plugins/filters/filters.php

   1 <?php
   2
   3 /**
   4  * Message and Spam Filter Plugin
   5  *
   6  * Copyright (c) 1999-2002 The SquirrelMail Project Team
   7  * Licensed under the GNU GPL. For full terms see the file COPYING.
   8  *
   9  * This plugin filters your inbox into different folders based upon given
  10  * criteria.  It is most useful for people who are subscibed to mailing lists
  11  * to help organize their messages.  The argument stands that filtering is
  12  * not the place of the client, which is why this has been made a plugin for
  13  * SquirrelMail.  You may be better off using products such as Sieve or
  14  * Procmail to do your filtering so it happens even when SquirrelMail isn't
  15  * running.
  16  *
  17  * If you need help with this, or see improvements that can be made, please
  18  * email me directly at the address above.  I definately welcome suggestions
  19  * and comments.  This plugin, as is the case with all SquirrelMail plugins,
  20  * is not directly supported by the developers.  Please come to me off the
  21  * mailing list if you have trouble with it.
  22  *
  23  * Also view plugins/README.plugins for more information.
  24  *
  25  * $Id$
  26  */
  27
  28 function filters_SaveCache () {
  29     global $data_dir, $SpamFilters_DNScache;
  30
  31     if (file_exists($data_dir . "/dnscache")) {
  32         $fp = fopen($data_dir . "/dnscache", "r");
  33     } else {
  34         $fp = false;
  35     }
  36     if ($fp) {
  37         flock($fp,LOCK_EX);
  38     } else {
  39        $fp = fopen($data_dir . "/dnscache", "w+");
  40        fclose($fp);
  41        $fp = fopen($data_dir . "/dnscache", "r");
  42        flock($fp,LOCK_EX);
  43     }
  44     $fp1=fopen($data_dir . "/dnscache", "w+");
  45
  46     foreach ($SpamFilters_DNScache as $Key=> $Value) {
  47        $tstr = $Key . ',' . $Value['L'] . ',' . $Value['T'] . "\n";
  48        fputs ($fp1, $tstr);
  49     }
  50     fclose($fp1);
  51     flock($fp,LOCK_UN);
  52     fclose($fp);
  53 }
  54
  55
  56 function filters_LoadCache () {
  57     global $data_dir, $SpamFilters_DNScache;
  58
  59     if (file_exists($data_dir . "/dnscache")) {
  60         if ($fp = fopen ($data_dir . "/dnscache", "r")) {
  61             flock($fp,LOCK_SH);
  62             while ($data=fgetcsv($fp,1024)) {
  63                if ($data[2] > time()) {
  64                   $SpamFilters_DNScache[$data[0]]['L'] = $data[1];
  65                   $SpamFilters_DNScache[$data[0]]['T'] = $data[2];
  66                }
  67             }
  68
  69             flock($fp,LOCK_UN);
  70         }
  71     }
  72 }
  73
  74 function filters_bulkquery($filters_spam_scan, $filters, $read) {
  75     global $SpamFilters_YourHop, $attachment_dir, $username,
  76            $SpamFilters_DNScache, $SpamFilters_BulkQuery;
  77
  78     $IPs = array();
  79     $i = 0;
  80     while ($i < count($read)) {
  81         // EIMS will give funky results
  82         $Chunks = explode(' ', $read[$i]);
  83         if ($Chunks[0] != '*') {
  84             $i ++;
  85             continue;
  86         }
  87         $MsgNum = $Chunks[1];
  88
  89         $i ++;
  90         $Scan = 1;
  91
  92         // Check for normal IMAP servers
  93         if ($filters_spam_scan == 'new') {
  94             if (is_int(strpos($Chunks[4], '\Seen'))) {
  95                 $Scan = 0;
  96             }
  97         }
  98
  99         // Look through all of the Received headers for IP addresses
 100         // Stop when I get ")" on a line
 101         // Stop if I get "*" on a line (don't advance)
 102         // and above all, stop if $i is bigger than the total # of lines
 103         while (($i < count($read)) &&
 104                 ($read[$i][0] != ')' && $read[$i][0] != '*' &&
 105                 $read[$i][0] != "\n")) {
 106             // Check to see if this line is the right "Received from" line
 107             // to check
 108             if (is_int(strpos($read[$i], $SpamFilters_YourHop))) {
 109
 110                 // short-circuit and skip work if we don't scan this one
 111                 if ($Scan) {
 112                     $read[$i] = ereg_replace('[^0-9\.]', ' ', $read[$i]);
 113                     $elements = explode(' ', $read[$i]);
 114                     foreach ($elements as $value) {
 115                         if ($value != '' &&
 116                             ereg('[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}',
 117                                 $value, $regs)) {
 118                             $Chunks = explode('.', $value);
 119                             $IP = $Chunks[3] . '.' . $Chunks[2] . '.' .
 120                                   $Chunks[1] . '.' . $Chunks[0];
 121                             foreach ($filters as $key => $value) {
 122                                 if ($filters[$key]['enabled'] &&
 123                                           $filters[$key]['dns']) {
 124                                     if (strlen($SpamFilters_DNScache[$IP.'.'.$filters[$key]['dns']]) == 0) {
 125                                        $IPs[$IP] = true;
 126                                        break;
 127                                     }
 128                                 }
 129                             }
 130                             // If we've checked one IP and YourHop is
 131                             // just a space
 132                             if ($SpamFilters_YourHop == ' ') {
 133                                 break;  // don't check any more
 134                             }
 135                         }
 136                     }
 137                 }
 138             }
 139             $i ++;
 140         }
 141     }
 142
 143     if (count($IPs) > 0) {
 144         $rbls = array();
 145         foreach ($filters as $key => $value) {
 146             if ($filters[$key]['enabled']) {
 147                 if ($filters[$key]['dns']) {
 148                     $rbls[$filters[$key]['dns']] = true;
 149                 }
 150             }
 151         }
 152
 153         $bqfil = $attachment_dir . $username . "-bq.in";
 154         $fp = fopen($bqfil, "w");
 155         foreach ($rbls as $key => $value) {
 156             fputs ($fp, "." . $key . "\n");
 157         }
 158         fputs ($fp, "----------\n");
 159         foreach ($IPs as $key => $value) {
 160             fputs ($fp, $key . "\n");
 161         }
 162         fclose ($fp);
 163         $bqout = array();
 164         exec ($SpamFilters_BulkQuery . " < " . $bqfil, $bqout);
 165         foreach ($bqout as $value) {
 166             $Chunks = explode(',', $value);
 167             $SpamFilters_DNScache[$Chunks[0]]['L'] = $Chunks[1];
 168             $SpamFilters_DNScache[$Chunks[0]]['T'] = $Chunks[2] + time();
 169         }
 170         unlink($bqfil);
 171     }
 172 }
 173
 174
 175 function filters_sqimap_read_data ($imap_stream, $pre, $handle_errors, &$response, &$message) {
 176     global $color, $squirrelmail_language, $imap_general_debug;
 177
 178     $data = array();
 179     $size = 0;
 180
 181     do {
 182         $read = fgets($imap_stream, 9096);
 183         if (ereg("^$pre (OK|BAD|NO)(.*)$", $read, $regs)) {
 184             break;  // found end of reply
 185         }
 186
 187         // Continue if needed for this single line
 188         while (strpos($read, "\n") === false) {
 189             $read .= fgets($imap_stream, 9096);
 190         }
 191
 192         $data[] = $read;
 193
 194         if (ereg("^\\* [0-9]+ FETCH.*\\{([0-9]+)\\}", $read, $regs)) {
 195             $size = $regs[1];
 196             if ($imap_general_debug) {
 197                 echo "<small><tt><font color=\"#CC0000\">Size is $size</font></tt></small><br>\n";
 198             }
 199
 200             $total_size = 0;
 201             do {
 202                 $read = fgets($imap_stream, 9096);
 203                 if ($imap_general_debug) {
 204                     echo "<small><tt><font color=\"#CC0000\">$read</font></tt></small><br>\n";
 205                     flush();
 206                 }
 207                 $data[] = $read;
 208                 $total_size += strlen($read);
 209             } while ($total_size < $size);
 210
 211             $size = 0;
 212         }
 213         // For debugging purposes
 214         if ($imap_general_debug) {
 215             echo "<small><tt><font color=\"#CC0000\">$read</font></tt></small><br>\n";
 216             flush();
 217         }
 218     } while (true);
 219
 220     $response = $regs[1];
 221     $message = trim($regs[2]);
 222
 223     if ($imap_general_debug) {
 224         echo '--<br>';
 225     }
 226
 227     if (!$handle_errors) {
 228         return $data;
 229     }
 230
 231     if ($response == 'NO') {
 232         // ignore this error from m$ exchange, it is not fatal (aka bug)
 233         if (strstr($message, 'command resulted in') === false) {
 234             set_up_language($squirrelmail_language);
 235             echo "<br><b><font color=$color[2]>\n" .
 236                  _("ERROR : Could not complete request.") .
 237                  "</b><br>\n" .
 238                  _("Reason Given: ") .
 239                  $message . "</font><br>\n";
 240             exit;
 241         }
 242     } else if ($response == 'BAD') {
 243         set_up_language($squirrelmail_language);
 244         echo "<br><b><font color=$color[2]>\n" .
 245              _("ERROR : Bad or malformed request.") .
 246              "</b><br>\n" .
 247              _("Server responded: ") .
 248              $message . "</font><br>\n";
 249         exit;
 250     }
 251
 252     return $data;
 253 }
 254
 255
 256 function start_filters() {
 257     global $mailbox, $username, $key, $imapServerAddress, $imapPort, $imap,
 258         $imap_general, $filters, $imap_stream, $imapConnection,
 259     $UseSeparateImapConnection, $AllowSpamFilters;
 260
 261 #    if ($mailbox == 'INBOX') {
 262         // Detect if we have already connected to IMAP or not.
 263         // Also check if we are forced to use a separate IMAP connection
 264         if ((!isset($imap_stream) && !isset($imapConnection)) ||
 265             $UseSeparateImapConnection) {
 266                 $stream = sqimap_login($username, $key, $imapServerAddress,
 267                                     $imapPort, 10);
 268                 $previously_connected = false;
 269         } elseif (isset($imapConnection)) {
 270             $stream = $imapConnection;
 271             $previously_connected = true;
 272         } else {
 273             $previously_connected = true;
 274             $stream = $imap_stream;
 275         }
 276
 277         if (sqimap_get_num_messages($stream, 'INBOX') > 0) {
 278             // Filter spam from inbox before we sort them into folders
 279             if ($AllowSpamFilters) {
 280                 spam_filters($stream);
 281             }
 282
 283             // Sort into folders
 284             user_filters($stream);
 285         }
 286
 287         if (!$previously_connected) {
 288             sqimap_logout($stream);
 289         }
 290 #    }
 291 }
 292
 293
 294 function user_filters($imap_stream) {
 295     $filters = load_filters();
 296     if (! $filters) return;
 297
 298     sqimap_mailbox_select($imap_stream, 'INBOX');
 299
 300     // For every rule
 301     for ($i=0; $i < count($filters); $i++) {
 302         // If it is the "combo" rule
 303         if ($filters[$i]['where'] == 'To or Cc') {
 304             /*
 305             *  If it's "TO OR CC", we have to do two searches, one for TO
 306             *  and the other for CC.
 307             */
 308             filter_search_and_delete($imap_stream, 'TO',
 309             $filters[$i]['what'], $filters[$i]['folder']);
 310             filter_search_and_delete($imap_stream, 'CC',
 311             $filters[$i]['what'], $filters[$i]['folder']);
 312         } else {
 313             /*
 314             *  If it's a normal TO, CC, SUBJECT, or FROM, then handle it
 315             *  normally.
 316             */
 317             filter_search_and_delete($imap_stream, $filters[$i]['where'],
 318             $filters[$i]['what'], $filters[$i]['folder']);
 319         }
 320     }
 321     // Clean out the mailbox whether or not auto_expunge is on
 322     // That way it looks like it was redirected properly
 323     sqimap_mailbox_expunge($imap_stream, 'INBOX');
 324 }
 325
 326 function filter_search_and_delete($imap, $where, $what, $where_to) {
 327     global $languages, $squirrelmail_language;
 328     if (isset($languages[$squirrelmail_language]['CHARSET']) &&
 329         $languages[$squirrelmail_language]['CHARSET']) {
 330         $search_str = "SEARCH CHARSET "
 331             . strtoupper($languages[$squirrelmail_language]['CHARSET'])
 332             . " ALL ";
 333     } else {
 334         $search_str = "SEARCH CHARSET US-ASCII ALL ";
 335     }
 336     $search_str .= $where . ' {' . strlen($what) . "}\r\n" . $what . "\r\n";
 337
 338     fputs ($imap, $search_str);
 339     $read = filters_sqimap_read_data ($imap, 'a001', true, $response, $message);
 340
 341     // This may have problems with EIMS due to it being goofy
 342
 343     for ($r=0; $r < count($read) &&
 344                 substr($read[$r], 0, 8) != '* SEARCH'; $r++) {}
 345     if ($response == 'OK') {
 346         $ids = explode(' ', $read[$r]);
 347         if (sqimap_mailbox_exists($imap, $where_to)) {
 348             for ($j=2; $j < count($ids); $j++) {
 349                 $id = trim($ids[$j]);
 350                 sqimap_messages_copy ($imap, $id, $id, $where_to);
 351                 sqimap_messages_flag ($imap, $id, $id, 'Deleted');
 352             }
 353         }
 354     }
 355 }
 356
 357 // These are the spam filters
 358 function spam_filters($imap_stream) {
 359     global $data_dir, $username;
 360     global $SpamFilters_YourHop;
 361     global $SpamFilters_DNScache;
 362     global $SpamFilters_SharedCache;
 363     global $SpamFilters_BulkQuery;
 364
 365     $filters_spam_scan = getPref($data_dir, $username, 'filters_spam_scan');
 366     $filters_spam_folder = getPref($data_dir, $username, 'filters_spam_folder');
 367     $filters = load_spam_filters();
 368
 369     if ($SpamFilters_SharedCache) {
 370        filters_LoadCache();
 371     }
 372
 373     $run = 0;
 374
 375     foreach ($filters as $Key=> $Value) {
 376         if ($Value['enabled']) {
 377             $run ++;
 378         }
 379     }
 380
 381     // short-circuit
 382     if ($run == 0) {
 383         return;
 384     }
 385
 386     sqimap_mailbox_select($imap_stream, 'INBOX');
 387
 388     // Ask for a big list of all "Received" headers in the inbox with
 389     // flags for each message.  Kinda big.
 390     fputs($imap_stream, 'A3999 FETCH 1:* (FLAGS BODY.PEEK[HEADER.FIELDS ' .
 391         "(RECEIVED)])\r\n");
 392
 393     $read = filters_sqimap_read_data ($imap_stream, 'A3999', true,
 394                                     $response, $message);
 395
 396     if ($response != 'OK') {
 397         return;
 398     }
 399
 400     if (strlen($SpamFilters_BulkQuery) > 0) {
 401        filters_bulkquery($filters_spam_scan, $filters, $read);
 402     }
 403
 404     $i = 0;
 405     while ($i < count($read)) {
 406         // EIMS will give funky results
 407         $Chunks = explode(' ', $read[$i]);
 408         if ($Chunks[0] != '*') {
 409             $i ++;
 410             continue;
 411         }
 412         $MsgNum = $Chunks[1];
 413
 414         $IPs = array();
 415         $i ++;
 416         $IsSpam = 0;
 417         $Scan = 1;
 418
 419         // Check for normal IMAP servers
 420         if ($filters_spam_scan == 'new') {
 421             if (is_int(strpos($Chunks[4], '\Seen'))) {
 422                 $Scan = 0;
 423             }
 424         }
 425
 426         // Look through all of the Received headers for IP addresses
 427         // Stop when I get ")" on a line
 428         // Stop if I get "*" on a line (don't advance)
 429         // and above all, stop if $i is bigger than the total # of lines
 430         while (($i < count($read)) &&
 431                 ($read[$i][0] != ')' && $read[$i][0] != '*' &&
 432                 $read[$i][0] != "\n") && (! $IsSpam)) {
 433             // Check to see if this line is the right "Received from" line
 434             // to check
 435             if (is_int(strpos($read[$i], $SpamFilters_YourHop))) {
 436
 437                 // short-circuit and skip work if we don't scan this one
 438                 if ($Scan) {
 439                     $read[$i] = ereg_replace('[^0-9\.]', ' ', $read[$i]);
 440                     $elements = explode(' ', $read[$i]);
 441                     foreach ($elements as $value) {
 442                         if ($value != '' &&
 443                             ereg('[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}',
 444                                 $value, $regs)) {
 445                             $Chunks = explode('.', $value);
 446                             if (filters_spam_check_site($Chunks[0],
 447                                     $Chunks[1], $Chunks[2], $Chunks[3],
 448                                     $filters)) {
 449                                 $IsSpam ++;
 450                                 break;  // no sense in checking more IPs
 451                             }
 452                             // If we've checked one IP and YourHop is
 453                             // just a space
 454                             if ($SpamFilters_YourHop == ' ') {
 455                                 break;  // don't check any more
 456                             }
 457                         }
 458                     }
 459                 }
 460             }
 461             $i ++;
 462         }
 463
 464         // Lookie!  It's spam!  Yum!
 465         if ($IsSpam) {
 466             if (sqimap_mailbox_exists($imap_stream, $filters_spam_folder)) {
 467                 sqimap_messages_copy ($imap_stream, $MsgNum, $MsgNum,
 468                                     $filters_spam_folder);
 469                 sqimap_messages_flag ($imap_stream, $MsgNum, $MsgNum,
 470                                     'Deleted');
 471             }
 472         } else {
 473         }
 474     }
 475
 476     sqimap_mailbox_expunge($imap_stream, 'INBOX');
 477
 478     if ($SpamFilters_SharedCache) {
 479        filters_SaveCache();
 480     } else {
 481        session_register('SpamFilters_DNScache');
 482     }
 483 }
 484
 485
 486 // Does the loop through each enabled filter for the specified IP address.
 487 // IP format:  $a.$b.$c.$d
 488 function filters_spam_check_site($a, $b, $c, $d, &$filters) {
 489     global $SpamFilters_DNScache, $SpamFilters_CacheTTL;
 490     foreach ($filters as $key => $value) {
 491         if ($filters[$key]['enabled']) {
 492             if ($filters[$key]['dns']) {
 493                 $filter_revip = $d . '.' . $c . '.' . $b . '.' . $a . '.' .
 494                                 $filters[$key]['dns'];
 495                 if (strlen($SpamFilters_DNScache[$filter_revip]['L']) == 0) {
 496                     $SpamFilters_DNScache[$filter_revip]['L'] =
 497                                         gethostbyname($filter_revip);
 498                     $SpamFilters_DNScache[$filter_revip]['T'] =
 499                                            time() + $SpamFilters_CacheTTL;
 500                 }
 501                 if ($SpamFilters_DNScache[$filter_revip]['L'] ==
 502                     $filters[$key]['result']) {
 503                     return 1;
 504                 }
 505             }
 506         }
 507     }
 508     return 0;
 509 }
 510
 511 function load_filters() {
 512     global $data_dir, $username;
 513     $filters = array();
 514     for ($i=0; $fltr = getPref($data_dir, $username, 'filter' . $i); $i++) {
 515         $ary = explode(',', $fltr);
 516         $filters[$i]['where'] = $ary[0];
 517         $filters[$i]['what'] = $ary[1];
 518         $filters[$i]['folder'] = $ary[2];
 519     }
 520     return $filters;
 521 }
 522
 523 function load_spam_filters() {
 524     global $data_dir, $username, $SpamFilters_ShowCommercial;
 525
 526     if ($SpamFilters_ShowCommercial) {
 527         $filters['MAPS RBL']['prefname'] = 'filters_spam_maps_rbl';
 528         $filters['MAPS RBL']['name'] = 'MAPS Realtime Blackhole List';
 529         $filters['MAPS RBL']['link'] = 'http://www.mail-abuse.org/rbl/';
 530         $filters['MAPS RBL']['dns'] = 'blackholes.mail-abuse.org';
 531         $filters['MAPS RBL']['result'] = '127.0.0.2';
 532         $filters['MAPS RBL']['comment'] =
 533             _("COMMERCIAL - This list contains servers that are verified spam senders. It is a pretty reliable list to scan spam from.");
 534
 535         $filters['MAPS RSS']['prefname'] = 'filters_spam_maps_rss';
 536         $filters['MAPS RSS']['name'] = 'MAPS Relay Spam Stopper';
 537         $filters['MAPS RSS']['link'] = 'http://www.mail-abuse.org/rss/';
 538         $filters['MAPS RSS']['dns'] = 'relays.mail-abuse.org';
 539         $filters['MAPS RSS']['result'] = '127.0.0.2';
 540         $filters['MAPS RSS']['comment'] =
 541             _("COMMERCIAL - Servers that are configured (or misconfigured) to allow spam to be relayed through their system will be banned with this.  Another good one to use.");
 542
 543         $filters['MAPS DUL']['prefname'] = 'filters_spam_maps_dul';
 544         $filters['MAPS DUL']['name'] = 'MAPS Dial-Up List';
 545         $filters['MAPS DUL']['link'] = 'http://www.mail-abuse.org/dul/';
 546         $filters['MAPS DUL']['dns'] = 'dialups.mail-abuse.org';
 547         $filters['MAPS DUL']['result'] = '127.0.0.3';
 548         $filters['MAPS DUL']['comment'] =
 549             _("COMMERCIAL - Dial-up users are often filtered out since they should use their ISP's mail servers to send mail.  Spammers typically get a dial-up account and send spam directly from there.");
 550
 551         $filters['MAPS RBLplus-RBL']['prefname'] = 'filters_spam_maps_rblplus_rbl';
 552         $filters['MAPS RBLplus-RBL']['name'] = 'MAPS RBL+ RBL List';
 553         $filters['MAPS RBLplus-RBL']['link'] = 'http://www.mail-abuse.org/';
 554         $filters['MAPS RBLplus-RBL']['dns'] = 'rbl-plus.mail-abuse.org';
 555         $filters['MAPS RBLplus-RBL']['result'] = '127.0.0.2';
 556         $filters['MAPS RBLplus-RBL']['comment'] =
 557             _("COMMERCIAL - RBL+ Blackhole entries.");
 558
 559         $filters['MAPS RBLplus-RSS']['prefname'] = 'filters_spam_maps_rblplus_rss';
 560         $filters['MAPS RBLplus-RSS']['name'] = 'MAPS RBL+ List RSS entries';
 561         $filters['MAPS RBLplus-RSS']['link'] = 'http://www.mail-abuse.org/';
 562         $filters['MAPS RBLplus-RSS']['dns'] = 'rbl-plus.mail-abuse.org';
 563         $filters['MAPS RBLplus-RSS']['result'] = '127.0.0.2';
 564         $filters['MAPS RBLplus-RSS']['comment'] =
 565             _("COMMERCIAL - RBL+ OpenRelay entries.");
 566
 567         $filters['MAPS RBLplus-DUL']['prefname'] = 'filters_spam_maps_rblplus_dul';
 568         $filters['MAPS RBLplus-DUL']['name'] = 'MAPS RBL+ List DUL entries';
 569         $filters['MAPS RBLplus-DUL']['link'] = 'http://www.mail-abuse.org/';
 570         $filters['MAPS RBLplus-DUL']['dns'] = 'rbl-plus.mail-abuse.org';
 571         $filters['MAPS RBLplus-DUL']['result'] = '127.0.0.3';
 572         $filters['MAPS RBLplus-DUL']['comment'] =
 573             _("COMMERCIAL - RBL+ Dial-up entries.");
 574     }
 575
 576     $filters['Osirusoft Relays']['prefname'] = 'filters_spam_maps_osirusoft_relay';
 577     $filters['Osirusoft Relays']['name'] = 'Osirusoft Relay List';
 578     $filters['Osirusoft Relays']['link'] = 'http://relays.osirusoft.com/';
 579     $filters['Osirusoft Relays']['dns'] = 'relays.osirusoft.com';
 580     $filters['Osirusoft Relays']['result'] = '127.0.0.2';
 581     $filters['Osirusoft Relays']['comment'] =
 582         _("FREE - Osirusoft Relays - Osirusofts list of verified open relays. Seems to include servers used by abuse@uunet.net auto-replies too.");
 583
 584     $filters['Osirusoft DUL']['prefname'] = 'filters_spam_maps_osirusoft_dul';
 585     $filters['Osirusoft DUL']['name'] = 'Osirusoft Dialup List';
 586     $filters['Osirusoft DUL']['link'] = 'http://relays.osirusoft.com/';
 587     $filters['Osirusoft DUL']['dns'] = 'relays.osirusoft.com';
 588     $filters['Osirusoft DUL']['result'] = '127.0.0.3';
 589     $filters['Osirusoft DUL']['comment'] =
 590         _("FREE - Osirusoft Dialups - Osirusofts Dialup Spam Source list.");
 591
 592     $filters['Osirusoft Spam Source']['prefname'] = 'filters_spam_maps_osirusoft_rc';
 593     $filters['Osirusoft Spam Source']['name'] = 'Osirusoft Confirmed Spam Source List';
 594     $filters['Osirusoft Spam Source']['link'] = 'http://relays.osirusoft.com/';
 595     $filters['Osirusoft Spam Source']['dns'] = 'relays.osirusoft.com';
 596     $filters['Osirusoft Spam Source']['result'] = '127.0.0.4';
 597     $filters['Osirusoft Spam Source']['comment'] =
 598         _("FREE - Osirusoft Confirmed Spam Source - Sites that continually spam and have been manually added after multiple nominations. Use with caution. Seems to catch abuse auto-replies from some ISPs.");
 599
 600     $filters['Osirusoft Smart Host']['prefname'] = 'filters_spam_maps_osirusoft_sh';
 601     $filters['Osirusoft Smart Host']['name'] = 'Osirusoft Smart Host List';
 602     $filters['Osirusoft Smart Host']['link'] = 'http://relays.osirusoft.com/';
 603     $filters['Osirusoft Smart Host']['dns'] = 'relays.osirusoft.com';
 604     $filters['Osirusoft Smart Host']['result'] = '127.0.0.5';
 605     $filters['Osirusoft Smart Host']['comment'] =
 606         _("FREE - Osirusoft Smart Hosts - List of hosts that are secure but relay for other mail servers that are not secure.");
 607
 608     $filters['Osirusoft SPAMware']['prefname'] = 'filters_spam_maps_osirusoft_ss';
 609     $filters['Osirusoft SPAMware']['name'] = 'Osirusoft Spamware Developers List';
 610     $filters['Osirusoft SPAMware']['link'] = 'http://relays.osirusoft.com/';
 611     $filters['Osirusoft SPAMware']['dns'] = 'relays.osirusoft.com';
 612     $filters['Osirusoft SPAMware']['result'] = '127.0.0.6';
 613     $filters['Osirusoft SPAMware']['comment'] =
 614         _("FREE - Osirusoft Spamware Developers - It is believed that these are IP ranges of companies that are known to produce spam software. Seems to catch abuse auto-replies from some ISPs.");
 615
 616     $filters['Osirusoft Unc. OptIn']['prefname'] = 'filters_spam_maps_osirusoft_sl';
 617     $filters['Osirusoft Unc. OptIn']['name'] = 'Osirusoft Unconfirmed OptIn Server List';
 618     $filters['Osirusoft Unc. OptIn']['link'] = 'http://relays.osirusoft.com/';
 619     $filters['Osirusoft Unc. OptIn']['dns'] = 'relays.osirusoft.com';
 620     $filters['Osirusoft Unc. OptIn']['result'] = '127.0.0.7';
 621     $filters['Osirusoft Unc. OptIn']['comment'] =
 622         _("FREE - Osirusoft Unconfirmed OptIn Servers - List of listservers that opt users in without confirmation.");
 623
 624     $filters['Osirusoft Insecure Formmail']['prefname'] = 'filters_spam_maps_osirusoft_fm';
 625     $filters['Osirusoft Insecure Formmail']['name'] = 'Osirusoft Insecure formmail.cvi Script List';
 626     $filters['Osirusoft Insecure Formmail']['link'] = 'http://relays.osirusoft.com/';
 627     $filters['Osirusoft Insecure Formmail']['dns'] = 'relays.osirusoft.com';
 628     $filters['Osirusoft Insecure Formmail']['result'] = '127.0.0.8';
 629     $filters['Osirusoft Insecure Formmail']['comment'] =
 630         _("FREE - Osirusoft Insecure formmail.cgi scripts - List of insecure formmail.cgi scripts. (planned).");
 631
 632     $filters['Osirusoft Open Proxy']['prefname'] = 'filters_spam_maps_osirusoft_op';
 633     $filters['Osirusoft Open Proxy']['name'] = 'Osirusoft Open Proxy Server List';
 634     $filters['Osirusoft Open Proxy']['link'] = 'http://relays.osirusoft.com/';
 635     $filters['Osirusoft Open Proxy']['dns'] = 'relays.osirusoft.com';
 636     $filters['Osirusoft Open Proxy']['result'] = '127.0.0.9';
 637     $filters['Osirusoft Open Proxy']['comment'] =
 638         _("FREE - Osirusoft Open Proxy Servers - List of Open Proxy Servers.");
 639
 640     $filters['ORDB']['prefname'] = 'filters_spam_ordb';
 641     $filters['ORDB']['name'] = 'Open Relay Database List';
 642     $filters['ORDB']['link'] = 'http://www.ordb.org/';
 643     $filters['ORDB']['dns'] = 'relays.ordb.org';
 644     $filters['ORDB']['result'] = '127.0.0.2';
 645     $filters['ORDB']['comment'] =
 646         _("FREE - ORDB was born when ORBS went off the air. It seems to have fewer false positives than ORBS did though.");
 647
 648     $filters['FiveTen Direct']['prefname'] = 'filters_spam_fiveten_src';
 649     $filters['FiveTen Direct']['name'] = 'Five-Ten-sg.com Direct SPAM Sources';
 650     $filters['FiveTen Direct']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 651     $filters['FiveTen Direct']['dns'] = 'blackholes.five-ten-sg.com';
 652     $filters['FiveTen Direct']['result'] = '127.0.0.2';
 653     $filters['FiveTen Direct']['comment'] =
 654         _("FREE - Five-Ten-sg.com - Direct SPAM sources.");
 655
 656     $filters['FiveTen DUL']['prefname'] = 'filters_spam_fiveten_dul';
 657     $filters['FiveTen DUL']['name'] = 'Five-Ten-sg.com DUL Lists';
 658     $filters['FiveTen DUL']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 659     $filters['FiveTen DUL']['dns'] = 'blackholes.five-ten-sg.com';
 660     $filters['FiveTen DUL']['result'] = '127.0.0.3';
 661     $filters['FiveTen DUL']['comment'] =
 662         _("FREE - Five-Ten-sg.com - Dial-up lists - includes some DSL IPs.");
 663
 664     $filters['FiveTen Unc. OptIn']['prefname'] = 'filters_spam_fiveten_oi';
 665     $filters['FiveTen Unc. OptIn']['name'] = 'Five-Ten-sg.com Unconfirmed OptIn Lists';
 666     $filters['FiveTen Unc. OptIn']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 667     $filters['FiveTen Unc. OptIn']['dns'] = 'blackholes.five-ten-sg.com';
 668     $filters['FiveTen Unc. OptIn']['result'] = '127.0.0.4';
 669     $filters['FiveTen Unc. OptIn']['comment'] =
 670         _("FREE - Five-Ten-sg.com - Bulk mailers that do not use confirmed opt-in.");
 671
 672     $filters['FiveTen Others']['prefname'] = 'filters_spam_fiveten_oth';
 673     $filters['FiveTen Others']['name'] = 'Five-Ten-sg.com Other Misc. Servers';
 674     $filters['FiveTen Others']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 675     $filters['FiveTen Others']['dns'] = 'blackholes.five-ten-sg.com';
 676     $filters['FiveTen Others']['result'] = '127.0.0.5';
 677     $filters['FiveTen Others']['comment'] =
 678         _("FREE - Five-Ten-sg.com - Other misc. servers.");
 679
 680     $filters['FiveTen Single Stage']['prefname'] = 'filters_spam_fiveten_ss';
 681     $filters['FiveTen Single Stage']['name'] = 'Five-Ten-sg.com Single Stage Servers';
 682     $filters['FiveTen Single Stage']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 683     $filters['FiveTen Single Stage']['dns'] = 'blackholes.five-ten-sg.com';
 684     $filters['FiveTen Single Stage']['result'] = '127.0.0.6';
 685     $filters['FiveTen Single Stage']['comment'] =
 686         _("FREE - Five-Ten-sg.com - Single Stage servers.");
 687
 688     $filters['FiveTen SPAM Support']['prefname'] = 'filters_spam_fiveten_supp';
 689     $filters['FiveTen SPAM Support']['name'] = 'Five-Ten-sg.com SPAM Support Servers';
 690     $filters['FiveTen SPAM Support']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 691     $filters['FiveTen SPAM Support']['dns'] = 'blackholes.five-ten-sg.com';
 692     $filters['FiveTen SPAM Support']['result'] = '127.0.0.7';
 693     $filters['FiveTen SPAM Support']['comment'] =
 694         _("FREE - Five-Ten-sg.com - SPAM Support servers.");
 695
 696     $filters['FiveTen Web forms']['prefname'] = 'filters_spam_fiveten_wf';
 697     $filters['FiveTen Web forms']['name'] = 'Five-Ten-sg.com Web Form IPs';
 698     $filters['FiveTen Web forms']['link'] = 'http://www.five-ten-sg.com/blackhole.php';
 699     $filters['FiveTen Web forms']['dns'] = 'blackholes.five-ten-sg.com';
 700     $filters['FiveTen Web forms']['result'] = '127.0.0.8';
 701     $filters['FiveTen Web forms']['comment'] =
 702         _("FREE - Five-Ten-sg.com - Web Form IPs.");
 703
 704     $filters['Dorkslayers']['prefname'] = 'filters_spam_dorks';
 705     $filters['Dorkslayers']['name'] = 'Dorkslayers Lists';
 706     $filters['Dorkslayers']['link'] = 'http://www.dorkslayers.com';
 707     $filters['Dorkslayers']['dns'] = 'orbs.dorkslayers.com';
 708     $filters['Dorkslayers']['result'] = '127.0.0.2';
 709     $filters['Dorkslayers']['comment'] =
 710         _("FREE - Dorkslayers appears to include only really bad open relays outside the US to avoid being sued. Interestingly enough, their website recommends you NOT use their service.");
 711
 712     $filters['SPAMhaus']['prefname'] = 'filters_spam_spamhaus';
 713     $filters['SPAMhaus']['name'] = 'SPAMhaus Lists';
 714     $filters['SPAMhaus']['link'] = 'http://www.spamhaus.org';
 715     $filters['SPAMhaus']['dns'] = 'sbl.spamhaus.org';
 716     $filters['SPAMhaus']['result'] = '127.0.0.6';
 717     $filters['SPAMhaus']['comment'] =
 718         _("FREE - SPAMhaus - A list of well-known SPAM sources.");
 719
 720     $filters['SPAMcop']['prefname'] = 'filters_spam_spamcop';
 721     $filters['SPAMcop']['name'] = 'SPAM Cop Lists';
 722     $filters['SPAMcop']['link'] = 'http://spamcop.net/bl.shtml';
 723     $filters['SPAMcop']['dns'] = 'bl.spamcop.net';
 724     $filters['SPAMcop']['result'] = '127.0.0.2';
 725     $filters['SPAMcop']['comment'] =
 726         _("FREE, for now - SPAMCOP - An interesting solution that lists servers that have a very high spam to legit email ratio (85% or more).");
 727
 728     $filters['dev.null.dk']['prefname'] = 'filters_spam_devnull';
 729     $filters['dev.null.dk']['name'] = 'dev.null.dk Lists';
 730     $filters['dev.null.dk']['link'] = 'http://dev.null.dk/';
 731     $filters['dev.null.dk']['dns'] = 'dev.null.dk';
 732     $filters['dev.null.dk']['result'] = '127.0.0.2';
 733     $filters['dev.null.dk']['comment'] =
 734         _("FREE - dev.null.dk - I don't have any detailed info on this list.");
 735
 736     $filters['visi.com']['prefname'] = 'filters_spam_visi';
 737     $filters['visi.com']['name'] = 'visi.com Relay Stop List';
 738     $filters['visi.com']['link'] = 'http://relays.visi.com';
 739     $filters['visi.com']['dns'] = 'relays.visi.com';
 740     $filters['visi.com']['result'] = '127.0.0.2';
 741     $filters['visi.com']['comment'] =
 742         _("FREE - visi.com - Relay Stop List. Very conservative OpenRelay List.");
 743
 744     $filters['2mbit.com Open Relays']['prefname'] = 'filters_spam_2mb_or';
 745     $filters['2mbit.com Open Relays']['name'] = '2mbit.com Open Relays List';
 746     $filters['2mbit.com Open Relays']['link'] = 'http://www.2mbit.com/sbl.php';
 747     $filters['2mbit.com Open Relays']['dns'] = 'blackholes.2mbit.com';
 748     $filters['2mbit.com Open Relays']['result'] = '127.0.0.2';
 749     $filters['2mbit.com Open Relays']['comment'] =
 750         _("FREE - 2mbit.com Open Relays - Another list of Open Relays.");
 751
 752     $filters['2mbit.com SPAM Source']['prefname'] = 'filters_spam_2mb_ss';
 753     $filters['2mbit.com SPAM Source']['name'] = '2mbit.com SPAM Source List';
 754     $filters['2mbit.com SPAM Source']['link'] = 'http://www.2mbit.com/sbl.php';
 755     $filters['2mbit.com SPAM Source']['dns'] = 'blackholes.2mbit.com';
 756     $filters['2mbit.com SPAM Source']['result'] = '127.0.0.4';
 757     $filters['2mbit.com SPAM Source']['comment'] =
 758         _("FREE - 2mbit.com SPAM Source - List of Direct SPAM Sources.");
 759
 760     $filters['2mbit.com SPAM ISPs']['prefname'] = 'filters_spam_2mb_isp';
 761     $filters['2mbit.com SPAM ISPs']['name'] = '2mbit.com SPAM-friendly ISP List';
 762     $filters['2mbit.com SPAM ISPs']['link'] = 'http://www.2mbit.com/sbl.php';
 763     $filters['2mbit.com SPAM ISPs']['dns'] = 'blackholes.2mbit.com';
 764     $filters['2mbit.com SPAM ISPs']['result'] = '127.0.0.10';
 765     $filters['2mbit.com SPAM ISPs']['comment'] =
 766         _("FREE - 2mbit.com SPAM ISPs - List of SPAM-friendly ISPs.");
 767
 768     $filters['Leadmon DUL']['prefname'] = 'filters_spam_lm_dul';
 769     $filters['Leadmon DUL']['name'] = 'Leadmon.net DUL List';
 770     $filters['Leadmon DUL']['link'] = 'http://www.leadmon.net/spamguard/';
 771     $filters['Leadmon DUL']['dns'] = 'spamguard.leadmon.net';
 772     $filters['Leadmon DUL']['result'] = '127.0.0.2';
 773     $filters['Leadmon DUL']['comment'] =
 774         _("FREE - Leadmon DUL - Another list of Dial-up or otherwise dynamically assigned IPs.");
 775
 776     $filters['Leadmon SPAM Source']['prefname'] = 'filters_spam_lm_ss';
 777     $filters['Leadmon SPAM Source']['name'] = 'Leadmon.net SPAM Source List';
 778     $filters['Leadmon SPAM Source']['link'] = 'http://www.leadmon.net/spamguard/';
 779     $filters['Leadmon SPAM Source']['dns'] = 'spamguard.leadmon.net';
 780     $filters['Leadmon SPAM Source']['result'] = '127.0.0.3';
 781     $filters['Leadmon SPAM Source']['comment'] =
 782         _("FREE - Leadmon SPAM Source - List of IPs Leadmon.net has received SPAM directly from.");
 783
 784     $filters['Leadmon Bulk Mailers']['prefname'] = 'filters_spam_lm_bm';
 785     $filters['Leadmon Bulk Mailers']['name'] = 'Leadmon.net Bulk Mailers List';
 786     $filters['Leadmon Bulk Mailers']['link'] = 'http://www.leadmon.net/spamguard/';
 787     $filters['Leadmon Bulk Mailers']['dns'] = 'spamguard.leadmon.net';
 788     $filters['Leadmon Bulk Mailers']['result'] = '127.0.0.4';
 789     $filters['Leadmon Bulk Mailers']['comment'] =
 790         _("FREE - Leadmon Bulk Mailers - Bulk mailers that do not require confirmed opt-in or that have allowed known spammers to become clients and abuse their services.");
 791
 792     $filters['Leadmon Open Relays']['prefname'] = 'filters_spam_lm_or';
 793     $filters['Leadmon Open Relays']['name'] = 'Leadmon.net Open Relays List';
 794     $filters['Leadmon Open Relays']['link'] = 'http://www.leadmon.net/spamguard/';
 795     $filters['Leadmon Open Relays']['dns'] = 'spamguard.leadmon.net';
 796     $filters['Leadmon Open Relays']['result'] = '127.0.0.5';
 797     $filters['Leadmon Open Relays']['comment'] =
 798         _("FREE - Leadmon Open Relays - Single Stage Open Relays that are not listed on other active RBLs.");
 799
 800     $filters['Leadmon Multi-stage']['prefname'] = 'filters_spam_lm_ms';
 801     $filters['Leadmon Multi-stage']['name'] = 'Leadmon.net Multi-Stage Relay List';
 802     $filters['Leadmon Multi-stage']['link'] = 'http://www.leadmon.net/spamguard/';
 803     $filters['Leadmon Multi-stage']['dns'] = 'spamguard.leadmon.net';
 804     $filters['Leadmon Multi-stage']['result'] = '127.0.0.6';
 805     $filters['Leadmon Multi-stage']['comment'] =
 806         _("FREE - Leadmon Multi-stage - Multi-Stage Open Relays that are not listed on other active RBLs and that have sent SPAM to Leadmon.net.");
 807
 808     $filters['Leadmon SpamBlock']['prefname'] = 'filters_spam_lm_sb';
 809     $filters['Leadmon SpamBlock']['name'] = 'Leadmon.net SpamBlock Sites List';
 810     $filters['Leadmon SpamBlock']['link'] = 'http://www.leadmon.net/spamguard/';
 811     $filters['Leadmon SpamBlock']['dns'] = 'spamguard.leadmon.net';
 812     $filters['Leadmon SpamBlock']['result'] = '127.0.0.7';
 813     $filters['Leadmon SpamBlock']['comment'] =
 814         _("FREE - Leadmon SpamBlock - Sites on this listing have sent Leadmon.net direct SPAM from IPs in netblocks where the entire block has no DNS mappings. It's a list of BLOCKS of IPs being used by people who have SPAMmed Leadmon.net.");
 815
 816     $filters['NJABL Open Relays']['prefname'] = 'filters_spam_njabl_or';
 817     $filters['NJABL Open Relays']['name'] = 'NJABL Open Relay/Direct Spam Source List';
 818     $filters['NJABL Open Relays']['link'] = 'http://www.njabl.org/';
 819     $filters['NJABL Open Relays']['dns'] = 'dnsbl.njabl.org';
 820     $filters['NJABL Open Relays']['result'] = '127.0.0.2';
 821     $filters['NJABL Open Relays']['comment'] =
 822         _("FREE, for now - Not Just Another Blacklist - Both Open Relays and Direct SPAM Sources.");
 823
 824     $filters['NJABL DUL']['prefname'] = 'filters_spam_njabl_dul';
 825     $filters['NJABL DUL']['name'] = 'NJABL Dial-ups List';
 826     $filters['NJABL DUL']['link'] = 'http://www.njabl.org/';
 827     $filters['NJABL DUL']['dns'] = 'dnsbl.njabl.org';
 828     $filters['NJABL DUL']['result'] = '127.0.0.3';
 829     $filters['NJABL DUL']['comment'] =
 830         _("FREE, for now - Not Just Another Blacklist - Dial-up IPs.");
 831
 832     foreach ($filters as $Key => $Value) {
 833         $filters[$Key]['enabled'] = getPref($data_dir, $username,
 834             $filters[$Key]['prefname']);
 835     }
 836
 837     return $filters;
 838 }
 839
 840 function remove_filter ($id) {
 841     global $data_dir, $username;
 842
 843     while ($nextFilter = getPref($data_dir, $username, 'filter' .
 844         ($id + 1))) {
 845         setPref($data_dir, $username, 'filter' . $id, $nextFilter);
 846         $id ++;
 847     }
 848
 849     removePref($data_dir, $username, 'filter' . $id);
 850 }
 851
 852 function filter_swap($id1, $id2) {
 853     global $data_dir, $username;
 854
 855     $FirstFilter = getPref($data_dir, $username, 'filter' . $id1);
 856     $SecondFilter = getPref($data_dir, $username, 'filter' . $id2);
 857
 858     if ($FirstFilter && $SecondFilter) {
 859         setPref($data_dir, $username, 'filter' . $id2, $FirstFilter);
 860         setPref($data_dir, $username, 'filter' . $id1, $SecondFilter);
 861     }
 862 }
 863
 864 /* This update the filter rules when
 865    renaming or deleting folders */
 866 function update_for_folder ($args) {
 867     $old_folder = $args[0];
 868         $new_folder = $args[2];
 869         $action = $args[1];
 870     global $plugins, $data_dir, $username;
 871     $filters = array();
 872     $filters = load_filters();
 873     $filter_count = count($filters);
 874     $p = 0;
 875     for ($i=0;$i<$filter_count;$i++) {
 876         if (!empty($filters)) {
 877             if ($old_folder == $filters[$i]['folder']) {
 878                 if ($action == 'rename') {
 879                     $filters[$i]['folder'] = $new_folder;
 880                     setPref($data_dir, $username, 'filter'.$i,
 881                     $filters[$i]['where'].','.$filters[$i]['what'].','.$new_folder);
 882                 }
 883                 elseif ($action == 'delete') {
 884                     remove_filter($p);
 885                     $p = $p-1;
 886                 }
 887             }
 888         $p++;
 889         }
 890     }
 891 }
 892 ?>