[Rspamd-Users] uribl url_compose_map

[Alexander Meinhardt]

Just wondering how to implement...

*local.d/rbl.conf *



 rbls {

    selector = "urls:get_host";

 }


That's all?

Kind regards
Alex


On Tue, Aug 17, 2021 at 1:06 PM Reto Kupferschmid <kupferschmid at puzzle.ch>
wrote:

> I just saw the proposed solution using "selector = 'urls:get_host'" and
> that seems to work fine.
>
> On 8/17/21 12:07 PM, Reto Kupferschmid wrote:
> >    Hello Everyone!
> >
> >    We saw quite a few phishing attempts recently with urls ending in
> >    wixsite.com (e.g. badsubdomain.wixsite.com). If I manually check the
> >    fqdn against multi.surbl.org I get a positive result. Rspamd however
> >    does not detect the URL since only the tld component (wixsite.com) is
> >    checked. I was able to "fix" this by using a url_compose_map as
> >    described here:
> >    [1]
> https://rspamd.com/doc/modules/rbl.html#specific-url-composition-rul
> >    es.
> >    Is there a way to always check the fqdn (in addition to the tld
> >    component)?
> >
> >    Thanks!
> >    Reto
> >
> > References
> >
> >    1.
> https://rspamd.com/doc/modules/rbl.html#specific-url-composition-rules
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users
>