Inspección del trabajo
CAPÍTULO 3. UNIÓN DE COOPERATIVAS TOSEPAN
disabled
Enable URI Blocklist. Messages that fail URIBL validation will receive URIBLError SMTP error code. This requires an installed
Net::DNS module and an installed Email::MIME module in PERL.
0 = disabled, 1 = block, 2 = monitor, 3 = messagescore .
Do URI Blocklist Validation for Whitelisted (URIBLWL) •
URIBL check is done ignoring all spamlovers and testmodes!
Do URI Blocklist Validation for NoProcessing (URIBLNP) •
URIBL check is done ignoring all spamlovers and testmodes!
Do URI Blocklist Validation for Local Mails (URIBLLocal) •
Do URI Blocklist Validation for ISP/Secondary (URIBLISP) •
URIBL Service Providers* (URIBLServiceProvider) •
multi.uribl.com|sc.surbl.org|ws.surbl.org|ob.surbl.org|ab.surbl.org|ph.surbl.org|jp.surbl.org
Domain Names of URIBLs to use separated by "|". You may set for every provider a weight like multi.surbl.org=>50|black.uribl.com=>25.
The value of the weight can be set directly like=>45 or as a divisor of URIBLmaxweight . Low numbers < 6 are divisors . So if
URIBLmaxweight = 50 (default) multi.surbl.org=>50 would be the same as multi.surbl.org=>1, multi.surbl.org=>2 would be the same as multi.surbl.org=>25.
If the sum of weights surpasses URIBLmaxweight, the URIBL check fails. If not, the URIBL check is scored as "neutral" even with URIBLmaxhits reached. Setting Showmaxreplies will allow ALL replies to contribute to the total weight regardless of URIBLmaxhits.
Some URIBL Service Providers, like multi.surbl.org and black.uribl.com , provides different return codes in a single DNS-zone: like 127.a.b.c - where a,b,c are used to identify a weight or type (or what ever) of the returned entry. If you want to care about special return codes, or if you want to use different weights for different return codes, you should use the following enhanced entry syntax: URIBL-Service-Provider=>result-to-watch=>weight (like:) multi.surbl.org=>127.0.0.2=>2 multi.surbl.org=>127.0.0.4=>3 multi.surbl.org=>127.0.0.?=>4 multi.surbl.org=>127.0.0.*=>5
You can see, the wildcards * (multiple character) and ? (single character) are possible to use in the second parameter. Never mix the three possible syntax types for the same URIBL Service Provider. An search for a match inside such a definition is done in reverse ASCII order, so the wildcards are used as last.
Some URIBL Service Providers, provides different return codes using a bitmask in any part of the reply. To define weights for bitmasks, place a single 'M' in front of the mask number, like
sp.com=>127.0.0.M2=>25 sp.com=>127.0.0.M4=>41 sp.com=>127.0.M1.5=>56 sp.com=>127.0.M64.*=>11 sp.com=>127.0.0.2=>22 sp.com=>127.0.*.*=>1
Valid bitmasks are 1,2,4,8,16,32,64 and 128. The resulting weight will be the weight sum of all matching bitmasks (if no full qualified definition is found). For example: a return code of 127.0.0.6 for sp.com will result in a weight of 66 (25+41), a reply of 127.0.0.2 will result in 22
Because each single bitmask indicates a set of 128 numbers you should prevent the usage of something like 127.0.M16.M1 - this will lead in to a set of (128*128) 16384 addresses, which is really too much!
For the same service provider, first define all bitmask definitions, after that all full qualified definitions and than all definitions with wildcards, like in the example above! If your definition order is wrong, the resulting weights will be unexpected! Default is: multi.surbl.org|black.uribl.com
URIBL Country Code TLDs* (URIBLCCTLDS)
file:files/URIBLCCTLDS.txt Edit file
List of two level country code TLDs and three level country code TLDs used to determine the base domain of the uri. Two level TLDs will be checked on third level, third level TLDs will be checked on fourth level. Any not listed domain will be checked in level two.
Maximum URIs (URIBLmaxuris) • 250
More than this number of URIs in the body will increase spam probability. Enter 0 to disable feature.
Maximum Unique Domain URIs (URIBLmaxdomains) • 10
Disallow Obfuscated URIs (URIBLNoObfuscated) •
When enabled, messages with obfuscated URIs of types [integer/octal/hex IP, other things!] in the body will get increased spam probability and if weights are used, the double weight will be used.
Check for 'DOT' in URI (URIBLcheckDOTinURI) •
When enabled, assp will also check for the used word 'DOT' instead of a '.' in URI's like 'exampledotcom or example!d o-t_com' . Enable this feature only, if you don't expect any problems in your national language (using 'dot' + a toplevel domain in any words).
Maximum Replies (URIBLmaxreplies) • 1
A reply is affirmative or negative reply from a URIBL.
The URIBL module will wait for this number of replies (negative or positive) from the URIBLs listed under Service Provider for up to the Maximum Time below. This number should be equal to or less than the number of URIBL Service Providers listed to allow for randomly unavailable URIBLs.
Maximum Hits (URIBLmaxhits) • 1
A hit is an affirmative response from a URIBL.
The URIBL module will check all of the URIBLs listed under Service Provider,
and flag the email with a URIBL failure flag if more than this number of URIBLs return a postive blacklisted response.
This number should be less than or equal to Maximum Replies above and greater than 0. If the number of hits is greater or equal Maximum Hits, the email is flagged failed in every case! If the number of hits is greater 0 and less Maximum Hits, the email is flagged neutral.
This behavior could be changed to your needs by using weighted values for the URIBLServiceProvider .
URIBL Maximum Weight (URIBLmaxweight) • 50
A weight is a number representing the trust we put into a URIBL.
The URIBL module will check all of the URIBLs listed under URIBLServiceProvider for every URI found in an email. If the total of weights for an URI is greater or equal this Maximum Weight, the email is flagged Failed.
If the total of weights is greater 0 and less Maximum Weight, the email is flagged Neutral . If not defined or set to zero only the hit count will used to detect a fail or neutral state.
Maximum Time (URIBLmaxtime) • 10
This sets the maximum time in seconds to spend on each message performing URIBL checks.
Socket Timeout (URIBLsocktime) • 5
This sets the URIBL socket read timeout in seconds.
Whitelisted URIBL Domains* (URIBLwhitelist) • doubleclick.net|conrad.de
This prevents specific domains from being checked by URIBL module. For example: doubleclick.net or file:files/URIBLwhitelist.txt. Domains already listed in noProcessingDomains and whiteListedDomains will be honored.
Don't Check Messages from these Addresses* (noURIBL) •
Don't validate URIBL when messages come from these addresses. Accepts specific addresses ([email protected]), user parts (user) or entire domains (@domain.com).
For example: [email protected]|jhanna|@sillyguys.org
Bad URI IP's* (URIBLIPRe) •
Every IP in an URI and every IP resolved for a hostname in an URI is checked against this list of IP's or networks. For example:145.145.145.145|145.146.|1.2.0.0/16
This high security feature will follow the rules in URIBLWL, URIBLNP, URIBLLocal and URIBLISP - but if a match is found, it will block the email ( ignores scoring, monitoring, testmodes and spamlover ).
Add X-Assp-Received-URIBL Header (AddURIBLHeader) •
Add X-Assp-Received-URIBL header to messages with positive reply from URIBL.
Add X-Assp-Detected-URI Header (AddURIS2MyHeader) •
URI's detected with URIBLOK are added to our header lines (X-Assp-Detected-URI:).
URIBL Cache Refresh Interval for Hits (URIBLCacheInterval) • 7
URIBL Cache Refresh Interval for Misses (URIBLCacheIntervalMiss) • 0.5
Domains in cache with status=2 (miss) will be removed after this interval in days. Empty or 0 will prevent caching of non-hits.
Reply Code to Refuse Failed URIBL Message (URIBLError) •
554 5.7.1 Blacklisted by URIBLNAME Contact the postmaster of this domain for resolution. This attempt has been logged.
SMTP reply code to refuse failed URIBL message. The literal URIBLNAME (case sensitive) is replaced by the names of URIBLs with negative response. If this field is empty, client connection is simply dropped.
Notes On URIBL
Attachment Blocking External Attachment Blocking (DoBlockExes) •
block
This requires an installed Email::MIME module in PERL.
External Attachment Blocking Level (BlockExes) • Level 1
Set the level of Attachment Blocking to 1-3 for attachments that should be blocked, set level to 4 for attachments that should be allowed. Choose 0 for no attachment blocking.
Whitelisted & Local Attachment Blocking (BlockWLExes) • Level 0
Set the level of Attachment Blocking to 0-4 for whitelisted & local senders. Choose 0 for no attachment blocking.
NoProcessing Attachment Blocking (BlockNPExes) • Level 0
Set the level of Attachment Blocking to 0-4 for no processing senders. Choose 0 for no attachment blocking.
Level 1 rejected File Extensions (BadAttachL1) • exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab]
This regular expression is used to identify Level 1 attachments that should be blocked. Separate entries with a pipe |. The dot . is assumed to precede these, so don't include it. For example:
ad[ep]|asx|ba[st]|chm|cmd|com|cpl|crt|dbx|exe|exe\-bin|hlp|ht[ab]|in[fs]|isp|js|jse|lnk|md[abez]|mht|ms[cipt] |nch|pcd|pif|prf|ps1?|reg|sc[frt]|sh[bs]|vb|vb[es]|wms|ws[cfh]
If you've installed the ASSP_AFC Plugin (at least version 2.10) and 'exe-bin' is defined (on any level), the Plugin will detect executable files based on there binary content. Detected will be all executables, libraries and scripts for DOS and Windows (except .com files), MAC-OS and linux ELF (for all processor architectures).