sa-updates/60_welcomelist_spf.cf

   1 # SpamAssassin rules file: default SPF welcomelists
   2 #
   3 # Please don't modify this file as your changes will be overwritten with
   4 # the next update. Use /etc/mail/spamassassin/local.cf instead.
   5 # See 'perldoc Mail::SpamAssassin::Conf' for details.
   6 #
   7 # <@LICENSE>
   8 # Licensed to the Apache Software Foundation (ASF) under one or more
   9 # contributor license agreements.  See the NOTICE file distributed with
  10 # this work for additional information regarding copyright ownership.
  11 # The ASF licenses this file to you under the Apache License, Version 2.0
  12 # (the "License"); you may not use this file except in compliance with
  13 # the License.  You may obtain a copy of the License at:
  14 #
  15 #     http://www.apache.org/licenses/LICENSE-2.0
  16 #
  17 # Unless required by applicable law or agreed to in writing, software
  18 # distributed under the License is distributed on an "AS IS" BASIS,
  19 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  20 # See the License for the specific language governing permissions and
  21 # limitations under the License.
  22 # </@LICENSE>
  23
  24 ifplugin Mail::SpamAssassin::Plugin::SPF
  25
  26 ###########################################################################
  27 # SPF welcomelist rules
  28
  29 # 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
  30 if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
  31   header USER_IN_SPF_WELCOMELIST        eval:check_for_spf_welcomelist_from()
  32   describe USER_IN_SPF_WELCOMELIST      From: address is in the user's SPF welcomelist
  33   tflags USER_IN_SPF_WELCOMELIST        userconf nice noautolearn net
  34   score USER_IN_SPF_WELCOMELIST         -100
  35   reuse USER_IN_SPF_WELCOMELIST
  36
  37   # Backwards compatibility
  38   # To disable set "enable_compat welcomelist_blocklist" in init.pre
  39   if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
  40     meta USER_IN_SPF_WHITELIST          (USER_IN_SPF_WELCOMELIST)
  41     describe USER_IN_SPF_WHITELIST      DEPRECATED: See USER_IN_SPF_WELCOMELIST
  42     tflags USER_IN_SPF_WHITELIST        userconf nice noautolearn net
  43     score USER_IN_SPF_WHITELIST         -100
  44     reuse USER_IN_SPF_WHITELIST
  45     score USER_IN_SPF_WELCOMELIST       -0.01
  46   endif
  47
  48   header USER_IN_DEF_SPF_WL             eval:check_for_def_spf_welcomelist_from()
  49   describe USER_IN_DEF_SPF_WL           From: address is in the default SPF welcome-list
  50   tflags USER_IN_DEF_SPF_WL             userconf nice noautolearn net
  51   reuse USER_IN_DEF_SPF_WL
  52 endif
  53 if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
  54   header USER_IN_SPF_WELCOMELIST        eval:check_for_spf_whitelist_from()
  55   describe USER_IN_SPF_WELCOMELIST      From: address is in the user's SPF welcomelist
  56   tflags USER_IN_SPF_WELCOMELIST        userconf nice noautolearn net
  57   score USER_IN_SPF_WELCOMELIST         -0.01
  58   reuse USER_IN_SPF_WELCOMELIST
  59
  60   meta USER_IN_SPF_WHITELIST            (USER_IN_SPF_WELCOMELIST)
  61   describe USER_IN_SPF_WHITELIST        DEPRECATED: See USER_IN_SPF_WELCOMELIST
  62   tflags USER_IN_SPF_WHITELIST          userconf nice noautolearn net
  63   score USER_IN_SPF_WHITELIST           -100
  64   reuse USER_IN_SPF_WHITELIST
  65
  66   header USER_IN_DEF_SPF_WL             eval:check_for_def_spf_whitelist_from()
  67   describe USER_IN_DEF_SPF_WL           From: address is in the default SPF welcome-list
  68   tflags USER_IN_DEF_SPF_WL             userconf nice noautolearn net
  69   reuse USER_IN_DEF_SPF_WL
  70 endif
  71
  72 meta ENV_AND_HDR_SPF_MATCH      (USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH)
  73 describe ENV_AND_HDR_SPF_MATCH  Env and Hdr From used in default SPF WL Match
  74 tflags ENV_AND_HDR_SPF_MATCH    userconf nice noautolearn net
  75
  76 ###########################################################################
  77 # Default welcomelists.  These should be addresses which send mail that is often
  78 # tagged (incorrectly) as spam; it also helps that they be addresses of big
  79 # companies with lots of lawyers, so if spammers impersonate them, they'll get
  80 # into big trouble, so it doesn't provide a shortcut around SpamAssassin.
  81 #
  82 # Whitelist and blacklist addresses are now file-glob-style patterns, so
  83 # "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
  84 #
  85 # Please do not add unmoderated public mailing lists here.  They are
  86 # too easily abused by spammers.
  87
  88 if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
  89
  90 def_welcomelist_from_spf   *@nytimes.com
  91 def_welcomelist_from_spf   *@amazon.com
  92 def_welcomelist_from_spf   *@amazon.co.uk
  93 def_welcomelist_from_spf   *@*.amazon.co.uk
  94 def_welcomelist_from_spf   *@ora.com
  95 def_welcomelist_from_spf   *@*.ora.com
  96 def_welcomelist_from_spf   *@mypoints.com
  97 def_welcomelist_from_spf   *@*.mypoints.com
  98 def_welcomelist_from_spf   *@paypal.com
  99 def_welcomelist_from_spf   *@ebay.com
 100 def_welcomelist_from_spf   *@foolsubs.com
 101 def_welcomelist_from_spf   *@match.com
 102
 103 # bugtraq: can contain malicious Javascript etc.
 104 def_welcomelist_from_spf   *@securityfocus.com
 105
 106 def_welcomelist_from_spf   *@mediaunspun.imakenews.net
 107
 108 # sender of Cringley newsletter
 109 def_welcomelist_from_spf   *@bdcimail.com
 110
 111 # Silicon.com newslettters - we see thousands of these
 112 def_welcomelist_from_spf   *@silicon.com
 113
 114 # C|Net news.com newsletters
 115 def_welcomelist_from_spf   *@newsletter.online.com
 116
 117 # bug 1348
 118 def_welcomelist_from_spf   *@enews.buy.com
 119 def_welcomelist_from_spf   *@palm.m0.net
 120 def_welcomelist_from_spf   *@handspring.4at1.com
 121
 122 endif
 123
 124
 125 ###
 126 ### For <4.0 compatibility
 127 ###
 128
 129 if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
 130
 131 def_whitelist_from_spf   *@nytimes.com
 132 def_whitelist_from_spf   *@amazon.com
 133 def_whitelist_from_spf   *@amazon.co.uk
 134 def_whitelist_from_spf   *@*.amazon.co.uk
 135 def_whitelist_from_spf   *@ora.com
 136 def_whitelist_from_spf   *@*.ora.com
 137 def_whitelist_from_spf   *@mypoints.com
 138 def_whitelist_from_spf   *@*.mypoints.com
 139 def_whitelist_from_spf   *@paypal.com
 140 def_whitelist_from_spf   *@ebay.com
 141 def_whitelist_from_spf   *@foolsubs.com
 142 def_whitelist_from_spf   *@match.com
 143
 144 # bugtraq: can contain malicious Javascript etc.
 145 def_whitelist_from_spf   *@securityfocus.com
 146
 147 def_whitelist_from_spf   *@mediaunspun.imakenews.net
 148
 149 # sender of Cringley newsletter
 150 def_whitelist_from_spf   *@bdcimail.com
 151
 152 # Silicon.com newslettters - we see thousands of these
 153 def_whitelist_from_spf   *@silicon.com
 154
 155 # C|Net news.com newsletters
 156 def_whitelist_from_spf   *@newsletter.online.com
 157
 158 # bug 1348
 159 def_whitelist_from_spf   *@enews.buy.com
 160 def_whitelist_from_spf   *@palm.m0.net
 161 def_whitelist_from_spf   *@handspring.4at1.com
 162
 163 endif
 164
 165 ###
 166 ###
 167 ###
 168
 169 endif # Mail::SpamAssassin::Plugin::SPF
 170