policy/protocols/smtp/blocklists.bro

SMTP

Watch for various SPAM blocklist URLs in SMTP error messages.

Namespace:SMTP
Imports:base/frameworks/notice, base/protocols/smtp
Source File:/scripts/policy/protocols/smtp/blocklists.bro

Summary

Redefinitions

Notice::Type: enum  

Detailed Interface

Options

SMTP::blocklist_error_messages
Type:pattern
Attributes:&redef
Default:
/((((((((((((((^?(spamhaus\.org\/)$?)|(^?(sophos\.com\/security\/)$?))|(^?(spamcop\.net\/bl)$?))|(^?(cbl\.abuseat\.org\/)$?))|(^?(sorbs\.net\/)$?))|(^?(bsn\.borderware\.com\/)$?))|(^?(mail-abuse\.com\/)$?))|(^?(b\.barracudacentral\.com\/)$?))|(^?(psbl\.surriel\.com\/)$?))|(^?(antispam\.imp\.ch\/)$?))|(^?(dyndns\.com\/.*spam)$?))|(^?(rbl\.knology\.net\/)$?))|(^?(intercept\.datapacket\.net\/)$?))|(^?(uceprotect\.net\/)$?))|(^?(hostkarma\.junkemailfilter\.com\/)$?)/
Copyright 2016, The Bro Project. Last updated on October 17, 2017. Created using Sphinx 1.5.2.