mirror of
https://github.com/FAUSheppy/no-secrets-athq-ansible
synced 2025-12-09 22:38:33 +01:00
77 lines
2.3 KiB
CFEngine3
77 lines
2.3 KiB
CFEngine3
ifplugin Mail::SpamAssassin::Plugin::AskDNS
|
|
|
|
askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none;/
|
|
askdns __DMARC_POLICY_QUAR _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=quarantine;/
|
|
askdns __DMARC_POLICY_REJECT _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=reject;/
|
|
|
|
meta DMARC_REJECT !(DKIM_VALID_AU || SPF_PASS) && __DMARC_POLICY_REJECT
|
|
score DMARC_REJECT 10
|
|
|
|
meta DMARC_QUAR !(DKIM_VALID_AU || SPF_PASS) && __DMARC_POLICY_QUAR
|
|
score DMARC_QUAR 3
|
|
|
|
meta DMARC_NONE !(DKIM_VALID_AU || SPF_PASS) && __DMARC_POLICY_NONE
|
|
score DMARC_NONE 2
|
|
|
|
endif # Mail::SpamAssassin::Plugin::AskDNS
|
|
|
|
|
|
score DKIM_INVALID 5
|
|
|
|
header LOCAL_FROM_TLD_BASE From =~ /@[a-z0-9\-\.]+\.*/i
|
|
describe LOCAL_FROM_TLD_BASE Match any Domain
|
|
score LOCAL_FROM_TLD_BASE 2
|
|
|
|
header LOCAL_FROM_TLD From =~ /@[a-z0-9\-\.]+\.(de|com|org)[>\s]*\z/i
|
|
describe LOCAL_FROM_TLD Match standard domains
|
|
score LOCAL_FROM_TLD -3
|
|
|
|
header OBFUSCATED_FROM_TLD From =~ /@[a-z0-9\-\.]+\.(de|com|org)\..+/i
|
|
describe OBFUSCATED_FROM_TLD Obfuscation attempt in FROM TLD
|
|
score OBFUSCATED_FROM_TLD 5
|
|
|
|
header MAIL_CHIMP_MARKETING Return-Path =~ /@.*bounce-mc.+/i
|
|
describe MAIL_CHIMP_MARKETING Mailchimp Marketing Lists
|
|
score MAIL_CHIMP_MARKETING 5
|
|
|
|
header UTF_BASE64_SUBJECT Subject =~ /.*=\?utf-[0-9]+\?.*/i
|
|
describe UTF_BASE64_SUBJECT UTF_X base64 encoded subject
|
|
score UTF_BASE64_SUBJECT 1
|
|
|
|
score HTML_MESSAGE 1
|
|
score URIBL_ABUSE_SURBL 5
|
|
score HTML_IMAGE_ONLY_24 2
|
|
score HTML_IMAGE_ONLY_28 2
|
|
score HTML_IMAGE_RATIO_02 2
|
|
score BAYES_999 0.8
|
|
debug 1
|
|
|
|
# Bayes
|
|
use_bayes 1
|
|
use_bayes_rules 1
|
|
|
|
bayes_auto_learn 0
|
|
bayes_file_mode 0660
|
|
bayes_path /etc/spamassassin/bayes/bayes
|
|
bayes_file_mode 0770
|
|
|
|
bayes_min_ham_num 40
|
|
bayes_min_spam_num 40
|
|
|
|
bayes_ignore_header X-Bogosity
|
|
bayes_ignore_header X-Spam-Flag
|
|
bayes_ignore_header X-Spam-Status
|
|
include /usr/share/spamassassin/
|
|
|
|
required_hits 3.1
|
|
|
|
clear_report_template
|
|
report Hello!
|
|
report This is the atlantis-mailsystem reporting in. This mail is likely spam. Proceed with maximum caution.
|
|
report
|
|
report Content analysis details: (_SCORE_ points, _REQD_ required)
|
|
report
|
|
report " pts rule name description"
|
|
report ---- ---------------------- --------------------------------------------------
|
|
report _SUMMARY_
|