sb-blacklists.rc

这是一个从音频信号里提取特征参量的程序

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in monkeys.com (insecure web form)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.formmail.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in monkeys.com (insecure web form)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.formmail.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in monkeys.com (insecure web form)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# Monkeys.com Open Proxy blacklist Check
:0
* MONKEYPROXYCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.proxies.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in monkeys.com (open proxy)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.proxies.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in monkeys.com (open proxy)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.proxies.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in monkeys.com (open proxy)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.proxies.relays.monkeys.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in monkeys.com (open proxy)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# ORDB (Open Relay DataBase) check
:0
* ORDBCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
#  :0
#  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.relays.ordb.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in the ORDB"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# Osirusoft Blacklists Check
#
# Osirusoft has a bunch of different blacklists, and
# the SpamBouncer can be configured to check any arbitrary
# number of them.  This recipe is written to minimize the number
# of hits on the Osirusoft site itself.

:0
{ RUNCHECK=no }

:0
* OSDIALCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSHAVENCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSOOLCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSOPSCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSORCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSSHRCHECK ?? yes
{ RUNCHECK=yes }

:0
* OSSPAMCHECK ?? yes
{ RUNCHECK=yes }

:0
* RUNCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.relays.osirusoft.com` }

  :0
  * OSORCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.2
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (open relay)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSDIALCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.3
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (dial-ups)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSSPAMCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.4
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (spam source)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSSHRCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.5
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (multi-stage open relay)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSHAVENCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.6
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (haven domain)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOOLCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.7
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (opt-out list)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOPSCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.9
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in Osirusoft (open proxy)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.relays.osirusoft.com` }

  :0
  * OSSPAMCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.4
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in Osirusoft (spam source)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSHAVENCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.6
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in Osirusoft (haven domain)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOOLCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.7
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in Osirusoft (opt-out list)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOPSCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.9
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in Osirusoft (open proxy)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.relays.osirusoft.com` }

  :0
  * OSSPAMCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.4
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in Osirusoft (spam source)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSHAVENCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.6
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in Osirusoft (haven domain)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOOLCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.7
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in Osirusoft (opt-out list)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOPSCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.9
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in Osirusoft (open proxy)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.relays.osirusoft.com` }

  :0
  * OSSPAMCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.4
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in Osirusoft (spam source)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSHAVENCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.6
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in Osirusoft (haven domain)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOOLCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.7
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in Osirusoft (opt-out list)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }

  :0
  * OSOPSCHECK ?? yes
  {
   :0
   * $ REVCHECKIP ?? 127\.0\.0\.9
   {
    :0 f
    | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in Osirusoft (open proxy)"

    :0
    { BLOCKTAG=yes }

    :0
    * BLOCKREPLY ?? NOTIFY
    { BLOCKTHIS=yes }
   }
  }
 }
}


# rfc-ignorant.org -- no abuse@ address
:0
* RFCABUSECHECK ?? yes
{
 :0
 * $!FIRSTEXDOMAIN ?? example.com
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXDOMAIN}.abuse.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FIRSTEXDOMAIN} is in rfc-ignorant.org (No abuse@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXDOMAIN ?? example.com
 * $!SECONDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXDOMAIN}.abuse.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${SECONDEXDOMAIN} is in rfc-ignorant.org (no abuse@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXDOMAIN ?? example.com
 * $!THIRDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!THIRDEXDOMAIN ?? ${SECONDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXDOMAIN}.abuse.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${THIRDEXDOMAIN} is in rfc-ignorant.org (no abuse@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXDOMAIN ?? example.com
 * $!FOURTHEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${SECONDEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${THIRDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXDOMAIN}.abuse.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FOURTHEXDOMAIN} is in rfc-ignorant.org (no abuse@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# rfc-ignorant.org -- rejects From <> (bounced email messages)
:0
* RFCDSNCHECK ?? yes
{
 :0
 * $!FIRSTEXDOMAIN ?? example.com
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXDOMAIN}.dsn.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FIRSTEXDOMAIN} is in rfc-ignorant.org (rejects bounces)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXDOMAIN ?? example.com
 * $!SECONDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXDOMAIN}.dsn.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${SECONDEXDOMAIN} is in rfc-ignorant.org (rejects bounces)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXDOMAIN ?? example.com
 * $!THIRDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!THIRDEXDOMAIN ?? ${SECONDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXDOMAIN}.dsn.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${THIRDEXDOMAIN} is in rfc-ignorant.org (rejects bounces)"