From 0729c58cb03befdb31b7a1ca56bd052abfd66477 Mon Sep 17 00:00:00 2001
From: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com>
Date: Tue, 11 Jul 2023 21:28:43 +0300
Subject: [PATCH] Add composites exclusions for known Apple Mail bad symbols

---
 conf/composites.conf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/conf/composites.conf b/conf/composites.conf
index 00f46f966..a1f18749c 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -65,6 +65,14 @@ composites {
     expression = "-R_DKIM_ALLOW & (R_DKIM_TEMPFAIL | R_DKIM_PERMFAIL | R_DKIM_REJECT)"
     policy = "remove_weight";
   }
+  APPLE_MAILER_COMMON {
+    description = "Message was sent by 'Apple Mail' and has common symbols in place";
+    expression = "APPLE_MAILER & MV_CASE";
+  }
+  APPLE_IOS_MAILER_COMMON {
+    description = "Message was sent by 'Apple iOS Mail' and has common symbols in place";
+    expression = "APPLE_IOS_MAILER & (MV_CASE | MIME_MA_MISSING_TEXT)";
+  }
   HACKED_WP_PHISHING {
     expression = "(HAS_X_POS | HAS_PHPMAILER_SIG) & HAS_WP_URI & (PHISHING | CRACKED_SURBL | PH_SURBL_MULTI | DBL_PHISH | DBL_ABUSE_PHISH | URIBL_BLACK | PHISHED_OPENPHISH | PHISHED_PHISHTANK)";
     description = "Phish message sent by hacked Wordpress instance";
-- 
2.39.5