[Rspamd-Users] urlhause abuse.ch

[Carsten Rosenberg]

2019-02-01 19:00:43 #21900(normal) <ddqpuj>; map;
rspamd_map_read_cached: https://urlhaus.abuse.ch/downloads/text/: read
map data cached 5736479 bytes

2019-02-01 19:03:16 #21899(controller) <ddqpuj>; map;
rspamd_map_cache_cb: cached data is now expired (gen mismatch 41 != 42)
for https://urlhaus.abuse.ch/downloads/text/

--

Symbol: URLHAUS (1.00)[http://xlv.f3322.net:9789/DhlServer.exe]

--

I just tried this with a simple text mail. Maybe enable debug for multimap.

--

Carsten

On 01.02.19 15:11, Klaus Rörig wrote:
> Hi Carsten,
> 
> I added this part to my  local.d/multimap.conf, restarted rspamd
> service  and uploaded an email containing a listet url, but I did not
> get any results.
> 
> Klaus
> 
> Am 01.02.2019 um 14:01 schrieb Carsten Rosenberg:
>> Hi,
>>
>> you can use multimap for this:
>>
>> https://rspamd.com/doc/modules/multimap.html
>>
>> urlhaus {
>>    map = "https://urlhaus.abuse.ch/downloads/text/";
>>    type = "url";
>>    filter = "full";
>>    score = 1.0;
>>    symbol = "URLHAUS";
>> }
>>
>>
>> This list is quite big and changes frequently. May you want to adjust
>> "map_watch_interval"
>>
>> https://rspamd.com/doc/configuration/options.html
>>
>> -- 
>>
>> Carsten
>>
>> On 01.02.19 11:06, Klaus Rörig wrote:
>>> Hello,
>>>
>>> can anyone tell me how to implemente this URL database?
>>>
>>> One can download a full URL List from
>>> https://urlhaus.abuse.ch/downloads/text/
>>>
>>> But how do I tell RSpamd to load the list and score on matches?
>>>
>>> Thx,
>>>
>>> Klaus
>>>