Mercurial > dnsbl

comparison dnsbl.conf @ 330:b5b93a7e1e6d

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
ignore envelope-from based whitelisting if we have a dkim requirement for that domain
author Carl Byington <carl@five-ten-sg.com>
date Mon, 19 Dec 2016 12:05:06 -0800
parents 9f8411f3919c
children 9800776436b9
comparison
equal deleted inserted replaced
329:c9932c4d8053 330:b5b93a7e1e6d
52 dnswl_list dnswl.org; 52 dnswl_list dnswl.org;
53 require_rdns yes; 53 require_rdns yes;
54 54
55 content on { 55 content on {
56 dkim_signer { 56 dkim_signer {
57 sendgrid.me black; 57 // we could add consumer facing domains like yahoo.com, aol.com, etc
58 weather.com white; 58 // here, IF you really want to accept all the mail from such folks.
59 five-ten-sg.com white;
60 some.spammer black; // reject if signed by them
59 }; 61 };
60 62
61 dkim_from { 63 dkim_from {
62 yahoo.com require_signed yahoo.com; 64 // cannot really add consumer facing domains like yahoo.com, aol.com, etc
63 gmail.com signed_white gmail.com; 65 // here, since such messages from humans might be sent via mailing lists
64 girlscoutsla.org signed_white girlscoutsla.ccsend.com; 66 // that will break the dkim signature. But this works well for commonly
67 // forged bulk senders like ebay and paypal.
68 some.spammer require_signed some.spammer // reject if not signed
69
70 billpay.bankofamerica.com require_signed billpay.bankofamerica.com;
71 ealerts.bankofamerica.com require_signed ealerts.bankofamerica.com;
72 ebay.com require_signed ebay.com;
73 facebookmail.com require_signed facebookmail.com;
74 healthcare.gov require_signed healthcare.gov;
75 linkedin.com require_signed linkedin.com;
76 paypal.com require_signed paypal.com;
77 service.capitalone.com require_signed capitalone.com;
78 support.facebook.com require_signed support.facebook.com;
79 ups.com require_signed ups.com;
80 wellsfargo.com require_signed wellsfargo.com;
65 }; 81 };
66 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 82 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
67 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.surbl.org/surbl-analysis?d=%s"; 83 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.surbl.org/surbl-analysis?d=%s";
68 #uribl multi.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s"; 84 #uribl multi.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
69 #uribl dbl.spamhaus.org "Mail containing %s rejected - dbl; see http://www.spamhaus.org/query/domain?domain=%s"; 85 #uribl dbl.spamhaus.org "Mail containing %s rejected - dbl; see http://www.spamhaus.org/query/domain?domain=%s";