Browse Source

Merge pull request #1206 from fatalbanana/php

[Minor] Remove duplicated rule
tags/1.4.1
Vsevolod Stakhov 7 years ago
parent
commit
ee81d64e6f
2 changed files with 2 additions and 9 deletions
  1. 2
    2
      rules/regexp/compromised_hosts.lua
  2. 0
    7
      rules/regexp/headers.lua

+ 2
- 2
rules/regexp/compromised_hosts.lua View File

@@ -83,10 +83,10 @@ reconf['HAS_X_ANTIABUSE'] = {
group = "compromised_hosts"
}

reconf['PHP_EVALD_CODE'] = {
reconf['X_PHP_EVAL'] = {
re = "X-PHP-Script=/eval\\(\\)\\'d/Hi || X-PHP-Originating-Script=/eval\\(\\)\\'d/Hi",
description = "Message sent using eval'd PHP",
score = 5.0,
score = 4.0,
group = "compromised_hosts"
}


+ 0
- 7
rules/regexp/headers.lua View File

@@ -785,13 +785,6 @@ reconf['INVALID_POSTFIX_RECEIVED'] = {
group = 'header'
}

reconf['X_PHP_EVAL'] = {
re = "X-PHP-Originating-Script=/ : eval\\(\\)'d code$/X",
score = 4.0,
description = "Message sent by eval()'d PHP code",
group = 'header'
}

reconf['X_PHP_FORGED_0X'] = {
re = "X-PHP-Originating-Script=/^0\\d/X",
score = 4.0,

Loading…
Cancel
Save