exim_surbl.pl: enable DBL checks
[mirror/dsa-puppet.git] / modules / exim / files / common / exim_surbl.pl
1 #
2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
4
5 #
6 # Copyright (c) 2006-2012 Erik Mugele.  All rights reserved.
7 #
8 # Redistribution and use in source and binary forms, with or without
9 # modification, are permitted provided that the following conditions
10 # are met:
11 # 1. Redistributions of source code must retain the above copyright
12 #    notice, this list of conditions and the following disclaimer.
13 # 2. Redistributions in binary form must reproduce the above copyright
14 #    notice, this list of conditions and the following disclaimer in the
15 #    documentation and/or other materials provided with the distribution.
16 #
17 # THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18 # IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19 # OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20 # IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21 # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22 # NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23 # DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24 # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25 # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26 # THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27
28 sub surblspamcheck
29 {
30
31 # Designed and written by Erik Mugele, 2004-2010,1http://www.teuton.org/~ejm
32 # Version 2.3-beta
33 #
34 # Please see the following website for details on usage of
35 # this script:  http://www.teuton.org/~ejm/exim_surbl
36
37     # The following variable is the full path to the file containing the 
38     # two-level top level domains (TLD).
39     # ---------------------------------------------------------------------
40     # THIS VARIABLE MUST BE SET TO THE FULL PATH AND NAME OF THE FILE 
41     # CONTAINING THE TWO LEVEL TLD!
42     # ---------------------------------------------------------------------
43     my $twotld_file = "/etc/exim4/two-level-tlds";    
44
45     # The following variable is the full path to the file containing the 
46     # three-level top level domains (TLD).
47     # ---------------------------------------------------------------------
48     # THIS VARIABLE MUST BE SET TO THE FULL PATH AND NAME OF THE FILE 
49     # CONTAINING THE THREE LEVEL TLD!
50     # ---------------------------------------------------------------------
51     my $threetld_file = "/etc/exim4/three-level-tlds";
52
53     # The following variable is the full path to the file containing
54     # whitelist entries.  
55     # ---------------------------------------------------------------------
56     # THIS VARIABLE MUST BE SET TO THE FULL PATH AND NAME OF THE FILE 
57     # CONTAINING THE WHITELIST DOMAINS!
58     # ---------------------------------------------------------------------
59     my $whitelist_file = "/etc/exim4/surbl_whitelist.txt";
60     
61     # This variable defines the maximum MIME file size that will be checked
62     # if this script is called by the MIME ACL.  This is primarily to
63     # keep the load down on the server.  Size is in bytes.
64     my $max_file_size = 50000;
65     
66     # The following variables enable or disable the SURBL, URIBL and DBL
67     # lookups.  Set to 1 to enable and 0 to disable.
68     my $surbl_enable = 1;
69     my $uribl_enable = 1;
70     my $dbl_enable = 1;
71
72     # Check to see if a decode MIME attachment is being checked or 
73     # just a plain old text message with no attachments
74     my $exim_body = "";
75     my $mime_filename = Exim::expand_string('$mime_decoded_filename');
76     if ($mime_filename) {
77         # DEBUG Statement
78         #warn ("MIME FILENAME: $mime_filename\n");
79         # If the MIME file is too large, skip it.
80         if (-s $mime_filename <= $max_file_size) {
81             open(fh,"<$mime_filename");
82             binmode(fh);
83             while (read(fh,$buff,1024)) {
84                 $exim_body .= $buff;
85             }
86             close (fh);
87         } else {
88             $exim_body = "";
89         }
90     } else {
91         $exim_body = Exim::expand_string('$message_body');
92     }
93     
94     sub surbllookup {
95         # This subroutine does the actual DNS lookup and builds and returns
96         # the return message for the SURBL lookup.
97         my @params = @_;
98         my $surbldomain = ".multi.surbl.org";
99         @dnsbladdr=gethostbyname($params[0].$surbldomain);
100         # If gethostbyname() returned anything, build a return message.
101         $return_string = "";
102         if (scalar(@dnsbladdr) != 0) {
103             $return_string = "Blacklisted URL in message. (".$params[0].") in";
104             @surblipaddr = unpack('C4',($dnsbladdr[4])[0]);
105             if ($surblipaddr[3] & 64) {
106                 $return_string .= " [jp]";
107             }
108             if ($surblipaddr[3] & 32) {
109                 $return_string .= " [ab]";
110             }
111             if ($surblipaddr[3] & 16) {
112                 $return_string .= " [ob]";
113             }
114             if ($surblipaddr[3] & 8) {
115                 $return_string .= " [ph]";
116             }
117             if ($surblipaddr[3] & 4) {
118                 $return_string .= " [ws]";
119             }
120             if ($surblipaddr[3] & 2) {
121                 $return_string .= " [sc]";
122             }
123             $return_string .= ". See http://www.surbl.org/lists.html.";
124         }
125         return $return_string;
126     }
127     
128     sub uribllookup {
129         # This subroutine does the actual DNS lookup and builds and returns
130         # the return message for the URIBL check.
131         my @params = @_;
132         my $uribldomain = ".black.uribl.com";
133         @dnsbladdr=gethostbyname($params[0].$uribldomain);
134         # If gethostbyname() returned anything, build a return message.
135         $return_string = "";
136         if (scalar(@dnsbladdr) != 0) {
137             $return_string = "Blacklisted URL in message. (".$params[0].") in";
138             @ipaddr = unpack('C4',($dnsbladdr[4])[0]);
139             if ($ipaddr[3] & 8) {
140                 $return_string .= " [red]";
141             }
142             if ($ipaddr[3] & 4) {
143                 $return_string .= " [grey]";
144             }
145             if ($ipaddr[3] & 2) {
146                 $return_string .= " [black]";
147             }
148             $return_string .= ". See http://lookup.uribl.com.";
149         }
150         return $return_string;
151     }
152
153     sub dbllookup {
154         # This subroutine does the actual DNS lookup and builds and returns
155         # the return message for the Spamhaus DBL check.
156         my @params = @_;
157         my $dbldomain = ".dbl.spamhaus.org";
158         @dnsbladdr=gethostbyname($params[0].$dbldomain);
159         # If gethostbyname() returned anything, build a return message.
160         $return_string = "";
161         if (scalar(@dnsbladdr) != 0) {
162             $return_string = "Blacklisted URL in message: ".$params[0];
163             $return_string .= ". See http://www.spamhaus.org/lookup.lasso?dnsbl=domain.";
164         }
165         return $return_string;
166     }
167
168     sub mkaddress {
169         # This subroutine takes a list of domain parts
170         # (e.g. ["www","example","com"]) and a number (e.g. 2) and returns a 
171         # the address of the given number of parts (e.g. example.com).
172         my $numparts = @_[-1];
173         pop(@_);
174         my @domain = @_;
175         my $address = $domain[-1];
176         for (my $i=2; $i<=$numparts; $i++) {
177             $address = $domain[-$i].".".$address;
178         }
179         return $address;
180     }
181     
182     sub converthex {
183         # This subroutine converts two hex characters to an ASCII character.
184         # It is called when ASCII obfuscation or Printed-Quatable characters
185         # are found (i.e. %AE or =AE).
186         # It should return a converted/plain address after splitting off
187         # everything that isn't part of the address portion of the URL.
188         my @ob_parts = @_;
189         my $address = $ob_parts[0];
190         for (my $j=1; $j < scalar(@ob_parts); $j++) {
191             $address .= chr(hex(substr($ob_parts[$j],0,2)));
192             $address .= substr($ob_parts[$j],2,);
193         }
194         $address = (split(/[^A-Za-z0-9._\-]/,$address))[0];
195         return $address
196     }
197
198     ################
199     # Main Program #
200     ################
201
202     if ($exim_body) {
203         # Find all the URLs in the message by finding the HTTP string
204         @parts = split(/[hH][tT][tT][pP](:|=3[aA])(\/|=2[Ff])(\/|=2[Ff])/,$exim_body);
205         if (scalar(@parts) > 1) {
206             # Read the entries from the two-level TLD file.
207             open (twotld_handle,$twotld_file) or die "Can't open $twotld_file.\n";
208             while (<twotld_handle>) {
209                 next if (/^#/ || /^$/ || /^\s$/);
210                 push(@twotlds,$_);
211             }
212             close (twotld_handle) or die "Close: $!\n";
213             # Read the entries from the three-level TLD file.
214             open (threetld_handle,$threetld_file) or die "Can't open $threetld_file.\n";
215             while (<threetld_handle>) {
216                 next if (/^#/ || /^$/ || /^\s$/);
217                 push(@threetlds,$_);
218             }
219             close (threetld_handle) or die "Close: $!\n";
220             # Read the entries from the whitelist file.
221             open (whitelist_handle,$whitelist_file) or die "Can't open $whitelist_file.\n";
222             while (<whitelist_handle>) {
223                 next if (/^#/ || /^$/ || /^\s$/);
224                 push(@whitelist,$_);
225             }
226             close (whitelist_handle) or die "Close: $!\n";
227
228             @surbl_list = ();
229             @uribl_list = ();
230             @dbl_list = ();
231
232             # Go through each of the HTTP parts that were found in the message
233             for ($i=1; $i < scalar(@parts); $i++) {
234                 # Special case of Quoted Printable EOL marker
235                 $parts[$i] =~ s/=\n//g;
236
237                 # Split the parts and find the address portion of the URL.
238                 # Address SHOULD be either a FQDN, IP address, or encoded address.
239                 $address = (split(/[^A-Za-z0-9\._\-%=]/,$parts[$i]))[0];
240
241                 # Check for an =.  If it exists, we assume the URL is doing 
242                 # Quoted-Printable.  Decode it and redefine $address
243                 if ($address =~ /=/) {
244                     @ob_parts = split(/=/,$address);
245                     $address = converthex(@ob_parts);
246                 }
247
248                 # Check for a %.  If it exists the URL is using % ASCII
249                 # obfuscation.  Decode it and redefine $address.
250                 if ($address =~ /%/) {
251                     @ob_parts = split(/%/,$address);
252                     $address = converthex(@ob_parts);
253                 }
254
255                 # Convert the address to lower case.
256                 $address = lc($address);
257
258                 # Split the the address into the elements separated by periods.
259                 @domain = split(/\./,$address);
260
261                 # Check the length of the domain name.  If less then two elements
262                 # at this point it is probably bogus or there is a bug in one of 
263                 # the decoding/converting routines above.
264                 if (scalar(@domain) >=2) {
265                     $spamcheckdomain = "";
266
267                     # DEBUG statement.
268                     #warn ("FOUND DOMAIN: ".mkaddress(@domain,scalar(@domain))."\n");
269
270                     # Domain has two or more than four elements.
271                     if ((scalar(@domain) == 2) || (scalar(@domain) >=5)) {
272                         # Add two elements of the domain to the list(s).
273                         $spamcheckdomain=mkaddress(@domain,2);
274                         # Check if $spamcheckdomain is not in the whitelist.
275                         if (! grep(/^$spamcheckdomain$/i,@whitelist)) {
276                             # If SURBL checks are enabled and the domain is
277                             # not in the SURBL list, add it.
278                             if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
279                                 ($surbl_enable == 1)) {
280                                 push(@surbl_list,$spamcheckdomain);
281                             }
282                             # If URIBL checks are enabled and the domain is
283                             # not in the URIBL list, add it.
284                             if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
285                                 ($uribl_enable == 1)) {
286                                 push(@uribl_list,$spamcheckdomain);
287                             }
288                             # If DBL checks are enabled and the domain is
289                             # not in the DBL list, add it.
290                             if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
291                                 ($dbl_enable == 1)) {
292                                 push(@dbl_list,$spamcheckdomain);
293                             }
294                         }
295                     }
296
297                     # Domain has three elements.
298                     if (scalar(@domain) == 3) {
299                         # Set $spamcheckdomain to two elements.
300                         $spamcheckdomain = mkaddress(@domain,2);
301                         $two_checkdomain = $spamcheckdomain;
302                         if (grep(/^$spamcheckdomain$/i,@twotlds)) {
303                             # $spamcheckdomain is in the two-level TLD list.
304                             # Reset $spamcheckdomain to three elements.
305                             $spamcheckdomain = mkaddress(@domain,3);
306                             # Check if $spamcheckdomain is not in the whitelist.
307                             if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
308                                 (! grep(/^two_checkdomain$/i,@whitelist))) {
309                                 # If SURBL checks are enabled and the domain is
310                                 # not in the SURBL list, add it.
311                                 if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
312                                     ($surbl_enable == 1)) {
313                                     push(@surbl_list,$spamcheckdomain);
314                                 }
315                                 # If URIBL checks are enabled and the domain is
316                                 # not in the URIBL list, add it.
317                                 if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
318                                     ($uribl_enable == 1)) {
319                                     push(@uribl_list,$spamcheckdomain);
320                                 }
321                                 # If DBL checks are enabled and the domain is
322                                 # not in the DBL list, add it.
323                                 if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
324                                     ($dbl_enable == 1)) {
325                                     push(@dbl_list,$spamcheckdomain);
326                                 }
327                             }
328                         } else {
329                             # $spamcheckdomain is not in the two-level TLD list.
330                             # $spamcheckdomain is still two elements.
331                             # Check if $spamcheckdomain is not in the whitelist.
332                             if (! grep(/^$spamcheckdomain$/i,@whitelist)) {
333                                 # If SURBL checks are enabled and the domain is
334                                 # not in the SURBL list, add it.
335                                 if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
336                                     ($surbl_enable == 1)) {
337                                     push(@surbl_list,$spamcheckdomain);
338                                 }
339                                 # If URIBL checks are enabled and the domain is
340                                 # not in the URIBL list, add it.
341                                 if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
342                                     ($uribl_enable == 1)) {
343                                     push(@uribl_list,$spamcheckdomain);
344                                 }
345                                 # If DBL checks are enabled and the domain is
346                                 # not in the DBL list, add it.
347                                 if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
348                                     ($dbl_enable == 1)) {
349                                     push(@dbl_list,$spamcheckdomain);
350                                 }
351                             }
352                             # Reset $spamcheckdomain to three elements.
353                             $spamcheckdomain = mkaddress(@domain,3);
354                             # Check if $spamcheckdomain is not in the whitelist.
355                             if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
356                                 (! grep(/^$two_checkdomain$/i,@whitelist))) {
357                                 # If URIBL checks are enabled and the domain is
358                                 # not in the URIBL list, add it.
359                                 if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
360                                     ($uribl_enable == 1)) {
361                                     push(@uribl_list,$spamcheckdomain);
362                                 }
363                                 # If DBL checks are enabled and the domain is
364                                 # not in the DBL list, add it.
365                                 if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
366                                     ($dbl_enable == 1)) {
367                                     push(@dbl_list,$spamcheckdomain);
368                                 }
369                             }
370                         }
371                     }
372
373                     # Domain has four elements.
374                     if (scalar(@domain) == 4) {
375                         if ($domain[-1] =~ /^(\d){1,3}$/) {
376                             # Domain is an IP address
377                             # Set $spamcheckdomain to the IP address in reverse.
378                             $spamcheckdomain = $domain[3].".".$domain[2].
379                                 ".".$domain[1].".".$domain[0];
380
381                             # Do NOT check IP addresses against the Spamhaus DBL list.
382
383                             # If SURBL checks are enabled and the IP is
384                             # not in the SURBL list, add it.
385                             if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
386                                 ($surbl_enable == 1)) {
387                                 push(@surbl_list,$spamcheckdomain);
388                             }
389                             # If URIBL checks are enabled and the IP is 
390                             # not in the URIBL list, add it.
391                             if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
392                                 ($uribl_enable == 1)) {
393                                 push(@uribl_list,$spamcheckdomain);
394                             }
395                         } else {
396                             # Domain is not an IP address.
397                             # Check if the last three elements of the domain are
398                             # in the three-level TLD list.
399                             $three_checkdomain = mkaddress(@domain,3);
400                             $two_checkdomain = mkaddress(@domain,2);
401                             if (grep(/^$three_checkdomain$/i,@threetlds)) {
402                                 # Set $spamcheckdomain to four elements.
403                                 $spamcheckdomain = mkaddress(@domain,4);
404                                 # Check if $spamcheckdomain is not in the whitelist.
405                                 if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
406                                     (! grep(/^three_checkdomain$/i,@whitelist)) &&
407                                     (! grep(/^two_checkdomain$/i,@whitelist))) {
408                                     # If SURBL checks are enabled and the domain is
409                                     # not in the SURBL list, add it.
410                                     if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
411                                         ($surbl_enable == 1)) {
412                                         push(@surbl_list,$spamcheckdomain);
413                                     }
414                                     # If URIBL checks are enabled and the domain is
415                                     # not in the URIBL list, add it.
416                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
417                                         ($uribl_enable == 1)) {
418                                         push(@uribl_list,$spamcheckdomain);
419                                     }
420                                     # If DBL checks are enabled and the domain is
421                                     # not in the DBL list, add it.
422                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
423                                         ($dbl_enable == 1)) {
424                                         push(@dbl_list,$spamcheckdomain);
425                                     }
426                                 }
427                             }
428
429                             # Check if the last two elements of the domain are
430                             # in the two-level TLD list.
431                             elsif (grep(/^$two_checkdomain$/i,@twotlds)) {
432                                 # Reset $spamcheckdomain to three elements.
433                                 $spamcheckdomain = mkaddress(@domain,3);
434                                 # Check if $spamcheckdomain is not in the whitelist.
435                                 if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
436                                     (! grep(/^two_checkdomain$/i,@whitelist))) {
437                                     # If SURBL checks are enabled and the domain is
438                                     # not in the SURBL list, add it.
439                                     if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
440                                         ($surbl_enable == 1)) {
441                                         push(@surbl_list,$spamcheckdomain);
442                                     }
443                                     # If URIBL checks are enabled and the domain is
444                                     # not in the URIBL list, add it.
445                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
446                                         ($uribl_enable == 1)) {
447                                         push(@uribl_list,$spamcheckdomain);
448                                     }
449                                     # If DBL checks are enabled and the domain is
450                                     # not in the DBL list, add it.
451                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
452                                         ($dbl_enable == 1)) {
453                                         push(@dbl_list,$spamcheckdomain);
454                                     }
455                                 }
456
457                                 # Reset $spamcheckdomain to four elements.
458                                 $spamcheckdomain = mkaddress(@domain,4);
459                                 # Check if $spamcheckdomain is not in the whitelist.
460                                 if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
461                                     (! grep(/^three_checkdomain$/i,@whitelist)) &&
462                                     (! grep(/^two_checkdomain$/i,@whitelist))) {
463                                     # If SURBL checks are enabled and the domain is
464                                     # not in the SURBL list, add it.
465                                     if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
466                                         ($surbl_enable == 1)) {
467                                         push(@surbl_list,$spamcheckdomain);
468                                     }
469                                     # If URIBL checks are enabled and the domain is
470                                     # not in the URIBL list, add it.
471                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
472                                         ($uribl_enable == 1)) {
473                                         push(@uribl_list,$spamcheckdomain);
474                                     }
475                                     # If DBL checks are enabled and the domain is
476                                     # not in the DBL list, add it.
477                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
478                                         ($dbl_enable == 1)) {
479                                         push(@dbl_list,$spamcheckdomain);
480                                     }
481                                 }
482
483                             } else {
484                                 # Set $spamcheckdomain to two elements
485                                 $spamcheckdomain = mkaddress(@domain,2);
486                                 # Check if $spamcheckdomain is not in the whitelist.
487                                 if (! grep(/^$spamcheckdomain$/i,@whitelist)) {
488                                     # If SURBL checks are enabled and the domain is
489                                     # not in the SURBL list, add it.
490                                     if (! grep(/^$spamcheckdomain$/i,@surbl_list) &&
491                                         ($surbl_enable == 1)) {
492                                         push(@surbl_list,$spamcheckdomain);
493                                     }
494                                     # If URIBL checks are enabled and the domain is
495                                     # not in the URIBL list, add it.
496                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
497                                         ($uribl_enable == 1)) {
498                                         push(@uribl_list,$spamcheckdomain);
499                                     }
500                                     # If DBL checks are enabled and the domain is
501                                     # not in the DBL list, add it.
502                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
503                                         ($dbl_enable == 1)) {
504                                         push(@dbl_list,$spamcheckdomain);
505                                     }
506                                 }
507                                 # Reset $spamcheckdomain to three elements
508                                 $spamcheckdomain = mkaddress(@domain,3);
509                                 # Check if $spamcheckdomain is not in the whitelist.
510                                 if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
511                                     (! grep(/^$two_checkdomain$/i,@whitelist))) {
512                                     # If URIBL checks are enabled and the domain is
513                                     # not in the URIBL list, add it.
514                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
515                                         ($uribl_enable == 1)) {
516                                         push(@uribl_list,$spamcheckdomain);
517                                     }
518                                     # If DBL checks are enabled and the domain is
519                                     # not in the DBL list, add it.
520                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
521                                         ($dbl_enable == 1)) {
522                                         push(@dbl_list,$spamcheckdomain);
523                                     }
524                                 }
525                                 # Set $spamcheckdomain to four elements
526                                 $spamcheckdomain = mkaddress(@domain,4);
527                                 # Check if $spamcheckdomain is not in the whitelist.
528                                 if ((! grep(/^$spamcheckdomain$/i,@whitelist)) &&
529                                     (! grep(/^$three_checkdomain$/i,@whitelist)) &&
530                                     (! grep(/^$two_checkdomain$/i,@whitelist))) {
531                                     # If URIBL checks are enabled and the domain is
532                                     # not in the URIBL list, add it.
533                                     if (! grep(/^$spamcheckdomain$/i,@uribl_list) &&
534                                         ($uribl_enable == 1)) {
535                                         push(@uribl_list,$spamcheckdomain);
536                                     }
537                                     # If DBL checks are enabled and the domain is
538                                     # not in the DBL list, add it.
539                                     if (! grep(/^$spamcheckdomain$/i,@dbl_list) &&
540                                         ($dbl_enable == 1)) {
541                                         push(@dbl_list,$spamcheckdomain);
542                                     }
543                                 }
544                             }
545                         } # End: if ($domain[-1] =~ /^(\d){1,3}$/)
546                     } # End: if (scalar(@domain) == 4)
547                 } # End: if (scalar(@domain) >=2)
548             } # End: for ($i=1; $i < scalar(@parts); $i++)
549
550             # If there are items in the SURBL list and the SURBL check
551             # is enabled then perform lookups on them.
552             if ((scalar(@surbl_list) > 0) && 
553                 ($surbl_enable == 1)) {
554                 foreach $i (@surbl_list) {
555                     # DEBUG statement.
556                     #warn ("CHECKING DOMAIN ($mime_filename): $i in SURBL list.\n");
557                     $return_result = surbllookup($i);
558                     if ($return_result ne "") {
559                         return $return_result;
560                     }
561                 }
562             }
563
564             # If there are items in the URIBL list and the URIBL check
565             # is enabled and the previous lookup did not return a result
566             # then perform lookups on them.
567             if ((scalar(@uribl_list) > 0) && 
568                 ($uribl_enable == 1) &&
569                 ($return_result eq "")) {
570                 foreach $i (@uribl_list) {
571                     # DEBUG statement.
572                     #warn ("CHECKING DOMAIN ($mime_filename): $i in URIBL list.\n");
573                     $return_result = uribllookup($i);
574                     if ($return_result ne "") {
575                         return $return_result;
576                     }
577                 }
578             }
579
580             # If there are items in the DBL list and the DBL check
581             # is enabled and the previous lookups did not return a result
582             # then perform lookups on them.
583             if ((scalar(@dbl_list) > 0) && 
584                 ($dbl_enable == 1) &&
585                 ($return_result eq "")) {
586                 foreach $i (@dbl_list) {
587                     # DEBUG statement.
588                     #warn ("CHECKING DOMAIN ($mime_filename): $i in DBL list.\n");
589                     $return_result = dbllookup($i);
590                     if ($return_result ne "") {
591                         return $return_result;
592                     }
593                 }
594             }
595         } # End: if (scalar(@parts) > 1)
596     } # End: if ($exim_body)
597
598     # No URLs were found or the URLs that were found were not
599     # listed in any list so return false.
600     return false;
601
602 } # End Main: - sub surblspamcheck