Procházet zdrojové kódy

unify rules scores and weights forgotten in first commit

tags/1.9.2
heraklit256 před 5 roky
rodič
revize
dbba482e59

+ 1
- 1
conf/modules.d/spamtrap.conf Zobrazit soubor

@@ -37,7 +37,7 @@ spamtrap {
# Fuzzy flag
#fuzzy_flag = 1;
# Fuzzy weight
#fuzzy_weight = 10;
#fuzzy_weight = 10.0;
# Redis key prefix
#key_prefix = 'sptr_';
# Skip spamtrap checks for authorized users

+ 2
- 2
conf/scores.d/headers_group.conf Zobrazit soubor

@@ -17,7 +17,7 @@

symbols = {
"FORGED_SENDER" {
weight = 0.30;
weight = 0.3;
description = "Sender is forged (different From: header and smtp MAIL FROM: addresses)";
}
"R_MIXED_CHARSET" {
@@ -62,4 +62,4 @@ symbols = {
weight = -0.2;
description = "Message seems to be from maillist";
}
}
}

+ 23
- 23
conf/scores.d/hfilter_group.conf Zobrazit soubor

@@ -17,11 +17,11 @@

symbols = {
"HFILTER_HELO_BAREIP" {
weight = 3.00;
weight = 3.0;
description = "Helo host is bare ip";
}
"HFILTER_HELO_BADIP" {
weight = 4.50;
weight = 4.5;
description = "Helo host is very bad ip";
}
"HFILTER_HELO_1" {
@@ -29,19 +29,19 @@ symbols = {
description = "Helo host checks (very low)";
}
"HFILTER_HELO_2" {
weight = 1.00;
weight = 1.0;
description = "Helo host checks (low)";
}
"HFILTER_HELO_3" {
weight = 2.00;
weight = 2.0;
description = "Helo host checks (medium)";
}
"HFILTER_HELO_4" {
weight = 2.50;
weight = 2.5;
description = "Helo host checks (hard)";
}
"HFILTER_HELO_5" {
weight = 3.00;
weight = 3.0;
description = "Helo host checks (very hard)";
}
"HFILTER_HOSTNAME_1" {
@@ -49,23 +49,23 @@ symbols = {
description = "Hostname checks (very low)";
}
"HFILTER_HOSTNAME_2" {
weight = 1.00;
weight = 1.0;
description = "Hostname checks (low)";
}
"HFILTER_HOSTNAME_3" {
weight = 2.00;
weight = 2.0;
description = "Hostname checks (medium)";
}
"HFILTER_HOSTNAME_4" {
weight = 2.50;
weight = 2.5;
description = "Hostname checks (hard)";
}
"HFILTER_HOSTNAME_5" {
weight = 3.00;
weight = 3.0;
description = "Hostname checks (very hard)";
}
"HFILTER_HELO_NORESOLVE_MX" {
weight = 0.20;
weight = 0.2;
description = "MX found in Helo and no resolve";
}
"HFILTER_HELO_NORES_A_OR_MX" {
@@ -73,11 +73,11 @@ symbols = {
description = "Helo no resolve to A or MX";
}
"HFILTER_HELO_IP_A" {
weight = 1.00;
weight = 1.0;
description = "Helo A IP != hostname IP";
}
"HFILTER_HELO_NOT_FQDN" {
weight = 2.00;
weight = 2.0;
description = "Helo not FQDN";
}
"HFILTER_FROMHOST_NORESOLVE_MX" {
@@ -85,47 +85,47 @@ symbols = {
description = "MX found in FROM host and no resolve";
}
"HFILTER_FROMHOST_NORES_A_OR_MX" {
weight = 1.50;
weight = 1.5;
description = "FROM host no resolve to A or MX";
}
"HFILTER_FROMHOST_NOT_FQDN" {
weight = 3.00;
weight = 3.0;
description = "FROM host not FQDN";
}
"HFILTER_FROM_BOUNCE" {
weight = 0.00;
weight = 0.0;
description = "Bounce message";
}
/*
# Disabled by default
"HFILTER_MID_NORESOLVE_MX" {
weight = 0.50;
weight = 0.5;
description = "MX found in Message-id host and no resolve";
}
"HFILTER_MID_NORES_A_OR_MX" {
weight = 0.50;
weight = 0.5;
name = ;
description = "Message-id host no resolve to A or MX";
}
"HFILTER_MID_NOT_FQDN" {
weight = 0.50;
weight = 0.5;
description = "Message-id host not FQDN";
}
*/
"HFILTER_HOSTNAME_UNKNOWN" {
weight = 2.50;
weight = 2.5;
description = "Unknown client hostname (PTR or FCrDNS verification failed)";
}
"HFILTER_RCPT_BOUNCEMOREONE" {
weight = 1.50;
weight = 1.5;
description = "Message from bounce and over 1 recipient";
}
"HFILTER_URL_ONLY" {
weight = 2.20;
weight = 2.2;
description = "URL only in body";
}
"HFILTER_URL_ONELINE" {
weight = 2.50;
weight = 2.5;
description = "One line URL and text in body";
}
}

+ 2
- 2
conf/scores.d/rbl_group.conf Zobrazit soubor

@@ -55,11 +55,11 @@ symbols = {
description = "Message has a valid dkim signature originated from domain listed at https://www.dnswl.org, no trust";
}
"DWL_DNSWL_LOW" {
weight = -1;
weight = -1.0;
description = "Message has a valid dkim signature originated from domain listed at https://www.dnswl.org, low trust";
}
"DWL_DNSWL_MED" {
weight = -2;
weight = -2.0;
description = "Message has a valid dkim signature originated from domain listed at https://www.dnswl.org, medium trust";
}
"DWL_DNSWL_HI" {

+ 1
- 1
conf/scores.d/surbl_group.conf Zobrazit soubor

@@ -122,7 +122,7 @@ symbols = {
description = "DBL uribl abused legit botnet C&C";
}
"DBL_PROHIBIT" {
weight = 0.00000;
weight = 0.0;
description = "DBL uribl IP queries prohibited!";
}
"URIBL_MULTI" {

Načítá se…
Zrušit
Uložit