File: //etc/mail/spamassassin/local.cf
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
# Only a small subset of options are listed below
#
###########################################################################
# A 'contact address' users should contact for more info. (replaces
# _CONTACTADDRESS_ in the report template)
# report_contact youremailaddress@domain.tld
# Add *****SPAM***** to the Subject header of spam e-mails
#
# rewrite_header Subject *****SPAM*****
# Save spam messages as a message/rfc822 MIME attachment instead of
# modifying the original message (0: off, 2: use text/plain instead)
#
# report_safe 1
# Set which networks or hosts are considered 'trusted' by your mail
# server (i.e. not spammers)
#
trusted_networks 103.103.196.235 103.108.12.155 103.117.180.32 103.133.215.103 103.154.184.184 103.185.74.139 103.19.136.7 103.20.215.170 103.211.202.60 103.212.121.117 103.251.150.2 103.53.40.140 103.53.42.3 103.93.16.21 104.37.34.70 104.37.34.71 104.37.34.72 104.37.34.73 108.177.125.26 108.177.125.27 119.252.155.15 132.148.177.42 134.209.200.192 138.201.224.155 139.59.80.193 142.250.143.121 161.248.223.108 162.159.205.11 162.159.205.12 162.159.205.13 162.159.205.17 162.159.205.18 162.159.205.19 162.159.205.23 162.159.205.24 162.159.205.25 162.215.2.27 162.215.240.133 162.215.3.25 162.215.3.26 162.222.225.198 162.241.123.138 162.255.118.51 162.255.118.52 162.255.118.7 162.255.118.8 169.148.146.168 169.148.149.118 172.217.78.26 172.253.158.26 172.253.158.27 172.65.182.103 173.194.43.26 173.194.43.27 173.254.28.86 180.149.241.251 190.92.174.0/24 190.92.174.248 190.92.174.87 190.92.174.92 192.178.211.26 192.178.211.27 192.178.230.26 192.178.230.27 194.163.160.59 194.63.252.21 194.63.252.22 194.63.252.27 194.63.252.28 194.63.252.29 195.250.21.126 202.66.174.165 202.66.174.166 202.66.174.22 202.66.174.41 202.71.131.224 204.141.43.44 206.183.111.67 207.174.215.130 208.74.120.0/21 2404:6800:4000:100c:0000:0000:0000:0079 2404:6800:4000:1025:0000:0000:0000:001a 2404:6800:4000:1025:0000:0000:0000:001b 2404:6800:4003:0c26:0000:0000:0000:001a 2404:6800:4003:0c26:0000:0000:0000:001b 2404:6800:4008:0c01:0000:0000:0000:001a 2404:6800:4008:0c01:0000:0000:0000:001b 2404:6800:400b:c01b:0000:0000:0000:001a 2606:4700:0090:0000:c1f8:f874:2386:b61f 2606:4700:00f5:0000:0000:0000:0000:000b 2606:4700:00f5:0000:0000:0000:0000:000c 2606:4700:00f5:0000:0000:0000:0000:000d 2606:4700:00f5:0000:0000:0000:0000:000e 2606:4700:00f5:0000:0000:0000:0000:000f 2606:4700:00f5:0000:0000:0000:0000:0010 2606:4700:00f5:0000:0000:0000:0000:0011 2606:4700:00f5:0000:0000:0000:0000:0012 2606:4700:00f5:0000:0000:0000:0000:0013 2607:f8b0:400e:0c1e:0000:0000:0000:001a 2607:f8b0:400e:0c1e:0000:0000:0000:001b 2607:f8b0:4023:1c05:0000:0000:0000:001a 2607:f8b0:4023:1c05:0000:0000:0000:001b 2a01:0111:f403:ca09:0000:0000:0000:0000 2a01:0111:f403:ca09:0000:0000:0000:0004 2a01:0111:f403:ca09:0000:0000:0000:000c 2a01:0111:f403:ca09:0000:0000:0000:000e 2a01:0111:f403:cc09:0000:0000:0000:0000 2a01:0111:f403:cc1a:0000:0000:0000:0008 2a01:0111:f403:cc1f:0000:0000:0000:0004 2a01:0111:f403:cc2c:0000:0000:0000:0000 2a01:0111:f403:cc2c:0000:0000:0000:0001 2a01:0111:f403:cc2d:0000:0000:0000:0000 2a01:0111:f403:cc2d:0000:0000:0000:0001 2a01:0111:f403:cc31:0000:0000:0000:0001 2a01:0111:f403:cc31:0000:0000:0000:0002 2a01:0111:f403:cc33:0000:0000:0000:0000 2a01:0111:f403:cc33:0000:0000:0000:0001 2a01:0111:f403:f902:0000:0000:0000:0000 2a01:0111:f403:f902:0000:0000:0000:0001 2a01:0111:f403:f908:0000:0000:0000:0001 2a01:0111:f403:f90a:0000:0000:0000:0000 2a01:5b40:0000:2201:0000:0000:0000:0001 2a01:5b40:0000:2202:0000:0000:0000:0001 2a01:5b40:0000:2203:0000:0000:0000:0001 2a01:5b40:0000:2204:0000:0000:0000:0001 2a01:5b40:0000:2205:0000:0000:0000:0001 2a02:06b8:0000:0000:0000:0000:0000:0311 3.108.154.143 38.143.66.193 43.227.17.2 45.113.122.52 52.101.10.11 52.101.11.2 52.101.124.117 52.101.137.0 52.101.144.0 52.101.144.3 52.101.145.0 52.101.145.2 52.101.149.1 52.101.149.2 52.101.151.0 52.101.151.5 52.101.157.80 52.101.194.1 52.101.42.18 52.101.50.9 52.101.73.13 52.101.73.19 52.101.73.24 52.101.73.26 52.101.73.4 52.101.8.42 52.101.9.12 65.109.128.50 74.63.219.34 77.88.21.249 81.236.55.176 92.204.80.19 92.204.80.20 # Autoconfigured by cPanel - Remove this end of line comment to avoid future updates
# Set file-locking method (flock is not safe over NFS, but is faster)
#
# lock_method flock
# Set the threshold at which a message is considered spam (default: 5.0)
#
# required_score 5.0
# Use Bayesian classifier (default: 1)
#
# use_bayes 1
# Bayesian classifier auto-learning (default: 1)
#
# bayes_auto_learn 1
# Set headers which may provide inappropriate cues to the Bayesian
# classifier
#
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status
# Whether to decode non- UTF-8 and non-ASCII textual parts and recode
# them to UTF-8 before the text is given over to rules processing.
#
# normalize_charset 1
# Textual body scan limit (default: 50000)
#
# Amount of data per email text/* mimepart, that will be run through body
# rules. This enables safer and faster scanning of large messages,
# perhaps having very large textual attachments. There should be no need
# to change this well tested default.
#
# body_part_scan_size 50000
# Textual rawbody data scan limit (default: 500000)
#
# Amount of data per email text/* mimepart, that will be run through
# rawbody rules.
#
# rawbody_part_scan_size 500000
# Some shortcircuiting, if the plugin is enabled
#
ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
#
# default: strongly-welcomelisted mails are *really* welcomelisted now, if
# the shortcircuiting plugin is active, causing early exit to save CPU
# load. Uncomment to turn this on
#
# SpamAssassin tries hard not to launch DNS queries before priority -100.
# If you want to shortcircuit without launching unneeded queries, make
# sure such rule priority is below -100. These examples are already:
#
# shortcircuit USER_IN_WELCOMELIST on
# shortcircuit USER_IN_DEF_WELCOMELIST on
# shortcircuit USER_IN_ALL_SPAM_TO on
# the opposite; blocklisted mails can also save CPU
#
# shortcircuit USER_IN_BLOCKLIST on
# shortcircuit USER_IN_BLOCKLIST_TO on
# if you have taken the time to correctly specify your "trusted_networks",
# this is another good way to save CPU
#
# shortcircuit ALL_TRUSTED on
# and a well-trained bayes DB can save running rules, too
#
# shortcircuit BAYES_99 spam
# shortcircuit BAYES_00 ham
endif # Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::ResourceLimits
resource_limit_mem 536870912
dns_available yes # Autoconfigured by cPanel - comment out this line or set to no to avoid future updates
# BEGIN ANSIBLE MANAGED BLOCK - Abusix
ifplugin Mail::SpamAssassin::Plugin::DNSEval
header __RCVD_IN_AMI eval:check_rbl('ami', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.')
describe __RCVD_IN_AMI Received via a relay in Guardian Mail
tflags __RCVD_IN_AMI net
header RCVD_IN_AMI_BLACK eval:check_rbl_sub('ami', '^127\.0\.0\.(?:[23]|200)$')
describe RCVD_IN_AMI_BLACK Received via a relay in Guardian Mail Black
score RCVD_IN_AMI_BLACK 3.0
tflags RCVD_IN_AMI_BLACK net
header RCVD_IN_AMI_EXPLOIT eval:check_rbl_sub('ami', '127.0.0.4')
describe RCVD_IN_AMI_EXPLOIT Received via a relay in Guardian Mail Exploit
score RCVD_IN_AMI_EXPLOIT 3.0
tflags RCVD_IN_AMI_EXPLOIT net
header RCVD_IN_AMI_DYN eval:check_rbl('ami-lastexternal', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.', '^127\.0\.0\.1[12]$')
describe RCVD_IN_AMI_DYN Received via a relay in Guardian Mail Dynamic
score RCVD_IN_AMI_DYN 3.0
tflags RCVD_IN_AMI_DYN net
header RCVD_IN_AMI_WHITE eval:check_rbl('ami-firsttrusted', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.', '127.0.2.1')
describe RCVD_IN_AMI_WHITE Received via a relay in Guardian Mail White
score RCVD_IN_AMI_WHITE -0.1
tflags RCVD_IN_AMI_WHITE nice net
endif
ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
urirhsbl URIBL_AMI_DBLACK b4748383a2e8302a1604b905270505cd.dblack.mail.abusix.zone. A
body URIBL_AMI_DBLACK eval:check_uridnsbl('URIBL_AMI_DBLACK')
describe URIBL_AMI_DBLACK Contains a spam URL listed in the Guardian Mail domain blocklist
score URIBL_AMI_DBLACK 3.0
tflags URIBL_AMI_DBLACK net
urirhssub URIBL_AMI_WHITE b4748383a2e8302a1604b905270505cd.white.mail.abusix.zone. A 127.0.2.1
body URIBL_AMI_WHITE eval:check_uridnsbl('URIBL_AMI_WHITE')
describe URIBL_AMI_WHITE Contains a domain listed in the Guardian Mail domain whitelist
score URIBL_AMI_WHITE -0.1
tflags URIBL_AMI_WHITE nice net
endif
# END ANSIBLE MANAGED BLOCK - Abusix