Port Spam filter to Rust - part 8

This commit is contained in:
mdecimus
2024-12-17 18:01:12 +01:00
parent 3288bd6e97
commit 38fa0291e2
42 changed files with 1217 additions and 8850 deletions

View File

@@ -1,104 +0,0 @@
#
# SPDX-FileCopyrightText: 2020 Stalwart Labs Ltd <hello@stalw.art>
#
# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
#
import os
# Define the scripts and their component files
scripts = {
"spam-filter": [
"config.sieve",
"prelude.sieve",
"from.sieve",
"recipient.sieve",
"subject.sieve",
"replyto.sieve",
"date.sieve",
"messageid.sieve",
"received.sieve",
"headers.sieve",
"bounce.sieve",
"html.sieve",
"mime.sieve",
"dmarc.sieve",
"ip.sieve",
"helo.sieve",
"replies_in.sieve",
"spamtrap.sieve",
"bayes_classify.sieve",
"url.sieve",
"rbl.sieve",
"pyzor.sieve",
"llm.sieve",
"composites.sieve",
"scores.sieve",
"reputation.sieve",
"epilogue.sieve"
],
"track-replies": [
"config.sieve",
"replies_out.sieve"
],
"greylist": [
"config.sieve",
"greylist.sieve"
],
"train": [
"config.sieve",
"train.sieve"
]
}
script_names = {
"spam-filter" : "Spam Filter",
"track-replies" : "Track Replies",
"greylist" : "Greylisting",
"train": "Train Bayes Classifier"
}
maps = ["spam_config.map",
"scores.map",
"allow_dmarc.list",
"allow_domains.list",
"allow_spf_dkim.list",
"domains_disposable.list",
"domains_free.list",
"mime_types.map",
"url_redirectors.list"]
def read_and_concatenate(files):
content = ""
for file in files:
with open(os.path.join("./spamfilter/scripts", file), "r", encoding="utf-8") as f:
content += "\n#### Script " + file + " ####\n\n"
content += f.read() + "\n"
return content
def read_file(file):
with open(file, "r", encoding="utf-8") as f:
return f.read() + "\n"
def build_spam_filters(scripts):
spam_filter = "[version]\nspam-filter = \"1.2\"\n\n"
for script_name, file_list in scripts.items():
script_content = read_and_concatenate(file_list).replace("'''", "\\'\\'\\'")
script_description = script_names[script_name]
spam_filter += f"[sieve.trusted.scripts.{script_name}]\nname = \"{script_description}\"\ncontents = '''\n{script_content}'''\n\n"
spam_filter += "\n[lookup]\n"
for map in maps :
with open(os.path.join("./spamfilter/maps", map), "r", encoding="utf-8") as f:
spam_filter += f.read() + "\n"
return spam_filter
def main():
spam_filter = build_spam_filters(scripts)
with open("spamfilter.toml", "w", encoding="utf-8") as toml_file:
toml_file.write(spam_filter)
print("Stalwart TOML configuration files have been generated.")
if __name__ == "__main__":
main()

View File

@@ -1,786 +0,0 @@
spam-dmarc = {"18f.gov",
"1password.com",
"2gis.com",
"4chan.org",
"4pda.ru",
"9-11commission.gov",
"911.gov",
"aberdeenshire.gov.uk",
"abilityone.gov",
"absolutbank.ru",
"access-board.gov",
"acquisition.gov",
"acus.gov",
"ada.gov",
"adf.gov",
"adidas.co.kr",
"adidas.com.au",
"adidas.com.br",
"adidas.com.hk",
"adidas.fi",
"adidas.fr",
"admongo.gov",
"adobe.dk",
"adobe.es",
"adobeawards.com",
"adp.com",
"advice.hmrc.gov.uk",
"aerocivil.gov.co",
"afreximbank.com",
"agingstats.gov",
"agro.ru",
"ahcpr.gov",
"aids.gov",
"airbnb.co.uk",
"airbnb.com",
"airbnb.com.tr",
"airbnb.cz",
"airbnb.de",
"airbnb.fi",
"airbnb.fr",
"airbnb.pl",
"airbnb.ru",
"airbnb.se",
"airnow.gov",
"airtel.in",
"alfabank.com",
"alfabank.ru",
"alfastrah.ru",
"alibaba.com",
"aliexpress.com",
"alipay.com",
"alkupone.ru",
"alzheimers.gov",
"amazon.co.uk",
"amazon.com",
"amazon.com.br",
"amberalert.gov",
"americanexpress.com",
"ameslab.gov",
"angus.gov.uk",
"anidub.com",
"annapolis.gov",
"anstaskforce.gov",
"apple.com.au",
"apple.com.cn",
"apps.gov",
"archives.gov",
"arctic.gov",
"arionbanki.is",
"asg.com",
"asic.gov.au",
"askona.ru",
"asos.com",
"assist.ru",
"atf.gov",
"avast.com",
"avg.com",
"avito.ru",
"avtoradio.ru",
"axisbank.com",
"badoo.com",
"baltbank.ru",
"bank.lv",
"banki.ru",
"bankofamerica.com",
"barclaycard.co.uk",
"barclays.co.uk",
"barclays.com",
"battle.net",
"beeline.kz",
"beeline.ru",
"benefits.gov",
"betfaq.ru",
"biglion.ru",
"binary.com",
"binbank.ru",
"bioethics.gov",
"biometrics.gov",
"biopreferred.gov",
"birminghampost.net",
"bishopsmove.com",
"bitbank.cc",
"bjs.gov",
"blizzard.com",
"blog.gov.uk",
"bls.gov",
"bluestarindia.com",
"boemre.gov",
"bolsover.gov.uk",
"bolton.gov.uk",
"booking.com",
"bookmate.com",
"books.ru",
"bournemouth.gov.uk",
"box.com",
"bpa.gov",
"brandshop.ru",
"bridgend.gov.uk",
"brighton-hove.gov.uk",
"britishembassy.gov.uk",
"broadbandmap.gov",
"bromley.gov.uk",
"bts.gov",
"business.gov",
"caerphilly.gov.uk",
"caixa.gov.br",
"cambridge-news.co.uk",
"campaign.gov.uk",
"cancer.gov",
"cannockchasedc.gov.uk",
"capitalone.co.uk",
"cardiff.gov.uk",
"carecredit.com",
"cbp.gov",
"cdfifund.gov",
"centralbedfordshire.gov.uk",
"ceredigion.gov.uk",
"cesg.gov.uk",
"cfda.gov",
"cfo.gov",
"challenge.gov",
"change.org",
"chase.com",
"chcoc.gov",
"childstats.gov",
"cio.gov",
"circle.com",
"citibank.ae",
"citibank.co.in",
"citibank.co.uk",
"citibank.com.my",
"citibank.hu",
"citibank.pl",
"cloud.gov",
"cloudflare.com",
"cms.gov",
"co-operativebank.co.uk",
"colgate.com.br",
"collegedrinkingprevention.gov",
"companies-house.gov.uk",
"comuneap.gov.it",
"conab.gov.br",
"concerts.com",
"consultant.ru",
"contact-sys.com",
"copeland.gov.uk",
"cosla.gov.uk",
"courtservice.gov.uk",
"coventry.gov.uk",
"cre.gov.uk",
"csosa.gov",
"cuidadodesalud.gov",
"culturarecreacionydeporte.gov.co",
"customs.gov.my",
"customs.gov.ua",
"cybercrime.gov",
"dailypost.co.uk",
"danskebank.dk",
"danskebank.fi",
"danskebank.ie",
"danskebank.no",
"dartford.gov.uk",
"dartmoor.gov.uk",
"dataprotection.gov.uk",
"daventrydc.gov.uk",
"dellin.ru",
"denbighshire.gov.uk",
"deutsche-bank.de",
"deutschebank.be",
"deutschebank.co.in",
"dh.gov.uk",
"dhl.com",
"dhs.gov",
"diablo3.com",
"digital.gov",
"digitalgov.gov",
"digitalliteracy.gov",
"disability.gov",
"disability.gov.uk",
"dnfsb.gov",
"docker.com",
"docusign.net",
"doe.gov",
"doioig.gov",
"dol.gov",
"doleta.gov",
"domofond.ru",
"drought.gov",
"drugabuse.gov",
"dsns.gov.ua",
"dtv.gov",
"dudley.gov.uk",
"dyslexiaida.org",
"e-boks.dk",
"e-verify.gov",
"eastdunbarton.gov.uk",
"eaststaffsbc.gov.uk",
"eastsuffolk.gov.uk",
"ebay.be",
"ebay.ca",
"ebay.ch",
"ebay.co.uk",
"ebay.com",
"ebay.com.au",
"ebay.com.cn",
"ebay.de",
"ebay.es",
"ebay.eu",
"ebay.fr",
"ebay.in",
"ebay.it",
"ebay.se",
"economy.gov.tr",
"econsumer.gov",
"ed.gov",
"eftps.gov",
"ehsni.gov.uk",
"eia.gov",
"ejob.gov.tw",
"elance.com",
"eldorado.ru",
"email-ee.co.uk",
"email.tektorg.ru",
"emarsys.com",
"ems.gov",
"energystar.gov",
"erewash.gov.uk",
"esetnod32.ru",
"essex-fire.gov.uk",
"eubank.kz",
"evernote.com",
"everychildmatters.gov.uk",
"evus.gov",
"exist.ru",
"expediamail.com",
"facebook.com",
"facebookmail.com",
"fbi.gov",
"fcc.gov",
"fco.gov.uk",
"fdic.gov",
"feb.gov",
"federalreserve.gov",
"fedex.com",
"fedramp.gov",
"fedshirevets.gov",
"feedthefuture.gov",
"fema.gov",
"ferc.gov",
"fhfa.gov",
"fhfaoig.gov",
"fife.gov.uk",
"financialresearch.gov",
"financialstability.gov",
"firstbankpb.bank",
"firstbankpb.com",
"firstnet.gov",
"firstresponder.gov",
"fishwatch.gov",
"fitness.gov",
"flagma.ua",
"flamp.ru",
"fletc.gov",
"fmc.gov",
"fmcs.gov",
"foia.gov",
"food.gov.uk",
"force.com",
"fordlibrarymuseum.gov",
"foreignassistance.gov",
"foreigntrade.gov.tr",
"franklinwi.gov",
"ftc.gov",
"ftccomplaintassistant.gov",
"gamereactor.dk",
"gap.com",
"garant.ru",
"geekbrains.ru",
"geektimes.ru",
"getsmartaboutdrugs.gov",
"gibraltar.gov.uk",
"gitlab.com",
"globalentry.gov",
"globalhealth.gov",
"globe.gov",
"gloucestershire.gov.uk",
"goes-r.gov",
"gosuslugi.ru",
"gov.uk",
"groupon.es",
"groupon.hk",
"groupon.it",
"gsa.gov",
"gsaadvantage.gov",
"gsaauctions.gov",
"gsaig.gov",
"gtbank.com",
"guideline.gov",
"guidelines.gov",
"gwynedd.gov.uk",
"habr.com",
"hambleton.gov.uk",
"harp.gov",
"hawaiicounty.gov",
"hdfcbank.com",
"hdrezka.ag",
"healthcare.gov",
"healthypeople.gov",
"hertfordshire.gov.uk",
"hh.kz",
"hh.ru",
"highland.gov.uk",
"highwaycode.gov.uk",
"hillingdon.gov.uk",
"hiv.gov",
"hmrc.gov.uk",
"homeoffice.gov.uk",
"homesales.gov",
"hotels.com",
"hounslow.gov.uk",
"howto.gov",
"hru.gov",
"huduser.gov",
"hurricanes.gov",
"iba.gov.au",
"ice.gov",
"idmanagement.gov",
"ikea.ch",
"ikea.co.uk",
"ikea.com",
"ikea.de",
"ikea.fr",
"ikea.gr",
"ikea.nl",
"ikea.pl",
"imgur.com",
"incometaxindiaefiling.gov.in",
"ing.com",
"inl.gov",
"inlandrevenue.gov.uk",
"insider.co.uk",
"insolvency.gov.uk",
"instagram.com",
"insurekidsnow.gov",
"invasivespeciesinfo.gov",
"investor.gov",
"irda.gov.in",
"itunes.com",
"jccbi.gov",
"jd.ru",
"jet.com",
"jimmycarterlibrary.gov",
"job.com",
"johnsonsbaby.co.uk",
"joybuy.com",
"jpmorgan.com",
"jpmorgansecurities.com",
"judiciary.gov.uk",
"justice.gov",
"justice.gov.az",
"justice.gov.uk",
"jyskebank.dk",
"kassy.ru",
"kent.gov.uk",
"keys.openpgp.org",
"kids.gov",
"kingston.gov.uk",
"kivra.com",
"klarna.com",
"klarna.se",
"kpk.gov.pl",
"lacoast.gov",
"landsbanki.is",
"lanl.gov",
"lbhf.gov.uk",
"lcd.gov.uk",
"learningcurve.gov.uk",
"leeds.gov.uk",
"leroymerlin.es",
"lichfielddc.gov.uk",
"lincoln.gov.uk",
"lincolnshire.gov.uk",
"linkedin.com",
"livejournal.com",
"llnl.gov",
"lloydsbank.com",
"locatorplus.gov",
"lostfilm.tv",
"louisvilleco.gov",
"love.ru",
"lufthansa-group.com",
"lufthansa.com",
"mackeeper.com",
"mailgun.net",
"mak.com",
"mandtbank.com",
"mcc.gov",
"mcga.gov.uk",
"mchenrycountyil.gov",
"mecknc.gov",
"mediamarkt.se",
"medicaid.gov",
"medicare.gov",
"medium.com",
"megafon.ru",
"megaplan.ru",
"mercadolibre.com.ar",
"mercadolivre.com.br",
"merseyfire.gov.uk",
"merthyr.gov.uk",
"meshok.ru",
"messenger.com",
"microsoft.net",
"middlesbrough.gov.uk",
"midlothian.gov.uk",
"mil.ru",
"mincit.gov.co",
"minhacienda.gov.co",
"minsvyaz.ru",
"mintic.gov.co",
"mirrorfootball.co.uk",
"mkb.ru",
"mlg.ru",
"mlg.tv",
"mns.gov.ua",
"mod.gov.az",
"molisa.gov.vn",
"mos.ru",
"mosoblbank.ru",
"mosreg.ru",
"motinfo.gov.uk",
"movavi.com",
"msha.gov",
"mspb.gov",
"msport.gov.pl",
"murfreesborotn.gov",
"mvideo.ru",
"mxtoolbox.com",
"mymoney.gov",
"myplate.gov",
"myra.gov",
"myshared.ru",
"n-kesteven.gov.uk",
"n-somerset.gov.uk",
"nads.gov.ua",
"nalog.ru",
"namus.gov",
"nasa.gov",
"nationalarchives.gov.uk",
"nationalservice.gov",
"nationsreportcard.gov",
"nbr.gov.bd",
"nbtbank.com",
"ncifcrf.gov",
"ncpw.gov",
"nctb.gov.bd",
"ne-derbyshire.gov.uk",
"nea.gov",
"nelincs.gov.uk",
"neobux.com",
"neolane.net",
"netflix.com",
"newegg.com",
"newmoney.gov",
"nga.gov",
"ngu.gov.ua",
"nhtsa.gov",
"nic.ru",
"nidw.gov.bd",
"nij.gov",
"nio.gov.uk",
"niscc.gov.uk",
"nist.gov",
"nixonlibrary.gov",
"nkh.gov.hu",
"noaa.gov",
"nordea.dk",
"nordea.com",
"nordea.fi",
"nordea.no",
"nordea.se",
"north-ayrshire.gov.uk",
"north-norfolk.gov.uk",
"northlincs.gov.uk",
"norwich.gov.uk",
"notifications.service.gov.uk",
"nottinghamcity.gov.uk",
"nrc-gateway.gov",
"nrc.gov",
"nrel.gov",
"nsf.gov",
"nsopr.gov",
"nsopw.gov",
"nwtrb.gov",
"oculus.com",
"ofcm.gov",
"office.com",
"officemag.ru",
"ok.ru",
"omb.gov",
"ombudsman.gov.tr",
"onedrive.com",
"onguardonline.gov",
"opengl.org",
"openinternet.gov",
"ordsvy.gov.uk",
"ornl.gov",
"oshrc.gov",
"osti.gov",
"oxfordshire.gov.uk",
"ozon.ru",
"paauditor.gov",
"paccar.com",
"paddle8.com",
"pandemicflu.gov",
"passport.gov.uk",
"payeer.com",
"paymentaccuracy.gov",
"paypal-community.com",
"paypal.be",
"paypal.cn",
"paypal.co.il",
"paypal.co.uk",
"paypal.com",
"paypal.com.au",
"paypal.com.br",
"paypal.com.mx",
"paypal.de",
"paypal.dk",
"paypal.es",
"paypal.fr",
"paypal.nl",
"paypal.se",
"pbgc.gov",
"pc.gov.au",
"pch.com",
"penanghill.gov.my",
"pepfar.gov",
"performance.gov",
"pinterest.co.kr",
"pinterest.com",
"pinterest.de",
"pinterest.jp",
"pinterest.se",
"pkc.gov.uk",
"planeta.ru",
"platron.ru",
"plymouth.gov.uk",
"pm.gov.uk",
"pmf.gov",
"pmi.gov",
"pncbank.com",
"pokerstars.com",
"pokerstars.fr",
"pokerstars.it",
"pokerstars.net",
"priorbank.by",
"privatbank.ua",
"prospertx.gov",
"prostocash.com",
"provident.bank",
"psbank.ru",
"psc.gov",
"punjab.gov.in",
"puzzle-english.com",
"qiwi.com",
"qiwi.ru",
"rabota.ru",
"rbkc.gov.uk",
"ready.gov",
"reaganlibrary.gov",
"redbridge.gov.uk",
"reddit.com",
"reebok.es",
"reebok.nl",
"reginfo.gov",
"regulations.gov",
"reisebank.de",
"renfrewshire.gov.uk",
"rentonwa.gov",
"reportband.gov",
"rgs.ru",
"richmond.gov.uk",
"rivers.gov",
"rkn.gov.ru",
"ros.gov.uk",
"roseltorg.ru",
"rostelecom.ru",
"roundrocktexas.gov",
"royalmail.com",
"rozetka.com.ua",
"rt.com",
"rt.ru",
"rushcliffe.gov.uk",
"rutubeinfo.ru",
"sacn.gov.uk",
"safercar.gov",
"samhsa.gov",
"sanmarcostx.gov",
"sberbank.ru",
"sberbank-ast.ru",
"sbir.gov",
"sbis.ru",
"scality.com",
"scdhhs.gov",
"science360.gov",
"sciencebase.gov",
"scijinks.gov",
"sec.gov",
"secretservice.gov",
"section508.gov",
"semnan.ac.ir",
"senate.gov",
"sendgrid.net",
"seniorcorps.gov",
"serpro.gov.br",
"service.gov.uk",
"sftool.gov",
"shetland.gov.uk",
"shropshire-cc.gov.uk",
"shutterstock.com",
"sigtarp.gov",
"sk.ru",
"skat.dk",
"skatteverket.se",
"skbbank.ru",
"skittles.com",
"skydio.com",
"skype.com",
"slideshare.com",
"smart.gov",
"smida.gov.ua",
"smokefree.gov",
"snickers.com",
"solardecathlon.gov",
"sourceforge.net",
"south-ayrshire.gov.uk",
"sovest.ru",
"spbrealty.ru",
"sportmaster.ru",
"squarespace.com",
"sravni.ru",
"srs.gov",
"staffordbc.gov.uk",
"stat.gov.az",
"stedmundsbury.gov.uk",
"sthelens.gov.uk",
"stihl.ru",
"stopalcoholabuse.gov",
"stopfraud.gov",
"studentloans.gov",
"subscribe.ru",
"suffolkcc.gov.uk",
"suncorpbank.com.au",
"sundaymirror.co.uk",
"sunlight.net",
"superjob.ru",
"surestart.gov.uk",
"sutton.gov.uk",
"swansea.gov.uk",
"swift.com",
"symantec.com",
"synologynotification.com",
"taobao.com",
"tatar.ru",
"tauntondeane.gov.uk",
"tda.gov.uk",
"tdk.gov.tr",
"tdscpc.gov.in",
"telework.gov",
"tenders.gov.au",
"textmagic.com",
"tfhrc.gov",
"thebell.io",
"thecoolspot.gov",
"thinkroadsafety.gov.uk",
"tiaabank.com",
"ticketland.ru",
"tinder.com",
"tinkoff.ru",
"tomsk.gov.ru",
"torbay.gov.uk",
"tradingstandards.gov.uk",
"treas.gov",
"trial-sport.ru",
"tsa.gov",
"tst.gov.br",
"tuba.gov.tr",
"turystyka.gov.pl",
"tutu.ru",
"twitch.tv",
"twitter.com",
"twix.com",
"uber.com",
"ucarecdn.com",
"ucrdatatool.gov",
"udall.gov",
"ukvisas.gov.uk",
"ulmart.ru",
"unicor.gov",
"uniras.gov.uk",
"ups.com",
"uralairlines.ru",
"us-cert.gov",
"usa.gov",
"usadf.gov",
"usaid.gov",
"usap.gov",
"uscg.gov",
"usconsulate.gov",
"usmission.gov",
"usphs.gov",
"uspis.gov",
"usps.com",
"usps.gov",
"ustreas.gov",
"utair.ru",
"utkonos.ru",
"vaccines.gov",
"valeofglamorgan.gov.uk",
"verizonwireless.com",
"vigoda.ru",
"visa.co.uk",
"visa.com",
"visa.com.ar",
"visa.com.br",
"visa.com.cn",
"visa.com.tw",
"visa.pl",
"vistacampus.gov",
"vk.com",
"vkrugudruzei.ru",
"vkusnyblog.ru",
"vmc.gov.in",
"voa.gov.uk",
"volunteer.gov",
"vote.gov",
"walsall.gov.uk",
"wandsworth.gov.uk",
"wartimecontracting.gov",
"warwickdc.gov.uk",
"wealden.gov.uk",
"wellingtonfl.gov",
"west-lindsey.gov.uk",
"westernunion.com",
"westernunion.ru",
"westlothian.gov.uk",
"whatsapp.com",
"whistleblowers.gov",
"wirral.gov.uk",
"wlga.gov.uk",
"womenshealth.gov",
"wrexham.gov.uk",
"wrigley.com",
"wrp.gov",
"yandex-team.ru",
"york.gov.uk",
"youla.ru",
"youth.gov",
"youthrules.gov",
"youtube.com",
"zcts.ru",
"zendesk.com",
"zionsbank.com",
"zomato.com"}

View File

@@ -1,828 +0,0 @@
spam-allow = {"126.com",
"163.com",
"1gost.info",
"1stnationalbank.com",
"2o7.net",
"365online.com",
"4at1.com",
"53.com",
"5iantlavalamp.com",
"abl.com.pk",
"about.com",
"accessbankplc.com",
"adelphia.net",
"adib.ae",
"adobe.com",
"agora-inc.com",
"agoramedia.com",
"aibgb.co.uk",
"aib.ie",
"airdriesavingsbank.com",
"akamai.net",
"akamaitech.net",
"aldermore.co.uk",
"alexa.com",
"alliancebank.com.my",
"alliancefg.com",
"alliantcreditunion.com",
"alliantcreditunion.org",
"allianz.de",
"allybank.com",
"alterna.ca",
"amazon.com",
"americanexpress.ch",
"americanexpress.com",
"anadolubank.nl",
"ancestry.com",
"anz.com",
"anz.co.nz",
"aol.com",
"apache.org",
"apple.com",
"arbuthnotlatham.co.uk",
"arcamax.com",
"asb.co.nz",
"ask.com",
"astrology.com",
"atdmt.com",
"att.net",
"authorize.net",
"autorambler.ru",
"axisbank.co.in",
"axisbank.com",
"b2bbank.com",
"baaderbank.de",
"baidu.com",
"baloise.ch",
"baml.com",
"banamex.com",
"bancanetbsc.do",
"bancanetsantacruz.com.do",
"bancapulia.it",
"bancarios.com",
"bancastato.ch",
"bancatransilvania.ro",
"bancobase.com",
"bancobic.ao",
"bancobic.pt",
"bancobpi.pt",
"banco.bradesco",
"bancobrasil.com.br",
"bancochile.cl",
"bancochile.com",
"bancoestado.cl",
"bancofalabella.cl",
"bancofalabella.com.co",
"bancofalabella.pe",
"bancomer.com",
"bancopopolare.it",
"bancopostaclick.it",
"bancoposta.it",
"bancosantander.es",
"bancovotorantimcartoes.com.br",
"bank24.ru",
"bankalhabib.com",
"bankaustria.at",
"bank.barclays.co.uk",
"bankbgzbnpparibas.pl",
"bankcardservices.co.uk",
"bankcomm.com",
"bankcoop.ch",
"bankiabancapersonal.es",
"bankia.com",
"bankia.es",
"bankinter.com",
"bankinter.es",
"bankmutual.com",
"bankofamerica.com",
"bankofcanada.ca",
"bankofchina.com",
"bankofcyprus.com",
"bankofindia.co.nz",
"bankofireland.com",
"bank-of-ireland.co.uk",
"bankofirelanduk.com",
"bankofoklahoma.com",
"bankofscotland.co.uk",
"banksinarmas.com",
"bankvonroll.ch",
"bankwest.com.au",
"banque-casino.fr",
"banquepopulaire.fr",
"banquescotia.com",
"barclaycard.co.uk",
"barclaycard.de",
"barclaycard.es",
"barclays.com",
"barclays.co.uk",
"barclayspartnerfinance.com",
"barclays.sc",
"barodanzltd.co.nz",
"basler.ch",
"bbandt.com",
"bbc.co.uk",
"bcentral.com",
"bci.cl",
"bcp.com.pe",
"bcv.ch",
"bcvs.ch",
"bekb.ch",
"bellevue.ch",
"bellsouth.net",
"bendigobank.com.au",
"berliner-bank.de",
"berliner-sparkasse.de",
"bfanet.ao",
"bfi0.com",
"bgfi.com",
"bgfionline.com",
"bgzbnpparibas.pl",
"billmelater.com",
"bing.com",
"bkb.ch",
"bk.rw",
"bks.at",
"blkb.ch",
"bmocm.com",
"bmo.com",
"bmogam.com",
"bmoharris.com",
"bmoharrisprivatebankingonline.com",
"bmoinvestorline.com",
"bmonesbittburns.com",
"bnl.it",
"bnpparibas.com",
"bnpparibas.fr",
"boc.cnnz",
"bonuscard.ch",
"bpe-gruposantander.com",
"bpi.pt",
"bpostbank.be",
"bradescardonline.com.br",
"bradesco.com.br",
"bradescoseguranca.com.br",
"bridgetrack.com",
"bridgewaterbank.ca",
"bsibank.com",
"btrl.ro",
"bt-trade.ro",
"businessonline-boi.com",
"bzbank.ch",
"ca-cib.com",
"ca-egypt.com",
"cafbank.org",
"cafe24.com",
"cafonline.org",
"caisse-epargne.com",
"caisse-epargne.fr",
"caixabank.com",
"caixa.gov.br",
"cajasur.es",
"camsonline.com",
"canadiandirect.com",
"capitalone360.com",
"capitalone.com",
"capitaloneonline.co.uk",
"capitecbank.co.za",
"cariparma.it",
"carrefour-banque.fr",
"cartabcc.it",
"cartabccpos.it",
"cartasi.it",
"ca-suisse.com",
"catalunyacaixa.com",
"cbg.gm",
"cbonline.co.uk",
"cembra.ch",
"cenbank.org",
"centralbank.ae",
"charitybank.org",
"charter.net",
"chase.com",
"chebanca.it",
"chinatrust.com.tw",
"cial.ch",
"cibc.com",
"cic.ch",
"cimbclicks.com.my",
"citibank.ae",
"citibank.co.in",
"citibank.com",
"citibank.co.uk",
"citibankonline.com",
"citibusiness.com",
"citicards.com",
"citi.com",
"citi.co.nz",
"citi.eu",
"citigroup.com",
"citizensbank.ca",
"citizensbank.com",
"civibank.com",
"civibank.it",
"cjb.net",
"classmates.com",
"clickbank.net",
"closebrothers.com",
"closebrothers.co.uk",
"clubsc.ch",
"cnet.com",
"cnn.com",
"co.kg",
"colpatria.com",
"colpatria.com.co",
"comcast.net",
"com.com",
"commbank.com.au",
"commerzbank.com",
"commerzbank.de",
"com.ne.kr",
"coopbank.dk",
"co-operativebank.co.uk",
"cornerbanca.ch",
"cornercard.ch",
"cornercard.com",
"corner.ch",
"corporate-ir.net",
"cosycard.ch",
"coutts.com",
"cox.net",
"craigslist.org",
"credit-agricole.com",
"credit-agricole.fr",
"creditagricole.rs",
"credit-suisse.com",
"cs.com",
"css.ch",
"ctbcbank.com",
"ctfs.com",
"custhelp.com",
"cwbank.com",
"cwbankgroup.com",
"cwt.ca",
"cybg.com",
"danskebankas.lt",
"danskebank.com",
"danskebank.co.uk",
"danskebank.de",
"danskebank.dk",
"danskebank.ee",
"danskebank.fi",
"danskebank.ie",
"danskebank.no",
"datatrans.biz",
"datatrans.ch",
"daum.net",
"db.com",
"dbs.com",
"dd.se",
"debian.org",
"dell.com",
"demirbank.kg",
"denizbank.com",
"desjardins.ca",
"desjardins.com",
"deutschebank.be",
"deutschebank.co.nz",
"deutsche-bank.de",
"diamondbank.com",
"dibpak.com",
"directnic.com",
"directtrack.com",
"discovercard.com",
"discover.com",
"discovery.co.za",
"dnbnord.lt",
"domain.com",
"doubleclick.com",
"dresdner-bank.de",
"dsbbank.sr",
"dsbl.org",
"duncanlawrie.com",
"earthlink.net",
"easybank.at",
"easylnk.com",
"ebay.com",
"ebay.co.uk",
"ebay.de",
"ebayimg.com",
"ebaystatic.com",
"ecobank.com",
"edgesuite.net",
"ediets.com",
"edwardjones.com",
"egroups.com",
"e-gulfbank.com",
"emode.com",
"esunbank.com.tw",
"example.com",
"example.net",
"example.org",
"excite.com",
"facebook.com",
"fedex.com",
"fednetbank.com",
"fidelity.com",
"fidor.de",
"finance.com",
"finansbank.com.tr",
"finasta.lt",
"fineco.it",
"firstbankcard.com",
"firstmerit.com",
"firstnational.com",
"firstnationalmerchantsolutions.com",
"firsttrustbank.co.uk",
"flickr.com",
"fnbc.ca",
"fnb.co.za",
"fnb-online.com",
"freebsd.org",
"free.fr",
"friuladria.it",
"f-secure.com",
"garantibank.eu",
"garantibank.nl",
"garanti.com.tr",
"gazprombank.ch",
"gazprombank.ru",
"generali.es",
"genevoise.ch",
"gentoo.org",
"geocities.com",
"gkb.ch",
"gmail.com",
"gmx.net",
"go.com",
"godaddy.com",
"googleadservices.com",
"google.co.in",
"google.com",
"google.it",
"google.ru",
"granitbank.hu",
"grisoft.com",
"gtbank.com",
"halifax.co.uk",
"hallmark.com",
"handelsbanken.se",
"harrodsbank.co.uk",
"hbl.com",
"hblibank.com",
"hblibank.com.pk",
"hdfcbank.com",
"heartland.co.nz",
"hellenicbank.com",
"hinet.net",
"hkbea.com",
"hlb.com.kh",
"hlb.com.my",
"hoaresbank.co.uk",
"home.barclays",
"hongleongconnect.com.kh",
"hongleongconnect.com.vn",
"hongleongconnect.my",
"hotbar.com",
"hotmail.com",
"hotpop.com",
"hp.com",
"hsbc.com",
"hsbc.com.ar",
"hsbc.com.hk",
"hsbc.co.nz",
"hsbc.co.uk",
"hypovereinsbank.co.uk",
"hypovereinsbank.de",
"ibm.com",
"icbcnz.com",
"icicibank.co.in",
"icicibank.com",
"icicibankprivatebanking.com",
"icorner.ch",
"icscards.de",
"icscards.nl",
"incredimail.com",
"ing.be",
"ing.com",
"ing-diba.de",
"ingdirect.ca",
"ing.lu",
"ing.nl",
"ingvysyabank.com",
"interac.ca",
"investorplace.com",
"iobnet.co.in",
"isbank.com.tr",
"isbank.de",
"isbank.ge",
"isbank.iq",
"isbankkosova.com",
"itau.com.br",
"ivillage.com",
"joingevalia.com",
"jpmchase.com",
"jpmorgan.com",
"jsafrasarasin.com",
"julianhodgebank.com",
"juliusbaer.com",
"juno.com",
"jyskebank.dk",
"kantonalbank.ch",
"kernel.org",
"key.com",
"kiwibank.co.nz",
"kotak.com",
"kredytbank.pl",
"kreissparkasse-schwalm-eder.de",
"ksklb.de",
"kutxabank.es",
"laboralkutxa.com",
"lacaixa.cat",
"lacaixa.es",
"laurentianbank.ca",
"lbb.de",
"lcl.com",
"lcl.fr",
"li.ru",
"list.ru",
"liveinternet.ru",
"livejournal.com",
"lloydsbank.com",
"lloydsbankcommercial.com",
"lloydsbankinggroup.com",
"lloydstsb.ch",
"lloydstsb.co.uk",
"lombardodier.com",
"loydsbank.com",
"lycos.com",
"m7z.net",
"mac.com",
"macromedia.com",
"maerki-baumann.ch",
"mail.com",
"mail.ru",
"mailscanner.info",
"mandtbank.com",
"manulifebank.ca",
"manulifebankselect.ca",
"manulife.com",
"manulifeone.ca",
"marketwatch.com",
"mashreqbank.com",
"mastercard.com",
"maybank2u.com",
"maybank2u.com.my",
"mcafee.com",
"mchsi.com",
"mdmbank.com",
"mechanicsbank.com",
"medbank.lt",
"messagelabs.com",
"metrobankdirect.com",
"metrobankonline.co.uk",
"microsoft.com",
"migbank.com",
"migrosbank.ch",
"military.com",
"mindspring.com",
"mit.edu",
"mizuhobank.co.jp",
"mmwarburg.lu",
"monster.com",
"montepio.pt",
"morganstanley.com",
"mozilla.com",
"mps.it",
"ms.com",
"msn.com",
"mufg.jp",
"myonlineresourcecenter.com",
"myonlineservices.ch",
"myspace.com",
"nate.com",
"nationalesuisse.ch",
"nationwide-communications.co.uk",
"nationwide.co.uk",
"nationwide-service.co.uk",
"natwest.com",
"navyfederal.org",
"nbc.ca",
"netflix.com",
"netscape.com",
"netscape.net",
"netzero.net",
"newyorkfed.org",
"nibl.com.np",
"nod32.com",
"nordea.fi",
"nordea.lt",
"nordfynsbank.dk",
"norisbank.de",
"norman.com",
"notenstein.ch",
"nuvisionfederal.com",
"nytimes.com",
"oceanbank.com",
"onlinesbi.com",
"openoffice.org",
"openxmlformats.org",
"optonline.net",
"orchardbank.com",
"osdn.com",
"ostsaechsische-sparkasse-dresden.de",
"overstock.com",
"pacbell.net",
"pandasoftware.com",
"passport.com",
"paylife.at",
"paypal.be",
"paypal-brasil.com.br",
"paypal.ca",
"paypal.ch",
"paypal.co.il",
"paypal.com",
"paypal.com.au",
"paypal.com.br",
"paypal-communication.com",
"paypal-community.com",
"paypal.com.mx",
"paypal.com.pt",
"paypal.co.uk",
"paypal-customerfeedback.com",
"paypal.de",
"paypal-deutschland.de",
"paypal.dk",
"paypal.es",
"paypal-exchanges.com",
"paypal.fr",
"paypal.it",
"paypal-marketing.co.uk",
"paypal-marketing.pl",
"paypal.net",
"paypal.nl",
"paypal.no",
"paypal-notify.com",
"paypal-now.com",
"paypalobjects.com",
"paypal-opwaarderen.nl",
"paypal-pages.com",
"paypal.pt",
"paypal.ru",
"paypal.se",
"paypal-search.com",
"paypal-shopping.co.uk",
"paypal-techsupport.com",
"pbebank.com",
"pcfinancial.ca",
"peoplepc.com",
"permanenttsb.ie",
"plaxo.com",
"pnc.com",
"popolarevicenza.it",
"postbank.de",
"postepay.it",
"postfinancearena.ch",
"postfinance.ch",
"postfinance.info",
"price.ru",
"prodigy.net",
"publicislamicbank.com.my",
"rabobank.com",
"rabobank.co.nz",
"rabobank.nl",
"radaruol.com.br",
"rahnbodmer.ch",
"raiffeisenbank.rs",
"raiffeisen.ch",
"raiffeisen.hu",
"raiffeisen.li",
"raiffeisen.ru",
"rambler-co.ru",
"rambler.ru",
"raphaelsbank.com",
"rbc.com",
"rbcroyalbank.com",
"rbs.co.uk",
"rbssecure.co.uk",
"rbsworldpay.com",
"rcb.at",
"real.com",
"recordbank.be",
"redhat.com",
"rediff.com",
"regiobank.nl",
"regions.com",
"regionsnet.com",
"renasantbank.com",
"rhbgroup.com",
"rogersbank.com",
"rogers.com",
"rothschildbank.com",
"rothschild.com",
"royalbank.com",
"rr.com",
"sagepay.com",
"sagepay.co.uk",
"sainsburysbank.co.uk",
"samba.com",
"santander.cl",
"santander.com",
"santander.com.br",
"santander.com.mx",
"santandercorretora.com.br",
"santander.co.uk",
"santanderesfera.com.br",
"santandersantiago.cl",
"sarasin.ch",
"sbcglobal.net",
"sberbank.ch",
"sbs.net.nz",
"sc.com",
"schoellerbank.at",
"scotiabank.ca",
"scotiabank.com",
"scotiamocatta.com",
"scotiaonline.com",
"s.de",
"sec.gov",
"securetrustbank.com",
"service-sparkasse.de",
"serviciobancomer.com",
"sf.net",
"shawbrook.co.uk",
"shaw.ca",
"shkb.ch",
"shockwave.com",
"six-group.com",
"six-payment-services.com",
"skrill.com",
"sls-direkt.de",
"smithbarney.com",
"snb.ch",
"snsbank.nl",
"societegenerale.fr",
"sourceforge.net",
"spamcop.net",
"sparda-a.de",
"sparda-bank-hamburg.de",
"sparda-b.de",
"sparda-bw.de",
"sparda-h.de",
"sparda-hessen.de",
"sparda-m.de",
"sparda-ms.de",
"sparda-n.de",
"sparda-ostbayern.de",
"sparda-sw.de",
"sparda-verband.de",
"sparda-west.de",
"sparkasse.at",
"sparkasse-bank-malta.com",
"sparkasse-bielefeld.de",
"sparkasseblog.de",
"sparkasse-bochum.de",
"sparkasse.ch",
"sparkasse.de",
"sparkasse-gera-greiz.de",
"sparkasse-hamm.de",
"sparkasse-heidelberg.de",
"sparkasse-ingolstadt.de",
"sparkasse-mittelthueringen.de",
"speedera.net",
"sportsline.com",
"standardbank.com",
"standardbank.co.za",
"standardchartered.com.gh",
"standardchartered.com.my",
"subscribe.ru",
"sun.com",
"suncorpbank.com.au",
"suntrust.com",
"swedbank.com",
"swedbank.ee",
"swedbank.lt",
"swedbank.lu",
"swedbank.se",
"swisscanto.ch",
"swisscaution.ch",
"swissquote.ch",
"sydbank.dk",
"sympatico.ca",
"tails.nl",
"tangerine.ca",
"tcb-bank.com.tw",
"tdbank.com",
"tdcommercialbanking.com",
"telus.net",
"terra.com.br",
"tescobank.com",
"ticketmaster.com",
"tinyurl.com",
"tiscali.co.uk",
"tns-counter.ru",
"tom.com",
"tone.co.nz",
"t-online.de",
"top4top.ru",
"tsbbank.co.nz",
"tsb.co.nz",
"tsb.co.uk",
"tux.org",
"twitter.com",
"ubibanca.com",
"ubs.com",
"ulsterbankanytimebanking.co.uk",
"ulsterbank.co.uk",
"unibancoconnect.pt",
"unibanco.pt",
"unicreditbank.lt",
"unicredit.eu",
"unicreditgroup.eu",
"unicredit.it",
"unionbankcameroon.com",
"unionbank.com",
"unity.co.uk",
"uob.com.sg",
"uobgroup.com",
"uol.com.br",
"ups.com",
"usbank.com",
"valianttrust.com",
"vaudoise.ch",
"venetobanca.it",
"venetobanka.al",
"verizon.net",
"versabank.com",
"videobank.it",
"virginmoney.com",
"visa.com.ar",
"visa.com.br",
"visaeurope.ch",
"visaeurope.com",
"viseca.ch",
"volksbank.de",
"volkswagenbank.de",
"vpbank.com",
"vr.de",
"vwbank.de",
"w3.org",
"wachovia.com",
"walmart.com",
"wamu.com",
"wanadoo.fr",
"washingtonpost.com",
"weatherbug.com",
"weatherbys.co.uk",
"web.de",
"webshots.com",
"webtv.net",
"wegelin.ch",
"wellsfargo.com",
"wellsfargoemail.com",
"westernunion.ca",
"westernunion.com",
"westernunion.fr",
"westernunion.se",
"westpac.com.au",
"westpac.co.nz",
"wir.ch",
"wordpress.com",
"worldbank.org",
"worldpay.com",
"wsj.com",
"wvb.de",
"xmlsoap.org",
"yacht.nl",
"yahoo.ca",
"yahoo.co.jp",
"yahoo.co.kr",
"yahoo.com",
"yahoo.com.br",
"yahoo.co.uk",
"yahoogroups.com",
"yandex.net",
"yandex.ru",
"ybonline.co.uk",
"yimg.com",
"yopi.de",
"yorkshirebank.co.uk",
"yourbankcard.com",
"yoursite.com",
"youtube.com",
"zagbank.ca",
"zdnet.com",
"zenithbank.com",
"zkb.ch",
"zugerkb.ch",
"vistaprint.dk",
"vistaprint.com",
"anpdm.com",
"dovecot.org",
"exacttarget.com",
"github.com",
"isc.org",
"lists.isc.org",
"lists.roundcube.net",
"svn.apache.org",
"taggedmail.com",
"tumblr.com"}

View File

@@ -1,237 +0,0 @@
spam-spdk = {"1cfresh.com",
"4chan.org",
"6pm.com",
"about.com",
"addthis.com",
"adf.ly",
"adobe.com",
"adp.com",
"adschemist.com",
"airbnb.com",
"airtel.in",
"alibaba.com",
"aliexpress.com",
"alipay.com",
"allrecipes.com",
"amazon.ca",
"amazon.cn",
"amazon.co.jp",
"amazon.com",
"amazon.co.uk",
"amazon.de",
"amazon.es",
"amazon.fr",
"amazon.in",
"amazon.it",
"amazon.ru",
"americanexpress.com",
"ancestry.com",
"android.com",
"apple.com",
"asana.com",
"att.com",
"autohome.com.cn",
"avg.com",
"aweber.com",
"badoo.com",
"bankofamerica.com",
"basecamp.com",
"battle.net",
"bet365.com",
"biglobe.ne.jp",
"bitly.com",
"bleacherreport.com",
"blogger.com",
"bloomberg.com",
"booking.com",
"box.com",
"bt.com",
"capitalone.com",
"cdiscount.com",
"change.org",
"chase.com",
"cisco.com",
"citi.com",
"costco.com",
"craigslist.org",
"custhelp.com",
"dell.com",
"delta.com",
"diply.com",
"discovercard.com",
"disqus.com",
"dropbox.com",
"drweb.com",
"e-boks.dk",
"ebay.ca",
"ebay.com",
"ebay.com.au",
"ebay.co.uk",
"ebay.de",
"ebay.fr",
"ebay.in",
"ebay.it",
"ebay.ru",
"etsy.com",
"evernote.com",
"expedia.com",
"facebook.com",
"fedex.com",
"fidelity.com",
"fishki.net",
"flickr.com",
"flirchi.com",
"force.com",
"freepik.com",
"gap.com",
"gawker.com",
"github.com",
"gizmodo.com",
"godaddy.com",
"googleadservices.com",
"googleusercontent.com",
"groupon.com",
"hdfcbank.com",
"hgtv.com",
"hh.ru",
"hm.com",
"houzz.com",
"hubspot.com",
"icicibank.com",
"icloud.com",
"ign.com",
"imgur.com",
"immobilienscout24.de",
"indeed.com",
"indiatimes.com",
"infusionsoft.com",
"instagram.com",
"intel.com",
"irctc.co.in",
"kayak.com",
"kickstarter.com",
"kijiji.ca",
"kotaku.com",
"letsencrypt.org",
"libero.it",
"lifehacker.com",
"likes.com",
"linkedin.com",
"linux.com",
"list-manage.com",
"mackeeper.com",
"mailchimp.com",
"mashable.com",
"match.com",
"mercadolibre.com.ar",
"mercadolivre.com.br",
"messenger.com",
"microsoft.com",
"microsoftonline.com",
"minmyndighetspost.se",
"moikrug.ru",
"mts.ru",
"neobux.com",
"netflix.com",
"newegg.com",
"nhk.or.jp",
"nifty.com",
"nikkeibp.co.jp",
"nyaa.se",
"nytimes.com",
"odnoklassniki.ru",
"ofd.yandex.ru",
"ok.ru",
"olx.ua",
"overstock.com",
"ozon.ru",
"ozon.travel",
"pandora.com",
"paypal.ca",
"paypal.cn",
"paypal.com",
"paypal.co.uk",
"paypal.de",
"paypal.es",
"paypal.fr",
"paypal.it",
"paypal.ru",
"paytm.com",
"pch.com",
"pinterest.com",
"porn.com",
"priceline.com",
"quora.com",
"rakuten.co.jp",
"reddit.com",
"researchgate.net",
"salesforce.com",
"sciencedirect.com",
"shopify.com",
"skanetrafiken.se",
"skat.dk",
"skatteverket.se",
"slack.com",
"slideshare.net",
"so-net.ne.jp",
"southwest.com",
"spotify.com",
"springer.com",
"squarespace.com",
"stalker.com",
"steampowered.com",
"stumbleupon.com",
"surveymonkey.com",
"swagbucks.com",
"taboola.com",
"taleo.net",
"taobao.com",
"target.com",
"taringa.net",
"taxi.yandex.ru",
"tele2.ru",
"thekitchn.com",
"tochka.com",
"tokopedia.com",
"trello.com",
"tribunnews.com",
"trulia.com",
"tumblr.com",
"twitter.com",
"ultimate-guitar.com",
"ups.com",
"usaa.com",
"usbank.com",
"usps.com",
"verizon.com",
"verizonwireless.com",
"vimeo.com",
"vine.co",
"vk.com",
"vmware.com",
"vtb24.ru",
"wahoofitness.com",
"walmart.com",
"wav.tv",
"wellsfargo.com",
"whatsapp.com",
"wikia.com",
"wikimedia.org",
"wikipedia.org",
"wildberries.ru",
"wix.com",
"wordpress.com",
"wordpress.org",
"wp.com",
"xuite.net",
"xvideos.com",
"yelp.com",
"youtube.com",
"yts.to",
"zappos.com",
"zendesk.com",
"zippyshare.com",
"zomato.com",
"zoom.us",
"zulily.com",
"zwift.com"}

View File

@@ -1,427 +0,0 @@
spam-disposable = {"0815.ru",
"0clickemail.com",
"0wnd.net",
"0wnd.org",
"1054733.mail-temp.com",
"10m.email",
"10minutemail.com",
"10minutesmail.com",
"1secmail.com",
"1secmail.net",
"1secmail.org",
"20minutemail.com",
"2emailock.com",
"2prong.com",
"33mail.com",
"3d-magical-magnet.ru",
"4warding.com",
"90bit.ru",
"9ox.net",
"a-bc.net",
"afrobacon.com",
"alaki.ga",
"alivance.com",
"amilegit.com",
"amiri.net",
"anonymbox.com",
"antichef.com",
"antichef.net",
"antispam.de",
"audio.now.im",
"awex.icu",
"barenshop.ru",
"barryogorman.com",
"baxomale.ht.cx",
"beefmilk.com",
"binkmail.com",
"bio-muesli.net",
"bobmail.info",
"bofthew.com",
"brefmail.com",
"bsnow.net",
"bspamfree.org",
"bugmenot.com",
"casualdx.com",
"centermail.com",
"cetpass.com",
"chammy.info",
"choicemail1.com",
"choocho-telegram.ru",
"cool.fr.nf",
"courriel.fr.nf",
"courrieltemporaire.com",
"cuvox.de",
"dandikmail.com",
"dayrep.com",
"dcemail.com",
"deadspam.com",
"desoz.com",
"devnullmail.com",
"dfg6.kozow.com",
"dfgh.net",
"digitalsanctuary.com",
"dingbone.com",
"discardmail.com",
"discardmail.de",
"dispomail.win",
"dispomail.xyz",
"disposableaddress.com",
"disposeamail.com",
"dispostable.com",
"divismail.ru",
"dlesha.ru",
"dmaster39.ru",
"dodgit.com",
"domremonta-nv.ru",
"donemail.ru",
"dontreg.com",
"dontsendmespam.de",
"dumpandjunk.com",
"e-mail.com",
"e-mail.org",
"e4ward.com",
"edu.aiot.ze.cx",
"ekholotdeeper.ru",
"email-24x7.com",
"email60.com",
"emailate.com",
"emailay.com",
"emailias.com",
"emailmiser.com",
"emailsensei.com",
"emailtemporanea.net",
"emailtemporario.com.br",
"emailtex.com",
"emailwarden.com",
"emailx.at.hm",
"emailxfer.com",
"emz.net",
"exbts.com",
"explodemail.com",
"extremail.ru",
"eyeemail.com",
"fakeinbox.com",
"fakeinformation.com",
"fantasymail.de",
"filzmail.com",
"fls4.gleeze.com",
"fotosta.ru",
"frapmail.com",
"fudgerub.com",
"funny-mom.ru",
"furycraft.ru",
"garliclife.com",
"get2mail.fr",
"getonemail.com",
"gishpuppy.com",
"gnomi.ru",
"goplaygame.ru",
"greensloth.com",
"grr.la",
"gsrv.co.uk",
"guerillamail.com",
"guerrillamail.biz",
"guerrillamail.com",
"guerrillamail.de",
"guerrillamail.info",
"guerrillamail.net",
"guerrillamail.org",
"guerrillamailblock.com",
"h2ocoffe.ru",
"haltospam.com",
"hatespam.org",
"hidemail.de",
"hmamail.com",
"hochsitze.com",
"hulapla.de",
"hydraulics360.ru",
"i.xcode.ro",
"imails.info",
"inboxclean.com",
"inboxclean.org",
"irish2me.com",
"isdaq.com",
"iwi.net",
"jetable.com",
"jetable.fr.nf",
"jetable.net",
"jetable.org",
"justyland.ru",
"kasmail.com",
"kaspop.com",
"kemampuan.me",
"kikoxltd.com",
"killmail.com",
"killmail.net",
"kismail.ru",
"kkm35.ru",
"klassmaster.com",
"klzlk.com",
"koszmail.pl",
"kurzepost.de",
"kusrc.com",
"lackmail.ru",
"laoho.com",
"ldaho.biz",
"leeching.net",
"letthemeatspam.com",
"lhsdv.com",
"lifebyfood.com",
"lifeguru.online",
"light-marketing.ru",
"lol.ovpn.to",
"lookugly.com",
"lortemail.dk",
"lr78.com",
"madecassol78.ru",
"mail-temporaire.fr",
"mail.mezimages.net",
"mail333.com",
"mailbidon.com",
"mailblocks.com",
"mailbucket.org",
"mailcatch.com",
"maildrop.cc",
"maildx.com",
"mailed.ro",
"mailfreeonline.com",
"mailfs.com",
"mailin8r.com",
"mailinater.com",
"mailinator.com",
"mailinator.net",
"mailinator2.com",
"mailincubator.com",
"mailme.ir",
"mailme.lv",
"mailmetal.com",
"mailmetrash.com",
"mailmoat.com",
"mailnesia.com",
"mailnull.com",
"mailscrap.com",
"mailshell.com",
"mailsiphon.com",
"mailsoul.com",
"mailtrash.net",
"mailzilla.com",
"makemetheking.com",
"mbx.cc",
"mega.zik.dj",
"meinspamschutz.de",
"meltmail.com",
"messagebeamer.de",
"mineblue.ru",
"mintemail.com",
"misha-rosestoy.ru",
"moboinfo.xyz",
"moncourrier.fr.nf",
"monemail.fr.nf",
"monmail.fr.nf",
"mor19.uu.gl",
"mt2009.com",
"mvrht.com",
"mycleaninbox.net",
"mymail-in.net",
"mypartyclip.de",
"myphantomemail.com",
"mytempemail.com",
"mytrashmail.com",
"neomailbox.com",
"nepwk.com",
"nervmich.net",
"nervtmich.net",
"netmails.com",
"netmails.net",
"neverbox.com",
"newfilm24.ru",
"niepodam.pl",
"no-spam.ws",
"nomail.xl.cx",
"nomorespamemails.com",
"nospam.ze.tc",
"nospam4.us",
"nospammail.net",
"notmailinator.com",
"notsharingmy.info",
"nowmymail.com",
"nurfuerspam.de",
"objectmail.com",
"obobbo.com",
"officialrolex.ru",
"oneoffemail.com",
"onewaymail.com",
"onlinenet.info",
"oopi.org",
"ordinaryamerican.net",
"otherinbox.com",
"ovpn.to",
"owlpic.com",
"p33.org",
"pancakemail.com",
"partner1bizmoney.ru",
"pchelovodstvo-tut.ru",
"piratesdelivery.ru",
"pmlep.de",
"politikerclub.de",
"pookmail.com",
"powerbank-russia.ru",
"privacy.net",
"proxymail.eu",
"prtnx.com",
"putthisinyourspamdatabase.com",
"quickinbox.com",
"razinrocks.me",
"rcpt.at",
"reallymymail.com",
"recode.me",
"reconmail.com",
"recursor.net",
"reloadpoint.ru",
"rtrtr.com",
"s-sakamas.ru",
"s0ny.net",
"safe-mail.net",
"safersignup.de",
"safetymail.info",
"safetypost.de",
"samogonda.ru",
"sendspamhere.com",
"senseless-entertainment.com",
"sgbteamreborn.imouto.pro",
"shar-kov.ru",
"sharklasers.com",
"shiftmail.com",
"shitmail.me",
"shortmail.net",
"sibmail.com",
"slaskpost.se",
"smellfear.com",
"sneakemail.com",
"sofimail.com",
"sogetthis.com",
"soodonims.com",
"spam4.me",
"spambob.net",
"spambog.com",
"spambog.de",
"spambog.ru",
"spambooger.com",
"spambox.us",
"spambox.win",
"spambox.xyz",
"spamcannon.com",
"spamcannon.net",
"spamcon.org",
"spamcorptastic.com",
"spamcowboy.com",
"spamcowboy.net",
"spamcowboy.org",
"spamday.com",
"spamex.com",
"spamfree.eu",
"spamfree24.com",
"spamfree24.de",
"spamfree24.org",
"spamgourmet.com",
"spamgourmet.net",
"spamgourmet.org",
"spamhereplease.com",
"spamhole.com",
"spamify.com",
"spaml.de",
"spammotel.com",
"spamobox.com",
"spamslicer.com",
"spamthis.co.uk",
"speed.1s.fr",
"squizzy.net",
"sskstroy.ru",
"streetwisemail.com",
"super-auswahl.de",
"supermailer.jp",
"suremail.info",
"tecninja.xyz",
"teewars.org",
"teleosaurs.xyz",
"teleworm.com",
"temp-mail.org",
"tempe-mail.com",
"tempemail.com",
"tempemail.net",
"tempinbox.co.uk",
"tempinbox.com",
"tempmail.it",
"tempmail.top",
"tempmail.win",
"tempomail.fr",
"thankyou2010.com",
"thisisnotmyrealemail.com",
"thrott.com",
"throwawayemailaddress.com",
"tilien.com",
"titaspaharpur1.gq",
"tmailinator.com",
"tradermail.info",
"trash-mail.at",
"trash-mail.com",
"trash-mail.de",
"trash2009.com",
"trashdevil.com",
"trashemail.de",
"trashinbox.net",
"trashmail.at",
"trashmail.com",
"trashmail.de",
"trashmail.me",
"trashmail.net",
"trashmail.org",
"trashmail.ws",
"trashmailer.com",
"trashymail.com",
"trbvm.com",
"trbvn.com",
"trillianpro.com",
"tvchd.com",
"twinmail.de",
"tyldd.com",
"uggsrock.com",
"upliftnow.com",
"urhen.com",
"ussv.club",
"vapecentral.ru",
"venompen.com",
"veryrealemail.com",
"vkusup.ru",
"voemail.com",
"vssms.com",
"weammo.xyz",
"webcool.club",
"wegwerfadresse.de",
"wegwerfemail.com",
"wegwerfemail.de",
"wegwerfmail.de",
"wegwerfmail.net",
"wegwerfmail.org",
"wh4f.org",
"whyspam.me",
"willhackforfood.biz",
"willselfdestruct.com",
"wronghead.com",
"wwwnew.eu",
"xemaps.com",
"xitroo.com",
"xmaily.com",
"xoxy.net",
"xww.ro",
"yep.it",
"yevme.com",
"yopmail.com",
"yopmail.fr",
"yopmail.net",
"yuurok.com",
"zagorodnyi-domik.ru",
"zdorovpagh.ru",
"zehnminutenmail.de",
"zippymail.info",
"zoemail.net"}

File diff suppressed because it is too large Load Diff

View File

@@ -1,133 +0,0 @@
spam-mime = {
"bat" = "BAD",
"chm" = "BAD",
"com" = "BAD",
"exe" = "BAD",
"hta" = "BAD|NZ",
"iso" = "BAD",
"jar" = "BAD|NZ",
"lnk" = "BAD",
"scr" = "BAD",
"htm" = "text/html|BAD",
"html" = "text/html|BAD",
"shtm" = "text/html|BAD",
"shtml" = "text/html|BAD",
"ace" = "BAD|AR",
"arj" = "BAD|AR",
"asx" = "BAD",
"cab" = "BAD|AR",
"sfx" = "BAD",
"vst" = "BAD",
"vss" = "BAD",
"ade" = "BAD",
"adp" = "BAD",
"cmd" = "BAD",
"cpl" = "BAD",
"ins" = "BAD",
"isp" = "BAD",
"js" = "BAD|NZ",
"jse" = "BAD",
"lib" = "BAD",
"mde" = "BAD",
"msc" = "BAD",
"msi" = "BAD",
"msp" = "BAD",
"mst" = "BAD",
"nsh" = "BAD",
"pif" = "BAD",
"sct" = "BAD",
"shb" = "BAD",
"sys" = "BAD",
"vb" = "BAD",
"vbe" = "BAD",
"vbs" = "BAD|NZ",
"vxd" = "BAD",
"wsc" = "BAD",
"wsh" = "BAD",
"app" = "BAD",
"asp" = "BAD",
"bas" = "BAD",
"cnt" = "BAD",
"csh" = "BAD",
"diagcab" = "BAD",
"fxp" = "BAD",
"gadget" = "BAD",
"grp" = "BAD",
"hlp" = "BAD",
"hpj" = "BAD",
"inf" = "BAD",
"its" = "BAD",
"jnlp" = "BAD",
"ksh" = "BAD",
"mad" = "BAD",
"maf" = "BAD",
"mag" = "BAD",
"mam" = "BAD",
"maq" = "BAD",
"mar" = "BAD",
"mas" = "BAD",
"mat" = "BAD",
"mau" = "BAD",
"mav" = "BAD",
"maw" = "BAD",
"mcf" = "BAD",
"mda" = "BAD",
"mdb" = "BAD",
"mdt" = "BAD",
"mdw" = "BAD",
"mdz" = "BAD",
"msh" = "BAD",
"msh1" = "BAD",
"msh2" = "BAD",
"mshxml" = "BAD",
"msh1xml" = "BAD",
"msh2xml" = "BAD",
"msu" = "BAD",
"ops" = "BAD",
"osd" = "BAD",
"pcd" = "BAD",
"pl" = "BAD",
"plg" = "BAD",
"prf" = "BAD",
"prg" = "BAD",
"printerexport" = "BAD",
"ps1" = "BAD",
"ps1xml" = "BAD",
"ps2" = "BAD",
"ps2xml" = "BAD",
"psc1" = "BAD",
"psc2" = "BAD",
"psd1" = "BAD",
"psdm1" = "BAD",
"pst" = "BAD",
"reg" = "BAD",
"scf" = "BAD",
"shs" = "BAD",
"theme" = "BAD",
"url" = "BAD",
"vbp" = "BAD",
"vsmacros" = "BAD",
"vsw" = "BAD",
"webpnp" = "BAD",
"website" = "BAD",
"ws" = "BAD",
"xbap" = "BAD",
"xll" = "BAD",
"xnk" = "BAD",
"docx" = "NZ",
"docm" = "BAD",
"pptm" = "BAD",
"xlsm" = "BAD",
"pdf" = "application/pdf|application/x-pdf|NZ",
"pptx" = "NZ",
"wsf" = "NZ",
"xlsx" = "NZ",
"7x" = "AR",
"alz" = "AR",
"bz2" = "AR",
"egg" = "AR",
"lz" = "AR",
"rar" = "AR",
"xz" = "AR",
"zip" = "AR",
"txt" = "text/plain|message/disposition-notification|text/rfc822-headers"}

View File

@@ -1,376 +0,0 @@
spam-scores = {"ABUSE_SURBL" = "5.0",
"ALLOWLIST_DKIM" = "-1.0",
"ALLOWLIST_DMARC" = "-7.0",
"ALLOWLIST_SPF" = "-1.0",
"ALLOWLIST_SPF_DKIM" = "-3.0",
"ARC_ALLOW" = "-1.0",
"ARC_DNSFAIL" = "0.0",
"ARC_INVALID" = "0.5",
"ARC_NA" = "0.0",
"ARC_REJECT" = "1.0",
"ARC_SIGNED" = "0.0",
"AUTH_NA" = "1.0",
"AUTH_NA_OR_FAIL" = "1.0",
"AUTOGEN_PHP_SPAMMY" = "1.0",
"BAYES_HAM" = "-3.0",
"BAYES_SPAM" = "5.1",
"BLOCKLIST_DKIM" = "2.0",
"BLOCKLIST_DMARC" = "6.0",
"BLOCKLIST_SPF" = "1.0",
"BLOCKLIST_SPF_DKIM" = "3.0",
"BODY_URI_ONLY" = "2.0",
"BOGUS_ENCRYPTED_AND_TEXT" = "10.0",
"BOUNCE" = "-0.1",
"BOUNCE_NO_AUTH" = "1.0",
"BROKEN_CONTENT_TYPE" = "1.5",
"COMPROMISED_ACCT_BULK" = "3.0",
"CRACKED_SURBL" = "5.0",
"CTE_CASE" = "0.5",
"CTYPE_MISSING_DISPOSITION" = "4.0",
"CTYPE_MIXED_BOGUS" = "1.0",
"CT_EXTRA_SEMI" = "1.0",
"DATA_URI_OBFU" = "2.0",
"DATE_IN_FUTURE" = "4.0",
"DATE_IN_PAST" = "1.0",
"DBL_ABUSE" = "5.0",
"DBL_ABUSE_BOTNET" = "6.5",
"DBL_ABUSE_MALWARE" = "6.5",
"DBL_ABUSE_PHISH" = "6.5",
"DBL_ABUSE_REDIR" = "5.0",
"DBL_BLOCKED" = "0.0",
"DBL_BLOCKED_OPENRESOLVER" = "0.0",
"DBL_BOTNET" = "7.5",
"DBL_MALWARE" = "7.5",
"DBL_PHISH" = "7.5",
"DBL_SPAM" = "6.5",
"DCC_BULK" = "3.0",
"DIRECT_TO_MX" = "0.0",
"DISPOSABLE_CC" = "0.0",
"DISPOSABLE_ENVFROM" = "0.0",
"DISPOSABLE_FROM" = "0.0",
"DISPOSABLE_REPLYTO" = "0.0",
"DISPOSABLE_TO" = "0.0",
"DKIM_SIGNED" = "0.0",
"DMARC_BAD_POLICY" = "0.5",
"DMARC_DNSFAIL" = "0.0",
"DMARC_NA" = "0.0",
"DMARC_POLICY_ALLOW" = "-0.5",
"DMARC_POLICY_ALLOW_WITH_FAILURES" = "0.0",
"DMARC_POLICY_QUARANTINE" = "1.5",
"DMARC_POLICY_REJECT" = "2.0",
"DMARC_POLICY_SOFTFAIL" = "0.1",
"DNSWL_BLOCKED" = "0.0",
"DWL_DNSWL_BLOCKED" = "0.0",
"DWL_DNSWL_HI" = "-3.5",
"DWL_DNSWL_LOW" = "-1.0",
"DWL_DNSWL_MED" = "-2.0",
"DWL_DNSWL_NONE" = "0.0",
"EMPTY_SUBJECT" = "1.0",
"ENCRYPTED_PGP" = "-0.5",
"ENCRYPTED_SMIME" = "-0.5",
"ENVFROM_INVALID" = "2.0",
"ENVFROM_SERVICE_ACCT" = "1.0",
"EXT_CSS" = "1.0",
"FAKE_REPLY" = "1.0",
"FORGED_RCVD_TRAIL" = "1.0",
"FORGED_RECIPIENTS" = "2.0",
"FORGED_RECIPIENTS_MAILLIST" = "0.0",
"FORGED_SENDER" = "0.3",
"FORGED_SENDER_MAILLIST" = "0.0",
"FREEMAIL_AFF" = "4.0",
"FREEMAIL_CC" = "0.0",
"FREEMAIL_ENVFROM" = "0.0",
"FREEMAIL_FROM" = "0.0",
"FREEMAIL_REPLYTO" = "0.0",
"FREEMAIL_REPLYTO_NEQ_FROM_DOM" = "3.0",
"FREEMAIL_TO" = "0.0",
"FROM_DN_EQ_ADDR" = "1.0",
"FROM_EQ_ENVFROM" = "0.0",
"FROM_EXCESS_BASE64" = "1.5",
"FROM_EXCESS_QP" = "1.2",
"FROM_HAS_DN" = "0.0",
"FROM_INVALID" = "2.0",
"FROM_NAME_EXCESS_SPACE" = "1.0",
"FROM_NAME_HAS_TITLE" = "1.0",
"FROM_NEEDS_ENCODING" = "1.0",
"FROM_NEQ_DISPLAY_NAME" = "4.0",
"FROM_NEQ_ENVFROM" = "0.0",
"FROM_NO_DN" = "0.0",
"FROM_SERVICE_ACCT" = "1.0",
"HACKED_WP_PHISHING" = "4.5",
"HAS_ANON_DOMAIN" = "0.1",
"HAS_ATTACHMENT" = "0.0",
"HAS_DATA_URI" = "0.0",
"HAS_GOOGLE_FIREBASE_URL" = "2.0",
"HAS_GOOGLE_REDIR" = "1.0",
"HAS_GUC_PROXY_URI" = "1.0",
"HAS_IPFS_GATEWAY_URL" = "6.0",
"HAS_LIST_UNSUB" = "-0.01",
"HAS_ONION_URI" = "0.0",
"HAS_ORG_HEADER" = "0.0",
"HAS_PHPMAILER_SIG" = "0.0",
"HAS_REPLYTO" = "0.0",
"HAS_WP_URI" = "0.0",
"HAS_XAW" = "0.0",
"HAS_XOIP" = "0.0",
"HAS_X_ANTIABUSE" = "0.0",
"HAS_X_AS" = "0.0",
"HAS_X_GMSV" = "0.0",
"HAS_X_PHP_SCRIPT" = "0.0",
"HAS_X_POS" = "0.0",
"HAS_X_PRIO_FIVE" = "0.0",
"HAS_X_PRIO_ONE" = "0.0",
"HAS_X_PRIO_THREE" = "0.0",
"HAS_X_PRIO_TWO" = "0.0",
"HAS_X_PRIO_ZERO" = "0.0",
"HAS_X_SOURCE" = "0.0",
"HEADER_EMPTY_DELIMITER" = "1.0",
"HEADER_FORGED_MDN" = "2.0",
"HEADER_RCONFIRM_MISMATCH" = "2.0",
"FROMHOST_NORES_A_OR_MX" = "1.5",
"FROM_BOUNCE" = "0.0",
"HELO_BAREIP" = "3.0",
"HELO_IP_A" = "1.0",
"HELO_NORES_A_OR_MX" = "0.3",
"HELO_NOT_FQDN" = "2.0",
"HELO_IPREV_MISMATCH" = "1.0",
"RCPT_BOUNCEMOREONE" = "1.5",
"URL_ONLY" = "2.2",
"HIDDEN_SOURCE_OBJ" = "2.0",
"HTML_META_REFRESH_URL" = "5.0",
"HTML_SHORT_LINK_IMG_1" = "2.0",
"HTML_SHORT_LINK_IMG_2" = "1.0",
"HTML_SHORT_LINK_IMG_3" = "0.5",
"HTML_TEXT_IMG_RATIO" = "1.0",
"HTML_UNBALANCED_TAG" = "0.5",
"HTTP_TO_HTTPS" = "0.5",
"HTTP_TO_IP" = "1.0",
"INFO_TO_INFO_LU" = "2.0",
"INVALID_DATE" = "1.5",
"INVALID_FROM_8BIT" = "6.0",
"INVALID_MSGID" = "1.7",
"KLMS_SPAM" = "5.0",
"LONG_SUBJ" = "3.0",
"MAILLIST" = "-0.2",
"MANY_INVISIBLE_PARTS" = "1.0",
"MID_BARE_IP" = "2.0",
"MID_CONTAINS_FROM" = "1.0",
"MID_CONTAINS_TO" = "1.0",
"MID_MISSING_BRACKETS" = "1.0",
"MID_RHS_IP_LITERAL" = "1.0",
"MID_RHS_MATCH_FROM" = "1.0",
"MID_RHS_MATCH_FROMTLD" = "1.0",
"MID_RHS_MATCH_TO" = "1.0",
"MID_RHS_NOT_FQDN" = "0.5",
"MID_RHS_WWW" = "0.5",
"MIME_ARCHIVE_IN_ARCHIVE" = "5.0",
"MIME_BAD" = "1.0",
"MIME_BAD_ATTACHMENT" = "4.0",
"MIME_BAD_EXTENSION" = "2.0",
"MIME_BAD_UNICODE" = "8.0",
"MIME_BASE64_TEXT" = "0.1",
"MIME_BASE64_TEXT_BOGUS" = "1.0",
"MIME_DOUBLE_BAD_EXTENSION" = "2.0",
"MIME_GOOD" = "-0.1",
"MIME_HEADER_CTYPE_ONLY" = "2.0",
"MIME_HTML_ONLY" = "0.2",
"MIME_MA_MISSING_HTML" = "1.0",
"MIME_MA_MISSING_TEXT" = "2.0",
"MISSING_DATE" = "1.0",
"MISSING_FROM" = "2.0",
"MISSING_MID" = "2.5",
"MISSING_MIME_VERSION" = "2.0",
"MISSING_SUBJECT" = "2.0",
"MISSING_TO" = "2.0",
"MSBL_EBL" = "7.5",
"MSBL_EBL_GREY" = "0.5",
"MULTIPLE_FROM" = "8.0",
"MULTIPLE_UNIQUE_HEADERS" = "7.0",
"MV_CASE" = "0.5",
"MW_SURBL_MULTI" = "7.5",
"HOMOGRAPH_URL" = "5.0",
"ONCE_RECEIVED" = "0.1",
"PHISHED_OPENPHISH" = "7.0",
"PHISHED_PHISHTANK" = "7.0",
"PHISHING" = "4.0",
"PHISH_EMOTION" = "1.0",
"PHP_XPS_PATTERN" = "0.0",
"PH_SURBL_MULTI" = "7.5",
"PRECEDENCE_BULK" = "0.0",
"PREVIOUSLY_DELIVERED" = "0.0",
"PYZOR" = "3.5",
"RBL_BARRACUDA" = "4.0",
"RBL_BLOCKLISTDE" = "4.0",
"RBL_MAILSPIKE_BAD" = "1.0",
"RBL_MAILSPIKE_VERYBAD" = "1.5",
"RBL_MAILSPIKE_WORST" = "2.0",
"RBL_NIXSPAM" = "4.0",
"RBL_SEM" = "1.0",
"RBL_SEM_IPV6" = "1.0",
"RBL_SENDERSCORE" = "2.0",
"RBL_SPAMCOP" = "4.0",
"RBL_SPAMHAUS" = "0.0",
"RBL_SPAMHAUS_BLOCKED" = "0.0",
"RBL_SPAMHAUS_BLOCKED_OPENRESOLVER" = "0.0",
"RBL_SPAMHAUS_CSS" = "2.0",
"RBL_SPAMHAUS_DROP" = "7.0",
"RBL_SPAMHAUS_PBL" = "2.0",
"RBL_SPAMHAUS_SBL" = "4.0",
"RBL_SPAMHAUS_XBL" = "4.0",
"RBL_VIRUSFREE_BOTNET" = "2.0",
"RCPT_ADDR_IN_SUBJECT" = "3.0",
"RCPT_COUNT_FIVE" = "0.0",
"RCPT_COUNT_GT_50" = "1.0",
"RCPT_COUNT_ONE" = "0.0",
"RCPT_COUNT_SEVEN" = "0.0",
"RCPT_COUNT_THREE" = "0.0",
"RCPT_COUNT_TWELVE" = "0.0",
"RCPT_COUNT_TWO" = "0.0",
"RCPT_COUNT_ZERO" = "0.0",
"RCPT_LOCAL_IN_SUBJECT" = "2.0",
"RCVD_COUNT_FIVE" = "0.0",
"RCVD_COUNT_ONE" = "0.0",
"RCVD_COUNT_SEVEN" = "0.0",
"RCVD_COUNT_THREE" = "0.0",
"RCVD_COUNT_TWELVE" = "0.0",
"RCVD_COUNT_TWO" = "0.0",
"RCVD_COUNT_ZERO" = "0.0",
"RCVD_DKIM_ARC_DNSWL_HI" = "-1.0",
"RCVD_DKIM_ARC_DNSWL_MED" = "-0.5",
"RCVD_DOUBLE_IP_SPAM" = "2.0",
"RCVD_FROM_SMTP_AUTH" = "0.0",
"RCVD_HELO_USER" = "3.0",
"RCVD_ILLEGAL_CHARS" = "4.0",
"RCVD_IN_DNSWL_HI" = "-0.5",
"RCVD_IN_DNSWL_LOW" = "-0.1",
"RCVD_IN_DNSWL_MED" = "-0.2",
"RCVD_IN_DNSWL_NONE" = "0.0",
"RCVD_NO_TLS_LAST" = "0.1",
"RCVD_TLS_ALL" = "0.0",
"RCVD_TLS_LAST" = "0.0",
"RCVD_UNAUTH_PBL" = "2.0",
"RCVD_VIA_SMTP_AUTH" = "0.0",
"RDNS_DNSFAIL" = "0.0",
"RDNS_NONE" = "1.0",
"RECEIVED_BLOCKLISTDE" = "3.0",
"RECEIVED_SPAMHAUS_BLOCKED" = "0.0",
"RECEIVED_SPAMHAUS_BLOCKED_OPENRESOLVER" = "0.0",
"RECEIVED_SPAMHAUS_CSS" = "1.0",
"RECEIVED_SPAMHAUS_PBL" = "0.0",
"RECEIVED_SPAMHAUS_SBL" = "3.0",
"RECEIVED_SPAMHAUS_XBL" = "1.0",
"REDIRECTOR_URL" = "0.0",
"REDIRECTOR_URL_ONLY" = "1.0",
"REPLYTO_ADDR_EQ_FROM" = "0.0",
"REPLYTO_DN_EQ_FROM_DN" = "0.0",
"REPLYTO_DOM_EQ_FROM_DOM" = "0.0",
"REPLYTO_DOM_NEQ_FROM_DOM" = "0.0",
"REPLYTO_EMAIL_HAS_TITLE" = "2.0",
"REPLYTO_EQ_FROM" = "0.0",
"REPLYTO_EQ_TO_ADDR" = "5.0",
"REPLYTO_EXCESS_BASE64" = "1.5",
"REPLYTO_EXCESS_QP" = "1.2",
"REPLYTO_UNPARSABLE" = "1.0",
"RWL_MAILSPIKE_EXCELLENT" = "-0.4",
"RWL_MAILSPIKE_GOOD" = "-0.1",
"RWL_MAILSPIKE_NEUTRAL" = "0.0",
"RWL_MAILSPIKE_POSSIBLE" = "0.0",
"RWL_MAILSPIKE_VERYGOOD" = "-0.2",
"R_BAD_CTE_7BIT" = "3.5",
"DKIM_ALLOW" = "-0.2",
"DKIM_NA" = "0.0",
"DKIM_PERMFAIL" = "0.0",
"DKIM_REJECT" = "1.0",
"DKIM_TEMPFAIL" = "0.0",
"R_MISSING_CHARSET" = "0.5",
"R_MIXED_CHARSET" = "5.0",
"MIXED_CHARSET_URL" = "7.0",
"R_NO_SPACE_IN_FROM" = "1.0",
"R_PARTS_DIFFER" = "1.0",
"SPF_ALLOW" = "-0.2",
"SPF_DNSFAIL" = "0.0",
"SPF_FAIL" = "1.0",
"SPF_NA" = "0.0",
"SPF_NEUTRAL" = "0.0",
"SPF_PERMFAIL" = "0.0",
"SPF_SOFTFAIL" = "0.0",
"R_SUSPICIOUS_URL" = "5.0",
"R_UNDISC_RCPT" = "3.0",
"SEM_URIBL" = "3.5",
"SEM_URIBL_FRESH15" = "3.0",
"SIGNED_PGP" = "-2.0",
"SIGNED_SMIME" = "-2.0",
"SORTED_RECIPS" = "3.5",
"SPAM_FLAG" = "5.0",
"SPAM_TRAP" = "discard",
"SPOOF_DISPLAY_NAME" = "8.0",
"SPOOF_REPLYTO" = "6.0",
"SUBJECT_ENDS_EXCLAIM" = "0.0",
"SUBJECT_ENDS_QUESTION" = "1.0",
"SUBJECT_ENDS_SPACES" = "0.5",
"SUBJECT_HAS_CURRENCY" = "1.0",
"SUBJECT_HAS_EXCLAIM" = "0.0",
"SUBJECT_HAS_QUESTION" = "0.0",
"SUBJECT_NEEDS_ENCODING" = "1.0",
"SUBJ_ALL_CAPS" = "3.0",
"SUBJ_BOUNCE_WORDS" = "0.0",
"SUBJ_EXCESS_BASE64" = "1.5",
"SUBJ_EXCESS_QP" = "1.2",
"SURBL_BLOCKED" = "0.0",
"SURBL_HASHBL_ABUSE" = "5.0",
"SURBL_HASHBL_CRACKED" = "5.0",
"SURBL_HASHBL_EMAIL" = "5.0",
"SURBL_HASHBL_MALWARE" = "6.5",
"SURBL_HASHBL_PHISH" = "6.5",
"SUSPICIOUS_RECIPS" = "1.5",
"TAGGED_FROM" = "0.0",
"TAGGED_RCPT" = "0.0",
"THREAD_HIJACKING_FROM_INJECTOR" = "2.0",
"TO_DN_ALL" = "0.0",
"TO_DN_EQ_ADDR_ALL" = "0.0",
"TO_DN_EQ_ADDR_SOME" = "0.0",
"TO_DN_NONE" = "0.0",
"TO_DN_RECIPIENTS" = "2.0",
"TO_DN_SOME" = "0.0",
"TO_DOM_EQ_FROM_DOM" = "0.0",
"TO_EQ_FROM" = "0.0",
"TO_EXCESS_BASE64" = "1.5",
"TO_EXCESS_QP" = "1.2",
"TO_MATCH_ENVRCPT_ALL" = "0.0",
"TO_MATCH_ENVRCPT_SOME" = "0.0",
"TO_NEEDS_ENCODING" = "1.0",
"TO_WRAPPED_IN_SPACES" = "2.0",
"TRUSTED_REPLY" = "-7.0",
"UNDISC_RCPTS_BULK" = "3.0",
"UNITEDINTERNET_SPAM" = "5.0",
"URIBL_BLACK" = "7.5",
"URIBL_BLOCKED" = "0.0",
"URIBL_GREY" = "1.5",
"URIBL_RED" = "3.5",
"URI_COUNT_ODD" = "0.5",
"URI_HIDDEN_PATH" = "1.0",
"URL_IN_SUBJECT" = "4.0",
"URL_REDIRECTOR_NESTED" = "1.0",
"VIOLATED_DIRECT_SPF" = "3.5",
"WP_COMPROMISED" = "0.0",
"WWW_DOT_DOMAIN" = "0.5",
"XM_CASE" = "0.5",
"XM_UA_NO_VERSION" = "0.01",
"X_PHP_EVAL" = "4.0",
"ZERO_WIDTH_SPACE_URL" = "7.0",
"SHORT_PART_BAD_HEADERS" = "7.0",
"MISSING_ESSENTIAL_HEADERS" = "7.0",
"SINGLE_SHORT_PART" = "0.0",
"COMPLETELY_EMPTY" = "7.0",
"LLM_UNSOLICITED_HIGH" = "3.0",
"LLM_UNSOLICITED_MEDIUM" = "2.0",
"LLM_UNSOLICITED_LOW" = "0.5",
"LLM_COMMERCIAL_HIGH" = "3.0",
"LLM_COMMERCIAL_MEDIUM" = "2.0",
"LLM_COMMERCIAL_LOW" = "0.5",
"LLM_HARMFUL_HIGH" = "3.0",
"LLM_HARMFUL_MEDIUM" = "2.0",
"LLM_HARMFUL_LOW" = "0.5",
"LLM_LEGITIMATE_HIGH" = "-3.0",
"LLM_LEGITIMATE_MEDIUM" = "-2.0",
"LLM_LEGITIMATE_LOW" = "-0.5"}

View File

@@ -1,39 +0,0 @@
spam-config = {
"add-spam" = true,
"add-spam-result" = true,
"learn-enable" = true,
"learn-balance" = "0.9",
"learn-ham-replies" = true,
"learn-ham-threshold" = "-0.5",
"learn-spam-threshold" = "6.0",
"threshold-spam" = "5.0",
"threshold-discard" = "0.0",
"threshold-reject" = "0.0",
"directory" = "",
"lookup" = "",
"llm-model" = "",
"llm-prompt" = "You are an AI assistant specialized in analyzing email content to detect unsolicited, commercial, or harmful messages. Your task is to examine the provided email, including its subject line, and determine if it falls into any of these categories. Please follow these steps:
- Carefully read the entire email content, including the subject line.
- Look for indicators of unsolicited messages, such as:
* Lack of prior relationship or consent
* Mass-mailing characteristics
* Vague or misleading sender information
- Identify commercial content by checking for:
* Promotional language
* Product or service offerings
* Call-to-action for purchases
- Detect potentially harmful content by searching for:
* Phishing attempts (requests for personal information, suspicious links)
* Malware indicators (suspicious attachments, urgent calls to action)
* Scams or fraudulent schemes
- Analyze the overall tone, intent, and legitimacy of the email.
- Determine the most appropriate single category for the email: Unsolicited, Commercial, Harmful, or Legitimate.
- Assess your confidence level in this determination: High, Medium, or Low.
- Provide a brief explanation for your determination.
- Format your response as follows, separated by commas: Category,Confidence,Explanation
* Example: Unsolicited,High,The email contains mass-mailing characteristics without any prior relationship context.
Here's the email to analyze, please provide your analysis based on the above instructions, ensuring your response is in the specified comma-separated format:",
"add-llm-result" = true
}

File diff suppressed because it is too large Load Diff

View File

@@ -1,79 +0,0 @@
if eval "t.MISSING_ESSENTIAL_HEADERS && t.SINGLE_SHORT_PART" {
let "t.SHORT_PART_BAD_HEADERS" "1";
}
if eval "t.FORGED_RECIPIENTS && t.MAILLIST" {
let "t.FORGED_RECIPIENTS_MAILLIST" "1";
}
if eval "t.FORGED_SENDER && t.MAILLIST" {
let "t.FORGED_SENDER_MAILLIST" "1";
}
if eval "t.DMARC_POLICY_ALLOW && (t.SPF_SOFTFAIL || t.SPF_FAIL || t.DKIM_REJECT)" {
let "t.DMARC_POLICY_ALLOW_WITH_FAILURES" "1";
}
if eval "t.DKIM_NA && t.SPF_NA && t.DMARC_NA && t.ARC_NA" {
let "t.AUTH_NA" "1";
}
if eval "!(t.DKIM_NA && t.SPF_NA && t.DMARC_NA && t.ARC_NA) && (t.DKIM_NA || t.DKIM_TEMPFAIL || t.DKIM_PERMFAIL) && (t.SPF_NA || t.SPF_DNSFAIL) && t.DMARC_NA && (t.ARC_NA || t.ARC_DNSFAIL)" {
let "t.AUTH_NA_OR_FAIL" "1";
}
if eval "(t.AUTH_NA || t.AUTH_NA_OR_FAIL) && (t.BOUNCE || t.SUBJ_BOUNCE_WORDS)" {
let "t.BOUNCE_NO_AUTH" "1";
}
if eval "(t.HAS_X_POS || t.HAS_PHPMAILER_SIG) && t.HAS_WP_URI && (t.PHISHING || t.CRACKED_SURBL || t.PH_SURBL_MULTI || t.DBL_PHISH || t.DBL_ABUSE_PHISH || t.URIBL_BLACK || t.PHISHED_OPENPHISH || t.PHISHED_PHISHTANK)" {
let "t.HACKED_WP_PHISHING" "1";
}
if eval "(t.HAS_XOIP || t.RCVD_FROM_SMTP_AUTH) && t.DCC_BULK" {
let "t.COMPROMISED_ACCT_BULK" "1";
}
if eval "t.DCC_BULK && (t.MISSING_TO || t.R_UNDISC_RCPT)" {
let "t.UNDISC_RCPTS_BULK" "1";
}
if eval "t.RECEIVED_SPAMHAUS_PBL && !t.RCVD_VIA_SMTP_AUTH" {
let "t.RCVD_UNAUTH_PBL" "1";
}
if eval "(t.DKIM_ALLOW || t.ARC_ALLOW) && t.RCVD_IN_DNSWL_MED" {
let "t.RCVD_DKIM_ARC_DNSWL_MED" "1";
}
if eval "(t.DKIM_ALLOW || t.ARC_ALLOW) && t.RCVD_IN_DNSWL_HI" {
let "t.RCVD_DKIM_ARC_DNSWL_HI" "1";
}
if eval "(t.HAS_X_POS || t.HAS_PHPMAILER_SIG || t.HAS_X_PHP_SCRIPT) && (t.SUBJECT_ENDS_QUESTION || t.SUBJECT_ENDS_EXCLAIM || t.MANY_INVISIBLE_PARTS)" {
let "t.AUTOGEN_PHP_SPAMMY" "1";
}
if eval "(t.PHISHING || t.DBL_PHISH || t.PHISHED_OPENPHISH || t.PHISHED_PHISHTANK) && (t.SUBJECT_ENDS_QUESTION || t.SUBJECT_ENDS_EXCLAIM)" {
let "t.PHISH_EMOTION" "1";
}
if eval "t.HAS_GUC_PROXY_URI || t.URIBL_RED || t.DBL_ABUSE_REDIR || t.HAS_ONION_URI" {
let "t.HAS_ANON_DOMAIN" "1";
}
if eval "(t.SPF_FAIL || t.SPF_SOFTFAIL) && (t.RCVD_COUNT_ZERO || t.RCVD_NO_TLS_LAST)" {
let "t.VIOLATED_DIRECT_SPF" "1";
}
if eval "(t.FREEMAIL_FROM || t.FREEMAIL_ENVFROM || t.FREEMAIL_REPLYTO) && (t.TO_DN_RECIPIENTS || t.R_UNDISC_RCPT) && (t.FROM_NAME_HAS_TITLE || t.FREEMAIL_REPLYTO_NEQ_FROM_DOM)" {
let "t.FREEMAIL_AFF" "1";
}
if eval "t.URL_ONLY && t.REDIRECTOR_URL" {
let "t.REDIRECTOR_URL_ONLY" "1";
}
if eval "t.FAKE_REPLY && t.RCVD_VIA_SMTP_AUTH && (!t.RECEIVED_SPAMHAUS_PBL || t.RECEIVED_SPAMHAUS_XBL || t.RECEIVED_SPAMHAUS_SBL)" {
let "t.THREAD_HIJACKING_FROM_INJECTOR" "1";
}

View File

@@ -1,44 +0,0 @@
# Whether to add an X-Spam-Status header
let "ADD_HEADER_SPAM" "key_get('spam-config', 'add-spam')";
# Whether to add an X-Spam-Result header
let "ADD_HEADER_SPAM_RESULT" "key_get('spam-config', 'add-spam-result')";
# Whether message replies from authenticated users should be learned as ham
let "AUTOLEARN_REPLIES_HAM" "key_get('spam-config', 'learn-ham-replies')";
# Whether the bayes classifier should be trained automatically
let "AUTOLEARN_ENABLE" "key_get('spam-config', 'learn-enable') && !env.test";
# When to learn ham (score >= threshold)
let "AUTOLEARN_HAM_THRESHOLD" "key_get('spam-config', 'learn-ham-threshold')";
# When to learn spam (score <= threshold)
let "AUTOLEARN_SPAM_THRESHOLD" "key_get('spam-config', 'learn-spam-threshold')";
# Keep difference for spam/ham learns for at least this value
let "AUTOLEARN_SPAM_HAM_BALANCE" "key_get('spam-config', 'learn-balance')";
# If ADD_HEADER_SPAM is enabled, mark as SPAM messages with a score above this threshold
let "SCORE_SPAM_THRESHOLD" "key_get('spam-config', 'threshold-spam')";
# Discard messages with a score above this threshold
let "SCORE_DISCARD_THRESHOLD" "key_get('spam-config', 'threshold-discard')";
# Reject messages with a score above this threshold
let "SCORE_REJECT_THRESHOLD" "key_get('spam-config', 'threshold-reject')";
# Directory name to use for local domain lookups (leave empty for default)
let "DOMAIN_DIRECTORY" "key_get('spam-config', 'directory')";
# Store to use for Bayes tokens and ids (leave empty for default)
let "SPAM_DB" "key_get('spam-config', 'lookup')";
# LLM model to use for spam classification
let "LLM_MODEL" "key_get('spam-config', 'llm-model')";
# LLM prompt to use for spam classification
let "LLM_PROMPT_TEXT" "key_get('spam-config', 'llm-prompt')";
# Whether to add an X-Spam-Llm-Result header
let "ADD_HEADER_LLM" "key_get('spam-config', 'add-llm-result')";