rbls {

# auto generated hashes of known spam senders in sha1 format
# available to look up under a dns rbl
   MAILBABY_DQS_EMAIL {
    ignore_defaults = true;
    rbl = "dqsemail.interserver.net";
    emails_domainonly = false;
    ignore_whitelist = true;
    emails = true;
    replyto = true;
    hash = "sha1";
    returncodes = {
      MAILBABY_DQS_EMAIL = [
        "127.0.0.2"
      ];
    }
  }

#goodrbl
# known good senders. Reduce score slightly
  "RBLGOOD_INTERSERVER" {
    symbol = "RBLGOOD_INTERSERVER";
    rbl = "goodrbl.interserver.net";
    ipv6 = false;
    received = true;
    from = true;
    returncodes = {
      RBLGOOD_INTERSERVER = [
        "127.0.0.2",
      ];
    }
  }

# high spam score ips
# should increase score slightly
 "RBLSA_INTERSERVER" {
   symbol = "RBLSA_INTERSERVER";
    rbl = "rblspamassassin.interserver.net";
    ipv6 = false;
    received = true;
    from = true;
     returncodes = {
       RBLSA_INTERSERVER = [
         "127.0.0.2",
       ];
     }
   }

# spam, scanning, brute force
# auto expires
# score is higher than rblspamassassin
 "RBL_INTERSERVER" {
    symbol = "RBL_INTERSERVER";
    rbl = "rbl.interserver.net";
    ipv6 = false;
    received = true;
    from = true;
    returncodes = {
      RBL_INTERSERVER = [
        "127.0.0.2",
      ];
    }
  }

# domain based rbl lookup
# domains are sending to spamtraps
# or sending uce
# auto expires
  "INTERSERVER_RULE_URIBL_RBLINT" {
    ignore_defaults = true;
    rbl = "rbluri.interserver.net";
    no_ip = true;
    dkim = true;
    emails = true;
    emails_domainonly = true;
    urls = true;
    returncodes = {
      INTERSERVER_RULE_URIBL_RBLINT = [
        "127.0.0.2",
      ];
    }
  }

}