sb-blacklists.rc

这是一个从音频信号里提取特征参量的程序

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXDOMAIN ?? example.com
 * $!FOURTHEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${SECONDEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${THIRDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXDOMAIN}.dsn.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FOURTHEXDOMAIN} is in rfc-ignorant.org (rejects bounces)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# rfc-ignorant.org -- invalid whois information for IP block
:0
* RFCIPWHOISCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.ipwhois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.6
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in rfc-ignorant.org (invalid IP whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.ipwhois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.6
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in rfc-ignorant.org (invalid IP whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.ipwhois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.6
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in rfc-ignorant.org (invalid IP whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.ipwhois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.6
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in rfc-ignorant.org (invalid IP whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# rfc-ignorant.org -- no postmaster@ address
:0
* RFCPOSTMASTERCHECK ?? yes
{
 :0
 * $!FIRSTEXDOMAIN ?? example.com
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXDOMAIN}.postmaster.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.3
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FIRSTEXDOMAIN} is in rfc-ignorant.org (No postmaster@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXDOMAIN ?? example.com
 * $!SECONDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXDOMAIN}.postmaster.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.3
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${SECONDEXDOMAIN} is in rfc-ignorant.org (no postmaster@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXDOMAIN ?? example.com
 * $!THIRDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!THIRDEXDOMAIN ?? ${SECONDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXDOMAIN}.postmaster.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.3
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${THIRDEXDOMAIN} is in rfc-ignorant.org (no postmaster@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXDOMAIN ?? example.com
 * $!FOURTHEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${SECONDEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${THIRDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXDOMAIN}.postmaster.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.3
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FOURTHEXDOMAIN} is in rfc-ignorant.org (no postmaster@ email address)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# rfc-ignorant.org -- invalid whois information for domain
:0
* RFCWHOISCHECK ?? yes
{
 :0
 * $!FIRSTEXDOMAIN ?? example.com
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXDOMAIN}.whois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FIRSTEXDOMAIN} is in rfc-ignorant.org (invalid domain whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXDOMAIN ?? example.com
 * $!SECONDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXDOMAIN}.whois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${SECONDEXDOMAIN} is in rfc-ignorant.org (invalid domain whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXDOMAIN ?? example.com
 * $!THIRDEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!THIRDEXDOMAIN ?? ${SECONDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXDOMAIN}.whois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${THIRDEXDOMAIN} is in rfc-ignorant.org (invalid domain whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXDOMAIN ?? example.com
 * $!FOURTHEXDOMAIN ?? ${FIRSTEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${SECONDEXDOMAIN}
 * $!FOURTHEXDOMAIN ?? ${THIRDEXDOMAIN}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXDOMAIN}.whois.rfc-ignorant.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: ${FOURTHEXDOMAIN} is in rfc-ignorant.org (invalid domain whois)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# RSL (Relay StopList) Check
:0
* RSLCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.relays.visi.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in the RSL"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# Spamcop.net Check
:0
* SPAMCOPCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.bl.spamcop.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in SpamCop"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.bl.spamcop.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in SpamCop"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.bl.spamcop.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in SpamCop"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.bl.spamcop.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in SpamCop"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# SpamHaus.org Check
:0
* SPAMHAUSORGCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.sbl.spamhaus.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in SpamHaus.org"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.sbl.spamhaus.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in SpamHaus.org"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.sbl.spamhaus.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in SpamHaus.org"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.sbl.spamhaus.org` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in SpamHaus.org"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# SPEWS (Spam Prevention Early Warning List) Check
:0
* SPEWSCHECK ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.spews.relays.osirusoft.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in SPEWS"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.spews.relays.osirusoft.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in SPEWS"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.spews.relays.osirusoft.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in SPEWS"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.spews.relays.osirusoft.com` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in SPEWS"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# WireHub Dialups
:0
* WIREHUBDIALUP ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.dynablock.wirehub.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in WireHub (Dial-ups)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}


# WireHub Spam Sources
:0
* WIREHUBSPAMSOURCE ?? yes
{
 :0
 * $!FIRSTEXIP ?? 000.000.000.000
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FIRSTEXREVIP}.blackholes.wirehub.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FIRSTEXIP} is in WireHub (Spam Source)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!SECONDEXIP ?? 000.000.000.000
 * $!SECONDEXIP ?? ${FIRSTEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${SECONDEXREVIP}.blackholes.wirehub.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${SECONDEXIP} is in WireHub (Spam Source)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!THIRDEXIP ?? 000.000.000.000
 * $!THIRDEXIP ?? ${FIRSTEXIP}
 * $!THIRDEXIP ?? ${SECONDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${THIRDEXREVIP}.blackholes.wirehub.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${THIRDEXIP} is in WireHub (Spam Source)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }

 :0
 * $!FOURTHEXIP ?? 000.000.000.000
 * $!FOURTHEXIP ?? ${FIRSTEXIP}
 * $!FOURTHEXIP ?? ${SECONDEXIP}
 * $!FOURTHEXIP ?? ${THIRDEXIP}
 {
  :0
  { REVCHECKIP=`${NSLOOKUP} ${FOURTHEXREVIP}.blackholes.wirehub.net` }

  :0
  * $ REVCHECKIP ?? 127\.0\.0\.2
  {
   :0 f
   | ${FORMAIL} -A"X-SBRule: IP ${FOURTHEXIP} is in WireHub (Spam Source)"

   :0
   { BLOCKTAG=yes }

   :0
   * BLOCKREPLY ?? NOTIFY
   { BLOCKTHIS=yes }
  }
 }
}