SpamTitan Cloud and Private Cloud Special Rules
T_URIBL_IVMURI = URI Listed in ivmURI found at invaluement.com
RCVD_IN_IVMSIP = Received header listed on ivmSIP found at invaluement.com
RCVD_IN_IVMSIP24 = Received header listed on ivmSIP/24 found at invaluement.com
URIBL_GOLD = Contains an URL listed in the URIBL goldlist
ST_URIBL_SBL = Contains an URL's NS IP listed in the SBL blocklist
ST_RCVD_IN_SBL = Received via a relay in Spamhaus SBL
ST_RCVD_IN_XBL = Received via a relay in Spamhaus XBL
ST_RCVD_IN_PBL = Received via a relay in Spamhaus PBL
ST_RCVD_IN_SBL_CSS = Received via a relay in Spamhaus SBL-CSS
ST_URIBL_DBL_SPAM = Contains a spam URL listed in the DBL blocklist
ST_URIBL_DBL_PHISH = Contains a Phishing URL listed in the DBL blocklist
ST_URIBL_DBL_MALWARE = Contains a malware URL listed in the DBL blocklist
ST_URIBL_DBL_BOTNETCC = Contains a botnet C&C URL listed in the DBL blocklist
ST_URIBL_DBL_ABUSE_SPAM = Contains an abused spamvertized URL listed in the DBL blocklist
ST_URIBL_DBL_ABUSE_REDIR = Contains an abused redirector URL listed in the DBL blocklist
ST_URIBL_DBL_ABUSE_PHISH = Contains an abused phishing URL listed in the DBL blocklist
ST_URIBL_DBL_ABUSE_MALW = Contains an abused malware URL listed in the DBL blocklist
ST_URIBL_DBL_ABUSE_BOTCC = Contains an abused botnet C&C URL listed in the DBL blocklist queried the DBL blocklist for an IP
ST_RCVD_IN_THQ_WHITE = In TitanHQ White Reputation list
ST_RCVD_IN_THQ_W3 = In TitanHQ W3 Reputation list
ST_RCVD_IN_THQ_W2 = In TitanHQ W2 Reputation list
ST_RCVD_IN_THQ_W1 = In TitanHQ W1 Reputation list
ST_RCVD_IN_THQ_B1 = In TitanHQ B1 Reputation list
ST_RCVD_IN_THQ_B2 = In TitanHQ B2 Reputation list
ST_RCVD_IN_THQ_B3 = In TitanHQ B3 Reputation list
ST_RCVD_IN_THQ_BLACK = In TitanHQ Black Reputation list
ST_OBFU_OFFICE_ATTACH = a .doc file is attached that isn't using application/MS Word as the mimetype