File: //etc/mail/spamassassin/local.cf
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
# Only a small subset of options are listed below
#
###########################################################################
# A 'contact address' users should contact for more info. (replaces
# _CONTACTADDRESS_ in the report template)
# report_contact youremailaddress@domain.tld
# Add *****SPAM***** to the Subject header of spam e-mails
#
# rewrite_header Subject *****SPAM*****
# Save spam messages as a message/rfc822 MIME attachment instead of
# modifying the original message (0: off, 2: use text/plain instead)
#
# report_safe 1
# Set which networks or hosts are considered 'trusted' by your mail
# server (i.e. not spammers)
#
trusted_networks 102.212.247.147 103.102.234.200 103.108.12.155 103.110.83.84 103.118.16.254 103.137.165.118 103.137.165.119 103.14.120.55 103.154.184.184 103.161.42.248 103.161.43.42 103.161.43.45 103.19.136.7 103.191.208.91 103.191.209.249 103.20.215.58 103.224.247.244 103.251.150.2 103.91.186.170 103.92.235.17 103.92.235.18 108.166.43.2 116.202.134.139 119.18.49.63 119.252.155.15 136.143.183.44 136.143.191.44 139.180.131.233 142.250.101.26 142.250.101.27 142.250.4.27 142.251.12.27 143.110.185.169 146.20.161.1 146.20.161.2 147.182.130.78 147.182.160.18 147.182.180.139 147.182.189.184 148.113.25.214 162.159.205.11 162.159.205.12 162.159.205.13 162.159.205.17 162.159.205.18 162.159.205.19 162.159.205.23 162.159.205.24 162.159.205.25 162.214.80.18 162.215.2.27 162.215.3.25 162.215.3.26 162.255.118.51 162.255.118.52 164.90.197.105 164.90.197.143 164.90.197.162 164.90.197.79 167.235.118.234 169.148.149.118 17.42.251.62 17.56.9.31 17.57.152.5 17.57.154.33 17.57.155.25 17.57.156.30 172.217.194.26 172.217.194.27 172.217.221.26 172.217.221.27 172.217.78.26 172.217.78.27 172.253.134.27 172.253.144.27 172.253.158.26 172.65.182.103 173.203.187.2 18.211.45.15 180.149.241.251 184.106.54.2 185.158.133.1 190.92.174.0/24 190.92.174.103 190.92.174.81 192.178.163.26 192.178.163.27 192.178.211.109 192.185.166.117 195.250.30.73 195.250.31.59 198.252.102.209 199.193.206.103 199.36.158.100 199.79.62.16 199.79.62.228 202.103.0.100 206.183.111.67 208.74.120.0/21 217.21.85.16 23.106.55.197 23.106.66.209 2401:7500:fffa:0001:0000:0000:0000:0011 2404:6800:4000:1025:0000:0000:0000:006d 2404:6800:4003:0c00:0000:0000:0000:001b 2404:6800:4003:0c01:0000:0000:0000:001a 2404:6800:4003:0c02:0000:0000:0000:001a 2404:6800:4003:0c02:0000:0000:0000:001b 2404:6800:4003:0c03:0000:0000:0000:001a 2404:6800:4003:0c03:0000:0000:0000:001b 2404:6800:4003:0c04:0000:0000:0000:001a 2404:6800:4003:0c04:0000:0000:0000:001b 2404:6800:4003:0c22:0000:0000:0000:001a 2404:6800:4003:0c24:0000:0000:0000:001a 2404:6800:4003:0c26:0000:0000:0000:001a 2404:6800:400b:c017:0000:0000:0000:001a 2404:6800:400b:c017:0000:0000:0000:001b 2606:4700:0090:0000:c1f8:f874:2386:b61f 2606:4700:00f5:0000:0000:0000:0000:000b 2606:4700:00f5:0000:0000:0000:0000:000c 2606:4700:00f5:0000:0000:0000:0000:000d 2606:4700:00f5:0000:0000:0000:0000:000e 2606:4700:00f5:0000:0000:0000:0000:000f 2606:4700:00f5:0000:0000:0000:0000:0010 2606:4700:00f5:0000:0000:0000:0000:0011 2606:4700:00f5:0000:0000:0000:0000:0012 2606:4700:00f5:0000:0000:0000:0000:0013 2607:f8b0:400e:0c17:0000:0000:0000:001b 2607:f8b0:4023:0c06:0000:0000:0000:001a 2607:f8b0:4023:0c06:0000:0000:0000:001b 2607:f8b0:4023:1c05:0000:0000:0000:001a 2607:f8b0:4023:1c05:0000:0000:0000:001b 2a01:0111:f403:cc2c:0000:0000:0000:0000 2a01:0111:f403:cc2c:0000:0000:0000:0001 2a01:0111:f403:cc2d:0000:0000:0000:0000 2a01:0111:f403:cc2d:0000:0000:0000:0001 3.216.63.151 3.6.66.124 38.143.66.193 43.227.17.2 45.59.167.21 52.101.144.0 52.101.144.3 52.101.145.0 52.101.145.2 52.5.58.87 64.78.24.74 66.96.140.146 66.96.140.147 69.174.52.71 69.57.172.96 74.125.130.27 74.125.200.26 74.125.200.27 74.125.24.26 74.125.24.27 74.125.68.26 74.125.68.27 92.204.80.0 92.204.80.3 94.130.248.189 # Autoconfigured by cPanel - Remove this end of line comment to avoid future updates
# Set file-locking method (flock is not safe over NFS, but is faster)
#
# lock_method flock
# Set the threshold at which a message is considered spam (default: 5.0)
#
# required_score 5.0
# Use Bayesian classifier (default: 1)
#
# use_bayes 1
# Bayesian classifier auto-learning (default: 1)
#
# bayes_auto_learn 1
# Set headers which may provide inappropriate cues to the Bayesian
# classifier
#
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status
# Whether to decode non- UTF-8 and non-ASCII textual parts and recode
# them to UTF-8 before the text is given over to rules processing.
#
# normalize_charset 1
# Textual body scan limit (default: 50000)
#
# Amount of data per email text/* mimepart, that will be run through body
# rules. This enables safer and faster scanning of large messages,
# perhaps having very large textual attachments. There should be no need
# to change this well tested default.
#
# body_part_scan_size 50000
# Textual rawbody data scan limit (default: 500000)
#
# Amount of data per email text/* mimepart, that will be run through
# rawbody rules.
#
# rawbody_part_scan_size 500000
# Some shortcircuiting, if the plugin is enabled
#
ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
#
# default: strongly-welcomelisted mails are *really* welcomelisted now, if
# the shortcircuiting plugin is active, causing early exit to save CPU
# load. Uncomment to turn this on
#
# SpamAssassin tries hard not to launch DNS queries before priority -100.
# If you want to shortcircuit without launching unneeded queries, make
# sure such rule priority is below -100. These examples are already:
#
# shortcircuit USER_IN_WELCOMELIST on
# shortcircuit USER_IN_DEF_WELCOMELIST on
# shortcircuit USER_IN_ALL_SPAM_TO on
# the opposite; blocklisted mails can also save CPU
#
# shortcircuit USER_IN_BLOCKLIST on
# shortcircuit USER_IN_BLOCKLIST_TO on
# if you have taken the time to correctly specify your "trusted_networks",
# this is another good way to save CPU
#
# shortcircuit ALL_TRUSTED on
# and a well-trained bayes DB can save running rules, too
#
# shortcircuit BAYES_99 spam
# shortcircuit BAYES_00 ham
endif # Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::ResourceLimits
resource_limit_mem 536870912
dns_available yes # Autoconfigured by cPanel - comment out this line or set to no to avoid future updates
# BEGIN ANSIBLE MANAGED BLOCK - Abusix
ifplugin Mail::SpamAssassin::Plugin::DNSEval
header __RCVD_IN_AMI eval:check_rbl('ami', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.')
describe __RCVD_IN_AMI Received via a relay in Guardian Mail
tflags __RCVD_IN_AMI net
header RCVD_IN_AMI_BLACK eval:check_rbl_sub('ami', '^127\.0\.0\.(?:[23]|200)$')
describe RCVD_IN_AMI_BLACK Received via a relay in Guardian Mail Black
score RCVD_IN_AMI_BLACK 3.0
tflags RCVD_IN_AMI_BLACK net
header RCVD_IN_AMI_EXPLOIT eval:check_rbl_sub('ami', '127.0.0.4')
describe RCVD_IN_AMI_EXPLOIT Received via a relay in Guardian Mail Exploit
score RCVD_IN_AMI_EXPLOIT 3.0
tflags RCVD_IN_AMI_EXPLOIT net
header RCVD_IN_AMI_DYN eval:check_rbl('ami-lastexternal', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.', '^127\.0\.0\.1[12]$')
describe RCVD_IN_AMI_DYN Received via a relay in Guardian Mail Dynamic
score RCVD_IN_AMI_DYN 3.0
tflags RCVD_IN_AMI_DYN net
header RCVD_IN_AMI_WHITE eval:check_rbl('ami-firsttrusted', 'b4748383a2e8302a1604b905270505cd.combined.mail.abusix.zone.', '127.0.2.1')
describe RCVD_IN_AMI_WHITE Received via a relay in Guardian Mail White
score RCVD_IN_AMI_WHITE -0.1
tflags RCVD_IN_AMI_WHITE nice net
endif
ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
urirhsbl URIBL_AMI_DBLACK b4748383a2e8302a1604b905270505cd.dblack.mail.abusix.zone. A
body URIBL_AMI_DBLACK eval:check_uridnsbl('URIBL_AMI_DBLACK')
describe URIBL_AMI_DBLACK Contains a spam URL listed in the Guardian Mail domain blocklist
score URIBL_AMI_DBLACK 3.0
tflags URIBL_AMI_DBLACK net
urirhssub URIBL_AMI_WHITE b4748383a2e8302a1604b905270505cd.white.mail.abusix.zone. A 127.0.2.1
body URIBL_AMI_WHITE eval:check_uridnsbl('URIBL_AMI_WHITE')
describe URIBL_AMI_WHITE Contains a domain listed in the Guardian Mail domain whitelist
score URIBL_AMI_WHITE -0.1
tflags URIBL_AMI_WHITE nice net
endif
# END ANSIBLE MANAGED BLOCK - Abusix