SpamTitan

SpamTitan Cloud and Private Cloud Special Rules
  • T_URIBL_IVMURI = URI Listed in ivmURI found at invaluement.com

  • RCVD_IN_IVMSIP = Received header listed on ivmSIP found at invaluement.com

  • RCVD_IN_IVMSIP24 = Received header listed on ivmSIP/24 found at invaluement.com

  • URIBL_GOLD = Contains an URL listed in the URIBL goldlist

  • ST_URIBL_SBL = Contains an URL's NS IP listed in the SBL blocklist

  • ST_RCVD_IN_SBL = Received via a relay in Spamhaus SBL

  • ST_RCVD_IN_XBL = Received via a relay in Spamhaus XBL

  • ST_RCVD_IN_PBL = Received via a relay in Spamhaus PBL

  • ST_RCVD_IN_SBL_CSS = Received via a relay in Spamhaus SBL-CSS

  • ST_URIBL_DBL_SPAM = Contains a spam URL listed in the DBL blocklist

  • ST_URIBL_DBL_PHISH = Contains a Phishing URL listed in the DBL blocklist

  • ST_URIBL_DBL_MALWARE = Contains a malware URL listed in the DBL blocklist

  • ST_URIBL_DBL_BOTNETCC = Contains a botnet C&C URL listed in the DBL blocklist

  • ST_URIBL_DBL_ABUSE_SPAM = Contains an abused spamvertized URL listed in the DBL blocklist

  • ST_URIBL_DBL_ABUSE_REDIR = Contains an abused redirector URL listed in the DBL blocklist

  • ST_URIBL_DBL_ABUSE_PHISH = Contains an abused phishing URL listed in the DBL blocklist

  • ST_URIBL_DBL_ABUSE_MALW = Contains an abused malware URL listed in the DBL blocklist

  • ST_URIBL_DBL_ABUSE_BOTCC = Contains an abused botnet C&C URL listed in the DBL blocklist queried the DBL blocklist for an IP

  • ST_RCVD_IN_THQ_WHITE = In TitanHQ White Reputation list

  • ST_RCVD_IN_THQ_W3 = In TitanHQ W3 Reputation list

  • ST_RCVD_IN_THQ_W2 = In TitanHQ W2 Reputation list

  • ST_RCVD_IN_THQ_W1 = In TitanHQ W1 Reputation list

  • ST_RCVD_IN_THQ_B1 = In TitanHQ B1 Reputation list

  • ST_RCVD_IN_THQ_B2 = In TitanHQ B2 Reputation list

  • ST_RCVD_IN_THQ_B3 = In TitanHQ B3 Reputation list

  • ST_RCVD_IN_THQ_BLACK = In TitanHQ Black Reputation list

  • ST_OBFU_OFFICE_ATTACH = a .doc file is attached that isn't using application/MS Word as the mimetype