# spamhaus zen
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts 
      dnslists = zen.spamhaus.org
  warn dnslists = zen.spamhaus.org
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


# spamhaus DBL - Domain name blocking list
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is listed on Spamhaus DBL. see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = dbl.spamhaus.org/<,$sender_address_domain 
  warn dnslists = dbl.spamhaus.org/<,$sender_address_domain
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9} 


# spamcop
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = bl.spamcop.net
  warn dnslists = bl.spamcop.net
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


# URIBL - black
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = black.uribl.com/<,$sender_address_domain 
  warn dnslists = black.uribl.com/<,$sender_address_domain
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9} 


# barracudacentral
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: http://www.barracudacentral.org/rbl
      hosts = +backupmx_hosts
      dnslists = b.barracudacentral.org
  warn dnslists = b.barracudacentral.org
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: http://www.barracudacentral.org/rbl"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


# SpamRATS - NoPtr
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = noptr.spamrats.com
  warn dnslists = noptr.spamrats.com
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


 # SpamGrouper
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = netblockbl.spamgrouper.com
  warn dnslists = netblockbl.spamgrouper.com
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9} 


# safe.dnsbl.sorbs.net
  #includes
  # http.dnsbl.sorbs.net 127.0.0.2
  # socks.dnsbl.sorbs.net 127.0.0.3
  # misc.dnsbl.sorbs.net 127.0.0.4
  # smtp.dnsbl.sorbs.net 127.0.0.5
  # new.spam.dnsbl.sorbs.net 127.0.0.6
  # web.dnsbl.sorbs.net 127.0.0.7
  # block.dnsbl.sorbs.net 127.0.0.8
  # zombie.dnsbl.sorbs.net 127.0.0.9
  # dul.dnsbl.sorbs.net 127.0.0.10
 
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts 
      dnslists = safe.dnsbl.sorbs.net=127.0.0.2
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.2
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl http match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.3
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.3
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl socks match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.4
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.4
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl misc match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.5
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.5
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl smtp match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.6
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.6
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl new spam match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.7
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.7
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl web match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.8
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.8
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl block match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = safe.dnsbl.sorbs.net=127.0.0.9
  warn dnslists = safe.dnsbl.sorbs.net=127.0.0.9
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain dnsbl zombie match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


# UCEPROTECT
# LEVEL 1 - no escalations
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = dnsbl-1.uceprotect.net
  warn dnslists = dnsbl-1.uceprotect.net
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain level 1 match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


 # Mailspike.net
   # Worst possible reputation 127.0.0.10
   # L4 Very bad reputation 127.0.0.11
   # L3 Bad reputation 127.0.0.12
   # L2 Suspicious behavior 127.0.0.13
   # L1 Neutral - probably spam 127.0.0.14
   # H0 Neutral 127.0.0.15
   # H1 Neutral - probably legit 127.0.0.16
   # H2 Possible legit sender 127.0.0.17
   # H3 Good Reputation 127.0.0.18
   # H4 Very good Reputation 127.0.0.19
   # H5 Excellent Reputation 127.0.0.20 
 
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - has bad $dnslist_domain reputation, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = bl.mailspike.net=127.0.0.12
  warn dnslists = bl.mailspike.net=127.0.0.12
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - has bad $dnslist_domain reputation, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - has bad $dnslist_domain reputation"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - has very bad $dnslist_domain reputation, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = bl.mailspike.net=127.0.0.11
  warn dnslists = bl.mailspike.net=127.0.0.11
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - has very bad $dnslist_domain reputation, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - has very bad $dnslist_domain reputation"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

 deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - has worst $dnslist_domain reputation, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = bl.mailspike.net=127.0.0.10
  warn dnslists = bl.mailspike.net=127.0.0.10
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - has worst $dnslist_domain reputation, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - has worst $dnslist_domain reputation"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}

  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is participating in spam wave, see: $dnslist_domain dnslist_text
      hosts = +backupmx_hosts
      dnslists = bl.mailspike.net=127.0.0.2
  warn dnslists = bl.mailspike.net=127.0.0.2
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - $dnslist_domain is participating in spam wave, see $dnslist_domain $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - is participating in spam wave $dnslist_domain"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}


# cbl - compromised servers
  deny message = JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text
      hosts = +backupmx_hosts
      dnslists = cbl.abuseat.org
  warn dnslists = cbl.abuseat.org
      set acl_m8 = 1
      set acl_m9 = "JunkMail rejected - $sender_fullhost - $sender_address_domain - is in the $dnslist_domain dnsbl, see: $dnslist_text"
  warn condition = ${if eq {${acl_m8}}{1}{1}{0}}
      ratelimit = 0 / 1h / strict / per_conn
      log_message = "Increment Connection Ratelimit - $sender_fullhost - $sender_address_domain - because of $dnslist_domain match"
  drop condition = ${if eq {${acl_m8}}{1}{1}{0}}
      message = ${acl_m9}