[Minor] Remove duplicated rule

diff --git a/rules/regexp/compromised_hosts.lua b/rules/regexp/compromised_hosts.lua
index e5e6e6aec52595d003191f572b6fbf7ff46fbcb2..8d224b31583e6d2b5549002d65949006785dffbf 100644 (file)
--- a/rules/regexp/compromised_hosts.lua
+++ b/rules/regexp/compromised_hosts.lua
@@ -83,10 +83,10 @@ reconf['HAS_X_ANTIABUSE'] = {
   group = "compromised_hosts"
 }
 
-reconf['PHP_EVALD_CODE'] = {
+reconf['X_PHP_EVAL'] = {
   re = "X-PHP-Script=/eval\\(\\)\\'d/Hi || X-PHP-Originating-Script=/eval\\(\\)\\'d/Hi",
   description = "Message sent using eval'd PHP",
-  score = 5.0,
+  score = 4.0,
   group = "compromised_hosts"
 }
 

diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index 5118a5b9b7a70f98bc8d26bbc1f80f67bef4b7bf..d058748096726975c1f6646c48c456e5df21831b 100644 (file)
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -785,13 +785,6 @@ reconf['INVALID_POSTFIX_RECEIVED'] = {
   group = 'header'
 }
 
-reconf['X_PHP_EVAL'] = {
-  re = "X-PHP-Originating-Script=/ : eval\\(\\)'d code$/X",
-  score = 4.0,
-  description = "Message sent by eval()'d PHP code",
-  group = 'header'
-}
-
 reconf['X_PHP_FORGED_0X'] = {
   re = "X-PHP-Originating-Script=/^0\\d/X",
   score = 4.0,