NS8: How to Block Top-Level Domains (TLD) and Email Addresses

MadPatrick · January 2, 2025, 6:15pm

Hi All,

I’ve added some extra filters
Maybe overkill, but better this then too less filters;-)

# Whitelists
local_wl_domain {
        type = "from";
        filter = "email:domain";
        map = "${DBDIR}/local_wl_domain.inc";
        symbol = "LOCAL_WL_DOMAIN";
        regex = true;
        prefilter = true;
        score = -6.0;
        description = "Whitelist map on DOMAIN";
}
local_wl_from {
        type = "from";
        filter = "email:domain:tld";
        map = "${DBDIR}/local_wl_from.inc";
        symbol = "LOCAL_WL_FROM";
        regex = true;
        prefilter = true;
        score = -6.0;
        description = "Whitelist map on FROM";
}
local_wl_ip {
        type = "ip";
        map = "${DBDIR}/local_wl_ip.inc";
        symbol = "LOCAL_WL_IP";
        regex = true;
        prefilter = true;
        score = -6.0;
        description = "Whitelist map on IP";
}
local_wl_rcpt {
        type = "rcpt";
        map = "${DBDIR}/local_wl_rcpt.inc";
        symbol = "LOCAL_WL_RCPT";
        regex = true;
        prefilter = true;
        score = -6.0;
        description = "Whitelist map on RCPT";
}

# Blacklists
local_bl_domain {        
        type = "from";
        filter = "email:domain";
        map = "${DBDIR}/local_bl_domain.inc";
        prefilter = true;
        action = "reject";
        score = 10.0;
        description = "Blacklisted on DOMAIN";
}
local_bl_from {
        type = "from";
        map = "${DBDIR}/local_bl_from.inc";
        symbol = "LOCAL_BL_FROM";
        prefilter = true;
        action = "reject";
        score = 10.0;
        description = "Blacklist map on FROM";
}
local_bl_ip {
        type = "ip";
        map = "${DBDIR}/local_bl_ip.inc";
        symbol = "LOCAL_BL_IP";
        prefilter = true;
        action = "reject";
        score = 10.0;
        description = "Blacklist map on IP";
}
local_bl_rcpt {
        type = "rcpt";
        map = "${DBDIR}//local_bl_rcpt.inc";
        symbol = "LOCAL_BL_RCPT";
        prefilter = true;
        action = "reject";
        score = 10.0;
        description = "Blacklist map on RCPT";
}

BAD_SUBJECT {
  type = "header";
  header = "subject";
  map = ["${DBDIR}/local_bl_subject_regex.inc"];
  regexp = true;
  description = "Blacklist map on SUBJECT";
  score = 10.0;
}

Source:
gist.github.com/kvaps/25507a87dc287e6a6 https://gist.github.com/kvaps/25507a87dc287e6a620e1eec2d60ebc1