policy/protocols/smtp/blocklists.bro

SMTP

Watch for various SPAM blocklist URLs in SMTP error messages.

Namespace:SMTP Imports:base/frameworks/notice, base/protocols/smtp Source File:/scripts/policy/protocols/smtp/blocklists.bro

Summary

Runtime Options

SMTP::blocklist_error_messages: pattern &redef

Redefinitions

Notice::Type: enum

Detailed Interface

Runtime Options

SMTP::blocklist_error_messages

Type:pattern Attributes:&redef Default:

/^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?(spamhaus\.org\/)$?)|(^?(sophos\.com\/security\/)$?))$?)|(^?(spamcop\.net\/bl)$?))$?)|(^?(cbl\.abuseat\.org\/)$?))$?)|(^?(sorbs\.net\/)$?))$?)|(^?(bsn\.borderware\.com\/)$?))$?)|(^?(mail-abuse\.com\/)$?))$?)|(^?(b\.barracudacentral\.com\/)$?))$?)|(^?(psbl\.surriel\.com\/)$?))$?)|(^?(antispam\.imp\.ch\/)$?))$?)|(^?(dyndns\.com\/.*spam)$?))$?)|(^?(rbl\.knology\.net\/)$?))$?)|(^?(intercept\.datapacket\.net\/)$?))$?)|(^?(uceprotect\.net\/)$?))$?)|(^?(hostkarma\.junkemailfilter\.com\/)$?))$?/