sa-updates/20_mailspike.cf

   1
   2 # MailSpike is included in SpamAssassin 3.4+
   3 if (version >= 3.004000)
   4 ifplugin Mail::SpamAssassin::Plugin::DNSEval
   5 ## Spam sources
   6 header __RCVD_IN_MSPIKE_B       eval:check_rbl('mspikeb-lastexternal', 'bl.mailspike.net.')
   7 tflags __RCVD_IN_MSPIKE_B       net
   8 reuse  __RCVD_IN_MSPIKE_B
   9
  10 ## Ham sources
  11 header __RCVD_IN_MSPIKE_L       eval:check_rbl('mspikeg-firsttrusted', 'wl.mailspike.net.')
  12 tflags __RCVD_IN_MSPIKE_L       net
  13 reuse  __RCVD_IN_MSPIKE_L
  14
  15 ##### Reputation compensations
  16 # Definitions - Bad senders
  17 header __RCVD_IN_MSPIKE_Z       eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.2')
  18 describe __RCVD_IN_MSPIKE_Z     Spam wave participant
  19 tflags __RCVD_IN_MSPIKE_Z       net
  20 reuse __RCVD_IN_MSPIKE_Z
  21
  22 header RCVD_IN_MSPIKE_L5        eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.10')
  23 describe RCVD_IN_MSPIKE_L5      Very bad reputation (-5)
  24 tflags RCVD_IN_MSPIKE_L5        net
  25 reuse RCVD_IN_MSPIKE_L5
  26
  27 header RCVD_IN_MSPIKE_L4        eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.11')
  28 describe RCVD_IN_MSPIKE_L4      Bad reputation (-4)
  29 tflags RCVD_IN_MSPIKE_L4        net
  30 reuse RCVD_IN_MSPIKE_L4
  31
  32 header RCVD_IN_MSPIKE_L3        eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.12')
  33 describe RCVD_IN_MSPIKE_L3      Low reputation (-3)
  34 tflags RCVD_IN_MSPIKE_L3        net
  35 reuse RCVD_IN_MSPIKE_L3
  36
  37 header RCVD_IN_MSPIKE_L2        eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.13')
  38 describe RCVD_IN_MSPIKE_L2      Suspicious reputation (-2)
  39 tflags RCVD_IN_MSPIKE_L2        net
  40 reuse RCVD_IN_MSPIKE_L2
  41
  42 # Definitions - Good senders
  43 header RCVD_IN_MSPIKE_H5        eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.20')
  44 describe RCVD_IN_MSPIKE_H5      Excellent reputation (+5)
  45 tflags RCVD_IN_MSPIKE_H5        nice net
  46 reuse RCVD_IN_MSPIKE_H5
  47
  48 header RCVD_IN_MSPIKE_H4        eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.19')
  49 describe RCVD_IN_MSPIKE_H4      Very Good reputation (+4)
  50 tflags RCVD_IN_MSPIKE_H4        nice net
  51 reuse RCVD_IN_MSPIKE_H4
  52
  53 header RCVD_IN_MSPIKE_H3        eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.18')
  54 describe RCVD_IN_MSPIKE_H3      Good reputation (+3)
  55 tflags RCVD_IN_MSPIKE_H3        nice net
  56 reuse RCVD_IN_MSPIKE_H3
  57
  58 header RCVD_IN_MSPIKE_H2        eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.17')
  59 describe RCVD_IN_MSPIKE_H2      Average reputation (+2)
  60 tflags RCVD_IN_MSPIKE_H2        nice net
  61 reuse RCVD_IN_MSPIKE_H2
  62
  63 # *_L and *_Z may overlap each other, so account for that
  64 meta __RCVD_IN_MSPIKE_LOW       RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3
  65 tflags __RCVD_IN_MSPIKE_LOW     net
  66
  67 meta RCVD_IN_MSPIKE_ZBI         __RCVD_IN_MSPIKE_Z && !__RCVD_IN_MSPIKE_LOW
  68 tflags RCVD_IN_MSPIKE_ZBI       net
  69
  70 ## Meta rules for aggregating good and bad senders
  71 # Bad
  72 meta RCVD_IN_MSPIKE_BL          RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3 || __RCVD_IN_MSPIKE_Z
  73 describe RCVD_IN_MSPIKE_BL      Mailspike blacklisted
  74 tflags RCVD_IN_MSPIKE_BL        net
  75
  76 # Good
  77 meta RCVD_IN_MSPIKE_WL          RCVD_IN_MSPIKE_H5 || RCVD_IN_MSPIKE_H4 || RCVD_IN_MSPIKE_H3
  78 describe RCVD_IN_MSPIKE_WL      Mailspike good senders
  79 tflags RCVD_IN_MSPIKE_WL        nice net
  80
  81   endif
  82 endif