Andrew Lewis
498be22997
[Minor] Update rule style: headers.lua
2016-08-30 15:45:10 +02:00
Andrew Lewis
caa40f9162
[Minor] Fix log message
...
- Also clean up X_PHP_EVAL rule
2016-08-21 18:21:28 +02:00
Vsevolod Stakhov
2292cb46cf
Merge pull request #867 from xpunkt/patch-1
...
kam_lotto7 moved to r_lotto_subject
2016-08-21 16:31:37 +01:00
Alexey AL
caa7e42ea1
Update forwarding.lua
2016-08-21 15:14:46 +03:00
Alexey AL
4e4876ac8d
[Feature] Add Yandex and Mail.ru forwarding rules
2016-08-21 14:44:02 +03:00
Benny Pedersen
6169133bd6
kam_lotto7 moved to r_lotto_subject
...
hopefully i did this right
2016-08-21 01:40:13 +02:00
Andrew Lewis
c450ebf40c
[Feature] Add rule for identifying mail sent by eval()'d PHP code
2016-08-19 16:57:58 +02:00
Andrew Lewis
6c336d86da
[Minor] Zero scoring on some informational symbols
2016-08-19 12:10:11 +02:00
Vsevolod Stakhov
fd24c961ae
[Fix] Further fixes for white on white rule
2016-08-08 15:56:29 +01:00
Vsevolod Stakhov
d4dd679a8c
[Fix] Fix length calculations in white on white rule
2016-08-08 15:04:14 +01:00
Vsevolod Stakhov
b8132cfbab
[Fix] Some more fixes for low contrast fonts detector
2016-08-08 14:21:17 +01:00
Vsevolod Stakhov
842f6c31ca
[Feature] Try to avoid FP for low contrast fonts detection
2016-08-08 14:16:55 +01:00
Vsevolod Stakhov
ad36a88b58
[Feature] Properly implement R_WHITE_ON_WHITE rule
2016-08-05 16:06:22 +01:00
Vsevolod Stakhov
4a6d929b11
[Feature] Remove old ugly rules
2016-08-05 16:06:22 +01:00
Vsevolod Stakhov
37b9edfcf5
[Fix] Trigger HTML_SHORT_LINK_IMG on any external image
2016-08-05 16:06:22 +01:00
Vsevolod Stakhov
f5aac8de01
[Fix] Avoid table.getn
method as it has been removed in lua 5.3
...
Issue: #697
Reported by: @jessbo
2016-07-04 17:32:03 +01:00
Alexander Moisseev
c7c75954d2
[Feature] Add support for non-standard BATV signatures
2016-06-29 22:49:56 +03:00
Vsevolod Stakhov
7b094aea65
[Fix] Fix symbol name for spf soft fail
2016-06-08 15:31:12 +01:00
Vsevolod Stakhov
64022c191d
[Fix] Fix processing of messages without received headers
2016-06-05 20:36:06 +02:00
Vsevolod Stakhov
a8cadb36e1
[Fix] Fix possible FP in TRACKER_ID rule
2016-05-24 12:33:36 +01:00
Vsevolod Stakhov
517299eeed
[Fix] Simplify MISSING_MIMEOLE rule
2016-05-24 12:31:06 +01:00
Vsevolod Stakhov
d13a61fd95
[Minor] Fix percents output in R_PARTS_DIFFER
2016-04-29 13:23:40 +01:00
Vsevolod Stakhov
ef82676590
[Fix] Fix setting of score for parts differ
2016-04-28 13:07:06 +01:00
Vsevolod Stakhov
cff60f6a8f
[Fix] Fix dynamic scoring of subject symbols
...
Reported by: @moisseev
2016-04-28 12:13:41 +01:00
Vsevolod Stakhov
0a154408b6
[Minor] Rework subject rules as lua rules
2016-04-28 09:46:10 +01:00
Alexander Moisseev
70c01c990a
[Minor] Improve subject rules
...
Make scores depend on subject length
Also resolves #548
2016-04-28 10:46:15 +03:00
Vsevolod Stakhov
1ed9f282a5
[Fix] Fix and rescore R_PARTS_DIFFER logic
...
Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
2016-04-27 16:05:15 +01:00
Alexander Moisseev
7a67de1f42
[Minor] Combine header
and headers
metric groups
2016-04-26 15:51:59 +03:00
Steve Freegard
acb628315e
Add MISSING_FROM test
2016-04-26 13:06:41 +01:00
Steve Freegard
f458792fe6
Update MULTIPLE_UNIQUE_HEADER to include RFC5322 rules
2016-04-26 12:45:28 +01:00
Steve Freegard
61d5e48975
Raise MISSING_DATE on empty string
2016-04-26 12:44:26 +01:00
Alexander Moisseev
abe84f28ce
Fix RCVD_TLS_ALL
rule when there are no Received
headers
2016-04-25 18:29:00 +03:00
Alexey AL
fc06688c19
Fix upstream_spam_filters
2016-04-23 05:14:35 +03:00
Vsevolod Stakhov
e99bbb8a9c
[Fix] Reduce PRECEDENCE_BULK rule weight
2016-04-22 14:06:05 +01:00
Steve Freegard
e36bf64097
New rules
2016-04-22 12:20:21 +01:00
Alexander Moisseev
62939a1ac2
[Minor] Attach domain part to R_SUSPICIOUS_URL
2016-04-15 10:50:37 +03:00
Vsevolod Stakhov
c9e1a156cd
[Fix] Fix regexp rule
2016-04-01 12:50:49 +01:00
Vsevolod Stakhov
d3969bfefd
[Fix] Remove slow and unused rules INVALID_EXIM_RECEIVED*
2016-03-31 13:28:34 +01:00
Alexander Moisseev
a6bb206c6e
[Minor] Raise LONG_SUBJ
threshold
2016-03-17 09:59:55 +03:00
Vsevolod Stakhov
eb1765564f
[Minor] Use utf8 length for subject
2016-03-05 22:20:47 +00:00
Alexander Moisseev
3d929c5bb3
Add LONG_SUBJ rule
2016-03-05 21:59:58 +03:00
Alexander Moisseev
029d2f4fa1
Don't trigger R_EMPTY_IMAGE on image links
...
as they covered with `HTML_SHORT_LINK_IMG_1` rule.
It should be safe for legitimate emails with images attached since `R_EMPTY_IMAGE` and `HTML_SHORT_LINK_IMG_1` won't be triggered at the same time any more.
2016-02-20 10:45:22 +03:00
Alexander Moisseev
af66bcae90
Don't trigger HTML_SHORT_LINK_IMG on small images
...
It's common for legitimate emails to have small image links (buttons, social networks junk e.t.c.)
2016-02-20 10:34:34 +03:00
Vsevolod Stakhov
7482b05931
Fix MISSING_MIMEOLE rule for modern OE
...
Issue: #514
Reported by: @ilyakruchinin
2016-02-16 12:13:41 +00:00
Vsevolod Stakhov
bd9428b149
Fix html images rules to reduce FP rates
...
Suggested by: @moisseev
Issue: #525
2016-02-16 12:04:51 +00:00
Vsevolod Stakhov
b775598428
More sanity checks
2016-02-05 12:53:52 +00:00
Vsevolod Stakhov
94f5e3dcf6
Add safety guard for rule
2016-02-05 12:49:25 +00:00
Vsevolod Stakhov
8766fba694
Switch the rest to apache 2
2016-02-04 09:37:21 +00:00
Vsevolod Stakhov
91d772ab6f
Fix rule when SMTP from is unavailable
2016-01-29 18:31:45 +00:00
Vsevolod Stakhov
436ccb77ec
Fix rules to avoid nil indexing
2016-01-28 12:13:02 +00:00
Vsevolod Stakhov
df4b3f74fc
Fix HEADER_FORGED_MDN rule
2016-01-25 14:34:16 +00:00
Vsevolod Stakhov
7ded13ccab
Add parsing to MDN rules
...
Issue: #480
2016-01-25 11:37:36 +00:00
Vsevolod Stakhov
1678075da3
Add rule to detect spammers attempts to cheat mime parsing
2016-01-24 14:10:33 +00:00
Vsevolod Stakhov
3a2a55244f
Use task:get_from()
to get sender
2016-01-22 19:00:45 +00:00
Vsevolod Stakhov
be5ef60eed
Add support for forged confirmation headers
...
Issue: #480
Reported by: @AdUser
Patch by: @AdUser
2016-01-22 18:28:11 +00:00
Vsevolod Stakhov
f9cdbed9de
Add BROKEN_HEADERS
rule
2016-01-22 17:26:23 +00:00
Alexander Moisseev
9703e506a9
Add new Message-ID regexp for Thunderbird
...
Thunderbird version 46 and later is using new securely random Message-ID to avoid fingerprinting.
https://bugzilla.mozilla.org/show_bug.cgi?id=902580
SeaMonkey (at least currentnightly build 2.42a1) is not affected by this change.
2016-01-10 19:30:17 +03:00
Vsevolod Stakhov
a136f68143
Remove R_TO_SEEMS_AUTO as it generates a lot of FP
2015-12-24 14:42:52 +00:00
Vsevolod Stakhov
b840e3afa4
Add SUBJ_ALL_CAPS rule
2015-11-26 15:30:23 +00:00
Vsevolod Stakhov
5a12f23f90
Add R_SUSPICIOUS_URL rule that detects obfusicated URL's
2015-11-20 13:52:20 +00:00
Vsevolod Stakhov
c4bc17b845
SUSPICIOUS_IMAGES now trigger merely for embedded images
2015-11-17 16:14:26 +00:00
Vsevolod Stakhov
af1be71be0
Improve empty image rule.
2015-11-17 16:12:43 +00:00
Vsevolod Stakhov
e1c695b059
Fix parsing of headers
2015-10-19 17:13:33 +01:00
Vsevolod Stakhov
fb713b23a2
Add module to get data from HTTP headers
...
Issue: #285
Reported by: @msimerson
2015-10-19 16:59:08 +01:00
Vsevolod Stakhov
0ea784ef25
Add R_SUSPICIOUS_IMAGES
rule.
2015-10-13 12:51:23 +01:00
Vsevolod Stakhov
c32f595546
Do not add R_UNDISC_RCPT when 'To' is missing.
...
Issue: #387
2015-10-01 22:19:10 +01:00
Vsevolod Stakhov
b887f717e8
Load legacy lua/rspamd.local.lua
2015-09-22 16:36:31 +01:00
Vsevolod Stakhov
f80eb1003e
Add missing slashes.
2015-08-24 17:45:03 +01:00
Vsevolod Stakhov
2e549cbde6
Rework HTML rules.
2015-08-08 20:55:47 +01:00
Vsevolod Stakhov
c82ed6c214
Rework MISSING_SUBJECT rule.
...
Issue: #343
Reported by: @moisseev
2015-08-07 16:28:43 +01:00
Vsevolod Stakhov
fb13363c7c
Move misclenaous rules to a separate file.
2015-08-07 16:03:07 +01:00
Vsevolod Stakhov
37e90507eb
Move hfilter to plugins.
2015-08-07 15:34:49 +01:00
Vsevolod Stakhov
4135a3b422
Move lua rules to rules dir.
2015-08-07 14:09:14 +01:00