From: Vsevolod Stakhov <vsevolod@rspamd.com>
Date: Fri, 23 Dec 2022 20:35:52 +0000 (+0000)
Subject: [Rules] Mid: Add MID_END_EQ_FROM_USER_PART rule
X-Git-Tag: 3.5~133
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=038ed3f0127b8e6c9134191424869f6ec6081569;p=rspamd.git

[Rules] Mid: Add MID_END_EQ_FROM_USER_PART rule

Issue: #4299
---

diff --git a/rules/mid.lua b/rules/mid.lua
index 0d3e52c24..2076debb0 100644
--- a/rules/mid.lua
+++ b/rules/mid.lua
@@ -105,3 +105,24 @@ rspamd_config:set_metric_symbol('MID_CONTAINS_TO', 1.0, 'Message-ID contains To
 rspamd_config:register_virtual_symbol('MID_RHS_MATCH_TO', 1.0, check_mid_id)
 rspamd_config:set_metric_symbol('MID_RHS_MATCH_TO', 1.0, 'Message-ID RHS matches To domain', 'default', 'Message ID')
 
+-- Another check from https://github.com/rspamd/rspamd/issues/4299
+rspamd_config:register_symbol {
+  type = 'normal,mime',
+  group = 'mid',
+  name = 'MID_END_EQ_FROM_USER_PART',
+  description = 'Message-ID RHS (after @) and MIME from local part are the same',
+  score = 4.0,
+
+  callback = function(task)
+    local mid = task:get_header('Message-ID')
+    if not mid then return end
+    local mime_from = task:get_from('mime')
+    local _,_,mid_realm = mid:find("@([a-z]+)>?$")
+    if mid_realm and mime_from and mime_from[1] and mime_from[1].user then
+      if (mid_realm == mime_from[1].user) then
+        return true
+      end
+    end
+  end
+}
+