[Minor] Also respect HAS_XOIP for authenticated messages

diff --git a/conf/composites.conf b/conf/composites.conf
index 2526e701bdb218683411ee47796d6343b81a72df..c1b603e51812075a02e62b6ad95e7e69d4d3189c 100644 (file)
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -178,7 +178,7 @@ composites {
     description = "Message only contains a redirector URL";
   }
   SUSPICIOUS_AUTH_ORIGIN {
-    expression = "RCVD_VIA_SMTP_AUTH & (!RECEIVED_SPAMHAUS_PBL | RECEIVED_SPAMHAUS_XBL | RECEIVED_SPAMHAUS_SBL | RECEIVED_BLOCKLISTDE)";
+    expression = "(HAS_XOIP | RCVD_FROM_SMTP_AUTH) & (!RECEIVED_SPAMHAUS_PBL | RECEIVED_SPAMHAUS_XBL | RECEIVED_SPAMHAUS_SBL | RECEIVED_BLOCKLISTDE)";
     score = 0.0;
     policy = "leave";
     description = "Message authenticated, but from a suspicios origin (potentially an injector)";