0.001 score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000 score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001 score FROM_FMBLA_NEWDOM 0.001 1.499 0.001 1.499 score FROM_FMBLA_NEWDOM14 0.001 0.999 0.001 0.999 score FROM_FMBLA_NEWDOM28 0.001 0.001 0.001 0.001 score FROM_GOV_DKIM_AU 0.001 -0.634 0.001 -0.634 score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000 score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000 score FROM_IN_TO_AND_SUBJ 2.699 2.371 2.699 2.371 score FROM_LONG_DOM 1.499 1.499 1.499 1.499 score FROM_LONG_DOM_MINFP 2.499 2.499 2.499 2.499 score FROM_MISSP_FREEMAIL 2.013 0.001 2.013 0.001 score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001 score FROM_MISSP_REPLYTO 0.001 0.001 0.001 0.001 score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001 score FROM_MISSP_TO_UNDISC 2.401 0.001 2.401 0.001 score FROM_MISSP_USER 0.001 0.001 0.001 0.001 score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000 score FROM_NTLD_LINKBAIT 0.613 1.370 0.613 1.370 score FROM_NTLD_REPLY_FREEMAIL 1.269 1.109 1.269 1.109 score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000 score FROM_PAYPAL_SPOOF 0.001 1.000 0.001 1.000 score FROM_SUSPICIOUS_NTLD 0.499 0.500 0.499 0.500 score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999 score FROM_UNBAL1 2.900 1.492 2.900 1.492 score FROM_UNBAL2 2.899 2.699 2.899 2.699 score FROM_WSP_TRAIL 2.799 2.799 2.799 2.799 score FSL_BULK_SIG 0.001 0.001 0.001 0.001 score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001 score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001 score FUZZY_CLICK_HERE 3.500 2.192 3.500 2.192 score FUZZY_DR_OZ 0.918 0.001 0.918 0.001 score FUZZY_IMPORTANT 2.735 2.272 2.735 2.272 score FUZZY_PRIVACY 3.228 2.399 3.228 2.399 score FUZZY_SECURITY 2.399 2.299 2.399 2.299 score FUZZY_WALLET 2.897 0.240 2.897 0.240 score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000 score GB_CUSTOM_HTM_URI 1.499 1.499 1.499 1.499 score GB_FAKE_RF_SHORT 1.000 1.999 1.000 1.999 score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000 score GB_FREEMAIL_DISPTO 0.001 0.001 0.001 0.001 score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.499 0.500 0.499 score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750 score GB_HASHBL_BTC 0.001 4.168 0.001 4.168 score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000 score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000 score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000 score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000 score GOOG_REDIR_FRAUD 1.499 1.499 1.499 1.499 score GOOG_REDIR_HTML_ONLY 0.001 0.001 0.001 0.001 score GOOG_REDIR_NORDNS 0.001 0.001 0.001 0.001 score GOOG_REDIR_NOTRDNS 1.499 1.499 1.499 1.499 score GOOG_REDIR_SHORT 1.000 1.000 1.000 1.000 score GOOG_REDIR_STATICRDNS 1.499 1.499 1.499 1.499 score GOOG_STO_EMAIL_PHISH 2.233 2.206 2.233 2.206 score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000 score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOG_STO_IMG_HTML 2.999 2.999 2.999 2.999 score GOOG_STO_IMG_NOHTML 2.499 2.108 2.499 2.108 score GOOG_STO_NOIMG_HTML 2.999 3.000 2.999 3.000 score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000 score HAS_X_OUTGOING_SPAM_STAT 1.000 1.000 1.000 1.000 score HDRS_LCASE 0.099 0.099 0.099 0.099 score HDRS_MISSP 2.499 1.774 2.499 1.774 score HDR_ORDER_FTSDMCXX_DIRECT 0.596 1.747 0.596 1.747 score HDR_ORDER_FTSDMCXX_NORDNS 0.001 1.935 0.001 1.935 score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.001 0.249 0.001 score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001 score HEXHASH_WORD 1.000 1.000 1.000 1.000 score HK_CTE_RAW 1.000 1.000 1.000 1.000 score HK_NAME_FM_MR_MRS 1.499 0.538 1.499 0.538 score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999 score HK_RANDOM_ENVFROM 0.999 0.001 0.999 0.001 score HK_RANDOM_FROM 0.999 1.000 0.999 1.000 score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999 score HK_RCVD_IP_MULTICAST 1.999 1.000 1.999 1.000 score HK_SCAM 2.000 0.001 2.000 0.001 score HOSTED_IMG_DIRECT_MX 3.499 3.499 3.499 3.499 score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000 score HOSTED_IMG_FREEM 1.000 1.000 1.000 1.000 score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000 score HOSTED_IMG_MULTI_PUB_01 0.001 1.770 0.001 1.770 score HREF_EMPTY_NORDNS 0.254 0.001 0.254 0.001 score HREF_EMPTY_PHPMAIL 1.000 1.000 1.000 1.000 score HREF_EMPTY_XANTIABUSE 1.000 1.000 1.000 1.000 score HREF_EMPTY_XAUTHED 1.000 1.000 1.000 1.000 score HTML_BADATTR 0.999 0.999 0.999 0.999 score HTML_ENTITY_ASCII 2.865 2.038 2.865 2.038 score HTML_ENTITY_ASCII_TINY 2.499 3.000 2.499 3.000 score HTML_OFF_PAGE 1.000 1.000 1.000 1.000 score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000 score HTML_SINGLET_MANY 1.540 2.499 1.540 2.499 score HTML_TEXT_INVISIBLE_FONT 1.753 1.019 1.753 1.019 score HTML_TEXT_INVISIBLE_STYLE 0.001 0.430 0.001 0.430 score IMG_ONLY_FM_DOM_INFO 1.501 0.779 1.501 0.779 score JH_SPAMMY_HEADERS 1.000 3.191 1.000 3.191 score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000 score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000 score KHOP_FAKE_EBAY 0.436 0.001 0.436 0.001 score KHOP_HELO_FCRDNS 0.400 0.400 0.400 0.400 score LEADING_MANUFACTURER 1.000 1.249 1.000 1.249 score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000 score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000 score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000 score LONGLN_LOW_CONTRAST 2.499 2.499 2.499 2.499 score LONG_HEX_URI 2.999 2.999 2.999 2.999 score LONG_IMG_URI 2.499 2.289 2.499 2.289 score LONG_INVISIBLE_TEXT 2.999 1.691 2.999 1.691 score LOTS_OF_MONEY 0.010 0.010 0.010 0.010 score LOTTO_AGENT 1.114 1.188 1.114 1.188 score LOTTO_DEPT 1.999 1.999 1.999 1.999 score LUCRATIVE 1.000 1.000 1.000 1.000 score MALFORMED_FREEMAIL 3.299 2.064 3.299 2.064 score MALF_HTML_B64 1.000 1.000 1.000 1.000 score MALWARE_NORDNS 1.451 1.000 1.451 1.000 score MALWARE_PASSWORD 1.000 1.000 1.000 1.000 score MALW_ATTACH 2.599 2.599 2.599 2.599 score MANY_HDRS_LCASE 0.100 0.100 0.100 0.100 score MANY_SPAN_IN_TEXT 0.773 0.001 0.773 0.001 score MANY_SUBDOM 3.399 2.547 3.399 2.547 score MILLION_EUR 1.737 0.399 1.737 0.399 score MILLION_HUNDRED 0.001 0.001 0.001 0.001 score MIMEOLE_DIRECT_TO_MX 0.001 1.658 0.001 1.658 score MIME_NO_TEXT 0.001 0.001 0.001 0.001 score MIXED_AREA_CASE 1.000 1.000 1.000 1.000 score MIXED_CENTER_CASE 2.499 2.499 2.499 2.499 score MIXED_ES 3.399 2.499 3.399 2.499 score MIXED_FONT_CASE 1.000 1.000 1.000 1.000 score MIXED_HREF_CASE 2.000 1.999 2.000 1.999 score MIXED_IMG_CASE 1.000 1.000 1.000 1.000 score MONERO_DEADLINE 1.000 1.000 1.000 1.000 score MONERO_EXTORT_01 1.000 1.000 1.000 1.000 score MONERO_MALWARE 1.000 1.000 1.000 1.000 score MONERO_PAY_ME 1.000 1.000 1.000 1.000 score MONEY_ATM_CARD 0.001 0.232 0.001 0.232 score MONEY_FORM 0.001 0.001 0.001 0.001 score MONEY_FORM_SHORT 2.014 0.010 2.014 0.010 score MONEY_FRAUD_3 3.599 3.199 3.599 3.199 score MONEY_FRAUD_5 0.001 0.001 0.001 0.001 score MONEY_FRAUD_8 0.001 0.001 0.001 0.001 score MONEY_FREEMAIL_REPTO 1.275 1.152 1.275 1.152 score MONEY_FROM_41 1.999 0.781 1.999 0.781 score MONEY_NOHTML 2.190 0.529 2.190 0.529 score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000 score MSGID_HDR_MALF 1.000 1.000 1.000 1.000 score MSM_PRIO_REPTO 0.132 2.384 0.132 2.384 score NA_DOLLARS 1.499 1.499 1.499 1.499 score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000 score NEW_PRODUCTS 1.249 1.249 1.249 1.249 score NICE_REPLY_A -3.377 -1.272 -3.377 -1.272 score NORDNS_LOW_CONTRAST 0.001 0.001 0.001 0.001 score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001 score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001 score NSL_RCVD_HELO_USER 0.001 2.342 0.001 2.342 score OBFU_BITCOIN 1.000 1.000 1.000 1.000 score ODD_FREEM_REPTO 3.000 1.843 3.000 1.843 score PAYPAL_PHISH_07 2.995 0.001 2.995 0.001 score PAYPAL_PHISH_08 1.000 1.000 1.000 1.000 score PAYPAL_PHISH_09 1.000 1.000 1.000 1.000 score PDS_BAD_THREAD_QP_64 1.000 1.000 1.000 1.000 score PDS_BTC_ID 0.499 0.499 0.499 0.499 score PDS_BTC_MSGID 0.999 0.008 0.999 0.008 score PDS_DBL_URL_LINKBAIT 0.611 2.500 0.611 2.500 score PDS_FRNOM_TODOM_DBL_URL 0.001 0.001 0.001 0.001 score PDS_FRNOM_TODOM_NAKED_TO 1.335 0.492 1.335 0.492 score PDS_FROM_2_EMAILS 3.499 3.499 3.499 3.499 score PDS_FROM_NAME_TO_DOMAIN 1.703 1.968 1.703 1.968 score PDS_HELO_SPF_FAIL 0.001 0.001 0.001 0.001 score PDS_NAKED_TO_NUMERO 2.000 1.999 2.000 1.999 score PDS_OTHER_BAD_TLD 1.999 1.999 1.999 1.999 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.001 0.001 0.001 0.001 score PHISH_ATTACH 2.699 2.699 2.699 2.699 score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500 score PHISH_FBASEAPP 1.000 1.000 1.000 1.000 score PHP_NOVER_MUA 1.000 1.000 1.000 1.000 score PHP_ORIG_SCRIPT 1.000 0.621 1.000 0.621 score PHP_SCRIPT 2.499 2.499 2.499 2.499 score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000 score POSSIBLE_PAYPAL_PHISH_02 1.000 1.000 1.000 1.000 score POSSIBLE_PAYPAL_PHISH_03 1.000 1.000 1.000 1.000 score POSSIBLE_PAYPAL_PHISH_04 0.001 1.000 0.001 1.000 score POSSIBLE_PAYPAL_PHISH_10 1.499 0.001 1.499 0.001 score POSSIBLE_PAYPAL_PHISH_11 0.130 1.000 0.130 1.000 score POSSIBLE_PAYPAL_PHISH_12 1.000 1.000 1.000 1.000 score PP_MIME_FAKE_ASCII_TEXT 0.999 0.238 0.999 0.238 score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500 score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000 score PUMPDUMP 1.000 1.000 1.000 1.000 score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000 score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000 score RAND_HEADER_MANY 0.154 1.000 0.154 1.000 score RAND_MKTG_HEADER 1.000 1.999 1.000 1.999 score RATWARE_NO_RDNS 1.955 0.677 1.955 0.677 score RCVD_DOTEDU_SHORT 1.499 1.000 1.499 1.000 score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000 score RCVD_IN_IADB_DMARC 0.001 0.001 0.001 0.001 score RCVD_IN_IADB_ESP 0.001 -0.001 0.001 -0.001 score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_H2 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_H4 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_H5 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001 score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000 score RDNS_NUM_TLD_XM 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD 2.999 2.999 2.999 2.999 score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_GM 2.297 0.998 2.297 0.998 score REPTO_419_FRAUD_GM_LOOSE 0.999 0.999 0.999 0.999 score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_PM 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_QQ 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YH 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YH_LOOSE 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000 score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000 score RISK_FREE 2.699 2.699 2.699 2.699 score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000 score SCC_ISEMM_LID_1B 1.499 1.499 1.499 1.499 score SENDGRID_REDIR 0.001 0.001 0.001 0.001 score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000 score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000 score SHARE_50_50 0.264 2.399 0.264 2.399 score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 2.499 2.499 2.499 score SHORTENER_SHORT_IMG 0.181 1.000 0.181 1.000 score SHORT_IMG_SUSP_NTLD 0.807 0.001 0.807 0.001 score SHY_OBFU_EXPIRE 1.000 1.000 1.000 1.000 score SHY_OBFU_PASSWORD 1.000 3.858 1.000 3.858 score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001 score SPOOFED_FREEMAIL_NO_RDNS 0.001 0.001 0.001 0.001 score SPOOFED_FREEM_REPTO 0.001 0.350 0.001 0.350 score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000 score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000 score SPOOF_GMAIL_MID 1.499 0.442 1.499 0.442 score STATIC_XPRIO_OLE 1.999 1.999 1.999 1.999 score STOCK_TIP 1.000 1.000 1.000 1.000 score SUBJ_ATTENTION 0.499 0.499 0.499 0.499 score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000 score SUBJ_BROKEN_WORD 1.414 2.362 1.414 2.362 score SURBL_BLOCKED 0.001 0.001 0.001 0.001 score SUSP_UTF8_WORD_COMBO 2.098 2.293 2.098 2.293 score SUSP_UTF8_WORD_FROM 1.999 1.999 1.999 1.999 score SUSP_UTF8_WORD_SUBJ 0.810 1.999 0.810 1.999 score SYSADMIN 1.000 1.000 1.000 1.000 score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000 score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000 score TEQF_USR_POLITE 2.000 1.729 2.000 1.729 score THIS_AD 0.799 0.929 0.799 0.929 score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000 score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000 score TO_EQ_FM_DIRECT_MX 0.134 0.001 0.134 0.001 score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_IN_SUBJ 0.100 0.099 0.100 0.099 score TO_NAME_SUBJ_NO_RDNS 2.943 0.995 2.943 0.995 score TO_NO_BRKTS_HTML_IMG 0.001 0.001 0.001 0.001 score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999 score TO_NO_BRKTS_MSFT 0.001 0.001 0.001 0.001 score TO_NO_BRKTS_NORDNS_HTML 0.491 0.001 0.491 0.001 score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499 score TRANSFORM_LIFE 2.287 2.499 2.287 2.499 score TVD_SPACE_ENCODED 2.499 2.499 2.499 2.499 score TVD_SPACE_RATIO_MINFP 2.499 2.499 2.499 2.499 score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000 score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000 score UNDISC_FREEM 3.099 0.023 3.099 0.023 score UNDISC_MONEY 1.896 2.568 1.896 2.568 score UNICODE_OBFU_ASC 2.499 0.237 2.499 0.237 score UNICODE_OBFU_ZW 3.499 3.499 3.499 3.499 score UNICODE_OBFU_ZW_MANY 0.001 1.298 0.001 1.298 score UNICODE_RTL_OBFU 1.000 1.000 1.000 1.000 score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000 score UPPERCASE_URI 3.492 3.274 3.492 3.274 score URIBL_CT_SURBL 0.001 2.299 0.001 2.299 score URIBL_DM_SURBL 0.001 0.001 0.001 0.001 score URI_ADOBESPARK 1.000 1.000 1.000 1.000 score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000 score URI_BUFFLY 1.999 1.999 1.999 1.999 score URI_CLOUDFLAREIPFS 0.001 0.001 0.001 0.001 score URI_DASHGOVEDU 1.000 1.000 1.000 1.000 score URI_DATA 1.000 1.000 1.000 1.000 score URI_DOTEDU 1.860 1.999 1.860 1.999 score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000 score URI_DWEBIPFS 3.500 2.200 3.500 2.200 score URI_EXCESS_SLASHES 1.999 1.926 1.999 1.926 score URI_FIREBASEAPP 1.000 2.999 1.000 2.999 score URI_FLKIPFSXYZIPFS 0.001 0.392 0.001 0.392 score URI_GLITCHME 1.000 1.000 1.000 1.000 score URI_GOOGDRAWPREVIEW 1.000 1.000 1.000 1.000 score URI_GOOGDRAWPREVIEW_MINFP 1.000 1.000 1.000 1.000 score URI_GOOGLE_PROXY 2.495 0.001 2.495 0.001 score URI_GOOG_STO_SPAMMY 2.999 2.633 2.999 2.633 score URI_HEX_IP 1.000 1.000 1.000 1.000 score URI_IMG_CWINDOWSNET 2.997 1.725 2.997 1.725 score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000 score URI_INFURAIPFSIO 1.000 0.001 1.000 0.001 score URI_IPFS 0.001 0.001 0.001 0.001 score URI_IPFSIO 1.858 0.001 1.858 0.001 score URI_LONG_REPEAT 1.000 1.000 1.000 1.000 score URI_ONLY_MSGID_MALF 1.169 1.000 1.169 1.000 score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000 score URI_PHISH 0.778 0.001 0.778 0.001 score URI_PHP_REDIR 1.000 1.000 1.000 1.000 score URI_TRY_3LD 1.999 1.999 1.999 1.999 score URI_TRY_USME 1.000 1.000 1.000 1.000 score URI_WPADMIN 0.497 0.001 0.497 0.001 score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000 score URI_WP_HACKED 2.014 0.001 2.014 0.001 score URI_WP_HACKED_2 2.499 2.499 2.499 2.499 score USB_DRIVES 1.000 1.000 1.000 1.000 score VFY_ACCT_NORDNS 1.219 0.001 1.219 0.001 score VISTA_COST 1.000 1.000 1.000 1.000 score VISTA_TONOM_EQ_TOLOC 2.499 2.499 2.499 2.499 score VPS_NO_NTLD 1.000 1.000 1.000 1.000 score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000 score WORD_INVIS 2.999 2.999 2.999 2.999 score WORD_INVIS_MANY 0.923 1.534 0.923 1.534 score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000 score XM_RANDOM 2.499 2.499 2.499 2.499 score XPRIO 1.648 0.001 1.648 0.001 score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000 score XPRIO_URL_SHORTNER 0.001 1.000 0.001 1.000 score XPRIO_VISTA 2.499 1.074 2.499 1.074 score YOUR_DELIVERY_ADDRESS 1.250 1.249 1.250 1.249 PK 8d\�C�� � - 3.004006/updates_spamassassin_org/23_bayes.cfnu �[��� # SpamAssassin basic config file # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### require_version 3.004006 ########################################################################### ifplugin Mail::SpamAssassin::Plugin::Bayes body BAYES_00 eval:check_bayes('0.00', '0.01') body BAYES_05 eval:check_bayes('0.01', '0.05') body BAYES_20 eval:check_bayes('0.05', '0.20') body BAYES_40 eval:check_bayes('0.20', '0.40') # note: tread carefully around 0.5... the Bayesian classifier # will use that for anything it's unsure about, or if it's untrained. body BAYES_50 eval:check_bayes('0.40', '0.60') body BAYES_60 eval:check_bayes('0.60', '0.80') body BAYES_80 eval:check_bayes('0.80', '0.95') body BAYES_95 eval:check_bayes('0.95', '0.99') body BAYES_99 eval:check_bayes('0.99', '1.00') #Additional rule to add more of a score to BAYES_99 FOR 99.9% to 100% body BAYES_999 eval:check_bayes('0.999', '1.00') tflags BAYES_00 nice learn tflags BAYES_05 nice learn tflags BAYES_20 nice learn tflags BAYES_40 nice learn tflags BAYES_50 learn tflags BAYES_60 learn tflags BAYES_80 learn tflags BAYES_95 learn tflags BAYES_99 learn tflags BAYES_999 learn describe BAYES_00 Bayes spam probability is 0 to 1% describe BAYES_05 Bayes spam probability is 1 to 5% describe BAYES_20 Bayes spam probability is 5 to 20% describe BAYES_40 Bayes spam probability is 20 to 40% describe BAYES_50 Bayes spam probability is 40 to 60% describe BAYES_60 Bayes spam probability is 60 to 80% describe BAYES_80 Bayes spam probability is 80 to 95% describe BAYES_95 Bayes spam probability is 95 to 99% describe BAYES_99 Bayes spam probability is 99 to 100% describe BAYES_999 Bayes spam probability is 99.9 to 100% priority BAYES_00 -90 priority BAYES_05 -90 priority BAYES_20 -90 priority BAYES_40 -90 priority BAYES_50 -90 priority BAYES_60 -90 priority BAYES_80 -90 priority BAYES_95 -90 priority BAYES_99 -90 priority BAYES_99 -90 priority BAYES_999 -90 endif PK 8d\��o2M� M� 0 3.004006/updates_spamassassin_org/20_aux_tlds.cfnu �[��� # SpamAssassin - Auxiliary TLD Definitions # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### # This file replaces the SARE http://www.rulesemporium.com/rules/90_2tld.cf # which will be deprecated as from 2010-05-01 # File updated 2014-09-17 to contain complete TLD lists, they are no longer # hardcoded into SA codebase and Util/RegistrarBoundaries.pm is deprecated # in favor of Mail::SpamAssassin::RegistryBoundaries. # Let's clear the internal TLD list, we only want to read from this config # file and ignore possible old hardcoded lists. if can(Mail::SpamAssassin::Conf::feature_registryboundaries) clear_util_rb endif # # 1st level TLD list # # Basic list can be obtained with the following command: # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | perl -ne 'print lc' # Current list may include more or less.. TODO easier maintenance? # util_rb_tld only accepts alpha (a-z) input before RegistryBoundaries was # implemented in 3.4.1(?), put IDN TLDs with numeric, hyphen (0-9-) etc in # this block # # For an up to date list of IDN TLDs that can be pasted into this block, run this command: # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/' # Since version 4.0 the util_rb_tld also accepts Unicode IDN labels (encoded as UTF-8), e.g.: # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | idn -u | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/' if can(Mail::SpamAssassin::Conf::feature_registryboundaries) # Updated 2025-01-03 util_rb_tld xn--11b4c3d xn--1ck2e1b xn--1qqw23a xn--2scrj9c xn--30rr7y xn--3bst00m util_rb_tld xn--3ds443g xn--3e0b707e xn--3hcrj9c xn--3pxu8k xn--42c2d9a xn--45br5cyl util_rb_tld xn--45brj9c xn--45q11c xn--4dbrk0ce xn--4gbrim xn--54b7fta0cc xn--55qw42g util_rb_tld xn--55qx5d xn--5su34j936bgsg xn--5tzm5g xn--6frz82g xn--6qq986b3xl xn--80adxhks util_rb_tld xn--80ao21a xn--80aqecdr1a xn--80asehdb xn--80aswg xn--8y0a063a xn--90a3ac util_rb_tld xn--90ae xn--90ais xn--9dbq2a xn--9et52u xn--9krt00a xn--b4w605ferd util_rb_tld xn--bck1b9a5dre4c xn--c1avg xn--c2br7g xn--cck2b3b xn--cckwcxetd xn--cg4bki util_rb_tld xn--clchc0ea0b2g2a9gcd xn--czr694b xn--czrs0t xn--czru2d xn--d1acj3b xn--d1alf util_rb_tld xn--e1a4c xn--eckvdtc9d xn--efvy88h xn--fct429k xn--fhbei xn--fiq228c5hs util_rb_tld xn--fiq64b xn--fiqs8s xn--fiqz9s xn--fjq720a xn--flw351e xn--fpcrj9c3d util_rb_tld xn--fzc2c9e2c xn--fzys8d69uvgm xn--g2xx48c xn--gckr3f0f xn--gecrj9c xn--gk3at1e util_rb_tld xn--h2breg3eve xn--h2brj9c xn--h2brj9c8c xn--hxt814e xn--i1b6b1a6a2e util_rb_tld xn--imr513n xn--io0a7i xn--j1aef xn--j1amh xn--j6w193g xn--jlq480n2rg util_rb_tld xn--jvr189m xn--kcrx77d1x4a xn--kprw13d xn--kpry57d xn--kput3i xn--l1acc util_rb_tld xn--lgbbat1ad8j xn--mgb9awbf xn--mgba3a3ejt xn--mgba3a4f16a xn--mgba7c0bbn0a util_rb_tld xn--mgbaam7a8h xn--mgbab2bd xn--mgbah1a3hjkrd xn--mgbai9azgqp6j xn--mgbayh7gpa util_rb_tld xn--mgbbh1a xn--mgbbh1a71e xn--mgbc0a9azcg xn--mgbca7dzdo xn--mgbcpq6gpa1a util_rb_tld xn--mgberp4a5d4ar xn--mgbgu82a xn--mgbi4ecexp xn--mgbpl2fh xn--mgbt3dhd util_rb_tld xn--mgbtx2b xn--mgbx4cd0ab xn--mix891f xn--mk1bu44c xn--mxtq1m xn--ngbc5azd util_rb_tld xn--ngbe9e0a xn--ngbrx xn--node xn--nqv7f xn--nqv7fs00ema xn--nyqy26a util_rb_tld xn--o3cw4h xn--ogbpf8fl xn--otu796d xn--p1acf xn--p1ai xn--pgbs0dh xn--pssy2u util_rb_tld xn--q7ce6a xn--q9jyb4c xn--qcka1pmc xn--qxa6a xn--qxam xn--rhqv96g xn--rovu88b util_rb_tld xn--rvc1e0am3e xn--s9brj9c xn--ses554g xn--t60b56a xn--tckwe xn--tiq49xqyj util_rb_tld xn--unup4y xn--vermgensberater-ctb xn--vermgensberatung-pwb xn--vhquv util_rb_tld xn--vuq861b xn--w4r85el8fhu5dnra xn--w4rs40l xn--wgbh1c xn--wgbl6a xn--xhq521b util_rb_tld xn--xkc2al3hye2a xn--xkc2dl3a5ee0h xn--y9a3aq xn--yfro4i67o xn--ygbi2ammx util_rb_tld xn--zfr164b endif # Standard List # For an up to date list of TLDs that can be pasted into this block, run this command: # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | grep -vi '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/' # Updated 2025-01-03 util_rb_tld aaa aarp abb abbott abbvie abc able abogado abudhabi ac academy accenture util_rb_tld accountant accountants aco actor ad ads adult ae aeg aero aetna af afl africa util_rb_tld ag agakhan agency ai aig airbus airforce airtel akdn al alibaba alipay util_rb_tld allfinanz allstate ally alsace alstom am amazon americanexpress americanfamily util_rb_tld amex amfam amica amsterdam analytics android anquan anz ao aol apartments app util_rb_tld apple aq aquarelle ar arab aramco archi army arpa art arte as asda asia util_rb_tld associates at athleta attorney au auction audi audible audio auspost author util_rb_tld auto autos aw aws ax axa az azure ba baby baidu banamex band bank bar barcelona util_rb_tld barclaycard barclays barefoot bargains baseball basketball bauhaus bayern bb util_rb_tld bbc bbt bbva bcg bcn bd be beats beauty beer bentley berlin best bestbuy bet bf util_rb_tld bg bh bharti bi bible bid bike bing bingo bio biz bj black blackfriday util_rb_tld blockbuster blog bloomberg blue bm bms bmw bn bnpparibas bo boats boehringer util_rb_tld bofa bom bond boo book booking bosch bostik boston bot boutique box br bradesco util_rb_tld bridgestone broadway broker brother brussels bs bt build builders business buy util_rb_tld buzz bv bw by bz bzh ca cab cafe cal call calvinklein cam camera camp canon util_rb_tld capetown capital capitalone car caravan cards care career careers cars casa util_rb_tld case cash casino cat catering catholic cba cbn cbre cc cd center ceo cern cf util_rb_tld cfa cfd cg ch chanel channel charity chase chat cheap chintai christmas chrome util_rb_tld church ci cipriani circle cisco citadel citi citic city ck cl claims cleaning util_rb_tld click clinic clinique clothing cloud club clubmed cm cn co coach codes coffee util_rb_tld college cologne com commbank community company compare computer comsec condos util_rb_tld construction consulting contact contractors cooking cool coop corsica country util_rb_tld coupon coupons courses cpa cr credit creditcard creditunion cricket crown crs util_rb_tld cruise cruises cu cuisinella cv cw cx cy cymru cyou cz dad dance data date util_rb_tld dating datsun day dclk dds de deal dealer deals degree delivery dell deloitte util_rb_tld delta democrat dental dentist desi design dev dhl diamonds diet digital direct util_rb_tld directory discount discover dish diy dj dk dm dnp do docs doctor dog domains util_rb_tld dot download drive dtv dubai dunlop dupont durban dvag dvr dz earth eat ec eco util_rb_tld edeka edu education ee eg email emerck energy engineer engineering enterprises util_rb_tld epson equipment er ericsson erni es esq estate et eu eurovision eus events util_rb_tld exchange expert exposed express extraspace fage fail fairwinds faith family fan util_rb_tld fans farm farmers fashion fast fedex feedback ferrari ferrero fi fidelity fido util_rb_tld film final finance financial fire firestone firmdale fish fishing fit fitness util_rb_tld fj fk flickr flights flir florist flowers fly fm fo foo food football ford util_rb_tld forex forsale forum foundation fox fr free fresenius frl frogans frontier ftr util_rb_tld fujitsu fun fund furniture futbol fyi ga gal gallery gallo gallup game games util_rb_tld gap garden gay gb gbiz gd gdn ge gea gent genting george gf gg ggee gh gi gift util_rb_tld gifts gives giving gl glass gle global globo gm gmail gmbh gmo gmx gn godaddy util_rb_tld gold goldpoint golf goo goodyear goog google gop got gov gp gq gr grainger util_rb_tld graphics gratis green gripe grocery group gs gt gu gucci guge guide guitars util_rb_tld guru gw gy hair hamburg hangout haus hbo hdfc hdfcbank health healthcare help util_rb_tld helsinki here hermes hiphop hisamitsu hitachi hiv hk hkt hm hn hockey holdings util_rb_tld holiday homedepot homegoods homes homesense honda horse hospital host hosting util_rb_tld hot hotels hotmail house how hr hsbc ht hu hughes hyatt hyundai ibm icbc ice util_rb_tld icu id ie ieee ifm ikano il im imamat imdb immo immobilien in inc industries util_rb_tld infiniti info ing ink institute insurance insure int international intuit util_rb_tld investments io ipiranga iq ir irish is ismaili ist istanbul it itau itv jaguar util_rb_tld java jcb je jeep jetzt jewelry jio jll jm jmp jnj jo jobs joburg jot joy jp util_rb_tld jpmorgan jprs juegos juniper kaufen kddi ke kerryhotels kerrylogistics util_rb_tld kerryproperties kfh kg kh ki kia kids kim kindle kitchen kiwi km kn koeln util_rb_tld komatsu kosher kp kpmg kpn kr krd kred kuokgroup kw ky kyoto kz la lacaixa util_rb_tld lamborghini lamer lancaster land landrover lanxess lasalle lat latino latrobe util_rb_tld law lawyer lb lc lds lease leclerc lefrak legal lego lexus lgbt li lidl life util_rb_tld lifeinsurance lifestyle lighting like lilly limited limo lincoln link lipsy util_rb_tld live living lk llc llp loan loans locker locus lol london lotte lotto love lpl util_rb_tld lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv ly ma madrid maif util_rb_tld maison makeup man management mango map market marketing markets marriott util_rb_tld marshalls mattel mba mc mckinsey md me med media meet melbourne meme memorial util_rb_tld men menu merckmsd mg mh miami microsoft mil mini mint mit mitsubishi mk ml mlb util_rb_tld mls mm mma mn mo mobi mobile moda moe moi mom monash money monster mormon util_rb_tld mortgage moscow moto motorcycles mov movie mp mq mr ms msd mt mtn mtr mu museum util_rb_tld music mv mw mx my mz na nab nagoya name navy nba nc ne nec net netbank netflix util_rb_tld network neustar new news next nextdirect nexus nf nfl ng ngo nhk ni nico nike util_rb_tld nikon ninja nissan nissay nl no nokia norton now nowruz nowtv np nr nra nrw ntt util_rb_tld nu nyc nz obi observer office okinawa olayan olayangroup ollo om omega one ong util_rb_tld onl online ooo open oracle orange org organic origins osaka otsuka ott ovh pa util_rb_tld page panasonic paris pars partners parts party pay pccw pe pet pf pfizer pg ph util_rb_tld pharmacy phd philips phone photo photography photos physio pics pictet pictures util_rb_tld pid pin ping pink pioneer pizza pk pl place play playstation plumbing plus pm util_rb_tld pn pnc pohl poker politie porn post pr pramerica praxi press prime pro prod util_rb_tld productions prof progressive promo properties property protection pru util_rb_tld prudential ps pt pub pw pwc py qa qpon quebec quest racing radio re read util_rb_tld realestate realtor realty recipes red redstone redumbrella rehab reise reisen util_rb_tld reit reliance ren rent rentals repair report republican rest restaurant review util_rb_tld reviews rexroth rich richardli ricoh ril rio rip ro rocks rodeo rogers room rs util_rb_tld rsvp ru rugby ruhr run rw rwe ryukyu sa saarland safe safety sakura sale salon util_rb_tld samsclub samsung sandvik sandvikcoromant sanofi sap sarl sas save saxo sb sbi util_rb_tld sbs sc scb schaeffler schmidt scholarships school schule schwarz science scot util_rb_tld sd se search seat secure security seek select sener services seven sew sex sexy util_rb_tld sfr sg sh shangrila sharp shell shia shiksha shoes shop shopping shouji show si util_rb_tld silk sina singles site sj sk ski skin sky skype sl sling sm smart smile sn sncf util_rb_tld so soccer social softbank software sohu solar solutions song sony soy spa space util_rb_tld sport spot sr srl ss st stada staples star statebank statefarm stc stcgroup util_rb_tld stockholm storage store stream studio study style su sucks supplies supply util_rb_tld support surf surgery suzuki sv swatch swiss sx sy sydney systems sz tab taipei util_rb_tld talk taobao target tatamotors tatar tattoo tax taxi tc tci td tdk team tech util_rb_tld technology tel temasek tennis teva tf tg th thd theater theatre tiaa tickets util_rb_tld tienda tips tires tirol tj tjmaxx tjx tk tkmaxx tl tm tmall tn to today tokyo util_rb_tld tools top toray toshiba total tours town toyota toys tr trade trading training util_rb_tld travel travelers travelersinsurance trust trv tt tube tui tunes tushu tv tvs tw util_rb_tld tz ua ubank ubs ug uk unicom university uno uol ups us uy uz va vacations vana util_rb_tld vanguard vc ve vegas ventures verisign versicherung vet vg vi viajes video vig util_rb_tld viking villas vin vip virgin visa vision viva vivo vlaanderen vn vodka volvo util_rb_tld vote voting voto voyage vu wales walmart walter wang wanggou watch watches util_rb_tld weather weatherchannel webcam weber website wed wedding weibo weir wf whoswho util_rb_tld wien wiki williamhill win windows wine winners wme wolterskluwer woodside work util_rb_tld works world wow ws wtc wtf xbox xerox xihuan xin xxx xyz yachts yahoo yamaxun util_rb_tld yandex ye yodobashi yoga yokohama you youtube yt yun za zappos zara zero zip zm util_rb_tld zone zuerich zw # # 2nd level TLD list # # http://www.neustar.us/policies/docs/rfc_1480.txt # data originally from http://spamcheck.freeapp.net/two-level-tlds # The freeapp.net site now says that information on the site is obsolete # See discussion and sources in comments of bug 5677 # updated as per bug 5815 # cleanup in progress per bug 6795 (axb) # Unsorted sources: # .ua : https://hostmaster.ua # .hu : http://www.domain.hu/domain/English/szabalyzat/sld.html util_rb_2tld com.ac edu.ac gov.ac mil.ac net.ac org.ac util_rb_2tld nom.ad util_rb_2tld ac.ae co.ae com.ae gov.ae mil.ae name.ae net.ae org.ae pro.ae sch.ae util_rb_2tld com.af edu.af gov.af net.af util_rb_2tld co.ag com.ag net.ag nom.ag org.ag util_rb_2tld com.ai edu.ai gov.ai net.ai off.ai org.ai util_rb_2tld com.al edu.al gov.al net.al org.al util_rb_2tld com.an edu.an net.an org.an util_rb_2tld co.ao ed.ao gv.ao it.ao og.ao pb.ao util_rb_2tld com.ar edu.ar gov.ar int.ar mil.ar net.ar org.ar util_rb_2tld e164.arpa in-addr.arpa ip6.arpa iris.arpa uri.arpa urn.arpa util_rb_2tld ac.at co.at gv.at or.at priv.at util_rb_2tld act.au asn.au com.au conf.au csiro.au edu.au gov.au id.au info.au net.au nsw.au nt.au org.au otc.au oz.au qld.au sa.au tas.au telememo.au vic.au wa.au util_rb_2tld com.aw util_rb_2tld biz.az com.az edu.az gov.az info.az int.az mil.az name.az net.az org.az pp.az util_rb_2tld co.ba com.ba edu.ba gov.ba mil.ba net.ba org.ba rs.ba unbi.ba unsa.ba util_rb_2tld com.bb edu.bb gov.bb net.bb org.bb util_rb_2tld ac.bd com.bd edu.bd gov.bd mil.bd net.bd org.bd util_rb_2tld ac.be belgie.be dns.be fgov.be util_rb_2tld gov.bf util_rb_2tld biz.bh cc.bh com.bh edu.bh gov.bh info.bh net.bh org.bh util_rb_2tld com.bm edu.bm gov.bm net.bm org.bm util_rb_2tld com.bn edu.bn net.bn org.bn util_rb_2tld com.bo edu.bo gob.bo gov.bo int.bo mil.bo net.bo org.bo tv.bo util_rb_2tld adm.br adv.br agr.br am.br arq.br art.br ato.br bio.br bmd.br cim.br cng.br cnt.br com.br coop.br dpn.br eco.br ecn.br edu.br eng.br esp.br etc.br eti.br far.br fm.br fnd.br fot.br fst.br g12.br ggf.br gov.br imb.br ind.br inf.br jor.br lel.br mat.br med.br mil.br mus.br net.br nom.br not.br ntr.br odo.br org.br ppg.br pro.br psc.br psi.br qsl.br rec.br slg.br srv.br tmp.br trd.br tur.br tv.br vet.br zlg.br util_rb_2tld com.bs net.bs org.bs util_rb_2tld com.bt edu.bt gov.bt net.bt org.bt util_rb_2tld co.bw org.bw util_rb_2tld gov.by mil.by util_rb_2tld com.bz net.bz org.bz util_rb_2tld ab.ca bc.ca gc.ca mb.ca nb.ca nf.ca nl.ca ns.ca nt.ca nu.ca on.ca pe.ca qc.ca sk.ca yk.ca util_rb_2tld co.ck edu.ck gov.ck net.ck org.ck util_rb_2tld ac.cn ah.cn bj.cn com.cn cq.cn edu.cn fj.cn gd.cn gov.cn gs.cn gx.cn gz.cn ha.cn hb.cn he.cn hi.cn hk.cn hl.cn hn.cn jl.cn js.cn jx.cn ln.cn mo.cn net.cn nm.cn nx.cn org.cn qh.cn sc.cn sd.cn sh.cn sn.cn sx.cn tj.cn tw.cn xj.cn xz.cn yn.cn zj.cn util_rb_2tld arts.co com.co edu.co firm.co gov.co info.co int.co mil.co net.co nom.co org.co rec.co web.co util_rb_2tld co.cm com.cm net.cm util_rb_2tld au.com br.com cn.com de.com eu.com gb.com hu.com no.com qc.com ru.com sa.com se.com uk.com us.com uy.com za.com util_rb_2tld ac.cr co.cr ed.cr fi.cr go.cr or.cr sa.cr util_rb_2tld com.cu edu.cu gov.cu inf.cu net.cu org.cu util_rb_2tld gov.cx util_rb_2tld ac.cy biz.cy com.cy ekloges.cy gov.cy ltd.cy name.cy net.cy org.cy parliament.cy press.cy pro.cy tm.cy util_rb_2tld co.dk util_rb_2tld com.dm edu.dm gov.dm net.dm org.dm util_rb_2tld art.do com.do edu.do gob.do gov.do mil.do net.do org.do sld.do web.do util_rb_2tld art.dz asso.dz com.dz edu.dz gov.dz net.dz org.dz pol.dz util_rb_2tld com.ec edu.ec fin.ec gov.ec info.ec k12.ec med.ec mil.ec net.ec org.ec pro.ec gob.ec util_rb_2tld co.ee com.ee edu.ee fie.ee med.ee org.ee pri.ee util_rb_2tld com.eg edu.eg eun.eg gov.eg mil.eg net.eg org.eg sci.eg util_rb_2tld com.er edu.er gov.er ind.er mil.er net.er org.er util_rb_2tld com.es edu.es gob.es nom.es org.es util_rb_2tld biz.et com.et edu.et gov.et info.et name.et net.et org.et util_rb_2tld aland.fi util_rb_2tld ac.fj biz.fj com.fj gov.fj id.fj info.fj mil.fj name.fj net.fj org.fj pro.fj school.fj util_rb_2tld ac.fk co.fk com.fk gov.fk net.fk nom.fk org.fk util_rb_2tld tm.fr asso.fr nom.fr prd.fr presse.fr com.fr gouv.fr util_rb_2tld com.ge edu.ge gov.ge mil.ge net.ge org.ge pvt.ge util_rb_2tld ac.gg alderney.gg co.gg gov.gg guernsey.gg ind.gg ltd.gg net.gg org.gg sark.gg sch.gg util_rb_2tld com.gh edu.gh gov.gh mil.gh org.gh util_rb_2tld com.gi edu.gi gov.gi ltd.gi mod.gi org.gi util_rb_2tld ac.gn com.gn gov.gn net.gn org.gn util_rb_2tld asso.gp com.gp edu.gp net.gp org.gp util_rb_2tld com.gr edu.gr gov.gr net.gr org.gr util_rb_2tld com.gt edu.gt gob.gt ind.gt mil.gt net.gt org.gt util_rb_2tld com.gu edu.gu gov.gu mil.gu net.gu org.gu util_rb_2tld com.hk edu.hk gov.hk idv.hk net.hk org.hk util_rb_2tld com.hn edu.hn gob.hn mil.hn net.hn org.hn util_rb_2tld com.hr from.hr iz.hr name.hr util_rb_2tld adult.ht art.ht asso.ht com.ht coop.ht edu.ht firm.ht gouv.ht info.ht med.ht net.ht org.ht perso.ht pol.ht pro.ht rel.ht shop.ht util_rb_2tld 2000.hu agrar.hu bolt.hu casino.hu city.hu co.hu erotica.hu erotika.hu film.hu forum.hu games.hu hotel.hu info.hu ingatlan.hu jogasz.hu konyvelo.hu lakas.hu media.hu news.hu org.hu priv.hu reklam.hu sex.hu shop.hu sport.hu suli.hu szex.hu tm.hu tozsde.hu utazas.hu video.hu util_rb_2tld ac.id co.id go.id mil.id net.id or.id sch.id web.id util_rb_2tld gov.ie util_rb_2tld ac.il co.il gov.il idf.il k12.il muni.il net.il org.il util_rb_2tld ac.im co.im com.im gov.im net.im nic.im org.im util_rb_2tld ac.in co.in edu.in ernet.in firm.in gen.in gov.in ind.in mil.in net.in nic.in org.in res.in util_rb_2tld com.io gov.io mil.io net.io org.io util_rb_2tld gov.iq util_rb_2tld ac.ir co.ir gov.ir id.ir net.ir org.ir sch.ir util_rb_2tld edu.it gov.it util_rb_2tld ac.je co.je gov.je ind.je jersey.je ltd.je net.je org.je sch.je util_rb_2tld com.jm edu.jm gov.jm net.jm org.jm util_rb_2tld com.jo edu.jo gov.jo mil.jo net.jo org.jo util_rb_2tld ac.jp ad.jp aichi.jp akita.jp aomori.jp chiba.jp co.jp ed.jp ehime.jp fukui.jp fukuoka.jp fukushima.jp gifu.jp go.jp gov.jp gr.jp gunma.jp hiroshima.jp hokkaido.jp hyogo.jp ibaraki.jp ishikawa.jp iwate.jp kagawa.jp kagoshima.jp kanagawa.jp kanazawa.jp kawasaki.jp kitakyushu.jp kobe.jp kochi.jp kumamoto.jp kyoto.jp lg.jp matsuyama.jp mie.jp miyagi.jp miyazaki.jp nagano.jp nagasaki.jp nagoya.jp nara.jp ne.jp net.jp niigata.jp oita.jp okayama.jp okinawa.jp or.jp org.jp osaka.jp saga.jp saitama.jp sapporo.jp sendai.jp shiga.jp shimane.jp shizuoka.jp takamatsu.jp tochigi.jp tokushima.jp tokyo.jp tottori.jp toyama.jp utsunomiya.jp wakayama.jp yamagata.jp yamaguchi.jp yamanashi.jp yokohama.jp util_rb_2tld ac.ke co.ke go.ke ne.ke new.ke or.ke sc.ke util_rb_2tld com.kg edu.kg gov.kg mil.kg net.kg org.kg util_rb_2tld com.kh edu.kh gov.kh mil.kh net.kh org.kh per.kh util_rb_2tld ac.kr busan.kr chungbuk.kr chungnam.kr co.kr daegu.kr daejeon.kr es.kr gangwon.kr go.kr gwangju.kr gyeongbuk.kr gyeonggi.kr gyeongnam.kr hs.kr incheon.kr jeju.kr jeonbuk.kr jeonnam.kr kg.kr kyonggi.kr mil.kr ms.kr ne.kr or.kr pe.kr re.kr sc.kr seoul.kr ulsan.kr util_rb_2tld com.kw edu.kw gov.kw mil.kw net.kw org.kw util_rb_2tld com.ky edu.ky gov.ky net.ky org.ky util_rb_2tld com.kz edu.kz gov.kz mil.kz net.kz org.kz util_rb_2tld com.la net.la org.la util_rb_2tld com.lb edu.lb gov.lb mil.lb net.lb org.lb util_rb_2tld com.lc edu.lc gov.lc net.lc org.lc util_rb_2tld assn.lk com.lk edu.lk gov.lk grp.lk hotel.lk int.lk ltd.lk net.lk ngo.lk org.lk sch.lk soc.lk web.lk util_rb_2tld com.lr edu.lr gov.lr net.lr org.lr util_rb_2tld co.ls org.ls util_rb_2tld gov.lt mil.lt util_rb_2tld asn.lv com.lv conf.lv edu.lv gov.lv id.lv mil.lv net.lv org.lv util_rb_2tld biz.ly com.ly edu.ly gov.ly id.ly med.ly net.ly org.ly plc.ly sch.ly util_rb_2tld ac.ma co.ma gov.ma net.ma org.ma press.ma util_rb_2tld asso.mc tm.mc util_rb_2tld ac.me co.me edu.me gov.me its.me net.me org.me priv.me util_rb_2tld com.mg edu.mg gov.mg mil.mg nom.mg org.mg prd.mg tm.mg util_rb_2tld army.mil navy.mil util_rb_2tld com.mk org.mk util_rb_2tld com.mm edu.mm gov.mm net.mm org.mm util_rb_2tld edu.mn gov.mn org.mn util_rb_2tld com.mo edu.mo gov.mo net.mo org.mo util_rb_2tld music.mobi weather.mobi util_rb_2tld co.mp edu.mp gov.mp net.mp org.mp util_rb_2tld com.mt edu.mt gov.mt net.mt org.mt tm.mt uu.mt util_rb_2tld co.mu com.mu util_rb_2tld aero.mv biz.mv com.mv coop.mv edu.mv gov.mv info.mv int.mv mil.mv museum.mv name.mv net.mv org.mv pro.mv util_rb_2tld ac.mw co.mw com.mw coop.mw edu.mw gov.mw int.mw museum.mw net.mw org.mw util_rb_2tld com.mx edu.mx gob.mx net.mx org.mx util_rb_2tld com.my edu.my gov.my mil.my name.my net.my org.my util_rb_2tld co.mz net.mz org.mz ac.mz gov.mz edu.mz util_rb_2tld alt.na com.na cul.na edu.na net.na org.na telecom.na unam.na util_rb_2tld com.nc net.nc org.nc util_rb_2tld de.net gb.net uk.net util_rb_2tld ac.ng com.ng edu.ng gov.ng net.ng org.ng sch.ng util_rb_2tld ac.ni biz.ni com.ni edu.ni gob.ni in.ni info.ni int.ni mil.ni net.ni nom.ni org.ni web.ni util_rb_2tld fhs.no folkebibl.no fylkesbibl.no herad.no idrett.no kommune.no mil.no museum.no priv.no stat.no tel.no vgs.no util_rb_2tld com.np edu.np gov.np mil.np net.np org.np util_rb_2tld biz.nr co.nr com.nr edu.nr fax.nr gov.nr info.nr mob.nr mobil.nr mobile.nr net.nr org.nr tel.nr tlf.nr util_rb_2tld ac.nz co.nz cri.nz geek.nz gen.nz govt.nz iwi.nz kiwi.nz maori.nz mil.nz net.nz org.nz parliament.nz school.nz util_rb_2tld ac.om biz.om co.om com.om edu.om gov.om med.om mil.om mod.om museum.om net.om org.om pro.om sch.om util_rb_2tld dk.org eu.org util_rb_2tld abo.pa ac.pa com.pa edu.pa gob.pa ing.pa med.pa net.pa nom.pa org.pa sld.pa util_rb_2tld com.pe edu.pe gob.pe mil.pe net.pe nom.pe org.pe util_rb_2tld com.pf edu.pf org.pf util_rb_2tld ac.pg com.pg net.pg util_rb_2tld com.ph edu.ph gov.ph mil.ph net.ph ngo.ph org.ph util_rb_2tld biz.pk com.pk edu.pk fam.pk gob.pk gok.pk gon.pk gop.pk gos.pk gov.pk net.pk org.pk web.pk util_rb_2tld art.pl biz.pl com.pl edu.pl gov.pl info.pl mil.pl net.pl ngo.pl org.pl util_rb_2tld biz.pr com.pr edu.pr gov.pr info.pr isla.pr name.pr net.pr org.pr pro.pr util_rb_2tld cpa.pro law.pro med.pro util_rb_2tld com.ps edu.ps gov.ps net.ps org.ps plo.ps sec.ps util_rb_2tld com.pt edu.pt gov.pt int.pt net.pt nome.pt org.pt publ.pt util_rb_2tld com.py edu.py gov.py net.py org.py util_rb_2tld com.qa edu.qa gov.qa net.qa org.qa util_rb_2tld asso.re com.re nom.re util_rb_2tld arts.ro com.ro firm.ro info.ro nom.ro nt.ro org.ro rec.ro store.ro tm.ro www.ro util_rb_2tld ac.rs co.rs edu.rs gov.rs in.rs org.rs util_rb_2tld ac.ru com.ru edu.ru gov.ru int.ru mil.ru net.ru org.ru pp.ru util_rb_2tld ac.rw co.rw com.rw edu.rw gouv.rw gov.rw int.rw mil.rw net.rw util_rb_2tld com.sa edu.sa gov.sa med.sa net.sa org.sa pub.sa sch.sa util_rb_2tld com.sb edu.sb gov.sb net.sb org.sb util_rb_2tld com.sc edu.sc gov.sc net.sc org.sc util_rb_2tld com.sd edu.sd gov.sd info.sd med.sd net.sd org.sd sch.sd tv.sd util_rb_2tld ab.se ac.se bd.se brand.se c.se d.se e.se f.se fh.se fhsk.se fhv.se g.se h.se i.se k.se komforb.se kommunalforbund.se komvux.se lanarb.se lanbib.se m.se mil.se n.se naturbruksgymn.se o.se org.se parti.se pp.se press.se s.se sshn.se t.se tm.se u.se w.se x.se y.se z.se util_rb_2tld com.sg edu.sg gov.sg idn.sg net.sg org.sg per.sg util_rb_2tld com.sh edu.sh gov.sh mil.sh net.sh org.sh util_rb_2tld edu.sk gov.sk mil.sk util_rb_2tld co.st com.st consulado.st edu.st embaixada.st gov.st mil.st net.st org.st principe.st saotome.st store.st util_rb_2tld com.sv edu.sv gob.sv org.sv red.sv util_rb_2tld com.sy gov.sy net.sy org.sy util_rb_2tld at.tf bg.tf ca.tf ch.tf cz.tf de.tf edu.tf eu.tf int.tf net.tf pl.tf ru.tf sg.tf us.tf util_rb_2tld ac.th co.th go.th in.th mi.th net.th or.th util_rb_2tld ac.tj biz.tj co.tj com.tj edu.tj go.tj gov.tj int.tj mil.tj name.tj net.tj org.tj web.tj util_rb_2tld com.tn edunet.tn ens.tn fin.tn gov.tn ind.tn info.tn intl.tn nat.tn net.tn org.tn rnrt.tn rns.tn rnu.tn tourism.tn util_rb_2tld gov.to util_rb_2tld gov.tp util_rb_2tld av.tr bbs.tr bel.tr biz.tr com.tr dr.tr edu.tr gen.tr gov.tr info.tr k12.tr mil.tr name.tr net.tr org.tr pol.tr tel.tr web.tr util_rb_2tld aero.tt at.tt au.tt be.tt biz.tt ca.tt co.tt com.tt coop.tt de.tt dk.tt edu.tt es.tt eu.tt fr.tt gov.tt info.tt int.tt it.tt jobs.tt mobi.tt museum.tt name.tt net.tt nic.tt org.tt pro.tt se.tt travel.tt uk.tt us.tt util_rb_2tld co.tv gov.tv util_rb_2tld club.tw com.tw ebiz.tw edu.tw game.tw gov.tw idv.tw mil.tw net.tw org.tw util_rb_2tld ac.tz co.tz go.tz ne.tz or.tz util_rb_2tld cherkassy.ua chernigov.ua chernovtsy.ua ck.ua cn.ua co.ua com.ua crimea.ua cv.ua dn.ua dnepropetrovsk.ua donetsk.ua dp.ua edu.ua gov.ua if.ua in.ua ivano-frankivsk.ua kh.ua kharkov.ua kherson.ua khmelnitskiy.ua kiev.ua kirovograd.ua km.ua kr.ua ks.ua kv.ua lg.ua lugansk.ua lutsk.ua lviv.ua mk.ua net.ua nikolaev.ua od.ua odessa.ua org.ua pl.ua poltava.ua rovno.ua rv.ua sebastopol.ua sumy.ua te.ua ternopil.ua uzhgorod.ua vinnica.ua vn.ua zaporizhzhe.ua zhitomir.ua zp.ua zt.ua util_rb_2tld ac.ug co.ug go.ug ne.ug or.ug sc.ug util_rb_2tld ac.uk bl.uk british-library.uk co.uk edu.uk gov.uk icnet.uk jet.uk ltd.uk me.uk mod.uk national-library-scotland.uk net.uk nhs.uk nic.uk nls.uk org.uk parliament.uk plc.uk police.uk sch.uk util_rb_2tld ak.us al.us ar.us az.us ca.us co.us ct.us dc.us de.us dni.us fed.us fl.us ga.us hi.us ia.us id.us il.us in.us isa.us kids.us ks.us ky.us la.us ma.us md.us me.us mi.us mn.us mo.us ms.us mt.us nc.us nd.us ne.us nh.us nj.us nm.us nsn.us nv.us ny.us oh.us ok.us or.us pa.us ri.us sc.us sd.us tn.us tx.us ut.us va.us vt.us wa.us wi.us wv.us wy.us util_rb_2tld com.uy edu.uy gub.uy mil.uy net.uy org.uy util_rb_2tld vatican.va util_rb_2tld arts.ve bib.ve co.ve com.ve edu.ve firm.ve gov.ve info.ve int.ve mil.ve net.ve nom.ve org.ve rec.ve store.ve tec.ve web.ve util_rb_2tld co.vi com.vi edu.vi gov.vi net.vi org.vi util_rb_2tld ac.vn biz.vn com.vn edu.vn gov.vn health.vn info.vn int.vn name.vn net.vn org.vn pro.vn util_rb_2tld ch.vu com.vu de.vu edu.vu fr.vu net.vu org.vu util_rb_2tld com.ws edu.ws gov.ws net.ws org.ws util_rb_2tld com.ye edu.ye gov.ye mil.ye net.ye org.ye util_rb_2tld ac.za alt.za bourse.za city.za co.za edu.za gov.za law.za mil.za net.za ngo.za nom.za org.za school.za tm.za web.za util_rb_2tld ac.zm co.zm com.zm edu.zm gov.zm org.zm sch.zm util_rb_2tld ac.zw co.zw gov.zw org.zw # util_rb_2tld 110mb.com util_rb_2tld 150m.com util_rb_2tld 163.to util_rb_2tld 1blu.de util_rb_2tld 42web.io util_rb_2tld 5ballov.ru util_rb_2tld 6a.org util_rb_2tld 80.hk util_rb_2tld 9k.com util_rb_2tld a2hosted.com util_rb_2tld acemlna.com util_rb_2tld acemlnb.com util_rb_2tld acemlnc.com util_rb_2tld addr.com util_rb_2tld altervista.org util_rb_2tld amplifyapp.com util_rb_2tld angelfire.com util_rb_2tld app.link util_rb_2tld appspot.com util_rb_2tld armenia.su util_rb_2tld ashbagad.su util_rb_2tld ashgabad.su util_rb_2tld asso.ws util_rb_2tld ath.cx util_rb_2tld at.lv util_rb_2tld at.pn util_rb_2tld at.tc util_rb_2tld au.pn util_rb_2tld awsapps.com util_rb_2tld azerbaijan.su util_rb_2tld azureedge.net util_rb_2tld azurewebsites.net util_rb_2tld b-cdn.net util_rb_2tld benchmarkurl.com util_rb_2tld benchurl.com util_rb_2tld be.tc util_rb_2tld bg.tc util_rb_2tld biz.tm util_rb_2tld biz.ua util_rb_2tld blog4ever.com util_rb_2tld blog.com util_rb_2tld blogger.ca util_rb_2tld blogger.cf util_rb_2tld blogger.ch util_rb_2tld blogger.cv util_rb_2tld blogger.jp util_rb_2tld blogger.pl util_rb_2tld blogger.re util_rb_2tld blogger.se util_rb_2tld blog.ru # Blogspot util_rb_2tld blogspot.ba util_rb_2tld blogspot.be util_rb_2tld blogspot.ca util_rb_2tld blogspot.com util_rb_2tld blogspot.cv util_rb_2tld blogspot.de util_rb_2tld blogspot.fi util_rb_2tld blogspot.fr util_rb_2tld blogspot.hu util_rb_2tld blogspot.in util_rb_2tld blogspot.it util_rb_2tld blogspot.jp util_rb_2tld blogspot.li util_rb_2tld blogspot.mk util_rb_2tld blogspot.mx util_rb_2tld blogspot.no util_rb_2tld blogspot.pt util_rb_2tld blogspot.re util_rb_2tld blogspot.ro util_rb_2tld blogspot.se util_rb_2tld blogspot.tw util_rb_2tld bmecurl.co util_rb_2tld bounceme.net util_rb_2tld boxmode.io util_rb_2tld bravehost.com util_rb_2tld bravejournal.com util_rb_2tld bravepages.com util_rb_2tld br.tc util_rb_2tld by.ru util_rb_2tld campaign-view.com util_rb_2tld ca.pn util_rb_2tld carrd.co util_rb_2tld caspio.com util_rb_2tld cc.cc util_rb_2tld ce.ms util_rb_2tld cere.network util_rb_2tld cfolks.pl util_rb_2tld chat.ru util_rb_2tld chez.com util_rb_2tld ch.lv util_rb_2tld ch.pn util_rb_2tld cjb.net util_rb_2tld cloudwaysapps.com util_rb_2tld cn.com util_rb_2tld cn.pn util_rb_2tld co.be util_rb_2tld co.cc util_rb_2tld co.com util_rb_2tld codeanyapp.com util_rb_2tld codesandbox.io util_rb_2tld co.in util_rb_2tld co.kg util_rb_2tld com.de util_rb_2tld com.vc util_rb_2tld conohawing.com util_rb_2tld co.pn util_rb_2tld corp.st util_rb_2tld corvar.pe util_rb_2tld cu-portland.edu util_rb_2tld cz.cc util_rb_2tld cz-emails.es util_rb_2tld cz.tc util_rb_2tld ddnsking.com util_rb_2tld ddns.net util_rb_2tld de.ki util_rb_2tld de.lv util_rb_2tld de.pn util_rb_2tld de.tc util_rb_2tld de.tl util_rb_2tld dk.tc util_rb_2tld doesphotography.com util_rb_2tld dreamhost.com util_rb_2tld dreamhosters.com util_rb_2tld duckdns.org # Dyndns util_rb_2tld dyndns-at-home.com util_rb_2tld dyndns-at-work.com util_rb_2tld dyndns.biz util_rb_2tld dyndns-blog.com util_rb_2tld dyndns.dk util_rb_2tld dyndns-free.com util_rb_2tld dyndns-home.com util_rb_2tld dyndns.info util_rb_2tld dyndns-ip.com util_rb_2tld dyndns-mail.com util_rb_2tld dyndns-office.com util_rb_2tld dyndns.org util_rb_2tld dyndns-pics.com util_rb_2tld dyndns-remote.com util_rb_2tld dyndns-server.com util_rb_2tld dyndns.tv util_rb_2tld dyndns-web.com util_rb_2tld dyndns-wiki.com util_rb_2tld dyndns-work.com util_rb_2tld dyndns.ws util_rb_2tld east-kazakhstan.su util_rb_2tld emlnk9.com util_rb_2tld emlnk.com util_rb_2tld endrowl.com util_rb_2tld es.pn util_rb_2tld es.tc util_rb_2tld es.tl util_rb_2tld eu.pn util_rb_2tld euro.tm util_rb_2tld eu.tc util_rb_2tld exnet.su util_rb_2tld extra.hu util_rb_2tld fameup.net util_rb_2tld fanlink.tv util_rb_2tld fere.top util_rb_2tld fileave.com util_rb_2tld firebaseapp.com util_rb_2tld fly.dev util_rb_2tld formstack.com util_rb_2tld free.fr util_rb_2tld freehostia.com util_rb_2tld free.hr util_rb_2tld freeservercity.com util_rb_2tld fromru.su util_rb_2tld from-tn.com util_rb_2tld front.ru util_rb_2tld fr.pn util_rb_2tld fr.tc util_rb_2tld funpic.de util_rb_2tld fx.to util_rb_2tld geocities.com util_rb_2tld geocities.jp util_rb_2tld georgia.su util_rb_2tld getmyip.com util_rb_2tld gigazu.net util_rb_2tld github.io util_rb_2tld glitch.me util_rb_2tld glueup.com util_rb_2tld gmxhome.de util_rb_2tld gob.ve util_rb_2tld go.com util_rb_2tld googleapis.com util_rb_2tld googlegroups.com util_rb_2tld googlepages.com util_rb_2tld go.ro util_rb_2tld gotdns.ch util_rb_2tld government.pn util_rb_2tld gov.pn util_rb_2tld gr8.com util_rb_2tld gratishost.com util_rb_2tld great-site.net util_rb_2tld helloweb.eu util_rb_2tld helpjuice.com util_rb_2tld herokuapp.com util_rb_2tld hk.tc util_rb_2tld homeip.net util_rb_2tld home.pl util_rb_2tld home.ro util_rb_2tld hopto.org util_rb_2tld hoster-test.ru util_rb_2tld hostevo.com util_rb_2tld host.sk util_rb_2tld hotbox.ru util_rb_2tld hotmail.ru util_rb_2tld hu2.ru util_rb_2tld hubspot-inbox.com util_rb_2tld hut2.ru util_rb_2tld iamallama.com util_rb_2tld ibelgique.com util_rb_2tld iblogger.org util_rb_2tld ic.cz util_rb_2tld i-cosysteme.com util_rb_2tld idoo.com util_rb_2tld id.ru util_rb_2tld iespana.es util_rb_2tld ifrance.com util_rb_2tld infinityfreeapp.com util_rb_2tld in.net util_rb_2tld interia.pl util_rb_2tld interii.pl util_rb_2tld int.tc util_rb_2tld iquebec.com util_rb_2tld is-a-cpa.com util_rb_2tld isteaching.com util_rb_2tld isuisse.com util_rb_2tld it.pn util_rb_2tld it.tc util_rb_2tld iwebsource.com util_rb_2tld jimdo.com util_rb_2tld jino-net.ru util_rb_2tld jpn.com util_rb_2tld jp.pn util_rb_2tld kalmykia.su util_rb_2tld kickme.to util_rb_2tld kimsufi.com util_rb_2tld kriya.ai util_rb_2tld krovatka.su util_rb_2tld kr.tc util_rb_2tld kwik.to util_rb_2tld land.ru #util_rb_2tld livejournal.com - Removed per bug 6662 4/7/15 - KAM util_rb_2tld lovestoblog.com util_rb_2tld mail15.su util_rb_2tld mail2k.ru util_rb_2tld mail333.su util_rb_2tld mail.ru util_rb_2tld mangyshlak.su util_rb_2tld marssociety.org util_rb_2tld mex.com util_rb_2tld mine.nu util_rb_2tld mjt.lu util_rb_2tld mooo.com util_rb_2tld msgfocus.com util_rb_2tld multiply.com util_rb_2tld mx.tc util_rb_2tld mybluehost.me util_rb_2tld myclickfunnels.com util_rb_2tld mydyndns.org util_rb_2tld myftp.biz util_rb_2tld myftp.org util_rb_2tld mygbiz.com util_rb_2tld mypi.co util_rb_2tld myshopify.com util_rb_2tld myvnc.com util_rb_2tld na.by util_rb_2tld narod.ru util_rb_2tld neostrada.pl util_rb_2tld netart.com util_rb_2tld netdna-cdn.com util_rb_2tld netfirms.com util_rb_2tld netgroup.de util_rb_2tld netlify.app util_rb_2tld netsolhost.com util_rb_2tld net.tc util_rb_2tld net.vc util_rb_2tld newmail.ru util_rb_2tld newsmemory.com util_rb_2tld nextmail.ru util_rb_2tld nightmail.ru util_rb_2tld ning.com util_rb_2tld nm.ru util_rb_2tld no-ip.biz util_rb_2tld no-ip.ca util_rb_2tld no-ip.com util_rb_2tld no-ip.info util_rb_2tld no-ip.net util_rb_2tld no-ip.org util_rb_2tld noip.us util_rb_2tld north-kazakhstan.su util_rb_2tld no.tc util_rb_2tld notlong.com util_rb_2tld nov.ru util_rb_2tld nov.su util_rb_2tld onelink.me util_rb_2tld one.pl util_rb_2tld onfobu.ru util_rb_2tld online.de util_rb_2tld oplimisme.com util_rb_2tld org.rw util_rb_2tld org.vc util_rb_2tld outrch.com util_rb_2tld ovh.net util_rb_2tld pages.dev util_rb_2tld page.tl page.link util_rb_2tld perso.tc util_rb_2tld phpartners.org util_rb_2tld ph.tc util_rb_2tld pila.pl util_rb_2tld pisem.su util_rb_2tld plan-net.technology util_rb_2tld pl.tc util_rb_2tld pochta.com util_rb_2tld pochtamt.ru util_rb_2tld pochta.ru util_rb_2tld pop3.ru util_rb_2tld proboards.com util_rb_2tld pro.tc util_rb_2tld prserv.net util_rb_2tld psee.io util_rb_2tld qip.ru util_rb_2tld qualtrics.com util_rb_2tld r2.dev util_rb_2tld radio.am util_rb_2tld rbcmail.ru util_rb_2tld redirectme.net util_rb_2tld replit.app util_rb_2tld replit.dev util_rb_2tld republika.pl util_rb_2tld reservemeeting.co util_rb_2tld reviewwave.com util_rb_2tld rm.ru util_rb_2tld ru.com util_rb_2tld ru.tc util_rb_2tld sa.com util_rb_2tld sankung.com util_rb_2tld sapo.pt util_rb_2tld selfip.com util_rb_2tld selfip.net util_rb_2tld sendpul.se util_rb_2tld sentieo.com util_rb_2tld servebbs.com util_rb_2tld serveblog.net util_rb_2tld serveftp.com util_rb_2tld servsocgen.com util_rb_2tld se.tc util_rb_2tld shop.co util_rb_2tld shutterfly.com util_rb_2tld site.pro util_rb_2tld site.tc util_rb_2tld smtp.ru util_rb_2tld societe.st util_rb_2tld sol.ru util_rb_2tld sosblog.com util_rb_2tld surge.sh util_rb_2tld sytes.net util_rb_2tld szm.com util_rb_2tld t35.com util_rb_2tld t35.net util_rb_2tld t3.to util_rb_2tld tashkent.su util_rb_2tld tempurl.host util_rb_2tld test-google-a.com util_rb_2tld thrivecart.com util_rb_2tld th.tc util_rb_2tld to.it util_rb_2tld translate.goog util_rb_2tld tripod.com util_rb_2tld trykalendarai.com util_rb_2tld tumblr.com util_rb_2tld ucoz.com util_rb_2tld ucoz.net util_rb_2tld ucoz.ru util_rb_2tld uk.to util_rb_2tld unblog.fr util_rb_2tld uni.cc util_rb_2tld unlugar.com util_rb_2tld url.st util_rb_2tld usa.cc util_rb_2tld usedpanda.com util_rb_2tld usekalendarai.com util_rb_2tld us.tc util_rb_2tld us.to util_rb_2tld vercel.app util_rb_2tld vv.cc util_rb_2tld web.app util_rb_2tld webcindario.com util_rb_2tld web.com util_rb_2tld webd.pl util_rb_2tld webflow.io util_rb_2tld webhop.info util_rb_2tld webhop.me util_rb_2tld webhop.net util_rb_2tld webhop.org util_rb_2tld we.bs util_rb_2tld webs.com util_rb_2tld web-soft.ru util_rb_2tld weebly.com util_rb_2tld whsites.net util_rb_2tld wix.com util_rb_2tld wixsite.com util_rb_2tld wordpress.com util_rb_2tld workers.dev util_rb_2tld wpenginepowered.com util_rb_2tld wufoo.com util_rb_2tld wz.cz util_rb_2tld xanga.com util_rb_2tld xf.cz util_rb_2tld xorg.pl util_rb_2tld yolasite.com util_rb_2tld z8.ru util_rb_2tld za.com util_rb_2tld zapto.org util_rb_2tld zendesk.com util_rb_2tld zmail.ru util_rb_2tld zohosites.com util_rb_2tld zoom.us # # 3rd level TLD list (SA 3.3+) # # There was a bug before 3.4.1(?), only one 3TLD per line works! # if (version >= 3.003000) util_rb_3tld bay.livefilestore.com util_rb_3tld blog.friendster.com util_rb_3tld blogspot.com.ar util_rb_3tld blogspot.com.au util_rb_3tld blogspot.com.br util_rb_3tld blogspot.com.es util_rb_3tld blogspot.co.nz util_rb_3tld blogspot.co.uk util_rb_3tld blu.livefilestore.com util_rb_3tld callback.cloudses.com util_rb_3tld cloud.prohosting.com util_rb_3tld cloud.z.com util_rb_3tld co.at.lv util_rb_3tld co.at.pn util_rb_3tld co.at.tc util_rb_3tld com.au.pn util_rb_3tld com.sapo.pt util_rb_3tld co.uk.pn util_rb_3tld ct.sendgrid.net util_rb_3tld demon.co.uk util_rb_3tld docs.google.com util_rb_3tld do.sapo.pt util_rb_3tld dsasoftweb.com.br util_rb_3tld en.alibaba.com util_rb_3tld esc.edu.ar util_rb_3tld fr-par-1.linodeobjects.com util_rb_3tld groups.live.com util_rb_3tld homepage.t-online.de util_rb_3tld home.sapo.pt util_rb_3tld hop.clickbank.net util_rb_3tld hosted.phplist.com util_rb_3tld host.secureserver.net util_rb_3tld ipfs.dweb.link util_rb_3tld ipfs.flk-ipfs.xyz util_rb_3tld lkd.co.im util_rb_3tld ltd.co.im util_rb_3tld mobile.web.tr util_rb_3tld no-ip.co.uk util_rb_3tld no.sapo.pt util_rb_3tld on.fleek.co util_rb_3tld or.at.lv util_rb_3tld paginas.sapo.pt util_rb_3tld perso.neuf.fr util_rb_3tld perso.sfr.fr util_rb_3tld plc.co.im util_rb_3tld privat.t-online.de util_rb_3tld profile.live.com util_rb_3tld qiye.163.com util_rb_3tld qld.edu.au util_rb_3tld robsonhost.com.br util_rb_3tld sakura.ne.jp util_rb_3tld skydrive.live.com util_rb_3tld spaces.live.com util_rb_3tld spaces.msn.com util_rb_3tld user.icpnet.pl util_rb_3tld web.aplus.net util_rb_3tld web.fc2.com util_rb_3tld web.officelive.com endif PK 8d\�!B� � 1 3.004006/updates_spamassassin_org/20_imageinfo.cfnu �[��� # SpamAssassin rules file: Image information tests # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### ifplugin Mail::SpamAssassin::Plugin::ImageInfo ## # you can match by image name ## body DC_IMAGE001_GIF eval:image_named('image001.gif') ## describe DC_IMAGE001_GIF Contains image named image001.gif ## # you can do exact image size matches ## body DC_GIF_264_127 eval:image_size_exact('gif','264','127') ## describe DC_GIF_264_127 Found 264x127 pixel gif, possible pillz # you can do image to text, or image to html ratios rawbody __DC_IMG_HTML_RATIO eval:image_to_text_ratio('all', '0.000', '0.015') describe __DC_IMG_HTML_RATIO Low rawbody to pixel area ratio body __DC_IMG_TEXT_RATIO eval:image_to_text_ratio('all', '0.000', '0.008') describe __DC_IMG_TEXT_RATIO Low body to pixel area ratio # body DC_GIF_TEXT_RATIO eval:image_to_text_ratio('gif',0.000, 0.008) # describe DC_GIF_TEXT_RATIO Low body to GIF pixel area ratio # rawbody DC_GIF_HTML_RATIO eval:image_to_text_ratio('gif',0.000, 0.008) # describe DC_GIF_HTML_RATIO Low rawbody to GIF pixel area ratio # using exact size match to identify things like screenshots # body __SCREEN_640x480 eval:image_size_exact('all',800,600) # body __SCREEN_800x600 eval:image_size_exact('all',800,600) # body __SCREEN_1024x768 eval:image_size_exact('all',1024,768) # body __SCREEN_1280x1024 eval:image_size_exact('all',1280,1024) # meta DC_SCREENSHOT_JPG ( __SCREEN_640x480 || __SCREEN_800x600 || __SCREEN_1024x768 || __SCREEN_1280x1024 ) # describe DC_SCREENSHOT_JPG Contains image matching common screen resolution # score DC_SCREENSHOT_JPG -0.01 # you can do minimum demension matches # body DC_GIF_300 eval:image_size_range('gif',300,300) # describe DC_GIF_300 Contains a 300x300 pixels gif or larger # score DC_GIF_300 0.01 # you can do ranged demension matches # body DC_JPEG_200_300 eval:image_size_range('gif', 200, 300, 250, 350) # describe DC_JPEG_200_300 Contains jpeg 200-250 (high) x 300-350 (wide) # score DC_JPEG_200_300 0.01 # you can count the number of images (all or by image type) body __GIF_ATTACH_1 eval:image_count('gif','1','1') body __GIF_ATTACH_2P eval:image_count('gif','2') body __PNG_ATTACH_1 eval:image_count('png','1','1') body __PNG_ATTACH_2P eval:image_count('png','2') body __JPEG_ATTACH_1 eval:image_count('jpeg',1,1) body __JPEG_ATTACH_2P eval:image_count('jpeg',2) # you can determine pixel coverage (all or by image type) body __GIF_AREA_180K eval:pixel_coverage('gif','180000','475000') body __PNG_AREA_180K eval:pixel_coverage('png','180000','475000') # body __JPEG_AREA_180K eval:pixel_coverage('jpeg',180000,475000) # meta together something useful meta DC_GIF_UNO_LARGO ( __GIF_ATTACH_1 && __GIF_AREA_180K ) describe DC_GIF_UNO_LARGO Message contains a single large gif image meta __DC_GIF_MULTI_LARGO ( __GIF_ATTACH_2P && __GIF_AREA_180K ) describe __DC_GIF_MULTI_LARGO Message has 2+ inline gif covering lots of area meta DC_PNG_UNO_LARGO ( __PNG_ATTACH_1 && __PNG_AREA_180K ) describe DC_PNG_UNO_LARGO Message contains a single large png image meta __DC_PNG_MULTI_LARGO ( __PNG_ATTACH_2P && __PNG_AREA_180K ) describe __DC_PNG_MULTI_LARGO Message has 2+ png images covering lots of area # meta DC_JPEG_UNO_LARGO ( __JPEG_ATTACH_1 && __JPEG_AREA_180K ) # describe DC_JPEG_UNO_LARGO Message hash single large jpeg image # meta DC_JPEG_MULTI_LARGO ( __JPEG_ATTACH_2P && __JPEG_AREA_180K ) # describe DC_JPEG_MULTI_LARGO Message has 2+ jpeg images covering lots of area meta DC_IMAGE_SPAM_TEXT ( !__HAS_URI && __DC_IMG_TEXT_RATIO && ( DC_GIF_UNO_LARGO || DC_PNG_UNO_LARGO || __DC_GIF_MULTI_LARGO || __DC_PNG_MULTI_LARGO )) describe DC_IMAGE_SPAM_TEXT Possible Image-only spam with little text # meta the stock rules together for HTML_IMAGE_ONLY_* meta __HTML_IMG_ONLY ( HTML_IMAGE_ONLY_04 || HTML_IMAGE_ONLY_08 || HTML_IMAGE_ONLY_12 || HTML_IMAGE_ONLY_16 || HTML_IMAGE_ONLY_20 || HTML_IMAGE_ONLY_24 || HTML_IMAGE_ONLY_28 ) meta DC_IMAGE_SPAM_HTML (!__HAS_URI && ( __HTML_IMG_ONLY || __DC_IMG_HTML_RATIO ) && ( DC_GIF_UNO_LARGO || DC_PNG_UNO_LARGO || __DC_GIF_MULTI_LARGO || __DC_PNG_MULTI_LARGO )) describe DC_IMAGE_SPAM_HTML Possible Image-only spam endif PK 8d\T<��� � 5 3.004006/updates_spamassassin_org/regression_tests.cfnu �[��� # SpamAssassin rules file: regression tests # # This file contains tests performed on `make test`. It should not be # distributed. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> # ########################################################################### test DEAR_SOMETHING ok Dear IT professional, test DEAR_SOMETHING ok Dear Internet Investor: test DEAR_FRIEND ok Dear friend, test DEAR_FRIEND fail Dear Mr. Ithacus, test FROM_STARTS_WITH_NUMS ok 12345678matt@sergeant.org test FROM_STARTS_WITH_NUMS fail matt@sergeant.org test FORGED_YAHOO_RCVD fail by mf1.lng.yahoo.com (8.11.1/8.11.1) id g3SDfPH19426 test NUMERIC_HTTP_ADDR ok http://123456789/foo/bar test US_DOLLARS_3 fail $-$NFbMF$K!"A49q$+$iLd$$9g$o$;$,;&E~$7$F$$$^$9!# test US_DOLLARS_3 ok OF US$75,000,000.00 ( SEVENTYFIVE test US_DOLLARS_3 ok DOLLAR(USD$30,000,000,00.) test US_DOLLARS_3 ok ($21,500,000.) test US_DOLLARS_3 ok ($ 152,000.000.00) # note: have to use "." instead of "#", as it's the comment char test TRACKER_ID ok 2174Hzdm0-105YUqT8863DiDg0-616mqbE4931HEBc0-732qBHd6314l52 test TRACKER_ID ok ofsknxxdqgtgqvsoiytkivajvtj test TRACKER_ID fail <!-- ADMINISTRIVIA --> test TRACKER_ID fail Donau-Dampfschifffahrts-Kapitaen test __OBFUSCATING_COMMENT_A ok This is a te<!--foo-->st test __OBFUSCATING_COMMENT_A fail Not a <!-- problem --> here test __OBFUSCATING_COMMENT_A fail or<!--problem--> here test __OBFUSCATING_COMMENT_A fail This <tag><!-- neither --></tag> I hope test HIDE_WIN_STATUS ok <a href=foo onMouseOver="window.status='bar';> test HIDE_WIN_STATUS fail attributes like href=foo onMouseOver="window.status='bar'" test HIDE_WIN_STATUS fail attributes like href=foo onMouseOver="flashiness" test BAD_CREDIT ok no credit checks test BAD_CREDIT ok reestablish credit test BAD_CREDIT ok establish good credit test BAD_CREDIT ok repair your credit test BAD_CREDIT fail NOTICE: Your credit card company may place the words "San Antonio" PK 8d\?�r> > - 3.004006/updates_spamassassin_org/60_txrep.cfnu �[��� # SpamAssassin rules file: TxRep reputation system # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # </@LICENSE> ifplugin Mail::SpamAssassin::Plugin::TxRep header TXREP eval:check_senders_reputation() describe TXREP Score normalizing based on sender's reputation tflags TXREP userconf noautolearn priority TXREP 1000 endif # Mail::SpamAssassin::Plugin::TxRep PK 8d\^g8 8 - 3.004006/updates_spamassassin_org/MIRRORED.BYnu �[��� #HOW TO UPDATE # # SOURCE: https://svn.apache.org/repos/asf/spamassassin/site/updates/ # # 'svn checkout' the repo, update this file, and commit it # # A svnpubsub update on spamassassin.apache.org will instantly pull # from SVN after the commit. # # A cron'd update on sa-vm.apache.org will also automatically pull # from SVN to /www/spamassassin.apache.org/updates which is also the # [updates] rsync module path the mirrors are syncing from. #CONTACT: Matthias Leisi http://sa-update.dnswl.org/ weight=3 #CONTACT: Kevin A. McGrail https://www.sa-update.pccc.com/ weight=5 #CONTACT: Rene Schwarz https://sa-update.space-pro.be/ weight=1 #CONTACT: Dave Jones http://sa-update.ena.com/ weight=5 #CONTACT: Dave Warren #https://sa-update.razx.cloud/ weight=5 #CONTACT: Jens Schleusener # Removed per list reqest 27.7.2022 #http://sa-update.fossies.org/ weight=1 #CONTACT: tobisworld gmail #http://sa-update.verein-clean.net/ weight=10 #CONTACT: Giovanni Bechis https://sa-update-asf.snb.it/ weight=5 #CONTACT: Giovanni Bechis https://sa-update.spamassassin.org/ weight=10 PK 8d\���,�<