policy/protocols/smtp/blocklists.bro

SMTP

Watch for various SPAM blocklist URLs in SMTP error messages.

Namespace:SMTP
Imports:base/frameworks/notice, base/protocols/smtp
Source File:/scripts/policy/protocols/smtp/blocklists.bro

Summary

Redefinitions

Notice::Type: enum  

Detailed Interface

Runtime Options

SMTP::blocklist_error_messages
Type:pattern
Attributes:&redef
Default:
/^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?((^?(spamhaus\.org\/)$?)|(^?(sophos\.com\/security\/)$?))$?)|(^?(spamcop\.net\/bl)$?))$?)|(^?(cbl\.abuseat\.org\/)$?))$?)|(^?(sorbs\.net\/)$?))$?)|(^?(bsn\.borderware\.com\/)$?))$?)|(^?(mail-abuse\.com\/)$?))$?)|(^?(b\.barracudacentral\.com\/)$?))$?)|(^?(psbl\.surriel\.com\/)$?))$?)|(^?(antispam\.imp\.ch\/)$?))$?)|(^?(dyndns\.com\/.*spam)$?))$?)|(^?(rbl\.knology\.net\/)$?))$?)|(^?(intercept\.datapacket\.net\/)$?))$?)|(^?(uceprotect\.net\/)$?))$?)|(^?(hostkarma\.junkemailfilter\.com\/)$?))$?/
Copyright 2016, The Bro Project. Last updated on September 21, 2018. Created using Sphinx 1.7.5.