Commit Graph

735 Commits

Author SHA1 Message Date
heraklit256
0455923baf Include ARC into AUTH_NA rule 2018-10-04 18:04:44 +02:00
heraklit256
a15bd65a86 Composite rules: Minor cleanups
Added descriptions to some rules and unified AND operator.
2018-10-04 18:03:24 +02:00
heraklit256
baec25184f leave original symbols for composite rules
Removing original symbols if a composite rule triggers is kind
of confusing and makes debugging harder.
2018-10-04 17:58:07 +02:00
heraklit256
1a55afb110 lower weight for RCVD_DKIM_ARC_DNSWL_MED and RCVD_DKIM_ARC_DNSWL_HIGH
These were too high as other symbols - such as ARC_ALLOW - already
introduce some negative scores.

Thanks to @moisseev for reporting this.
2018-10-04 17:49:26 +02:00
Vsevolod Stakhov
730eff720c [Conf] Use new dmarc whitelist 2018-09-29 19:24:15 +01:00
Vsevolod Stakhov
dcc7e9ad2b [Conf] Specify whitelist symbols group 2018-09-29 12:43:13 +01:00
Vsevolod Stakhov
e8fe3c7547
Merge pull request #2544 from heraklit256/composites-cleanup
Fix description for composite rule RBL_SPAMHAUS_XBL_ANY
2018-09-28 20:13:09 +01:00
heraklit256
fc0cec888f Fix description for composite rule RBL_SPAMHAUS_XBL_ANY 2018-09-27 16:42:12 +02:00
heraklit256
6e44ac9fb4 leaving original symbols if DNSWL composite rules are triggered
Without policy = "leave", rspamd replaces the original symbols
in log and message header (if enabled), which makes debugging more
hard and is not used in this case.
2018-09-27 16:35:46 +02:00
Carsten Rosenberg
bb58fb5440 [Minor] Antivirus - configureable mime_part scanning 2018-09-26 14:31:47 +02:00
Carsten Rosenberg
37e36c1cdc [Minor] DCC Upstreams support 2018-09-26 11:20:27 +02:00
Alexander Moisseev
957e3c6d1a
[Minor] Remove UNPRECISE_RCPT_DETAIL_FROM_SPAMMY 2018-09-25 19:16:53 +03:00
Vsevolod Stakhov
b50a8429cf [CritFix] Increase default words_decay 2018-09-25 16:54:31 +01:00
Alexander Moisseev
fda9e074ec [Conf] Restore ability to disable phishtank 2018-09-25 14:34:21 +03:00
Vsevolod Stakhov
8c12705705 [Conf] Add maximum group score for phishing 2018-09-23 14:59:11 +01:00
Vsevolod Stakhov
52d2c9fe2d [Conf] Slashing change: add settings configuration to the vanilla set 2018-09-18 17:01:32 +01:00
Vsevolod Stakhov
3e12a51263
Merge pull request #2486 from heraklit256/rbl-blocklist
make sure blocklist.de-rule for Received IPs only triggers once
2018-09-15 19:51:21 +01:00
heraklit256
306192c0dd make sure blocklist.de-rule for Received IPs only triggers once 2018-09-14 16:37:56 +02:00
Vsevolod Stakhov
a110835223
Merge pull request #2471 from heraklit256/rbl-blocklist
Add blocklist.de RBL
2018-09-12 12:00:50 +01:00
heraklit256
648c87a935 add rule for domains trying to stay anonymous 2018-09-09 18:28:17 +02:00
heraklit256
04b52561b0 improve composite rules for phish messages 2018-09-09 18:21:12 +02:00
heraklit256
5312495106 add some missing composite rule description 2018-09-09 18:19:02 +02:00
heraklit256
08a9a1178a add blocklist.de RBL for from and received addresses 2018-09-08 12:39:41 +02:00
heraklit256
5afbc581fa add rule for spammy mails with detailled sender but generic recipients 2018-09-08 12:30:05 +02:00
heraklit256
faadf253ad add rule for phish messages containing emotional subjects 2018-09-08 12:11:36 +02:00
heraklit256
46bb18fa93 add rule for spammy PHP generated mails 2018-09-08 12:02:02 +02:00
Vsevolod Stakhov
b65379dd67
Merge pull request #2446 from heraklit256/extended-dnswl-scores
also trigger DNSWL score rule in case mails are properly ARC signed
2018-08-29 18:20:15 +01:00
Alexander Moisseev
acc871ecfc
[Conf] Fix whitelist.conf
Reported by @bjo81 via Telegram group
2018-08-28 19:50:29 +03:00
Vsevolod Stakhov
a754307205
Merge pull request #2445 from heraklit256/rbl_groupname
adjust Spamhaus group name for received IPs
2018-08-27 18:53:48 +01:00
heraklit256
f1ebed1f9c also trigger DNSWL score rule in case mails are properly ARC signed 2018-08-27 18:27:03 +02:00
heraklit256
c7cc0400ea adjust Spamhaus group name for received IPs 2018-08-27 18:19:50 +02:00
Vsevolod Stakhov
bb7e01011c
Merge pull request #2403 from heraklit256/extended-dnswl-scores
Add negative weight on DNSWL entries
2018-08-11 11:46:43 +01:00
heraklit256
c98a070546 adjust DNSWL scores to -0.1/-0.2/-0.5 2018-08-11 10:19:58 +02:00
dehnli
8e24ef61d3
[Minor] Remove phishtank map ..
.. in favour of DNS based service
2018-08-11 01:34:47 +03:00
Vsevolod Stakhov
0ebcb5c9fb
Merge pull request #2404 from heraklit256/rbl-nixspam
add NiX spam RBL
2018-08-09 11:54:11 +01:00
heraklit256
848e8f6614 add NiX Spam RBL (http://www.dnsbl.manitu.net/) 2018-08-07 16:47:23 +02:00
heraklit256
df8b53f3b1 Revert "mark PKCS7 mime types as good"
This reverts commit 19b524dc47.
2018-08-07 16:36:52 +02:00
heraklit256
1ecd691570 add negative weight to DNSWL entries
However, a message must be correctly DKIM signed to get some more
negative weight in case an received IP is listed with medium or
high trust at DNSWL.

This supersedes a first patch without the DKIM condition.
2018-08-07 16:34:30 +02:00
heraklit256
19b524dc47 mark PKCS7 mime types as good 2018-08-07 16:23:27 +02:00
Emerson Veenstra
ae1686eca3
Fix typo for ARC_REJECT 2018-08-02 13:12:52 -04:00
Mikhail Galanin
ad7d5442c5 Clickhouse tables retention 2018-07-26 15:21:13 +01:00
Vsevolod Stakhov
6250166809 [Conf] Add reputation module configuration placeholder 2018-07-23 11:20:41 +01:00
Vsevolod Stakhov
41ae3822c6 [Minor] Fix local variable in script 2018-07-20 17:36:48 +01:00
Vsevolod Stakhov
85d3aa18ed [Conf] Disable missing lists 2018-07-19 12:18:48 +01:00
Vsevolod Stakhov
4a5f7b6cae [Conf] Add fallback maps 2018-07-18 14:26:25 +01:00
Vsevolod Stakhov
03acc9d2ac [Conf] Use remote maps 2018-07-17 16:58:47 +01:00
Vsevolod Stakhov
4b6085b959 [Conf] Improve upstreams setup for fuzzy storage by default 2018-07-16 13:04:14 +01:00
Vsevolod Stakhov
1b096b8696 [Conf] Rename and fix RBL_VIRUSFREE symbol 2018-07-16 13:04:14 +01:00
Vsevolod Stakhov
f37c712c6e [Conf] Add RBL_VIRUSFREE RBL 2018-07-13 18:18:32 +01:00
Vsevolod Stakhov
a80a5d03f2 [Minor] Fix comments 2018-07-13 18:04:50 +01:00
Alexander Moisseev
cfa97922e3 [Minor] Update redirectors.inc 2018-07-12 10:25:50 +03:00
Alexander Moisseev
455b237d2d
Update redirectors.inc
[Minor] Add cp.bitrix.ru to redirectors list
2018-07-06 10:22:19 +00:00
Vsevolod Stakhov
fe2e90a745 [Minor] Add domains to the list 2018-07-05 09:36:58 +01:00
Andrey Igoshin
b9b5614eaa domain added 2018-07-03 18:19:09 +03:00
Andrey Igoshin
38218624e5 domain added 2018-06-26 17:05:02 +03:00
Andrey Igoshin
2cc62745e6 domains added 2018-06-23 23:31:33 +03:00
Carsten Rosenberg
6c329fc735 [Minor] Ratelimit - improve config file 2018-05-24 15:18:30 +02:00
heraklit256
d39673f6b2 add rule for RCVD_UNAUTH_PBL 2018-05-21 18:51:09 +02:00
Vsevolod Stakhov
ae1b483ce0
Merge pull request #2249 from moisseev/forged_recipients
[Minor] Add symbol options for FORGED_RECIPIENTS
2018-05-20 18:10:57 +01:00
Alexander Moisseev
d15ecc5fe1 [Minor] In *_FORWARDING composites remove only weights 2018-05-20 18:53:49 +03:00
Peter Müller
b11a405d7a improve RBL scores descriptions 2018-05-17 19:38:00 +02:00
Peter Müller
291afeea36 add more Spamhaus RBL results to received IPs 2018-05-17 19:11:36 +02:00
Vsevolod Stakhov
5b365914e7 [Conf] Add additional groups for policies 2018-05-15 14:24:32 +01:00
Vsevolod Stakhov
f7817011cd [Conf] Add MSBL proposed return codes 2018-05-14 14:00:49 +01:00
Andrey Igoshin
6e5c59d67d [Minor] domains added 2018-05-10 20:02:01 +03:00
Andrey Igoshin
8d637ed84f [Feature] support for CommuniGate Pro self-generated messages 2018-05-06 16:35:37 +03:00
Vsevolod Stakhov
e7153fc22c [Minor] Remove stupid leftover 2018-05-03 15:14:00 +01:00
Andrey Igoshin
112aa818a6 [Minor] domains added 2018-05-01 14:59:21 +03:00
Vsevolod Stakhov
90f15439af [Minor] List proxy worker configurables 2018-05-01 09:12:19 +01:00
Andrey Igoshin
08e66a33ad [Minor] domains added 2018-04-26 01:07:07 +03:00
Vsevolod Stakhov
5c0ff08acf [Conf] Make more sane fuzzy_check default settings 2018-04-19 11:30:18 +01:00
Vsevolod Stakhov
8b6eb60d68 [Conf] Show all recipients 2018-04-18 18:19:21 +01:00
larryhynes
bf3b0c0f96
spamtrap.conf - fuzy -> fuzzy 2018-04-17 23:41:34 +01:00
Vsevolod Stakhov
38dfe192fc [Minor] Remove unnecessary type 2018-04-16 17:51:11 +01:00
Vsevolod Stakhov
a3d5365b47 [Conf] Major stock config updates
- Workers are now specified in a new format worker "type" { ... }
- Enable fuzzy worker to simplify local fuzzy storages configuration
- Bind all workers to localhost by default to avoid security flaws
2018-04-16 11:47:26 +01:00
Alexander Moisseev
8e674db0fa
[Minor] Allow no MID for rkn.gov.ru 2018-04-13 08:50:00 +03:00
Vsevolod Stakhov
54438160ab [Minor] Add letsencrypt to spf_dkim_whitelist 2018-04-10 16:47:22 +01:00
Alexander Moisseev
4ff9ed7941
[Minor] Remove duplicate option 2018-04-10 10:45:31 +03:00
Vsevolod Stakhov
30bf446f8c
Merge pull request #2141 from moisseev/patch-4
Update mid.inc
2018-04-03 15:53:42 +01:00
Vsevolod Stakhov
92acef2111
Merge pull request #2139 from moisseev/hfilter
[Minor] Insert symbol on PTR verification DNS error
2018-04-03 15:53:17 +01:00
Alexander Moisseev
b0bc4b822f
Update mid.inc 2018-04-03 08:54:09 +00:00
Alexander Moisseev
8738186f1b [Minor] Insert symbol on PTR verification DNS error 2018-04-02 19:19:57 +03:00
Alexander Moisseev
40ea308924
[Minor] Update HFILTER_HOSTNAME_UNKNOWN description 2018-04-02 16:17:13 +00:00
Andrew Lewis
3271ac4692 [Minor] Use single quotes in some config samples 2018-03-26 10:31:25 +02:00
dehnli
ed8e193d7f
[Minor] Fix kibana template file path syntax 2018-03-23 23:05:57 +03:00
Alexander Moisseev
3fa2392fd1 [Minor] Move remove_upstream_spam_flag default setting to lua script 2018-03-21 10:11:00 +03:00
Vsevolod Stakhov
515f3058be
Merge pull request #2094 from moisseev/spam_flag
[Feature] Remove upstream `X-Spam: Yes` header by default
2018-03-20 10:54:46 +00:00
Alexander Moisseev
23e542a867 [Feature] Remove upstream X-Spam: Yes header by default 2018-03-20 12:21:13 +03:00
Klaus Umbach
7048726256 implemented suggestions
* changed: default hashing-algorithm to blake2
* added: length-limit (default 16)
* changed: prefix to show it's obfuscated (obf)
2018-03-19 21:36:47 +01:00
Klaus Umbach
e938783821 added config-options to default-config 2018-03-19 20:38:26 +01:00
Vsevolod Stakhov
2739b417ab [Feature] Add filename to log format 2018-03-13 17:58:16 +00:00
Vsevolod Stakhov
d27d7084c5 [Conf] Use dedicated rspamd.com subdomains 2018-03-11 16:01:09 +00:00
Vsevolod Stakhov
b126079086 [Conf] Change updates url 2018-03-11 15:44:20 +00:00
Vsevolod Stakhov
f8a7edce94 [Conf] Adjust names and weights for neural network plugin 2018-03-10 14:56:00 +00:00
Vsevolod Stakhov
028b3714ba [Conf] Fix default elastic configuration 2018-03-09 10:46:27 +00:00
Vsevolod Stakhov
5f6528af25 Revert "[Conf] Default statistics is stored in Redis now"
This reverts commit feb910e287.
2018-03-08 16:54:34 +00:00
Vsevolod Stakhov
c17368ed72 [Minor] Some adjustments to neural module 2018-03-08 16:02:45 +00:00
Vsevolod Stakhov
4b9b8cc4c7 [Feature] Add torch conditional to configuration 2018-03-08 12:34:38 +00:00
Vsevolod Stakhov
c8cb5343e0 [Rework] Rename fann_redis to neural plugin 2018-03-08 11:10:11 +00:00
Alexander Moisseev
6156d31fd0 [Minor] Update mid.inc 2018-03-05 10:38:27 +03:00
Vsevolod Stakhov
753373b4fd [Conf] Add bayes_expiry as explicit module 2018-02-24 19:09:48 +00:00
Alexander Moisseev
76abaffdc0
[Conf] Fix double quote position 2018-02-20 06:34:58 +00:00
Vsevolod Stakhov
402d6f7788 [Conf] Rename Rambler BLs as they are now Rspamd's ones 2018-02-19 16:45:16 +00:00
Vsevolod Stakhov
9ef70a3754 [Feature] Preliminary import of the elasticsearch module 2018-02-18 15:46:58 +00:00
Alexander Moisseev
6164170117
[Minor] Add MID regex for taxi.yandex.ru 2017-12-21 16:48:09 +03:00
Vsevolod Stakhov
baf80710bc [Minor] Reduce default history_redisy rows 2017-12-09 12:59:50 +00:00
Vsevolod Stakhov
feb910e287 [Conf] Default statistics is stored in Redis now 2017-11-22 20:47:32 +00:00
André Peters
8eeb457632
Update mime_types.inc 2017-11-15 09:32:54 +01:00
André Peters
cff356fecd
Update mime_types.inc
Added application/x-msdownload
2017-11-15 09:22:44 +01:00
Vsevolod Stakhov
e64778a742 [Minor] Fix groups conf 2017-11-13 20:19:31 +00:00
Vsevolod Stakhov
9106fba8f6 [Minor] Tune default parameters for fann module 2017-11-12 23:24:15 +00:00
Vsevolod Stakhov
5da8cf87d7 [Conf] Massive config rework for new structure of symbols and scores 2017-11-11 13:52:02 +00:00
Alexander Moisseev
673c9d3114
[Minor] Correct a typo 2017-11-02 10:17:41 +03:00
Christian Roessner
3ae6262209 [Minor] Added check_authed and check_local for spamtrap 2017-10-26 12:56:41 +02:00
Vsevolod Stakhov
21c63adb07 [Conf] Use more data from rspamd.com fuzzy storage
MFH: rspamd-1.6
2017-10-24 18:36:42 +01:00
Vsevolod Stakhov
ce95889425 [Conf] Disable fann_redis module by default 2017-10-03 19:26:09 +01:00
Alexander Moisseev
22f9f56f87 [Minor] Suppress base64 symbols for mails sent with 1C v8 2017-08-23 12:18:03 +03:00
Alexander Moisseev
7150b191fc [Minor] Update aliexpress.com Message-ID regexp 2017-08-22 12:42:11 +03:00
Alexander Moisseev
dbd79ccd22 [Minor] Fix time units in ratelimit.conf examples 2017-08-05 11:13:44 +03:00
Alexander Moisseev
88695b41a2 [Minor] Fix key path in arc.conf examples (#1784) 2017-08-04 09:28:37 +03:00
Alexander Moisseev
6f0cbd21a5 [Minor] Suppress MIME_BASE64_TEXT for Mail.Ru Mailer 2017-07-31 11:48:59 +03:00
Vsevolod Stakhov
32059ed6a7 [Feature] Add EBL to the default config 2017-07-19 08:41:23 +01:00
Jean-Louis Dupond
4d7e605a3c Fix indent in metrics.conf 2017-07-12 20:36:36 +02:00
Andrew Lewis
5bd10ab74c [Minor] Fix config 2017-07-07 21:51:16 +02:00
Vsevolod Stakhov
e90a21c149 [Feature] Re-add rambler email bl (as hashed list) 2017-07-07 19:40:15 +01:00
Vsevolod Stakhov
86c0f5cb4f [Conf] Switch RAMBLER_URIBL to a locally managed source 2017-07-07 19:09:41 +01:00
Vsevolod Stakhov
4b417747c4 Merge pull request #1735 from moisseev/patch-1
[Minor] Update redirectors list
2017-07-07 18:45:56 +01:00
Alexander Moisseev
47fa3eab69 [Minor] Update redirectors list 2017-07-07 20:23:03 +03:00
Andrew Lewis
5bfd0fcf49 [Feature] Reload file maps more frequently 2017-07-07 12:14:28 +02:00
Vsevolod Stakhov
ab69bf91c6 [Conf] Remove Rambler email bl for now 2017-06-30 07:58:11 +01:00
Vsevolod Stakhov
ad3cb615e8 [Minor] Add steampowered.com to spf+dkim whitelist 2017-06-29 12:15:49 +01:00
Alexander Moisseev
bb5a9f8e45 [Minor] Massive spelling correction
by a bot https://github.com/ka7/misspell_fixer
2017-06-27 10:44:19 +03:00
Vsevolod Stakhov
2fb77adf51 Merge pull request #1695 from moisseev/patch-1
[Minor] Update redirectors list
2017-06-22 18:00:13 +01:00
Vsevolod Stakhov
89bc0e8604 [Minor] Add one_shot for RAMBLER_URIBL 2017-06-20 08:28:38 +01:00
Vsevolod Stakhov
8fb06a8fe1 [Feature] Allow to disable specific workers in the config 2017-06-19 08:15:52 +01:00
Alexander Moisseev
afb169b657 [Minor] Update redirectors list 2017-06-19 09:08:43 +03:00
Vsevolod Stakhov
d78ff70076 [Minor] Add some entries to dmarc whitelist 2017-06-16 10:01:47 +01:00
Andrew Lewis
17a6ce2ae1 [Conf] Do away with systemd specifics completely 2017-06-11 19:48:57 +02:00
Vsevolod Stakhov
9a5bc94e55 [Conf] Add rspamd_proxy to the default configuration set 2017-06-06 16:07:59 +01:00
Vsevolod Stakhov
aecbdfe3e8 [Minor] More rmilter->milter transforms 2017-06-03 11:11:41 +01:00
Vsevolod Stakhov
1dce67d97a [Minor] More rework in renaming rmilter -> milter 2017-06-02 15:53:34 +01:00
Vsevolod Stakhov
20beb1b7f8 [Conf] Increase min_bytes to avoid FP 2017-06-01 16:12:39 +01:00
Vsevolod Stakhov
ad067ecbae [Conf] Add sample arc module config 2017-05-30 15:04:08 +01:00
Andrew Lewis
c90ab258e9 [Minor] Fix configuration option 2017-05-05 11:37:06 +02:00
Christian Roessner
e86b9cbb8f [Feature] Add Lua plugin spamtrap 2017-05-02 21:11:18 +02:00
Andrew Lewis
c833ce3d8c [Conf] Remove ratelimits from default configuration 2017-04-26 15:25:45 +02:00
Vsevolod Stakhov
43a67aa9d3 [Minor] Disable IPv6 for SEM RBL 2017-04-17 17:42:31 +01:00
Alexander Moisseev
57b22b82eb [Minor] Suppress CTYPE_MIXED_BOGUS for yandex.ru web-mail 2017-04-17 11:51:21 +03:00
Andrew Lewis
de62ba9158 [Minor] Fix configuration example 2017-04-13 13:44:57 +02:00
Vsevolod Stakhov
8c9975e677 [Conf] Add history_redis default configuration 2017-03-25 12:10:05 +00:00