[Minor] Increase score of URIBL_XBL

This aids with detecting FQDNs hosted on hacked machines, such as used
in Fast Flux-style botnet spam.

diff --git a/conf/scores.d/surbl_group.conf b/conf/scores.d/surbl_group.conf
index 00e0be8aed37740ba8c460dc46462a6856ff5725..b7cf7d1e6a118bb6177ff94e7c3a1ae75c551573 100644 (file)
--- a/conf/scores.d/surbl_group.conf
+++ b/conf/scores.d/surbl_group.conf
@@ -237,7 +237,7 @@ symbols = {
     }
     "URIBL_XBL" {
         ignore = true;
-        weight = 1.5;
+        weight = 3.0;
         description = "A domain in the message body resolves to an IP listed in Spamhaus XBL";
         one_shot = true;
         groups = ["spamhaus"];