policy/protocols/smtp/blocklists.bro

SMTP

Watch for various SPAM blocklist URLs in SMTP error messages.

Namespace:SMTP Imports:base/frameworks/notice, base/protocols/smtp Source File:/scripts/policy/protocols/smtp/blocklists.bro

Summary

Options

SMTP::blocklist_error_messages: pattern &redef

Redefinitions

Notice::Type: enum

Detailed Interface

Options

SMTP::blocklist_error_messages

Type:pattern Attributes:&redef Default:

/((((((((((((((^?(spamhaus\.org\/)$?)|(^?(sophos\.com\/security\/)$?))|(^?(spamcop\.net\/bl)$?))|(^?(cbl\.abuseat\.org\/)$?))|(^?(sorbs\.net\/)$?))|(^?(bsn\.borderware\.com\/)$?))|(^?(mail-abuse\.com\/)$?))|(^?(b\.barracudacentral\.com\/)$?))|(^?(psbl\.surriel\.com\/)$?))|(^?(antispam\.imp\.ch\/)$?))|(^?(dyndns\.com\/.*spam)$?))|(^?(rbl\.knology\.net\/)$?))|(^?(intercept\.datapacket\.net\/)$?))|(^?(uceprotect\.net\/)$?))|(^?(hostkarma\.junkemailfilter\.com\/)$?)/