# http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4945 # http://open-whois.org/01_openwhois.cf # --------------------------------------------------------------------------- # high hit-rates # if you want to use bl.open-whois.org. as an RHSBL as well ifplugin Mail::SpamAssassin::Plugin::DNSEval header DNS_FROM_OPENWHOIS eval:check_rbl_envfrom('openwhois', 'bl.open-whois.org.') describe DNS_FROM_OPENWHOIS Envelope sender listed in bl.open-whois.org. tflags DNS_FROM_OPENWHOIS net publish endif # score DNS_FROM_OPENWHOIS 1.0 ifplugin Mail::SpamAssassin::Plugin::URIDNSBL urirhssub WHOIS_PRIVPROT bl.open-whois.org. A 127.0.0.3 body WHOIS_PRIVPROT eval:check_uridnsbl('WHOIS_PRIVPROT') describe WHOIS_PRIVPROT URL registered to WHOIS Privacy Protection tflags WHOIS_PRIVPROT net publish # score WHOIS_PRIVPROT 2.5 urirhssub WHOIS_SECUREWHOIS bl.open-whois.org. A 127.0.0.5 body WHOIS_SECUREWHOIS eval:check_uridnsbl('WHOIS_SECUREWHOIS') describe WHOIS_SECUREWHOIS Contains URL registered to SecureWhois tflags WHOIS_SECUREWHOIS net publish # score WHOIS_SECUREWHOIS 2.5 urirhssub WHOIS_REGISTERFLY bl.open-whois.org. A 127.0.0.14 body WHOIS_REGISTERFLY eval:check_uridnsbl('WHOIS_REGISTERFLY') describe WHOIS_REGISTERFLY Contains URL registered to RegisterFly tflags WHOIS_REGISTERFLY net publish # score WHOIS_REGISTERFLY 3.0 urirhssub WHOIS_WHOISGUARD bl.open-whois.org. A 127.0.0.18 body WHOIS_WHOISGUARD eval:check_uridnsbl('WHOIS_WHOISGUARD') describe WHOIS_WHOISGUARD URL registered to WhoisGuard tflags WHOIS_WHOISGUARD net publish # score WHOIS_WHOISGUARD 2.5 urirhssub WHOIS_AITPRIV bl.open-whois.org. A 127.0.0.19 body WHOIS_AITPRIV eval:check_uridnsbl('WHOIS_AITPRIV') describe WHOIS_AITPRIV URL registered as an AIT Private Registration tflags WHOIS_AITPRIV net publish # score WHOIS_AITPRIV 1.5 urirhssub WHOIS_NAMEKING bl.open-whois.org. A 127.0.0.35 body WHOIS_NAMEKING eval:check_uridnsbl('WHOIS_NAMEKING') describe WHOIS_NAMEKING URL registered to NameKing tflags WHOIS_NAMEKING net publish # score WHOIS_NAMEKING 2.7 # --------------------------------------------------------------------------- # not as good urirhssub WHOIS_1AND1PR bl.open-whois.org. A 127.0.0.2 body WHOIS_1AND1PR eval:check_uridnsbl('WHOIS_1AND1PR') describe WHOIS_1AND1PR URL registered to 1&1 Private Registration tflags WHOIS_1AND1PR net # score WHOIS_1AND1PR 1.0 urirhssub WHOIS_NETSOLPR bl.open-whois.org. A 127.0.0.4 body WHOIS_NETSOLPR eval:check_uridnsbl('WHOIS_NETSOLPR') describe WHOIS_NETSOLPR URL registered as a NetSol Private Registration tflags WHOIS_NETSOLPR net # score WHOIS_NETSOLPR 0.4 urirhssub WHOIS_MONIKER_ROLE bl.open-whois.org. A 127.0.0.6 body WHOIS_MONIKER_ROLE eval:check_uridnsbl('WHOIS_MONIKER_ROLE') describe WHOIS_MONIKER_ROLE URL registered to Moniker Privacy Services tflags WHOIS_MONIKER_ROLE net # score WHOIS_MONIKER_ROLE 2.0 urirhssub WHOIS_PRIVACYPOST bl.open-whois.org. A 127.0.0.7 body WHOIS_PRIVACYPOST eval:check_uridnsbl('WHOIS_PRIVACYPOST') describe WHOIS_PRIVACYPOST Contains URL registered to PrivacyPost tflags WHOIS_PRIVACYPOST net # score WHOIS_PRIVACYPOST 2.0 urirhssub WHOIS_DREAMPRIV bl.open-whois.org. A 127.0.0.8 body WHOIS_DREAMPRIV eval:check_uridnsbl('WHOIS_DREAMPRIV') describe WHOIS_DREAMPRIV URL registered as a DreamHost Private Registration tflags WHOIS_DREAMPRIV net # score WHOIS_DREAMPRIV 0.4 urirhssub WHOIS_NAMESECURE bl.open-whois.org. A 127.0.0.9 body WHOIS_NAMESECURE eval:check_uridnsbl('WHOIS_NAMESECURE') describe WHOIS_NAMESECURE Contains URL registered to NameSecure tflags WHOIS_NAMESECURE net # score WHOIS_NAMESECURE 1.5 urirhssub WHOIS_DOMESCROW bl.open-whois.org. A 127.0.0.10 body WHOIS_DOMESCROW eval:check_uridnsbl('WHOIS_DOMESCROW') describe WHOIS_DOMESCROW URL registered to Domain Escrow Services tflags WHOIS_DOMESCROW net # score WHOIS_DOMESCROW 1.0 urirhssub WHOIS_MONIKER_PRIV bl.open-whois.org. A 127.0.0.11 body WHOIS_MONIKER_PRIV eval:check_uridnsbl('WHOIS_MONIKER_PRIV') describe WHOIS_MONIKER_PRIV URL registered to Moniker Privacy Protection tflags WHOIS_MONIKER_PRIV net # score WHOIS_MONIKER_PRIV 2.7 urirhssub WHOIS_SAFENAMES bl.open-whois.org. A 127.0.0.12 body WHOIS_SAFENAMES eval:check_uridnsbl('WHOIS_SAFENAMES') describe WHOIS_SAFENAMES Contains URL registered to SafeNames tflags WHOIS_SAFENAMES net # score WHOIS_SAFENAMES 2.5 urirhssub WHOIS_UNLISTED bl.open-whois.org. A 127.0.0.13 body WHOIS_UNLISTED eval:check_uridnsbl('WHOIS_UNLISTED') describe WHOIS_UNLISTED Contains URL registered to Unlisted-Whois.com tflags WHOIS_UNLISTED net # score WHOIS_UNLISTED 2.7 urirhssub WHOIS_DMNBYPROXY bl.open-whois.org. A 127.0.0.15 body WHOIS_DMNBYPROXY eval:check_uridnsbl('WHOIS_DMNBYPROXY') describe WHOIS_DMNBYPROXY Contains URL registered to Domains by Proxy tflags WHOIS_DMNBYPROXY net # score WHOIS_DMNBYPROXY 0.3 urirhssub WHOIS_IDSHIELD bl.open-whois.org. A 127.0.0.16 body WHOIS_IDSHIELD eval:check_uridnsbl('WHOIS_IDSHIELD') describe WHOIS_IDSHIELD Contains URL registered to WHOIS ID Shield tflags WHOIS_IDSHIELD net # score WHOIS_IDSHIELD 2.5 urirhssub WHOIS_MYPRIVREG bl.open-whois.org. A 127.0.0.17 body WHOIS_MYPRIVREG eval:check_uridnsbl('WHOIS_MYPRIVREG') describe WHOIS_MYPRIVREG URL registered to myprivateregistration.com tflags WHOIS_MYPRIVREG net # score WHOIS_MYPRIVREG 0.5 urirhssub WHOIS_WHOISPROT bl.open-whois.org. A 127.0.0.20 body WHOIS_WHOISPROT eval:check_uridnsbl('WHOIS_WHOISPROT') describe WHOIS_WHOISPROT URL registered to WhoisProtector tflags WHOIS_WHOISPROT net # score WHOIS_WHOISPROT 1.0 urirhssub WHOIS_SECINFOSERV bl.open-whois.org. A 127.0.0.21 body WHOIS_SECINFOSERV eval:check_uridnsbl('WHOIS_SECINFOSERV') describe WHOIS_SECINFOSERV URL registered to Secure WHOIS Information Services tflags WHOIS_SECINFOSERV net # score WHOIS_SECINFOSERV 2.5 urirhssub WHOIS_SRSPLUS bl.open-whois.org. A 127.0.0.23 body WHOIS_SRSPLUS eval:check_uridnsbl('WHOIS_SRSPLUS') describe WHOIS_SRSPLUS URL registered as an SRSPlus Private Registration tflags WHOIS_SRSPLUS net # score WHOIS_SRSPLUS 2.5 urirhssub WHOIS_DOMPRIVCORP bl.open-whois.org. A 127.0.0.24 body WHOIS_DOMPRIVCORP eval:check_uridnsbl('WHOIS_DOMPRIVCORP') describe WHOIS_DOMPRIVCORP URL registered to DomainPrivacyCorp.com tflags WHOIS_DOMPRIVCORP net # score WHOIS_DOMPRIVCORP 1.0 urirhssub WHOIS_FINEXE bl.open-whois.org. A 127.0.0.25 body WHOIS_FINEXE eval:check_uridnsbl('WHOIS_FINEXE') describe WHOIS_FINEXE URL registered to Finexe Domain Proxy Service tflags WHOIS_FINEXE net # score WHOIS_FINEXE 0.7 urirhssub WHOIS_DROA bl.open-whois.org. A 127.0.0.26 body WHOIS_DROA eval:check_uridnsbl('WHOIS_DROA') describe WHOIS_DROA URL registered as an DROA Private Registration tflags WHOIS_DROA net # score WHOIS_DROA 0.4 urirhssub WHOIS_DYNADOT bl.open-whois.org. A 127.0.0.27 body WHOIS_DYNADOT eval:check_uridnsbl('WHOIS_DYNADOT') describe WHOIS_DYNADOT URL registered to Dynadot Privacy tflags WHOIS_DYNADOT net # score WHOIS_DYNADOT 1.0 urirhssub WHOIS_LNOA bl.open-whois.org. A 127.0.0.28 body WHOIS_LNOA eval:check_uridnsbl('WHOIS_LNOA') describe WHOIS_LNOA URL registered to LNOA WHOIS Privacy tflags WHOIS_LNOA net # score WHOIS_LNOA 1.0 urirhssub WHOIS_GKGPROXY bl.open-whois.org. A 127.0.0.29 body WHOIS_GKGPROXY eval:check_uridnsbl('WHOIS_GKGPROXY') describe WHOIS_GKGPROXY URL registered to GKG.NET Domain Proxy Service tflags WHOIS_GKGPROXY net # score WHOIS_GKGPROXY 1.1 urirhssub WHOIS_REGISTER4LESS bl.open-whois.org. A 127.0.0.30 body WHOIS_REGISTER4LESS eval:check_uridnsbl('WHOIS_REGISTER4LESS') describe WHOIS_REGISTER4LESS URL registered to R4L Privacy tflags WHOIS_REGISTER4LESS net # score WHOIS_REGISTER4LESS 2.2 urirhssub WHOIS_KATZ bl.open-whois.org. A 127.0.0.31 body WHOIS_KATZ eval:check_uridnsbl('WHOIS_KATZ') describe WHOIS_KATZ URL registered to Katz Global Domain Name Trust tflags WHOIS_KATZ net # score WHOIS_KATZ 3.3 urirhssub WHOIS_SPAMFREE bl.open-whois.org. A 127.0.0.32 body WHOIS_SPAMFREE eval:check_uridnsbl('WHOIS_SPAMFREE') describe WHOIS_SPAMFREE URL registered to SpamFreeReg.com tflags WHOIS_SPAMFREE net # score WHOIS_SPAMFREE 2.7 urirhssub WHOIS_LISTINGAG bl.open-whois.org. A 127.0.0.33 body WHOIS_LISTINGAG eval:check_uridnsbl('WHOIS_LISTINGAG') describe WHOIS_LISTINGAG URL registered to Domain Listing Agent tflags WHOIS_LISTINGAG net # score WHOIS_LISTINGAG 2.0 urirhssub WHOIS_MAPNAME bl.open-whois.org. A 127.0.0.34 body WHOIS_MAPNAME eval:check_uridnsbl('WHOIS_MAPNAME') describe WHOIS_MAPNAME URL registered to MapName tflags WHOIS_MAPNAME net # score WHOIS_MAPNAME 2.2 urirhssub WHOIS_NOMINET bl.open-whois.org. A 127.0.0.36 body WHOIS_NOMINET eval:check_uridnsbl('WHOIS_NOMINET') describe WHOIS_NOMINET URL registered to Nominet Private Registrant tflags WHOIS_NOMINET net # score WHOIS_NOMINET 0.3 urirhssub WHOIS_CONTACTPRIV bl.open-whois.org. A 127.0.0.37 body WHOIS_CONTACTPRIV eval:check_uridnsbl('WHOIS_CONTACTPRIV') describe WHOIS_CONTACTPRIV URL registered to contactprivacy.com tflags WHOIS_CONTACTPRIV net # score WHOIS_CONTACTPRIV 2.5 urirhssub WHOIS_PRIVDOMAIN bl.open-whois.org. A 127.0.0.38 body WHOIS_PRIVDOMAIN eval:check_uridnsbl('WHOIS_PRIVDOMAIN') describe WHOIS_PRIVDOMAIN URL registered to privacy-domain.com tflags WHOIS_PRIVDOMAIN net # score WHOIS_PRIVDOMAIN 2.0 urirhssub WHOIS_IDTHEFTPROT bl.open-whois.org. A 127.0.0.39 body WHOIS_IDTHEFTPROT eval:check_uridnsbl('WHOIS_IDTHEFTPROT') describe WHOIS_IDTHEFTPROT URL registered to Whois ID Theft Protection tflags WHOIS_IDTHEFTPROT net # score WHOIS_IDTHEFTPROT 3.0 urirhssub WHOIS_REGTEK bl.open-whois.org. A 127.0.0.40 body WHOIS_REGTEK eval:check_uridnsbl('WHOIS_REGTEK') describe WHOIS_REGTEK URL registered to RegTek Whois Envoy tflags WHOIS_REGTEK net # score WHOIS_REGTEK 2.1 urirhssub WHOIS_NOLDC bl.open-whois.org. A 127.0.0.41 body WHOIS_NOLDC eval:check_uridnsbl('WHOIS_NOLDC') describe WHOIS_NOLDC URL registered to NOLDC, Inc. tflags WHOIS_NOLDC net # score WHOIS_NOLDC 3.0 urirhssub WHOIS_NETID bl.open-whois.org. A 127.0.0.42 body WHOIS_NETID eval:check_uridnsbl('WHOIS_NETID') describe WHOIS_NETID URL registered to NetIdentity tflags WHOIS_NETID net # score WHOIS_NETID 0.8 endif # Mail::SpamAssassin::Plugin::URIDNSBL