Abusix

Abusix Guardian Mail is a real-time threat intelligence and DNSBL service designed to protect email infrastructure from inbound spam, phishing, ransomware, zero-day malware, and malicious URLs. By querying real-time IP, domain, hash, and short-URL threat lists content filters can block or flag malicious messages before they enter user inboxes.

How it works

Warden adds the Abusix rules to SpamAssassin, which queries the Abusix Guardian Mail threat lists using the API key configured under Warden -> Settings -> Plugin Settings -> Abusix. The RCVD_IN_AMI_* rules check the connecting relay IP address against the IP-based lists, and the URIBL_AMI_* rules check the domains and URLs found in the message.

Rules

Area Rule name Description Default scores
header __RCVD_IN_AMI Received via a relay in Guardian Mail --
header RCVD_IN_AMI_BLACK Received via a relay in Guardian Mail Black 3.0
header RCVD_IN_AMI_EXPLOIT Received via a relay in Guardian Mail Exploit 3.0
header RCVD_IN_AMI_DYN Received via a relay in Guardian Mail Dynamic 3.0
header RCVD_IN_AMI_WHITE Received via a relay in Guardian Mail White -0.1
header URIBL_AMI_DBLACK Contains a spam URL listed in the Guardian Mail domain blocklist 3.0
header URIBL_AMI_WHITE Contains a domain listed in the Guardian Mail domain whitelist -0.1

Subscription Tiers and Usage Limits

Abusix offers several subscription levels depending on server volume and query throughput requirements.

Tier Pricing Daily Query Limit Features & Support
Forever Free $0 / month Up to 5,000 queries / day Access to all core zones (IP, Domain, Hash), standard threat updates, documentation support.
Pro Starts at $10 / month Scaled by volume (10k+ queries / day) Live chat & email support, real-time query analytics dashboard, access to beta threat zones.
Enterprise Custom Custom volume / High-throughput Dedicated SLA, rsync access option, custom billing terms, dedicated feed customization.

Note: Query counts are calculated as total DNSBL lookups performed across all query zones over a 24-hour cycle. You can track your usage at https://app.abusix.com/email-protection/usage. To prevent temporary bursts of mail traffic from immediately pushing you into a higher paid tier or blocking requests, Abusix tracks your usage using a rolling 7-day average of daily queries.

How to get an Abusix API key

Follow these steps to generate your unique Abusix API key for Warden integration:

Step 1: Create an Account and Start Your Free Trial

  1. Go to the Abusix Portal at https://app.abusix.com.
  2. Click Sign Up and complete the registration using your email address.
  3. Confirm your email address via the verification link sent to your inbox.
  4. Log in to the Abusix Portal again and navigate to Guardian Mail in the primary navigation sidebar.
  5. Click the Start Free Trial button.

Step 2: Retrieve Your API Key

  1. Under the Guardian Mail -> API Keys section at https://app.abusix.com/email-protection/api-keys, locate your unique API key.
  2. Your key will appear as a 32 character alphanumeric string (e.g., 2ksdfhk2234233453sdf234524534533).
  3. Press the copy button next to it to copy it to your clipboard.

Step 3: Enable the Abusix Plugin in Warden

  1. Under Warden -> Settings -> Plugin Settings -> Check the Abusix plugin to enable it.
  2. Under Warden -> Settings -> Plugin Settings -> Abusix -> Enter in your API key under Abusix Guardian Mail API key.
  3. Press the Update button to save the API key.

Related Pages